google-cloud-resource_manager-v3 0.3.0 → 0.5.0

data/lib/google/cloud/resource_manager/v3.rb

@@ -20,6 +20,7 @@ require "google/cloud/resource_manager/v3/folders"
 require "google/cloud/resource_manager/v3/organizations"
 require "google/cloud/resource_manager/v3/projects"
 require "google/cloud/resource_manager/v3/tag_bindings"
+require "google/cloud/resource_manager/v3/tag_holds"
 require "google/cloud/resource_manager/v3/tag_keys"
 require "google/cloud/resource_manager/v3/tag_values"
 require "google/cloud/resource_manager/v3/version"
@@ -28,13 +29,18 @@ module Google
   module Cloud
     module ResourceManager
       ##
-      # To load this package, including all its services, and instantiate a client:
+      # API client module.
       #
-      # @example
+      # @example Load this package, including all its services, and instantiate a gRPC client
       #
       #     require "google/cloud/resource_manager/v3"
       #     client = ::Google::Cloud::ResourceManager::V3::Folders::Client.new
       #
+      # @example Load this package, including all its services, and instantiate a REST client
+      #
+      #     require "google/cloud/resource_manager/v3"
+      #     client = ::Google::Cloud::ResourceManager::V3::Folders::Rest::Client.new
+      #
       module V3
       end
     end

data/lib/google/cloud/resourcemanager/v3/folders_services_pb.rb

@@ -87,7 +87,9 @@ module Google
             # Updates a folder, changing its `display_name`.
             # Changes to the folder `display_name` will be rejected if they violate
             # either the `display_name` formatting rules or the naming constraints
-            # described in the [CreateFolder][google.cloud.resourcemanager.v3.Folders.CreateFolder] documentation.
+            # described in the
+            # [CreateFolder][google.cloud.resourcemanager.v3.Folders.CreateFolder]
+            # documentation.
             #
             # The folder's `display_name` must start and end with a letter or digit,
             # may contain letters, digits, spaces, hyphens and underscores and can be
@@ -114,29 +116,33 @@ module Google
             # `FolderOperation` message as an aid to stateless clients.
             # Folder moves will be rejected if they violate either the naming, height,
             # or fanout constraints described in the
-            # [CreateFolder][google.cloud.resourcemanager.v3.Folders.CreateFolder] documentation.
-            # The caller must have `resourcemanager.folders.move` permission on the
-            # folder's current and proposed new parent.
+            # [CreateFolder][google.cloud.resourcemanager.v3.Folders.CreateFolder]
+            # documentation. The caller must have `resourcemanager.folders.move`
+            # permission on the folder's current and proposed new parent.
             rpc :MoveFolder, ::Google::Cloud::ResourceManager::V3::MoveFolderRequest, ::Google::Longrunning::Operation
             # Requests deletion of a folder. The folder is moved into the
-            # [DELETE_REQUESTED][google.cloud.resourcemanager.v3.Folder.State.DELETE_REQUESTED] state
-            # immediately, and is deleted approximately 30 days later. This method may
-            # only be called on an empty folder, where a folder is empty if it doesn't
-            # contain any folders or projects in the [ACTIVE][google.cloud.resourcemanager.v3.Folder.State.ACTIVE] state.
-            # If called on a folder in [DELETE_REQUESTED][google.cloud.resourcemanager.v3.Folder.State.DELETE_REQUESTED]
+            # [DELETE_REQUESTED][google.cloud.resourcemanager.v3.Folder.State.DELETE_REQUESTED]
+            # state immediately, and is deleted approximately 30 days later. This method
+            # may only be called on an empty folder, where a folder is empty if it
+            # doesn't contain any folders or projects in the
+            # [ACTIVE][google.cloud.resourcemanager.v3.Folder.State.ACTIVE] state. If
+            # called on a folder in
+            # [DELETE_REQUESTED][google.cloud.resourcemanager.v3.Folder.State.DELETE_REQUESTED]
             # state the operation will result in a no-op success.
             # The caller must have `resourcemanager.folders.delete` permission on the
             # identified folder.
             rpc :DeleteFolder, ::Google::Cloud::ResourceManager::V3::DeleteFolderRequest, ::Google::Longrunning::Operation
             # Cancels the deletion request for a folder. This method may be called on a
-            # folder in any state. If the folder is in the [ACTIVE][google.cloud.resourcemanager.v3.Folder.State.ACTIVE]
-            # state the result will be a no-op success. In order to succeed, the folder's
-            # parent must be in the [ACTIVE][google.cloud.resourcemanager.v3.Folder.State.ACTIVE] state. In addition,
-            # reintroducing the folder into the tree must not violate folder naming,
-            # height, and fanout constraints described in the
-            # [CreateFolder][google.cloud.resourcemanager.v3.Folders.CreateFolder] documentation.
-            # The caller must have `resourcemanager.folders.undelete` permission on the
-            # identified folder.
+            # folder in any state. If the folder is in the
+            # [ACTIVE][google.cloud.resourcemanager.v3.Folder.State.ACTIVE] state the
+            # result will be a no-op success. In order to succeed, the folder's parent
+            # must be in the
+            # [ACTIVE][google.cloud.resourcemanager.v3.Folder.State.ACTIVE] state. In
+            # addition, reintroducing the folder into the tree must not violate folder
+            # naming, height, and fanout constraints described in the
+            # [CreateFolder][google.cloud.resourcemanager.v3.Folders.CreateFolder]
+            # documentation. The caller must have `resourcemanager.folders.undelete`
+            # permission on the identified folder.
             rpc :UndeleteFolder, ::Google::Cloud::ResourceManager::V3::UndeleteFolderRequest, ::Google::Longrunning::Operation
             # Gets the access control policy for a folder. The returned policy may be
             # empty if no such policy or resource exists. The `resource` field should

