google-cloud-certificate_manager-v1 0.1.0

data/proto_docs/google/cloud/certificatemanager/v1/certificate_manager.rb

@@ -0,0 +1,832 @@
+# frozen_string_literal: true
+
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module CertificateManager
+      module V1
+        # Request for the `ListCertificates` method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The project and location from which the certificate should be listed,
+        #     specified in the format `projects/*/locations/*`.
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     Maximum number of certificates to return per call.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     The value returned by the last `ListCertificatesResponse`. Indicates that
+        #     this is a continuation of a prior `ListCertificates` call, and that the
+        #     system should return the next page of data.
+        # @!attribute [rw] filter
+        #   @return [::String]
+        #     Filter expression to restrict the Certificates returned.
+        # @!attribute [rw] order_by
+        #   @return [::String]
+        #     A list of Certificate field names used to specify the order of the returned
+        #     results. The default sorting order is ascending. To specify descending
+        #     order for a field, add a suffix " desc".
+        class ListCertificatesRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Response for the `ListCertificates` method.
+        # @!attribute [rw] certificates
+        #   @return [::Array<::Google::Cloud::CertificateManager::V1::Certificate>]
+        #     A list of certificates for the parent resource.
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     If there might be more results than those appearing in this response, then
+        #     `next_page_token` is included. To get the next set of results, call this
+        #     method again using the value of `next_page_token` as `page_token`.
+        # @!attribute [rw] unreachable
+        #   @return [::Array<::String>]
+        #     A list of locations that could not be reached.
+        class ListCertificatesResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for the `GetCertificate` method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A name of the certificate to describe. Must be in the format
+        #     `projects/*/locations/*/certificates/*`.
+        class GetCertificateRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for the `CreateCertificate` method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The parent resource of the certificate. Must be in the format
+        #     `projects/*/locations/*`.
+        # @!attribute [rw] certificate_id
+        #   @return [::String]
+        #     Required. A user-provided name of the certificate.
+        # @!attribute [rw] certificate
+        #   @return [::Google::Cloud::CertificateManager::V1::Certificate]
+        #     Required. A definition of the certificate to create.
+        class CreateCertificateRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for the `UpdateCertificate` method.
+        # @!attribute [rw] certificate
+        #   @return [::Google::Cloud::CertificateManager::V1::Certificate]
+        #     Required. A definition of the certificate to update.
+        # @!attribute [rw] update_mask
+        #   @return [::Google::Protobuf::FieldMask]
+        #     Required. The update mask applies to the resource. For the `FieldMask` definition,
+        #     see
+        #     https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask.
+        class UpdateCertificateRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for the `DeleteCertificate` method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A name of the certificate to delete. Must be in the format
+        #     `projects/*/locations/*/certificates/*`.
+        class DeleteCertificateRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for the `ListCertificateMaps` method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The project and location from which the certificate maps should be listed,
+        #     specified in the format `projects/*/locations/*`.
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     Maximum number of certificate maps to return per call.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     The value returned by the last `ListCertificateMapsResponse`. Indicates
+        #     that this is a continuation of a prior `ListCertificateMaps` call, and that
+        #     the system should return the next page of data.
+        # @!attribute [rw] filter
+        #   @return [::String]
+        #     Filter expression to restrict the Certificates Maps returned.
+        # @!attribute [rw] order_by
+        #   @return [::String]
+        #     A list of Certificate Map field names used to specify the order of the
+        #     returned results. The default sorting order is ascending. To specify
+        #     descending order for a field, add a suffix " desc".
+        class ListCertificateMapsRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Response for the `ListCertificateMaps` method.
+        # @!attribute [rw] certificate_maps
+        #   @return [::Array<::Google::Cloud::CertificateManager::V1::CertificateMap>]
+        #     A list of certificate maps for the parent resource.
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     If there might be more results than those appearing in this response, then
+        #     `next_page_token` is included. To get the next set of results, call this
+        #     method again using the value of `next_page_token` as `page_token`.
