google-cloud-kms-v1 0.15.0 → 0.17.0

data/lib/google/cloud/kms/v1/key_management_service/rest.rb

@@ -0,0 +1,64 @@
+# frozen_string_literal: true
+
+# Copyright 2023 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+require "gapic/rest"
+require "gapic/config"
+require "gapic/config/method"
+
+require "google/cloud/kms/v1/version"
+require "google/cloud/kms/v1/bindings_override"
+
+require "google/cloud/kms/v1/key_management_service/credentials"
+require "google/cloud/kms/v1/key_management_service/paths"
+require "google/cloud/kms/v1/key_management_service/rest/client"
+
+module Google
+  module Cloud
+    module Kms
+      module V1
+        ##
+        # Google Cloud Key Management Service
+        #
+        # Manages cryptographic keys and operations using those keys. Implements a REST
+        # model with the following objects:
+        #
+        # * {::Google::Cloud::Kms::V1::KeyRing KeyRing}
+        # * {::Google::Cloud::Kms::V1::CryptoKey CryptoKey}
+        # * {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion}
+        # * {::Google::Cloud::Kms::V1::ImportJob ImportJob}
+        #
+        # If you are using manual gRPC libraries, see
+        # [Using gRPC with Cloud KMS](https://cloud.google.com/kms/docs/grpc).
+        #
+        # To load this service and instantiate a REST client:
+        #
+        #     require "google/cloud/kms/v1/key_management_service/rest"
+        #     client = ::Google::Cloud::Kms::V1::KeyManagementService::Rest::Client.new
+        #
+        module KeyManagementService
+          # Client for the REST transport
+          module Rest
+          end
+        end
+      end
+    end
+  end
+end
+
+helper_path = ::File.join __dir__, "rest", "helpers.rb"
+require "google/cloud/kms/v1/key_management_service/rest/helpers" if ::File.file? helper_path

data/lib/google/cloud/kms/v1/key_management_service.rb

@@ -25,6 +25,7 @@ require "google/cloud/kms/v1/version"
 require "google/cloud/kms/v1/key_management_service/credentials"
 require "google/cloud/kms/v1/key_management_service/paths"
 require "google/cloud/kms/v1/key_management_service/client"
+require "google/cloud/kms/v1/key_management_service/rest"
 
 module Google
   module Cloud
@@ -44,11 +45,16 @@ module Google
         # If you are using manual gRPC libraries, see
         # [Using gRPC with Cloud KMS](https://cloud.google.com/kms/docs/grpc).
         #
-        # To load this service and instantiate a client:
+        # @example Load this service and instantiate a gRPC client
         #
         #     require "google/cloud/kms/v1/key_management_service"
         #     client = ::Google::Cloud::Kms::V1::KeyManagementService::Client.new
         #
+        # @example Load this service and instantiate a REST client
+        #
+        #     require "google/cloud/kms/v1/key_management_service/rest"
+        #     client = ::Google::Cloud::Kms::V1::KeyManagementService::Rest::Client.new
+        #
         module KeyManagementService
         end
       end

data/lib/google/cloud/kms/v1/resources_pb.rb

@@ -143,6 +143,10 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       value :IMPORT_METHOD_UNSPECIFIED, 0
       value :RSA_OAEP_3072_SHA1_AES_256, 1
       value :RSA_OAEP_4096_SHA1_AES_256, 2
+      value :RSA_OAEP_3072_SHA256_AES_256, 3
+      value :RSA_OAEP_4096_SHA256_AES_256, 4
+      value :RSA_OAEP_3072_SHA256, 5
+      value :RSA_OAEP_4096_SHA256, 6
     end
     add_enum "google.cloud.kms.v1.ImportJob.ImportJobState" do
       value :IMPORT_JOB_STATE_UNSPECIFIED, 0

data/lib/google/cloud/kms/v1/rest.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+# Copyright 2023 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+require "google/cloud/kms/v1/ekm_service/rest"
+require "google/cloud/kms/v1/key_management_service/rest"
+require "google/cloud/kms/v1/bindings_override"
+require "google/cloud/kms/v1/version"
+
+module Google
+  module Cloud
+    module Kms
+      ##
+      # To load just the REST part of this package, including all its services, and instantiate a REST client:
+      #
+      # @example
+      #
+      #     require "google/cloud/kms/v1/rest"
+      #     client = ::Google::Cloud::Kms::V1::EkmService::Rest::Client.new
+      #
+      module V1
+      end
+    end
+  end
+end

data/lib/google/cloud/kms/v1/service_pb.rb

@@ -98,6 +98,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :crypto_key_version, :string, 6
       optional :algorithm, :enum, 2, "google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionAlgorithm"
       optional :import_job, :string, 4
+      optional :wrapped_key, :bytes, 8
       oneof :wrapped_key_material do
         optional :rsa_aes_wrapped_key, :bytes, 5
       end

data/lib/google/cloud/kms/v1/version.rb

@@ -21,7 +21,7 @@ module Google
   module Cloud
     module Kms
       module V1
-        VERSION = "0.15.0"
+        VERSION = "0.17.0"
       end
     end
   end

data/lib/google/cloud/kms/v1.rb

@@ -24,13 +24,18 @@ module Google
   module Cloud
     module Kms
       ##
-      # To load this package, including all its services, and instantiate a client:
+      # API client module.
       #
-      # @example
+      # @example Load this package, including all its services, and instantiate a gRPC client
       #
       #     require "google/cloud/kms/v1"
       #     client = ::Google::Cloud::Kms::V1::EkmService::Client.new
       #
+      # @example Load this package, including all its services, and instantiate a REST client
+      #
+      #     require "google/cloud/kms/v1"
+      #     client = ::Google::Cloud::Kms::V1::EkmService::Rest::Client.new
+      #
       module V1
       end
     end

data/proto_docs/google/cloud/kms/v1/ekm_service.rb

@@ -21,7 +21,8 @@ module Google
   module Cloud
     module Kms
       module V1
-        # Request message for [KeyManagementService.ListEkmConnections][].
+        # Request message for
+        # {::Google::Cloud::Kms::V1::EkmService::Client#list_ekm_connections EkmService.ListEkmConnections}.
         # @!attribute [rw] parent
         #   @return [::String]
         #     Required. The resource name of the location associated with the
@@ -57,7 +58,8 @@ module Google
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
-        # Response message for [KeyManagementService.ListEkmConnections][].
+        # Response message for
+        # {::Google::Cloud::Kms::V1::EkmService::Client#list_ekm_connections EkmService.ListEkmConnections}.
         # @!attribute [rw] ekm_connections
         #   @return [::Array<::Google::Cloud::Kms::V1::EkmConnection>]
         #     The list of {::Google::Cloud::Kms::V1::EkmConnection EkmConnections}.
@@ -75,7 +77,8 @@ module Google
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
-        # Request message for [KeyManagementService.GetEkmConnection][].
+        # Request message for
+        # {::Google::Cloud::Kms::V1::EkmService::Client#get_ekm_connection EkmService.GetEkmConnection}.
         # @!attribute [rw] name
         #   @return [::String]
         #     Required. The {::Google::Cloud::Kms::V1::EkmConnection#name name} of the
@@ -85,7 +88,8 @@ module Google
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
-        # Request message for [KeyManagementService.CreateEkmConnection][].
+        # Request message for
+        # {::Google::Cloud::Kms::V1::EkmService::Client#create_ekm_connection EkmService.CreateEkmConnection}.
         # @!attribute [rw] parent
         #   @return [::String]
         #     Required. The resource name of the location associated with the
@@ -104,7 +108,8 @@ module Google
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
-        # Request message for [KeyManagementService.UpdateEkmConnection][].
+        # Request message for
+        # {::Google::Cloud::Kms::V1::EkmService::Client#update_ekm_connection EkmService.UpdateEkmConnection}.
         # @!attribute [rw] ekm_connection
         #   @return [::Google::Cloud::Kms::V1::EkmConnection]
         #     Required. {::Google::Cloud::Kms::V1::EkmConnection EkmConnection} with updated
@@ -185,9 +190,8 @@ module Google
         #     supported.
         # @!attribute [rw] etag
         #   @return [::String]
-        #     This checksum is computed by the server based on the value of other fields,
-        #     and may be sent on update requests to ensure the client has an up-to-date
-        #     value before proceeding.
+        #     Optional. Etag of the currently stored
+        #     {::Google::Cloud::Kms::V1::EkmConnection EkmConnection}.
         class EkmConnection
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -214,7 +218,8 @@ module Google
           # @!attribute [rw] server_certificates
           #   @return [::Array<::Google::Cloud::Kms::V1::Certificate>]
           #     Required. A list of leaf server certificates used to authenticate HTTPS
-          #     connections to the EKM replica.
+          #     connections to the EKM replica. Currently, a maximum of 10
+          #     {::Google::Cloud::Kms::V1::Certificate Certificate} is supported.
           class ServiceResolver
             include ::Google::Protobuf::MessageExts
             extend ::Google::Protobuf::MessageExts::ClassMethods

data/proto_docs/google/cloud/kms/v1/resources.rb

@@ -254,6 +254,9 @@ module Google
 
             # Cavium HSM attestation compressed with gzip. Note that this format is
             # defined by Cavium and subject to change at any time.
+            #
+            # See
+            # https://www.marvell.com/products/security-solutions/nitrox-hs-adapters/software-key-attestation.html.
             CAVIUM_V1_COMPRESSED = 3
 
             # Cavium HSM attestation V2 compressed with gzip. This is a new format
@@ -736,6 +739,34 @@ module Google
             # [RSA AES key wrap
             # mechanism](http://docs.oasis-open.org/pkcs11/pkcs11-curr/v2.40/cos01/pkcs11-curr-v2.40-cos01.html#_Toc408226908).
             RSA_OAEP_4096_SHA1_AES_256 = 2
+
+            # This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping
+            # scheme defined in the PKCS #11 standard. In summary, this involves
+            # wrapping the raw key with an ephemeral AES key, and wrapping the
+            # ephemeral AES key with a 3072 bit RSA key. For more details, see
+            # [RSA AES key wrap
+            # mechanism](http://docs.oasis-open.org/pkcs11/pkcs11-curr/v2.40/cos01/pkcs11-curr-v2.40-cos01.html#_Toc408226908).
+            RSA_OAEP_3072_SHA256_AES_256 = 3
+
+            # This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping
+            # scheme defined in the PKCS #11 standard. In summary, this involves
+            # wrapping the raw key with an ephemeral AES key, and wrapping the
+            # ephemeral AES key with a 4096 bit RSA key. For more details, see
+            # [RSA AES key wrap
+            # mechanism](http://docs.oasis-open.org/pkcs11/pkcs11-curr/v2.40/cos01/pkcs11-curr-v2.40-cos01.html#_Toc408226908).
+            RSA_OAEP_4096_SHA256_AES_256 = 4
+
+            # This ImportMethod represents RSAES-OAEP with a 3072 bit RSA key. The
+            # key material to be imported is wrapped directly with the RSA key. Due
+            # to technical limitations of RSA wrapping, this method cannot be used to
+            # wrap RSA keys for import.
+            RSA_OAEP_3072_SHA256 = 5
+
+            # This ImportMethod represents RSAES-OAEP with a 4096 bit RSA key. The
+            # key material to be imported is wrapped directly with the RSA key. Due
+            # to technical limitations of RSA wrapping, this method cannot be used to
+            # wrap RSA keys for import.
+            RSA_OAEP_4096_SHA256 = 6
           end
 
           # The state of the {::Google::Cloud::Kms::V1::ImportJob ImportJob}, indicating if

data/proto_docs/google/cloud/kms/v1/service.rb

@@ -413,32 +413,53 @@ module Google
         #     Required. The {::Google::Cloud::Kms::V1::ImportJob#name name} of the
         #     {::Google::Cloud::Kms::V1::ImportJob ImportJob} that was used to wrap this key
         #     material.
-        # @!attribute [rw] rsa_aes_wrapped_key
+        # @!attribute [rw] wrapped_key
         #   @return [::String]
-        #     Wrapped key material produced with
-        #     {::Google::Cloud::Kms::V1::ImportJob::ImportMethod::RSA_OAEP_3072_SHA1_AES_256 RSA_OAEP_3072_SHA1_AES_256}
+        #     Optional. The wrapped key material to import.
+        #
+        #     Before wrapping, key material must be formatted. If importing symmetric key
+        #     material, the expected key material format is plain bytes. If importing
+        #     asymmetric key material, the expected key material format is PKCS#8-encoded
+        #     DER (the PrivateKeyInfo structure from RFC 5208).
+        #
+        #     When wrapping with import methods
+        #     ({::Google::Cloud::Kms::V1::ImportJob::ImportMethod::RSA_OAEP_3072_SHA1_AES_256 RSA_OAEP_3072_SHA1_AES_256}
         #     or
-        #     {::Google::Cloud::Kms::V1::ImportJob::ImportMethod::RSA_OAEP_4096_SHA1_AES_256 RSA_OAEP_4096_SHA1_AES_256}.
+        #     {::Google::Cloud::Kms::V1::ImportJob::ImportMethod::RSA_OAEP_4096_SHA1_AES_256 RSA_OAEP_4096_SHA1_AES_256}
+        #     or
+        #     {::Google::Cloud::Kms::V1::ImportJob::ImportMethod::RSA_OAEP_3072_SHA256_AES_256 RSA_OAEP_3072_SHA256_AES_256}
+        #     or
+        #     {::Google::Cloud::Kms::V1::ImportJob::ImportMethod::RSA_OAEP_4096_SHA256_AES_256 RSA_OAEP_4096_SHA256_AES_256}),
         #
-        #     This field contains the concatenation of two wrapped keys:
+        #     this field must contain the concatenation of:
         #     <ol>
         #       <li>An ephemeral AES-256 wrapping key wrapped with the
         #           {::Google::Cloud::Kms::V1::ImportJob#public_key public_key} using
-        #           RSAES-OAEP with SHA-1/SHA-256, MGF1 with SHA-1/SHA-256, and an
-        #           empty label.
+        #           RSAES-OAEP with SHA-1/SHA-256, MGF1 with SHA-1/SHA-256, and an empty
+        #           label.
         #       </li>
-        #       <li>The key to be imported, wrapped with the ephemeral AES-256 key
-        #           using AES-KWP (RFC 5649).
+        #       <li>The formatted key to be imported, wrapped with the ephemeral AES-256
+        #           key using AES-KWP (RFC 5649).
         #       </li>
         #     </ol>
         #
-        #     If importing symmetric key material, it is expected that the unwrapped
-        #     key contains plain bytes. If importing asymmetric key material, it is
-        #     expected that the unwrapped key is in PKCS#8-encoded DER format (the
-        #     PrivateKeyInfo structure from RFC 5208).
-        #
         #     This format is the same as the format produced by PKCS#11 mechanism
         #     CKM_RSA_AES_KEY_WRAP.
+        #
+        #     When wrapping with import methods
+        #     ({::Google::Cloud::Kms::V1::ImportJob::ImportMethod::RSA_OAEP_3072_SHA256 RSA_OAEP_3072_SHA256}
+        #     or
+        #     {::Google::Cloud::Kms::V1::ImportJob::ImportMethod::RSA_OAEP_4096_SHA256 RSA_OAEP_4096_SHA256}),
+        #
+        #     this field must contain the formatted key to be imported, wrapped with the
+        #     {::Google::Cloud::Kms::V1::ImportJob#public_key public_key} using RSAES-OAEP
+        #     with SHA-256, MGF1 with SHA-256, and an empty label.
+        # @!attribute [rw] rsa_aes_wrapped_key
+        #   @return [::String]
+        #     Optional. This field has the same meaning as
+        #     {::Google::Cloud::Kms::V1::ImportCryptoKeyVersionRequest#wrapped_key wrapped_key}.
+        #     Prefer to use that field in new work. Either that field or this field
+        #     (but not both) must be specified.
         class ImportCryptoKeyVersionRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -545,7 +566,9 @@ module Google
         #
         #     The maximum size depends on the key version's
         #     {::Google::Cloud::Kms::V1::CryptoKeyVersionTemplate#protection_level protection_level}.
-        #     For {::Google::Cloud::Kms::V1::ProtectionLevel::SOFTWARE SOFTWARE} keys, the
+        #     For {::Google::Cloud::Kms::V1::ProtectionLevel::SOFTWARE SOFTWARE},
+        #     {::Google::Cloud::Kms::V1::ProtectionLevel::EXTERNAL EXTERNAL}, and
+        #     {::Google::Cloud::Kms::V1::ProtectionLevel::EXTERNAL_VPC EXTERNAL_VPC} keys, the
         #     plaintext must be no larger than 64KiB. For
         #     {::Google::Cloud::Kms::V1::ProtectionLevel::HSM HSM} keys, the combined length of
         #     the plaintext and additional_authenticated_data fields must be no larger
@@ -558,8 +581,10 @@ module Google
         #
         #     The maximum size depends on the key version's
         #     {::Google::Cloud::Kms::V1::CryptoKeyVersionTemplate#protection_level protection_level}.
-        #     For {::Google::Cloud::Kms::V1::ProtectionLevel::SOFTWARE SOFTWARE} keys, the AAD
-        #     must be no larger than 64KiB. For
+        #     For {::Google::Cloud::Kms::V1::ProtectionLevel::SOFTWARE SOFTWARE},
+        #     {::Google::Cloud::Kms::V1::ProtectionLevel::EXTERNAL EXTERNAL}, and
+        #     {::Google::Cloud::Kms::V1::ProtectionLevel::EXTERNAL_VPC EXTERNAL_VPC} keys the
+        #     AAD must be no larger than 64KiB. For
         #     {::Google::Cloud::Kms::V1::ProtectionLevel::HSM HSM} keys, the combined length of
         #     the plaintext and additional_authenticated_data fields must be no larger
         #     than 8KiB.

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-cloud-kms-v1
 version: !ruby/object:Gem::Version
-  version: 0.15.0
+  version: 0.17.0
 platform: ruby
 authors:
 - Google LLC
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-11-16 00:00:00.000000000 Z
+date: 2023-02-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: gapic-common
@@ -16,7 +16,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0.12'
+        version: 0.17.1
     - - "<"
       - !ruby/object:Gem::Version
         version: 2.a
@@ -26,7 +26,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0.12'
+        version: 0.17.1
     - - "<"
       - !ruby/object:Gem::Version
         version: 2.a
@@ -50,7 +50,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0.0'
+        version: '0.4'
     - - "<"
       - !ruby/object:Gem::Version
         version: 2.a
@@ -60,7 +60,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0.0'
+        version: '0.4'
     - - "<"
       - !ruby/object:Gem::Version
         version: 2.a
@@ -70,7 +70,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0.0'
+        version: '0.4'
     - - "<"
       - !ruby/object:Gem::Version
         version: 2.a
@@ -80,7 +80,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0.0'
+        version: '0.4'
     - - "<"
       - !ruby/object:Gem::Version
         version: 2.a
@@ -90,14 +90,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.26.1
+        version: 1.26.3
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.26.1
+        version: 1.26.3
 - !ruby/object:Gem::Dependency
   name: minitest
   requirement: !ruby/object:Gem::Requirement
@@ -212,10 +212,14 @@ files:
 - lib/google-cloud-kms-v1.rb
 - lib/google/cloud/kms/v1.rb
 - lib/google/cloud/kms/v1/_helpers.rb
+- lib/google/cloud/kms/v1/bindings_override.rb
 - lib/google/cloud/kms/v1/ekm_service.rb
 - lib/google/cloud/kms/v1/ekm_service/client.rb
 - lib/google/cloud/kms/v1/ekm_service/credentials.rb
 - lib/google/cloud/kms/v1/ekm_service/paths.rb
+- lib/google/cloud/kms/v1/ekm_service/rest.rb
+- lib/google/cloud/kms/v1/ekm_service/rest/client.rb
+- lib/google/cloud/kms/v1/ekm_service/rest/service_stub.rb
 - lib/google/cloud/kms/v1/ekm_service_pb.rb
 - lib/google/cloud/kms/v1/ekm_service_services_pb.rb
 - lib/google/cloud/kms/v1/iam_policy.rb
@@ -225,7 +229,11 @@ files:
 - lib/google/cloud/kms/v1/key_management_service/client.rb
 - lib/google/cloud/kms/v1/key_management_service/credentials.rb
 - lib/google/cloud/kms/v1/key_management_service/paths.rb
+- lib/google/cloud/kms/v1/key_management_service/rest.rb
+- lib/google/cloud/kms/v1/key_management_service/rest/client.rb
+- lib/google/cloud/kms/v1/key_management_service/rest/service_stub.rb
 - lib/google/cloud/kms/v1/resources_pb.rb
+- lib/google/cloud/kms/v1/rest.rb
 - lib/google/cloud/kms/v1/service_pb.rb
 - lib/google/cloud/kms/v1/service_services_pb.rb
 - lib/google/cloud/kms/v1/version.rb
@@ -262,7 +270,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.14
+rubygems_version: 3.4.2
 signing_key: 
 specification_version: 4
 summary: API Client library for the Cloud Key Management Service (KMS) V1 API