data/lib/google/cloud/resourcemanager/v3/organizations_pb.rb

@@ -9,7 +9,6 @@ require 'google/api/field_behavior_pb'
 require 'google/api/resource_pb'
 require 'google/iam/v1/iam_policy_pb'
 require 'google/iam/v1/policy_pb'
-require 'google/longrunning/operations_pb'
 require 'google/protobuf/timestamp_pb'
 
 Google::Protobuf::DescriptorPool.generated_pool.build do

data/lib/google/cloud/resourcemanager/v3/projects_services_pb.rb

@@ -78,9 +78,12 @@ module Google
             # Upon success, the `Operation.response` field will be populated with the
             # moved project.
             #
-            # The caller must have `resourcemanager.projects.update` permission on the
-            # project and have `resourcemanager.projects.move` permission on the
-            # project's current and proposed new parent.
+            # The caller must have `resourcemanager.projects.move` permission on the
+            # project, on the project's current and proposed new parent.
+            #
+            # If project has no current parent, or it currently does not have an
+            # associated organization resource, you will also need the
+            # `resourcemanager.projects.setIamPolicy` permission in the project.
             #
             #
             rpc :MoveProject, ::Google::Cloud::ResourceManager::V3::MoveProjectRequest, ::Google::Longrunning::Operation
@@ -92,7 +95,8 @@ module Google
             #
             # This method changes the Project's lifecycle state from
             # [ACTIVE][google.cloud.resourcemanager.v3.Project.State.ACTIVE]
-            # to [DELETE_REQUESTED][google.cloud.resourcemanager.v3.Project.State.DELETE_REQUESTED].
+            # to
+            # [DELETE_REQUESTED][google.cloud.resourcemanager.v3.Project.State.DELETE_REQUESTED].
             # The deletion starts at an unspecified time,
             # at which point the Project is no longer accessible.
             #
@@ -127,10 +131,12 @@ module Google
             # The caller must have `resourcemanager.projects.undelete` permission for
             # this project.
             rpc :UndeleteProject, ::Google::Cloud::ResourceManager::V3::UndeleteProjectRequest, ::Google::Longrunning::Operation
-            # Returns the IAM access control policy for the specified project.
+            # Returns the IAM access control policy for the specified project, in the
+            # format `projects/{ProjectIdOrNumber}` e.g. projects/123.
             # Permission is denied if the policy or the resource do not exist.
             rpc :GetIamPolicy, ::Google::Iam::V1::GetIamPolicyRequest, ::Google::Iam::V1::Policy
-            # Sets the IAM access control policy for the specified project.
+            # Sets the IAM access control policy for the specified project, in the
+            # format `projects/{ProjectIdOrNumber}` e.g. projects/123.
             #
             # CAUTION: This method will replace the existing policy, and cannot be used
             # to append additional IAM settings.
@@ -162,20 +168,17 @@ module Google
             # `setIamPolicy()`;
             # they must be sent only using the Cloud Platform Console.
             #
-            # + Membership changes that leave the project without any owners that have
-            # accepted the Terms of Service (ToS) will be rejected.
-            #
             # + If the project is not part of an organization, there must be at least
             # one owner who has accepted the Terms of Service (ToS) agreement in the
             # policy. Calling `setIamPolicy()` to remove the last ToS-accepted owner
             # from the policy will fail. This restriction also applies to legacy
             # projects that no longer have owners who have accepted the ToS. Edits to
             # IAM policies will be rejected until the lack of a ToS-accepting owner is
-            # rectified.
-            #
-            # + Calling this method requires enabling the App Engine Admin API.
+            # rectified. If the project is part of an organization, you can remove all
+            # owners, potentially making the organization inaccessible.
             rpc :SetIamPolicy, ::Google::Iam::V1::SetIamPolicyRequest, ::Google::Iam::V1::Policy
-            # Returns permissions that a caller has on the specified project.
+            # Returns permissions that a caller has on the specified project, in the
+            # format `projects/{ProjectIdOrNumber}` e.g. projects/123..
             rpc :TestIamPermissions, ::Google::Iam::V1::TestIamPermissionsRequest, ::Google::Iam::V1::TestIamPermissionsResponse
           end
 

