google-apis-cloudkms_v1 0.45.0 → 0.47.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 68667b0fc842cfd1f0d2d9514d4d5b9ee8c11695ae2846c3b65a676e03800e6c
-  data.tar.gz: 9771689d32414c1fd19bfe33732f2e86cc5e32fa796bc0f2a2018540adb83107
+  metadata.gz: 22c870daebd56b0bfdb4a3f84e63839ccac49765f42e4a4694e767ec21f59226
+  data.tar.gz: 4b9b692401edf68a7d70da7806fe82a54f4c61b052e0fb5784b82a8177d689ba
 SHA512:
-  metadata.gz: 3dd1595b7d5e5818317704bb3b8dc7b753d40cff59fe535318c30f6a170de83d840726dfe40c09f8060fff44b9f8c0037316e785c719696cb70f1993db243aed
-  data.tar.gz: d152f860cf55f7e5e165ca1df5e0236da86a8591567e1aecf61b0f70b39b5cba5d129488aeb11af2e33189ed4a76f861e08db00a96c537b50afb7b3bae98a2fc
+  metadata.gz: 3a59a755ce4465624f6129c9fbb691f2114a38230692955c866dd82d383dd994e271a3681db42c6780ff545e0f0eaa89c317bc6c4e0b17625caababb1ea11a81
+  data.tar.gz: ad6257e0aa7d08c4c6d8e5461580599495eac8a8fdcbbe949f56e6b37f019c16d6080c322a03af177d85522d3482097cda625700b8efcac1f211e43b5f6b2dbd

data/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Release history for google-apis-cloudkms_v1
 
+### v0.47.0 (2024-05-05)
+
+* Regenerated from discovery document revision 20240425
+
+### v0.46.0 (2024-03-31)
+
+* Regenerated from discovery document revision 20240314
+
 ### v0.45.0 (2024-02-23)
 
 * Regenerated from discovery document revision 20240219

data/lib/google/apis/cloudkms_v1/classes.rb

@@ -319,6 +319,38 @@ module Google
         end
       end
       
+      # Cloud KMS Autokey configuration for a folder.
+      class AutokeyConfig
+        include Google::Apis::Core::Hashable
+      
+        # Optional. Name of the key project, e.g. `projects/`PROJECT_ID`` or `projects/`
+        # PROJECT_NUMBER``, where Cloud KMS Autokey will provision new CryptoKeys. On
+        # UpdateAutokeyConfig, the caller will require `cloudkms.cryptoKeys.setIamPolicy`
+        # permission on this key project. Once configured, for Cloud KMS Autokey to
+        # function properly, this key project must have the Cloud KMS API activated and
+        # the Cloud KMS Service Agent for this key project must be granted the `cloudkms.
+        # admin` role (or pertinent permissions).
+        # Corresponds to the JSON property `keyProject`
+        # @return [String]
+        attr_accessor :key_project
+      
+        # Identifier. Name of the AutokeyConfig resource, e.g. `folders/`FOLDER_NUMBER`/
+        # autokeyConfig`.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @key_project = args[:key_project] if args.key?(:key_project)
+          @name = args[:name] if args.key?(:name)
+        end
+      end
+      
       # Associates `members`, or principals, with a `role`.
       class Binding
         include Google::Apis::Core::Hashable
@@ -1494,6 +1526,43 @@ module Google
         end
       end
       
+      # Resource-oriented representation of a request to Cloud KMS Autokey and the
+      # resulting provisioning of a CryptoKey.
+      class KeyHandle
+        include Google::Apis::Core::Hashable
+      
+        # Output only. Name of a CryptoKey that has been provisioned for Customer
+        # Managed Encryption Key (CMEK) use in the KeyHandle's project and location for
+        # the requested resource type.
+        # Corresponds to the JSON property `kmsKey`
+        # @return [String]
+        attr_accessor :kms_key
+      
+        # Output only. Identifier. Name of the [KeyHandle] resource, e.g. `projects/`
+        # PROJECT_ID`/locations/`LOCATION`/keyHandles/`KEY_HANDLE_ID``.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # Required. Indicates the resource type that the resulting CryptoKey is meant to
+        # protect, e.g. ``SERVICE`.googleapis.com/`TYPE``. See documentation for
+        # supported resource types.
+        # Corresponds to the JSON property `resourceTypeSelector`
+        # @return [String]
+        attr_accessor :resource_type_selector
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @kms_key = args[:kms_key] if args.key?(:kms_key)
+          @name = args[:name] if args.key?(:name)
+          @resource_type_selector = args[:resource_type_selector] if args.key?(:resource_type_selector)
+        end
+      end
+      
       # Contains an HSM-generated attestation about a key operation. For more
       # information, see [Verifying attestations] (https://cloud.google.com/kms/docs/
       # attest-key).
@@ -1685,6 +1754,25 @@ module Google
         end
       end
       
