google-apis-cloudkms_v1 0.70.0 → 0.72.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '09b3c751f0d4ad8232809494860642806981bbb959acd47e4b0f9575f239e132'
-  data.tar.gz: 160a0d69e8f22174285e2907795ecb1b9033ab61960f614cdb8188388771d8dc
+  metadata.gz: b45a589ce5b54d9a2454dd8931bd0e29447b7977cabcd14257f6cedefff44af2
+  data.tar.gz: a3c3e543ec7e5b9e3356567cf31a20f84cad3941e95c5c1db965d529a31415ac
 SHA512:
-  metadata.gz: f0dd22421c0fc50ada1f7088c5b9aafe3494d868b0553135a0ab74bfe71fcd8a5635686160a6ec429299f3019421d5e85d5935b424b69f26fabff8d55b189896
-  data.tar.gz: 3ce805d7db6da19d47378ecd85a31c53fa56445bd8b8d2db5ca49956990825bdebff53fc0e76081a3230c931bdefe5e85b3da6d98f9ce5e00ed5927156a9bcba
+  metadata.gz: 841bf4891d81d3ac349f965b7bce9d13e411f5abd747ad1f35dc1ea2f7a9cb78a57b4ef6c5eb9546112447cbabe3d3d0a9f2f2f82d18c72bee2aa6e68931c740
+  data.tar.gz: e29f35e300dacf7696879ea53a078e00729f88e4c2f61c51e975ed23a19aca687782f584145d8968cdaed667576299a4bd7993d16d96dcb8ca0a967db2439e64

data/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Release history for google-apis-cloudkms_v1
 
+### v0.72.0 (2026-03-22)
+
+* Regenerated from discovery document revision 20260312
+
+### v0.71.0 (2026-02-22)
+
+* Regenerated from discovery document revision 20260213
+
 ### v0.70.0 (2026-02-15)
 
 * Regenerated from discovery document revision 20260206

data/lib/google/apis/cloudkms_v1/classes.rb

@@ -772,7 +772,9 @@ module Google
         alias_method :import_only?, :import_only
       
         # A KeyAccessJustificationsPolicy specifies zero or more allowed AccessReason
-        # values for encrypt, decrypt, and sign operations on a CryptoKey.
+        # values for encrypt, decrypt, and sign operations on a CryptoKey or
+        # KeyAccessJustificationsPolicyConfig (the default Key Access Justifications
+        # policy).
         # Corresponds to the JSON property `keyAccessJustificationsPolicy`
         # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicy]
         attr_accessor :key_access_justifications_policy
@@ -1256,6 +1258,14 @@ module Google
       class Digest
         include Google::Apis::Core::Hashable
       
+        # A message digest produced with SHAKE-256, to be used with ML-DSA external-μ
+        # algorithms only. See "message representative" note in section 6.2, algorithm 7
+        # of the FIPS-204 standard: https://doi.org/10.6028/nist.fips.204
+        # Corresponds to the JSON property `externalMu`
+        # NOTE: Values are automatically base64 encoded/decoded in the client library.
+        # @return [String]
+        attr_accessor :external_mu
+      
         # A message digest produced with the SHA-256 algorithm.
         # Corresponds to the JSON property `sha256`
         # NOTE: Values are automatically base64 encoded/decoded in the client library.
@@ -1280,6 +1290,7 @@ module Google
       
         # Update properties of this object
         def update!(**args)
+          @external_mu = args[:external_mu] if args.key?(:external_mu)
           @sha256 = args[:sha256] if args.key?(:sha256)
           @sha384 = args[:sha384] if args.key?(:sha384)
           @sha512 = args[:sha512] if args.key?(:sha512)
@@ -1894,18 +1905,18 @@ module Google
         end
       end
       
-      # The configuration of a protection level for a project's Key Access
+      # Represents the configuration of a protection level for a project's Key Access
       # Justifications enrollment.
       class KeyAccessJustificationsEnrollmentConfig
         include Google::Apis::Core::Hashable
       
-        # Whether the project has KAJ logging enabled.
+        # Indicates whether the project has KAJ logging enabled.
         # Corresponds to the JSON property `auditLogging`
         # @return [Boolean]
         attr_accessor :audit_logging
         alias_method :audit_logging?, :audit_logging
       
-        # Whether the project is enrolled in KAJ policy enforcement.
+        # Indicates whether the project is enrolled in KAJ policy enforcement.
         # Corresponds to the JSON property `policyEnforcement`
         # @return [Boolean]
         attr_accessor :policy_enforcement
@@ -1923,13 +1934,16 @@ module Google
       end
       
       # A KeyAccessJustificationsPolicy specifies zero or more allowed AccessReason
-      # values for encrypt, decrypt, and sign operations on a CryptoKey.
+      # values for encrypt, decrypt, and sign operations on a CryptoKey or
+      # KeyAccessJustificationsPolicyConfig (the default Key Access Justifications
+      # policy).
       class KeyAccessJustificationsPolicy
         include Google::Apis::Core::Hashable
       
-        # The list of allowed reasons for access to a CryptoKey. Zero allowed access
-        # reasons means all encrypt, decrypt, and sign operations for the CryptoKey
-        # associated with this policy will fail.
+        # The list of allowed reasons for access to a CryptoKey. Note that empty
+        # allowed_access_reasons has a different meaning depending on where this message
+        # appears. If this is under KeyAccessJustificationsPolicyConfig, it means allow-
+        # all. If this is under CryptoKey, it means deny-all.
         # Corresponds to the JSON property `allowedAccessReasons`
         # @return [Array<String>]
         attr_accessor :allowed_access_reasons
@@ -1944,18 +1958,21 @@ module Google
         end
       end
       
-      # A singleton configuration for Key Access Justifications policies.
+      # Represents a singleton configuration for Key Access Justifications policies.
       class KeyAccessJustificationsPolicyConfig
         include Google::Apis::Core::Hashable
       
         # A KeyAccessJustificationsPolicy specifies zero or more allowed AccessReason
-        # values for encrypt, decrypt, and sign operations on a CryptoKey.
+        # values for encrypt, decrypt, and sign operations on a CryptoKey or
+        # KeyAccessJustificationsPolicyConfig (the default Key Access Justifications
+        # policy).
         # Corresponds to the JSON property `defaultKeyAccessJustificationPolicy`
         # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicy]
         attr_accessor :default_key_access_justification_policy
       
-        # Identifier. The resource name for this KeyAccessJustificationsPolicyConfig in
-        # the format of "`organizations|folders|projects`/*/kajPolicyConfig".
+        # Identifier. Represents the resource name for this
+        # KeyAccessJustificationsPolicyConfig in the format of "`organizations|folders|
+        # projects`/*/kajPolicyConfig".
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -3717,24 +3734,24 @@ module Google
         end
       end
       
-      # Response message for KeyAccessJustificationsConfig.
+      # Represents a response message for KeyAccessJustificationsConfig.
       # ShowEffectiveKeyAccessJustificationsEnrollmentConfig
       class ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse
         include Google::Apis::Core::Hashable
       
-        # The configuration of a protection level for a project's Key Access
+        # Represents the configuration of a protection level for a project's Key Access
         # Justifications enrollment.
         # Corresponds to the JSON property `externalConfig`
         # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig]
         attr_accessor :external_config
       
-        # The configuration of a protection level for a project's Key Access
+        # Represents the configuration of a protection level for a project's Key Access
         # Justifications enrollment.
         # Corresponds to the JSON property `hardwareConfig`
         # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig]
         attr_accessor :hardware_config
       
-        # The configuration of a protection level for a project's Key Access
+        # Represents the configuration of a protection level for a project's Key Access
         # Justifications enrollment.
         # Corresponds to the JSON property `softwareConfig`
         # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig]
@@ -3752,12 +3769,12 @@ module Google
         end
       end
       
-      # Response message for KeyAccessJustificationsConfig.
+      # Represents a response message for KeyAccessJustificationsConfig.
       # ShowEffectiveKeyAccessJustificationsPolicyConfig.
       class ShowEffectiveKeyAccessJustificationsPolicyConfigResponse
         include Google::Apis::Core::Hashable
       
-        # A singleton configuration for Key Access Justifications policies.
+        # Represents a singleton configuration for Key Access Justifications policies.
         # Corresponds to the JSON property `effectiveKajPolicy`
         # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig]
         attr_accessor :effective_kaj_policy

data/lib/google/apis/cloudkms_v1/gem_version.rb

@@ -16,13 +16,13 @@ module Google
   module Apis
     module CloudkmsV1
       # Version of the google-apis-cloudkms_v1 gem
-      GEM_VERSION = "0.70.0"
+      GEM_VERSION = "0.72.0"
 
