google-apis-cloudkms_v1 0.57.0 → 0.59.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: de987155300fa3d000c71c129589726d003c458bca6cd9a6ca2a271cbfe68e81
-  data.tar.gz: ec86af1053c1ccab8ff2b817a6f7ad10bfac74c1ac880ae457586bee6016eb10
+  metadata.gz: 810c7c0d5eb5a065494d8b5a2f9ca50365197187f9d098141db1f80b67cb776f
+  data.tar.gz: 48d6aa4f97e9b62ce43d51617a761b3a8d70e6bb3cc1022503c80da71f1b141d
 SHA512:
-  metadata.gz: 0e3fc15a0ba420ab2a87f45f5bfad17eb28e3568cfae22b12fa928e68ab497726b688602d0e10d97e87ebd09f1615c807971d5c757f32ab1bc2839161e8cd861
-  data.tar.gz: ba6233ce57bed6cd9ce5a6e9c899c7a59f57dd16d53efe603b97e9dd24b5015cf5c5304e0a76b4b2ace898d59a7dbda2a02e052a5b815e2de538d289c8083815
+  metadata.gz: 78bdfda01c6cd2eeb43b4caa85c25fb645d5b7e2a8b4396d884b3fb47bcd181dcb50ee7b8a80481bd30a0b055838c93e7bd73aef32a612305e250754763d8b9c
+  data.tar.gz: 8af3b21a39dd664be72cb149588d193480f250d1697728b2b1726497b9b109c98c6e731241471c86838e13e45d38547e7ca40f034f70877a68a0213d5455dcfd

data/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Release history for google-apis-cloudkms_v1
 
+### v0.59.0 (2025-05-25)
+
+* Regenerated from discovery document revision 20250516
+* Regenerated using generator version 0.18.0
+
+### v0.58.0 (2025-05-18)
+
+* Regenerated from discovery document revision 20250501
+* Regenerated using generator version 0.17.0
+
 ### v0.57.0 (2025-04-27)
 
 * Regenerated from discovery document revision 20250414

data/OVERVIEW.md

@@ -83,7 +83,7 @@ The [product documentation](https://cloud.google.com/kms/) may provide guidance
 
 ## Supported Ruby versions
 
-This library is supported on Ruby 2.7+.
+This library is supported on Ruby 3.1+.
 
 Google provides official support for Ruby versions that are actively supported by Ruby Core -- that is, Ruby versions that are either in normal maintenance or in security maintenance, and not end of life. Older versions of Ruby _may_ still work, but are unsupported and not recommended. See https://www.ruby-lang.org/en/downloads/branches/ for details about the Ruby support schedule.
 

data/lib/google/apis/cloudkms_v1/classes.rb

@@ -323,6 +323,14 @@ module Google
       class AutokeyConfig
         include Google::Apis::Core::Hashable
       
+        # Optional. A checksum computed by the server based on the value of other fields.
+        # This may be sent on update requests to ensure that the client has an up-to-
+        # date value before proceeding. The request will be rejected with an ABORTED
+        # error on a mismatched etag.
+        # Corresponds to the JSON property `etag`
+        # @return [String]
+        attr_accessor :etag
+      
         # Optional. Name of the key project, e.g. `projects/`PROJECT_ID`` or `projects/`
         # PROJECT_NUMBER``, where Cloud KMS Autokey will provision a new CryptoKey when
         # a KeyHandle is created. On UpdateAutokeyConfig, the caller will require `
@@ -352,6 +360,7 @@ module Google
       
         # Update properties of this object
         def update!(**args)
+          @etag = args[:etag] if args.key?(:etag)
           @key_project = args[:key_project] if args.key?(:key_project)
           @name = args[:name] if args.key?(:name)
           @state = args[:state] if args.key?(:state)
@@ -1575,6 +1584,34 @@ module Google
         end
       end
       
+      # The configuration of a protection level for a project's Key Access
+      # Justifications enrollment.
+      class KeyAccessJustificationsEnrollmentConfig
+        include Google::Apis::Core::Hashable
+      
+        # Whether the project has KAJ logging enabled.
+        # Corresponds to the JSON property `auditLogging`
+        # @return [Boolean]
+        attr_accessor :audit_logging
+        alias_method :audit_logging?, :audit_logging
+      
+        # Whether the project is enrolled in KAJ policy enforcement.
+        # Corresponds to the JSON property `policyEnforcement`
+        # @return [Boolean]
+        attr_accessor :policy_enforcement
+        alias_method :policy_enforcement?, :policy_enforcement
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @audit_logging = args[:audit_logging] if args.key?(:audit_logging)
+          @policy_enforcement = args[:policy_enforcement] if args.key?(:policy_enforcement)
+        end
+      end
+      
       # A KeyAccessJustificationsPolicy specifies zero or more allowed AccessReason
       # values for encrypt, decrypt, and sign operations on a CryptoKey.
       class KeyAccessJustificationsPolicy
@@ -1597,6 +1634,33 @@ module Google
         end
       end
       