+      # Response message for Autokey.ListKeyHandles.
+      class ListKeyHandlesResponse
+        include Google::Apis::Core::Hashable
+      
+        # Resulting KeyHandles.
+        # Corresponds to the JSON property `keyHandles`
+        # @return [Array<Google::Apis::CloudkmsV1::KeyHandle>]
+        attr_accessor :key_handles
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @key_handles = args[:key_handles] if args.key?(:key_handles)
+        end
+      end
+      
       # Response message for KeyManagementService.ListKeyRings.
       class ListKeyRingsResponse
         include Google::Apis::Core::Hashable
@@ -2044,6 +2132,68 @@ module Google
         end
       end
       
+      # This resource represents a long-running operation that is the result of a
+      # network API call.
+      class Operation
+        include Google::Apis::Core::Hashable
+      
+        # If the value is `false`, it means the operation is still in progress. If `true`
+        # , the operation is completed, and either `error` or `response` is available.
+        # Corresponds to the JSON property `done`
+        # @return [Boolean]
+        attr_accessor :done
+        alias_method :done?, :done
+      
+        # The `Status` type defines a logical error model that is suitable for different
+        # programming environments, including REST APIs and RPC APIs. It is used by [
+        # gRPC](https://github.com/grpc). Each `Status` message contains three pieces of
+        # data: error code, error message, and error details. You can find out more
+        # about this error model and how to work with it in the [API Design Guide](https:
+        # //cloud.google.com/apis/design/errors).
+        # Corresponds to the JSON property `error`
+        # @return [Google::Apis::CloudkmsV1::Status]
+        attr_accessor :error
+      
+        # Service-specific metadata associated with the operation. It typically contains
+        # progress information and common metadata such as create time. Some services
+        # might not provide such metadata. Any method that returns a long-running
+        # operation should document the metadata type, if any.
+        # Corresponds to the JSON property `metadata`
+        # @return [Hash<String,Object>]
+        attr_accessor :metadata
+      
+        # The server-assigned name, which is only unique within the same service that
+        # originally returns it. If you use the default HTTP mapping, the `name` should
+        # be a resource name ending with `operations/`unique_id``.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # The normal, successful response of the operation. If the original method
+        # returns no data on success, such as `Delete`, the response is `google.protobuf.
+        # Empty`. If the original method is standard `Get`/`Create`/`Update`, the
+        # response should be the resource. For other methods, the response should have
+        # the type `XxxResponse`, where `Xxx` is the original method name. For example,
+        # if the original method name is `TakeSnapshot()`, the inferred response type is
+        # `TakeSnapshotResponse`.
+        # Corresponds to the JSON property `response`
+        # @return [Hash<String,Object>]
+        attr_accessor :response
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @done = args[:done] if args.key?(:done)
+          @error = args[:error] if args.key?(:error)
+          @metadata = args[:metadata] if args.key?(:metadata)
+          @name = args[:name] if args.key?(:name)
+          @response = args[:response] if args.key?(:response)
+        end
+      end
+      
       # An Identity and Access Management (IAM) policy, which specifies access
       # controls for Google Cloud resources. A `Policy` is a collection of `bindings`.
       # A `binding` binds one or more `members`, or principals, to a single `role`.
@@ -2154,25 +2304,24 @@ module Google
         # @return [String]
         attr_accessor :name
       
-        # A public key encoded in PEM format, populated only when GetPublicKey returns
-        # one key. For more information, see the [RFC 7468](https://tools.ietf.org/html/
-        # rfc7468) sections for [General Considerations](https://tools.ietf.org/html/
-        # rfc7468#section-2) and [Textual Encoding of Subject Public Key Info] (https://
-        # tools.ietf.org/html/rfc7468#section-13).
+        # The public key, encoded in PEM format. For more information, see the [RFC 7468]
+        # (https://tools.ietf.org/html/rfc7468) sections for [General Considerations](
+        # https://tools.ietf.org/html/rfc7468#section-2) and [Textual Encoding of
+        # Subject Public Key Info] (https://tools.ietf.org/html/rfc7468#section-13).
         # Corresponds to the JSON property `pem`
         # @return [String]
         attr_accessor :pem
       
-        # Integrity verification field: A CRC32C checksum of the returned PublicKey.pem.
-        # It is only populated when GetPublicKey returns one key. An integrity check of
-        # PublicKey.pem can be performed by computing the CRC32C checksum of PublicKey.
-        # pem and comparing your results to this field. Discard the response in case of
-        # non-matching checksum values, and perform a limited number of retries. A
-        # persistent mismatch may indicate an issue in your computation of the CRC32C
-        # checksum. Note: This field is defined as int64 for reasons of compatibility
-        # across different languages. However, it is a non-negative integer, which will
-        # never exceed 2^32-1, and can be safely downconverted to uint32 in languages
-        # that support this type. NOTE: This field is in Beta.
+        # Integrity verification field. A CRC32C checksum of the returned PublicKey.pem.
+        # An integrity check of PublicKey.pem can be performed by computing the CRC32C
+        # checksum of PublicKey.pem and comparing your results to this field. Discard
+        # the response in case of non-matching checksum values, and perform a limited
+        # number of retries. A persistent mismatch may indicate an issue in your
+        # computation of the CRC32C checksum. Note: This field is defined as int64 for
+        # reasons of compatibility across different languages. However, it is a non-
+        # negative integer, which will never exceed 2^32-1, and can be safely
+        # downconverted to uint32 in languages that support this type. NOTE: This field
+        # is in Beta.
         # Corresponds to the JSON property `pemCrc32c`
         # @return [Fixnum]
         attr_accessor :pem_crc32c
@@ -2695,6 +2844,64 @@ module Google
         end
       end
       
+      # Response message for ShowEffectiveAutokeyConfig.
+      class ShowEffectiveAutokeyConfigResponse
+        include Google::Apis::Core::Hashable
+      
+        # Name of the key project configured in the resource project's folder ancestry.
+        # Corresponds to the JSON property `keyProject`
+        # @return [String]
+        attr_accessor :key_project
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @key_project = args[:key_project] if args.key?(:key_project)
+        end
+      end
+      
+      # The `Status` type defines a logical error model that is suitable for different
+      # programming environments, including REST APIs and RPC APIs. It is used by [
+      # gRPC](https://github.com/grpc). Each `Status` message contains three pieces of
+      # data: error code, error message, and error details. You can find out more
+      # about this error model and how to work with it in the [API Design Guide](https:
+      # //cloud.google.com/apis/design/errors).
+      class Status
+        include Google::Apis::Core::Hashable
+      
+        # The status code, which should be an enum value of google.rpc.Code.
+        # Corresponds to the JSON property `code`
+        # @return [Fixnum]
+        attr_accessor :code
+      
+        # A list of messages that carry the error details. There is a common set of
+        # message types for APIs to use.
+        # Corresponds to the JSON property `details`
+        # @return [Array<Hash<String,Object>>]
+        attr_accessor :details
+      
+        # A developer-facing error message, which should be in English. Any user-facing
+        # error message should be localized and sent in the google.rpc.Status.details
+        # field, or localized by the client.
+        # Corresponds to the JSON property `message`
+        # @return [String]
+        attr_accessor :message
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @code = args[:code] if args.key?(:code)
+          @details = args[:details] if args.key?(:details)
+          @message = args[:message] if args.key?(:message)
+        end
+      end
+      
       # Request message for `TestIamPermissions` method.
       class TestIamPermissionsRequest
         include Google::Apis::Core::Hashable

data/lib/google/apis/cloudkms_v1/gem_version.rb

@@ -16,13 +16,13 @@ module Google
   module Apis
     module CloudkmsV1
       # Version of the google-apis-cloudkms_v1 gem
-      GEM_VERSION = "0.45.0"
+      GEM_VERSION = "0.47.0"
 