+        # @!attribute [rw] unreachable
+        #   @return [::Array<::String>]
+        #     Locations that could not be reached.
+        class ListCertificateMapsResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for the `GetCertificateMap` method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A name of the certificate map to describe. Must be in the format
+        #     `projects/*/locations/*/certificateMaps/*`.
+        class GetCertificateMapRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for the `CreateCertificateMap` method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The parent resource of the certificate map. Must be in the format
+        #     `projects/*/locations/*`.
+        # @!attribute [rw] certificate_map_id
+        #   @return [::String]
+        #     Required. A user-provided name of the certificate map.
+        # @!attribute [rw] certificate_map
+        #   @return [::Google::Cloud::CertificateManager::V1::CertificateMap]
+        #     Required. A definition of the certificate map to create.
+        class CreateCertificateMapRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for the `UpdateCertificateMap` method.
+        # @!attribute [rw] certificate_map
+        #   @return [::Google::Cloud::CertificateManager::V1::CertificateMap]
+        #     Required. A definition of the certificate map to update.
+        # @!attribute [rw] update_mask
+        #   @return [::Google::Protobuf::FieldMask]
+        #     Required. The update mask applies to the resource. For the `FieldMask` definition,
+        #     see
+        #     https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask.
+        class UpdateCertificateMapRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for the `DeleteCertificateMap` method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A name of the certificate map to delete. Must be in the format
+        #     `projects/*/locations/*/certificateMaps/*`.
+        class DeleteCertificateMapRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for the `ListCertificateMapEntries` method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The project, location and certificate map from which the certificate map
+        #     entries should be listed, specified in the format
+        #     `projects/*/locations/*/certificateMaps/*`.
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     Maximum number of certificate map entries to return. The service may return
+        #     fewer than this value.
+        #     If unspecified, at most 50 certificate map entries will be returned.
+        #     The maximum value is 1000; values above 1000 will be coerced to 1000.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     The value returned by the last `ListCertificateMapEntriesResponse`.
+        #     Indicates that this is a continuation of a prior
+        #     `ListCertificateMapEntries` call, and that the system should return the
+        #     next page of data.
+        # @!attribute [rw] filter
+        #   @return [::String]
+        #     Filter expression to restrict the returned Certificate Map Entries.
+        # @!attribute [rw] order_by
+        #   @return [::String]
+        #     A list of Certificate Map Entry field names used to specify
+        #     the order of the returned results. The default sorting order is ascending.
+        #     To specify descending order for a field, add a suffix " desc".
+        class ListCertificateMapEntriesRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Response for the `ListCertificateMapEntries` method.
+        # @!attribute [rw] certificate_map_entries
+        #   @return [::Array<::Google::Cloud::CertificateManager::V1::CertificateMapEntry>]
+        #     A list of certificate map entries for the parent resource.
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     If there might be more results than those appearing in this response, then
+        #     `next_page_token` is included. To get the next set of results, call this
+        #     method again using the value of `next_page_token` as `page_token`.
+        # @!attribute [rw] unreachable
+        #   @return [::Array<::String>]
+        #     Locations that could not be reached.
+        class ListCertificateMapEntriesResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for the `GetCertificateMapEntry` method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A name of the certificate map entry to describe. Must be in the
+        #     format `projects/*/locations/*/certificateMaps/*/certificateMapEntries/*`.
+        class GetCertificateMapEntryRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for the `CreateCertificateMapEntry` method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The parent resource of the certificate map entry. Must be in the
+        #     format `projects/*/locations/*/certificateMaps/*`.
+        # @!attribute [rw] certificate_map_entry_id
+        #   @return [::String]
+        #     Required. A user-provided name of the certificate map entry.
+        # @!attribute [rw] certificate_map_entry
+        #   @return [::Google::Cloud::CertificateManager::V1::CertificateMapEntry]
+        #     Required. A definition of the certificate map entry to create.
+        class CreateCertificateMapEntryRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for the `UpdateCertificateMapEntry` method.
+        # @!attribute [rw] certificate_map_entry
+        #   @return [::Google::Cloud::CertificateManager::V1::CertificateMapEntry]
+        #     Required. A definition of the certificate map entry to create map entry.
+        # @!attribute [rw] update_mask
+        #   @return [::Google::Protobuf::FieldMask]
+        #     Required. The update mask applies to the resource. For the `FieldMask` definition,
+        #     see
+        #     https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask.
+        class UpdateCertificateMapEntryRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for the `DeleteCertificateMapEntry` method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A name of the certificate map entry to delete. Must be in the format
+        #     `projects/*/locations/*/certificateMaps/*/certificateMapEntries/*`.
+        class DeleteCertificateMapEntryRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for the `ListDnsAuthorizations` method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The project and location from which the dns authorizations should be
+        #     listed, specified in the format `projects/*/locations/*`.
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     Maximum number of dns authorizations to return per call.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     The value returned by the last `ListDnsAuthorizationsResponse`. Indicates
+        #     that this is a continuation of a prior `ListDnsAuthorizations` call, and
+        #     that the system should return the next page of data.
+        # @!attribute [rw] filter
+        #   @return [::String]
+        #     Filter expression to restrict the Dns Authorizations returned.
+        # @!attribute [rw] order_by
+        #   @return [::String]
+        #     A list of Dns Authorization field names used to specify the order of the
+        #     returned results. The default sorting order is ascending. To specify
+        #     descending order for a field, add a suffix " desc".
+        class ListDnsAuthorizationsRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Response for the `ListDnsAuthorizations` method.
+        # @!attribute [rw] dns_authorizations
+        #   @return [::Array<::Google::Cloud::CertificateManager::V1::DnsAuthorization>]
+        #     A list of dns authorizations for the parent resource.
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     If there might be more results than those appearing in this response, then
+        #     `next_page_token` is included. To get the next set of results, call this
+        #     method again using the value of `next_page_token` as `page_token`.
+        # @!attribute [rw] unreachable
+        #   @return [::Array<::String>]
+        #     Locations that could not be reached.
+        class ListDnsAuthorizationsResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for the `GetDnsAuthorization` method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A name of the dns authorization to describe. Must be in the format
+        #     `projects/*/locations/*/dnsAuthorizations/*`.
+        class GetDnsAuthorizationRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for the `CreateDnsAuthorization` method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The parent resource of the dns authorization. Must be in the format
+        #     `projects/*/locations/*`.
+        # @!attribute [rw] dns_authorization_id
+        #   @return [::String]
+        #     Required. A user-provided name of the dns authorization.
+        # @!attribute [rw] dns_authorization
+        #   @return [::Google::Cloud::CertificateManager::V1::DnsAuthorization]
+        #     Required. A definition of the dns authorization to create.
+        class CreateDnsAuthorizationRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for the `UpdateDnsAuthorization` method.
+        # @!attribute [rw] dns_authorization
+        #   @return [::Google::Cloud::CertificateManager::V1::DnsAuthorization]
+        #     Required. A definition of the dns authorization to update.
+        # @!attribute [rw] update_mask
+        #   @return [::Google::Protobuf::FieldMask]
+        #     Required. The update mask applies to the resource. For the `FieldMask` definition,
+        #     see
+        #     https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask.
+        class UpdateDnsAuthorizationRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for the `DeleteDnsAuthorization` method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A name of the dns authorization to delete. Must be in the format
+        #     `projects/*/locations/*/dnsAuthorizations/*`.
+        class DeleteDnsAuthorizationRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Represents the metadata of the long-running operation. Output only.
+        # @!attribute [rw] create_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     The time the operation was created.
+        # @!attribute [rw] end_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     The time the operation finished running.
+        # @!attribute [rw] target
+        #   @return [::String]
+        #     Server-defined resource path for the target of the operation.
