google-apis-cloudkms_v1 0.71.0 → 0.73.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4a049071d852dfd4803c66f5fd5630ab5ced0ecf42cdbe2b842645ae8d9d8e5f
-  data.tar.gz: 822674cb26dbf1ce71eed8bb406545d45ad17a4cc1403f1b592f24b422e19804
+  metadata.gz: a5ba4907b89b833755ba0ad17c4e78b0c6684a07dbce8ab7bb26acdbfaa3d685
+  data.tar.gz: ab7de249d77b8a9c53aae499cdfa64da551c496a011f63e9b1800aeba876f8ce
 SHA512:
-  metadata.gz: cb0b17657c333dc1492e539175bccc50b80a8b134c88cedf00d986213ec03f2aa92633a89c66f179b0c2d5c659210fad766d21e0ac9bf86da96aba976349ffc3
-  data.tar.gz: c154d285059b62b7e28383f3d2fc459ffae2f6b4c1170d41ede8d0789897b9572ff436cb2bad90b89838a31b3cfc76bd81abf5f3fa45628a93d502d8f2c6291d
+  metadata.gz: 420da4ed0b675fd32ab10ff61535aa86d2a1d804448db435f3d3c62b771ceb5e6ab2406cde225b7679d3390ffda544975481322f9900b3c666cef2d1aa1f702a
+  data.tar.gz: 0ac3ef8fa211116a963f193590b024395516543324cf521c7d3473df50038040ce0abdcc7a7860dc62cde5f42c8c732a66dc885d2b19c880b1e7404a93e5d6aa

data/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Release history for google-apis-cloudkms_v1
 
+### v0.73.0 (2026-04-19)
+
+* Regenerated from discovery document revision 20260409
+
+### v0.72.0 (2026-03-22)
+
+* Regenerated from discovery document revision 20260312
+
 ### v0.71.0 (2026-02-22)
 
 * Regenerated from discovery document revision 20260213

data/lib/google/apis/cloudkms_v1/classes.rb

@@ -772,7 +772,9 @@ module Google
         alias_method :import_only?, :import_only
       
         # A KeyAccessJustificationsPolicy specifies zero or more allowed AccessReason
-        # values for encrypt, decrypt, and sign operations on a CryptoKey.
+        # values for encrypt, decrypt, and sign operations on a CryptoKey or
+        # KeyAccessJustificationsPolicyConfig (the default Key Access Justifications
+        # policy).
         # Corresponds to the JSON property `keyAccessJustificationsPolicy`
         # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicy]
         attr_accessor :key_access_justifications_policy
@@ -1903,18 +1905,18 @@ module Google
         end
       end
       
-      # The configuration of a protection level for a project's Key Access
+      # Represents the configuration of a protection level for a project's Key Access
       # Justifications enrollment.
       class KeyAccessJustificationsEnrollmentConfig
         include Google::Apis::Core::Hashable
       
-        # Whether the project has KAJ logging enabled.
+        # Indicates whether the project has KAJ logging enabled.
         # Corresponds to the JSON property `auditLogging`
         # @return [Boolean]
         attr_accessor :audit_logging
         alias_method :audit_logging?, :audit_logging
       
-        # Whether the project is enrolled in KAJ policy enforcement.
+        # Indicates whether the project is enrolled in KAJ policy enforcement.
         # Corresponds to the JSON property `policyEnforcement`
         # @return [Boolean]
         attr_accessor :policy_enforcement
@@ -1932,13 +1934,16 @@ module Google
       end
       
       # A KeyAccessJustificationsPolicy specifies zero or more allowed AccessReason
-      # values for encrypt, decrypt, and sign operations on a CryptoKey.
+      # values for encrypt, decrypt, and sign operations on a CryptoKey or
+      # KeyAccessJustificationsPolicyConfig (the default Key Access Justifications
+      # policy).
       class KeyAccessJustificationsPolicy
         include Google::Apis::Core::Hashable
       
