google-apis-cloudkms_v1 0.69.0 → 0.71.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '0070906a6d91adcbdf80ccfff134c8e1c08ffd117a3cff733eaca7e087d99ef0'
-  data.tar.gz: ca496e3029b13a86822ce19e2117eaf4d578436a7094748872a1b4484e87b48b
+  metadata.gz: 4a049071d852dfd4803c66f5fd5630ab5ced0ecf42cdbe2b842645ae8d9d8e5f
+  data.tar.gz: 822674cb26dbf1ce71eed8bb406545d45ad17a4cc1403f1b592f24b422e19804
 SHA512:
-  metadata.gz: 38c6a4cf830d245abb583951c943afbb77bad92e86cd67e8488a16b17acaf306ae800f822704a54d5c3a8ed23ed6f4fe55fe8c562d935a638e2e718a54a2ce46
-  data.tar.gz: 3e2281920216d4b5483f8cbd9b987245df037af2a6d6426d051deb5f1120262b1732bfbdf405ddeac59e8a001e8bf232ee3525f53764385ac6bd03743afd8692
+  metadata.gz: cb0b17657c333dc1492e539175bccc50b80a8b134c88cedf00d986213ec03f2aa92633a89c66f179b0c2d5c659210fad766d21e0ac9bf86da96aba976349ffc3
+  data.tar.gz: c154d285059b62b7e28383f3d2fc459ffae2f6b4c1170d41ede8d0789897b9572ff436cb2bad90b89838a31b3cfc76bd81abf5f3fa45628a93d502d8f2c6291d

data/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Release history for google-apis-cloudkms_v1
 
+### v0.71.0 (2026-02-22)
+
+* Regenerated from discovery document revision 20260213
+
+### v0.70.0 (2026-02-15)
+
+* Regenerated from discovery document revision 20260206
+
 ### v0.69.0 (2026-02-08)
 
 * Regenerated from discovery document revision 20260123

data/lib/google/apis/cloudkms_v1/classes.rb

@@ -410,7 +410,7 @@ module Google
         attr_accessor :key_project_resolution_mode
       
         # Identifier. Name of the AutokeyConfig resource, e.g. `folders/`FOLDER_NUMBER`/
-        # autokeyConfig`
+        # autokeyConfig` or `projects/`PROJECT_NUMBER`/autokeyConfig`.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -1256,6 +1256,14 @@ module Google
       class Digest
         include Google::Apis::Core::Hashable
       
+        # A message digest produced with SHAKE-256, to be used with ML-DSA external-μ
+        # algorithms only. See "message representative" note in section 6.2, algorithm 7
+        # of the FIPS-204 standard: https://doi.org/10.6028/nist.fips.204
+        # Corresponds to the JSON property `externalMu`
+        # NOTE: Values are automatically base64 encoded/decoded in the client library.
+        # @return [String]
+        attr_accessor :external_mu
+      
         # A message digest produced with the SHA-256 algorithm.
         # Corresponds to the JSON property `sha256`
         # NOTE: Values are automatically base64 encoded/decoded in the client library.
@@ -1280,6 +1288,7 @@ module Google
       
         # Update properties of this object
         def update!(**args)
+          @external_mu = args[:external_mu] if args.key?(:external_mu)
           @sha256 = args[:sha256] if args.key?(:sha256)
           @sha384 = args[:sha384] if args.key?(:sha384)
           @sha512 = args[:sha512] if args.key?(:sha512)
@@ -2290,6 +2299,38 @@ module Google
         end
       end
       
+      # Response message for KeyManagementService.ListRetiredResources.
+      class ListRetiredResourcesResponse
+        include Google::Apis::Core::Hashable
+      
+        # A token to retrieve the next page of results. Pass this value in
+        # ListRetiredResourcesRequest.page_token to retrieve the next page of results.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        # The list of RetiredResources.
+        # Corresponds to the JSON property `retiredResources`
+        # @return [Array<Google::Apis::CloudkmsV1::RetiredResource>]
+        attr_accessor :retired_resources
+      
+        # The total number of RetiredResources that matched the query.
+        # Corresponds to the JSON property `totalSize`
+        # @return [Fixnum]
+        attr_accessor :total_size
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+          @retired_resources = args[:retired_resources] if args.key?(:retired_resources)
+          @total_size = args[:total_size] if args.key?(:total_size)
+        end
+      end
+      
       # Response message for HsmManagement.ListSingleTenantHsmInstanceProposals.
       class ListSingleTenantHsmInstanceProposalsResponse
         include Google::Apis::Core::Hashable
@@ -3526,6 +3567,48 @@ module Google
         end
       end
       