+        # @!attribute [rw] verb
+        #   @return [::String]
+        #     Name of the verb executed by the operation.
+        # @!attribute [rw] status_message
+        #   @return [::String]
+        #     Human-readable status of the operation, if any.
+        # @!attribute [rw] requested_cancellation
+        #   @return [::Boolean]
+        #     Identifies whether the user has requested cancellation
+        #     of the operation. Operations that have successfully been cancelled
+        #     have [Operation.error][] value with a {::Google::Rpc::Status#code google.rpc.Status.code} of 1,
+        #     corresponding to `Code.CANCELLED`.
+        # @!attribute [rw] api_version
+        #   @return [::String]
+        #     API version used to start the operation.
+        class OperationMetadata
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Defines TLS certificate.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     A user-defined name of the certificate. Certificate names must be unique
+        #     globally and match pattern `projects/*/locations/*/certificates/*`.
+        # @!attribute [rw] description
+        #   @return [::String]
+        #     One or more paragraphs of text description of a certificate.
+        # @!attribute [r] create_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The creation timestamp of a Certificate.
+        # @!attribute [r] update_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The last update timestamp of a Certificate.
+        # @!attribute [rw] labels
+        #   @return [::Google::Protobuf::Map{::String => ::String}]
+        #     Set of labels associated with a Certificate.
+        # @!attribute [rw] self_managed
+        #   @return [::Google::Cloud::CertificateManager::V1::Certificate::SelfManagedCertificate]
+        #     If set, defines data of a self-managed certificate.
+        # @!attribute [rw] managed
+        #   @return [::Google::Cloud::CertificateManager::V1::Certificate::ManagedCertificate]
+        #     If set, contains configuration and state of a managed certificate.
+        # @!attribute [r] san_dnsnames
+        #   @return [::Array<::String>]
+        #     Output only. The list of Subject Alternative Names of dnsName type defined in the
+        #     certificate (see RFC 5280 4.2.1.6).
+        #     Managed certificates that haven't been provisioned yet have this field
+        #     populated with a value of the managed.domains field.
+        # @!attribute [r] pem_certificate
+        #   @return [::String]
+        #     Output only. The PEM-encoded certificate chain.
+        # @!attribute [r] expire_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The expiry timestamp of a Certificate.
+        # @!attribute [rw] scope
+        #   @return [::Google::Cloud::CertificateManager::V1::Certificate::Scope]
+        #     Immutable. The scope of the certificate.
+        class Certificate
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # Certificate data for a SelfManaged Certificate.
+          # SelfManaged Certificates are uploaded by the user. Updating such
+          # certificates before they expire remains the user's responsibility.
+          # @!attribute [rw] pem_certificate
+          #   @return [::String]
+          #     Input only. The PEM-encoded certificate chain.
+          #     Leaf certificate comes first, followed by intermediate ones if any.
+          # @!attribute [rw] pem_private_key
+          #   @return [::String]
+          #     Input only. The PEM-encoded private key of the leaf certificate.
+          class SelfManagedCertificate
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+
+          # Configuration and state of a Managed Certificate.
+          # Certificate Manager provisions and renews Managed Certificates
+          # automatically, for as long as it's authorized to do so.
+          # @!attribute [rw] domains
+          #   @return [::Array<::String>]
+          #     Immutable. The domains for which a managed SSL certificate will be generated.
+          #     Wildcard domains are only supported with DNS challenge resolution.
+          # @!attribute [rw] dns_authorizations
+          #   @return [::Array<::String>]
+          #     Immutable. Authorizations that will be used for performing domain authorization.
+          # @!attribute [r] state
+          #   @return [::Google::Cloud::CertificateManager::V1::Certificate::ManagedCertificate::State]
+          #     Output only. State of the managed certificate resource.
+          # @!attribute [rw] provisioning_issue
+          #   @return [::Google::Cloud::CertificateManager::V1::Certificate::ManagedCertificate::ProvisioningIssue]
+          #     Information about issues with provisioning a Managed Certificate.
