google-cloud-network_security-v1 0.a → 0.1.0

data/proto_docs/google/cloud/networksecurity/v1/sse_realm.rb

@@ -0,0 +1,388 @@
+# frozen_string_literal: true
+
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module NetworkSecurity
+      module V1
+        # Represents a Secure Access Connect (SAC) realm resource.
+        #
+        # A Secure Access Connect realm establishes a connection between your Google
+        # Cloud project and an SSE service.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Identifier. Resource name, in the form
+        #     `projects/{project}/locations/global/sacRealms/{sacRealm}`.
+        # @!attribute [r] create_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. Timestamp when the realm was created.
+        # @!attribute [r] update_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. Timestamp when the realm was last updated.
+        # @!attribute [rw] labels
+        #   @return [::Google::Protobuf::Map{::String => ::String}]
+        #     Optional. Optional list of labels applied to the resource.
+        # @!attribute [rw] security_service
+        #   @return [::Google::Cloud::NetworkSecurity::V1::SACRealm::SecurityService]
+        #     Immutable. SSE service provider associated with the realm.
+        # @!attribute [r] pairing_key
+        #   @return [::Google::Cloud::NetworkSecurity::V1::SACRealm::PairingKey]
+        #     Output only. Key to be shared with SSE service provider during pairing.
+        # @!attribute [r] state
+        #   @return [::Google::Cloud::NetworkSecurity::V1::SACRealm::State]
+        #     Output only. State of the realm.
+        class SACRealm
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # Key to be shared with SSE service provider to establish global handshake.
+          # @!attribute [r] key
+          #   @return [::String]
+          #     Output only. Key value.
+          # @!attribute [r] expire_time
+          #   @return [::Google::Protobuf::Timestamp]
+          #     Output only. Timestamp in UTC of when this resource is considered
+          #     expired. It expires 7 days after creation.
+          class PairingKey
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+
+          # @!attribute [rw] key
+          #   @return [::String]
+          # @!attribute [rw] value
+          #   @return [::String]
+          class LabelsEntry
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+
+          # SSE service provider
+          module SecurityService
+            # The default value. This value is used if the state is omitted.
+            SECURITY_SERVICE_UNSPECIFIED = 0
+
+            # [Palo Alto Networks Prisma
+            # Access](https://www.paloaltonetworks.com/sase/access).
+            PALO_ALTO_PRISMA_ACCESS = 1
+          end
+
+          # State of the realm.
+          module State
+            # No state specified. This should not be used.
+            STATE_UNSPECIFIED = 0
+
+            # Has never been attached to a partner.
+            # Used only for Prisma Access.
+            PENDING_PARTNER_ATTACHMENT = 7
+
+            # Currently attached to a partner.
+            PARTNER_ATTACHED = 1
+
+            # Was once attached to a partner but has been detached.
+            PARTNER_DETACHED = 2
+
+            # Is not attached to a partner and has an expired pairing key.
+            # Used only for Prisma Access.
+            KEY_EXPIRED = 3
+          end
+        end
+
+        # Request for `ListSACRealms` method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The parent, in the form `projects/{project}/locations/global`.
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     Optional. Requested page size. Server may return fewer items than
+        #     requested. If unspecified, server will pick an appropriate default.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     Optional. A token identifying a page of results the server should return.
+        # @!attribute [rw] filter
+        #   @return [::String]
+        #     Optional. An expression that filters the list of results.
+        # @!attribute [rw] order_by
+        #   @return [::String]
+        #     Optional. Sort the results by a certain order.
+        class ListSACRealmsRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Response for `ListSACRealms` method.
+        # @!attribute [rw] sac_realms
+        #   @return [::Array<::Google::Cloud::NetworkSecurity::V1::SACRealm>]
+        #     The list of SACRealms.
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     A token identifying a page of results the server should return.
+        # @!attribute [rw] unreachable
+        #   @return [::Array<::String>]
+        #     Locations that could not be reached.
+        class ListSACRealmsResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for `GetSACRealm` method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. Name of the resource, in the form
+        #     `projects/{project}/locations/global/sacRealms/{sacRealm}`.
+        class GetSACRealmRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for `CreateSACRealm` method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The parent, in the form `projects/{project}/locations/global`.
+        # @!attribute [rw] sac_realm_id
+        #   @return [::String]
+        #     Required. ID of the created realm.
+        #     The ID must be 1-63 characters long, and comply with
+        #     <a href="https://www.ietf.org/rfc/rfc1035.txt" target="_blank">RFC1035</a>.
+        #     Specifically, it must be 1-63 characters long and match the regular
+        #     expression `[a-z]([-a-z0-9]*[a-z0-9])?`
+        #     which means the first character must be a lowercase letter, and all
+        #     following characters must be a dash, lowercase letter, or digit, except
+        #     the last character, which cannot be a dash.
+        # @!attribute [rw] sac_realm
+        #   @return [::Google::Cloud::NetworkSecurity::V1::SACRealm]
+        #     Required. The resource being created.
+        # @!attribute [rw] request_id
+        #   @return [::String]
+        #     Optional. An optional request ID to identify requests. Specify a unique
+        #     request ID so that if you must retry your request, the server will know to
+        #     ignore the request if it has already been completed. The server will
+        #     guarantee that for at least 60 minutes since the first request.
+        #
+        #     For example, consider a situation where you make an initial request and the
+        #     request times out. If you make the request again with the same request
+        #     ID, the server can check if original operation with the same request ID
+        #     was received, and if so, will ignore the second request. This prevents
+        #     clients from accidentally creating duplicate commitments.
+        #
+        #     The request ID must be a valid UUID with the exception that zero UUID is
+        #     not supported (00000000-0000-0000-0000-000000000000).
+        class CreateSACRealmRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for `DeleteSACRealm` method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. Name of the resource, in the form
+        #     `projects/{project}/locations/global/sacRealms/{sacRealm}`.
+        # @!attribute [rw] request_id
+        #   @return [::String]
+        #     Optional. An optional request ID to identify requests. Specify a unique
+        #     request ID so that if you must retry your request, the server will know to
+        #     ignore the request if it has already been completed. The server will
+        #     guarantee that for at least 60 minutes after the first request.
+        #
+        #     For example, consider a situation where you make an initial request and the
+        #     request times out. If you make the request again with the same request
+        #     ID, the server can check if original operation with the same request ID
+        #     was received, and if so, will ignore the second request. This prevents
+        #     clients from accidentally creating duplicate commitments.
+        #
+        #     The request ID must be a valid UUID with the exception that zero UUID is
+        #     not supported (00000000-0000-0000-0000-000000000000).
+        class DeleteSACRealmRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Represents a Secure Access Connect (SAC) attachment resource.
+        #
+        # A Secure Access Connect attachment enables NCC Gateway to process traffic
+        # with an SSE product.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Identifier. Resource name, in the form
+        #     `projects/{project}/locations/{location}/sacAttachments/{sac_attachment}`.
+        # @!attribute [r] create_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. Timestamp when the attachment was created.
+        # @!attribute [r] update_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. Timestamp when the attachment was last updated.
+        # @!attribute [rw] labels
+        #   @return [::Google::Protobuf::Map{::String => ::String}]
+        #     Optional. Optional list of labels applied to the resource.
+        # @!attribute [rw] sac_realm
+        #   @return [::String]
+        #     Required. SAC Realm which owns the attachment. This can be input as an ID
+        #     or a full resource name. The output always has the form
+        #     `projects/{project_number}/locations/{location}/sacRealms/{sac_realm}`.
+        # @!attribute [rw] ncc_gateway
+        #   @return [::String]
+        #     Required. NCC Gateway associated with the attachment. This can be input as
+        #     an ID or a full resource name. The output always has the form
+        #     `projects/{project_number}/locations/{location}/spokes/{ncc_gateway}`.
+        # @!attribute [r] state
+        #   @return [::Google::Cloud::NetworkSecurity::V1::SACAttachment::State]
+        #     Output only. State of the attachment.
+        class SACAttachment
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # @!attribute [rw] key
+          #   @return [::String]
+          # @!attribute [rw] value
+          #   @return [::String]
+          class LabelsEntry
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+
+          # State of the attachment.
+          module State
+            # No state specified. This should not be used.
+            STATE_UNSPECIFIED = 0
+
+            # Has never been attached to a partner.
+            PENDING_PARTNER_ATTACHMENT = 1
+
+            # Currently attached to a partner.
+            PARTNER_ATTACHED = 2
+
+            # Was once attached to a partner but has been detached.
+            PARTNER_DETACHED = 3
+          end
+        end
+
+        # Request for `ListSACAttachments` method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The parent, in the form
+        #     `projects/{project}/locations/{location}`.
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     Optional. Requested page size. Server may return fewer items than
+        #     requested. If unspecified, server will pick an appropriate default.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     Optional. A token identifying a page of results the server should return.
+        # @!attribute [rw] filter
+        #   @return [::String]
+        #     Optional. An expression that filters the list of results.
+        # @!attribute [rw] order_by
+        #   @return [::String]
+        #     Optional. Sort the results by a certain order.
+        class ListSACAttachmentsRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Response for `ListSACAttachments` method.
+        # @!attribute [rw] sac_attachments
+        #   @return [::Array<::Google::Cloud::NetworkSecurity::V1::SACAttachment>]
+        #     The list of SACAttachments.
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     A token identifying a page of results the server should return.
+        # @!attribute [rw] unreachable
+        #   @return [::Array<::String>]
+        #     Locations that could not be reached.
+        class ListSACAttachmentsResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for `GetSACAttachment` method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. Name of the resource, in the form
+        #     `projects/{project}/locations/{location}/sacAttachments/{sac_attachment}`.
+        class GetSACAttachmentRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for `CreateSACAttachment` method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The parent, in the form
+        #     `projects/{project}/locations/{location}`.
+        # @!attribute [rw] sac_attachment_id
+        #   @return [::String]
+        #     Required. ID of the created attachment.
+        #     The ID must be 1-63 characters long, and comply with
+        #     <a href="https://www.ietf.org/rfc/rfc1035.txt" target="_blank">RFC1035</a>.
+        #     Specifically, it must be 1-63 characters long and match the regular
+        #     expression `[a-z]([-a-z0-9]*[a-z0-9])?`
+        #     which means the first character must be a lowercase letter, and all
+        #     following characters must be a dash, lowercase letter, or digit, except
+        #     the last character, which cannot be a dash.
+        # @!attribute [rw] sac_attachment
+        #   @return [::Google::Cloud::NetworkSecurity::V1::SACAttachment]
+        #     Required. The resource being created.
+        # @!attribute [rw] request_id
+        #   @return [::String]
+        #     Optional. An optional request ID to identify requests. Specify a unique
+        #     request ID so that if you must retry your request, the server will know to
+        #     ignore the request if it has already been completed. The server will
+        #     guarantee that for at least 60 minutes since the first request.
+        #
+        #     For example, consider a situation where you make an initial request and the
+        #     request times out. If you make the request again with the same request
+        #     ID, the server can check if original operation with the same request ID
+        #     was received, and if so, will ignore the second request. This prevents
+        #     clients from accidentally creating duplicate commitments.
+        #
+        #     The request ID must be a valid UUID with the exception that zero UUID is
+        #     not supported (00000000-0000-0000-0000-000000000000).
+        class CreateSACAttachmentRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request for `DeleteSACAttachment` method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. Name of the resource, in the form
+        #     `projects/{project}/locations/{location}/sacAttachments/{sac_attachment}`.
+        # @!attribute [rw] request_id
+        #   @return [::String]
+        #     Optional. An optional request ID to identify requests. Specify a unique
+        #     request ID so that if you must retry your request, the server will know to
+        #     ignore the request if it has already been completed. The server will
+        #     guarantee that for at least 60 minutes after the first request.
+        #
+        #     For example, consider a situation where you make an initial request and the
+        #     request times out. If you make the request again with the same request
+        #     ID, the server can check if original operation with the same request ID
+        #     was received, and if so, will ignore the second request. This prevents
+        #     clients from accidentally creating duplicate commitments.
+        #
+        #     The request ID must be a valid UUID with the exception that zero UUID is
+        #     not supported (00000000-0000-0000-0000-000000000000).
+        class DeleteSACAttachmentRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+      end
+    end
+  end
+end

data/proto_docs/google/cloud/networksecurity/v1/tls.rb

@@ -0,0 +1,90 @@
+# frozen_string_literal: true
+
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module NetworkSecurity
+      module V1
+        # Specification of the GRPC Endpoint.
+        # @!attribute [rw] target_uri
+        #   @return [::String]
+        #     Required. The target URI of the gRPC endpoint. Only UDS path is supported,
+        #     and should start with "unix:".
+        class GrpcEndpoint
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Specification of ValidationCA. Defines the mechanism to obtain the
+        # Certificate Authority certificate to validate the peer certificate.
+        # @!attribute [rw] grpc_endpoint
+        #   @return [::Google::Cloud::NetworkSecurity::V1::GrpcEndpoint]
+        #     gRPC specific configuration to access the gRPC server to
+        #     obtain the CA certificate.
+        #
+        #     Note: The following fields are mutually exclusive: `grpc_endpoint`, `certificate_provider_instance`. If a field in that set is populated, all other fields in the set will automatically be cleared.
+        # @!attribute [rw] certificate_provider_instance
+        #   @return [::Google::Cloud::NetworkSecurity::V1::CertificateProviderInstance]
+        #     The certificate provider instance specification that will be passed to
+        #     the data plane, which will be used to load necessary credential
+        #     information.
+        #
+        #     Note: The following fields are mutually exclusive: `certificate_provider_instance`, `grpc_endpoint`. If a field in that set is populated, all other fields in the set will automatically be cleared.
+        class ValidationCA
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Specification of a TLS certificate provider instance. Workloads may have one
+        # or more CertificateProvider instances (plugins) and one of them is enabled
+        # and configured by specifying this message. Workloads use the values from this
+        # message to locate and load the CertificateProvider instance configuration.
+        # @!attribute [rw] plugin_instance
+        #   @return [::String]
+        #     Required. Plugin instance name, used to locate and load CertificateProvider
+        #     instance configuration. Set to "google_cloud_private_spiffe" to use
+        #     Certificate Authority Service certificate provider instance.
+        class CertificateProviderInstance
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Specification of certificate provider. Defines the mechanism to obtain the
+        # certificate and private key for peer to peer authentication.
+        # @!attribute [rw] grpc_endpoint
+        #   @return [::Google::Cloud::NetworkSecurity::V1::GrpcEndpoint]
+        #     gRPC specific configuration to access the gRPC server to
+        #     obtain the cert and private key.
+        #
+        #     Note: The following fields are mutually exclusive: `grpc_endpoint`, `certificate_provider_instance`. If a field in that set is populated, all other fields in the set will automatically be cleared.
+        # @!attribute [rw] certificate_provider_instance
+        #   @return [::Google::Cloud::NetworkSecurity::V1::CertificateProviderInstance]
+        #     The certificate provider instance specification that will be passed to
+        #     the data plane, which will be used to load necessary credential
+        #     information.
+        #
+        #     Note: The following fields are mutually exclusive: `certificate_provider_instance`, `grpc_endpoint`. If a field in that set is populated, all other fields in the set will automatically be cleared.
+        class CertificateProvider
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+      end
+    end
+  end
+end