data/lib/google/cloud/resourcemanager/v3/tag_bindings_pb.rb

@@ -8,6 +8,7 @@ require 'google/api/client_pb'
 require 'google/api/field_behavior_pb'
 require 'google/api/resource_pb'
 require 'google/longrunning/operations_pb'
+require 'google/protobuf/empty_pb'
 
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/cloud/resourcemanager/v3/tag_bindings.proto", :syntax => :proto3) do
@@ -15,6 +16,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :name, :string, 1
       optional :parent, :string, 2
       optional :tag_value, :string, 3
+      optional :tag_value_namespaced_name, :string, 4
     end
     add_message "google.cloud.resourcemanager.v3.CreateTagBindingMetadata" do
     end
@@ -36,6 +38,23 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       repeated :tag_bindings, :message, 1, "google.cloud.resourcemanager.v3.TagBinding"
       optional :next_page_token, :string, 2
     end
+    add_message "google.cloud.resourcemanager.v3.ListEffectiveTagsRequest" do
+      optional :parent, :string, 1
+      optional :page_size, :int32, 2
+      optional :page_token, :string, 3
+    end
+    add_message "google.cloud.resourcemanager.v3.ListEffectiveTagsResponse" do
+      repeated :effective_tags, :message, 1, "google.cloud.resourcemanager.v3.EffectiveTag"
+      optional :next_page_token, :string, 2
+    end
+    add_message "google.cloud.resourcemanager.v3.EffectiveTag" do
+      optional :tag_value, :string, 1
+      optional :namespaced_tag_value, :string, 2
+      optional :tag_key, :string, 3
+      optional :namespaced_tag_key, :string, 4
+      optional :tag_key_parent_name, :string, 6
+      optional :inherited, :bool, 5
+    end
   end
 end
 
@@ -50,6 +69,9 @@ module Google
         DeleteTagBindingRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.DeleteTagBindingRequest").msgclass
         ListTagBindingsRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.ListTagBindingsRequest").msgclass
         ListTagBindingsResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.ListTagBindingsResponse").msgclass
+        ListEffectiveTagsRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.ListEffectiveTagsRequest").msgclass
+        ListEffectiveTagsResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.ListEffectiveTagsResponse").msgclass
+        EffectiveTag = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.EffectiveTag").msgclass
       end
     end
   end

data/lib/google/cloud/resourcemanager/v3/tag_bindings_services_pb.rb

@@ -25,7 +25,7 @@ module Google
       module V3
         module TagBindings
           # Allow users to create and manage TagBindings between TagValues and
-          # different cloud resources throughout the GCP resource hierarchy.
+          # different Google Cloud resources throughout the GCP resource hierarchy.
           class Service
 
             include ::GRPC::GenericService
@@ -34,17 +34,19 @@ module Google
             self.unmarshal_class_method = :decode
             self.service_name = 'google.cloud.resourcemanager.v3.TagBindings'
 
