google-cloud-cloud_controls_partner-v1beta 0.a → 0.1.0

data/proto_docs/google/api/resource.rb

@@ -0,0 +1,222 @@
+# frozen_string_literal: true
+
+# Copyright 2024 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Api
+    # A simple descriptor of a resource type.
+    #
+    # ResourceDescriptor annotates a resource message (either by means of a
+    # protobuf annotation or use in the service config), and associates the
+    # resource's schema, the resource type, and the pattern of the resource name.
+    #
+    # Example:
+    #
+    #     message Topic {
+    #       // Indicates this message defines a resource schema.
+    #       // Declares the resource type in the format of {service}/{kind}.
+    #       // For Kubernetes resources, the format is {api group}/{kind}.
+    #       option (google.api.resource) = {
+    #         type: "pubsub.googleapis.com/Topic"
+    #         pattern: "projects/{project}/topics/{topic}"
+    #       };
+    #     }
+    #
+    # The ResourceDescriptor Yaml config will look like:
+    #
+    #     resources:
+    #     - type: "pubsub.googleapis.com/Topic"
+    #       pattern: "projects/{project}/topics/{topic}"
+    #
+    # Sometimes, resources have multiple patterns, typically because they can
+    # live under multiple parents.
+    #
+    # Example:
+    #
+    #     message LogEntry {
+    #       option (google.api.resource) = {
+    #         type: "logging.googleapis.com/LogEntry"
+    #         pattern: "projects/{project}/logs/{log}"
+    #         pattern: "folders/{folder}/logs/{log}"
+    #         pattern: "organizations/{organization}/logs/{log}"
+    #         pattern: "billingAccounts/{billing_account}/logs/{log}"
+    #       };
+    #     }
+    #
+    # The ResourceDescriptor Yaml config will look like:
+    #
+    #     resources:
+    #     - type: 'logging.googleapis.com/LogEntry'
+    #       pattern: "projects/{project}/logs/{log}"
+    #       pattern: "folders/{folder}/logs/{log}"
+    #       pattern: "organizations/{organization}/logs/{log}"
+    #       pattern: "billingAccounts/{billing_account}/logs/{log}"
+    # @!attribute [rw] type
+    #   @return [::String]
+    #     The resource type. It must be in the format of
+    #     \\{service_name}/\\{resource_type_kind}. The `resource_type_kind` must be
+    #     singular and must not include version numbers.
+    #
+    #     Example: `storage.googleapis.com/Bucket`
+    #
+    #     The value of the resource_type_kind must follow the regular expression
+    #     /[A-Za-z][a-zA-Z0-9]+/. It should start with an upper case character and
+    #     should use PascalCase (UpperCamelCase). The maximum number of
+    #     characters allowed for the `resource_type_kind` is 100.
+    # @!attribute [rw] pattern
+    #   @return [::Array<::String>]
+    #     Optional. The relative resource name pattern associated with this resource
+    #     type. The DNS prefix of the full resource name shouldn't be specified here.
+    #
+    #     The path pattern must follow the syntax, which aligns with HTTP binding
+    #     syntax:
+    #
+    #         Template = Segment { "/" Segment } ;
+    #         Segment = LITERAL | Variable ;
+    #         Variable = "{" LITERAL "}" ;
+    #
+    #     Examples:
+    #
+    #         - "projects/\\{project}/topics/\\{topic}"
+    #         - "projects/\\{project}/knowledgeBases/\\{knowledge_base}"
+    #
+    #     The components in braces correspond to the IDs for each resource in the
+    #     hierarchy. It is expected that, if multiple patterns are provided,
+    #     the same component name (e.g. "project") refers to IDs of the same
+    #     type of resource.
+    # @!attribute [rw] name_field
+    #   @return [::String]
+    #     Optional. The field on the resource that designates the resource name
+    #     field. If omitted, this is assumed to be "name".
+    # @!attribute [rw] history
+    #   @return [::Google::Api::ResourceDescriptor::History]
+    #     Optional. The historical or future-looking state of the resource pattern.
+    #
+    #     Example:
+    #
+    #         // The InspectTemplate message originally only supported resource
+    #         // names with organization, and project was added later.
+    #         message InspectTemplate {
+    #           option (google.api.resource) = {
+    #             type: "dlp.googleapis.com/InspectTemplate"
+    #             pattern:
+    #             "organizations/{organization}/inspectTemplates/{inspect_template}"
+    #             pattern: "projects/{project}/inspectTemplates/{inspect_template}"
+    #             history: ORIGINALLY_SINGLE_PATTERN
+    #           };
+    #         }
+    # @!attribute [rw] plural
+    #   @return [::String]
+    #     The plural name used in the resource name and permission names, such as
+    #     'projects' for the resource name of 'projects/\\{project}' and the permission
+    #     name of 'cloudresourcemanager.googleapis.com/projects.get'. It is the same
+    #     concept of the `plural` field in k8s CRD spec
+    #     https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions/
+    #
+    #     Note: The plural form is required even for singleton resources. See
+    #     https://aip.dev/156
+    # @!attribute [rw] singular
+    #   @return [::String]
+    #     The same concept of the `singular` field in k8s CRD spec
+    #     https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions/
+    #     Such as "project" for the `resourcemanager.googleapis.com/Project` type.
+    # @!attribute [rw] style
+    #   @return [::Array<::Google::Api::ResourceDescriptor::Style>]
+    #     Style flag(s) for this resource.
+    #     These indicate that a resource is expected to conform to a given
+    #     style. See the specific style flags for additional information.
+    class ResourceDescriptor
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+
+      # A description of the historical or future-looking state of the
+      # resource pattern.
+      module History
+        # The "unset" value.
+        HISTORY_UNSPECIFIED = 0
+
+        # The resource originally had one pattern and launched as such, and
+        # additional patterns were added later.
+        ORIGINALLY_SINGLE_PATTERN = 1
+
+        # The resource has one pattern, but the API owner expects to add more
+        # later. (This is the inverse of ORIGINALLY_SINGLE_PATTERN, and prevents
+        # that from being necessary once there are multiple patterns.)
+        FUTURE_MULTI_PATTERN = 2
+      end
+
+      # A flag representing a specific style that a resource claims to conform to.
+      module Style
+        # The unspecified value. Do not use.
+        STYLE_UNSPECIFIED = 0
+
+        # This resource is intended to be "declarative-friendly".
+        #
+        # Declarative-friendly resources must be more strictly consistent, and
+        # setting this to true communicates to tools that this resource should
+        # adhere to declarative-friendly expectations.
+        #
+        # Note: This is used by the API linter (linter.aip.dev) to enable
+        # additional checks.
+        DECLARATIVE_FRIENDLY = 1
+      end
+    end
+
+    # Defines a proto annotation that describes a string field that refers to
+    # an API resource.
+    # @!attribute [rw] type
+    #   @return [::String]
+    #     The resource type that the annotated field references.
+    #
+    #     Example:
+    #
+    #         message Subscription {
+    #           string topic = 2 [(google.api.resource_reference) = {
+    #             type: "pubsub.googleapis.com/Topic"
+    #           }];
+    #         }
+    #
+    #     Occasionally, a field may reference an arbitrary resource. In this case,
+    #     APIs use the special value * in their resource reference.
+    #
+    #     Example:
+    #
+    #         message GetIamPolicyRequest {
+    #           string resource = 2 [(google.api.resource_reference) = {
+    #             type: "*"
+    #           }];
+    #         }
+    # @!attribute [rw] child_type
+    #   @return [::String]
+    #     The resource type of a child collection that the annotated field
+    #     references. This is useful for annotating the `parent` field that
+    #     doesn't have a fixed resource type.
+    #
+    #     Example:
+    #
+    #         message ListLogEntriesRequest {
+    #           string parent = 1 [(google.api.resource_reference) = {
+    #             child_type: "logging.googleapis.com/LogEntry"
+    #           };
+    #         }
+    class ResourceReference
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+    end
+  end
+end

data/proto_docs/google/cloud/cloudcontrolspartner/v1beta/access_approval_requests.rb

@@ -0,0 +1,143 @@
+# frozen_string_literal: true
+
+# Copyright 2024 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module CloudControlsPartner
+      module V1beta
+        # Details about the Access request.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Identifier. Format:
+        #     organizations/\\{organization}/locations/\\{location}/customers/\\{customer}/workloads/\\{workload}/accessApprovalRequests/\\{access_approval_request}.
+        # @!attribute [rw] request_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     The time at which approval was requested.
+        # @!attribute [rw] requested_reason
+        #   @return [::Google::Cloud::CloudControlsPartner::V1beta::AccessReason]
+        #     The justification for which approval is being requested.
+        # @!attribute [rw] requested_expiration_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     The requested expiration for the approval. If the request is approved,
+        #     access will be granted from the time of approval until the expiration time.
+        class AccessApprovalRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for getting the access requests associated with a workload.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. Parent resource
+        #     Format:
+        #     organizations/\\{organization}/locations/\\{location}/customers/\\{customer}/workloads/\\{workload}
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     Optional. The maximum number of access requests to return. The service may
+        #     return fewer than this value. If unspecified, at most 500 access requests
+        #     will be returned.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     Optional. A page token, received from a previous
+        #     `ListAccessApprovalRequests` call. Provide this to retrieve the subsequent
+        #     page.
+        # @!attribute [rw] filter
+        #   @return [::String]
+        #     Optional. Filtering results.
+        # @!attribute [rw] order_by
+        #   @return [::String]
+        #     Optional. Hint for how to order the results.
+        class ListAccessApprovalRequestsRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Response message for list access requests.
+        # @!attribute [rw] access_approval_requests
+        #   @return [::Array<::Google::Cloud::CloudControlsPartner::V1beta::AccessApprovalRequest>]
+        #     List of access approval requests
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     A token that can be sent as `page_token` to retrieve the next page.
+        #     If this field is omitted, there are no subsequent pages.
+        # @!attribute [rw] unreachable
+        #   @return [::Array<::String>]
+        #     Locations that could not be reached.
+        class ListAccessApprovalRequestsResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Reason for the access.
+        # @!attribute [rw] type
+        #   @return [::Google::Cloud::CloudControlsPartner::V1beta::AccessReason::Type]
+        #     Type of access justification.
+        # @!attribute [rw] detail
+        #   @return [::String]
+        #     More detail about certain reason types. See comments for each type above.
+        class AccessReason
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # Type of access justification.
+          module Type
+            # Default value for proto, shouldn't be used.
+            TYPE_UNSPECIFIED = 0
+
+            # Customer made a request or raised an issue that required the principal to
+            # access customer data. `detail` is of the form ("#####" is the issue ID):
+            #
+            # - "Feedback Report: #####"
+            # - "Case Number: #####"
+            # - "Case ID: #####"
+            # - "E-PIN Reference: #####"
+            # - "Google-#####"
+            # - "T-#####"
+            CUSTOMER_INITIATED_SUPPORT = 1
+
+            # The principal accessed customer data in order to diagnose or resolve a
+            # suspected issue in services. Often this access is used to confirm that
+            # customers are not affected by a suspected service issue or to remediate a
+            # reversible system issue.
+            GOOGLE_INITIATED_SERVICE = 2
+
+            # Google initiated service for security, fraud, abuse, or compliance
+            # purposes.
+            GOOGLE_INITIATED_REVIEW = 3
+
+            # The principal was compelled to access customer data in order to respond
+            # to a legal third party data request or process, including legal processes
+            # from customers themselves.
+            THIRD_PARTY_DATA_REQUEST = 4
+
+            # The principal accessed customer data in order to diagnose or resolve a
+            # suspected issue in services or a known outage.
+            GOOGLE_RESPONSE_TO_PRODUCTION_ALERT = 5
+
+            # Similar to 'GOOGLE_INITIATED_SERVICE' or 'GOOGLE_INITIATED_REVIEW', but
+            # with universe agnostic naming. The principal accessed customer data in
+            # order to diagnose or resolve a suspected issue in services or a known
+            # outage, or for security, fraud, abuse, or compliance review purposes.
+            CLOUD_INITIATED_ACCESS = 6
+          end
+        end
+      end
+    end
+  end
+end

data/proto_docs/google/cloud/cloudcontrolspartner/v1beta/completion_state.rb

@@ -0,0 +1,44 @@
+# frozen_string_literal: true
+
+# Copyright 2024 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module CloudControlsPartner
+      module V1beta
+        # Enum for possible completion states.
+        module CompletionState
+          # Unspecified completion state.
+          COMPLETION_STATE_UNSPECIFIED = 0
+
+          # Task started (has start date) but not yet completed.
+          PENDING = 1
+
+          # Succeeded state.
+          SUCCEEDED = 2
+
+          # Failed state.
+          FAILED = 3
+
+          # Not applicable state.
+          NOT_APPLICABLE = 4
+        end
+      end
+    end
+  end
+end

data/proto_docs/google/cloud/cloudcontrolspartner/v1beta/core.rb

@@ -0,0 +1,57 @@
+# frozen_string_literal: true
+
+# Copyright 2024 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module CloudControlsPartner
+      module V1beta
+        # Represents the metadata of the long-running operation.
+        # @!attribute [r] create_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The time the operation was created.
+        # @!attribute [r] end_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The time the operation finished running.
+        # @!attribute [r] target
+        #   @return [::String]
+        #     Output only. Server-defined resource path for the target of the operation.
+        # @!attribute [r] verb
+        #   @return [::String]
+        #     Output only. Name of the verb executed by the operation.
+        # @!attribute [r] status_message
+        #   @return [::String]
+        #     Output only. Human-readable status of the operation, if any.
+        # @!attribute [r] requested_cancellation
+        #   @return [::Boolean]
+        #     Output only. Identifies whether the user has requested cancellation
+        #     of the operation. Operations that have been cancelled successfully
+        #     have [Operation.error][] value with a
+        #     [google.rpc.Status.code][google.rpc.Status.code] of 1, corresponding to
+        #     `Code.CANCELLED`.
+        # @!attribute [r] api_version
+        #   @return [::String]
+        #     Output only. API version used to start the operation.
+        class OperationMetadata
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+      end
+    end
+  end
+end

data/proto_docs/google/cloud/cloudcontrolspartner/v1beta/customer_workloads.rb

@@ -0,0 +1,177 @@
+# frozen_string_literal: true
+
+# Copyright 2024 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module CloudControlsPartner
+      module V1beta
+        # Contains metadata around the [Workload
+        # resource](https://cloud.google.com/assured-workloads/docs/reference/rest/Shared.Types/Workload)
+        # in the Assured Workloads API.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Identifier. Format:
+        #     organizations/\\{organization}/locations/\\{location}/customers/\\{customer}/workloads/\\{workload}
+        # @!attribute [r] folder_id
+        #   @return [::Integer]
+        #     Output only. Folder id this workload is associated with
+        # @!attribute [r] create_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. Time the resource was created.
+        # @!attribute [r] folder
+        #   @return [::String]
+        #     Output only. The name of container folder of the assured workload
+        # @!attribute [rw] workload_onboarding_state
+        #   @return [::Google::Cloud::CloudControlsPartner::V1beta::WorkloadOnboardingState]
+        #     Container for workload onboarding steps.
+        # @!attribute [rw] is_onboarded
+        #   @return [::Boolean]
+        #     Indicates whether a workload is fully onboarded.
+        # @!attribute [rw] key_management_project_id
+        #   @return [::String]
+        #     The project id of the key management project for the workload
+        # @!attribute [rw] location
+        #   @return [::String]
+        #     The Google Cloud location of the workload
+        # @!attribute [rw] partner
+        #   @return [::Google::Cloud::CloudControlsPartner::V1beta::Workload::Partner]
+        #     Partner associated with this workload.
+        class Workload
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # Supported Assured Workloads Partners.
+          module Partner
+            # Unknown Partner.
+            PARTNER_UNSPECIFIED = 0
+
+            # Enum representing S3NS (Thales) partner.
+            PARTNER_LOCAL_CONTROLS_BY_S3NS = 1
+
+            # Enum representing T_SYSTEM (TSI) partner.
+            PARTNER_SOVEREIGN_CONTROLS_BY_T_SYSTEMS = 2
+
+            # Enum representing SIA_MINSAIT (Indra) partner.
+            PARTNER_SOVEREIGN_CONTROLS_BY_SIA_MINSAIT = 3
+
+            # Enum representing PSN (TIM) partner.
+            PARTNER_SOVEREIGN_CONTROLS_BY_PSN = 4
+
+            # Enum representing CNTXT (Kingdom of Saudi Arabia) partner.
+            PARTNER_SOVEREIGN_CONTROLS_BY_CNTXT = 6
+
+            # Enum representing CNXT (Kingdom of Saudi Arabia) partner offering without
+            # EKM provisioning.
+            PARTNER_SOVEREIGN_CONTROLS_BY_CNTXT_NO_EKM = 7
+          end
+        end
+
+        # Request to list customer workloads.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. Parent resource
+        #     Format:
+        #     organizations/\\{organization}/locations/\\{location}/customers/\\{customer}
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     The maximum number of workloads to return. The service may return fewer
+        #     than this value. If unspecified, at most 500 workloads will be returned.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     A page token, received from a previous `ListWorkloads` call.
+        #     Provide this to retrieve the subsequent page.
+        # @!attribute [rw] filter
+        #   @return [::String]
+        #     Optional. Filtering results.
+        # @!attribute [rw] order_by
+        #   @return [::String]
+        #     Optional. Hint for how to order the results.
+        class ListWorkloadsRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Response message for list customer workloads requests.
+        # @!attribute [rw] workloads
+        #   @return [::Array<::Google::Cloud::CloudControlsPartner::V1beta::Workload>]
+        #     List of customer workloads
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     A token that can be sent as `page_token` to retrieve the next page.
+        #     If this field is omitted, there are no subsequent pages.
+        # @!attribute [rw] unreachable
+        #   @return [::Array<::String>]
+        #     Locations that could not be reached.
+        class ListWorkloadsResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Message for getting a customer workload.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. Format:
+        #     organizations/\\{organization}/locations/\\{location}/customers/\\{customer}/workloads/\\{workload}
+        class GetWorkloadRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Container for workload onboarding steps.
+        # @!attribute [rw] onboarding_steps
+        #   @return [::Array<::Google::Cloud::CloudControlsPartner::V1beta::WorkloadOnboardingStep>]
+        #     List of workload onboarding steps.
+        class WorkloadOnboardingState
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Container for workload onboarding information.
+        # @!attribute [rw] step
+        #   @return [::Google::Cloud::CloudControlsPartner::V1beta::WorkloadOnboardingStep::Step]
+        #     The onboarding step.
+        # @!attribute [rw] start_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     The starting time of the onboarding step.
+        # @!attribute [rw] completion_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     The completion time of the onboarding step.
+        # @!attribute [r] completion_state
+        #   @return [::Google::Cloud::CloudControlsPartner::V1beta::CompletionState]
+        #     Output only. The completion state of the onboarding step.
+        class WorkloadOnboardingStep
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # Enum for possible onboarding steps.
+          module Step
+            # Unspecified step.
+            STEP_UNSPECIFIED = 0
+
+            # EKM Provisioned step.
+            EKM_PROVISIONED = 1
+
+            # Signed Access Approval step.
+            SIGNED_ACCESS_APPROVAL_CONFIGURED = 2
+          end
+        end
+      end
+    end
+  end
+end