       # Version of the code generator used to generate this client
       GENERATOR_VERSION = "0.14.0"
 
       # Revision of the discovery document this client was generated from
-      REVISION = "20240219"
+      REVISION = "20240425"
     end
   end
 end

data/lib/google/apis/cloudkms_v1/representations.rb

@@ -58,6 +58,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class AutokeyConfig
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Binding
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -178,6 +184,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class KeyHandle
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class KeyOperationAttestation
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -214,6 +226,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class ListKeyHandlesResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class ListKeyRingsResponse
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -262,6 +280,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class Operation
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Policy
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -316,6 +340,18 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class ShowEffectiveAutokeyConfigResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class Status
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class TestIamPermissionsRequest
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -404,6 +440,14 @@ module Google
         end
       end
       
+      class AutokeyConfig
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :key_project, as: 'keyProject'
+          property :name, as: 'name'
+        end
+      end
+      
       class Binding
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -630,6 +674,15 @@ module Google
         end
       end
       
+      class KeyHandle
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :kms_key, as: 'kmsKey'
+          property :name, as: 'name'
+          property :resource_type_selector, as: 'resourceTypeSelector'
+        end
+      end
+      
       class KeyOperationAttestation
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -688,6 +741,14 @@ module Google
         end
       end
       
+      class ListKeyHandlesResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :key_handles, as: 'keyHandles', class: Google::Apis::CloudkmsV1::KeyHandle, decorator: Google::Apis::CloudkmsV1::KeyHandle::Representation
+      
+        end
+      end
+      
       class ListKeyRingsResponse
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -767,6 +828,18 @@ module Google
         end
       end
       
+      class Operation
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :done, as: 'done'
+          property :error, as: 'error', class: Google::Apis::CloudkmsV1::Status, decorator: Google::Apis::CloudkmsV1::Status::Representation
+      
+          hash :metadata, as: 'metadata'
+          property :name, as: 'name'
+          hash :response, as: 'response'
+        end
+      end
+      
       class Policy
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -869,6 +942,22 @@ module Google
         end
       end
       
+      class ShowEffectiveAutokeyConfigResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :key_project, as: 'keyProject'
+        end
+      end
+      
+      class Status
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :code, as: 'code'
+          collection :details, as: 'details'
+          property :message, as: 'message'
+        end
+      end
+      
       class TestIamPermissionsRequest
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation

data/lib/google/apis/cloudkms_v1/service.rb

@@ -52,6 +52,109 @@ module Google
           @batch_path = 'batch'
         end
         
+        # Returns the AutokeyConfig for a folder.
+        # @param [String] name
+        #   Required. Name of the AutokeyConfig resource, e.g. `folders/`FOLDER_NUMBER`/
+        #   autokeyConfig`.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::AutokeyConfig] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::AutokeyConfig]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_folder_autokey_config(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::CloudkmsV1::AutokeyConfig::Representation
+          command.response_class = Google::Apis::CloudkmsV1::AutokeyConfig
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Updates the AutokeyConfig for a folder. The caller must have both `cloudkms.
+        # autokeyConfigs.update` permission on the parent folder and `cloudkms.
+        # cryptoKeys.setIamPolicy` permission on the provided key project. An empty key
+        # project may be provided to clear the configuration.
+        # @param [String] name
+        #   Identifier. Name of the AutokeyConfig resource, e.g. `folders/`FOLDER_NUMBER`/
+        #   autokeyConfig`.
+        # @param [Google::Apis::CloudkmsV1::AutokeyConfig] autokey_config_object
+        # @param [String] update_mask
+        #   Required. Masks which fields of the AutokeyConfig to update, e.g. `keyProject`.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::AutokeyConfig] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::AutokeyConfig]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def update_folder_autokey_config(name, autokey_config_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:patch, 'v1/{+name}', options)
+          command.request_representation = Google::Apis::CloudkmsV1::AutokeyConfig::Representation
+          command.request_object = autokey_config_object
+          command.response_representation = Google::Apis::CloudkmsV1::AutokeyConfig::Representation
+          command.response_class = Google::Apis::CloudkmsV1::AutokeyConfig
+          command.params['name'] = name unless name.nil?
+          command.query['updateMask'] = update_mask unless update_mask.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Returns the effective Cloud KMS Autokey configuration for a given project.
+        # @param [String] parent
+        #   Required. Name of the resource project to the show effective Cloud KMS Autokey
+        #   configuration for. This may be helpful for interrogating the effect of nested
+        #   folder configurations on a given resource project.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::ShowEffectiveAutokeyConfigResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::ShowEffectiveAutokeyConfigResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def show_project_effective_autokey_config(parent, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+parent}:showEffectiveAutokeyConfig', options)
+          command.response_representation = Google::Apis::CloudkmsV1::ShowEffectiveAutokeyConfigResponse::Representation
+          command.response_class = Google::Apis::CloudkmsV1::ShowEffectiveAutokeyConfigResponse
+          command.params['parent'] = parent unless parent.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Generate random bytes using the Cloud KMS randomness source in the provided
         # location.
         # @param [String] location
@@ -660,6 +763,113 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Creates a new KeyHandle, triggering the provisioning of a new CryptoKey for
+        # CMEK use with the given resource type in the configured key project and the
+        # same location. GetOperation should be used to resolve the resulting long-
+        # running operation and get the resulting KeyHandle and CryptoKey.
+        # @param [String] parent
+        #   Required. Name of the resource project and location to create the KeyHandle in,
+        #   e.g. `projects/`PROJECT_ID`/locations/`LOCATION``.
+        # @param [Google::Apis::CloudkmsV1::KeyHandle] key_handle_object
+        # @param [String] key_handle_id
+        #   Optional. Id of the KeyHandle. Must be unique to the resource project and
+        #   location. If not provided by the caller, a new UUID is used.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def create_project_location_key_handle(parent, key_handle_object = nil, key_handle_id: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+parent}/keyHandles', options)
+          command.request_representation = Google::Apis::CloudkmsV1::KeyHandle::Representation
+          command.request_object = key_handle_object
+          command.response_representation = Google::Apis::CloudkmsV1::Operation::Representation
+          command.response_class = Google::Apis::CloudkmsV1::Operation
+          command.params['parent'] = parent unless parent.nil?
+          command.query['keyHandleId'] = key_handle_id unless key_handle_id.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Returns the KeyHandle.
+        # @param [String] name
+        #   Required. Name of the KeyHandle resource, e.g. `projects/`PROJECT_ID`/
+        #   locations/`LOCATION`/keyHandles/`KEY_HANDLE_ID``.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::KeyHandle] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::KeyHandle]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_project_location_key_handle(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::CloudkmsV1::KeyHandle::Representation
+          command.response_class = Google::Apis::CloudkmsV1::KeyHandle
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Lists KeyHandles.
+        # @param [String] parent
+        #   Required. Name of the resource project and location from which to list
+        #   KeyHandles, e.g. `projects/`PROJECT_ID`/locations/`LOCATION``.
+        # @param [String] filter
+        #   Optional. Filter to apply when listing KeyHandles, e.g. `
+        #   resource_type_selector="`SERVICE`.googleapis.com/`TYPE`"`.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::ListKeyHandlesResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::ListKeyHandlesResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def list_project_location_key_handles(parent, filter: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+parent}/keyHandles', options)
+          command.response_representation = Google::Apis::CloudkmsV1::ListKeyHandlesResponse::Representation
+          command.response_class = Google::Apis::CloudkmsV1::ListKeyHandlesResponse
+          command.params['parent'] = parent unless parent.nil?
+          command.query['filter'] = filter unless filter.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Create a new KeyRing in a given Project and Location.
         # @param [String] parent
         #   Required. The resource name of the location associated with the KeyRings, in
@@ -2039,6 +2249,37 @@ module Google
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
+        
+        # Gets the latest state of a long-running operation. Clients can use this method
+        # to poll the operation result at intervals as recommended by the API service.
+        # @param [String] name
+        #   The name of the operation resource.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_project_location_operation(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::CloudkmsV1::Operation::Representation
+          command.response_class = Google::Apis::CloudkmsV1::Operation
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
 
         protected
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-apis-cloudkms_v1
 version: !ruby/object:Gem::Version
-  version: 0.45.0
+  version: 0.47.0
 platform: ruby
 authors:
 - Google LLC
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-02-25 00:00:00.000000000 Z
+date: 2024-05-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: google-apis-core
@@ -58,7 +58,7 @@ licenses:
 metadata:
   bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
   changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-cloudkms_v1/CHANGELOG.md
-  documentation_uri: https://googleapis.dev/ruby/google-apis-cloudkms_v1/v0.45.0
+  documentation_uri: https://googleapis.dev/ruby/google-apis-cloudkms_v1/v0.47.0
   source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-cloudkms_v1
 post_install_message: 
 rdoc_options: []