-        # The list of allowed reasons for access to a CryptoKey. Zero allowed access
-        # reasons means all encrypt, decrypt, and sign operations for the CryptoKey
-        # associated with this policy will fail.
+        # The list of allowed reasons for access to a CryptoKey. Note that empty
+        # allowed_access_reasons has a different meaning depending on where this message
+        # appears. If this is under KeyAccessJustificationsPolicyConfig, it means allow-
+        # all. If this is under CryptoKey, it means deny-all.
         # Corresponds to the JSON property `allowedAccessReasons`
         # @return [Array<String>]
         attr_accessor :allowed_access_reasons
@@ -1953,18 +1958,30 @@ module Google
         end
       end
       
-      # A singleton configuration for Key Access Justifications policies.
+      # Represents a singleton configuration for Key Access Justifications policies.
       class KeyAccessJustificationsPolicyConfig
         include Google::Apis::Core::Hashable
       
         # A KeyAccessJustificationsPolicy specifies zero or more allowed AccessReason
-        # values for encrypt, decrypt, and sign operations on a CryptoKey.
+        # values for encrypt, decrypt, and sign operations on a CryptoKey or
+        # KeyAccessJustificationsPolicyConfig (the default Key Access Justifications
+        # policy).
         # Corresponds to the JSON property `defaultKeyAccessJustificationPolicy`
         # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicy]
         attr_accessor :default_key_access_justification_policy
       
-        # Identifier. The resource name for this KeyAccessJustificationsPolicyConfig in
-        # the format of "`organizations|folders|projects`/*/kajPolicyConfig".
+        # Output only. Indicates whether this parent resource is available to default
+        # policy feature. Please consult [the prerequisite of default policy feature](
+        # https://cloud.google.com/assured-workloads/key-access-justifications/docs/set-
+        # default-policy#before) for more details.
+        # Corresponds to the JSON property `defaultPolicyAvailable`
+        # @return [Boolean]
+        attr_accessor :default_policy_available
+        alias_method :default_policy_available?, :default_policy_available
+      
+        # Identifier. Represents the resource name for this
+        # KeyAccessJustificationsPolicyConfig in the format of "`organizations|folders|
+        # projects`/*/kajPolicyConfig".
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -1976,6 +1993,7 @@ module Google
         # Update properties of this object
         def update!(**args)
           @default_key_access_justification_policy = args[:default_key_access_justification_policy] if args.key?(:default_key_access_justification_policy)
+          @default_policy_available = args[:default_policy_available] if args.key?(:default_policy_available)
           @name = args[:name] if args.key?(:name)
         end
       end
@@ -3726,24 +3744,24 @@ module Google
         end
       end
       
-      # Response message for KeyAccessJustificationsConfig.
+      # Represents a response message for KeyAccessJustificationsConfig.
       # ShowEffectiveKeyAccessJustificationsEnrollmentConfig
       class ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse
         include Google::Apis::Core::Hashable
       
-        # The configuration of a protection level for a project's Key Access
+        # Represents the configuration of a protection level for a project's Key Access
         # Justifications enrollment.
         # Corresponds to the JSON property `externalConfig`
         # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig]
         attr_accessor :external_config
       
-        # The configuration of a protection level for a project's Key Access
+        # Represents the configuration of a protection level for a project's Key Access
         # Justifications enrollment.
         # Corresponds to the JSON property `hardwareConfig`
         # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig]
         attr_accessor :hardware_config
       
-        # The configuration of a protection level for a project's Key Access
+        # Represents the configuration of a protection level for a project's Key Access
         # Justifications enrollment.
         # Corresponds to the JSON property `softwareConfig`
         # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsEnrollmentConfig]
@@ -3761,12 +3779,12 @@ module Google
         end
       end
       
-      # Response message for KeyAccessJustificationsConfig.
+      # Represents a response message for KeyAccessJustificationsConfig.
       # ShowEffectiveKeyAccessJustificationsPolicyConfig.
       class ShowEffectiveKeyAccessJustificationsPolicyConfigResponse
         include Google::Apis::Core::Hashable
       
-        # A singleton configuration for Key Access Justifications policies.
+        # Represents a singleton configuration for Key Access Justifications policies.
         # Corresponds to the JSON property `effectiveKajPolicy`
         # @return [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig]
         attr_accessor :effective_kaj_policy
@@ -3807,6 +3825,14 @@ module Google
         # @return [String]
         attr_accessor :disable_time
       