+      # A RetiredResource resource represents the record of a deleted CryptoKey. Its
+      # purpose is to provide visibility into retained user data and to prevent reuse
+      # of these names for new CryptoKeys.
+      class RetiredResource
+        include Google::Apis::Core::Hashable
+      
+        # Output only. The time at which the original resource was deleted and this
+        # RetiredResource record was created.
+        # Corresponds to the JSON property `deleteTime`
+        # @return [String]
+        attr_accessor :delete_time
+      
+        # Output only. Identifier. The resource name for this RetiredResource in the
+        # format `projects/*/locations/*/retiredResources/*`.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # Output only. The full resource name of the original CryptoKey that was deleted
+        # in the format `projects/*/locations/*/keyRings/*/cryptoKeys/*`.
+        # Corresponds to the JSON property `originalResource`
+        # @return [String]
+        attr_accessor :original_resource
+      
+        # Output only. The resource type of the original deleted resource.
+        # Corresponds to the JSON property `resourceType`
+        # @return [String]
+        attr_accessor :resource_type
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @delete_time = args[:delete_time] if args.key?(:delete_time)
+          @name = args[:name] if args.key?(:name)
+          @original_resource = args[:original_resource] if args.key?(:original_resource)
+          @resource_type = args[:resource_type] if args.key?(:resource_type)
+        end
+      end
+      
       # A ServiceResolver represents an EKM replica that can be reached within an
       # EkmConnection.
       class ServiceResolver

data/lib/google/apis/cloudkms_v1/gem_version.rb

@@ -16,13 +16,13 @@ module Google
   module Apis
     module CloudkmsV1
       # Version of the google-apis-cloudkms_v1 gem
-      GEM_VERSION = "0.69.0"
+      GEM_VERSION = "0.71.0"
 
       # Version of the code generator used to generate this client
       GENERATOR_VERSION = "0.18.0"
 
       # Revision of the discovery document this client was generated from
-      REVISION = "20260123"
+      REVISION = "20260213"
     end
   end
 end

data/lib/google/apis/cloudkms_v1/representations.rb

@@ -340,6 +340,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class ListRetiredResourcesResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class ListSingleTenantHsmInstanceProposalsResponse
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -484,6 +490,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class RetiredResource
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class ServiceResolver
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -819,6 +831,7 @@ module Google
       class Digest
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
+          property :external_mu, :base64 => true, as: 'externalMu'
           property :sha256, :base64 => true, as: 'sha256'
           property :sha384, :base64 => true, as: 'sha384'
           property :sha512, :base64 => true, as: 'sha512'
@@ -1075,6 +1088,16 @@ module Google
         end
       end
       
+      class ListRetiredResourcesResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :next_page_token, as: 'nextPageToken'
+          collection :retired_resources, as: 'retiredResources', class: Google::Apis::CloudkmsV1::RetiredResource, decorator: Google::Apis::CloudkmsV1::RetiredResource::Representation
+      
+          property :total_size, :numeric_string => true, as: 'totalSize'
+        end
+      end
+      
       class ListSingleTenantHsmInstanceProposalsResponse
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -1323,6 +1346,16 @@ module Google
         end
       end
       
+      class RetiredResource
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :delete_time, as: 'deleteTime'
+          property :name, as: 'name'
+          property :original_resource, as: 'originalResource'
+          property :resource_type, as: 'resourceType'
+        end
+      end
+      
       class ServiceResolver
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation

data/lib/google/apis/cloudkms_v1/service.rb

@@ -121,7 +121,7 @@ module Google
         # determine where to create the resulting CryptoKey.
         # @param [String] name
         #   Identifier. Name of the AutokeyConfig resource, e.g. `folders/`FOLDER_NUMBER`/
-        #   autokeyConfig`
+        #   autokeyConfig` or `projects/`PROJECT_NUMBER`/autokeyConfig`.
         # @param [Google::Apis::CloudkmsV1::AutokeyConfig] autokey_config_object
         # @param [String] update_mask
         #   Required. Masks which fields of the AutokeyConfig to update, e.g. `keyProject`.
@@ -427,7 +427,7 @@ module Google
         # determine where to create the resulting CryptoKey.
         # @param [String] name
         #   Identifier. Name of the AutokeyConfig resource, e.g. `folders/`FOLDER_NUMBER`/
-        #   autokeyConfig`
+        #   autokeyConfig` or `projects/`PROJECT_NUMBER`/autokeyConfig`.
         # @param [Google::Apis::CloudkmsV1::AutokeyConfig] autokey_config_object
         # @param [String] update_mask
         #   Required. Masks which fields of the AutokeyConfig to update, e.g. `keyProject`.
@@ -594,7 +594,11 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Lists information about the supported locations for this service.
+        # Lists information about the supported locations for this service. This method
+        # can be called in two ways: * **List all public locations:** Use the path `GET /
+        # v1/locations`. * **List project-visible locations:** Use the path `GET /v1/
+        # projects/`project_id`/locations`. This may include public locations as well as
+        # private or other locations specifically visible to the project.
         # @param [String] name
         #   The resource that owns the locations collection, if applicable.
         # @param [Array<String>, String] extra_location_types
@@ -1548,6 +1552,39 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Permanently deletes the given CryptoKey. All child CryptoKeyVersions must have
+        # been previously deleted using KeyManagementService.DeleteCryptoKeyVersion. The
+        # specified crypto key will be immediately and permanently deleted upon calling
+        # this method. This action cannot be undone.
+        # @param [String] name
+        #   Required. The name of the CryptoKey to delete.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def delete_project_location_key_ring_crypto_key(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:delete, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::CloudkmsV1::Operation::Representation
+          command.response_class = Google::Apis::CloudkmsV1::Operation
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Encrypts data, so that it can only be recovered by a call to Decrypt. The
         # CryptoKey.purpose must be ENCRYPT_DECRYPT.
         # @param [String] name
@@ -2000,6 +2037,40 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Permanently deletes the given CryptoKeyVersion. Only possible if the version
+        # has not been previously imported and if its state is one of DESTROYED,
+        # IMPORT_FAILED, or GENERATION_FAILED. Successfully imported CryptoKeyVersions
+        # cannot be deleted at this time. The specified version will be immediately and
+        # permanently deleted upon calling this method. This action cannot be undone.
+        # @param [String] name
+        #   Required. The name of the CryptoKeyVersion to delete.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def delete_project_location_key_ring_crypto_key_crypto_key_version(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:delete, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::CloudkmsV1::Operation::Representation
+          command.response_class = Google::Apis::CloudkmsV1::Operation
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Schedule a CryptoKeyVersion for destruction. Upon calling this method,
         # CryptoKeyVersion.state will be set to DESTROY_SCHEDULED, and destroy_time will
         # be set to the time destroy_scheduled_duration in the future. At that time, the
@@ -2682,6 +2753,79 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Retrieves a specific RetiredResource resource, which represents the record of
+        # a deleted CryptoKey.
+        # @param [String] name
+        #   Required. The name of the RetiredResource to get.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::RetiredResource] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::RetiredResource]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_project_location_retired_resource(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::CloudkmsV1::RetiredResource::Representation
+          command.response_class = Google::Apis::CloudkmsV1::RetiredResource
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Lists the RetiredResources which are the records of deleted CryptoKeys.
+        # RetiredResources prevent the reuse of these resource names after deletion.
+        # @param [String] parent
+        #   Required. The project-specific location holding the RetiredResources, in the
+        #   format `projects/*/locations/*`.
+        # @param [Fixnum] page_size
+        #   Optional. Optional limit on the number of RetiredResources to be included in
+        #   the response. Further RetiredResources can subsequently be obtained by
+        #   including the ListRetiredResourcesResponse.next_page_token in a subsequent
+        #   request. If unspecified, the server will pick an appropriate default.
+        # @param [String] page_token
+        #   Optional. Optional pagination token, returned earlier via
+        #   ListRetiredResourcesResponse.next_page_token.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudkmsV1::ListRetiredResourcesResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudkmsV1::ListRetiredResourcesResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def list_project_location_retired_resources(parent, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+parent}/retiredResources', options)
+          command.response_representation = Google::Apis::CloudkmsV1::ListRetiredResourcesResponse::Representation
+          command.response_class = Google::Apis::CloudkmsV1::ListRetiredResourcesResponse
+          command.params['parent'] = parent unless parent.nil?
+          command.query['pageSize'] = page_size unless page_size.nil?
+          command.query['pageToken'] = page_token unless page_token.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Creates a new SingleTenantHsmInstance in a given Project and Location. User
         # must create a RegisterTwoFactorAuthKeys proposal with this single-tenant HSM
         # instance to finish setup of the instance.

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: google-apis-cloudkms_v1
 version: !ruby/object:Gem::Version
-  version: 0.69.0
+  version: 0.71.0
 platform: ruby
 authors:
 - Google LLC
@@ -57,7 +57,7 @@ licenses:
 metadata:
   bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
   changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-cloudkms_v1/CHANGELOG.md
-  documentation_uri: https://googleapis.dev/ruby/google-apis-cloudkms_v1/v0.69.0
+  documentation_uri: https://googleapis.dev/ruby/google-apis-cloudkms_v1/v0.71.0
   source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-cloudkms_v1
 rdoc_options: []
 require_paths: