google-cloud-kms 2.1.1 → 2.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e72c6d5b2a0293ef064646deef5e540e4b06af81ebb79aa9c2cb1974bc21bc33
-  data.tar.gz: afb681bd58a1eb4fc6dcca0d389590773c29d7b479442723ff4bb98645511d71
+  metadata.gz: 4dd68566d3b364da35143e5501f8bdb5743a48bfcfb51d692293caf0c12c5114
+  data.tar.gz: 4997226dfb7ea680bee31f6f28a88bafb991eb67bcacbdcdc165ea9e9ae23f80
 SHA512:
-  metadata.gz: 6ed2625ea0e6d2a3cf7a2589720c025ef4f8bc98e10074458355e44cb55b655e232fa5191a274d382d22da699b37084b0cf1f0aafa27a61534d55dd980a8cf10
-  data.tar.gz: c1fb4b92cab506ad01da752961c43bbcce9a69e9436c8d88793abe58519521a5d83a27cc580d450fc45d31189233406a03e98472b14c667ec2baf14e2c864d18
+  metadata.gz: 9648610675019023d3b3480f654310d6055ffcc44a47d083648751d91098397e3381712f2b7309f9467e2c63d6875e62a13b7b122a8d357531954f17f3f44371
+  data.tar.gz: 32bad132d2272bf16282109581845e0dad66fa100cca52338e6352a8c4499641a34ccc30c67ee5ab493265ebeaa60aeee8f6c1512fc9412ff716e2189124891f

data/.yardopts

@@ -1,5 +1,5 @@
 --no-private
---title=Cloud Key Management Service (KMS) API
+--title="Cloud Key Management Service (KMS) API"
 --exclude _pb\.rb$
 --markup markdown
 --markup-provider redcarpet

data/AUTHENTICATION.md

@@ -27,7 +27,7 @@ export KMS_CREDENTIALS=path/to/keyfile.json
 ```ruby
 require "google/cloud/kms"
 
-client = Google::Cloud::Kms.key_management_service
+client = Google::Cloud::Kms.ekm_service
 ```
 
 ## Credential Lookup
@@ -64,7 +64,7 @@ containers where writing files is difficult or not encouraged.
 
 The environment variables that google-cloud-kms
 checks for credentials are configured on the service Credentials class (such as
-`::Google::Cloud::Kms::V1::KeyManagementService::Credentials`):
+`::Google::Cloud::Kms::V1::EkmService::Credentials`):
 
 * `KMS_CREDENTIALS` - Path to JSON file, or JSON contents
 * `KMS_KEYFILE` - Path to JSON file, or JSON contents
@@ -77,23 +77,23 @@ require "google/cloud/kms"
 
 ENV["KMS_CREDENTIALS"] = "path/to/keyfile.json"
 
-client = Google::Cloud::Kms.key_management_service
+client = Google::Cloud::Kms.ekm_service
 ```
 
 ### Configuration
 
-The **Credentials JSON** can be configured instead of placing them in
-environment variables. Either on an individual client initialization:
+The path to the **Credentials JSON** file can be configured instead of storing
+it in an environment variable. Either on an individual client initialization:
 
 ```ruby
 require "google/cloud/kms"
 
-client = Google::Cloud::Kms.key_management_service do |config|
+client = Google::Cloud::Kms.ekm_service do |config|
   config.credentials = "path/to/keyfile.json"
 end
 ```
 
-Or configured globally for all clients:
+Or globally for all clients:
 
 ```ruby
 require "google/cloud/kms"
@@ -102,7 +102,7 @@ Google::Cloud::Kms.configure do |config|
   config.credentials = "path/to/keyfile.json"
 end
 
-client = Google::Cloud::Kms.key_management_service
+client = Google::Cloud::Kms.ekm_service
 ```
 
 ### Cloud SDK
@@ -120,15 +120,6 @@ To configure your system for this, simply:
 **NOTE:** This is _not_ recommended for running in production. The Cloud SDK
 *should* only be used during development.
 
-[gce-how-to]: https://cloud.google.com/compute/docs/authentication#using
-[dev-console]: https://console.cloud.google.com/project
-
-[enable-apis]: https://raw.githubusercontent.com/GoogleCloudPlatform/gcloud-common/master/authentication/enable-apis.png
-
-[create-new-service-account]: https://raw.githubusercontent.com/GoogleCloudPlatform/gcloud-common/master/authentication/create-new-service-account.png
-[create-new-service-account-existing-keys]: https://raw.githubusercontent.com/GoogleCloudPlatform/gcloud-common/master/authentication/create-new-service-account-existing-keys.png
-[reuse-service-account]: https://raw.githubusercontent.com/GoogleCloudPlatform/gcloud-common/master/authentication/reuse-service-account.png
-
 ## Creating a Service Account
 
 Google Cloud requires **Service Account Credentials** to
@@ -139,31 +130,22 @@ If you are not running this client within
 [Google Cloud Platform environments](#google-cloud-platform-environments), you
 need a Google Developers service account.
 
-1. Visit the [Google Developers Console][dev-console].
+1. Visit the [Google Cloud Console](https://console.cloud.google.com/project).
 2. Create a new project or click on an existing project.
-3. Activate the slide-out navigation tray and select **API Manager**. From
+3. Activate the menu in the upper left and select **APIs & Services**. From
    here, you will enable the APIs that your application requires.
 
-   ![Enable the APIs that your application requires][enable-apis]
-
    *Note: You may need to enable billing in order to use these services.*
 
 4. Select **Credentials** from the side navigation.
 
-   You should see a screen like one of the following.
-
-   ![Create a new service account][create-new-service-account]
-
-   ![Create a new service account With Existing Keys][create-new-service-account-existing-keys]
-
-   Find the "Add credentials" drop down and select "Service account" to be
-   guided through downloading a new JSON key file.
+   Find the "Create credentials" drop down near the top of the page, and select
+   "Service account" to be guided through downloading a new JSON key file.
 
    If you want to re-use an existing service account, you can easily generate a
-   new key file. Just select the account you wish to re-use, and click "Generate
-   new JSON key":
-
-   ![Re-use an existing service account][reuse-service-account]
+   new key file. Just select the account you wish to re-use, click the pencil
+   tool on the right side to edit the service account, select the **Keys** tab,
+   and then select **Add Key**.
 
    The key file you download will be used by this library to authenticate API
    requests and should be stored in a secure location.

data/MIGRATING.md

@@ -268,7 +268,7 @@ end
 ### Handling Errors
 
 The client reports standard
-{file:https://github.com/grpc/grpc/blob/master/doc/statuscodes.md gRPC error codes}
+[gRPC error codes](https://github.com/grpc/grpc/blob/master/doc/statuscodes.md)
 by raising exceptions. In older releases, these exceptions were located in the
 `Google::Gax` namespace and were subclasses of the `Google::Gax::GaxError` base
 exception class, defined in the `google-gax` gem. However, these classes were

data/README.md

@@ -11,7 +11,7 @@ verisoned gems in as dependencies, and provides high-level methods for
 constructing clients. More information on versioned clients can be found below
 in the section titled *Which client should I use?*.
 
-View the [Client Library Documentation](https://googleapis.dev/ruby/google-cloud-kms/latest)
+View the [Client Library Documentation](https://cloud.google.com/ruby/docs/reference/google-cloud-kms/latest)
 for this library, google-cloud-kms, to see the convenience methods for
 constructing client objects. Reference documentation for the client objects
 themselves can be found in the client library documentation for the versioned

data/lib/google/cloud/kms/version.rb

@@ -20,7 +20,7 @@
 module Google
   module Cloud
     module Kms
-      VERSION = "2.1.1"
+      VERSION = "2.3.0"
     end
   end
 end

data/lib/google/cloud/kms.rb

@@ -44,6 +44,40 @@ end
 module Google
   module Cloud
     module Kms
+      ##
+      # Create a new client object for EkmService.
+      #
+      # By default, this returns an instance of
+      # [Google::Cloud::Kms::V1::EkmService::Client](https://googleapis.dev/ruby/google-cloud-kms-v1/latest/Google/Cloud/Kms/V1/EkmService/Client.html)
+      # for version V1 of the API.
+      # However, you can specify specify a different API version by passing it in the
+      # `version` parameter. If the EkmService service is
+      # supported by that API version, and the corresponding gem is available, the
+      # appropriate versioned client will be returned.
+      #
+      # ## About EkmService
+      #
+      # Google Cloud Key Management EKM Service
+      #
+      # Manages external cryptographic keys and operations using those keys.
+      # Implements a REST model with the following objects:
+      # * EkmConnection
+      #
+      # @param version [::String, ::Symbol] The API version to connect to. Optional.
+      #   Defaults to `:v1`.
+      # @return [EkmService::Client] A client object for the specified version.
+      #
+      def self.ekm_service version: :v1, &block
+        require "google/cloud/kms/#{version.to_s.downcase}"
+
+        package_name = Google::Cloud::Kms
+                       .constants
+                       .select { |sym| sym.to_s.downcase == version.to_s.downcase.tr("_", "") }
+                       .first
+        package_module = Google::Cloud::Kms.const_get package_name
+        package_module.const_get(:EkmService).const_get(:Client).new(&block)
+      end
+
       ##
       # Create a new client object for KeyManagementService.
       #
@@ -85,6 +119,60 @@ module Google
         package_module.const_get(:KeyManagementService).const_get(:Client).new(&block)
       end
 
+      ##
+      # Create a new client object for IAMPolicy.
+      #
+      # By default, this returns an instance of
+      # [Google::Cloud::Kms::V1::IAMPolicy::Client](https://googleapis.dev/ruby/google-cloud-kms-v1/latest/Google/Cloud/Kms/V1/IAMPolicy/Client.html)
+      # for version V1 of the API.
+      # However, you can specify specify a different API version by passing it in the
+      # `version` parameter. If the IAMPolicy service is
+      # supported by that API version, and the corresponding gem is available, the
+      # appropriate versioned client will be returned.
+      #
+      # ## About IAMPolicy
+      #
+      # ## API Overview
+      #
+      # Manages Identity and Access Management (IAM) policies.
+      #
+      # Any implementation of an API that offers access control features
+      # implements the google.iam.v1.IAMPolicy interface.
+      #
+      # ## Data model
+      #
+      # Access control is applied when a principal (user or service account), takes
+      # some action on a resource exposed by a service. Resources, identified by
+      # URI-like names, are the unit of access control specification. Service
+      # implementations can choose the granularity of access control and the
+      # supported permissions for their resources.
+      # For example one database service may allow access control to be
+      # specified only at the Table level, whereas another might allow access control
+      # to also be specified at the Column level.
+      #
+      # ## Policy Structure
+      #
+      # See google.iam.v1.Policy
+      #
+      # This is intentionally not a CRUD style API because access control policies
+      # are created and deleted implicitly with the resources to which they are
+      # attached.
+      #
+      # @param version [::String, ::Symbol] The API version to connect to. Optional.
+      #   Defaults to `:v1`.
+      # @return [IAMPolicy::Client] A client object for the specified version.
+      #
+      def self.iam_policy version: :v1, &block
+        require "google/cloud/kms/#{version.to_s.downcase}"
+
+        package_name = Google::Cloud::Kms
+                       .constants
+                       .select { |sym| sym.to_s.downcase == version.to_s.downcase.tr("_", "") }
+                       .first
+        package_module = Google::Cloud::Kms.const_get package_name
+        package_module.const_get(:IAMPolicy).const_get(:Client).new(&block)
+      end
+
       ##
       # Configure the google-cloud-kms library.
       #

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-cloud-kms
 version: !ruby/object:Gem::Version
-  version: 2.1.1
+  version: 2.3.0
 platform: ruby
 authors:
 - Google LLC
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-06-30 00:00:00.000000000 Z
+date: 2022-02-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: google-cloud-core
@@ -30,7 +30,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0.0'
+        version: '0.11'
     - - "<"
       - !ruby/object:Gem::Version
         version: 2.a
@@ -40,7 +40,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0.0'
+        version: '0.11'
     - - "<"
       - !ruby/object:Gem::Version
         version: 2.a
@@ -190,7 +190,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.2.17
+rubygems_version: 3.3.5
 signing_key: 
 specification_version: 4
 summary: API Client library for the Cloud Key Management Service (KMS) API