+          # @!attribute [r] authorization_attempt_info
+          #   @return [::Array<::Google::Cloud::CertificateManager::V1::Certificate::ManagedCertificate::AuthorizationAttemptInfo>]
+          #     Output only. Detailed state of the latest authorization attempt for each domain
+          #     specified for managed certificate resource.
+          class ManagedCertificate
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+
+            # Information about issues with provisioning a Managed Certificate.
+            # @!attribute [rw] reason
+            #   @return [::Google::Cloud::CertificateManager::V1::Certificate::ManagedCertificate::ProvisioningIssue::Reason]
+            #     Reason for provisioning failures.
+            # @!attribute [rw] details
+            #   @return [::String]
+            #     Human readable explanation about the issue. Provided to help address
+            #     the configuration issues.
+            #     Not guaranteed to be stable. For programmatic access use Reason enum.
+            class ProvisioningIssue
+              include ::Google::Protobuf::MessageExts
+              extend ::Google::Protobuf::MessageExts::ClassMethods
+
+              module Reason
+                REASON_UNSPECIFIED = 0
+
+                # Certificate provisioning failed due to an issue with one or more of
+                # the domains on the certificate.
+                # For details of which domains failed, consult the
+                # `authorization_attempt_info` field.
+                AUTHORIZATION_ISSUE = 1
+
+                # Exceeded Certificate Authority quotas or internal rate limits of the
+                # system. Provisioning may take longer to complete.
+                RATE_LIMITED = 2
+              end
+            end
+
+            # State of the latest attempt to authorize a domain for certificate
+            # issuance.
+            # @!attribute [rw] domain
+            #   @return [::String]
+            #     Domain name of the authorization attempt.
+            # @!attribute [rw] state
+            #   @return [::Google::Cloud::CertificateManager::V1::Certificate::ManagedCertificate::AuthorizationAttemptInfo::State]
+            #     State of the domain for managed certificate issuance.
+            # @!attribute [r] failure_reason
+            #   @return [::Google::Cloud::CertificateManager::V1::Certificate::ManagedCertificate::AuthorizationAttemptInfo::FailureReason]
+            #     Output only. Reason for failure of the authorization attempt for the domain.
+            # @!attribute [rw] details
+            #   @return [::String]
+            #     Human readable explanation for reaching the state. Provided to help
+            #     address the configuration issues.
+            #     Not guaranteed to be stable. For programmatic access use Reason enum.
+            class AuthorizationAttemptInfo
+              include ::Google::Protobuf::MessageExts
+              extend ::Google::Protobuf::MessageExts::ClassMethods
+
+              module State
+                STATE_UNSPECIFIED = 0
+
+                # Certificate provisioning for this domain is under way. GCP will
+                # attempt to authorize the domain.
+                AUTHORIZING = 1
+
+                # A managed certificate can be provisioned, no issues for this domain.
+                AUTHORIZED = 6
+
+                # Attempt to authorize the domain failed. This prevents the Managed
+                # Certificate from being issued.
+                # See `failure_reason` and `details` fields for more information.
+                FAILED = 7
+              end
+
+              module FailureReason
+                FAILURE_REASON_UNSPECIFIED = 0
+
+                # There was a problem with the user's DNS or load balancer
+                # configuration for this domain.
+                CONFIG = 1
+
+                # Certificate issuance forbidden by an explicit CAA record for the
+                # domain or a failure to check CAA records for the domain.
+                CAA = 2
+
+                # Reached a CA or internal rate-limit for the domain,
+                # e.g. for certificates per top-level private domain.
+                RATE_LIMITED = 3
+              end
+            end
+
+            module State
+              STATE_UNSPECIFIED = 0
+
+              # Certificate Manager attempts to provision or renew the certificate.
+              # If the process takes longer than expected, consult the
+              # `provisioning_issue` field.
+              PROVISIONING = 1
+
+              # Multiple certificate provisioning attempts failed and Certificate
+              # Manager gave up. To try again, delete and create a new managed
+              # Certificate resource.
+              # For details see the `provisioning_issue` field.
+              FAILED = 2
+
+              # The certificate management is working, and a certificate has been
+              # provisioned.
+              ACTIVE = 3
+            end
+          end
+
+          # @!attribute [rw] key
+          #   @return [::String]
+          # @!attribute [rw] value
+          #   @return [::String]
+          class LabelsEntry
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+
+          # Certificate scope.
+          module Scope
+            # Certificates with default scope are served from core Google data centers.
+            # If unsure, choose this option.
+            DEFAULT = 0
+
+            # Certificates with scope EDGE_CACHE are special-purposed certificates,
+            # served from non-core Google data centers.
+            EDGE_CACHE = 1
+          end
+        end
+
+        # Defines a collection of certificate configurations.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     A user-defined name of the Certificate Map. Certificate Map names must be
+        #     unique globally and match pattern
+        #     `projects/*/locations/*/certificateMaps/*`.
+        # @!attribute [rw] description
+        #   @return [::String]
+        #     One or more paragraphs of text description of a certificate map.
+        # @!attribute [r] create_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The creation timestamp of a Certificate Map.
+        # @!attribute [r] update_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The update timestamp of a Certificate Map.
+        # @!attribute [rw] labels
+        #   @return [::Google::Protobuf::Map{::String => ::String}]
+        #     Set of labels associated with a Certificate Map.
+        # @!attribute [r] gclb_targets
+        #   @return [::Array<::Google::Cloud::CertificateManager::V1::CertificateMap::GclbTarget>]
+        #     Output only. A list of GCLB targets which use this Certificate Map.
+        class CertificateMap
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # Describes a Target Proxy which uses this Certificate Map.
+          # @!attribute [rw] target_https_proxy
+          #   @return [::String]
+          #     A name must be in the format
+          #     `projects/*/locations/*/targetHttpsProxies/*`.
+          # @!attribute [rw] target_ssl_proxy
+          #   @return [::String]
+          #     A name must be in the format
+          #     `projects/*/locations/*/targetSslProxies/*`.
+          # @!attribute [rw] ip_configs
+          #   @return [::Array<::Google::Cloud::CertificateManager::V1::CertificateMap::GclbTarget::IpConfig>]
+          #     IP configurations for this Target Proxy where the
+          #     Certificate Map is serving.
+          class GclbTarget
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+
+            # Defines IP configuration where this Certificate Map is serving.
+            # @!attribute [rw] ip_address
+            #   @return [::String]
+            #     An external IP address.
+            # @!attribute [rw] ports
+            #   @return [::Array<::Integer>]
+            #     Ports.
+            class IpConfig
+              include ::Google::Protobuf::MessageExts
+              extend ::Google::Protobuf::MessageExts::ClassMethods
+            end
+          end
+
+          # @!attribute [rw] key
+          #   @return [::String]
+          # @!attribute [rw] value
+          #   @return [::String]
+          class LabelsEntry
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+        end
+
+        # Defines a certificate map entry.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     A user-defined name of the Certificate Map Entry. Certificate Map Entry
+        #     names must be unique globally and match pattern
+        #     `projects/*/locations/*/certificateMaps/*/certificateMapEntries/*`.
+        # @!attribute [rw] description
+        #   @return [::String]
+        #     One or more paragraphs of text description of a certificate map entry.
+        # @!attribute [r] create_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The creation timestamp of a Certificate Map Entry.
+        # @!attribute [r] update_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The update timestamp of a Certificate Map Entry.
+        # @!attribute [rw] labels
+        #   @return [::Google::Protobuf::Map{::String => ::String}]
+        #     Set of labels associated with a Certificate Map Entry.
+        # @!attribute [rw] hostname
+        #   @return [::String]
+        #     A Hostname (FQDN, e.g. `example.com`) or a wildcard hostname expression
+        #     (`*.example.com`) for a set of hostnames with common suffix. Used as
+        #     Server Name Indication (SNI) for selecting a proper certificate.
+        # @!attribute [rw] matcher
+        #   @return [::Google::Cloud::CertificateManager::V1::CertificateMapEntry::Matcher]
+        #     A predefined matcher for particular cases, other than SNI selection.
+        # @!attribute [rw] certificates
+        #   @return [::Array<::String>]
+        #     A set of Certificates defines for the given `hostname`. There can be
+        #     defined up to fifteen certificates in each Certificate Map Entry. Each
+        #     certificate must match pattern `projects/*/locations/*/certificates/*`.
+        # @!attribute [r] state
+        #   @return [::Google::Cloud::CertificateManager::V1::ServingState]
+        #     Output only. A serving state of this Certificate Map Entry.
+        class CertificateMapEntry
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # @!attribute [rw] key
+          #   @return [::String]
+          # @!attribute [rw] value
+          #   @return [::String]
+          class LabelsEntry
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+
+          # Defines predefined cases other than SNI-hostname match when this
+          # configuration should be applied.
+          module Matcher
+            # A matcher has't been recognized.
+            MATCHER_UNSPECIFIED = 0
+
+            # A primary certificate that is served when SNI wasn't specified in the
+            # request or SNI couldn't be found in the map.
+            PRIMARY = 1
+          end
+        end
+
+        # A DnsAuthorization resource describes a way to perform domain authorization
+        # for certificate issuance.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     A user-defined name of the dns authorization. DnsAuthorization names must
+        #     be unique globally and match pattern
+        #     `projects/*/locations/*/dnsAuthorizations/*`.
+        # @!attribute [r] create_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The creation timestamp of a DnsAuthorization.
+        # @!attribute [r] update_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The last update timestamp of a DnsAuthorization.
+        # @!attribute [rw] labels
+        #   @return [::Google::Protobuf::Map{::String => ::String}]
+        #     Set of labels associated with a DnsAuthorization.
+        # @!attribute [rw] description
+        #   @return [::String]
+        #     One or more paragraphs of text description of a DnsAuthorization.
+        # @!attribute [rw] domain
+        #   @return [::String]
+        #     Required. Immutable. A domain which is being authorized. A DnsAuthorization resource covers a
+        #     single domain and its wildcard, e.g. authorization for `example.com` can
+        #     be used to issue certificates for `example.com` and `*.example.com`.
+        # @!attribute [r] dns_resource_record
+        #   @return [::Google::Cloud::CertificateManager::V1::DnsAuthorization::DnsResourceRecord]
+        #     Output only. DNS Resource Record that needs to be added to DNS configuration.
+        class DnsAuthorization
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # The structure describing the DNS Resource Record that needs to be added
+          # to DNS configuration for the authorization to be usable by
+          # certificate.
+          # @!attribute [r] name
+          #   @return [::String]
+          #     Output only. Fully qualified name of the DNS Resource Record.
+          #     e.g. `_acme-challenge.example.com`
+          # @!attribute [r] type
+          #   @return [::String]
+          #     Output only. Type of the DNS Resource Record.
+          #     Currently always set to "CNAME".
+          # @!attribute [r] data
+          #   @return [::String]
+          #     Output only. Data of the DNS Resource Record.
+          class DnsResourceRecord
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+
+          # @!attribute [rw] key
+          #   @return [::String]
+          # @!attribute [rw] value
+          #   @return [::String]
+          class LabelsEntry
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+        end
+
+        # Defines set of serving states associated with a resource.
+        module ServingState
+          # The status is undefined.
+          SERVING_STATE_UNSPECIFIED = 0
+
+          # The configuration is serving.
+          ACTIVE = 1
+
+          # Update is in progress. Some frontends may serve this configuration.
+          PENDING = 2
+        end
+      end
+    end
+  end
+end