google-cloud-kms 1.5.1 → 1.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9f03c9fa470302d031ea26c617d1a195a3de9109a115c467ad76290e81c7cc08
-  data.tar.gz: b2f9371d3d862d890d653d94b1b2dc09c5ec5f2cd9d505469f4afe211e9c172e
+  metadata.gz: a1064b16ffd2c3cf2acb23323a6c19f28ae831563d46742b2ef2d3f602e3a943
+  data.tar.gz: 0b74a2b6f2cdc972a61de8711f59ad1b8cbacd365fad71e9e9d2537a0ead5ebf
 SHA512:
-  metadata.gz: 41308a1c12ca9e1f5190f1f3a5fa9808dc0ccb69e476becac1d6fcd96f69d84a56356a2ebd89ca227f11b15167782cc07bde1310ee44fab4047d01645441a631
-  data.tar.gz: a6c245fb6848593a547b318249d826b0499394b909055f82e76cdf1305c6a9824c5f6a7f7275c2212130a91624a6f0cfaf8751530b7c9dd92e275c633fac8d97
+  metadata.gz: 01b43736fd4d7fc9e8411b407db809b2d39918229343cdaa038d375d04a988d6c9be051d455607ace26736cdea56b4a6aa2f3e4d8d9867a5b0d3431e438cf960
+  data.tar.gz: c8a6cbcf6477601e0eba6e3470a903ccd56101deaa097dc3eed445840ed9c8ae74537467508fb41f18de277a3db6d58da3bf4bf1763111b1d2c3dd04bdce250b

data/lib/google/cloud/kms/v1/doc/google/cloud/kms/v1/resources.rb

@@ -222,6 +222,11 @@ module Google
         #     Output only. The root cause of an import failure. Only present if
         #     {Google::Cloud::Kms::V1::CryptoKeyVersion#state state} is
         #     {Google::Cloud::Kms::V1::CryptoKeyVersion::CryptoKeyVersionState::IMPORT_FAILED IMPORT_FAILED}.
+        # @!attribute [rw] external_protection_level_options
+        #   @return [Google::Cloud::Kms::V1::ExternalProtectionLevelOptions]
+        #     ExternalProtectionLevelOptions stores a group of additional fields for
+        #     configuring a {Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} that are specific to the
+        #     {Google::Cloud::Kms::V1::ProtectionLevel::EXTERNAL EXTERNAL} protection level.
         class CryptoKeyVersion
           # The algorithm of the {Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion}, indicating what
           # parameters must be used for each cryptographic operation.
@@ -305,6 +310,9 @@ module Google
 
             # ECDSA on the NIST P-384 curve with a SHA384 digest.
             EC_SIGN_P384_SHA384 = 13
+
+            # Algorithm representing symmetric encryption by an external key manager.
+            EXTERNAL_SYMMETRIC_ENCRYPTION = 18
           end
 
           # The state of a {Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion}, indicating if it can be used.
@@ -502,6 +510,14 @@ module Google
           end
         end
 
+        # ExternalProtectionLevelOptions stores a group of additional fields for
+        # configuring a {Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} that are specific to the
+        # {Google::Cloud::Kms::V1::ProtectionLevel::EXTERNAL EXTERNAL} protection level.
+        # @!attribute [rw] external_key_uri
+        #   @return [String]
+        #     The URI for an external resource that this {Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} represents.
+        class ExternalProtectionLevelOptions; end
+
         # {Google::Cloud::Kms::V1::ProtectionLevel ProtectionLevel} specifies how cryptographic operations are performed.
         # For more information, see [Protection levels]
         # (https://cloud.google.com/kms/docs/algorithms#protection_levels).

data/lib/google/cloud/kms/v1/doc/google/cloud/kms/v1/service.rb

@@ -479,6 +479,11 @@ module Google
         #     Indicates whether {Google::Cloud::Kms::V1::CryptoKey CryptoKeys} with
         #     {Google::Cloud::Kms::V1::CryptoKeyVersionTemplate#protection_level protection_level}
         #     {Google::Cloud::Kms::V1::ProtectionLevel::HSM HSM} can be created in this location.
+        # @!attribute [rw] ekm_available
+        #   @return [true, false]
+        #     Indicates whether {Google::Cloud::Kms::V1::CryptoKey CryptoKeys} with
+        #     {Google::Cloud::Kms::V1::CryptoKeyVersionTemplate#protection_level protection_level}
+        #     {Google::Cloud::Kms::V1::ProtectionLevel::EXTERNAL EXTERNAL} can be created in this location.
         class LocationMetadata; end
       end
     end

data/lib/google/cloud/kms/v1/resources_pb.rb

@@ -4,11 +4,11 @@
 
 require 'google/protobuf'
 
-require 'google/api/annotations_pb'
 require 'google/api/field_behavior_pb'
 require 'google/api/resource_pb'
 require 'google/protobuf/duration_pb'
 require 'google/protobuf/timestamp_pb'
+require 'google/api/annotations_pb'
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_message "google.cloud.kms.v1.KeyRing" do
     optional :name, :string, 1
@@ -58,6 +58,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
     optional :import_job, :string, 14
     optional :import_time, :message, 15, "google.protobuf.Timestamp"
     optional :import_failure_reason, :string, 16
+    optional :external_protection_level_options, :message, 17, "google.cloud.kms.v1.ExternalProtectionLevelOptions"
   end
   add_enum "google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionAlgorithm" do
     value :CRYPTO_KEY_VERSION_ALGORITHM_UNSPECIFIED, 0
@@ -76,6 +77,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
     value :RSA_DECRYPT_OAEP_4096_SHA512, 17
     value :EC_SIGN_P256_SHA256, 12
     value :EC_SIGN_P384_SHA384, 13
+    value :EXTERNAL_SYMMETRIC_ENCRYPTION, 18
   end
   add_enum "google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState" do
     value :CRYPTO_KEY_VERSION_STATE_UNSPECIFIED, 0
@@ -121,6 +123,9 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
     value :ACTIVE, 2
     value :EXPIRED, 3
   end
+  add_message "google.cloud.kms.v1.ExternalProtectionLevelOptions" do
+    optional :external_key_uri, :string, 1
+  end
   add_enum "google.cloud.kms.v1.ProtectionLevel" do
     value :PROTECTION_LEVEL_UNSPECIFIED, 0
     value :SOFTWARE, 1
@@ -148,6 +153,7 @@ module Google
         ImportJob::WrappingPublicKey = Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.kms.v1.ImportJob.WrappingPublicKey").msgclass
         ImportJob::ImportMethod = Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.kms.v1.ImportJob.ImportMethod").enummodule
         ImportJob::ImportJobState = Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.kms.v1.ImportJob.ImportJobState").enummodule
+        ExternalProtectionLevelOptions = Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.kms.v1.ExternalProtectionLevelOptions").msgclass
         ProtectionLevel = Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.kms.v1.ProtectionLevel").enummodule
       end
     end

data/lib/google/cloud/kms/v1/service_pb.rb

@@ -162,6 +162,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
   end
   add_message "google.cloud.kms.v1.LocationMetadata" do
     optional :hsm_available, :bool, 1
+    optional :ekm_available, :bool, 2
   end
 end
 

data/lib/google/cloud/kms/v1/service_services_pb.rb

@@ -1,7 +1,7 @@
 # Generated by the protocol buffer compiler.  DO NOT EDIT!
 # Source: google/cloud/kms/v1/service.proto for package 'google.cloud.kms.v1'
 # Original file comments:
-# Copyright 2019 Google LLC.
+# Copyright 2020 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.

data/lib/google/cloud/kms/version.rb

@@ -16,7 +16,7 @@
 module Google
   module Cloud
     module Kms
-      VERSION = "1.5.1".freeze
+      VERSION = "1.6.0".freeze
     end
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-cloud-kms
 version: !ruby/object:Gem::Version
-  version: 1.5.1
+  version: 1.6.0
 platform: ruby
 authors:
 - Google LLC
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-04-01 00:00:00.000000000 Z
+date: 2020-04-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: google-gax