{ "batchPath": "batch", "kind": "discovery#restDescription", "version": "v1alpha", "id": "remotebuildexecution:v1alpha", "resources": { "projects": { "resources": { "operations": { "methods": { "get": { "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "flatPath": "v1alpha/projects/{projectsId}/operations/{operationsId}", "description": "Gets the latest state of a long-running operation. Clients can use this method to poll the operation result at intervals as recommended by the API service.", "response": { "$ref": "GoogleLongrunningOperation" }, "parameters": { "name": { "pattern": "^projects/[^/]+/operations/[^/]+$", "type": "string", "location": "path", "description": "The name of the operation resource.", "required": true } }, "id": "remotebuildexecution.projects.operations.get", "httpMethod": "GET", "parameterOrder": [ "name" ], "path": "v1alpha/{+name}" } } }, "instances": { "resources": { "workerpools": { "methods": { "get": { "parameters": { "name": { "description": "Name of the worker pool to retrieve. Format: `projects/[PROJECT_ID]/instances/[INSTANCE_ID]/workerpools/[POOL_ID]`.", "required": true, "pattern": "^projects/[^/]+/instances/[^/]+/workerpools/[^/]+$", "type": "string", "location": "path" } }, "response": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaWorkerPool" }, "path": "v1alpha/{+name}", "id": "remotebuildexecution.projects.instances.workerpools.get", "httpMethod": "GET", "parameterOrder": [ "name" ], "flatPath": "v1alpha/projects/{projectsId}/instances/{instancesId}/workerpools/{workerpoolsId}", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "description": "Returns the specified worker pool." }, "patch": { "parameters": { "name": { "location": "path", "pattern": "^projects/[^/]+/instances/[^/]+/workerpools/[^/]+$", "type": "string", "description": "WorkerPool resource name formatted as: `projects/[PROJECT_ID]/instances/[INSTANCE_ID]/workerpools/[POOL_ID]`. name should not be populated when creating a worker pool since it is provided in the `poolId` field.", "required": true } }, "request": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaUpdateWorkerPoolRequest" }, "response": { "$ref": "GoogleLongrunningOperation" }, "path": "v1alpha/{+name}", "id": "remotebuildexecution.projects.instances.workerpools.patch", "httpMethod": "PATCH", "parameterOrder": [ "name" ], "flatPath": "v1alpha/projects/{projectsId}/instances/{instancesId}/workerpools/{workerpoolsId}", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "description": "Updates an existing worker pool with a specified size and/or configuration. Returns a long running operation, which contains a worker pool on completion. While the long running operation is in progress, any call to `GetWorkerPool` returns a worker pool in state `UPDATING`." }, "list": { "parameters": { "parent": { "description": "Resource name of the instance. Format: `projects/[PROJECT_ID]/instances/[INSTANCE_ID]`.", "required": true, "location": "path", "pattern": "^projects/[^/]+/instances/[^/]+$", "type": "string" }, "filter": { "type": "string", "location": "query", "description": "Optional. A filter expression that filters resources listed in the response. The expression must specify the field name, a comparison operator, and the value that you want to use for filtering. The value must be a string, a number, or a boolean. String values are case-insensitive. The comparison operator must be either `:`, `=`, `!=`, `\u003e`, `\u003e=`, `\u003c=` or `\u003c`. The `:` operator can be used with string fields to match substrings. For non-string fields it is equivalent to the `=` operator. The `:*` comparison can be used to test whether a key has been defined. You can also filter on nested fields. To filter on multiple expressions, you can separate expression using `AND` and `OR` operators, using parentheses to specify precedence. If neither operator is specified, `AND` is assumed. Examples: Include only pools with more than 100 reserved workers: `(worker_count \u003e 100) (worker_config.reserved = true)` Include only pools with a certain label or machines of the e2-standard family: `worker_config.labels.key1 : * OR worker_config.machine_type: e2-standard`" } }, "response": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaListWorkerPoolsResponse" }, "path": "v1alpha/{+parent}/workerpools", "id": "remotebuildexecution.projects.instances.workerpools.list", "httpMethod": "GET", "parameterOrder": [ "parent" ], "flatPath": "v1alpha/projects/{projectsId}/instances/{instancesId}/workerpools", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "description": "Lists worker pools in an instance." }, "create": { "id": "remotebuildexecution.projects.instances.workerpools.create", "httpMethod": "POST", "parameterOrder": [ "parent" ], "path": "v1alpha/{+parent}/workerpools", "request": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateWorkerPoolRequest" }, "response": { "$ref": "GoogleLongrunningOperation" }, "parameters": { "parent": { "pattern": "^projects/[^/]+/instances/[^/]+$", "type": "string", "location": "path", "description": "Resource name of the instance in which to create the new worker pool. Format: `projects/[PROJECT_ID]/instances/[INSTANCE_ID]`.", "required": true } }, "description": "Creates a new worker pool with a specified size and configuration. Returns a long running operation which contains a worker pool on completion. While the long running operation is in progress, any call to `GetWorkerPool` returns a worker pool in state `CREATING`.", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "flatPath": "v1alpha/projects/{projectsId}/instances/{instancesId}/workerpools" }, "delete": { "response": { "$ref": "GoogleLongrunningOperation" }, "parameters": { "name": { "description": "Name of the worker pool to delete. Format: `projects/[PROJECT_ID]/instances/[INSTANCE_ID]/workerpools/[POOL_ID]`.", "required": true, "pattern": "^projects/[^/]+/instances/[^/]+/workerpools/[^/]+$", "type": "string", "location": "path" } }, "id": "remotebuildexecution.projects.instances.workerpools.delete", "httpMethod": "DELETE", "parameterOrder": [ "name" ], "path": "v1alpha/{+name}", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "flatPath": "v1alpha/projects/{projectsId}/instances/{instancesId}/workerpools/{workerpoolsId}", "description": "Deletes the specified worker pool. Returns a long running operation, which contains a `google.protobuf.Empty` response on completion. While the long running operation is in progress, any call to `GetWorkerPool` returns a worker pool in state `DELETING`." } } } }, "methods": { "delete": { "response": { "$ref": "GoogleLongrunningOperation" }, "parameters": { "name": { "description": "Required. Name of the instance to delete. Format: `projects/[PROJECT_ID]/instances/[INSTANCE_ID]`.", "required": true, "location": "path", "pattern": "^projects/[^/]+/instances/[^/]+$", "type": "string" } }, "id": "remotebuildexecution.projects.instances.delete", "httpMethod": "DELETE", "parameterOrder": [ "name" ], "path": "v1alpha/{+name}", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "flatPath": "v1alpha/projects/{projectsId}/instances/{instancesId}", "description": "Deletes the specified instance. Returns a long running operation which contains a `google.protobuf.Empty` response on completion. Deleting an instance with worker pools in it will delete these worker pools." }, "createBackendIAMBinding": { "parameters": { "parent": { "description": "Required. Name of the instance to create a backend project IAM binding for. Format: projects/[PROJECT_ID]/instances/[INSTANCE_ID]", "required": true, "location": "path", "pattern": "^projects/[^/]+/instances/[^/]+$", "type": "string" } }, "request": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateBackendIAMBindingRequest" }, "response": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateBackendIAMBindingResponse" }, "path": "v1alpha/{+parent}:createBackendIAMBinding", "id": "remotebuildexecution.projects.instances.createBackendIAMBinding", "httpMethod": "POST", "parameterOrder": [ "parent" ], "flatPath": "v1alpha/projects/{projectsId}/instances/{instancesId}:createBackendIAMBinding", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "description": "Creates an IAM binding on the backend project. Yields a FAILED_PRECONDITION error if this instance is not allowlisted for the requested binding. Backend IAM bindings are only applicable for specific RBE instances. Please reach out to the RBE team for more details. Yields OK if the exact binding between role and principal already exists. Binding the same role to multiple principals is permitted." }, "patch": { "description": "Updates the specified instance. Returns a long running operation which contains the updated instance in the response on completion.", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "flatPath": "v1alpha/projects/{projectsId}/instances/{instancesId}", "id": "remotebuildexecution.projects.instances.patch", "httpMethod": "PATCH", "parameterOrder": [ "name" ], "path": "v1alpha/{+name}", "request": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaInstance" }, "response": { "$ref": "GoogleLongrunningOperation" }, "parameters": { "name1": { "deprecated": true, "description": "Optional. Deprecated: Use instance.Name instead. Name of the instance to update. Format: `projects/[PROJECT_ID]/instances/[INSTANCE_ID]`.", "type": "string", "location": "query" }, "updateMask": { "description": "Optional. The update mask applies to instance. For the `FieldMask` definition, see https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask If an empty update_mask is provided, only the non-default valued field in the worker pool field will be updated. Note that in order to update a field to the default value (zero, false, empty string) an explicit update_mask must be provided.", "type": "string", "format": "google-fieldmask", "location": "query" }, "loggingEnabled": { "description": "Optional. Deprecated: Use instance.logging_enabled instead. Whether to enable Stackdriver logging for this instance.", "deprecated": true, "location": "query", "type": "boolean" }, "validateOnly": { "description": "Optional. If true, the request will be validated but not executed.", "type": "boolean", "location": "query" }, "name": { "pattern": "^projects/[^/]+/instances/[^/]+$", "type": "string", "location": "path", "description": "Output only. Instance resource name formatted as: `projects/[PROJECT_ID]/instances/[INSTANCE_ID]`. Name should not be populated when creating an instance since it is provided in the `instance_id` field.", "required": true } } }, "deleteBackendIAMBinding": { "description": "Deletes an IAM binding on the backend project. Yields a FAILED_PRECONDITION error if the parent instance is not allowlisted for at least one of the ENABLE_BE_IAM_BINDING_* entries. Yields a NOT_FOUND error if the binding does not exist.", "flatPath": "v1alpha/projects/{projectsId}/instances/{instancesId}:deleteBackendIAMBinding", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "path": "v1alpha/{+parent}:deleteBackendIAMBinding", "id": "remotebuildexecution.projects.instances.deleteBackendIAMBinding", "httpMethod": "POST", "parameterOrder": [ "parent" ], "parameters": { "parent": { "location": "path", "pattern": "^projects/[^/]+/instances/[^/]+$", "type": "string", "description": "Required. Name of the instance to delete a backend project IAM binding for. Format: projects/[PROJECT_ID]/instances/[INSTANCE_ID]", "required": true } }, "request": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaDeleteBackendIAMBindingRequest" }, "response": { "$ref": "GoogleProtobufEmpty" } }, "create": { "description": "Creates a new instance in the specified region. Returns a long running operation which contains an instance on completion. While the long running operation is in progress, any call to `GetInstance` returns an instance in state `CREATING`.", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "flatPath": "v1alpha/projects/{projectsId}/instances", "id": "remotebuildexecution.projects.instances.create", "httpMethod": "POST", "parameterOrder": [ "parent" ], "path": "v1alpha/{+parent}/instances", "request": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateInstanceRequest" }, "response": { "$ref": "GoogleLongrunningOperation" }, "parameters": { "parent": { "description": "Required. Resource name of the project containing the instance. Format: `projects/[PROJECT_ID]`.", "required": true, "location": "path", "pattern": "^projects/[^/]+$", "type": "string" } } }, "testNotify": { "path": "v1alpha/{+name}:testNotify", "id": "remotebuildexecution.projects.instances.testNotify", "httpMethod": "POST", "parameterOrder": [ "name" ], "parameters": { "name": { "pattern": "^projects/[^/]+/instances/[^/]+$", "type": "string", "location": "path", "description": "Name of the instance for which to send a test notification. Format: `projects/[PROJECT_ID]/instances/[INSTANCE_ID]`.", "required": true } }, "request": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaTestNotifyInstanceRequest" }, "response": { "$ref": "GoogleProtobufEmpty" }, "description": "Sends a test notification to the specified instance. Returns a `google.protobuf.Empty` on success.", "flatPath": "v1alpha/projects/{projectsId}/instances/{instancesId}:testNotify", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ] }, "createGuitar": { "description": "Creates a new instance of type Guitar in the specified region.", "flatPath": "v1alpha/projects/{projectsId}/instances:createGuitar", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "path": "v1alpha/{+parent}/instances:createGuitar", "id": "remotebuildexecution.projects.instances.createGuitar", "httpMethod": "POST", "parameterOrder": [ "parent" ], "parameters": { "parent": { "location": "path", "pattern": "^projects/[^/]+$", "type": "string", "description": "Required. Resource name of the project containing the instance. Format: `projects/[PROJECT_ID]`.", "required": true } }, "request": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateGuitarInstanceRequest" }, "response": { "$ref": "GoogleLongrunningOperation" } }, "list": { "flatPath": "v1alpha/projects/{projectsId}/instances", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "description": "Lists instances in a project.", "parameters": { "parent": { "description": "Required. Resource name of the project. Format: `projects/[PROJECT_ID]`.", "required": true, "pattern": "^projects/[^/]+$", "type": "string", "location": "path" } }, "response": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaListInstancesResponse" }, "path": "v1alpha/{+parent}/instances", "id": "remotebuildexecution.projects.instances.list", "httpMethod": "GET", "parameterOrder": [ "parent" ] }, "createTBI": { "request": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateTbiInstanceRequest" }, "response": { "$ref": "GoogleLongrunningOperation" }, "parameters": { "parent": { "description": "Required. Resource name of the project containing the instance. Format: `projects/[PROJECT_ID]`.", "required": true, "pattern": "^projects/[^/]+$", "type": "string", "location": "path" } }, "id": "remotebuildexecution.projects.instances.createTBI", "httpMethod": "POST", "parameterOrder": [ "parent" ], "path": "v1alpha/{+parent}/instances:CreateTBI", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "flatPath": "v1alpha/projects/{projectsId}/instances:CreateTBI", "description": "Creates a new instance of type TBI in the specified region." }, "get": { "parameters": { "name": { "description": "Required. Name of the instance to retrieve. Format: `projects/[PROJECT_ID]/instances/[INSTANCE_ID]`.", "required": true, "location": "path", "pattern": "^projects/[^/]+/instances/[^/]+$", "type": "string" } }, "response": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaInstance" }, "path": "v1alpha/{+name}", "id": "remotebuildexecution.projects.instances.get", "httpMethod": "GET", "parameterOrder": [ "name" ], "flatPath": "v1alpha/projects/{projectsId}/instances/{instancesId}", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "description": "Returns the specified instance." }, "createAndroidCI": { "path": "v1alpha/{+parent}/instances:CreateAndroidCI", "id": "remotebuildexecution.projects.instances.createAndroidCI", "httpMethod": "POST", "parameterOrder": [ "parent" ], "parameters": { "parent": { "location": "path", "pattern": "^projects/[^/]+$", "type": "string", "description": "Required. Resource name of the project containing the instance. Format: `projects/[PROJECT_ID]`.", "required": true } }, "request": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateAndroidCIInstanceRequest" }, "response": { "$ref": "GoogleLongrunningOperation" }, "description": "Creates a new instance of type Android CI in the specified region.", "flatPath": "v1alpha/projects/{projectsId}/instances:CreateAndroidCI", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ] }, "createKokoro": { "parameters": { "parent": { "pattern": "^projects/[^/]+$", "type": "string", "location": "path", "description": "Required. Resource name of the project containing the instance. Format: `projects/[PROJECT_ID]`.", "required": true } }, "request": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateKokoroInstanceRequest" }, "response": { "$ref": "GoogleLongrunningOperation" }, "path": "v1alpha/{+parent}/instances:CreateKokoro", "id": "remotebuildexecution.projects.instances.createKokoro", "httpMethod": "POST", "parameterOrder": [ "parent" ], "flatPath": "v1alpha/projects/{projectsId}/instances:CreateKokoro", "scopes": [ "https://www.googleapis.com/auth/cloud-platform" ], "description": "Creates a new instance of type Kokoro in the specified region." } } } } } }, "protocol": "rest", "revision": "20260419", "mtlsRootUrl": "https://admin-remotebuildexecution.mtls.googleapis.com/", "icons": { "x16": "http://www.google.com/images/icons/product/search-16.gif", "x32": "http://www.google.com/images/icons/product/search-32.gif" }, "documentationLink": "https://cloud.google.com/remote-build-execution/docs/", "servicePath": "", "ownerDomain": "google.com", "rootUrl": "https://admin-remotebuildexecution.googleapis.com/", "fullyEncodeReservedExpansion": true, "description": "Supplies a Remote Execution API service for tools such as bazel.", "auth": { "oauth2": { "scopes": { "https://www.googleapis.com/auth/cloud-platform": { "description": "See, edit, configure, and delete your Google Cloud data and see the email address for your Google Account." } } } }, "discoveryVersion": "v1", "title": "Remote Build Execution API", "parameters": { "uploadType": { "type": "string", "location": "query", "description": "Legacy upload protocol for media (e.g. \"media\", \"multipart\")." }, "callback": { "description": "JSONP", "type": "string", "location": "query" }, "prettyPrint": { "description": "Returns response with indentations and line breaks.", "type": "boolean", "default": "true", "location": "query" }, "fields": { "description": "Selector specifying which fields to include in a partial response.", "type": "string", "location": "query" }, "key": { "location": "query", "type": "string", "description": "API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token." }, "upload_protocol": { "description": "Upload protocol for media (e.g. \"raw\", \"multipart\").", "type": "string", "location": "query" }, "access_token": { "type": "string", "location": "query", "description": "OAuth access token." }, "quotaUser": { "description": "Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters.", "type": "string", "location": "query" }, "$.xgafv": { "enum": [ "1", "2" ], "description": "V1 error format.", "type": "string", "enumDescriptions": [ "v1 error format", "v2 error format" ], "location": "query" }, "alt": { "description": "Data format for response.", "enum": [ "json", "media", "proto" ], "type": "string", "default": "json", "enumDescriptions": [ "Responses with Content-Type of application/json", "Media download with context-dependent Content-Type", "Responses with Content-Type of application/x-protobuf" ], "location": "query" }, "oauth_token": { "type": "string", "location": "query", "description": "OAuth 2.0 token for the current user." } }, "version_module": true, "schemas": { "GoogleDevtoolsRemotebuildexecutionAdminV1alphaDeleteWorkerPoolRequest": { "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaDeleteWorkerPoolRequest", "description": "The request used for DeleteWorkerPool.", "properties": { "name": { "description": "Name of the worker pool to delete. Format: `projects/[PROJECT_ID]/instances/[INSTANCE_ID]/workerpools/[POOL_ID]`.", "type": "string" } }, "type": "object" }, "GoogleDevtoolsRemotebuildbotCommandEvents": { "type": "object", "description": "CommandEvents contains counters for the number of warnings and errors that occurred during the execution of a command.", "properties": { "numErrors": { "description": "The number of errors reported.", "type": "string", "format": "uint64" }, "usedAsyncContainer": { "description": "Indicates whether an asynchronous container was used for execution.", "type": "boolean" }, "dockerCacheHit": { "description": "Indicates whether we are using a cached Docker image (true) or had to pull the Docker image (false) for this command.", "type": "boolean" }, "dockerImageName": { "description": "Docker Image name.", "type": "string" }, "numWarnings": { "type": "string", "format": "uint64", "description": "The number of warnings reported." }, "outputLocation": { "description": "Indicates whether output files and/or output directories were found relative to the execution root or to the user provided work directory or both or none.", "enumDeprecated": [ false, false, false, false, false, true, true ], "enum": [ "LOCATION_UNDEFINED", "LOCATION_NONE", "LOCATION_EXEC_ROOT_RELATIVE", "LOCATION_WORKING_DIR_RELATIVE", "LOCATION_EXEC_ROOT_AND_WORKING_DIR_RELATIVE", "LOCATION_EXEC_ROOT_RELATIVE_OUTPUT_OUTSIDE_WORKING_DIR", "LOCATION_EXEC_ROOT_AND_WORKING_DIR_RELATIVE_OUTPUT_OUTSIDE_WORKING_DIR" ], "type": "string", "enumDescriptions": [ "Location is set to LOCATION_UNDEFINED for tasks where the working directorty is not specified or is identical to the execution root directory.", "No output files or directories were found neither relative to the execution root directory nor relative to the working directory.", "Output files or directories were found relative to the execution root directory but not relative to the working directory.", "Output files or directories were found relative to the working directory but not relative to the execution root directory.", "Output files or directories were found both relative to the execution root directory and relative to the working directory.", "Output files or directories were found relative to the execution root directory but not relative to the working directory. In addition at least one output file or directory was found outside of the working directory such that a working-directory-relative-path would have needed to start with a `..`.", "Output files or directories were found both relative to the execution root directory and relative to the working directory. In addition at least one exec-root-relative output file or directory was found outside of the working directory such that a working-directory-relative-path would have needed to start with a `..`." ] }, "inputCacheMissFiles": { "description": "The input cache miss rate as a fraction of the number of input files.", "type": "number", "format": "float" }, "inputMountType": { "type": "string", "enum": [ "MOUNT_UNSPECIFIED", "MOUNT_OVERLAY", "MOUNT_WRITABLE", "MOUNT_READ_ONLY", "MOUNT_CARTFS" ], "enumDescriptions": [ "The mechanism for mounting the input tree is unspecified.", "The input tree was mounted from a read-write overlay filesystem.", "The input tree was mounted as a read-write bind mount. The CAS proxy will use file watchers and/or post-action scanning of inputs to catch modfiications to the input blobs.", "The input tree was mounted as a read-only bind mount, with a separate writable directories mounted where outputs are expected.", "The input tree was mounted from a CartFS directory." ], "description": "Indicates how the input tree was mounted for the action." }, "inputTreeStats": { "$ref": "GoogleDevtoolsRemotebuildbotInputTreeStats", "description": "Contains stats about the action input metadata tree that was fetched to determine the action's inputs." }, "inputCacheMissBytes": { "description": "The input cache miss rate as a fraction of the total size of input files.", "type": "number", "format": "float" }, "cmUsage": { "description": "Indicates if and how Container Manager is being used for task execution.", "enumDescriptions": [ "Container Manager is disabled or not running for this execution.", "Container Manager is enabled and there was a matching container available for use during execution.", "Container Manager is enabled, but there was no matching container available for execution." ], "type": "string", "enum": [ "CONFIG_NONE", "CONFIG_MATCH", "CONFIG_MISMATCH" ] } }, "id": "GoogleDevtoolsRemotebuildbotCommandEvents" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateGuitarInstanceRequest": { "type": "object", "description": "The request used for `CreateGuitarInstance`.", "properties": { "instanceId": { "type": "string", "description": "Required. ID of the created instance. A valid `instance_id` must: be 6-50 characters long, contain only lowercase letters, digits, hyphens and underscores, start with a lowercase letter, and end with a lowercase letter or a digit." }, "instance": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaInstance", "description": "Required. Specifies the instance to create. The name in the instance, if specified in the instance, is ignored." }, "parent": { "type": "string", "description": "Required. Resource name of the project containing the instance. Format: `projects/[PROJECT_ID]`." } }, "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateGuitarInstanceRequest" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaListInstancesRequest": { "type": "object", "description": "The request used for `ListInstances`.", "properties": { "parent": { "type": "string", "description": "Required. Resource name of the project. Format: `projects/[PROJECT_ID]`." } }, "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaListInstancesRequest" }, "GoogleLongrunningOperation": { "type": "object", "description": "This resource represents a long-running operation that is the result of a network API call.", "properties": { "done": { "type": "boolean", "description": "If the value is `false`, it means the operation is still in progress. If `true`, the operation is completed, and either `error` or `response` is available." }, "name": { "description": "The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the `name` should be a resource name ending with `operations/{unique_id}`.", "type": "string" }, "metadata": { "additionalProperties": { "description": "Properties of the object. Contains field @type with type URL.", "type": "any" }, "description": "Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any.", "type": "object" }, "error": { "description": "The error result of the operation in case of failure or cancellation.", "$ref": "GoogleRpcStatus" }, "response": { "description": "The normal, successful response of the operation. If the original method returns no data on success, such as `Delete`, the response is `google.protobuf.Empty`. If the original method is standard `Get`/`Create`/`Update`, the response should be the resource. For other methods, the response should have the type `XxxResponse`, where `Xxx` is the original method name. For example, if the original method name is `TakeSnapshot()`, the inferred response type is `TakeSnapshotResponse`.", "additionalProperties": { "description": "Properties of the object. Contains field @type with type URL.", "type": "any" }, "type": "object" } }, "id": "GoogleLongrunningOperation" }, "GoogleDevtoolsRemoteworkersV1test2CommandTaskTimeouts": { "type": "object", "id": "GoogleDevtoolsRemoteworkersV1test2CommandTaskTimeouts", "description": "Describes the timeouts associated with this task.", "properties": { "idle": { "description": "This specifies the maximum amount of time the task can be idle - that is, go without generating some output in either stdout or stderr. If the process is silent for more than the specified time, the worker will terminate the task.", "type": "string", "format": "google-duration" }, "execution": { "type": "string", "format": "google-duration", "description": "This specifies the maximum time that the task can run, excluding the time required to download inputs or upload outputs. That is, the worker will terminate the task if it runs longer than this." }, "shutdown": { "type": "string", "format": "google-duration", "description": "If the execution or IO timeouts are exceeded, the worker will try to gracefully terminate the task and return any existing logs. However, tasks may be hard-frozen in which case this process will fail. This timeout specifies how long to wait for a terminated task to shut down gracefully (e.g. via SIGTERM) before we bring down the hammer (e.g. SIGKILL on *nix, CTRL_BREAK_EVENT on Windows)." } } }, "BuildBazelRemoteExecutionV2ExecutedActionMetadata": { "id": "BuildBazelRemoteExecutionV2ExecutedActionMetadata", "description": "ExecutedActionMetadata contains details about a completed execution.", "properties": { "outputUploadStartTimestamp": { "description": "When the worker started uploading action outputs.", "type": "string", "format": "google-datetime" }, "inputFetchStartTimestamp": { "type": "string", "format": "google-datetime", "description": "When the worker started fetching action inputs." }, "executionCompletedTimestamp": { "type": "string", "format": "google-datetime", "description": "When the worker completed executing the action command." }, "workerStartTimestamp": { "description": "When the worker received the action.", "type": "string", "format": "google-datetime" }, "queuedTimestamp": { "type": "string", "format": "google-datetime", "description": "When was the action added to the queue." }, "executionStartTimestamp": { "type": "string", "format": "google-datetime", "description": "When the worker started executing the action command." }, "virtualExecutionDuration": { "description": "New in v2.3: the amount of time the worker spent executing the action command, potentially computed using a worker-specific virtual clock. The virtual execution duration is only intended to cover the \"execution\" of the specified action and not time in queue nor any overheads before or after execution such as marshalling inputs/outputs. The server SHOULD avoid including time spent the client doesn't have control over, and MAY extend or reduce the execution duration to account for delays or speedups that occur during execution itself (e.g., lazily loading data from the Content Addressable Storage, live migration of virtual machines, emulation overhead). The method of timekeeping used to compute the virtual execution duration MUST be consistent with what is used to enforce the Action's `timeout`. There is no relationship between the virtual execution duration and the values of `execution_start_timestamp` and `execution_completed_timestamp`.", "type": "string", "format": "google-duration" }, "workerCompletedTimestamp": { "description": "When the worker completed the action, including all stages.", "type": "string", "format": "google-datetime" }, "worker": { "description": "The name of the worker which ran the execution.", "type": "string" }, "inputFetchCompletedTimestamp": { "type": "string", "format": "google-datetime", "description": "When the worker finished fetching action inputs." }, "outputUploadCompletedTimestamp": { "description": "When the worker finished uploading action outputs.", "type": "string", "format": "google-datetime" }, "auxiliaryMetadata": { "description": "Details that are specific to the kind of worker used. For example, on POSIX-like systems this could contain a message with getrusage(2) statistics.", "items": { "type": "object", "additionalProperties": { "type": "any", "description": "Properties of the object. Contains field @type with type URL." } }, "type": "array" } }, "type": "object" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaUpdateInstanceRequest": { "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaUpdateInstanceRequest", "description": "The request used for `UpdateInstance`.", "properties": { "updateMask": { "description": "Optional. The update mask applies to instance. For the `FieldMask` definition, see https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask If an empty update_mask is provided, only the non-default valued field in the worker pool field will be updated. Note that in order to update a field to the default value (zero, false, empty string) an explicit update_mask must be provided.", "type": "string", "format": "google-fieldmask" }, "loggingEnabled": { "description": "Optional. Deprecated: Use instance.logging_enabled instead. Whether to enable Stackdriver logging for this instance.", "deprecated": true, "type": "boolean" }, "validateOnly": { "description": "Optional. If true, the request will be validated but not executed.", "type": "boolean" }, "name": { "type": "string", "deprecated": true, "description": "Optional. Deprecated: Use instance.Name instead. Name of the instance to update. Format: `projects/[PROJECT_ID]/instances/[INSTANCE_ID]`." }, "instance": { "description": "Required. Specifies the instance to update.", "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaInstance" } }, "type": "object" }, "BuildBazelRemoteExecutionV2ToolDetails": { "description": "Details for the tool used to call the API.", "properties": { "toolVersion": { "type": "string", "description": "Version of the tool used for the request, e.g. 5.0.3." }, "toolName": { "description": "Name of the tool, e.g. bazel.", "type": "string" } }, "id": "BuildBazelRemoteExecutionV2ToolDetails", "type": "object" }, "GoogleDevtoolsRemoteworkersV1test2CommandOutputs": { "id": "GoogleDevtoolsRemoteworkersV1test2CommandOutputs", "description": "DEPRECATED - use CommandResult instead. Describes the actual outputs from the task.", "properties": { "exitCode": { "type": "integer", "format": "int32", "description": "exit_code is only fully reliable if the status' code is OK. If the task exceeded its deadline or was cancelled, the process may still produce an exit code as it is cancelled, and this will be populated, but a successful (zero) is unlikely to be correct unless the status code is OK." }, "outputs": { "$ref": "GoogleDevtoolsRemoteworkersV1test2Digest", "description": "The output files. The blob referenced by the digest should contain one of the following (implementation-dependent): * A marshalled DirectoryMetadata of the returned filesystem * A LUCI-style .isolated file" } }, "type": "object" }, "GoogleDevtoolsRemoteworkersV1test2Directory": { "id": "GoogleDevtoolsRemoteworkersV1test2Directory", "description": "The contents of a directory. Similar to the equivalent message in the Remote Execution API.", "properties": { "files": { "type": "array", "items": { "$ref": "GoogleDevtoolsRemoteworkersV1test2FileMetadata" }, "description": "The files in this directory" }, "directories": { "type": "array", "items": { "$ref": "GoogleDevtoolsRemoteworkersV1test2DirectoryMetadata" }, "description": "Any subdirectories" } }, "type": "object" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicy": { "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicy", "description": "FeaturePolicy defines features allowed to be used on RBE instances, as well as instance-wide behavior changes that take effect without opt-in or opt-out at usage time.", "properties": { "dockerPrivileged": { "description": "Whether dockerPrivileged can be used.", "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeature" }, "vmVerification": { "enumDescriptions": [ "Default value. Same as GCP_TOKEN.", "Verify the VM token and the nonce associated with the VM.", "Don't verify VM token and nonce." ], "type": "string", "enum": [ "VM_VERIFICATION_UNSPECIFIED", "VM_VERIFICATION_GCP_TOKEN", "VM_VERIFICATION_OFF" ], "description": "Whether to verify CreateBotSession and UpdateBotSession from the bot." }, "dockerSiblingContainers": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeature", "description": "Whether dockerSiblingContainers can be used." }, "dockerRuntime": { "description": "Whether dockerRuntime is allowed to be set or what runtimes are allowed. Note linux_isolation takes precedence, and if set, docker_runtime values may be rejected if they are incompatible with the selected isolation.", "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeature" }, "dockerRunAsContainerProvidedUser": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeature", "description": "Whether dockerRunAsContainerProvidedUser can be used." }, "linuxIsolation": { "type": "string", "enum": [ "LINUX_ISOLATION_UNSPECIFIED", "GVISOR", "OFF" ], "enumDescriptions": [ "Default value. Will be using Linux default runtime.", "Use gVisor runsc runtime.", "Use standard Linux runtime. This has the same behaviour as unspecified, but it can be used to revert back from gVisor." ], "description": "linux_isolation allows overriding the docker runtime used for containers started on Linux." }, "dockerAddCapabilities": { "description": "Whether dockerAddCapabilities can be used or what capabilities are allowed.", "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeature" }, "dockerUlimits": { "description": "Whether dockerUlimits are allowed to be set.", "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeature" }, "linuxExecution": { "description": "Defines how Linux actions are allowed to execute. DO NOT USE: Experimental / unlaunched feature.", "type": "string", "enum": [ "LINUX_EXECUTION_UNSPECIFIED", "LINUX_EXECUTION_FORBIDDEN", "LINUX_EXECUTION_UNRESTRICTED", "LINUX_EXECUTION_HARDENED_GVISOR", "LINUX_EXECUTION_HARDENED_GVISOR_OR_TERMINAL" ], "enumDescriptions": [ "Default value, if not explicitly set. Equivalent to FORBIDDEN.", "Linux actions and worker pools are forbidden.", "No restrictions on execution of Linux actions.", "Linux actions will be hardened using gVisor. Actions that specify a configuration incompatible with gVisor hardening will be rejected. Example per-action platform properties that are incompatible with gVisor hardening are: 1. dockerRuntime is set to a value other than \"runsc\". Leaving dockerRuntime unspecified *is* compatible with gVisor. 2. dockerPrivileged is set to \"true\". etc.", "Linux actions will be hardened using gVisor if their configuration is compatible with gVisor hardening. Otherwise, the action will be terminal, i.e., the worker VM that runs the action will be terminated after the action finishes." ] }, "actionIsolation": { "description": "Defines the isolation policy for actions on this instance. DO NOT USE: Experimental / unlaunched feature.", "type": "string", "enum": [ "ACTION_ISOLATION_UNSPECIFIED", "ACTION_ISOLATION_OFF", "ACTION_ISOLATION_ENFORCED" ], "enumDescriptions": [ "Default value, if not explicitly set. Equivalent to OFF.", "Disables enforcing feature policies that guarantee action isolation.", "Enforces setting feature policies that ensures actions within the RBE Instance are isolated from each other in a way deemed sufficient by ISE reviewers." ] }, "dockerChrootPath": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeature", "description": "Whether dockerChrootPath can be used." }, "windowsExecution": { "description": "Defines how Windows actions are allowed to execute. DO NOT USE: Experimental / unlaunched feature.", "enumDescriptions": [ "Default value, if not explicitly set. Equivalent to FORBIDDEN.", "Windows actions and worker pools are forbidden.", "No restrictions on execution of Windows actions.", "Windows actions will always result in the worker VM being terminated after the action completes." ], "type": "string", "enum": [ "WINDOWS_EXECUTION_UNSPECIFIED", "WINDOWS_EXECUTION_FORBIDDEN", "WINDOWS_EXECUTION_UNRESTRICTED", "WINDOWS_EXECUTION_TERMINAL" ] }, "macExecution": { "type": "string", "enum": [ "MAC_EXECUTION_UNSPECIFIED", "MAC_EXECUTION_FORBIDDEN", "MAC_EXECUTION_UNRESTRICTED", "MAC_EXECUTION_TERMINAL" ], "enumDescriptions": [ "Default value, if not explicitly set. Equivalent to FORBIDDEN.", "Mac actions and worker pools are forbidden.", "No restrictions on execution of Mac actions.", "Mac actions will always result in the worker VM being terminated after the action completes." ], "description": "Defines how Windows actions are allowed to execute. DO NOT USE: Experimental / unlaunched feature." }, "actionHermeticity": { "type": "string", "enum": [ "ACTION_HERMETICITY_UNSPECIFIED", "ACTION_HERMETICITY_OFF", "ACTION_HERMETICITY_ENFORCED", "ACTION_HERMETICITY_BEST_EFFORT" ], "enumDescriptions": [ "Default value, if not explicitly set. Equivalent to OFF.", "Disables enforcing feature policies that guarantee action hermeticity.", "Enforces hermeticity of actions by requiring feature policies to be set that prevent actions from gaining network access. The enforcement mechanism has been reviewed by ISE.", "Requires feature policies to be set that provide best effort hermeticity for actions. Best effort hermeticity means network access will be disabled and not trivial to bypass. However, a determined and malicious action may still find a way to gain network access." ], "description": "Defines the hermeticity policy for actions on this instance. DO NOT USE: Experimental / unlaunched feature." }, "dockerNetwork": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeature", "description": "Whether dockerNetwork can be used or what network modes are allowed. E.g. one may allow `off` value only via `allowed_values`." }, "containerImageSources": { "description": "Which container image sources are allowed. Currently only RBE-supported registry (gcr.io) is allowed. One can allow all repositories under a project or one specific repository only. E.g. container_image_sources { policy: RESTRICTED allowed_values: [ \"gcr.io/project-foo\", \"gcr.io/project-bar/repo-baz\", ] } will allow any repositories under \"gcr.io/project-foo\" plus the repository \"gcr.io/project-bar/repo-baz\". Default (UNSPECIFIED) is equivalent to any source is allowed.", "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeature" }, "dockerRunAsRoot": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeature", "description": "Whether dockerRunAsRoot can be used." }, "networkAccess": { "description": "Optional. Defines the network access policy for actions on this instance. DO NOT USE: Experimental / unlaunched feature.", "type": "string", "enum": [ "NETWORK_ACCESS_UNSPECIFIED", "NETWORK_ACCESS_ALLOWED", "NETWORK_ACCESS_ENFORCED" ], "enumDescriptions": [ "Default value, if not explicitly set. Equivalent to ALLOWED.", "Disables enforcing feature policies related to network access.", "Requires feature policies to be set that guarantee network access restrctions. Enforced means that network access will be limited and certain features will be disabled to prevent bypassing the filter. However, a determined and malicious actor may still find a way to gain full network access." ] } }, "type": "object" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateKokoroInstanceRequest": { "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateKokoroInstanceRequest", "description": "The request used for `CreateKokoroInstance`.", "properties": { "tcaRestrictions": { "description": "Optional. If tca_restrictions is ENABLED then the instance will have restrictions needed for building Trusted Core Access (TCA) compliant builds. DO NOT USE: In-Development feature.", "type": "string", "enum": [ "RESTRICTIONS_UNSPECIFIED", "RESTRICTIONS_DISABLED", "RESTRICTIONS_ENABLED_V1" ], "enumDescriptions": [ "TCA restrictions are not specified, defaulting to RESTRICTIONS_DISABLED.", "TCA restrictions are disabled for the instance.", "V1 version of TCA restrictions are enabled for the instance. These include: 1. ActionIsolation to be ENFORCED. 2. ImmutableMetaPolicy to be true. 3. AdminOpsRestrictions to be RESTRICTED. 4. Using Shielded, Confidential and Software Trusted VMs as RBE workers, which use custom RBE TCA COS VM images and go through TPM attestation verification for various boot parameters. 5. Inputs and outputs of the actions on these VMs requires TPM attestation verification." ] }, "parent": { "description": "Required. Resource name of the project containing the instance. Format: `projects/[PROJECT_ID]`.", "type": "string" }, "immutableMetapolicy": { "type": "boolean", "description": "Enforces meta policy immutability if set to true. This field is required. We use 'optional' here to catch (and error on) the case where this field is unset." }, "instance": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaInstance", "description": "Required. Specifies the instance to create. The name in the instance, if specified in the instance, is ignored." }, "instanceId": { "description": "Required. ID of the created instance. A valid `instance_id` must: be 6-50 characters long, contain only lowercase letters, digits, hyphens and underscores, start with a lowercase letter, and end with a lowercase letter or a digit.", "type": "string" }, "adminOpsRestrictions": { "type": "string", "enum": [ "RESTRICTIONS_UNSPECIFIED", "RESTRICTIONS_ALLOWED", "RESTRICTIONS_RESTRICTED" ], "enumDescriptions": [ "Default value; interpreted as RESTRICTIONS_ALLOWED.", "Admin operations are allowed normally.", "Admin operations are restricted to known safe operations that do not affect build integrity." ], "description": "Optional. If AdminOpsRestrictions is ADMIN_OPS_RESTRICTIONS_RESTRICTED then only predefined safe fields are allowed to set through internal APIs through toolproxy. AdminOpsRestrictions can be set to ADMIN_OPS_RESTRICTIONS_RESTRICTED only if ACTION_ISOLATION is enforced." }, "validateOnly": { "type": "boolean", "description": "Optional. If true, the request will be validated but not executed." } }, "type": "object" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaGetInstanceRequest": { "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaGetInstanceRequest", "description": "The request used for `GetInstance`.", "properties": { "name": { "type": "string", "description": "Required. Name of the instance to retrieve. Format: `projects/[PROJECT_ID]/instances/[INSTANCE_ID]`." } }, "type": "object" }, "GoogleDevtoolsRemoteworkersV1test2CommandResult": { "id": "GoogleDevtoolsRemoteworkersV1test2CommandResult", "description": "All information about the execution of a command, suitable for providing as the Bots interface's `Lease.result` field.", "properties": { "status": { "description": "An overall status for the command. For example, if the command timed out, this might have a code of DEADLINE_EXCEEDED; if it was killed by the OS for memory exhaustion, it might have a code of RESOURCE_EXHAUSTED.", "$ref": "GoogleRpcStatus" }, "exitCode": { "type": "integer", "format": "int32", "description": "The exit code of the process. An exit code of \"0\" should only be trusted if `status` has a code of OK (otherwise it may simply be unset)." }, "duration": { "type": "string", "format": "google-duration", "description": "The elapsed time between calling Accept and Complete. The server will also have its own idea of what this should be, but this excludes the overhead of the RPCs and the bot response time.", "deprecated": true }, "overhead": { "deprecated": true, "description": "The amount of time *not* spent executing the command (ie uploading/downloading files).", "type": "string", "format": "google-duration" }, "metadata": { "type": "array", "items": { "type": "object", "additionalProperties": { "description": "Properties of the object. Contains field @type with type URL.", "type": "any" } }, "description": "Implementation-dependent metadata about the task. Both servers and bots may define messages which can be encoded here; bots are free to provide metadata in multiple formats, and servers are free to choose one or more of the values to process and ignore others. In particular, it is *not* considered an error for the bot to provide the server with a field that it doesn't know about." }, "outputs": { "$ref": "GoogleDevtoolsRemoteworkersV1test2Digest", "description": "The output files. The blob referenced by the digest should contain one of the following (implementation-dependent): * A marshalled DirectoryMetadata of the returned filesystem * A LUCI-style .isolated file" } }, "type": "object" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaSchedulerNotificationConfig": { "type": "object", "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaSchedulerNotificationConfig", "description": "Defines configurations for an instance's scheduler notifications, where a target Pub/Sub topic will be notified whenever a task (e.g. an action or reservation) completes on this instance.", "properties": { "topic": { "description": "The Pub/Sub topic resource name to issue notifications to. Note that the topic does not need to be owned by the same project as this instance. Format: projects//topics/", "type": "string" } } }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaListWorkerPoolsRequest": { "type": "object", "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaListWorkerPoolsRequest", "properties": { "parent": { "type": "string", "description": "Resource name of the instance. Format: `projects/[PROJECT_ID]/instances/[INSTANCE_ID]`." }, "filter": { "description": "Optional. A filter expression that filters resources listed in the response. The expression must specify the field name, a comparison operator, and the value that you want to use for filtering. The value must be a string, a number, or a boolean. String values are case-insensitive. The comparison operator must be either `:`, `=`, `!=`, `\u003e`, `\u003e=`, `\u003c=` or `\u003c`. The `:` operator can be used with string fields to match substrings. For non-string fields it is equivalent to the `=` operator. The `:*` comparison can be used to test whether a key has been defined. You can also filter on nested fields. To filter on multiple expressions, you can separate expression using `AND` and `OR` operators, using parentheses to specify precedence. If neither operator is specified, `AND` is assumed. Examples: Include only pools with more than 100 reserved workers: `(worker_count \u003e 100) (worker_config.reserved = true)` Include only pools with a certain label or machines of the e2-standard family: `worker_config.labels.key1 : * OR worker_config.machine_type: e2-standard`", "type": "string" } } }, "BuildBazelRemoteExecutionV2RequestMetadata": { "type": "object", "id": "BuildBazelRemoteExecutionV2RequestMetadata", "description": "An optional Metadata to attach to any RPC request to tell the server about an external context of the request. The server may use this for logging or other purposes. To use it, the client attaches the header to the call using the canonical proto serialization: * name: `build.bazel.remote.execution.v2.requestmetadata-bin` * contents: the base64 encoded binary `RequestMetadata` message. Note: the gRPC library serializes binary headers encoded in base64 by default (https://github.com/grpc/grpc/blob/master/doc/PROTOCOL-HTTP2.md#requests). Therefore, if the gRPC library is used to pass/retrieve this metadata, the user may ignore the base64 encoding and assume it is simply serialized as a binary message.", "properties": { "actionId": { "type": "string", "description": "An identifier that ties multiple requests to the same action. For example, multiple requests to the CAS, Action Cache, and Execution API are used in order to compile foo.cc." }, "actionMnemonic": { "type": "string", "description": "A brief description of the kind of action, for example, CppCompile or GoLink. There is no standard agreed set of values for this, and they are expected to vary between different client tools." }, "toolInvocationId": { "type": "string", "description": "An identifier that ties multiple actions together to a final result. For example, multiple actions are required to build and run foo_test." }, "correlatedInvocationsId": { "type": "string", "description": "An identifier to tie multiple tool invocations together. For example, runs of foo_test, bar_test and baz_test on a post-submit of a given patch." }, "targetId": { "type": "string", "description": "An identifier for the target which produced this action. No guarantees are made around how many actions may relate to a single target." }, "configurationId": { "type": "string", "description": "An identifier for the configuration in which the target was built, e.g. for differentiating building host tools or different target platforms. There is no expectation that this value will have any particular structure, or equality across invocations, though some client tools may offer these guarantees." }, "toolDetails": { "description": "The details for the tool invoking the requests.", "$ref": "BuildBazelRemoteExecutionV2ToolDetails" } } }, "BuildBazelRemoteExecutionV2OutputDirectory": { "description": "An `OutputDirectory` is the output in an `ActionResult` corresponding to a directory's full contents rather than a single file.", "properties": { "treeDigest": { "description": "The digest of the encoded Tree proto containing the directory's contents.", "$ref": "BuildBazelRemoteExecutionV2Digest" }, "isTopologicallySorted": { "type": "boolean", "description": "If set, consumers MAY make the following assumptions about the directories contained in the Tree, so that it may be instantiated on a local file system by scanning through it sequentially: - All directories with the same binary representation are stored exactly once. - All directories, apart from the root directory, are referenced by at least one parent directory. - Directories are stored in topological order, with parents being stored before the child. The root directory is thus the first to be stored. Additionally, the Tree MUST be encoded as a stream of records, where each record has the following format: - A tag byte, having one of the following two values: - (1 \u003c\u003c 3) | 2 == 0x0a: First record (the root directory). - (2 \u003c\u003c 3) | 2 == 0x12: Any subsequent records (child directories). - The size of the directory, encoded as a base 128 varint. - The contents of the directory, encoded as a binary serialized Protobuf message. This encoding is a subset of the Protobuf wire format of the Tree message. As it is only permitted to store data associated with field numbers 1 and 2, the tag MUST be encoded as a single byte. More details on the Protobuf wire format can be found here: https://developers.google.com/protocol-buffers/docs/encoding It is recommended that implementations using this feature construct Tree objects manually using the specification given above, as opposed to using a Protobuf library to marshal a full Tree message. As individual Directory messages already need to be marshaled to compute their digests, constructing the Tree object manually avoids redundant marshaling." }, "rootDirectoryDigest": { "$ref": "BuildBazelRemoteExecutionV2Digest", "description": "The digest of the encoded Directory proto containing the contents of the directory's root. If both `tree_digest` and `root_directory_digest` are set, this field MUST match the digest of the root directory contained in the Tree message." }, "path": { "type": "string", "description": "The full path of the directory relative to the working directory. The path separator is a forward slash `/`. Since this is a relative path, it MUST NOT begin with a leading forward slash. The empty string value is allowed, and it denotes the entire working directory." } }, "id": "BuildBazelRemoteExecutionV2OutputDirectory", "type": "object" }, "BuildBazelRemoteExecutionV2LogFile": { "description": "A `LogFile` is a log stored in the CAS.", "properties": { "digest": { "description": "The digest of the log contents.", "$ref": "BuildBazelRemoteExecutionV2Digest" }, "humanReadable": { "type": "boolean", "description": "This is a hint as to the purpose of the log, and is set to true if the log is human-readable text that can be usefully displayed to a user, and false otherwise. For instance, if a command-line client wishes to print the server logs to the terminal for a failed action, this allows it to avoid displaying a binary file." } }, "id": "BuildBazelRemoteExecutionV2LogFile", "type": "object" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaListInstancesResponse": { "type": "object", "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaListInstancesResponse", "description": "The response used for `ListInstances`.", "properties": { "instances": { "type": "array", "items": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaInstance" }, "description": "The list of instances in a given project." }, "unreachable": { "items": { "type": "string" }, "type": "array", "description": "Unreachable regions." } } }, "GoogleDevtoolsRemoteworkersV1test2AdminTemp": { "type": "object", "description": "AdminTemp is a prelimiary set of administration tasks. It's called \"Temp\" because we do not yet know the best way to represent admin tasks; it's possible that this will be entirely replaced in later versions of this API. If this message proves to be sufficient, it will be renamed in the alpha or beta release of this API. This message (suitably marshalled into a protobuf.Any) can be used as the inline_assignment field in a lease; the lease assignment field should simply be `\"admin\"` in these cases. This message is heavily based on Swarming administration tasks from the LUCI project (http://github.com/luci/luci-py/appengine/swarming).", "properties": { "arg": { "type": "string", "description": "The argument to the admin action; see `Command` for semantics." }, "command": { "type": "string", "enum": [ "UNSPECIFIED", "BOT_UPDATE", "BOT_RESTART", "BOT_TERMINATE", "HOST_RESTART" ], "enumDescriptions": [ "Illegal value.", "Download and run a new version of the bot. `arg` will be a resource accessible via `ByteStream.Read` to obtain the new bot code.", "Restart the bot without downloading a new version. `arg` will be a message to log.", "Shut down the bot. `arg` will be a task resource name (similar to those in tasks.proto) that the bot can use to tell the server that it is terminating.", "Restart the host computer. `arg` will be a message to log." ], "description": "The admin action; see `Command` for legal values." } }, "id": "GoogleDevtoolsRemoteworkersV1test2AdminTemp" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeature": { "type": "object", "description": "Defines whether a feature can be used or what values are accepted.", "properties": { "policy": { "type": "string", "enum": [ "POLICY_UNSPECIFIED", "ALLOWED", "FORBIDDEN", "RESTRICTED" ], "enumDescriptions": [ "Default value, if not explicitly set. Equivalent to FORBIDDEN, unless otherwise documented on a specific Feature.", "Feature is explicitly allowed.", "Feature is forbidden. Requests attempting to leverage it will get an FailedPrecondition error, with a message like: \"Feature forbidden by FeaturePolicy: Feature on instance \"", "Only the values specified in the `allowed_values` are allowed." ], "description": "The policy of the feature." }, "allowedValues": { "description": "A list of acceptable values. Only effective when the policy is `RESTRICTED`.", "type": "array", "items": { "type": "string" } } }, "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicyFeature" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaDisksPersistentDisk": { "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaDisksPersistentDisk", "description": "PersistentDisk specifies how to attach a persistent disk to the workers.", "properties": { "diskType": { "description": "Required. Type of disk attached (supported types are pd-standard and pd-ssd).", "type": "string" }, "diskSizeGb": { "type": "string", "format": "int64", "description": "Required. Size of the disk in GB." }, "sourceImage": { "description": "Required. VM image to use for the disk.", "type": "string" } }, "type": "object" }, "BuildBazelRemoteExecutionV2ExecuteResponse": { "description": "The response message for Execution.Execute, which will be contained in the response field of the Operation.", "properties": { "status": { "description": "If the status has a code other than `OK`, it indicates that the action did not finish execution. For example, if the operation times out during execution, the status will have a `DEADLINE_EXCEEDED` code. Servers MUST use this field for errors in execution, rather than the error field on the `Operation` object. If the status code is other than `OK`, then the result MUST NOT be cached. For an error status, the `result` field is optional; the server may populate the output-, stdout-, and stderr-related fields if it has any information available, such as the stdout and stderr of a timed-out action.", "$ref": "GoogleRpcStatus" }, "message": { "type": "string", "description": "Freeform informational message with details on the execution of the action that may be displayed to the user upon failure or when requested explicitly." }, "result": { "$ref": "BuildBazelRemoteExecutionV2ActionResult", "description": "The result of the action." }, "cachedResult": { "description": "True if the result was served from cache, false if it was executed.", "type": "boolean" }, "serverLogs": { "description": "An optional list of additional log outputs the server wishes to provide. A server can use this to return execution-specific logs however it wishes. This is intended primarily to make it easier for users to debug issues that may be outside of the actual job execution, such as by identifying the worker executing the action or by providing logs from the worker's setup phase. The keys SHOULD be human readable so that a client can display them to a user.", "additionalProperties": { "$ref": "BuildBazelRemoteExecutionV2LogFile" }, "type": "object" } }, "id": "BuildBazelRemoteExecutionV2ExecuteResponse", "type": "object" }, "GoogleDevtoolsRemoteworkersV1test2CommandTaskInputsEnvironmentVariable": { "description": "An environment variable required by this task.", "properties": { "name": { "type": "string", "description": "The envvar name." }, "value": { "type": "string", "description": "The envvar value." } }, "id": "GoogleDevtoolsRemoteworkersV1test2CommandTaskInputsEnvironmentVariable", "type": "object" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaListWorkerPoolsResponse": { "properties": { "workerPools": { "description": "The list of worker pools in a given instance.", "type": "array", "items": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaWorkerPool" } } }, "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaListWorkerPoolsResponse", "type": "object" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaGetWorkerPoolRequest": { "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaGetWorkerPoolRequest", "description": "The request used for GetWorkerPool.", "properties": { "name": { "type": "string", "description": "Name of the worker pool to retrieve. Format: `projects/[PROJECT_ID]/instances/[INSTANCE_ID]/workerpools/[POOL_ID]`." } }, "type": "object" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaInstance": { "description": "Instance conceptually encapsulates all Remote Build Execution resources for remote builds. An instance consists of storage and compute resources (for example, `ContentAddressableStorage`, `ActionCache`, `WorkerPools`) used for running remote builds. All Remote Build Execution API calls are scoped to an instance.", "properties": { "bindings": { "description": "Optional. The list of IAM bindings that should be applied to this instance.", "items": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaIAMBinding" }, "type": "array" }, "backendProperties": { "readOnly": true, "description": "Output only. Describes the instance's backend project configuration. Currently, this includes the list of user-managed IAM bindings applied to the backend project, which will always be empty for instances not in one of the ENABLE_BE_IAM_BINDING_* feature allowlists.", "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaBackendProperties" }, "schedulerNotificationConfig": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaSchedulerNotificationConfig", "description": "The instance's configuration for scheduler notifications. Absence implies that this feature is not enabled for this instance." }, "zoneDrains": { "items": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaZoneDrain" }, "type": "array", "description": "Optional. The list of zones that should be drained (no new tasks should be assigned to all or part of the workers in these)." }, "name": { "readOnly": true, "type": "string", "description": "Output only. Instance resource name formatted as: `projects/[PROJECT_ID]/instances/[INSTANCE_ID]`. Name should not be populated when creating an instance since it is provided in the `instance_id` field." }, "location": { "description": "The location is a GCP region. Currently only `us-central1` is supported.", "type": "string" }, "loggingEnabled": { "description": "Output only. Whether stack driver logging is enabled for the instance.", "readOnly": true, "type": "boolean" }, "storageSettings": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaStorageSettings", "description": "User-specified storage settings for this instance." }, "state": { "description": "Output only. State of the instance.", "enum": [ "STATE_UNSPECIFIED", "CREATING", "RUNNING", "INACTIVE" ], "readOnly": true, "type": "string", "enumDescriptions": [ "Not a valid state, but the default value of the enum.", "The instance is in state `CREATING` once `CreateInstance` is called and before the instance is ready for use.", "The instance is in state `RUNNING` when it is ready for use.", "An `INACTIVE` instance indicates that there is a problem that needs to be fixed. Such instances cannot be used for execution and instances that remain in this state for a significant period of time will be removed permanently." ] }, "casRelations": { "type": "array", "items": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaRelationship" }, "description": "Specify parent or child instances of `this` instance. Configurations will be rejected if: -- If `this` instance is not allowlisted for `ENABLE_DATA_READS_FROM_PARENT` and this list specifies parent instances. -- If `this` instance is not allowlisted for `ENABLE_DATA_READS_BY_CHILDREN` and this list specifies child instances. -- If both parent and child instances are specified. -- If instance has more than allowed number of parent or child instances." }, "featurePolicy": { "description": "The policy to define whether or not RBE features can be used or how they can be used.", "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaFeaturePolicy" } }, "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaInstance", "type": "object" }, "BuildBazelRemoteExecutionV2NodeProperties": { "type": "object", "description": "Node properties for FileNodes, DirectoryNodes, and SymlinkNodes. The server is responsible for specifying the properties that it accepts.", "properties": { "properties": { "description": "A list of string-based NodeProperties.", "type": "array", "items": { "$ref": "BuildBazelRemoteExecutionV2NodeProperty" } }, "mtime": { "description": "The file's last modification timestamp.", "type": "string", "format": "google-datetime" }, "unixMode": { "description": "The UNIX file mode, e.g., 0755.", "type": "integer", "format": "uint32" } }, "id": "BuildBazelRemoteExecutionV2NodeProperties" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaBackendProperties": { "type": "object", "description": "Describes backend project configuration. As of 2024Q2, this consists of user- managed IAM bindings established for this instance as well as the identity of the backend project.", "properties": { "bindings": { "description": "Output only. List of the desired BE project bindings.", "readOnly": true, "type": "array", "items": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaBackendIAMBinding" } }, "backendProjectNumber": { "description": "Output only. The backend project number is not normally exposed to the user but is required by the user for these IAM role bindings to be useful. For example, a role that grants SSH access to worker machines in the backend project is useless if those machines cannot then be discovered.", "readOnly": true, "type": "string" } }, "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaBackendProperties" }, "GoogleDevtoolsRemotebuildbotResourceUsageIOStats": { "type": "object", "id": "GoogleDevtoolsRemotebuildbotResourceUsageIOStats", "properties": { "readCount": { "type": "string", "format": "uint64" }, "readBytesCount": { "type": "string", "format": "uint64" }, "writeTimeMs": { "type": "string", "format": "uint64" }, "writeBytesCount": { "type": "string", "format": "uint64" }, "writeCount": { "type": "string", "format": "uint64" }, "readTimeMs": { "type": "string", "format": "uint64" } } }, "BuildBazelRemoteExecutionV2Action": { "id": "BuildBazelRemoteExecutionV2Action", "description": "An `Action` captures all the information about an execution which is required to reproduce it. `Action`s are the core component of the [Execution] service. A single `Action` represents a repeatable action that can be performed by the execution service. `Action`s can be succinctly identified by the digest of their wire format encoding and, once an `Action` has been executed, will be cached in the action cache. Future requests can then use the cached result rather than needing to run afresh. When a server completes execution of an Action, it MAY choose to cache the result in the ActionCache unless `do_not_cache` is `true`. Clients SHOULD expect the server to do so. By default, future calls to Execute the same `Action` will also serve their results from the cache. Clients must take care to understand the caching behaviour. Ideally, all `Action`s will be reproducible so that serving a result from cache is always desirable and correct.", "properties": { "salt": { "type": "string", "format": "byte", "description": "An optional additional salt value used to place this `Action` into a separate cache namespace from other instances having the same field contents. This salt typically comes from operational configuration specific to sources such as repo and service configuration, and allows disowning an entire set of ActionResults that might have been poisoned by buggy software or tool failures." }, "inputRootDigest": { "description": "The digest of the root Directory for the input files. The files in the directory tree are available in the correct location on the build machine before the command is executed. The root directory, as well as every subdirectory and content blob referred to, MUST be in the ContentAddressableStorage.", "$ref": "BuildBazelRemoteExecutionV2Digest" }, "commandDigest": { "$ref": "BuildBazelRemoteExecutionV2Digest", "description": "The digest of the Command to run, which MUST be present in the ContentAddressableStorage." }, "timeout": { "description": "A timeout after which the execution should be killed. If the timeout is absent, then the client is specifying that the execution should continue as long as the server will let it. The server SHOULD impose a timeout if the client does not specify one, however, if the client does specify a timeout that is longer than the server's maximum timeout, the server MUST reject the request. The timeout is only intended to cover the \"execution\" of the specified action and not time in queue nor any overheads before or after execution such as marshalling inputs/outputs. The server SHOULD avoid including time spent the client doesn't have control over, and MAY extend or reduce the timeout to account for delays or speedups that occur during execution itself (e.g., lazily loading data from the Content Addressable Storage, live migration of virtual machines, emulation overhead). The timeout is a part of the Action message, and therefore two `Actions` with different timeouts are different, even if they are otherwise identical. This is because, if they were not, running an `Action` with a lower timeout than is required might result in a cache hit from an execution run with a longer timeout, hiding the fact that the timeout is too short. By encoding it directly in the `Action`, a lower timeout will result in a cache miss and the execution timeout will fail immediately, rather than whenever the cache entry gets evicted.", "type": "string", "format": "google-duration" }, "doNotCache": { "description": "If true, then the `Action`'s result cannot be cached, and in-flight requests for the same `Action` may not be merged.", "type": "boolean" }, "platform": { "$ref": "BuildBazelRemoteExecutionV2Platform", "description": "The optional platform requirements for the execution environment. The server MAY choose to execute the action on any worker satisfying the requirements, so the client SHOULD ensure that running the action on any such worker will have the same result. A detailed lexicon for this can be found in the accompanying platform.md. New in version 2.2: clients SHOULD set these platform properties as well as those in the Command. Servers SHOULD prefer those set here." } }, "type": "object" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaDeleteInstanceRequest": { "type": "object", "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaDeleteInstanceRequest", "description": "The request used for `DeleteInstance`.", "properties": { "name": { "description": "Required. Name of the instance to delete. Format: `projects/[PROJECT_ID]/instances/[INSTANCE_ID]`.", "type": "string" } } }, "GoogleDevtoolsRemoteworkersV1test2Digest": { "type": "object", "id": "GoogleDevtoolsRemoteworkersV1test2Digest", "description": "The CommandTask and CommandResult messages assume the existence of a service that can serve blobs of content, identified by a hash and size known as a \"digest.\" The method by which these blobs may be retrieved is not specified here, but a model implementation is in the Remote Execution API's \"ContentAddressibleStorage\" interface. In the context of the RWAPI, a Digest will virtually always refer to the contents of a file or a directory. The latter is represented by the byte-encoded Directory message.", "properties": { "hash": { "type": "string", "description": "A string-encoded hash (eg \"1a2b3c\", not the byte array [0x1a, 0x2b, 0x3c]) using an implementation-defined hash algorithm (eg SHA-256)." }, "sizeBytes": { "type": "string", "format": "int64", "description": "The size of the contents. While this is not strictly required as part of an identifier (after all, any given hash will have exactly one canonical size), it's useful in almost all cases when one might want to send or retrieve blobs of content and is included here for this reason." } } }, "BuildBazelRemoteExecutionV2Platform": { "id": "BuildBazelRemoteExecutionV2Platform", "description": "A `Platform` is a set of requirements, such as hardware, operating system, or compiler toolchain, for an Action's execution environment. A `Platform` is represented as a series of key-value pairs representing the properties that are required of the platform.", "properties": { "properties": { "description": "The properties that make up this platform. In order to ensure that equivalent `Platform`s always hash to the same value, the properties MUST be lexicographically sorted by name, and then by value. Sorting of strings is done by code point, equivalently, by the UTF-8 bytes.", "items": { "$ref": "BuildBazelRemoteExecutionV2PlatformProperty" }, "type": "array" } }, "type": "object" }, "BuildBazelRemoteExecutionV2OutputSymlink": { "description": "An `OutputSymlink` is similar to a Symlink, but it is used as an output in an `ActionResult`. `OutputSymlink` is binary-compatible with `SymlinkNode`.", "properties": { "target": { "description": "The target path of the symlink. The path separator is a forward slash `/`. The target path can be relative to the parent directory of the symlink or it can be an absolute path starting with `/`. Support for absolute paths can be checked using the Capabilities API. `..` components are allowed anywhere in the target path.", "type": "string" }, "nodeProperties": { "$ref": "BuildBazelRemoteExecutionV2NodeProperties" }, "path": { "description": "The full path of the symlink relative to the working directory, including the filename. The path separator is a forward slash `/`. Since this is a relative path, it MUST NOT begin with a leading forward slash.", "type": "string" } }, "id": "BuildBazelRemoteExecutionV2OutputSymlink", "type": "object" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaBackendIAMBinding": { "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaBackendIAMBinding", "description": "A representation of an individual backend IAM binding.", "properties": { "role": { "type": "string", "description": "Required. The RBE-managed IAM role this binding applies to. The set of eligible roles depends on which instance allowlist(s) the parent instance is a member of, specifically with regards to the ENABLE_BE_IAM_BINDING_* entries. Format: roles/" }, "principal": { "description": "Required. The IAM principal (i.e. twosync or twosync-src group) this binding applies to. This should be prefixed with `group:`. Example format: group:alphasource-foundry-team-policy@twosync.google.com", "type": "string" } }, "type": "object" }, "BuildBazelRemoteExecutionV2Command": { "type": "object", "description": "A `Command` is the actual command executed by a worker running an Action and specifications of its environment. Except as otherwise required, the environment (such as which system libraries or binaries are available, and what filesystems are mounted where) is defined by and specific to the implementation of the remote execution API.", "properties": { "outputDirectoryFormat": { "description": "The format that the worker should use to store the contents of output directories. In case this field is set to a value that is not supported by the worker, the worker SHOULD interpret this field as TREE_ONLY. The worker MAY store output directories in formats that are a superset of what was requested (e.g., interpreting DIRECTORY_ONLY as TREE_AND_DIRECTORY).", "type": "string", "enum": [ "TREE_ONLY", "DIRECTORY_ONLY", "TREE_AND_DIRECTORY" ], "enumDescriptions": [ "The client is only interested in receiving output directories in the form of a single Tree object, using the `tree_digest` field.", "The client is only interested in receiving output directories in the form of a hierarchy of separately stored Directory objects, using the `root_directory_digest` field.", "The client is interested in receiving output directories both in the form of a single Tree object and a hierarchy of separately stored Directory objects, using both the `tree_digest` and `root_directory_digest` fields." ] }, "environmentVariables": { "description": "The environment variables to set when running the program. The worker may provide its own default environment variables; these defaults can be overridden using this field. Additional variables can also be specified. In order to ensure that equivalent Commands always hash to the same value, the environment variables MUST be lexicographically sorted by name. Sorting of strings is done by code point, equivalently, by the UTF-8 bytes.", "items": { "$ref": "BuildBazelRemoteExecutionV2CommandEnvironmentVariable" }, "type": "array" }, "outputDirectories": { "type": "array", "items": { "type": "string" }, "deprecated": true, "description": "A list of the output directories that the client expects to retrieve from the action. Only the listed directories will be returned (an entire directory structure will be returned as a Tree message digest, see OutputDirectory), as well as files listed in `output_files`. Other files or directories that may be created during command execution are discarded. The paths are relative to the working directory of the action execution. The paths are specified using a single forward slash (`/`) as a path separator, even if the execution platform natively uses a different separator. The path MUST NOT include a trailing slash, nor a leading slash, being a relative path. The special value of empty string is allowed, although not recommended, and can be used to capture the entire working directory tree, including inputs. In order to ensure consistent hashing of the same Action, the output paths MUST be sorted lexicographically by code point (or, equivalently, by UTF-8 bytes). An output directory cannot be duplicated or have the same path as any of the listed output files. An output directory is allowed to be a parent of another output directory. Directories leading up to the output directories (but not the output directories themselves) are created by the worker prior to execution, even if they are not explicitly part of the input root. DEPRECATED since 2.1: Use `output_paths` instead." }, "outputPaths": { "description": "A list of the output paths that the client expects to retrieve from the action. Only the listed paths will be returned to the client as output. The type of the output (file or directory) is not specified, and will be determined by the server after action execution. If the resulting path is a file, it will be returned in an OutputFile typed field. If the path is a directory, the entire directory structure will be returned as a Tree message digest, see OutputDirectory Other files or directories that may be created during command execution are discarded. The paths are relative to the working directory of the action execution. The paths are specified using a single forward slash (`/`) as a path separator, even if the execution platform natively uses a different separator. The path MUST NOT include a trailing slash, nor a leading slash, being a relative path. In order to ensure consistent hashing of the same Action, the output paths MUST be deduplicated and sorted lexicographically by code point (or, equivalently, by UTF-8 bytes). Directories leading up to the output paths are created by the worker prior to execution, even if they are not explicitly part of the input root. New in v2.1: this field supersedes the DEPRECATED `output_files` and `output_directories` fields. If `output_paths` is used, `output_files` and `output_directories` will be ignored!", "type": "array", "items": { "type": "string" } }, "outputNodeProperties": { "description": "A list of keys for node properties the client expects to retrieve for output files and directories. Keys are either names of string-based NodeProperty or names of fields in NodeProperties. In order to ensure that equivalent `Action`s always hash to the same value, the node properties MUST be lexicographically sorted by name. Sorting of strings is done by code point, equivalently, by the UTF-8 bytes. The interpretation of string-based properties is server-dependent. If a property is not recognized by the server, the server will return an `INVALID_ARGUMENT`.", "items": { "type": "string" }, "type": "array" }, "outputFiles": { "items": { "type": "string" }, "type": "array", "description": "A list of the output files that the client expects to retrieve from the action. Only the listed files, as well as directories listed in `output_directories`, will be returned to the client as output. Other files or directories that may be created during command execution are discarded. The paths are relative to the working directory of the action execution. The paths are specified using a single forward slash (`/`) as a path separator, even if the execution platform natively uses a different separator. The path MUST NOT include a trailing slash, nor a leading slash, being a relative path. In order to ensure consistent hashing of the same Action, the output paths MUST be sorted lexicographically by code point (or, equivalently, by UTF-8 bytes). An output file cannot be duplicated, be a parent of another output file, or have the same path as any of the listed output directories. Directories leading up to the output files are created by the worker prior to execution, even if they are not explicitly part of the input root. DEPRECATED since v2.1: Use `output_paths` instead.", "deprecated": true }, "workingDirectory": { "description": "The working directory, relative to the input root, for the command to run in. It must be a directory which exists in the input tree. If it is left empty, then the action is run in the input root.", "type": "string" }, "platform": { "deprecated": true, "$ref": "BuildBazelRemoteExecutionV2Platform", "description": "The platform requirements for the execution environment. The server MAY choose to execute the action on any worker satisfying the requirements, so the client SHOULD ensure that running the action on any such worker will have the same result. A detailed lexicon for this can be found in the accompanying platform.md. DEPRECATED as of v2.2: platform properties are now specified directly in the action. See documentation note in the Action for migration." }, "arguments": { "items": { "type": "string" }, "type": "array", "description": "The arguments to the command. The first argument specifies the command to run, which may be either an absolute path, a path relative to the working directory, or an unqualified path (without path separators) which will be resolved using the operating system's equivalent of the PATH environment variable. Path separators native to the operating system running on the worker SHOULD be used. If the `environment_variables` list contains an entry for the PATH environment variable, it SHOULD be respected. If not, the resolution process is implementation-defined. Changed in v2.3. v2.2 and older require that no PATH lookups are performed, and that relative paths are resolved relative to the input root. This behavior can, however, not be relied upon, as most implementations already followed the rules described above." } }, "id": "BuildBazelRemoteExecutionV2Command" }, "BuildBazelRemoteExecutionV2NodeProperty": { "type": "object", "id": "BuildBazelRemoteExecutionV2NodeProperty", "description": "A single property for FileNodes, DirectoryNodes, and SymlinkNodes. The server is responsible for specifying the property `name`s that it accepts. If permitted by the server, the same `name` may occur multiple times.", "properties": { "name": { "description": "The property name.", "type": "string" }, "value": { "type": "string", "description": "The property value." } } }, "GoogleDevtoolsRemoteworkersV1test2CommandTaskOutputs": { "type": "object", "id": "GoogleDevtoolsRemoteworkersV1test2CommandTaskOutputs", "description": "Describes the expected outputs of the command.", "properties": { "files": { "type": "array", "items": { "type": "string" }, "description": "A list of expected files, relative to the execution root. All paths MUST be delimited by forward slashes." }, "directories": { "description": "A list of expected directories, relative to the execution root. All paths MUST be delimited by forward slashes.", "items": { "type": "string" }, "type": "array" }, "stdoutDestination": { "description": "The destination to which any stdout should be sent. The method by which the bot should send the stream contents to that destination is not defined in this API. As examples, the destination could be a file referenced in the `files` field in this message, or it could be a URI that must be written via the ByteStream API.", "type": "string" }, "stderrDestination": { "description": "The destination to which any stderr should be sent. The method by which the bot should send the stream contents to that destination is not defined in this API. As examples, the destination could be a file referenced in the `files` field in this message, or it could be a URI that must be written via the ByteStream API.", "type": "string" } } }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaAcceleratorConfig": { "description": "AcceleratorConfig defines the accelerator cards to attach to the VM.", "properties": { "acceleratorCount": { "type": "string", "format": "int64", "description": "The number of guest accelerator cards exposed to each VM." }, "acceleratorType": { "type": "string", "description": "The type of accelerator to attach to each VM, e.g. \"nvidia-tesla-k80\" for nVidia Tesla K80." } }, "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaAcceleratorConfig", "type": "object" }, "GoogleDevtoolsRemotebuildbotResourceUsageStat": { "type": "object", "id": "GoogleDevtoolsRemotebuildbotResourceUsageStat", "properties": { "used": { "type": "string", "format": "uint64" }, "total": { "type": "string", "format": "uint64" } } }, "BuildBazelRemoteExecutionV2CommandEnvironmentVariable": { "type": "object", "description": "An `EnvironmentVariable` is one variable to set in the running program's environment.", "properties": { "value": { "description": "The variable value.", "type": "string" }, "name": { "type": "string", "description": "The variable name." } }, "id": "BuildBazelRemoteExecutionV2CommandEnvironmentVariable" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaZoneDrain": { "description": "ZoneDrain indicates a zone that should be drained (no new tasks should be assigned to all or part of the workers in it).", "properties": { "zoneType": { "description": "Optional. Type of zone for validation purposes.", "type": "string", "enum": [ "ZONE_TYPE_UNSPECIFIED", "ZONE_TYPE_GCE" ], "enumDescriptions": [ "When unspecified, defaults to GCE zone type.", "Validate as GCE zone." ] }, "zone": { "description": "Required. The zone to drain.", "type": "string" }, "percent": { "type": "integer", "format": "int32", "description": "Optional. The percentage of workers in the zone to drain, from 0 (no workers drained) to 100 (all workers drained)." } }, "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaZoneDrain", "type": "object" }, "GoogleDevtoolsRemoteworkersV1test2FileMetadata": { "description": "The metadata for a file. Similar to the equivalent message in the Remote Execution API.", "properties": { "path": { "type": "string", "description": "The path of this file. If this message is part of the CommandOutputs.outputs fields, the path is relative to the execution root and must correspond to an entry in CommandTask.outputs.files. If this message is part of a Directory message, then the path is relative to the root of that directory. All paths MUST be delimited by forward slashes." }, "digest": { "$ref": "GoogleDevtoolsRemoteworkersV1test2Digest", "description": "A pointer to the contents of the file. The method by which a client retrieves the contents from a CAS system is not defined here." }, "contents": { "type": "string", "format": "byte", "description": "If the file is small enough, its contents may also or alternatively be listed here." }, "isExecutable": { "type": "boolean", "description": "Properties of the file" } }, "id": "GoogleDevtoolsRemoteworkersV1test2FileMetadata", "type": "object" }, "BuildBazelRemoteExecutionV2PlatformProperty": { "description": "A single property for the environment. The server is responsible for specifying the property `name`s that it accepts. If an unknown `name` is provided in the requirements for an Action, the server SHOULD reject the execution request. If permitted by the server, the same `name` may occur multiple times. The server is also responsible for specifying the interpretation of property `value`s. For instance, a property describing how much RAM must be available may be interpreted as allowing a worker with 16GB to fulfill a request for 8GB, while a property describing the OS environment on which the action must be performed may require an exact match with the worker's OS. The server MAY use the `value` of one or more properties to determine how it sets up the execution environment, such as by making specific system files available to the worker. Both names and values are typically case-sensitive. Note that the platform is implicitly part of the action digest, so even tiny changes in the names or values (like changing case) may result in different action cache entries.", "properties": { "value": { "type": "string", "description": "The property value." }, "name": { "type": "string", "description": "The property name." } }, "id": "BuildBazelRemoteExecutionV2PlatformProperty", "type": "object" }, "GoogleDevtoolsRemotebuildbotCommandStatus": { "id": "GoogleDevtoolsRemotebuildbotCommandStatus", "description": "The internal status of the command result.", "properties": { "code": { "enumDescriptions": [ "The command succeeded.", "The command input was invalid.", "The command had passed its expiry time while it was still running.", "The resources requested by the command were not found.", "The command failed due to permission errors.", "The command failed because of some invariants expected by the underlying system have been broken. This usually indicates a bug wit the system.", "The command was aborted.", "The command failed because the system is not in a state required for the command, e.g. the command inputs cannot be found on the server.", "The bot failed to do the cleanup, e.g. unable to delete the command working directory or the command process.", "The bot failed to download the inputs.", "Unknown error.", "The bot failed to upload the outputs.", "The bot tried to upload files having a total size that is too large.", "The bot failed to login to docker.", "The bot failed to pull docker image.", "The bot failed to check docker images.", "The inputs contain duplicate files.", "The bot doesn't have the permissions to pull docker images.", "The docker image cannot be found.", "Working directory is not found.", "Working directory is not under the base directory", "There are issues with docker service/runtime.", "The command failed with \"no cuda-capable device is detected\" error.", "The bot encountered errors from remote CAS when downloading blobs.", "The bot encountered errors from remote CAS when uploading blobs.", "The local casproxy is not running.", "The bot couldn't start the container.", "The docker ulimit is not valid.", "The docker runtime is unknown.", "The docker capability is unknown.", "The command failed with unknown docker errors.", "Docker failed to run containers with CreateComputeSystem error.", "Docker failed to run containers with hcsshim::PrepareLayer error.", "Docker incompatible operating system error.", "Docker failed to create OCI runtime because of file not found.", "Docker failed to create OCI runtime because of permission denied.", "Docker failed to create process because of file not found.", "Docker failed to run containers with CreateComputeSystem error that involves an incorrect parameter (more specific version of DOCKER_CREATE_COMPUTE_SYSTEM_ERROR that is user-caused).", "Docker failed to create an overlay mount because of too many levels of symbolic links.", "The local Container Manager is not running.", "Docker failed because a request was denied by the organization's policy.", "Working directory is not relative", "Docker cannot find the container specified in the command. This error is likely to only occur if an asynchronous container is not running when the command is run.", "Docker cannot pull an image because a blob is missing in the repo. May be due to a bad/incomplete image push or partial deletion of underlying blob layers.", "The docker volume specification is invalid (e.g. root).", "Docker failed to create OCI runtime because input root cannot be proc.", "Docker failed to start OCI runtime because of file not found.", "Docker failed to run because the layerchain json was invalid (see b/234782336).", "Docker failed to create OCI runtime because of incompatible cuda version.", "The local Worker Manager is not running.", "Docker failed to start OCI runtime because of file format error.", "Docker failed to start OCI runtime because of permission denied.", "Docker failed because of permission denied.", "The bot failed to update the network proxy policy.", "Failed to impersonate the service account.", "Trying to write a file with a filename that is too long.", "The bot failed to get the network activity log.", "The bot failed to upload the network activity log.", "Failed to start a process because NPROC is too low.", "An error occurred during the start of tetragon container.", "An error occurred during the generation of the buildgraph.", "An error occurred while uploading the generated buildgraph. Next tag to use: 62." ], "type": "string", "enum": [ "OK", "INVALID_ARGUMENT", "DEADLINE_EXCEEDED", "NOT_FOUND", "PERMISSION_DENIED", "INTERNAL", "ABORTED", "FAILED_PRECONDITION", "CLEANUP_ERROR", "DOWNLOAD_INPUTS_ERROR", "UNKNOWN", "UPLOAD_OUTPUTS_ERROR", "UPLOAD_OUTPUTS_BYTES_LIMIT_EXCEEDED", "DOCKER_LOGIN_ERROR", "DOCKER_IMAGE_PULL_ERROR", "DOCKER_IMAGE_EXIST_ERROR", "DUPLICATE_INPUTS", "DOCKER_IMAGE_PERMISSION_DENIED", "DOCKER_IMAGE_NOT_FOUND", "WORKING_DIR_NOT_FOUND", "WORKING_DIR_NOT_IN_BASE_DIR", "DOCKER_UNAVAILABLE", "NO_CUDA_CAPABLE_DEVICE", "REMOTE_CAS_DOWNLOAD_ERROR", "REMOTE_CAS_UPLOAD_ERROR", "LOCAL_CASPROXY_NOT_RUNNING", "DOCKER_CREATE_CONTAINER_ERROR", "DOCKER_INVALID_ULIMIT", "DOCKER_UNKNOWN_RUNTIME", "DOCKER_UNKNOWN_CAPABILITY", "DOCKER_UNKNOWN_ERROR", "DOCKER_CREATE_COMPUTE_SYSTEM_ERROR", "DOCKER_PREPARELAYER_ERROR", "DOCKER_INCOMPATIBLE_OS_ERROR", "DOCKER_CREATE_RUNTIME_FILE_NOT_FOUND", "DOCKER_CREATE_RUNTIME_PERMISSION_DENIED", "DOCKER_CREATE_PROCESS_FILE_NOT_FOUND", "DOCKER_CREATE_COMPUTE_SYSTEM_INCORRECT_PARAMETER_ERROR", "DOCKER_TOO_MANY_SYMBOLIC_LINK_LEVELS", "LOCAL_CONTAINER_MANAGER_NOT_RUNNING", "DOCKER_IMAGE_VPCSC_PERMISSION_DENIED", "WORKING_DIR_NOT_RELATIVE", "DOCKER_MISSING_CONTAINER", "DOCKER_MISSING_BLOB_IN_IMAGE", "DOCKER_INVALID_VOLUME", "DOCKER_CREATE_RUNTIME_CANNOT_MOUNT_TO_PROC", "DOCKER_START_RUNTIME_FILE_NOT_FOUND", "DOCKER_CREATE_INVALID_LAYERCHAIN_JSON", "INCOMPATIBLE_CUDA_VERSION", "LOCAL_WORKER_MANAGER_NOT_RUNNING", "DOCKER_START_RUNTIME_FILE_FORMAT_ERROR", "DOCKER_START_RUNTIME_PERMISSION_DENIED", "DOCKER_PERMISSION_DENIED", "NETWORK_PROXY_UPDATE_POLICY_ERROR", "SERVICE_ACCOUNT_IMPERSONATION_DENIED", "INVALID_FILENAME", "NETWORK_PROXY_GET_NETWORK_ACTIVITY_LOG_ERROR", "NETWORK_PROXY_UPLOAD_NETWORK_ACTIVITY_LOG_ERROR", "NPROC_EXCEEDED", "BUILDGRAPH_START_ERROR", "BUILDGRAPH_GENERATION_ERROR", "BUILDGRAPH_UPLOAD_ERROR" ], "description": "The status code." }, "message": { "type": "string", "description": "The error message." } }, "type": "object" }, "GoogleDevtoolsRemoteworkersV1test2CommandTask": { "type": "object", "id": "GoogleDevtoolsRemoteworkersV1test2CommandTask", "description": "Describes a shell-style task to execute, suitable for providing as the Bots interface's `Lease.payload` field.", "properties": { "expectedOutputs": { "description": "The expected outputs from the task.", "$ref": "GoogleDevtoolsRemoteworkersV1test2CommandTaskOutputs" }, "timeouts": { "description": "The timeouts of this task.", "$ref": "GoogleDevtoolsRemoteworkersV1test2CommandTaskTimeouts" }, "inputs": { "description": "The inputs to the task.", "$ref": "GoogleDevtoolsRemoteworkersV1test2CommandTaskInputs" } } }, "BuildBazelRemoteExecutionV2Digest": { "id": "BuildBazelRemoteExecutionV2Digest", "description": "A content digest. A digest for a given blob consists of the size of the blob and its hash. The hash algorithm to use is defined by the server. The size is considered to be an integral part of the digest and cannot be separated. That is, even if the `hash` field is correctly specified but `size_bytes` is not, the server MUST reject the request. The reason for including the size in the digest is as follows: in a great many cases, the server needs to know the size of the blob it is about to work with prior to starting an operation with it, such as flattening Merkle tree structures or streaming it to a worker. Technically, the server could implement a separate metadata store, but this results in a significantly more complicated implementation as opposed to having the client specify the size up-front (or storing the size along with the digest in every message where digests are embedded). This does mean that the API leaks some implementation details of (what we consider to be) a reasonable server implementation, but we consider this to be a worthwhile tradeoff. When a `Digest` is used to refer to a proto message, it always refers to the message in binary encoded form. To ensure consistent hashing, clients and servers MUST ensure that they serialize messages according to the following rules, even if there are alternate valid encodings for the same message: * Fields are serialized in tag order. * There are no unknown fields. * There are no duplicate fields. * Fields are serialized according to the default semantics for their type. Most protocol buffer implementations will always follow these rules when serializing, but care should be taken to avoid shortcuts. For instance, concatenating two messages to merge them may produce duplicate fields.", "properties": { "hash": { "description": "The hash, represented as a lowercase hexadecimal string, padded with leading zeroes up to the hash function length.", "type": "string" }, "sizeBytes": { "description": "The size of the blob, in bytes.", "type": "string", "format": "int64" } }, "type": "object" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaDisks": { "type": "object", "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaDisks", "description": "Disks defines the disks that would be attached to the workers.", "properties": { "localSsd": { "description": "Optional. Specifies the number of local SSDs to be attached. If specified, local SSDs will be used as the working directory.", "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaDisksLocalSSD" }, "dockerRootDisk": { "description": "Optional. Specifies the configuration for the docker root disk to be attached. If not specified, RBE will default to the RBE managed docker root disk.", "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaDisksPersistentDisk" } } }, "GoogleDevtoolsRemoteworkersV1test2CommandOverhead": { "description": "DEPRECATED - use CommandResult instead. Can be used as part of CompleteRequest.metadata, or are part of a more sophisticated message.", "properties": { "duration": { "type": "string", "format": "google-duration", "description": "The elapsed time between calling Accept and Complete. The server will also have its own idea of what this should be, but this excludes the overhead of the RPCs and the bot response time." }, "overhead": { "type": "string", "format": "google-duration", "description": "The amount of time *not* spent executing the command (ie uploading/downloading files)." } }, "id": "GoogleDevtoolsRemoteworkersV1test2CommandOverhead", "type": "object" }, "GoogleProtobufEmpty": { "id": "GoogleProtobufEmpty", "description": "A generic empty message that you can re-use to avoid defining duplicated empty messages in your APIs. A typical example is to use it as the request or the response type of an API method. For instance: service Foo { rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty); }", "properties": {}, "type": "object" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateBackendIAMBindingResponse": { "description": "The response used for `CreateBackendIAMBinding`.", "properties": { "backendProperties": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaBackendProperties", "description": "The backend properties of the instance, which contains the list of backend IAM bindings, after creation of the most recent binding." } }, "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateBackendIAMBindingResponse", "type": "object" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateWorkerPoolRequest": { "description": "The request used for `CreateWorkerPool`.", "properties": { "parent": { "description": "Resource name of the instance in which to create the new worker pool. Format: `projects/[PROJECT_ID]/instances/[INSTANCE_ID]`.", "type": "string" }, "poolId": { "description": "ID of the created worker pool. A valid pool ID must: be 6-50 characters long, contain only lowercase letters, digits, hyphens and underscores, start with a lowercase letter, and end with a lowercase letter or a digit.", "type": "string" }, "workerPool": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaWorkerPool", "description": "Specifies the worker pool to create. The name in the worker pool, if specified, is ignored." }, "validateOnly": { "type": "boolean", "description": "Optional. If true, the request will be validated but not executed." } }, "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateWorkerPoolRequest", "type": "object" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaWorkerConfig": { "type": "object", "description": "Defines the configuration to be used for creating workers in the worker pool.", "properties": { "networkAccess": { "type": "string", "description": "Determines the type of network access granted to workers. Possible values: - \"public\": Workers can connect to the public internet. - \"private\": Workers can only connect to Google APIs and services. - \"restricted-private\": Workers can only connect to Google APIs that are reachable through `restricted.googleapis.com` (`199.36.153.4/30`)." }, "reserved": { "type": "boolean", "description": "Determines whether the worker is reserved (equivalent to a Compute Engine on-demand VM and therefore won't be preempted). See [Preemptible VMs](https://cloud.google.com/preemptible-vms/) for more details." }, "minCpuPlatform": { "description": "Minimum CPU platform to use when creating the worker. See [CPU Platforms](https://cloud.google.com/compute/docs/cpu-platforms).", "type": "string" }, "networkAllowlist": { "type": "string", "description": "Optional. Specifies the network allowlist to use for the pool. Possible values: - \"\": No network filtering takes place. Any action with an allowlist will be rejected since it cannot be enforced. This is the default. - \"per_action\": Network access will be filtered according to the allowlist provided by the action. If no allowlist is provided, the default is to block all requests." }, "userServiceAccounts": { "description": "Optional. List of user service accounts. The last service account in the list is what the user code will run as. The rest of the service accounts constitute the impersonation chain. For example, if len(user_service_accounts) == 2 and if the VM's service account is RBE's P4SA, then RBE'S P4SA should be granted the Service Account Token Creator role on user_service_accounts[0] and user_service_accounts[0] should be granted the Service Account Token Creator role on user_service_accounts[1].", "type": "array", "items": { "type": "string" } }, "soleTenantNodeType": { "description": "The node type name to be used for sole-tenant nodes.", "type": "string" }, "attachedDisks": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaDisks", "description": "Optional. Specifies the disks that will be attached." }, "labels": { "description": "Labels associated with the workers. Label keys and values can be no longer than 63 characters, can only contain lowercase letters, numeric characters, underscores and dashes. International letters are permitted. Label keys must start with a letter. Label values are optional. There can not be more than 64 labels per resource.", "additionalProperties": { "type": "string" }, "type": "object" }, "machineType": { "type": "string", "description": "Required. Machine type of the worker, such as `e2-standard-2`. See https://cloud.google.com/compute/docs/machine-types for a list of supported machine types. Note that `f1-micro` and `g1-small` are not yet supported." }, "maxConcurrentActions": { "type": "string", "format": "int64", "description": "The maximum number of actions a worker can execute concurrently." }, "vmImage": { "type": "string", "description": "The name of the image used by each VM." }, "diskSizeGb": { "description": "Required. Size of the disk attached to the worker, in GB. See https://cloud.google.com/compute/docs/disks/", "type": "string", "format": "int64" }, "accelerator": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaAcceleratorConfig", "description": "The accelerator card attached to each VM." }, "diskType": { "description": "Required. Disk Type to use for the worker. See [Storage options](https://cloud.google.com/compute/docs/disks/#introduction). Currently only `pd-standard` and `pd-ssd` are supported.", "type": "string" }, "zones": { "type": "array", "items": { "type": "string" }, "description": "Optional. Zones in the region where the pool VMs should be. Leave empty for no restrictions." } }, "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaWorkerConfig" }, "BuildBazelRemoteExecutionV2SymlinkNode": { "id": "BuildBazelRemoteExecutionV2SymlinkNode", "description": "A `SymlinkNode` represents a symbolic link.", "properties": { "name": { "type": "string", "description": "The name of the symlink." }, "target": { "description": "The target path of the symlink. The path separator is a forward slash `/`. The target path can be relative to the parent directory of the symlink or it can be an absolute path starting with `/`. Support for absolute paths can be checked using the Capabilities API. `..` components are allowed anywhere in the target path as logical canonicalization may lead to different behavior in the presence of directory symlinks (e.g. `foo/../bar` may not be the same as `bar`). To reduce potential cache misses, canonicalization is still recommended where this is possible without impacting correctness.", "type": "string" }, "nodeProperties": { "$ref": "BuildBazelRemoteExecutionV2NodeProperties" } }, "type": "object" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaIAMBinding": { "description": "Represents an IAM binding.", "properties": { "principal": { "description": "Required. The IAM principal this binding applies to.", "type": "string" }, "role": { "type": "string", "description": "Required. The IAM role this binding applies to. Format: `roles/`" } }, "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaIAMBinding", "type": "object" }, "GoogleDevtoolsRemoteworkersV1test2DirectoryMetadata": { "type": "object", "id": "GoogleDevtoolsRemoteworkersV1test2DirectoryMetadata", "description": "The metadata for a directory. Similar to the equivalent message in the Remote Execution API.", "properties": { "path": { "description": "The path of the directory, as in FileMetadata.path.", "type": "string" }, "digest": { "description": "A pointer to the contents of the directory, in the form of a marshalled Directory message.", "$ref": "GoogleDevtoolsRemoteworkersV1test2Digest" } } }, "BuildBazelRemoteExecutionV2FileNode": { "description": "A `FileNode` represents a single file and associated metadata.", "properties": { "digest": { "$ref": "BuildBazelRemoteExecutionV2Digest", "description": "The digest of the file's content." }, "isExecutable": { "type": "boolean", "description": "True if file is executable, false otherwise." }, "name": { "description": "The name of the file.", "type": "string" }, "nodeProperties": { "$ref": "BuildBazelRemoteExecutionV2NodeProperties" } }, "id": "BuildBazelRemoteExecutionV2FileNode", "type": "object" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaWorkerPool": { "type": "object", "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaWorkerPool", "description": "A worker pool resource in the Remote Build Execution API.", "properties": { "workerConfig": { "description": "Specifies the properties, such as machine type and disk size, used for creating workers in a worker pool.", "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaWorkerConfig" }, "name": { "type": "string", "description": "WorkerPool resource name formatted as: `projects/[PROJECT_ID]/instances/[INSTANCE_ID]/workerpools/[POOL_ID]`. name should not be populated when creating a worker pool since it is provided in the `poolId` field." }, "workerCount": { "type": "string", "format": "int64", "description": "The desired number of workers in the worker pool. Must be a value between 0 and 15000." }, "channel": { "type": "string", "description": "Channel specifies the release channel of the pool." }, "hostOs": { "description": "HostOS specifies the OS version of the image for the worker VMs.", "type": "string" }, "autoscale": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaAutoscale", "description": "The autoscale policy to apply on a pool." }, "state": { "type": "string", "enum": [ "STATE_UNSPECIFIED", "CREATING", "RUNNING", "UPDATING", "DELETING", "INACTIVE" ], "enumDescriptions": [ "Not a valid state, but the default value of the enum.", "The worker pool is in state `CREATING` once `CreateWorkerPool` is called and before all requested workers are ready.", "The worker pool is in state `RUNNING` when all its workers are ready for use.", "The worker pool is in state `UPDATING` once `UpdateWorkerPool` is called and before the new configuration has all the requested workers ready for use, and no older configuration has any workers. At that point the state transitions to `RUNNING`.", "The worker pool is in state `DELETING` once the `Delete` method is called and before the deletion completes.", "The worker pool is in state `INACTIVE` when the instance hosting the worker pool in not running." ], "description": "Output only. State of the worker pool." } } }, "BuildBazelRemoteExecutionV2DirectoryNode": { "type": "object", "description": "A `DirectoryNode` represents a child of a Directory which is itself a `Directory` and its associated metadata.", "properties": { "name": { "description": "The name of the directory.", "type": "string" }, "digest": { "description": "The digest of the Directory object represented. See Digest for information about how to take the digest of a proto message.", "$ref": "BuildBazelRemoteExecutionV2Digest" } }, "id": "BuildBazelRemoteExecutionV2DirectoryNode" }, "GoogleRpcStatus": { "description": "The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors).", "properties": { "code": { "type": "integer", "format": "int32", "description": "The status code, which should be an enum value of google.rpc.Code." }, "message": { "description": "A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.", "type": "string" }, "details": { "description": "A list of messages that carry the error details. There is a common set of message types for APIs to use.", "items": { "type": "object", "additionalProperties": { "type": "any", "description": "Properties of the object. Contains field @type with type URL." } }, "type": "array" } }, "id": "GoogleRpcStatus", "type": "object" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaDisksLocalSSD": { "type": "object", "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaDisksLocalSSD", "description": "LocalSSD specifies how to attach local SSD to the workers.", "properties": { "sizeGb": { "description": "Output only. The size of the local SSD in gb. Intended for informational purposes only.", "readOnly": true, "type": "string", "format": "int64" }, "count": { "type": "string", "format": "int64", "description": "Optional. The number of Local SSDs to be attached." } } }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaAutoscale": { "type": "object", "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaAutoscale", "description": "Autoscale defines the autoscaling policy of a worker pool.", "properties": { "maxSize": { "description": "Optional. The maximal number of workers. Must be equal to or greater than min_size.", "type": "string", "format": "int64" }, "minSize": { "description": "Optional. The minimal number of workers. Must be greater than 0.", "type": "string", "format": "int64" }, "minIdleWorkers": { "description": "Optional. The minimum number of idle workers the autoscaler will aim to have in the pool at all times that are immediately available to accept a surge in build traffic. The pool size will still be constrained by min_size and max_size.", "type": "string", "format": "int64" } } }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateBackendIAMBindingRequest": { "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateBackendIAMBindingRequest", "description": "The request used for `CreateBackendIAMBinding`.", "properties": { "backendIamBinding": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaBackendIAMBinding", "description": "Required. The backend IAM binding to create." } }, "type": "object" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaTestNotifyInstanceRequest": { "description": "The request used for `TestNotifyInstance`.", "properties": {}, "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaTestNotifyInstanceRequest", "type": "object" }, "GoogleDevtoolsRemotebuildbotInputTreeStats": { "properties": { "totalSymlinks": { "description": "Overall number of symlinks in the tree.", "type": "integer", "format": "int32" }, "totalNodes": { "description": "Overall number of nodes in the tree.", "type": "integer", "format": "int32" }, "totalFiles": { "description": "Overall number of files in the tree.", "type": "integer", "format": "int32" }, "totalSize": { "type": "string", "format": "int64", "description": "Total size in bytes of all files in the tree." }, "processingTimeMillis": { "type": "string", "format": "int64", "description": "Time spent retrieving and processing the tree." }, "maxDepth": { "description": "Tree depth.", "type": "integer", "format": "int32" } }, "id": "GoogleDevtoolsRemotebuildbotInputTreeStats", "type": "object" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaRelationship": { "description": "Defines the relationship with another RBE instance.", "properties": { "instance": { "type": "string", "description": "Instance resource name (e.g. `projects/[PROJECT_ID]/instances/[INSTANCE_ID]`) of an instance which is either a parent or child of another RBE instance." }, "relation": { "type": "string", "enum": [ "RELATION_UNSPECIFIED", "RELATION_CAS_PARENT", "RELATION_CAS_CHILD" ], "enumDescriptions": [ "Default value but not a valid value; it is an error to set this value.", "`instance` is a parent of another RBE instance.", "`instance` is a child of another RBE instance." ], "description": "Specify the relationship between `instance` and the RBE instance it is related to." }, "status": { "readOnly": true, "description": "Output only. The validation result of this relationship. Possible status codes are: - `OK`: a valid relationship - `FAILED_PRECONDITION`: missing allowlist or misconfigured instance (Note that we don't want to return `NOT_FOUND` which leaks information about whether or not a project exists)", "$ref": "GoogleRpcStatus" } }, "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaRelationship", "type": "object" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaStorageSettings": { "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaStorageSettings", "description": "Describes the storage settings for an instance. This consists of user- specified TTL values for CAS and ActionResult entries.", "properties": { "casTtl": { "description": "Defines how long after a blob was uploaded or last accessed before it is eligible for garbage collection (TTL countdowns are reset upon access). RBE may remove it from the instance's CAS at any time after this period has elapsed.", "type": "string", "format": "google-duration" }, "actionResultTtl": { "type": "string", "format": "google-duration", "description": "Defines how long after a cached execution result was uploaded or accessed (due to a cache hit) before it is eligible for garbage collection (TTL countdowns are reset upon access). RBE may remove it from the action cache at any time after this period has elapsed. Note that the action cache only concerns when an incoming execution to RBE results in a cache hit. Input and output artifacts of the action are stored in the RBE CAS." } }, "type": "object" }, "GoogleDevtoolsRemoteworkersV1test2CommandTaskInputs": { "description": "Describes the inputs to a shell-style task.", "properties": { "environmentVariables": { "description": "All environment variables required by the task.", "type": "array", "items": { "$ref": "GoogleDevtoolsRemoteworkersV1test2CommandTaskInputsEnvironmentVariable" } }, "files": { "type": "array", "items": { "$ref": "GoogleDevtoolsRemoteworkersV1test2Digest" }, "description": "The input filesystem to be set up prior to the task beginning. The contents should be a repeated set of FileMetadata messages though other formats are allowed if better for the implementation (eg, a LUCI-style .isolated file). This field is repeated since implementations might want to cache the metadata, in which case it may be useful to break up portions of the filesystem that change frequently (eg, specific input files) from those that don't (eg, standard header files)." }, "inlineBlobs": { "description": "Inline contents for blobs expected to be needed by the bot to execute the task. For example, contents of entries in `files` or blobs that are indirectly referenced by an entry there. The bot should check against this list before downloading required task inputs to reduce the number of communications between itself and the remote CAS server.", "items": { "$ref": "GoogleDevtoolsRemoteworkersV1test2Blob" }, "type": "array" }, "workingDirectory": { "description": "Directory from which a command is executed. It is a relative directory with respect to the bot's working directory (i.e., \"./\"). If it is non-empty, then it must exist under \"./\". Otherwise, \"./\" will be used.", "type": "string" }, "inputRootDigest": { "$ref": "GoogleDevtoolsRemoteworkersV1test2Digest", "description": "The digest of the Merkle tree root of the inputs to the task. If present, the 'files' field should be empty." }, "arguments": { "description": "The command itself to run (e.g., argv). This field should be passed directly to the underlying operating system, and so it must be sensible to that operating system. For example, on Windows, the first argument might be \"C:\\Windows\\System32\\ping.exe\" - that is, using drive letters and backslashes. A command for a *nix system, on the other hand, would use forward slashes. All other fields in the RWAPI must consistently use forward slashes, since those fields may be interpreted by both the service and the bot.", "items": { "type": "string" }, "type": "array" } }, "id": "GoogleDevtoolsRemoteworkersV1test2CommandTaskInputs", "type": "object" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateInstanceRequest": { "type": "object", "description": "The request used for `CreateInstance`.", "properties": { "instance": { "description": "Required. Specifies the instance to create. The name in the instance, if specified in the instance, is ignored.", "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaInstance" }, "instanceId": { "description": "Required. ID of the created instance. A valid `instance_id` must: - Be 6-50 characters long - Contain only lowercase letters, digits, hyphens and underscores - Start with a lowercase letter - End with a lowercase letter or a digit", "type": "string" }, "parent": { "description": "Required. Resource name of the project containing the instance. Format: `projects/[PROJECT_ID]`.", "type": "string" } }, "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateInstanceRequest" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaUpdateWorkerPoolRequest": { "type": "object", "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaUpdateWorkerPoolRequest", "description": "The request used for UpdateWorkerPool.", "properties": { "validateOnly": { "description": "Optional. If true, the request will be validated but not executed.", "type": "boolean" }, "updateMask": { "type": "string", "format": "google-fieldmask", "description": "The update mask applies to worker_pool. For the `FieldMask` definition, see https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask If an empty update_mask is provided, only the non-default valued field in the worker pool field will be updated. Note that in order to update a field to the default value (zero, false, empty string) an explicit update_mask must be provided." }, "workerPool": { "description": "Specifies the worker pool to update.", "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaWorkerPool" } } }, "BuildBazelRemoteExecutionV2Directory": { "type": "object", "description": "A `Directory` represents a directory node in a file tree, containing zero or more children FileNodes, DirectoryNodes and SymlinkNodes. Each `Node` contains its name in the directory, either the digest of its content (either a file blob or a `Directory` proto) or a symlink target, as well as possibly some metadata about the file or directory. In order to ensure that two equivalent directory trees hash to the same value, the following restrictions MUST be obeyed when constructing a `Directory`: * Every child in the directory must have a path of exactly one segment. Multiple levels of directory hierarchy may not be collapsed. * Each child in the directory must have a unique path segment (file name). Note that while the API itself is case-sensitive, the environment where the Action is executed may or may not be case-sensitive. That is, it is legal to call the API with a Directory that has both \"Foo\" and \"foo\" as children, but the Action may be rejected by the remote system upon execution. * The files, directories and symlinks in the directory must each be sorted in lexicographical order by path. The path strings must be sorted by code point, equivalently, by UTF-8 bytes. * The NodeProperties of files, directories, and symlinks must be sorted in lexicographical order by property name. A `Directory` that obeys the restrictions is said to be in canonical form. As an example, the following could be used for a file named `bar` and a directory named `foo` with an executable file named `baz` (hashes shortened for readability): ```json // (Directory proto) { files: [ { name: \"bar\", digest: { hash: \"4a73bc9d03...\", size: 65534 }, node_properties: [ { \"name\": \"MTime\", \"value\": \"2017-01-15T01:30:15.01Z\" } ] } ], directories: [ { name: \"foo\", digest: { hash: \"4cf2eda940...\", size: 43 } } ] } // (Directory proto with hash \"4cf2eda940...\" and size 43) { files: [ { name: \"baz\", digest: { hash: \"b2c941073e...\", size: 1294, }, is_executable: true } ] } ```", "properties": { "symlinks": { "description": "The symlinks in the directory.", "type": "array", "items": { "$ref": "BuildBazelRemoteExecutionV2SymlinkNode" } }, "nodeProperties": { "$ref": "BuildBazelRemoteExecutionV2NodeProperties" }, "files": { "description": "The files in the directory.", "type": "array", "items": { "$ref": "BuildBazelRemoteExecutionV2FileNode" } }, "directories": { "items": { "$ref": "BuildBazelRemoteExecutionV2DirectoryNode" }, "type": "array", "description": "The subdirectories in the directory." } }, "id": "BuildBazelRemoteExecutionV2Directory" }, "BuildBazelRemoteExecutionV2ActionResult": { "id": "BuildBazelRemoteExecutionV2ActionResult", "description": "An ActionResult represents the result of an Action being run. It is advised that at least one field (for example `ActionResult.execution_metadata.Worker`) have a non-default value, to ensure that the serialized value is non-empty, which can then be used as a basic data sanity check.", "properties": { "executionMetadata": { "$ref": "BuildBazelRemoteExecutionV2ExecutedActionMetadata", "description": "The details of the execution that originally produced this result." }, "stdoutDigest": { "$ref": "BuildBazelRemoteExecutionV2Digest", "description": "The digest for a blob containing the standard output of the action, which can be retrieved from the ContentAddressableStorage." }, "outputFiles": { "description": "The output files of the action. For each output file requested in the `output_files` or `output_paths` field of the Action, if the corresponding file existed after the action completed, a single entry will be present either in this field, or the `output_file_symlinks` field if the file was a symbolic link to another file (`output_symlinks` field after v2.1). If an output listed in `output_files` was found, but was a directory rather than a regular file, the server will return a FAILED_PRECONDITION. If the action does not produce the requested output, then that output will be omitted from the list. The server is free to arrange the output list as desired; clients MUST NOT assume that the output list is sorted.", "type": "array", "items": { "$ref": "BuildBazelRemoteExecutionV2OutputFile" } }, "outputFileSymlinks": { "items": { "$ref": "BuildBazelRemoteExecutionV2OutputSymlink" }, "type": "array", "description": "The output files of the action that are symbolic links to other files. Those may be links to other output files, or input files, or even absolute paths outside of the working directory, if the server supports SymlinkAbsolutePathStrategy.ALLOWED. For each output file requested in the `output_files` or `output_paths` field of the Action, if the corresponding file existed after the action completed, a single entry will be present either in this field, or in the `output_files` field, if the file was not a symbolic link. If an output symbolic link of the same name as listed in `output_files` of the Command was found, but its target type was not a regular file, the server will return a FAILED_PRECONDITION. If the action does not produce the requested output, then that output will be omitted from the list. The server is free to arrange the output list as desired; clients MUST NOT assume that the output list is sorted. DEPRECATED as of v2.1. Servers that wish to be compatible with v2.0 API should still populate this field in addition to `output_symlinks`.", "deprecated": true }, "outputDirectories": { "description": "The output directories of the action. For each output directory requested in the `output_directories` or `output_paths` field of the Action, if the corresponding directory existed after the action completed, a single entry will be present in the output list, which will contain the digest of a Tree message containing the directory tree, and the path equal exactly to the corresponding Action output_directories member. As an example, suppose the Action had an output directory `a/b/dir` and the execution produced the following contents in `a/b/dir`: a file named `bar` and a directory named `foo` with an executable file named `baz`. Then, output_directory will contain (hashes shortened for readability): ```json // OutputDirectory proto: { path: \"a/b/dir\" tree_digest: { hash: \"4a73bc9d03...\", size: 55 } } // Tree proto with hash \"4a73bc9d03...\" and size 55: { root: { files: [ { name: \"bar\", digest: { hash: \"4a73bc9d03...\", size: 65534 } } ], directories: [ { name: \"foo\", digest: { hash: \"4cf2eda940...\", size: 43 } } ] } children : { // (Directory proto with hash \"4cf2eda940...\" and size 43) files: [ { name: \"baz\", digest: { hash: \"b2c941073e...\", size: 1294, }, is_executable: true } ] } } ``` If an output of the same name as listed in `output_files` of the Command was found in `output_directories`, but was not a directory, the server will return a FAILED_PRECONDITION.", "type": "array", "items": { "$ref": "BuildBazelRemoteExecutionV2OutputDirectory" } }, "stderrDigest": { "$ref": "BuildBazelRemoteExecutionV2Digest", "description": "The digest for a blob containing the standard error of the action, which can be retrieved from the ContentAddressableStorage." }, "outputDirectorySymlinks": { "description": "The output directories of the action that are symbolic links to other directories. Those may be links to other output directories, or input directories, or even absolute paths outside of the working directory, if the server supports SymlinkAbsolutePathStrategy.ALLOWED. For each output directory requested in the `output_directories` field of the Action, if the directory existed after the action completed, a single entry will be present either in this field, or in the `output_directories` field, if the directory was not a symbolic link. If an output of the same name was found, but was a symbolic link to a file instead of a directory, the server will return a FAILED_PRECONDITION. If the action does not produce the requested output, then that output will be omitted from the list. The server is free to arrange the output list as desired; clients MUST NOT assume that the output list is sorted. DEPRECATED as of v2.1. Servers that wish to be compatible with v2.0 API should still populate this field in addition to `output_symlinks`.", "deprecated": true, "items": { "$ref": "BuildBazelRemoteExecutionV2OutputSymlink" }, "type": "array" }, "stdoutRaw": { "description": "The standard output buffer of the action. The server SHOULD NOT inline stdout unless requested by the client in the GetActionResultRequest message. The server MAY omit inlining, even if requested, and MUST do so if inlining would cause the response to exceed message size limits. Clients SHOULD NOT populate this field when uploading to the cache.", "type": "string", "format": "byte" }, "outputSymlinks": { "type": "array", "items": { "$ref": "BuildBazelRemoteExecutionV2OutputSymlink" }, "description": "New in v2.1: this field will only be populated if the command `output_paths` field was used, and not the pre v2.1 `output_files` or `output_directories` fields. The output paths of the action that are symbolic links to other paths. Those may be links to other outputs, or inputs, or even absolute paths outside of the working directory, if the server supports SymlinkAbsolutePathStrategy.ALLOWED. A single entry for each output requested in `output_paths` field of the Action, if the corresponding path existed after the action completed and was a symbolic link. If the action does not produce a requested output, then that output will be omitted from the list. The server is free to arrange the output list as desired; clients MUST NOT assume that the output list is sorted." }, "exitCode": { "type": "integer", "format": "int32", "description": "The exit code of the command." }, "stderrRaw": { "description": "The standard error buffer of the action. The server SHOULD NOT inline stderr unless requested by the client in the GetActionResultRequest message. The server MAY omit inlining, even if requested, and MUST do so if inlining would cause the response to exceed message size limits. Clients SHOULD NOT populate this field when uploading to the cache.", "type": "string", "format": "byte" } }, "type": "object" }, "GoogleDevtoolsRemotebuildbotCommandDurations": { "type": "object", "description": "CommandDuration contains the various duration metrics tracked when a bot performs a command.", "properties": { "cmWaitForAssignment": { "type": "string", "format": "google-duration", "description": "The time spent waiting for Container Manager to assign an asynchronous container for execution." }, "dockerPrep": { "description": "The time spent preparing the command to be run in a Docker container (includes pulling the Docker image, if necessary).", "type": "string", "format": "google-duration" }, "execStartTime": { "type": "string", "format": "google-datetime", "description": "The timestamp when execution begins." }, "dockerPrepStartTime": { "description": "The timestamp when docker preparation begins.", "type": "string", "format": "google-datetime" }, "isoPrepDone": { "type": "string", "format": "google-datetime", "description": "The timestamp when preparation is done and bot starts downloading files." }, "casRelease": { "type": "string", "format": "google-duration", "description": "The time spent to release the CAS blobs used by the task." }, "upload": { "description": "The time spent uploading the output files.", "type": "string", "format": "google-duration" }, "downloadStartTime": { "type": "string", "format": "google-datetime", "description": "The timestamp when downloading the input files begins." }, "overall": { "type": "string", "format": "google-duration", "description": "The time spent completing the command, in total." }, "execution": { "description": "The time spent executing the command (i.e., doing useful work).", "type": "string", "format": "google-duration" }, "uploadStartTime": { "type": "string", "format": "google-datetime", "description": "The timestamp when uploading the output files begins." }, "download": { "type": "string", "format": "google-duration", "description": "The time spent downloading the input files and constructing the working directory." } }, "id": "GoogleDevtoolsRemotebuildbotCommandDurations" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateTbiInstanceRequest": { "type": "object", "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateTbiInstanceRequest", "description": "The request used for `CreateTbiInstance`.", "properties": { "instanceId": { "type": "string", "description": "Required. ID of the created instance. A valid `instance_id` must: be 6-50 characters long, contain only lowercase letters, digits, hyphens and underscores, start with a lowercase letter, and end with a lowercase letter or a digit." }, "adminOpsRestrictions": { "type": "string", "enum": [ "RESTRICTIONS_UNSPECIFIED", "RESTRICTIONS_ALLOWED", "RESTRICTIONS_RESTRICTED" ], "enumDescriptions": [ "Default value; interpreted as RESTRICTIONS_ALLOWED.", "Admin operations are allowed normally.", "Admin operations are restricted to known safe operations that do not affect build integrity." ], "description": "Optional. If AdminOpsRestrictions is ADMIN_OPS_RESTRICTIONS_RESTRICTED then only predefined safe fields are allowed to set through internal APIs through toolproxy. AdminOpsRestrictions can be set to ADMIN_OPS_RESTRICTIONS_RESTRICTED only if ACTION_ISOLATION is enforced." }, "instance": { "description": "Required. Specifies the instance to create. The name in the instance, if specified in the instance, is ignored.", "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaInstance" }, "immutableMetapolicy": { "type": "boolean", "description": "Required. Enforces meta policy immutability if set to true. This field is required. We use 'optional' here to track field presence so that we may catch (and error on) the case where this field is unset." }, "tcaRestrictions": { "enumDescriptions": [ "TCA restrictions are not specified, defaulting to RESTRICTIONS_DISABLED.", "TCA restrictions are disabled for the instance.", "V1 version of TCA restrictions are enabled for the instance. These include: 1. ActionIsolation to be ENFORCED. 2. ImmutableMetaPolicy to be true. 3. AdminOpsRestrictions to be RESTRICTED. 4. Using Shielded, Confidential and Software Trusted VMs as RBE workers, which use custom RBE TCA COS VM images and go through TPM attestation verification for various boot parameters. 5. Inputs and outputs of the actions on these VMs requires TPM attestation verification." ], "type": "string", "enum": [ "RESTRICTIONS_UNSPECIFIED", "RESTRICTIONS_DISABLED", "RESTRICTIONS_ENABLED_V1" ], "description": "Optional. If tca_restrictions is ENABLED then the instance will have restrictions needed for building Trusted Core Access (TCA) compliant builds. DO NOT USE: In-Development feature." } } }, "BuildBazelRemoteExecutionV2ExecuteOperationMetadata": { "id": "BuildBazelRemoteExecutionV2ExecuteOperationMetadata", "description": "Metadata about an ongoing execution, which will be contained in the metadata field of the Operation.", "properties": { "actionDigest": { "description": "The digest of the Action being executed.", "$ref": "BuildBazelRemoteExecutionV2Digest" }, "partialExecutionMetadata": { "description": "The client can read this field to view details about the ongoing execution.", "$ref": "BuildBazelRemoteExecutionV2ExecutedActionMetadata" }, "stderrStreamName": { "type": "string", "description": "If set, the client can use this resource name with ByteStream.Read to stream the standard error from the endpoint hosting streamed responses." }, "stage": { "type": "string", "enum": [ "UNKNOWN", "CACHE_CHECK", "QUEUED", "EXECUTING", "COMPLETED" ], "enumDescriptions": [ "Invalid value.", "Checking the result against the cache.", "Currently idle, awaiting a free machine to execute.", "Currently being executed by a worker.", "Finished execution." ], "description": "The current stage of execution." }, "stdoutStreamName": { "description": "If set, the client can use this resource name with ByteStream.Read to stream the standard output from the endpoint hosting streamed responses.", "type": "string" }, "digestFunction": { "description": "The digest function that was used to compute the action digest. If the digest function used is one of BLAKE3, MD5, MURMUR3, SHA1, SHA256, SHA256TREE, SHA384, SHA512, or VSO, the server MAY leave this field unset. In that case the client SHOULD infer the digest function using the length of the action digest hash and the digest functions announced in the server's capabilities.", "enumDescriptions": [ "It is an error for the server to return this value.", "The SHA-256 digest function.", "The SHA-1 digest function.", "The MD5 digest function.", "The Microsoft \"VSO-Hash\" paged SHA256 digest function. See https://github.com/microsoft/BuildXL/blob/master/Documentation/Specs/PagedHash.md .", "The SHA-384 digest function.", "The SHA-512 digest function.", "Murmur3 128-bit digest function, x64 variant. Note that this is not a cryptographic hash function and its collision properties are not strongly guaranteed. See https://github.com/aappleby/smhasher/wiki/MurmurHash3 .", "The SHA-256 digest function, modified to use a Merkle tree for large objects. This permits implementations to store large blobs as a decomposed sequence of 2^j sized chunks, where j \u003e= 10, while being able to validate integrity at the chunk level. Furthermore, on systems that do not offer dedicated instructions for computing SHA-256 hashes (e.g., the Intel SHA and ARMv8 cryptographic extensions), SHA256TREE hashes can be computed more efficiently than plain SHA-256 hashes by using generic SIMD extensions, such as Intel AVX2 or ARM NEON. SHA256TREE hashes are computed as follows: - For blobs that are 1024 bytes or smaller, the hash is computed using the regular SHA-256 digest function. - For blobs that are more than 1024 bytes in size, the hash is computed as follows: 1. The blob is partitioned into a left (leading) and right (trailing) blob. These blobs have lengths m and n respectively, where m = 2^k and 0 \u003c n \u003c= m. 2. Hashes of the left and right blob, Hash(left) and Hash(right) respectively, are computed by recursively applying the SHA256TREE algorithm. 3. A single invocation is made to the SHA-256 block cipher with the following parameters: M = Hash(left) || Hash(right) H = { 0xcbbb9d5d, 0x629a292a, 0x9159015a, 0x152fecd8, 0x67332667, 0x8eb44a87, 0xdb0c2e0d, 0x47b5481d, } The values of H are the leading fractional parts of the square roots of the 9th to the 16th prime number (23 to 53). This differs from plain SHA-256, where the first eight prime numbers (2 to 19) are used, thereby preventing trivial hash collisions between small and large objects. 4. The hash of the full blob can then be obtained by concatenating the outputs of the block cipher: Hash(blob) = a || b || c || d || e || f || g || h Addition of the original values of H, as normally done through the use of the Davies-Meyer structure, is not performed. This isn't necessary, as the block cipher is only invoked once. Test vectors of this digest function can be found in the accompanying sha256tree_test_vectors.txt file.", "The BLAKE3 hash function. See https://github.com/BLAKE3-team/BLAKE3.", "Identical to SHA1, except that \"blob ${sizeBytes}\\0\" is prepended to the blob's contents before hashing, where ${sizeBytes} corresponds to the decimal size of the original blob. This allows hashes of files to be converted from and to the ones used by the Git version control system." ], "type": "string", "enum": [ "UNKNOWN", "SHA256", "SHA1", "MD5", "VSO", "SHA384", "SHA512", "MURMUR3", "SHA256TREE", "BLAKE3", "GITSHA1" ] } }, "type": "object" }, "GoogleDevtoolsRemoteworkersV1test2Blob": { "description": "Describes a blob of binary content with its digest.", "properties": { "digest": { "description": "The digest of the blob. This should be verified by the receiver.", "$ref": "GoogleDevtoolsRemoteworkersV1test2Digest" }, "contents": { "type": "string", "format": "byte", "description": "The contents of the blob." } }, "id": "GoogleDevtoolsRemoteworkersV1test2Blob", "type": "object" }, "BuildBazelRemoteExecutionV2Tree": { "type": "object", "description": "A `Tree` contains all the Directory protos in a single directory Merkle tree, compressed into one message.", "properties": { "root": { "description": "The root directory in the tree.", "$ref": "BuildBazelRemoteExecutionV2Directory" }, "children": { "items": { "$ref": "BuildBazelRemoteExecutionV2Directory" }, "type": "array", "description": "All the child directories: the directories referred to by the root and, recursively, all its children. In order to reconstruct the directory tree, the client must take the digests of each of the child directories and then build up a tree starting from the `root`. Servers SHOULD ensure that these are ordered consistently such that two actions producing equivalent output directories on the same server implementation also produce Tree messages with matching digests." } }, "id": "BuildBazelRemoteExecutionV2Tree" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateAndroidCIInstanceRequest": { "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaCreateAndroidCIInstanceRequest", "description": "The request used for `CreateAndroidCIInstance`.", "properties": { "parent": { "type": "string", "description": "Required. Resource name of the project containing the instance. Format: `projects/[PROJECT_ID]`." }, "vmServiceAccount": { "type": "string", "description": "Optional. Service Account is the service account that will be used to run the VMs." }, "macServiceAccount": { "type": "string", "description": "Optional. Mac Service Account is the service account that will be used to run Mac VMs." }, "billingProjectManagerGroup": { "description": "Optional. Billing Project Manager Group used for changing the billing account of the backend project as we will be bypassing the BE chargeback.", "type": "string" }, "instanceId": { "description": "Required. ID of the created instance. A valid `instance_id` must: be 6-50 characters long, contain only lowercase letters, digits, hyphens and underscores, start with a lowercase letter, and end with a lowercase letter or a digit.", "type": "string" }, "instance": { "description": "Required. Specifies the instance to create. The name in the instance, if specified in the instance, is ignored.", "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaInstance" } }, "type": "object" }, "GoogleDevtoolsRemotebuildbotResourceUsage": { "id": "GoogleDevtoolsRemotebuildbotResourceUsage", "description": "ResourceUsage is the system resource usage of the host machine.", "properties": { "diskUsage": { "$ref": "GoogleDevtoolsRemotebuildbotResourceUsageStat" }, "memoryUsage": { "$ref": "GoogleDevtoolsRemotebuildbotResourceUsageStat" }, "dockerRootDiskUsage": { "$ref": "GoogleDevtoolsRemotebuildbotResourceUsageStat" }, "cpuUsedPercent": { "type": "number", "format": "double" }, "totalDiskIoStats": { "$ref": "GoogleDevtoolsRemotebuildbotResourceUsageIOStats" }, "botState": { "enumDescriptions": [ "", "", "" ], "type": "string", "enum": [ "UNSPECIFIED", "IDLE", "BUSY" ] } }, "type": "object" }, "GoogleDevtoolsRemotebuildexecutionAdminV1alphaDeleteBackendIAMBindingRequest": { "type": "object", "id": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaDeleteBackendIAMBindingRequest", "description": "The request used for `DeleteBackendIAMBinding`.", "properties": { "backendIamBinding": { "$ref": "GoogleDevtoolsRemotebuildexecutionAdminV1alphaBackendIAMBinding", "description": "Required. The backend IAM binding to delete." } } }, "BuildBazelRemoteExecutionV2OutputFile": { "type": "object", "description": "An `OutputFile` is similar to a FileNode, but it is used as an output in an `ActionResult`. It allows a full file path rather than only a name.", "properties": { "path": { "type": "string", "description": "The full path of the file relative to the working directory, including the filename. The path separator is a forward slash `/`. Since this is a relative path, it MUST NOT begin with a leading forward slash." }, "nodeProperties": { "$ref": "BuildBazelRemoteExecutionV2NodeProperties" }, "contents": { "type": "string", "format": "byte", "description": "The contents of the file if inlining was requested. The server SHOULD NOT inline file contents unless requested by the client in the GetActionResultRequest message. The server MAY omit inlining, even if requested, and MUST do so if inlining would cause the response to exceed message size limits. Clients SHOULD NOT populate this field when uploading to the cache." }, "digest": { "description": "The digest of the file's content.", "$ref": "BuildBazelRemoteExecutionV2Digest" }, "isExecutable": { "type": "boolean", "description": "True if file is executable, false otherwise." } }, "id": "BuildBazelRemoteExecutionV2OutputFile" } }, "basePath": "", "ownerName": "Google", "canonicalName": "Remote Build Execution", "name": "remotebuildexecution", "baseUrl": "https://admin-remotebuildexecution.googleapis.com/" }