Sync: sync/e63d533a5

nebius/audit/v2/audit_event_service.proto

@@ -56,6 +56,20 @@ message ListAuditEventRequest {
   // type
   // status
   string filter = 6 [(sensitive) = true];
+
+  // Type of audit event to filter by.
+  EventType event_type = 7;
+}
+
+enum EventType {
+  // Unspecified event type.
+  EVENT_TYPE_UNSPECIFIED = 0;
+
+  // Control plane events.
+  CONTROL_PLANE = 1;
+
+  // Data plane events (S3).
+  DATA_PLANE = 2;
 }
 
 message ListAuditEventResponse {

nebius/compute/v1/image.proto

@@ -36,6 +36,15 @@ message ImageSpec {
   string version = 3 [(field_behavior) = IMMUTABLE];
 
   CPUArchitecture cpu_architecture = 6 [(field_behavior) = IMMUTABLE];
+
+  // human readable name for image family
+  string image_family_human_readable = 7 [(field_behavior) = IMMUTABLE];
+
+  // list of platforms where this image is recommended to use
+  repeated string recommended_platforms = 8 [(field_behavior) = IMMUTABLE];
+
+  // list of platforms where this image is not supported with explanation
+  map<string, string> unsupported_platforms = 9 [(field_behavior) = IMMUTABLE];
 }
 
 message ImageStatus {

nebius/iam/v1/access_key_service.proto

@@ -77,7 +77,7 @@ message ListAccessKeysRequest {
 
   // Specifies the maximum number of items to return in the response.
   // Default value: 10
-  optional int64 page_size = 2;
+  int64 page_size = 2;
 
   // Token for pagination, allowing the retrieval of the next set of results.
   string page_token = 3;

nebius/iam/v1/auth_public_key_service.proto

@@ -49,7 +49,7 @@ message ListAuthPublicKeyRequest {
 
   // Specifies the maximum number of items to return in the response.
   // Default value: 10
-  optional int64 page_size = 2;
+  int64 page_size = 2;
 
   // Token for pagination, allowing the retrieval of the next set of results.
   string page_token = 3;

nebius/iam/v1/federation.proto

@@ -24,7 +24,10 @@ message FederationSpec {
 
   reserved 3;
 
-  bool active = 4;
+  bool active = 4 [
+    deprecated = true,
+    (field_deprecation_details) = { description: "'active' field ignored. Use 'Activate/Deactivate' methods to manage federation state. A newly created federation is always active by default." }
+  ];
 
   oneof settings {
     option (buf.validate.oneof).required = true;
@@ -43,6 +46,16 @@ message SamlSettings {
 }
 
 message FederationStatus {
+  enum State {
+    UNSPECIFIED = 0;
+
+    ACTIVE = 1;
+
+    INACTIVE = 2;
+  }
+
+  State state = 3;
+
   int32 users_count = 1;
 
   int32 certificates_count = 2;

nebius/iam/v1/federation_certificate.proto

@@ -39,6 +39,8 @@ message FederationCertificateStatus {
 
   State state = 1;
 
+  string fingerprint = 2;
+
   string algorithm = 3;
 
   int64 key_size = 4;

nebius/iam/v1/federation_service.proto

@@ -26,6 +26,16 @@ service FederationService {
 
   rpc Update(UpdateFederationRequest) returns (common.v1.Operation);
 
+  // *
+  // Activates an existing federation.
+  // By default, a newly created federation is in the active state.
+  rpc Activate(ActivateFederationRequest) returns (common.v1.Operation);
+
+  // *
+  // Deactivates an existing federation.
+  // When a federation is inactive, all users under it will be unable to authenticate.
+  rpc Deactivate(DeactivateFederationRequest) returns (common.v1.Operation);
+
   rpc Delete(DeleteFederationRequest) returns (common.v1.Operation);
 }
 
@@ -61,7 +71,18 @@ message UpdateFederationRequest {
 
   FederationSpec spec = 2;
 
-  FederationStatus status = 3;
+  FederationStatus status = 3 [
+    deprecated = true,
+    (field_deprecation_details) = { description: "'status' is ignored for update requests." }
+  ];
+}
+
+message ActivateFederationRequest {
+  string federation_id = 1 [(buf.validate.field).required = true];
+}
+
+message DeactivateFederationRequest {
+  string federation_id = 1 [(buf.validate.field).required = true];
 }
 
 message DeleteFederationRequest {

nebius/iam/v1/group_membership_service.proto

@@ -52,7 +52,7 @@ message ListGroupMembershipsRequest {
   string parent_id = 1 [(buf.validate.field).required = true];
 
   // Default value: 10
-  optional int64 page_size = 2;
+  int64 page_size = 2;
 
   string page_token = 3;
 
@@ -64,7 +64,7 @@ message ListMemberOfRequest {
   string subject_id = 1 [(buf.validate.field).required = true];
 
   // Default value: 10
-  optional int64 page_size = 2;
+  int64 page_size = 2;
 
   string page_token = 3;
 

nebius/iam/v1/group_service.proto

@@ -49,7 +49,7 @@ message ListGroupsRequest {
   string parent_id = 1 [(buf.validate.field).required = true];
 
   // Default value: 10
-  optional int64 page_size = 2;
+  int64 page_size = 2;
 
   string page_token = 3;
 

nebius/iam/v1/project_service.proto

@@ -49,7 +49,7 @@ message ListProjectsRequest {
 
   // Specifies the maximum number of items to return in the response.
   // Default value: 10
-  optional int64 page_size = 2;
+  int64 page_size = 2;
 
   // Token for pagination, allowing the retrieval of the next set of results.
   string page_token = 3;

nebius/iam/v1/service_account_service.proto

@@ -51,7 +51,7 @@ message ListServiceAccountRequest {
 
   // Specifies the maximum number of items to return in the response.
   // Default value: 10
-  optional int64 page_size = 2;
+  int64 page_size = 2;
 
   // Token for pagination, allowing the retrieval of the next set of results.
   string page_token = 3;

nebius/iam/v1/static_key.proto

@@ -36,6 +36,8 @@ message StaticKeySpec {
     CONTAINER_REGISTRY = 2;
 
     AI_STUDIO = 3;
+
+    TRACTO = 4;
   }
 }
 

nebius/iam/v1/tenant_service.proto

@@ -25,7 +25,7 @@ message GetTenantRequest {
 message ListTenantsRequest {
   // Specifies the maximum number of items to return in the response.
   // Default value: 10
-  optional int64 page_size = 1;
+  int64 page_size = 1;
 
   // Token for pagination, allowing the retrieval of the next set of results.
   string page_token = 2;

nebius/iam/v1/tenant_user_account.proto

@@ -114,7 +114,7 @@ message TenantUserAccountStatus {
   // once invitation is accepted it looses this reference (and internally gets a reference to their global federated user account)
   string invitation_id = 2;
 
-  // currently can only accept the values: custom, unknown, google, github.
+  // the federation id of the linked user account. Could be empty in a case of a tenant user account belongs to an invitation which wasn't accepted.
   string federation_id = 3;
 
   // user account state can help distinguish case when account is blocked globally

nebius/iam/v1/tenant_user_account_service.proto

@@ -33,7 +33,7 @@ message ListTenantUserAccountsRequest {
 
   // Specifies the maximum number of items to return in the response.
   // Default value: 10
-  optional int64 page_size = 2;
+  int64 page_size = 2;
 
   // Token for pagination, allowing the retrieval of the next set of results.
   string page_token = 3;

nebius/iam/v1/tenant_user_account_with_attributes_service.proto

@@ -28,7 +28,7 @@ message ListTenantUserAccountsWithAttributesRequest {
 
   // Specifies the maximum number of items to return in the response.
   // Default value: 10
-  optional int64 page_size = 2;
+  int64 page_size = 2;
 
   // Token for pagination, allowing the retrieval of the next set of results.
   string page_token = 3;

nebius/storage/v1/bucket.proto

@@ -54,6 +54,22 @@ message BucketSpec {
 
   // Flag to force usage of default_storage_class, ignoring `x-amz-storage-class` header.
   bool force_storage_class = 11;
+
+  // Object audit logging specifies which requests must be logged - none, all or mutational only.
+  ObjectAuditLogging object_audit_logging = 12;
+
+  enum ObjectAuditLogging {
+    OBJECT_AUDIT_LOGGING_UNSPECIFIED = 0;
+
+    // Logging is disabled.
+    NONE = 1;
+
+    // Logging enabled only for mutating requests.
+    MUTATE_ONLY = 2;
+
+    // Logging enabled for all requests.
+    ALL = 3;
+  }
 }
 
 message BucketStatus {