       # Version of the code generator used to generate this client
       GENERATOR_VERSION = "0.18.0"
 
       # Revision of the discovery document this client was generated from
-      REVISION = "20260206"
+      REVISION = "20260312"
     end
   end
 end

data/lib/google/apis/cloudkms_v1/representations.rb

@@ -831,6 +831,7 @@ module Google
       class Digest
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
+          property :external_mu, :base64 => true, as: 'externalMu'
           property :sha256, :base64 => true, as: 'sha256'
           property :sha384, :base64 => true, as: 'sha384'
           property :sha512, :base64 => true, as: 'sha512'

data/lib/google/apis/cloudkms_v1/service.rb

@@ -86,7 +86,7 @@ module Google
         # Gets the KeyAccessJustificationsPolicyConfig for a given organization, folder,
         # or project.
         # @param [String] name
-        #   Required. The name of the KeyAccessJustificationsPolicyConfig to get.
+        #   Required. Specifies the name of the KeyAccessJustificationsPolicyConfig to get.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -158,11 +158,12 @@ module Google
         # Updates the KeyAccessJustificationsPolicyConfig for a given organization,
         # folder, or project.
         # @param [String] name
-        #   Identifier. The resource name for this KeyAccessJustificationsPolicyConfig in
-        #   the format of "`organizations|folders|projects`/*/kajPolicyConfig".
+        #   Identifier. Represents the resource name for this
+        #   KeyAccessJustificationsPolicyConfig in the format of "`organizations|folders|
+        #   projects`/*/kajPolicyConfig".
         # @param [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] key_access_justifications_policy_config_object
         # @param [String] update_mask
-        #   Optional. The list of fields to update.
+        #   Optional. Specifies the list of fields to update.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -196,7 +197,7 @@ module Google
         # Gets the KeyAccessJustificationsPolicyConfig for a given organization, folder,
         # or project.
         # @param [String] name
-        #   Required. The name of the KeyAccessJustificationsPolicyConfig to get.
+        #   Required. Specifies the name of the KeyAccessJustificationsPolicyConfig to get.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -227,11 +228,12 @@ module Google
         # Updates the KeyAccessJustificationsPolicyConfig for a given organization,
         # folder, or project.
         # @param [String] name
-        #   Identifier. The resource name for this KeyAccessJustificationsPolicyConfig in
-        #   the format of "`organizations|folders|projects`/*/kajPolicyConfig".
+        #   Identifier. Represents the resource name for this
+        #   KeyAccessJustificationsPolicyConfig in the format of "`organizations|folders|
+        #   projects`/*/kajPolicyConfig".
         # @param [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] key_access_justifications_policy_config_object
         # @param [String] update_mask
-        #   Optional. The list of fields to update.
+        #   Optional. Specifies the list of fields to update.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -296,7 +298,7 @@ module Google
         # Gets the KeyAccessJustificationsPolicyConfig for a given organization, folder,
         # or project.
         # @param [String] name
-        #   Required. The name of the KeyAccessJustificationsPolicyConfig to get.
+        #   Required. Specifies the name of the KeyAccessJustificationsPolicyConfig to get.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -359,7 +361,7 @@ module Google
         # Returns the KeyAccessJustificationsEnrollmentConfig of the resource closest to
         # the given project in hierarchy.
         # @param [String] project
-        #   Required. The number or id of the project to get the effective
+        #   Required. Specifies the number or id of the project to get the effective
         #   KeyAccessJustificationsEnrollmentConfig for.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -391,7 +393,7 @@ module Google
         # Returns the KeyAccessJustificationsPolicyConfig of the resource closest to the
         # given project in hierarchy.
         # @param [String] project
-        #   Required. The number or id of the project to get the effective
+        #   Required. Specifies the number or id of the project to get the effective
         #   KeyAccessJustificationsPolicyConfig. In the format of "projects/`|`"
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -464,11 +466,12 @@ module Google
         # Updates the KeyAccessJustificationsPolicyConfig for a given organization,
         # folder, or project.
         # @param [String] name
-        #   Identifier. The resource name for this KeyAccessJustificationsPolicyConfig in
-        #   the format of "`organizations|folders|projects`/*/kajPolicyConfig".
+        #   Identifier. Represents the resource name for this
+        #   KeyAccessJustificationsPolicyConfig in the format of "`organizations|folders|
+        #   projects`/*/kajPolicyConfig".
         # @param [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] key_access_justifications_policy_config_object
         # @param [String] update_mask
-        #   Optional. The list of fields to update.
+        #   Optional. Specifies the list of fields to update.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: google-apis-cloudkms_v1
 version: !ruby/object:Gem::Version
-  version: 0.70.0
+  version: 0.72.0
 platform: ruby
 authors:
 - Google LLC
@@ -57,7 +57,7 @@ licenses:
 metadata:
   bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
   changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-cloudkms_v1/CHANGELOG.md
-  documentation_uri: https://googleapis.dev/ruby/google-apis-cloudkms_v1/v0.70.0
+  documentation_uri: https://googleapis.dev/ruby/google-apis-cloudkms_v1/v0.72.0
   source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-cloudkms_v1
 rdoc_options: []
 require_paths: