google-cloud-kms-v1 1.13.0 → 1.15.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 9eadcf4d165c74863b442afffcd0347687647c5e5b2cff74b51fa34fc459bdb6
4
- data.tar.gz: 448e15ffe5066555dff24b48a32afe47bd19130cea95b6ed25332a89297a4653
3
+ metadata.gz: 5ce7bcd974175cb2f7c440ca43c6a37355f0570d812c3e9b598c34628adabc1d
4
+ data.tar.gz: e0d64ff91d407d03d7f2c9a9b80c532baea65275f9e1ff19d05fb18cda93de4f
5
5
  SHA512:
6
- metadata.gz: b501991ac15ba913786e299501dbf954b11e3d8bdb2af6da654c2b690de504840f893f78ee2f880405183355382e1fcff9a305642fbf95285ed95d5def086b9c
7
- data.tar.gz: c2bc9fb8c6dbe4f3f99958738fc1e76fe7cc812fc2f50db8e3b47d4d3281105dc9f282192f33cede999e37f30a0341f9eb93b28855536975905f413c13aa0ffd
6
+ metadata.gz: 47b973a41071ca886b5d616218e74e6aec86a0a7c7021a9e0e5041a5a0b5bbb244cb8f279a3c6176716043ebb0e204a97c7bcc1d4ccd84e7f23b93f5cb799ac2
7
+ data.tar.gz: 91655fe9e2591f2ece6f18c2761c11300e6dc897720846407e4bdc81d6e7ecda873ffe4f06fe23128e300f8c134179b4005fb4ba5eb15cf08044629c4f4ab371
@@ -14,7 +14,7 @@ require 'google/protobuf/empty_pb'
14
14
  require 'google/protobuf/timestamp_pb'
15
15
 
16
16
 
17
- descriptor_data = "\n(google/cloud/kms/v1/hsm_management.proto\x12\x13google.cloud.kms.v1\x1a\x1cgoogle/api/annotations.proto\x1a\x17google/api/client.proto\x1a\x1fgoogle/api/field_behavior.proto\x1a\x19google/api/resource.proto\x1a#google/longrunning/operations.proto\x1a\x1egoogle/protobuf/duration.proto\x1a\x1bgoogle/protobuf/empty.proto\x1a\x1fgoogle/protobuf/timestamp.proto\"\xd2\x07\n\x17SingleTenantHsmInstance\x12\x11\n\x04name\x18\x01 \x01(\tB\x03\xe0\x41\x08\x12\x34\n\x0b\x63reate_time\x18\x02 \x01(\x0b\x32\x1a.google.protobuf.TimestampB\x03\xe0\x41\x03\x12\x46\n\x05state\x18\x03 \x01(\x0e\x32\x32.google.cloud.kms.v1.SingleTenantHsmInstance.StateB\x03\xe0\x41\x03\x12Q\n\x0bquorum_auth\x18\x04 \x01(\x0b\x32\x37.google.cloud.kms.v1.SingleTenantHsmInstance.QuorumAuthB\x03\xe0\x41\x02\x12\x34\n\x0b\x64\x65lete_time\x18\x05 \x01(\x0b\x32\x1a.google.protobuf.TimestampB\x03\xe0\x41\x03\x12J\n\"unrefreshed_duration_until_disable\x18\x06 \x01(\x0b\x32\x19.google.protobuf.DurationB\x03\xe0\x41\x03\x12\x35\n\x0c\x64isable_time\x18\x07 \x01(\x0b\x32\x1a.google.protobuf.TimestampB\x03\xe0\x41\x03\x12\'\n\x17key_portability_enabled\x18\x08 \x01(\x08\x42\x06\xe0\x41\x01\xe0\x41\x05\x1a~\n\nQuorumAuth\x12!\n\x14total_approver_count\x18\x01 \x01(\x05\x42\x03\xe0\x41\x02\x12$\n\x17required_approver_count\x18\x02 \x01(\x05\x42\x03\xe0\x41\x03\x12\'\n\x1atwo_factor_public_key_pems\x18\x03 \x03(\tB\x03\xe0\x41\x03\"\xa6\x01\n\x05State\x12\x15\n\x11STATE_UNSPECIFIED\x10\x00\x12\x0c\n\x08\x43REATING\x10\x01\x12(\n$PENDING_TWO_FACTOR_AUTH_REGISTRATION\x10\x02\x12\n\n\x06\x41\x43TIVE\x10\x03\x12\r\n\tDISABLING\x10\x04\x12\x0c\n\x08\x44ISABLED\x10\x05\x12\x0c\n\x08\x44\x45LETING\x10\x06\x12\x0b\n\x07\x44\x45LETED\x10\x07\x12\n\n\x06\x46\x41ILED\x10\x08:\xc7\x01\xea\x41\xc3\x01\n/cloudkms.googleapis.com/SingleTenantHsmInstance\x12]projects/{project}/locations/{location}/singleTenantHsmInstances/{single_tenant_hsm_instance}*\x18singleTenantHsmInstances2\x17singleTenantHsmInstance\"\x99\x15\n\x1fSingleTenantHsmInstanceProposal\x12\x11\n\x04name\x18\x01 \x01(\tB\x03\xe0\x41\x08\x12\x34\n\x0b\x63reate_time\x18\x02 \x01(\x0b\x32\x1a.google.protobuf.TimestampB\x03\xe0\x41\x03\x12N\n\x05state\x18\x03 \x01(\x0e\x32:.google.cloud.kms.v1.SingleTenantHsmInstanceProposal.StateB\x03\xe0\x41\x03\x12\x1b\n\x0e\x66\x61ilure_reason\x18\x04 \x01(\tB\x03\xe0\x41\x03\x12g\n\x11quorum_parameters\x18\x05 \x01(\x0b\x32\x45.google.cloud.kms.v1.SingleTenantHsmInstanceProposal.QuorumParametersB\x03\xe0\x41\x03H\x00\x12\x85\x01\n!required_action_quorum_parameters\x18\x0e \x01(\x0b\x32S.google.cloud.kms.v1.SingleTenantHsmInstanceProposal.RequiredActionQuorumParametersB\x03\xe0\x41\x03H\x00\x12\x31\n\x0b\x65xpire_time\x18\x06 \x01(\x0b\x32\x1a.google.protobuf.TimestampH\x01\x12-\n\x03ttl\x18\x07 \x01(\x0b\x32\x19.google.protobuf.DurationB\x03\xe0\x41\x04H\x01\x12\x34\n\x0b\x64\x65lete_time\x18\x0f \x01(\x0b\x32\x1a.google.protobuf.TimestampB\x03\xe0\x41\x03\x12\x33\n\npurge_time\x18\x10 \x01(\x0b\x32\x1a.google.protobuf.TimestampB\x03\xe0\x41\x03\x12w\n\x1dregister_two_factor_auth_keys\x18\x08 \x01(\x0b\x32N.google.cloud.kms.v1.SingleTenantHsmInstanceProposal.RegisterTwoFactorAuthKeysH\x02\x12\x81\x01\n\"disable_single_tenant_hsm_instance\x18\t \x01(\x0b\x32S.google.cloud.kms.v1.SingleTenantHsmInstanceProposal.DisableSingleTenantHsmInstanceH\x02\x12\x7f\n!enable_single_tenant_hsm_instance\x18\n \x01(\x0b\x32R.google.cloud.kms.v1.SingleTenantHsmInstanceProposal.EnableSingleTenantHsmInstanceH\x02\x12\x7f\n!delete_single_tenant_hsm_instance\x18\x0b \x01(\x0b\x32R.google.cloud.kms.v1.SingleTenantHsmInstanceProposal.DeleteSingleTenantHsmInstanceH\x02\x12\x61\n\x11\x61\x64\x64_quorum_member\x18\x0c \x01(\x0b\x32\x44.google.cloud.kms.v1.SingleTenantHsmInstanceProposal.AddQuorumMemberH\x02\x12g\n\x14remove_quorum_member\x18\r \x01(\x0b\x32G.google.cloud.kms.v1.SingleTenantHsmInstanceProposal.RemoveQuorumMemberH\x02\x12\x81\x01\n\"refresh_single_tenant_hsm_instance\x18\x11 \x01(\x0b\x32S.google.cloud.kms.v1.SingleTenantHsmInstanceProposal.RefreshSingleTenantHsmInstanceH\x02\x1a\xa3\x01\n\x10QuorumParameters\x12$\n\x17required_approver_count\x18\x01 \x01(\x05\x42\x03\xe0\x41\x03\x12\x37\n\nchallenges\x18\x02 \x03(\x0b\x32\x1e.google.cloud.kms.v1.ChallengeB\x03\xe0\x41\x03\x12\x30\n#approved_two_factor_public_key_pems\x18\x03 \x03(\tB\x03\xe0\x41\x03\x1a\xfa\x01\n\x1eRequiredActionQuorumParameters\x12@\n\x13required_challenges\x18\x01 \x03(\x0b\x32\x1e.google.cloud.kms.v1.ChallengeB\x03\xe0\x41\x03\x12$\n\x17required_approver_count\x18\x02 \x01(\x05\x42\x03\xe0\x41\x03\x12>\n\x11quorum_challenges\x18\x03 \x03(\x0b\x32\x1e.google.cloud.kms.v1.ChallengeB\x03\xe0\x41\x03\x12\x30\n#approved_two_factor_public_key_pems\x18\x04 \x03(\tB\x03\xe0\x41\x03\x1aj\n\x19RegisterTwoFactorAuthKeys\x12$\n\x17required_approver_count\x18\x01 \x01(\x05\x42\x03\xe0\x41\x02\x12\'\n\x1atwo_factor_public_key_pems\x18\x02 \x03(\tB\x03\xe0\x41\x02\x1a \n\x1e\x44isableSingleTenantHsmInstance\x1a\x1f\n\x1d\x45nableSingleTenantHsmInstance\x1a\x1f\n\x1d\x44\x65leteSingleTenantHsmInstance\x1a\x39\n\x0f\x41\x64\x64QuorumMember\x12&\n\x19two_factor_public_key_pem\x18\x01 \x01(\tB\x03\xe0\x41\x02\x1a<\n\x12RemoveQuorumMember\x12&\n\x19two_factor_public_key_pem\x18\x01 \x01(\tB\x03\xe0\x41\x02\x1a \n\x1eRefreshSingleTenantHsmInstance\"|\n\x05State\x12\x15\n\x11STATE_UNSPECIFIED\x10\x00\x12\x0c\n\x08\x43REATING\x10\x01\x12\x0b\n\x07PENDING\x10\x02\x12\x0c\n\x08\x41PPROVED\x10\x03\x12\x0b\n\x07RUNNING\x10\x04\x12\r\n\tSUCCEEDED\x10\x05\x12\n\n\x06\x46\x41ILED\x10\x06\x12\x0b\n\x07\x44\x45LETED\x10\x07:\xf4\x01\xea\x41\xf0\x01\n7cloudkms.googleapis.com/SingleTenantHsmInstanceProposal\x12rprojects/{project}/locations/{location}/singleTenantHsmInstances/{single_tenant_hsm_instance}/proposals/{proposal}* singleTenantHsmInstanceProposals2\x1fsingleTenantHsmInstanceProposalB\x15\n\x13\x61pproval_parametersB\x0c\n\nexpirationB\x0b\n\toperation\"@\n\tChallenge\x12\x16\n\tchallenge\x18\x01 \x01(\x0c\x42\x03\xe0\x41\x03\x12\x1b\n\x0epublic_key_pem\x18\x02 \x01(\tB\x03\xe0\x41\x03\"L\n\x0e\x43hallengeReply\x12\x1d\n\x10signed_challenge\x18\x01 \x01(\x0c\x42\x03\xe0\x41\x02\x12\x1b\n\x0epublic_key_pem\x18\x02 \x01(\tB\x03\xe0\x41\x02\"\xd8\x01\n#ListSingleTenantHsmInstancesRequest\x12\x39\n\x06parent\x18\x01 \x01(\tB)\xe0\x41\x02\xfa\x41#\n!locations.googleapis.com/Location\x12\x16\n\tpage_size\x18\x02 \x01(\x05\x42\x03\xe0\x41\x01\x12\x17\n\npage_token\x18\x03 \x01(\tB\x03\xe0\x41\x01\x12\x13\n\x06\x66ilter\x18\x04 \x01(\tB\x03\xe0\x41\x01\x12\x15\n\x08order_by\x18\x05 \x01(\tB\x03\xe0\x41\x01\x12\x19\n\x0cshow_deleted\x18\x06 \x01(\x08\x42\x03\xe0\x41\x01\"\xa6\x01\n$ListSingleTenantHsmInstancesResponse\x12Q\n\x1bsingle_tenant_hsm_instances\x18\x01 \x03(\x0b\x32,.google.cloud.kms.v1.SingleTenantHsmInstance\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\x12\x12\n\ntotal_size\x18\x03 \x01(\x05\"j\n!GetSingleTenantHsmInstanceRequest\x12\x45\n\x04name\x18\x01 \x01(\tB7\xe0\x41\x02\xfa\x41\x31\n/cloudkms.googleapis.com/SingleTenantHsmInstance\"\xe4\x01\n$CreateSingleTenantHsmInstanceRequest\x12\x39\n\x06parent\x18\x01 \x01(\tB)\xe0\x41\x02\xfa\x41#\n!locations.googleapis.com/Location\x12*\n\x1dsingle_tenant_hsm_instance_id\x18\x02 \x01(\tB\x03\xe0\x41\x01\x12U\n\x1asingle_tenant_hsm_instance\x18\x03 \x01(\x0b\x32,.google.cloud.kms.v1.SingleTenantHsmInstanceB\x03\xe0\x41\x02\"\'\n%CreateSingleTenantHsmInstanceMetadata\"\x94\x02\n,CreateSingleTenantHsmInstanceProposalRequest\x12G\n\x06parent\x18\x01 \x01(\tB7\xe0\x41\x02\xfa\x41\x31\n/cloudkms.googleapis.com/SingleTenantHsmInstance\x12\x33\n&single_tenant_hsm_instance_proposal_id\x18\x02 \x01(\tB\x03\xe0\x41\x01\x12\x66\n#single_tenant_hsm_instance_proposal\x18\x03 \x01(\x0b\x32\x34.google.cloud.kms.v1.SingleTenantHsmInstanceProposalB\x03\xe0\x41\x02\"/\n-CreateSingleTenantHsmInstanceProposalMetadata\"z\n)GetSingleTenantHsmInstanceProposalRequest\x12M\n\x04name\x18\x01 \x01(\tB?\xe0\x41\x02\xfa\x41\x39\n7cloudkms.googleapis.com/SingleTenantHsmInstanceProposal\"\x97\x05\n-ApproveSingleTenantHsmInstanceProposalRequest\x12M\n\x04name\x18\x01 \x01(\tB?\xe0\x41\x02\xfa\x41\x39\n7cloudkms.googleapis.com/SingleTenantHsmInstanceProposal\x12k\n\x0cquorum_reply\x18\x02 \x01(\x0b\x32N.google.cloud.kms.v1.ApproveSingleTenantHsmInstanceProposalRequest.QuorumReplyB\x03\xe0\x41\x02H\x00\x12\x89\x01\n\x1crequired_action_quorum_reply\x18\x03 \x01(\x0b\x32\\.google.cloud.kms.v1.ApproveSingleTenantHsmInstanceProposalRequest.RequiredActionQuorumReplyB\x03\xe0\x41\x02H\x00\x1aR\n\x0bQuorumReply\x12\x43\n\x11\x63hallenge_replies\x18\x01 \x03(\x0b\x32#.google.cloud.kms.v1.ChallengeReplyB\x03\xe0\x41\x02\x1a\xb5\x01\n\x19RequiredActionQuorumReply\x12L\n\x1arequired_challenge_replies\x18\x01 \x03(\x0b\x32#.google.cloud.kms.v1.ChallengeReplyB\x03\xe0\x41\x02\x12J\n\x18quorum_challenge_replies\x18\x02 \x03(\x0b\x32#.google.cloud.kms.v1.ChallengeReplyB\x03\xe0\x41\x02\x42\x12\n\x10\x61pproval_payload\"0\n.ApproveSingleTenantHsmInstanceProposalResponse\"~\n-ExecuteSingleTenantHsmInstanceProposalRequest\x12M\n\x04name\x18\x01 \x01(\tB?\xe0\x41\x02\xfa\x41\x39\n7cloudkms.googleapis.com/SingleTenantHsmInstanceProposal\"0\n.ExecuteSingleTenantHsmInstanceProposalResponse\"0\n.ExecuteSingleTenantHsmInstanceProposalMetadata\"\xee\x01\n+ListSingleTenantHsmInstanceProposalsRequest\x12G\n\x06parent\x18\x01 \x01(\tB7\xe0\x41\x02\xfa\x41\x31\n/cloudkms.googleapis.com/SingleTenantHsmInstance\x12\x16\n\tpage_size\x18\x02 \x01(\x05\x42\x03\xe0\x41\x01\x12\x17\n\npage_token\x18\x03 \x01(\tB\x03\xe0\x41\x01\x12\x13\n\x06\x66ilter\x18\x04 \x01(\tB\x03\xe0\x41\x01\x12\x15\n\x08order_by\x18\x05 \x01(\tB\x03\xe0\x41\x01\x12\x19\n\x0cshow_deleted\x18\x06 \x01(\x08\x42\x03\xe0\x41\x01\"\xbf\x01\n,ListSingleTenantHsmInstanceProposalsResponse\x12\x62\n$single_tenant_hsm_instance_proposals\x18\x01 \x03(\x0b\x32\x34.google.cloud.kms.v1.SingleTenantHsmInstanceProposal\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\x12\x12\n\ntotal_size\x18\x03 \x01(\x05\"}\n,DeleteSingleTenantHsmInstanceProposalRequest\x12M\n\x04name\x18\x01 \x01(\tB?\xe0\x41\x02\xfa\x41\x39\n7cloudkms.googleapis.com/SingleTenantHsmInstanceProposal2\xa3\x15\n\rHsmManagement\x12\xe2\x01\n\x1cListSingleTenantHsmInstances\x12\x38.google.cloud.kms.v1.ListSingleTenantHsmInstancesRequest\x1a\x39.google.cloud.kms.v1.ListSingleTenantHsmInstancesResponse\"M\xda\x41\x06parent\x82\xd3\xe4\x93\x02>\x12</v1/{parent=projects/*/locations/*}/singleTenantHsmInstances\x12\xcf\x01\n\x1aGetSingleTenantHsmInstance\x12\x36.google.cloud.kms.v1.GetSingleTenantHsmInstanceRequest\x1a,.google.cloud.kms.v1.SingleTenantHsmInstance\"K\xda\x41\x04name\x82\xd3\xe4\x93\x02>\x12</v1/{name=projects/*/locations/*/singleTenantHsmInstances/*}\x12\xe1\x02\n\x1d\x43reateSingleTenantHsmInstance\x12\x39.google.cloud.kms.v1.CreateSingleTenantHsmInstanceRequest\x1a\x1d.google.longrunning.Operation\"\xe5\x01\xca\x41@\n\x17SingleTenantHsmInstance\x12%CreateSingleTenantHsmInstanceMetadata\xda\x41?parent,single_tenant_hsm_instance,single_tenant_hsm_instance_id\x82\xd3\xe4\x93\x02Z\"</v1/{parent=projects/*/locations/*}/singleTenantHsmInstances:\x1asingle_tenant_hsm_instance\x12\xa8\x03\n%CreateSingleTenantHsmInstanceProposal\x12\x41.google.cloud.kms.v1.CreateSingleTenantHsmInstanceProposalRequest\x1a\x1d.google.longrunning.Operation\"\x9c\x02\xca\x41P\n\x1fSingleTenantHsmInstanceProposal\x12-CreateSingleTenantHsmInstanceProposalMetadata\xda\x41Qparent,single_tenant_hsm_instance_proposal,single_tenant_hsm_instance_proposal_id\x82\xd3\xe4\x93\x02o\"H/v1/{parent=projects/*/locations/*/singleTenantHsmInstances/*}/proposals:#single_tenant_hsm_instance_proposal\x12\xa2\x02\n&ApproveSingleTenantHsmInstanceProposal\x12\x42.google.cloud.kms.v1.ApproveSingleTenantHsmInstanceProposalRequest\x1a\x43.google.cloud.kms.v1.ApproveSingleTenantHsmInstanceProposalResponse\"o\xda\x41\x11name,quorum_reply\x82\xd3\xe4\x93\x02U\"P/v1/{name=projects/*/locations/*/singleTenantHsmInstances/*/proposals/*}:approve:\x01*\x12\xd3\x02\n&ExecuteSingleTenantHsmInstanceProposal\x12\x42.google.cloud.kms.v1.ExecuteSingleTenantHsmInstanceProposalRequest\x1a\x1d.google.longrunning.Operation\"\xc5\x01\xca\x41`\n.ExecuteSingleTenantHsmInstanceProposalResponse\x12.ExecuteSingleTenantHsmInstanceProposalMetadata\xda\x41\x04name\x82\xd3\xe4\x93\x02U\"P/v1/{name=projects/*/locations/*/singleTenantHsmInstances/*/proposals/*}:execute:\x01*\x12\xf3\x01\n\"GetSingleTenantHsmInstanceProposal\x12>.google.cloud.kms.v1.GetSingleTenantHsmInstanceProposalRequest\x1a\x34.google.cloud.kms.v1.SingleTenantHsmInstanceProposal\"W\xda\x41\x04name\x82\xd3\xe4\x93\x02J\x12H/v1/{name=projects/*/locations/*/singleTenantHsmInstances/*/proposals/*}\x12\x86\x02\n$ListSingleTenantHsmInstanceProposals\x12@.google.cloud.kms.v1.ListSingleTenantHsmInstanceProposalsRequest\x1a\x41.google.cloud.kms.v1.ListSingleTenantHsmInstanceProposalsResponse\"Y\xda\x41\x06parent\x82\xd3\xe4\x93\x02J\x12H/v1/{parent=projects/*/locations/*/singleTenantHsmInstances/*}/proposals\x12\xdb\x01\n%DeleteSingleTenantHsmInstanceProposal\x12\x41.google.cloud.kms.v1.DeleteSingleTenantHsmInstanceProposalRequest\x1a\x16.google.protobuf.Empty\"W\xda\x41\x04name\x82\xd3\xe4\x93\x02J*H/v1/{name=projects/*/locations/*/singleTenantHsmInstances/*/proposals/*}\x1at\xca\x41\x17\x63loudkms.googleapis.com\xd2\x41Whttps://www.googleapis.com/auth/cloud-platform,https://www.googleapis.com/auth/cloudkmsB\x86\x01\n\x17\x63om.google.cloud.kms.v1B\x12HsmManagementProtoP\x01Z)cloud.google.com/go/kms/apiv1/kmspb;kmspb\xaa\x02\x13Google.Cloud.Kms.V1\xca\x02\x13Google\\Cloud\\Kms\\V1b\x06proto3"
17
+ descriptor_data = "\n(google/cloud/kms/v1/hsm_management.proto\x12\x13google.cloud.kms.v1\x1a\x1cgoogle/api/annotations.proto\x1a\x17google/api/client.proto\x1a\x1fgoogle/api/field_behavior.proto\x1a\x19google/api/resource.proto\x1a#google/longrunning/operations.proto\x1a\x1egoogle/protobuf/duration.proto\x1a\x1bgoogle/protobuf/empty.proto\x1a\x1fgoogle/protobuf/timestamp.proto\"\xd2\x07\n\x17SingleTenantHsmInstance\x12\x11\n\x04name\x18\x01 \x01(\tB\x03\xe0\x41\x08\x12\x34\n\x0b\x63reate_time\x18\x02 \x01(\x0b\x32\x1a.google.protobuf.TimestampB\x03\xe0\x41\x03\x12\x46\n\x05state\x18\x03 \x01(\x0e\x32\x32.google.cloud.kms.v1.SingleTenantHsmInstance.StateB\x03\xe0\x41\x03\x12Q\n\x0bquorum_auth\x18\x04 \x01(\x0b\x32\x37.google.cloud.kms.v1.SingleTenantHsmInstance.QuorumAuthB\x03\xe0\x41\x02\x12\x34\n\x0b\x64\x65lete_time\x18\x05 \x01(\x0b\x32\x1a.google.protobuf.TimestampB\x03\xe0\x41\x03\x12J\n\"unrefreshed_duration_until_disable\x18\x06 \x01(\x0b\x32\x19.google.protobuf.DurationB\x03\xe0\x41\x03\x12\x35\n\x0c\x64isable_time\x18\x07 \x01(\x0b\x32\x1a.google.protobuf.TimestampB\x03\xe0\x41\x03\x12\'\n\x17key_portability_enabled\x18\x08 \x01(\x08\x42\x06\xe0\x41\x01\xe0\x41\x05\x1a~\n\nQuorumAuth\x12!\n\x14total_approver_count\x18\x01 \x01(\x05\x42\x03\xe0\x41\x02\x12$\n\x17required_approver_count\x18\x02 \x01(\x05\x42\x03\xe0\x41\x03\x12\'\n\x1atwo_factor_public_key_pems\x18\x03 \x03(\tB\x03\xe0\x41\x03\"\xa6\x01\n\x05State\x12\x15\n\x11STATE_UNSPECIFIED\x10\x00\x12\x0c\n\x08\x43REATING\x10\x01\x12(\n$PENDING_TWO_FACTOR_AUTH_REGISTRATION\x10\x02\x12\n\n\x06\x41\x43TIVE\x10\x03\x12\r\n\tDISABLING\x10\x04\x12\x0c\n\x08\x44ISABLED\x10\x05\x12\x0c\n\x08\x44\x45LETING\x10\x06\x12\x0b\n\x07\x44\x45LETED\x10\x07\x12\n\n\x06\x46\x41ILED\x10\x08:\xc7\x01\xea\x41\xc3\x01\n/cloudkms.googleapis.com/SingleTenantHsmInstance\x12]projects/{project}/locations/{location}/singleTenantHsmInstances/{single_tenant_hsm_instance}*\x18singleTenantHsmInstances2\x17singleTenantHsmInstance\"\xca\x16\n\x1fSingleTenantHsmInstanceProposal\x12\x11\n\x04name\x18\x01 \x01(\tB\x03\xe0\x41\x08\x12\x34\n\x0b\x63reate_time\x18\x02 \x01(\x0b\x32\x1a.google.protobuf.TimestampB\x03\xe0\x41\x03\x12N\n\x05state\x18\x03 \x01(\x0e\x32:.google.cloud.kms.v1.SingleTenantHsmInstanceProposal.StateB\x03\xe0\x41\x03\x12\x1b\n\x0e\x66\x61ilure_reason\x18\x04 \x01(\tB\x03\xe0\x41\x03\x12g\n\x11quorum_parameters\x18\x05 \x01(\x0b\x32\x45.google.cloud.kms.v1.SingleTenantHsmInstanceProposal.QuorumParametersB\x03\xe0\x41\x03H\x00\x12\x85\x01\n!required_action_quorum_parameters\x18\x0e \x01(\x0b\x32S.google.cloud.kms.v1.SingleTenantHsmInstanceProposal.RequiredActionQuorumParametersB\x03\xe0\x41\x03H\x00\x12\x31\n\x0b\x65xpire_time\x18\x06 \x01(\x0b\x32\x1a.google.protobuf.TimestampH\x01\x12-\n\x03ttl\x18\x07 \x01(\x0b\x32\x19.google.protobuf.DurationB\x03\xe0\x41\x04H\x01\x12\x34\n\x0b\x64\x65lete_time\x18\x0f \x01(\x0b\x32\x1a.google.protobuf.TimestampB\x03\xe0\x41\x03\x12\x33\n\npurge_time\x18\x10 \x01(\x0b\x32\x1a.google.protobuf.TimestampB\x03\xe0\x41\x03\x12w\n\x1dregister_two_factor_auth_keys\x18\x08 \x01(\x0b\x32N.google.cloud.kms.v1.SingleTenantHsmInstanceProposal.RegisterTwoFactorAuthKeysH\x02\x12\x81\x01\n\"disable_single_tenant_hsm_instance\x18\t \x01(\x0b\x32S.google.cloud.kms.v1.SingleTenantHsmInstanceProposal.DisableSingleTenantHsmInstanceH\x02\x12\x7f\n!enable_single_tenant_hsm_instance\x18\n \x01(\x0b\x32R.google.cloud.kms.v1.SingleTenantHsmInstanceProposal.EnableSingleTenantHsmInstanceH\x02\x12\x7f\n!delete_single_tenant_hsm_instance\x18\x0b \x01(\x0b\x32R.google.cloud.kms.v1.SingleTenantHsmInstanceProposal.DeleteSingleTenantHsmInstanceH\x02\x12\x61\n\x11\x61\x64\x64_quorum_member\x18\x0c \x01(\x0b\x32\x44.google.cloud.kms.v1.SingleTenantHsmInstanceProposal.AddQuorumMemberH\x02\x12g\n\x14remove_quorum_member\x18\r \x01(\x0b\x32G.google.cloud.kms.v1.SingleTenantHsmInstanceProposal.RemoveQuorumMemberH\x02\x12\x81\x01\n\"refresh_single_tenant_hsm_instance\x18\x11 \x01(\x0b\x32S.google.cloud.kms.v1.SingleTenantHsmInstanceProposal.RefreshSingleTenantHsmInstanceH\x02\x12\x61\n\x11upgrade_key_trust\x18\x12 \x01(\x0b\x32\x44.google.cloud.kms.v1.SingleTenantHsmInstanceProposal.UpgradeKeyTrustH\x02\x1a\xa3\x01\n\x10QuorumParameters\x12$\n\x17required_approver_count\x18\x01 \x01(\x05\x42\x03\xe0\x41\x03\x12\x37\n\nchallenges\x18\x02 \x03(\x0b\x32\x1e.google.cloud.kms.v1.ChallengeB\x03\xe0\x41\x03\x12\x30\n#approved_two_factor_public_key_pems\x18\x03 \x03(\tB\x03\xe0\x41\x03\x1a\xfa\x01\n\x1eRequiredActionQuorumParameters\x12@\n\x13required_challenges\x18\x01 \x03(\x0b\x32\x1e.google.cloud.kms.v1.ChallengeB\x03\xe0\x41\x03\x12$\n\x17required_approver_count\x18\x02 \x01(\x05\x42\x03\xe0\x41\x03\x12>\n\x11quorum_challenges\x18\x03 \x03(\x0b\x32\x1e.google.cloud.kms.v1.ChallengeB\x03\xe0\x41\x03\x12\x30\n#approved_two_factor_public_key_pems\x18\x04 \x03(\tB\x03\xe0\x41\x03\x1aj\n\x19RegisterTwoFactorAuthKeys\x12$\n\x17required_approver_count\x18\x01 \x01(\x05\x42\x03\xe0\x41\x02\x12\'\n\x1atwo_factor_public_key_pems\x18\x02 \x03(\tB\x03\xe0\x41\x02\x1a \n\x1e\x44isableSingleTenantHsmInstance\x1a\x1f\n\x1d\x45nableSingleTenantHsmInstance\x1a\x1f\n\x1d\x44\x65leteSingleTenantHsmInstance\x1a\x39\n\x0f\x41\x64\x64QuorumMember\x12&\n\x19two_factor_public_key_pem\x18\x01 \x01(\tB\x03\xe0\x41\x02\x1a<\n\x12RemoveQuorumMember\x12&\n\x19two_factor_public_key_pem\x18\x01 \x01(\tB\x03\xe0\x41\x02\x1a \n\x1eRefreshSingleTenantHsmInstance\x1aL\n\x0fUpgradeKeyTrust\x12\x11\n\x04name\x18\x01 \x01(\tB\x03\xe0\x41\x02\x12&\n\x19two_factor_public_key_pem\x18\x02 \x01(\tB\x03\xe0\x41\x02\"|\n\x05State\x12\x15\n\x11STATE_UNSPECIFIED\x10\x00\x12\x0c\n\x08\x43REATING\x10\x01\x12\x0b\n\x07PENDING\x10\x02\x12\x0c\n\x08\x41PPROVED\x10\x03\x12\x0b\n\x07RUNNING\x10\x04\x12\r\n\tSUCCEEDED\x10\x05\x12\n\n\x06\x46\x41ILED\x10\x06\x12\x0b\n\x07\x44\x45LETED\x10\x07:\xf4\x01\xea\x41\xf0\x01\n7cloudkms.googleapis.com/SingleTenantHsmInstanceProposal\x12rprojects/{project}/locations/{location}/singleTenantHsmInstances/{single_tenant_hsm_instance}/proposals/{proposal}* singleTenantHsmInstanceProposals2\x1fsingleTenantHsmInstanceProposalB\x15\n\x13\x61pproval_parametersB\x0c\n\nexpirationB\x0b\n\toperation\"@\n\tChallenge\x12\x16\n\tchallenge\x18\x01 \x01(\x0c\x42\x03\xe0\x41\x03\x12\x1b\n\x0epublic_key_pem\x18\x02 \x01(\tB\x03\xe0\x41\x03\"L\n\x0e\x43hallengeReply\x12\x1d\n\x10signed_challenge\x18\x01 \x01(\x0c\x42\x03\xe0\x41\x02\x12\x1b\n\x0epublic_key_pem\x18\x02 \x01(\tB\x03\xe0\x41\x02\"\xd8\x01\n#ListSingleTenantHsmInstancesRequest\x12\x39\n\x06parent\x18\x01 \x01(\tB)\xe0\x41\x02\xfa\x41#\n!locations.googleapis.com/Location\x12\x16\n\tpage_size\x18\x02 \x01(\x05\x42\x03\xe0\x41\x01\x12\x17\n\npage_token\x18\x03 \x01(\tB\x03\xe0\x41\x01\x12\x13\n\x06\x66ilter\x18\x04 \x01(\tB\x03\xe0\x41\x01\x12\x15\n\x08order_by\x18\x05 \x01(\tB\x03\xe0\x41\x01\x12\x19\n\x0cshow_deleted\x18\x06 \x01(\x08\x42\x03\xe0\x41\x01\"\xa6\x01\n$ListSingleTenantHsmInstancesResponse\x12Q\n\x1bsingle_tenant_hsm_instances\x18\x01 \x03(\x0b\x32,.google.cloud.kms.v1.SingleTenantHsmInstance\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\x12\x12\n\ntotal_size\x18\x03 \x01(\x05\"j\n!GetSingleTenantHsmInstanceRequest\x12\x45\n\x04name\x18\x01 \x01(\tB7\xe0\x41\x02\xfa\x41\x31\n/cloudkms.googleapis.com/SingleTenantHsmInstance\"\xe4\x01\n$CreateSingleTenantHsmInstanceRequest\x12\x39\n\x06parent\x18\x01 \x01(\tB)\xe0\x41\x02\xfa\x41#\n!locations.googleapis.com/Location\x12*\n\x1dsingle_tenant_hsm_instance_id\x18\x02 \x01(\tB\x03\xe0\x41\x01\x12U\n\x1asingle_tenant_hsm_instance\x18\x03 \x01(\x0b\x32,.google.cloud.kms.v1.SingleTenantHsmInstanceB\x03\xe0\x41\x02\"\'\n%CreateSingleTenantHsmInstanceMetadata\"\x94\x02\n,CreateSingleTenantHsmInstanceProposalRequest\x12G\n\x06parent\x18\x01 \x01(\tB7\xe0\x41\x02\xfa\x41\x31\n/cloudkms.googleapis.com/SingleTenantHsmInstance\x12\x33\n&single_tenant_hsm_instance_proposal_id\x18\x02 \x01(\tB\x03\xe0\x41\x01\x12\x66\n#single_tenant_hsm_instance_proposal\x18\x03 \x01(\x0b\x32\x34.google.cloud.kms.v1.SingleTenantHsmInstanceProposalB\x03\xe0\x41\x02\"/\n-CreateSingleTenantHsmInstanceProposalMetadata\"z\n)GetSingleTenantHsmInstanceProposalRequest\x12M\n\x04name\x18\x01 \x01(\tB?\xe0\x41\x02\xfa\x41\x39\n7cloudkms.googleapis.com/SingleTenantHsmInstanceProposal\"\x97\x05\n-ApproveSingleTenantHsmInstanceProposalRequest\x12M\n\x04name\x18\x01 \x01(\tB?\xe0\x41\x02\xfa\x41\x39\n7cloudkms.googleapis.com/SingleTenantHsmInstanceProposal\x12k\n\x0cquorum_reply\x18\x02 \x01(\x0b\x32N.google.cloud.kms.v1.ApproveSingleTenantHsmInstanceProposalRequest.QuorumReplyB\x03\xe0\x41\x02H\x00\x12\x89\x01\n\x1crequired_action_quorum_reply\x18\x03 \x01(\x0b\x32\\.google.cloud.kms.v1.ApproveSingleTenantHsmInstanceProposalRequest.RequiredActionQuorumReplyB\x03\xe0\x41\x02H\x00\x1aR\n\x0bQuorumReply\x12\x43\n\x11\x63hallenge_replies\x18\x01 \x03(\x0b\x32#.google.cloud.kms.v1.ChallengeReplyB\x03\xe0\x41\x02\x1a\xb5\x01\n\x19RequiredActionQuorumReply\x12L\n\x1arequired_challenge_replies\x18\x01 \x03(\x0b\x32#.google.cloud.kms.v1.ChallengeReplyB\x03\xe0\x41\x02\x12J\n\x18quorum_challenge_replies\x18\x02 \x03(\x0b\x32#.google.cloud.kms.v1.ChallengeReplyB\x03\xe0\x41\x02\x42\x12\n\x10\x61pproval_payload\"0\n.ApproveSingleTenantHsmInstanceProposalResponse\"~\n-ExecuteSingleTenantHsmInstanceProposalRequest\x12M\n\x04name\x18\x01 \x01(\tB?\xe0\x41\x02\xfa\x41\x39\n7cloudkms.googleapis.com/SingleTenantHsmInstanceProposal\"0\n.ExecuteSingleTenantHsmInstanceProposalResponse\"0\n.ExecuteSingleTenantHsmInstanceProposalMetadata\"\xee\x01\n+ListSingleTenantHsmInstanceProposalsRequest\x12G\n\x06parent\x18\x01 \x01(\tB7\xe0\x41\x02\xfa\x41\x31\n/cloudkms.googleapis.com/SingleTenantHsmInstance\x12\x16\n\tpage_size\x18\x02 \x01(\x05\x42\x03\xe0\x41\x01\x12\x17\n\npage_token\x18\x03 \x01(\tB\x03\xe0\x41\x01\x12\x13\n\x06\x66ilter\x18\x04 \x01(\tB\x03\xe0\x41\x01\x12\x15\n\x08order_by\x18\x05 \x01(\tB\x03\xe0\x41\x01\x12\x19\n\x0cshow_deleted\x18\x06 \x01(\x08\x42\x03\xe0\x41\x01\"\xbf\x01\n,ListSingleTenantHsmInstanceProposalsResponse\x12\x62\n$single_tenant_hsm_instance_proposals\x18\x01 \x03(\x0b\x32\x34.google.cloud.kms.v1.SingleTenantHsmInstanceProposal\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\x12\x12\n\ntotal_size\x18\x03 \x01(\x05\"}\n,DeleteSingleTenantHsmInstanceProposalRequest\x12M\n\x04name\x18\x01 \x01(\tB?\xe0\x41\x02\xfa\x41\x39\n7cloudkms.googleapis.com/SingleTenantHsmInstanceProposal2\xa3\x15\n\rHsmManagement\x12\xe2\x01\n\x1cListSingleTenantHsmInstances\x12\x38.google.cloud.kms.v1.ListSingleTenantHsmInstancesRequest\x1a\x39.google.cloud.kms.v1.ListSingleTenantHsmInstancesResponse\"M\xda\x41\x06parent\x82\xd3\xe4\x93\x02>\x12</v1/{parent=projects/*/locations/*}/singleTenantHsmInstances\x12\xcf\x01\n\x1aGetSingleTenantHsmInstance\x12\x36.google.cloud.kms.v1.GetSingleTenantHsmInstanceRequest\x1a,.google.cloud.kms.v1.SingleTenantHsmInstance\"K\xda\x41\x04name\x82\xd3\xe4\x93\x02>\x12</v1/{name=projects/*/locations/*/singleTenantHsmInstances/*}\x12\xe1\x02\n\x1d\x43reateSingleTenantHsmInstance\x12\x39.google.cloud.kms.v1.CreateSingleTenantHsmInstanceRequest\x1a\x1d.google.longrunning.Operation\"\xe5\x01\xca\x41@\n\x17SingleTenantHsmInstance\x12%CreateSingleTenantHsmInstanceMetadata\xda\x41?parent,single_tenant_hsm_instance,single_tenant_hsm_instance_id\x82\xd3\xe4\x93\x02Z\"</v1/{parent=projects/*/locations/*}/singleTenantHsmInstances:\x1asingle_tenant_hsm_instance\x12\xa8\x03\n%CreateSingleTenantHsmInstanceProposal\x12\x41.google.cloud.kms.v1.CreateSingleTenantHsmInstanceProposalRequest\x1a\x1d.google.longrunning.Operation\"\x9c\x02\xca\x41P\n\x1fSingleTenantHsmInstanceProposal\x12-CreateSingleTenantHsmInstanceProposalMetadata\xda\x41Qparent,single_tenant_hsm_instance_proposal,single_tenant_hsm_instance_proposal_id\x82\xd3\xe4\x93\x02o\"H/v1/{parent=projects/*/locations/*/singleTenantHsmInstances/*}/proposals:#single_tenant_hsm_instance_proposal\x12\xa2\x02\n&ApproveSingleTenantHsmInstanceProposal\x12\x42.google.cloud.kms.v1.ApproveSingleTenantHsmInstanceProposalRequest\x1a\x43.google.cloud.kms.v1.ApproveSingleTenantHsmInstanceProposalResponse\"o\xda\x41\x11name,quorum_reply\x82\xd3\xe4\x93\x02U\"P/v1/{name=projects/*/locations/*/singleTenantHsmInstances/*/proposals/*}:approve:\x01*\x12\xd3\x02\n&ExecuteSingleTenantHsmInstanceProposal\x12\x42.google.cloud.kms.v1.ExecuteSingleTenantHsmInstanceProposalRequest\x1a\x1d.google.longrunning.Operation\"\xc5\x01\xca\x41`\n.ExecuteSingleTenantHsmInstanceProposalResponse\x12.ExecuteSingleTenantHsmInstanceProposalMetadata\xda\x41\x04name\x82\xd3\xe4\x93\x02U\"P/v1/{name=projects/*/locations/*/singleTenantHsmInstances/*/proposals/*}:execute:\x01*\x12\xf3\x01\n\"GetSingleTenantHsmInstanceProposal\x12>.google.cloud.kms.v1.GetSingleTenantHsmInstanceProposalRequest\x1a\x34.google.cloud.kms.v1.SingleTenantHsmInstanceProposal\"W\xda\x41\x04name\x82\xd3\xe4\x93\x02J\x12H/v1/{name=projects/*/locations/*/singleTenantHsmInstances/*/proposals/*}\x12\x86\x02\n$ListSingleTenantHsmInstanceProposals\x12@.google.cloud.kms.v1.ListSingleTenantHsmInstanceProposalsRequest\x1a\x41.google.cloud.kms.v1.ListSingleTenantHsmInstanceProposalsResponse\"Y\xda\x41\x06parent\x82\xd3\xe4\x93\x02J\x12H/v1/{parent=projects/*/locations/*/singleTenantHsmInstances/*}/proposals\x12\xdb\x01\n%DeleteSingleTenantHsmInstanceProposal\x12\x41.google.cloud.kms.v1.DeleteSingleTenantHsmInstanceProposalRequest\x1a\x16.google.protobuf.Empty\"W\xda\x41\x04name\x82\xd3\xe4\x93\x02J*H/v1/{name=projects/*/locations/*/singleTenantHsmInstances/*/proposals/*}\x1at\xca\x41\x17\x63loudkms.googleapis.com\xd2\x41Whttps://www.googleapis.com/auth/cloud-platform,https://www.googleapis.com/auth/cloudkmsB\x86\x01\n\x17\x63om.google.cloud.kms.v1B\x12HsmManagementProtoP\x01Z)cloud.google.com/go/kms/apiv1/kmspb;kmspb\xaa\x02\x13Google.Cloud.Kms.V1\xca\x02\x13Google\\Cloud\\Kms\\V1b\x06proto3"
18
18
 
19
19
  pool = ::Google::Protobuf::DescriptorPool.generated_pool
20
20
  pool.add_serialized_file(descriptor_data)
@@ -36,6 +36,7 @@ module Google
36
36
  SingleTenantHsmInstanceProposal::AddQuorumMember = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.kms.v1.SingleTenantHsmInstanceProposal.AddQuorumMember").msgclass
37
37
  SingleTenantHsmInstanceProposal::RemoveQuorumMember = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.kms.v1.SingleTenantHsmInstanceProposal.RemoveQuorumMember").msgclass
38
38
  SingleTenantHsmInstanceProposal::RefreshSingleTenantHsmInstance = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.kms.v1.SingleTenantHsmInstanceProposal.RefreshSingleTenantHsmInstance").msgclass
39
+ SingleTenantHsmInstanceProposal::UpgradeKeyTrust = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.kms.v1.SingleTenantHsmInstanceProposal.UpgradeKeyTrust").msgclass
39
40
  SingleTenantHsmInstanceProposal::State = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.kms.v1.SingleTenantHsmInstanceProposal.State").enummodule
40
41
  Challenge = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.kms.v1.Challenge").msgclass
41
42
  ChallengeReply = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.kms.v1.ChallengeReply").msgclass
@@ -1322,7 +1322,7 @@ module Google
1322
1322
  # @param options [::Gapic::CallOptions, ::Hash]
1323
1323
  # Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
1324
1324
  #
1325
- # @overload get_import_job(name: nil)
1325
+ # @overload get_import_job(name: nil, public_key_format: nil)
1326
1326
  # Pass arguments to `get_import_job` via keyword arguments. Note that at
1327
1327
  # least one keyword argument is required. To specify no parameters, or to keep all
1328
1328
  # the default parameter values, pass an empty Hash as a request object (see above).
@@ -1330,6 +1330,16 @@ module Google
1330
1330
  # @param name [::String]
1331
1331
  # Required. The {::Google::Cloud::Kms::V1::ImportJob#name name} of the
1332
1332
  # {::Google::Cloud::Kms::V1::ImportJob ImportJob} to get.
1333
+ # @param public_key_format [::Google::Cloud::Kms::V1::PublicKey::PublicKeyFormat]
1334
+ # Optional. Specifies the [WrappingPublicKey][] format.
1335
+ # If not specified:
1336
+ # * For RSA-based import methods, the wrapping key will be returned in PEM
1337
+ # format
1338
+ # * For pure ML-KEM-based import methods, the wrapping key will be returned
1339
+ # in the raw bytes format specified in FIPS-203
1340
+ # * For X-Wing-based import methods, the wrapping key will be returned in
1341
+ # the raw bytes format specified in
1342
+ # https://datatracker.ietf.org/doc/draft-connolly-cfrg-xwing-kem.
1333
1343
  #
1334
1344
  # @yield [response, operation] Access the result along with the RPC operation
1335
1345
  # @yieldparam response [::Google::Cloud::Kms::V1::ImportJob]
@@ -1595,7 +1605,7 @@ module Google
1595
1605
  # @param options [::Gapic::CallOptions, ::Hash]
1596
1606
  # Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
1597
1607
  #
1598
- # @overload create_crypto_key(parent: nil, crypto_key_id: nil, crypto_key: nil, skip_initial_version_creation: nil)
1608
+ # @overload create_crypto_key(parent: nil, crypto_key_id: nil, crypto_key: nil, skip_initial_version_creation: nil, trusted_wrapping_enabled: nil)
1599
1609
  # Pass arguments to `create_crypto_key` via keyword arguments. Note that at
1600
1610
  # least one keyword argument is required. To specify no parameters, or to keep all
1601
1611
  # the default parameter values, pass an empty Hash as a request object (see above).
@@ -1618,6 +1628,16 @@ module Google
1618
1628
  # or
1619
1629
  # {::Google::Cloud::Kms::V1::KeyManagementService::Client#import_crypto_key_version ImportCryptoKeyVersion}
1620
1630
  # before you can use this {::Google::Cloud::Kms::V1::CryptoKey CryptoKey}.
1631
+ # @param trusted_wrapping_enabled [::Boolean]
1632
+ # Optional. Whether trusted wrapping will be enabled on the first
1633
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersions} created for this
1634
+ # {::Google::Cloud::Kms::V1::CryptoKey CryptoKey}. This field is only supported
1635
+ # for keys with
1636
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersionTemplate#protection_level CryptoKeyVersionTemplate.protection_level}
1637
+ # {::Google::Cloud::Kms::V1::ProtectionLevel::HSM_SINGLE_TENANT HSM_SINGLE_TENANT}.
1638
+ # This field is supported for all
1639
+ # {::Google::Cloud::Kms::V1::CryptoKey::CryptoKeyPurpose CryptoKeyPurposes} except
1640
+ # {::Google::Cloud::Kms::V1::CryptoKey::CryptoKeyPurpose::ENCRYPT_DECRYPT ENCRYPT_DECRYPT}.
1621
1641
  #
1622
1642
  # @yield [response, operation] Access the result along with the RPC operation
1623
1643
  # @yieldparam response [::Google::Cloud::Kms::V1::CryptoKey]
@@ -2003,7 +2023,7 @@ module Google
2003
2023
  # @param options [::Gapic::CallOptions, ::Hash]
2004
2024
  # Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
2005
2025
  #
2006
- # @overload import_crypto_key_version(parent: nil, crypto_key_version: nil, algorithm: nil, import_job: nil, wrapped_key: nil, rsa_aes_wrapped_key: nil)
2026
+ # @overload import_crypto_key_version(parent: nil, crypto_key_version: nil, algorithm: nil, import_job: nil, wrapped_key: nil, rsa_aes_wrapped_key: nil, trusted_wrapping_enabled: nil)
2007
2027
  # Pass arguments to `import_crypto_key_version` via keyword arguments. Note that at
2008
2028
  # least one keyword argument is required. To specify no parameters, or to keep all
2009
2029
  # the default parameter values, pass an empty Hash as a request object (see above).
@@ -2092,6 +2112,14 @@ module Google
2092
2112
  # {::Google::Cloud::Kms::V1::ImportCryptoKeyVersionRequest#wrapped_key wrapped_key}.
2093
2113
  # Prefer to use that field in new work. Either that field or this field
2094
2114
  # (but not both) must be specified.
2115
+ # @param trusted_wrapping_enabled [::Boolean]
2116
+ # Optional. Whether trusted wrapping will be enabled on the imported
2117
+ # [CryptoKeyVersion]. This field is only supported for keys with
2118
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersionTemplate#protection_level CryptoKeyVersionTemplate.protection_level}
2119
+ # {::Google::Cloud::Kms::V1::ProtectionLevel::HSM_SINGLE_TENANT HSM_SINGLE_TENANT}.
2120
+ # This field is supported for all
2121
+ # {::Google::Cloud::Kms::V1::CryptoKey::CryptoKeyPurpose CryptoKeyPurposes} besides
2122
+ # {::Google::Cloud::Kms::V1::CryptoKey::CryptoKeyPurpose::ENCRYPT_DECRYPT ENCRYPT_DECRYPT}.
2095
2123
  #
2096
2124
  # @yield [response, operation] Access the result along with the RPC operation
2097
2125
  # @yieldparam response [::Google::Cloud::Kms::V1::CryptoKeyVersion]
@@ -2157,6 +2185,242 @@ module Google
2157
2185
  raise ::Google::Cloud::Error.from_error(e)
2158
2186
  end
2159
2187
 
2188
+ ##
2189
+ # Import wrapped key material into a
2190
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} with a trusted
2191
+ # key.
2192
+ #
2193
+ # All requests must specify a {::Google::Cloud::Kms::V1::CryptoKey CryptoKey}. If
2194
+ # a {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} is additionally
2195
+ # specified in the request, key material will be reimported into that
2196
+ # version. Otherwise, a new version will be created, and will be assigned the
2197
+ # next sequential id within the {::Google::Cloud::Kms::V1::CryptoKey CryptoKey}.
2198
+ #
2199
+ # The {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} will have
2200
+ # trusted_wrapping_enabled set to true.
2201
+ #
2202
+ # @overload import_trusted_key_wrapped_crypto_key_version(request, options = nil)
2203
+ # Pass arguments to `import_trusted_key_wrapped_crypto_key_version` via a request object, either of type
2204
+ # {::Google::Cloud::Kms::V1::ImportTrustedKeyWrappedCryptoKeyVersionRequest} or an equivalent Hash.
2205
+ #
2206
+ # @param request [::Google::Cloud::Kms::V1::ImportTrustedKeyWrappedCryptoKeyVersionRequest, ::Hash]
2207
+ # A request object representing the call parameters. Required. To specify no
2208
+ # parameters, or to keep all the default parameter values, pass an empty Hash.
2209
+ # @param options [::Gapic::CallOptions, ::Hash]
2210
+ # Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
2211
+ #
2212
+ # @overload import_trusted_key_wrapped_crypto_key_version(parent: nil, importing_key: nil, crypto_key_version: nil, wrapped_key: nil, algorithm: nil)
2213
+ # Pass arguments to `import_trusted_key_wrapped_crypto_key_version` via keyword arguments. Note that at
2214
+ # least one keyword argument is required. To specify no parameters, or to keep all
2215
+ # the default parameter values, pass an empty Hash as a request object (see above).
2216
+ #
2217
+ # @param parent [::String]
2218
+ # Required. The {::Google::Cloud::Kms::V1::CryptoKey#name name} of the
2219
+ # {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} to be imported into.
2220
+ # @param importing_key [::String]
2221
+ # Required. Required - the CKV of the trusted key used to import.
2222
+ # This can be the name of a CryptoKeyVersion or a CryptoKey.
2223
+ # @param crypto_key_version [::String]
2224
+ # Optional. The optional {::Google::Cloud::Kms::V1::CryptoKeyVersion#name name} of
2225
+ # an existing {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} to
2226
+ # target for an import operation. If this field is not present, a new
2227
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} containing the
2228
+ # supplied key material is created.
2229
+ #
2230
+ # If this field is present, the supplied key material is imported into
2231
+ # the existing {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion}. To
2232
+ # import into an existing
2233
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion}, the
2234
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} must be a child of
2235
+ # {::Google::Cloud::Kms::V1::ImportTrustedKeyWrappedCryptoKeyVersionRequest#parent ImportTrustedKeyWrappedCryptoKeyVersionRequest.parent},
2236
+ # have been previously created via
2237
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#import_trusted_key_wrapped_crypto_key_version ImportTrustedKeyWrappedCryptoKeyVersion},
2238
+ # and be in
2239
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion::CryptoKeyVersionState::DESTROYED DESTROYED}
2240
+ # or
2241
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion::CryptoKeyVersionState::IMPORT_FAILED IMPORT_FAILED}
2242
+ # state. The key material and algorithm must match the previous
2243
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} exactly if the
2244
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} has ever contained
2245
+ # key material
2246
+ # @param wrapped_key [::String]
2247
+ # Required. The target key pre-wrapped on premises.
2248
+ # @param algorithm [::Google::Cloud::Kms::V1::CryptoKeyVersion::CryptoKeyVersionAlgorithm]
2249
+ # Required. Required - The
2250
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion::CryptoKeyVersionAlgorithm algorithm}
2251
+ # of the key being imported. This does not need to match the
2252
+ # {::Google::Cloud::Kms::V1::CryptoKey#version_template version_template} of the
2253
+ # {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} this version imports into.
2254
+ #
2255
+ # @yield [response, operation] Access the result along with the RPC operation
2256
+ # @yieldparam response [::Google::Cloud::Kms::V1::CryptoKeyVersion]
2257
+ # @yieldparam operation [::GRPC::ActiveCall::Operation]
2258
+ #
2259
+ # @return [::Google::Cloud::Kms::V1::CryptoKeyVersion]
2260
+ #
2261
+ # @raise [::Google::Cloud::Error] if the RPC is aborted.
2262
+ #
2263
+ # @example Basic example
2264
+ # require "google/cloud/kms/v1"
2265
+ #
2266
+ # # Create a client object. The client can be reused for multiple calls.
2267
+ # client = Google::Cloud::Kms::V1::KeyManagementService::Client.new
2268
+ #
2269
+ # # Create a request. To set request fields, pass in keyword arguments.
2270
+ # request = Google::Cloud::Kms::V1::ImportTrustedKeyWrappedCryptoKeyVersionRequest.new
2271
+ #
2272
+ # # Call the import_trusted_key_wrapped_crypto_key_version method.
2273
+ # result = client.import_trusted_key_wrapped_crypto_key_version request
2274
+ #
2275
+ # # The returned object is of type Google::Cloud::Kms::V1::CryptoKeyVersion.
2276
+ # p result
2277
+ #
2278
+ def import_trusted_key_wrapped_crypto_key_version request, options = nil
2279
+ raise ::ArgumentError, "request must be provided" if request.nil?
2280
+
2281
+ request = ::Gapic::Protobuf.coerce request, to: ::Google::Cloud::Kms::V1::ImportTrustedKeyWrappedCryptoKeyVersionRequest
2282
+
2283
+ # Converts hash and nil to an options object
2284
+ options = ::Gapic::CallOptions.new(**options.to_h) if options.respond_to? :to_h
2285
+
2286
+ # Customize the options with defaults
2287
+ metadata = @config.rpcs.import_trusted_key_wrapped_crypto_key_version.metadata.to_h
2288
+
2289
+ # Set x-goog-api-client, x-goog-user-project and x-goog-api-version headers
2290
+ metadata[:"x-goog-api-client"] ||= ::Gapic::Headers.x_goog_api_client \
2291
+ lib_name: @config.lib_name, lib_version: @config.lib_version,
2292
+ gapic_version: ::Google::Cloud::Kms::V1::VERSION
2293
+ metadata[:"x-goog-api-version"] = API_VERSION unless API_VERSION.empty?
2294
+ metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
2295
+
2296
+ header_params = {}
2297
+ if request.parent
2298
+ header_params["parent"] = request.parent
2299
+ end
2300
+
2301
+ request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
2302
+ metadata[:"x-goog-request-params"] ||= request_params_header
2303
+
2304
+ options.apply_defaults timeout: @config.rpcs.import_trusted_key_wrapped_crypto_key_version.timeout,
2305
+ metadata: metadata,
2306
+ retry_policy: @config.rpcs.import_trusted_key_wrapped_crypto_key_version.retry_policy
2307
+
2308
+ options.apply_defaults timeout: @config.timeout,
2309
+ metadata: @config.metadata,
2310
+ retry_policy: @config.retry_policy
2311
+
2312
+ @key_management_service_stub.call_rpc :import_trusted_key_wrapped_crypto_key_version, request, options: options do |response, operation|
2313
+ yield response, operation if block_given?
2314
+ end
2315
+ rescue ::GRPC::BadStatus => e
2316
+ raise ::Google::Cloud::Error.from_error(e)
2317
+ end
2318
+
2319
+ ##
2320
+ # Exports a {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} with a
2321
+ # trusted key.
2322
+ #
2323
+ # The {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} must have
2324
+ # trusted_wrapping_enabled set to true. The
2325
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} of the
2326
+ # [wrapping_key] must have the
2327
+ # {::Google::Cloud::Kms::V1::CryptoKey::CryptoKeyPurpose::AES_WRAPPING AES_WRAPPING}
2328
+ # purpose. The [wrapping_key] must have the
2329
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion::CryptoKeyVersionAlgorithm::AES_256_KWP AES_256_KWP}
2330
+ # algorithm.
2331
+ #
2332
+ # @overload export_trusted_key_wrapped_crypto_key_version(request, options = nil)
2333
+ # Pass arguments to `export_trusted_key_wrapped_crypto_key_version` via a request object, either of type
2334
+ # {::Google::Cloud::Kms::V1::ExportTrustedKeyWrappedCryptoKeyVersionRequest} or an equivalent Hash.
2335
+ #
2336
+ # @param request [::Google::Cloud::Kms::V1::ExportTrustedKeyWrappedCryptoKeyVersionRequest, ::Hash]
2337
+ # A request object representing the call parameters. Required. To specify no
2338
+ # parameters, or to keep all the default parameter values, pass an empty Hash.
2339
+ # @param options [::Gapic::CallOptions, ::Hash]
2340
+ # Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
2341
+ #
2342
+ # @overload export_trusted_key_wrapped_crypto_key_version(name: nil, wrapping_key: nil)
2343
+ # Pass arguments to `export_trusted_key_wrapped_crypto_key_version` via keyword arguments. Note that at
2344
+ # least one keyword argument is required. To specify no parameters, or to keep all
2345
+ # the default parameter values, pass an empty Hash as a request object (see above).
2346
+ #
2347
+ # @param name [::String]
2348
+ # Required. The {::Google::Cloud::Kms::V1::CryptoKeyVersion#name name} of the
2349
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} to export. The
2350
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} must have
2351
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion#trusted_wrapping_enabled trusted_wrapping_enabled}
2352
+ # set to true.
2353
+ # @param wrapping_key [::String]
2354
+ # Required. The {::Google::Cloud::Kms::V1::CryptoKeyVersion#name name} of the
2355
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} to use as a
2356
+ # wrapping key. The {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion}
2357
+ # must have {::Google::Cloud::Kms::V1::CryptoKeyVersion#hsm_trusted hsm_trusted}
2358
+ # set to true.
2359
+ #
2360
+ # @yield [response, operation] Access the result along with the RPC operation
2361
+ # @yieldparam response [::Google::Cloud::Kms::V1::ExportTrustedKeyWrappedCryptoKeyVersionResponse]
2362
+ # @yieldparam operation [::GRPC::ActiveCall::Operation]
2363
+ #
2364
+ # @return [::Google::Cloud::Kms::V1::ExportTrustedKeyWrappedCryptoKeyVersionResponse]
2365
+ #
2366
+ # @raise [::Google::Cloud::Error] if the RPC is aborted.
2367
+ #
2368
+ # @example Basic example
2369
+ # require "google/cloud/kms/v1"
2370
+ #
2371
+ # # Create a client object. The client can be reused for multiple calls.
2372
+ # client = Google::Cloud::Kms::V1::KeyManagementService::Client.new
2373
+ #
2374
+ # # Create a request. To set request fields, pass in keyword arguments.
2375
+ # request = Google::Cloud::Kms::V1::ExportTrustedKeyWrappedCryptoKeyVersionRequest.new
2376
+ #
2377
+ # # Call the export_trusted_key_wrapped_crypto_key_version method.
2378
+ # result = client.export_trusted_key_wrapped_crypto_key_version request
2379
+ #
2380
+ # # The returned object is of type Google::Cloud::Kms::V1::ExportTrustedKeyWrappedCryptoKeyVersionResponse.
2381
+ # p result
2382
+ #
2383
+ def export_trusted_key_wrapped_crypto_key_version request, options = nil
2384
+ raise ::ArgumentError, "request must be provided" if request.nil?
2385
+
2386
+ request = ::Gapic::Protobuf.coerce request, to: ::Google::Cloud::Kms::V1::ExportTrustedKeyWrappedCryptoKeyVersionRequest
2387
+
2388
+ # Converts hash and nil to an options object
2389
+ options = ::Gapic::CallOptions.new(**options.to_h) if options.respond_to? :to_h
2390
+
2391
+ # Customize the options with defaults
2392
+ metadata = @config.rpcs.export_trusted_key_wrapped_crypto_key_version.metadata.to_h
2393
+
2394
+ # Set x-goog-api-client, x-goog-user-project and x-goog-api-version headers
2395
+ metadata[:"x-goog-api-client"] ||= ::Gapic::Headers.x_goog_api_client \
2396
+ lib_name: @config.lib_name, lib_version: @config.lib_version,
2397
+ gapic_version: ::Google::Cloud::Kms::V1::VERSION
2398
+ metadata[:"x-goog-api-version"] = API_VERSION unless API_VERSION.empty?
2399
+ metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
2400
+
2401
+ header_params = {}
2402
+ if request.name
2403
+ header_params["name"] = request.name
2404
+ end
2405
+
2406
+ request_params_header = header_params.map { |k, v| "#{k}=#{v}" }.join("&")
2407
+ metadata[:"x-goog-request-params"] ||= request_params_header
2408
+
2409
+ options.apply_defaults timeout: @config.rpcs.export_trusted_key_wrapped_crypto_key_version.timeout,
2410
+ metadata: metadata,
2411
+ retry_policy: @config.rpcs.export_trusted_key_wrapped_crypto_key_version.retry_policy
2412
+
2413
+ options.apply_defaults timeout: @config.timeout,
2414
+ metadata: @config.metadata,
2415
+ retry_policy: @config.retry_policy
2416
+
2417
+ @key_management_service_stub.call_rpc :export_trusted_key_wrapped_crypto_key_version, request, options: options do |response, operation|
2418
+ yield response, operation if block_given?
2419
+ end
2420
+ rescue ::GRPC::BadStatus => e
2421
+ raise ::Google::Cloud::Error.from_error(e)
2422
+ end
2423
+
2160
2424
  ##
2161
2425
  # Create a new {::Google::Cloud::Kms::V1::ImportJob ImportJob} within a
2162
2426
  # {::Google::Cloud::Kms::V1::KeyRing KeyRing}.
@@ -4339,6 +4603,16 @@ module Google
4339
4603
  #
4340
4604
  attr_reader :import_crypto_key_version
4341
4605
  ##
4606
+ # RPC-specific configuration for `import_trusted_key_wrapped_crypto_key_version`
4607
+ # @return [::Gapic::Config::Method]
4608
+ #
4609
+ attr_reader :import_trusted_key_wrapped_crypto_key_version
4610
+ ##
4611
+ # RPC-specific configuration for `export_trusted_key_wrapped_crypto_key_version`
4612
+ # @return [::Gapic::Config::Method]
4613
+ #
4614
+ attr_reader :export_trusted_key_wrapped_crypto_key_version
4615
+ ##
4342
4616
  # RPC-specific configuration for `create_import_job`
4343
4617
  # @return [::Gapic::Config::Method]
4344
4618
  #
@@ -4455,6 +4729,10 @@ module Google
4455
4729
  @delete_crypto_key_version = ::Gapic::Config::Method.new delete_crypto_key_version_config
4456
4730
  import_crypto_key_version_config = parent_rpcs.import_crypto_key_version if parent_rpcs.respond_to? :import_crypto_key_version
4457
4731
  @import_crypto_key_version = ::Gapic::Config::Method.new import_crypto_key_version_config
4732
+ import_trusted_key_wrapped_crypto_key_version_config = parent_rpcs.import_trusted_key_wrapped_crypto_key_version if parent_rpcs.respond_to? :import_trusted_key_wrapped_crypto_key_version
4733
+ @import_trusted_key_wrapped_crypto_key_version = ::Gapic::Config::Method.new import_trusted_key_wrapped_crypto_key_version_config
4734
+ export_trusted_key_wrapped_crypto_key_version_config = parent_rpcs.export_trusted_key_wrapped_crypto_key_version if parent_rpcs.respond_to? :export_trusted_key_wrapped_crypto_key_version
4735
+ @export_trusted_key_wrapped_crypto_key_version = ::Gapic::Config::Method.new export_trusted_key_wrapped_crypto_key_version_config
4458
4736
  create_import_job_config = parent_rpcs.create_import_job if parent_rpcs.respond_to? :create_import_job
4459
4737
  @create_import_job = ::Gapic::Config::Method.new create_import_job_config
4460
4738
  update_crypto_key_config = parent_rpcs.update_crypto_key if parent_rpcs.respond_to? :update_crypto_key