+      # A singleton configuration for Key Access Justifications policies.
+      class KeyAccessJustificationsPolicyConfig
+        include Google::Apis::Core::Hashable
+      
+        # A KeyAccessJustificationsPolicy specifies zero or more allowed AccessReason
+        # values for encrypt, decrypt, and sign operations on a CryptoKey.
+        # Corresponds to the JSON property `defaultKeyAccessJustificationPolicy`
+        # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicy]
+        attr_accessor :default_key_access_justification_policy
+      
+        # Identifier. The resource name for this KeyAccessJustificationsPolicyConfig in
+        # the format of "`organizations|folders|projects`/*/kajPolicyConfig".
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @default_key_access_justification_policy = args[:default_key_access_justification_policy] if args.key?(:default_key_access_justification_policy)
+          @name = args[:name] if args.key?(:name)
+        end
+      end
+      
       # Resource-oriented representation of a request to Cloud KMS Autokey and the
       # resulting provisioning of a CryptoKey.
       class KeyHandle
@@ -1715,7 +1779,8 @@ module Google
         # @return [String]
         attr_accessor :next_page_token
       
-        # The total number of CryptoKeyVersions that matched the query.
+        # The total number of CryptoKeyVersions that matched the query. This field is
+        # not populated if ListCryptoKeyVersionsRequest.filter is applied.
         # Corresponds to the JSON property `totalSize`
         # @return [Fixnum]
         attr_accessor :total_size
@@ -1747,7 +1812,8 @@ module Google
         # @return [String]
         attr_accessor :next_page_token
       
-        # The total number of CryptoKeys that matched the query.
+        # The total number of CryptoKeys that matched the query. This field is not
+        # populated if ListCryptoKeysRequest.filter is applied.
         # Corresponds to the JSON property `totalSize`
         # @return [Fixnum]
         attr_accessor :total_size
@@ -1779,7 +1845,8 @@ module Google
         # @return [String]
         attr_accessor :next_page_token
       
-        # The total number of EkmConnections that matched the query.
+        # The total number of EkmConnections that matched the query. This field is not
+        # populated if ListEkmConnectionsRequest.filter is applied.
         # Corresponds to the JSON property `totalSize`
         # @return [Fixnum]
         attr_accessor :total_size
@@ -1811,7 +1878,8 @@ module Google
         # @return [String]
         attr_accessor :next_page_token
       
-        # The total number of ImportJobs that matched the query.
+        # The total number of ImportJobs that matched the query. This field is not
+        # populated if ListImportJobsRequest.filter is applied.
         # Corresponds to the JSON property `totalSize`
         # @return [Fixnum]
         attr_accessor :total_size
@@ -1869,7 +1937,8 @@ module Google
         # @return [String]
         attr_accessor :next_page_token
       
-        # The total number of KeyRings that matched the query.
+        # The total number of KeyRings that matched the query. This field is not
+        # populated if ListKeyRingsRequest.filter is applied.
         # Corresponds to the JSON property `totalSize`
         # @return [Fixnum]
         attr_accessor :total_size
@@ -2957,6 +3026,61 @@ module Google
         end
       end
       
+      # Response message for KeyAccessJustificationsConfig.
+      # ShowEffectiveKeyAccessJustificationsEnrollmentConfig
+      class ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse
+        include Google::Apis::Core::Hashable
+      
+        # The configuration of a protection level for a project's Key Access
+        # Justifications enrollment.
+        # Corresponds to the JSON property `externalConfig`
+        # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig]
+        attr_accessor :external_config
+      
+        # The configuration of a protection level for a project's Key Access
+        # Justifications enrollment.
+        # Corresponds to the JSON property `hardwareConfig`
+        # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig]
+        attr_accessor :hardware_config
+      
+        # The configuration of a protection level for a project's Key Access
+        # Justifications enrollment.
+        # Corresponds to the JSON property `softwareConfig`
+        # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig]
+        attr_accessor :software_config
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @external_config = args[:external_config] if args.key?(:external_config)
+          @hardware_config = args[:hardware_config] if args.key?(:hardware_config)
+          @software_config = args[:software_config] if args.key?(:software_config)
+        end
+      end
+      
+      # Response message for KeyAccessJustificationsConfig.
+      # ShowEffectiveKeyAccessJustificationsPolicyConfig.
+      class ShowEffectiveKeyAccessJustificationsPolicyConfigResponse
+        include Google::Apis::Core::Hashable
+      
+        # A singleton configuration for Key Access Justifications policies.
+        # Corresponds to the JSON property `effectiveKajPolicy`
+        # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig]
+        attr_accessor :effective_kaj_policy
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @effective_kaj_policy = args[:effective_kaj_policy] if args.key?(:effective_kaj_policy)
+        end
+      end
+      
       # The `Status` type defines a logical error model that is suitable for different
       # programming environments, including REST APIs and RPC APIs. It is used by [
       # gRPC](https://github.com/grpc). Each `Status` message contains three pieces of

data/lib/google/apis/cloudkms_v1/gem_version.rb

@@ -16,13 +16,13 @@ module Google
   module Apis
     module CloudkmsV1
       # Version of the google-apis-cloudkms_v1 gem
-      GEM_VERSION = "0.57.0"
+      GEM_VERSION = "0.59.0"
 
       # Version of the code generator used to generate this client
-      GENERATOR_VERSION = "0.16.0"
+      GENERATOR_VERSION = "0.18.0"
 
       # Revision of the discovery document this client was generated from
-      REVISION = "20250414"
+      REVISION = "20250516"
     end
   end
 end

data/lib/google/apis/cloudkms_v1/representations.rb

@@ -190,12 +190,24 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class KeyAccessJustificationsEnrollmentConfig
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class KeyAccessJustificationsPolicy
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class KeyAccessJustificationsPolicyConfig
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class KeyHandle
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -358,6 +370,18 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class ShowEffectiveKeyAccessJustificationsPolicyConfigResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Status
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -455,6 +479,7 @@ module Google
       class AutokeyConfig
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
+          property :etag, as: 'etag'
           property :key_project, as: 'keyProject'
           property :name, as: 'name'
           property :state, as: 'state'
@@ -697,6 +722,14 @@ module Google
         end
       end
       
+      class KeyAccessJustificationsEnrollmentConfig
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :audit_logging, as: 'auditLogging'
+          property :policy_enforcement, as: 'policyEnforcement'
+        end
+      end
+      
       class KeyAccessJustificationsPolicy
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -704,6 +737,15 @@ module Google
         end
       end
       
+      class KeyAccessJustificationsPolicyConfig
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :default_key_access_justification_policy, as: 'defaultKeyAccessJustificationPolicy', class: Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicy, decorator: Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicy::Representation
+      
+          property :name, as: 'name'
+        end
+      end
+      
       class KeyHandle
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -983,6 +1025,26 @@ module Google
         end
       end
       
+      class ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :external_config, as: 'externalConfig', class: Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig, decorator: Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig::Representation
+      
+          property :hardware_config, as: 'hardwareConfig', class: Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig, decorator: Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig::Representation
+      
+          property :software_config, as: 'softwareConfig', class: Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig, decorator: Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig::Representation
+      
+        end
+      end
+      
+      class ShowEffectiveKeyAccessJustificationsPolicyConfigResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :effective_kaj_policy, as: 'effectiveKajPolicy', class: Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig, decorator: Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig::Representation
+      
+        end
+      end
+      
       class Status
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation

data/lib/google/apis/cloudkms_v1/service.rb

@@ -83,6 +83,37 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Gets the KeyAccessJustificationsPolicyConfig for a given organization/folder/
+        # projects.
+        # @param [String] name
+        #   Required. The name of the KeyAccessJustificationsPolicyConfig to get.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_folder_kaj_policy_config(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig::Representation
+          command.response_class = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Updates the AutokeyConfig for a folder. The caller must have both `cloudkms.
         # autokeyConfigs.update` permission on the parent folder and `cloudkms.
         # cryptoKeys.setIamPolicy` permission on the provided key project. A KeyHandle
@@ -124,6 +155,144 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Updates the KeyAccessJustificationsPolicyConfig for a given organization/
+        # folder/projects.
+        # @param [String] name
+        #   Identifier. The resource name for this KeyAccessJustificationsPolicyConfig in
+        #   the format of "`organizations|folders|projects`/*/kajPolicyConfig".
+        # @param [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] key_access_justifications_policy_config_object
+        # @param [String] update_mask
+        #   Optional. The list of fields to update.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def update_folder_kaj_policy_config(name, key_access_justifications_policy_config_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:patch, 'v1/{+name}', options)
+          command.request_representation = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig::Representation
+          command.request_object = key_access_justifications_policy_config_object
+          command.response_representation = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig::Representation
+          command.response_class = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig
+          command.params['name'] = name unless name.nil?
+          command.query['updateMask'] = update_mask unless update_mask.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Gets the KeyAccessJustificationsPolicyConfig for a given organization/folder/
+        # projects.
+        # @param [String] name
+        #   Required. The name of the KeyAccessJustificationsPolicyConfig to get.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_organization_kaj_policy_config(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig::Representation
+          command.response_class = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Updates the KeyAccessJustificationsPolicyConfig for a given organization/
+        # folder/projects.
+        # @param [String] name
+        #   Identifier. The resource name for this KeyAccessJustificationsPolicyConfig in
+        #   the format of "`organizations|folders|projects`/*/kajPolicyConfig".
+        # @param [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] key_access_justifications_policy_config_object
+        # @param [String] update_mask
+        #   Optional. The list of fields to update.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def update_organization_kaj_policy_config(name, key_access_justifications_policy_config_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:patch, 'v1/{+name}', options)
+          command.request_representation = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig::Representation
+          command.request_object = key_access_justifications_policy_config_object
+          command.response_representation = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig::Representation
+          command.response_class = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig
+          command.params['name'] = name unless name.nil?
+          command.query['updateMask'] = update_mask unless update_mask.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Gets the KeyAccessJustificationsPolicyConfig for a given organization/folder/
+        # projects.
+        # @param [String] name
+        #   Required. The name of the KeyAccessJustificationsPolicyConfig to get.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_project_kaj_policy_config(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig::Representation
+          command.response_class = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Returns the effective Cloud KMS Autokey configuration for a given project.
         # @param [String] parent
         #   Required. Name of the resource project to the show effective Cloud KMS Autokey
@@ -156,6 +325,108 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Returns the KeyAccessJustificationsEnrollmentConfig of the resource closest to
+        # the given project in hierarchy.
+        # @param [String] project
+        #   Required. The number or id of the project to get the effective
+        #   KeyAccessJustificationsEnrollmentConfig for.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def show_project_effective_key_access_justifications_enrollment_config(project, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+project}:showEffectiveKeyAccessJustificationsEnrollmentConfig', options)
+          command.response_representation = Google::Apis::CloudkmsV1::ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse::Representation
+          command.response_class = Google::Apis::CloudkmsV1::ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse
+          command.params['project'] = project unless project.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Returns the KeyAccessJustificationsPolicyConfig of the resource closest to the
+        # given project in hierarchy.
+        # @param [String] project
+        #   Required. The number or id of the project to get the effective
+        #   KeyAccessJustificationsPolicyConfig. In the format of "projects/`|`"
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::ShowEffectiveKeyAccessJustificationsPolicyConfigResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::ShowEffectiveKeyAccessJustificationsPolicyConfigResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def show_project_effective_key_access_justifications_policy_config(project, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+project}:showEffectiveKeyAccessJustificationsPolicyConfig', options)
+          command.response_representation = Google::Apis::CloudkmsV1::ShowEffectiveKeyAccessJustificationsPolicyConfigResponse::Representation
+          command.response_class = Google::Apis::CloudkmsV1::ShowEffectiveKeyAccessJustificationsPolicyConfigResponse
+          command.params['project'] = project unless project.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Updates the KeyAccessJustificationsPolicyConfig for a given organization/
+        # folder/projects.
+        # @param [String] name
+        #   Identifier. The resource name for this KeyAccessJustificationsPolicyConfig in
+        #   the format of "`organizations|folders|projects`/*/kajPolicyConfig".
+        # @param [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] key_access_justifications_policy_config_object
+        # @param [String] update_mask
+        #   Optional. The list of fields to update.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def update_project_kaj_policy_config(name, key_access_justifications_policy_config_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:patch, 'v1/{+name}', options)
+          command.request_representation = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig::Representation
+          command.request_object = key_access_justifications_policy_config_object
+          command.response_representation = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig::Representation
+          command.response_class = Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig
+          command.params['name'] = name unless name.nil?
+          command.query['updateMask'] = update_mask unless update_mask.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Generate random bytes using the Cloud KMS randomness source in the provided
         # location.
         # @param [String] location

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: google-apis-cloudkms_v1
 version: !ruby/object:Gem::Version
-  version: 0.57.0
+  version: 0.59.0
 platform: ruby
 authors:
 - Google LLC
 bindir: bin
 cert_chain: []
-date: 2025-04-27 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: google-apis-core
@@ -57,7 +57,7 @@ licenses:
 metadata:
   bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
   changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-cloudkms_v1/CHANGELOG.md
-  documentation_uri: https://googleapis.dev/ruby/google-apis-cloudkms_v1/v0.57.0
+  documentation_uri: https://googleapis.dev/ruby/google-apis-cloudkms_v1/v0.59.0
   source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-cloudkms_v1
 rdoc_options: []
 require_paths:
@@ -66,14 +66,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '2.7'
+      version: '3.1'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.5
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Simple REST client for Cloud Key Management Service (KMS) API V1
 test_files: []