-            # Lists the TagBindings for the given cloud resource, as specified with
-            # `parent`.
+            # Lists the TagBindings for the given Google Cloud resource, as specified
+            # with `parent`.
             #
             # NOTE: The `parent` field is expected to be a full resource name:
             # https://cloud.google.com/apis/design/resource_names#full_resource_name
             rpc :ListTagBindings, ::Google::Cloud::ResourceManager::V3::ListTagBindingsRequest, ::Google::Cloud::ResourceManager::V3::ListTagBindingsResponse
-            # Creates a TagBinding between a TagValue and a cloud resource
-            # (currently project, folder, or organization).
+            # Creates a TagBinding between a TagValue and a Google Cloud resource.
             rpc :CreateTagBinding, ::Google::Cloud::ResourceManager::V3::CreateTagBindingRequest, ::Google::Longrunning::Operation
             # Deletes a TagBinding.
             rpc :DeleteTagBinding, ::Google::Cloud::ResourceManager::V3::DeleteTagBindingRequest, ::Google::Longrunning::Operation
+            # Return a list of effective tags for the given Google Cloud resource, as
+            # specified in `parent`.
+            rpc :ListEffectiveTags, ::Google::Cloud::ResourceManager::V3::ListEffectiveTagsRequest, ::Google::Cloud::ResourceManager::V3::ListEffectiveTagsResponse
           end
 
           Stub = Service.rpc_stub_class

data/lib/google/cloud/resourcemanager/v3/tag_holds_pb.rb

@@ -0,0 +1,63 @@
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# source: google/cloud/resourcemanager/v3/tag_holds.proto
+
+require 'google/protobuf'
+
+require 'google/api/annotations_pb'
+require 'google/api/client_pb'
+require 'google/api/field_behavior_pb'
+require 'google/api/resource_pb'
+require 'google/longrunning/operations_pb'
+require 'google/protobuf/empty_pb'
+require 'google/protobuf/timestamp_pb'
+
+Google::Protobuf::DescriptorPool.generated_pool.build do
+  add_file("google/cloud/resourcemanager/v3/tag_holds.proto", :syntax => :proto3) do
+    add_message "google.cloud.resourcemanager.v3.TagHold" do
+      optional :name, :string, 1
+      optional :holder, :string, 2
+      optional :origin, :string, 3
+      optional :help_link, :string, 4
+      optional :create_time, :message, 5, "google.protobuf.Timestamp"
+    end
+    add_message "google.cloud.resourcemanager.v3.CreateTagHoldRequest" do
+      optional :parent, :string, 1
+      optional :tag_hold, :message, 2, "google.cloud.resourcemanager.v3.TagHold"
+      optional :validate_only, :bool, 3
+    end
+    add_message "google.cloud.resourcemanager.v3.CreateTagHoldMetadata" do
+    end
+    add_message "google.cloud.resourcemanager.v3.DeleteTagHoldRequest" do
+      optional :name, :string, 1
+      optional :validate_only, :bool, 2
+    end
+    add_message "google.cloud.resourcemanager.v3.DeleteTagHoldMetadata" do
+    end
+    add_message "google.cloud.resourcemanager.v3.ListTagHoldsRequest" do
+      optional :parent, :string, 1
+      optional :page_size, :int32, 2
+      optional :page_token, :string, 3
+      optional :filter, :string, 4
+    end
+    add_message "google.cloud.resourcemanager.v3.ListTagHoldsResponse" do
+      repeated :tag_holds, :message, 1, "google.cloud.resourcemanager.v3.TagHold"
+      optional :next_page_token, :string, 2
+    end
+  end
+end
+
+module Google
+  module Cloud
+    module ResourceManager
+      module V3
+        TagHold = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.TagHold").msgclass
+        CreateTagHoldRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.CreateTagHoldRequest").msgclass
+        CreateTagHoldMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.CreateTagHoldMetadata").msgclass
+        DeleteTagHoldRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.DeleteTagHoldRequest").msgclass
+        DeleteTagHoldMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.DeleteTagHoldMetadata").msgclass
+        ListTagHoldsRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.ListTagHoldsRequest").msgclass
+        ListTagHoldsResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.ListTagHoldsResponse").msgclass
+      end
+    end
+  end
+end

data/lib/google/cloud/resourcemanager/v3/tag_holds_services_pb.rb

@@ -0,0 +1,54 @@
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# Source: google/cloud/resourcemanager/v3/tag_holds.proto for package 'Google.Cloud.ResourceManager.V3'
+# Original file comments:
+# Copyright 2023 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require 'grpc'
+require 'google/cloud/resourcemanager/v3/tag_holds_pb'
+
+module Google
+  module Cloud
+    module ResourceManager
+      module V3
+        module TagHolds
+          # Allow users to create and manage TagHolds for TagValues. TagHolds represent
+          # the use of a Tag Value that is not captured by TagBindings but
+          # should still block TagValue deletion (such as a reference in a policy
+          # condition). This service provides isolated failure domains by cloud location
+          # so that TagHolds can be managed in the same location as their usage.
+          class Service
+
+            include ::GRPC::GenericService
+
+            self.marshal_class_method = :encode
+            self.unmarshal_class_method = :decode
+            self.service_name = 'google.cloud.resourcemanager.v3.TagHolds'
+
+            # Creates a TagHold. Returns ALREADY_EXISTS if a TagHold with the same
+            # resource and origin exists under the same TagValue.
+            rpc :CreateTagHold, ::Google::Cloud::ResourceManager::V3::CreateTagHoldRequest, ::Google::Longrunning::Operation
+            # Deletes a TagHold.
+            rpc :DeleteTagHold, ::Google::Cloud::ResourceManager::V3::DeleteTagHoldRequest, ::Google::Longrunning::Operation
+            # Lists TagHolds under a TagValue.
+            rpc :ListTagHolds, ::Google::Cloud::ResourceManager::V3::ListTagHoldsRequest, ::Google::Cloud::ResourceManager::V3::ListTagHoldsResponse
+          end
+
+          Stub = Service.rpc_stub_class
+        end
+      end
+    end
+  end
+end

data/lib/google/cloud/resourcemanager/v3/tag_keys_pb.rb

@@ -24,6 +24,8 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :create_time, :message, 6, "google.protobuf.Timestamp"
       optional :update_time, :message, 7, "google.protobuf.Timestamp"
       optional :etag, :string, 8
+      optional :purpose, :enum, 11, "google.cloud.resourcemanager.v3.Purpose"
+      map :purpose_data, :string, :string, 12
     end
     add_message "google.cloud.resourcemanager.v3.ListTagKeysRequest" do
       optional :parent, :string, 1
@@ -37,6 +39,9 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
     add_message "google.cloud.resourcemanager.v3.GetTagKeyRequest" do
       optional :name, :string, 1
     end
+    add_message "google.cloud.resourcemanager.v3.GetNamespacedTagKeyRequest" do
+      optional :name, :string, 1
+    end
     add_message "google.cloud.resourcemanager.v3.CreateTagKeyRequest" do
       optional :tag_key, :message, 1, "google.cloud.resourcemanager.v3.TagKey"
       optional :validate_only, :bool, 2
@@ -57,6 +62,10 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
     end
     add_message "google.cloud.resourcemanager.v3.DeleteTagKeyMetadata" do
     end
+    add_enum "google.cloud.resourcemanager.v3.Purpose" do
+      value :PURPOSE_UNSPECIFIED, 0
+      value :GCE_FIREWALL, 1
+    end
   end
 end
 
@@ -68,12 +77,14 @@ module Google
         ListTagKeysRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.ListTagKeysRequest").msgclass
         ListTagKeysResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.ListTagKeysResponse").msgclass
         GetTagKeyRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.GetTagKeyRequest").msgclass
+        GetNamespacedTagKeyRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.GetNamespacedTagKeyRequest").msgclass
         CreateTagKeyRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.CreateTagKeyRequest").msgclass
         CreateTagKeyMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.CreateTagKeyMetadata").msgclass
         UpdateTagKeyRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.UpdateTagKeyRequest").msgclass
         UpdateTagKeyMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.UpdateTagKeyMetadata").msgclass
         DeleteTagKeyRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.DeleteTagKeyRequest").msgclass
         DeleteTagKeyMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.DeleteTagKeyMetadata").msgclass
+        Purpose = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.Purpose").enummodule
       end
     end
   end

data/lib/google/cloud/resourcemanager/v3/tag_keys_services_pb.rb

@@ -38,10 +38,14 @@ module Google
             # Retrieves a TagKey. This method will return `PERMISSION_DENIED` if the
             # key does not exist or the user does not have permission to view it.
             rpc :GetTagKey, ::Google::Cloud::ResourceManager::V3::GetTagKeyRequest, ::Google::Cloud::ResourceManager::V3::TagKey
+            # Retrieves a TagKey by its namespaced name.
+            # This method will return `PERMISSION_DENIED` if the key does not exist
+            # or the user does not have permission to view it.
+            rpc :GetNamespacedTagKey, ::Google::Cloud::ResourceManager::V3::GetNamespacedTagKeyRequest, ::Google::Cloud::ResourceManager::V3::TagKey
             # Creates a new TagKey. If another request with the same parameters is
             # sent while the original request is in process, the second request
-            # will receive an error. A maximum of 300 TagKeys can exist under a parent at
-            # any given time.
+            # will receive an error. A maximum of 1000 TagKeys can exist under a parent
+            # at any given time.
             rpc :CreateTagKey, ::Google::Cloud::ResourceManager::V3::CreateTagKeyRequest, ::Google::Longrunning::Operation
             # Updates the attributes of the TagKey resource.
             rpc :UpdateTagKey, ::Google::Cloud::ResourceManager::V3::UpdateTagKeyRequest, ::Google::Longrunning::Operation

data/lib/google/cloud/resourcemanager/v3/tag_values_pb.rb

@@ -37,6 +37,9 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
     add_message "google.cloud.resourcemanager.v3.GetTagValueRequest" do
       optional :name, :string, 1
     end
+    add_message "google.cloud.resourcemanager.v3.GetNamespacedTagValueRequest" do
+      optional :name, :string, 1
+    end
     add_message "google.cloud.resourcemanager.v3.CreateTagValueRequest" do
       optional :tag_value, :message, 1, "google.cloud.resourcemanager.v3.TagValue"
       optional :validate_only, :bool, 2
@@ -68,6 +71,7 @@ module Google
         ListTagValuesRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.ListTagValuesRequest").msgclass
         ListTagValuesResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.ListTagValuesResponse").msgclass
         GetTagValueRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.GetTagValueRequest").msgclass
+        GetNamespacedTagValueRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.GetNamespacedTagValueRequest").msgclass
         CreateTagValueRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.CreateTagValueRequest").msgclass
         CreateTagValueMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.CreateTagValueMetadata").msgclass
         UpdateTagValueRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.UpdateTagValueRequest").msgclass

data/lib/google/cloud/resourcemanager/v3/tag_values_services_pb.rb

@@ -35,13 +35,16 @@ module Google
 
             # Lists all TagValues for a specific TagKey.
             rpc :ListTagValues, ::Google::Cloud::ResourceManager::V3::ListTagValuesRequest, ::Google::Cloud::ResourceManager::V3::ListTagValuesResponse
-            # Retrieves TagValue. If the TagValue or namespaced name does not exist, or
-            # if the user does not have permission to view it, this method will return
-            # `PERMISSION_DENIED`.
+            # Retrieves a TagValue. This method will return `PERMISSION_DENIED` if the
+            # value does not exist or the user does not have permission to view it.
             rpc :GetTagValue, ::Google::Cloud::ResourceManager::V3::GetTagValueRequest, ::Google::Cloud::ResourceManager::V3::TagValue
+            # Retrieves a TagValue by its namespaced name.
+            # This method will return `PERMISSION_DENIED` if the value does not exist
+            # or the user does not have permission to view it.
+            rpc :GetNamespacedTagValue, ::Google::Cloud::ResourceManager::V3::GetNamespacedTagValueRequest, ::Google::Cloud::ResourceManager::V3::TagValue
             # Creates a TagValue as a child of the specified TagKey. If a another
             # request with the same parameters is sent while the original request is in
-            # process the second request will receive an error. A maximum of 300
+            # process the second request will receive an error. A maximum of 1000
             # TagValues can exist under a TagKey at any given time.
             rpc :CreateTagValue, ::Google::Cloud::ResourceManager::V3::CreateTagValueRequest, ::Google::Longrunning::Operation
             # Updates the attributes of the TagValue resource.