+        # Optional. Immutable. Indicates whether key portability is enabled for the
+        # SingleTenantHsmInstance. This can only be set at creation time. Key
+        # portability features are disabled by default and not yet available in GA.
+        # Corresponds to the JSON property `keyPortabilityEnabled`
+        # @return [Boolean]
+        attr_accessor :key_portability_enabled
+        alias_method :key_portability_enabled?, :key_portability_enabled
+      
         # Identifier. The resource name for this SingleTenantHsmInstance in the format `
         # projects/*/locations/*/singleTenantHsmInstances/*`.
         # Corresponds to the JSON property `name`
@@ -3839,6 +3865,7 @@ module Google
           @create_time = args[:create_time] if args.key?(:create_time)
           @delete_time = args[:delete_time] if args.key?(:delete_time)
           @disable_time = args[:disable_time] if args.key?(:disable_time)
+          @key_portability_enabled = args[:key_portability_enabled] if args.key?(:key_portability_enabled)
           @name = args[:name] if args.key?(:name)
           @quorum_auth = args[:quorum_auth] if args.key?(:quorum_auth)
           @state = args[:state] if args.key?(:state)

data/lib/google/apis/cloudkms_v1/gem_version.rb

@@ -16,13 +16,13 @@ module Google
   module Apis
     module CloudkmsV1
       # Version of the google-apis-cloudkms_v1 gem
-      GEM_VERSION = "0.71.0"
+      GEM_VERSION = "0.73.0"
 
       # Version of the code generator used to generate this client
       GENERATOR_VERSION = "0.18.0"
 
       # Revision of the discovery document this client was generated from
-      REVISION = "20260213"
+      REVISION = "20260409"
     end
   end
 end

data/lib/google/apis/cloudkms_v1/representations.rb

@@ -989,6 +989,7 @@ module Google
         class Representation < Google::Apis::Core::JsonRepresentation
           property :default_key_access_justification_policy, as: 'defaultKeyAccessJustificationPolicy', class: Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicy, decorator: Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicy::Representation
       
+          property :default_policy_available, as: 'defaultPolicyAvailable'
           property :name, as: 'name'
         end
       end
@@ -1409,6 +1410,7 @@ module Google
           property :create_time, as: 'createTime'
           property :delete_time, as: 'deleteTime'
           property :disable_time, as: 'disableTime'
+          property :key_portability_enabled, as: 'keyPortabilityEnabled'
           property :name, as: 'name'
           property :quorum_auth, as: 'quorumAuth', class: Google::Apis::CloudkmsV1::QuorumAuth, decorator: Google::Apis::CloudkmsV1::QuorumAuth::Representation
       

data/lib/google/apis/cloudkms_v1/service.rb

@@ -86,7 +86,7 @@ module Google
         # Gets the KeyAccessJustificationsPolicyConfig for a given organization, folder,
         # or project.
         # @param [String] name
-        #   Required. The name of the KeyAccessJustificationsPolicyConfig to get.
+        #   Required. Specifies the name of the KeyAccessJustificationsPolicyConfig to get.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -158,11 +158,12 @@ module Google
         # Updates the KeyAccessJustificationsPolicyConfig for a given organization,
         # folder, or project.
         # @param [String] name
-        #   Identifier. The resource name for this KeyAccessJustificationsPolicyConfig in
-        #   the format of "`organizations|folders|projects`/*/kajPolicyConfig".
+        #   Identifier. Represents the resource name for this
+        #   KeyAccessJustificationsPolicyConfig in the format of "`organizations|folders|
+        #   projects`/*/kajPolicyConfig".
         # @param [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] key_access_justifications_policy_config_object
         # @param [String] update_mask
-        #   Optional. The list of fields to update.
+        #   Optional. Specifies the list of fields to update.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -196,7 +197,7 @@ module Google
         # Gets the KeyAccessJustificationsPolicyConfig for a given organization, folder,
         # or project.
         # @param [String] name
-        #   Required. The name of the KeyAccessJustificationsPolicyConfig to get.
+        #   Required. Specifies the name of the KeyAccessJustificationsPolicyConfig to get.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -227,11 +228,12 @@ module Google
         # Updates the KeyAccessJustificationsPolicyConfig for a given organization,
         # folder, or project.
         # @param [String] name
-        #   Identifier. The resource name for this KeyAccessJustificationsPolicyConfig in
-        #   the format of "`organizations|folders|projects`/*/kajPolicyConfig".
+        #   Identifier. Represents the resource name for this
+        #   KeyAccessJustificationsPolicyConfig in the format of "`organizations|folders|
+        #   projects`/*/kajPolicyConfig".
         # @param [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] key_access_justifications_policy_config_object
         # @param [String] update_mask
-        #   Optional. The list of fields to update.
+        #   Optional. Specifies the list of fields to update.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -296,7 +298,7 @@ module Google
         # Gets the KeyAccessJustificationsPolicyConfig for a given organization, folder,
         # or project.
         # @param [String] name
-        #   Required. The name of the KeyAccessJustificationsPolicyConfig to get.
+        #   Required. Specifies the name of the KeyAccessJustificationsPolicyConfig to get.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -359,7 +361,7 @@ module Google
         # Returns the KeyAccessJustificationsEnrollmentConfig of the resource closest to
         # the given project in hierarchy.
         # @param [String] project
-        #   Required. The number or id of the project to get the effective
+        #   Required. Specifies the number or id of the project to get the effective
         #   KeyAccessJustificationsEnrollmentConfig for.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -391,7 +393,7 @@ module Google
         # Returns the KeyAccessJustificationsPolicyConfig of the resource closest to the
         # given project in hierarchy.
         # @param [String] project
-        #   Required. The number or id of the project to get the effective
+        #   Required. Specifies the number or id of the project to get the effective
         #   KeyAccessJustificationsPolicyConfig. In the format of "projects/`|`"
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -464,11 +466,12 @@ module Google
         # Updates the KeyAccessJustificationsPolicyConfig for a given organization,
         # folder, or project.
         # @param [String] name
-        #   Identifier. The resource name for this KeyAccessJustificationsPolicyConfig in
-        #   the format of "`organizations|folders|projects`/*/kajPolicyConfig".
+        #   Identifier. Represents the resource name for this
+        #   KeyAccessJustificationsPolicyConfig in the format of "`organizations|folders|
+        #   projects`/*/kajPolicyConfig".
         # @param [Google::Apis::CloudkmsV1::KeyAccessJustificationsPolicyConfig] key_access_justifications_policy_config_object
         # @param [String] update_mask
-        #   Optional. The list of fields to update.
+        #   Optional. Specifies the list of fields to update.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -595,10 +598,15 @@ module Google
         end
         
         # Lists information about the supported locations for this service. This method
-        # can be called in two ways: * **List all public locations:** Use the path `GET /
-        # v1/locations`. * **List project-visible locations:** Use the path `GET /v1/
-        # projects/`project_id`/locations`. This may include public locations as well as
-        # private or other locations specifically visible to the project.
+        # lists locations based on the resource scope provided in the [
+        # ListLocationsRequest.name] field: * **Global locations**: If `name` is empty,
+        # the method lists the public locations available to all projects. * **Project-
+        # specific locations**: If `name` follows the format `projects/`project``, the
+        # method lists locations visible to that specific project. This includes public,
+        # private, or other project-specific locations enabled for the project. For gRPC
+        # and client library implementations, the resource name is passed as the `name`
+        # field. For direct service calls, the resource name is incorporated into the
+        # request path based on the specific service implementation and version.
         # @param [String] name
         #   The resource that owns the locations collection, if applicable.
         # @param [Array<String>, String] extra_location_types

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: google-apis-cloudkms_v1
 version: !ruby/object:Gem::Version
-  version: 0.71.0
+  version: 0.73.0
 platform: ruby
 authors:
 - Google LLC
@@ -57,7 +57,7 @@ licenses:
 metadata:
   bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
   changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-cloudkms_v1/CHANGELOG.md
-  documentation_uri: https://googleapis.dev/ruby/google-apis-cloudkms_v1/v0.71.0
+  documentation_uri: https://googleapis.dev/ruby/google-apis-cloudkms_v1/v0.73.0
   source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-cloudkms_v1
 rdoc_options: []
 require_paths: