google-cloud-resource_manager-v3 0.3.0 → 0.5.0

data/proto_docs/google/cloud/resourcemanager/v3/projects.rb

@@ -26,8 +26,8 @@ module Google
         # Google Cloud Platform resources.
         # @!attribute [r] name
         #   @return [::String]
-        #     Output only. The unique resource name of the project. It is an int64 generated number
-        #     prefixed by "projects/".
+        #     Output only. The unique resource name of the project. It is an int64
+        #     generated number prefixed by "projects/".
         #
         #     Example: `projects/415104041262`
         # @!attribute [rw] parent
@@ -64,9 +64,9 @@ module Google
         #     Output only. The time at which this resource was requested for deletion.
         # @!attribute [r] etag
         #   @return [::String]
-        #     Output only. A checksum computed by the server based on the current value of the Project
-        #     resource. This may be sent on update and delete requests to ensure the
-        #     client has an up-to-date value before proceeding.
+        #     Output only. A checksum computed by the server based on the current value
+        #     of the Project resource. This may be sent on update and delete requests to
+        #     ensure the client has an up-to-date value before proceeding.
         # @!attribute [rw] labels
         #   @return [::Google::Protobuf::Map{::String => ::String}]
         #     Optional. The labels associated with this project.
@@ -77,7 +77,7 @@ module Google
         #     Label values must be between 0 and 63 characters long and must conform
         #     to the regular expression (\[a-z\](\[-a-z0-9\]*\[a-z0-9\])?)?.
         #
-        #     No more than 256 labels can be associated with a given resource.
+        #     No more than 64 labels can be associated with a given resource.
         #
         #     Clients should store labels in a representation such as JSON that does not
         #     depend on specific characters being disallowed.
@@ -131,15 +131,17 @@ module Google
         # method.
         # @!attribute [rw] parent
         #   @return [::String]
-        #     Required. The name of the parent resource to list projects under.
+        #     Required. The name of the parent resource whose projects are being listed.
+        #     Only children of this parent resource are listed; descendants are not
+        #     listed.
         #
-        #     For example, setting this field to 'folders/1234' would list all projects
-        #     directly under that folder.
+        #     If the parent is a folder, use the value `folders/{folder_id}`. If the
+        #     parent is an organization, use the value `organizations/{org_id}`.
         # @!attribute [rw] page_token
         #   @return [::String]
-        #     Optional. A pagination token returned from a previous call to [ListProjects]
-        #     [google.cloud.resourcemanager.v3.Projects.ListProjects]
-        #     that indicates from where listing should continue.
+        #     Optional. A pagination token returned from a previous call to
+        #     [ListProjects] [google.cloud.resourcemanager.v3.Projects.ListProjects] that
+        #     indicates from where listing should continue.
         # @!attribute [rw] page_size
         #   @return [::Integer]
         #     Optional. The maximum number of projects to return in the response.
@@ -147,8 +149,8 @@ module Google
         #     If unspecified, server picks an appropriate default.
         # @!attribute [rw] show_deleted
         #   @return [::Boolean]
-        #     Optional. Indicate that projects in the `DELETE_REQUESTED` state should also be
-        #     returned. Normally only `ACTIVE` projects are returned.
+        #     Optional. Indicate that projects in the `DELETE_REQUESTED` state should
+        #     also be returned. Normally only `ACTIVE` projects are returned.
         class ListProjectsRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -192,22 +194,22 @@ module Google
         #   @return [::String]
         #     Optional. A query string for searching for projects that the caller has
         #     `resourcemanager.projects.get` permission to. If multiple fields are
-        #     included in the query, the it will return results that match any of the
+        #     included in the query, then it will return results that match any of the
         #     fields. Some eligible fields are:
         #
         #     ```
         #     | Field                   | Description                                  |
         #     |-------------------------|----------------------------------------------|
         #     | displayName, name       | Filters by displayName.                      |
-        #     | parent                  | Project's parent. (for example: folders/123,
-        #     organizations/*) Prefer parent field over parent.type and parent.id. |
-        #     | parent.type             | Parent's type: `folder` or `organization`.   |
-        #     | parent.id               | Parent's id number (for example: 123)        |
-        #     | id, projectId           | Filters by projectId.                        |
-        #     | state, lifecycleState   | Filters by state.                            |
-        #     | labels                  | Filters by label name or value.              |
-        #     | labels.<key> (where *key* is the name of a label) | Filters by label
-        #     name. |
+        #     | parent                  | Project's parent (for example: folders/123,
+        #     organizations/*). Prefer parent field over parent.type and parent.id.| |
+        #     parent.type             | Parent's type: `folder` or `organization`.   | |
+        #     parent.id               | Parent's id number (for example: 123)        | |
+        #     id, projectId           | Filters by projectId.                        | |
+        #     state, lifecycleState   | Filters by state.                            | |
+        #     labels                  | Filters by label name or value.              | |
+        #     labels.\<key\> (where *key* is the name of a label) | Filters by label
+        #     name.|
         #     ```
         #
         #     Search expressions are case insensitive.
@@ -223,17 +225,17 @@ module Google
         #     | NAME:howl        | Equivalent to above.                                |
         #     | labels.color:*   | The project has the label `color`.                  |
         #     | labels.color:red | The project's label `color` has the value `red`.    |
-        #     | labels.color:red&nbsp;labels.size:big | The project's label `color` has
-        #     the value `red` and its label `size` has the value `big`.                |
+        #     | labels.color:red labels.size:big | The project's label `color` has the
+        #     value `red` or its label `size` has the value `big`.                     |
         #     ```
         #
         #     If no query is specified, the call will return projects for which the user
         #     has the `resourcemanager.projects.get` permission.
         # @!attribute [rw] page_token
         #   @return [::String]
-        #     Optional. A pagination token returned from a previous call to [ListProjects]
-        #     [google.cloud.resourcemanager.v3.Projects.ListProjects]
-        #     that indicates from where listing should continue.
+        #     Optional. A pagination token returned from a previous call to
+        #     [ListProjects] [google.cloud.resourcemanager.v3.Projects.ListProjects] that
+        #     indicates from where listing should continue.
         # @!attribute [rw] page_size
         #   @return [::Integer]
         #     Optional. The maximum number of projects to return in the response.
@@ -285,7 +287,7 @@ module Google
         #
         #     If the `parent` field is set, the `resourcemanager.projects.create`
         #     permission is checked on the parent resource. If no parent is set and
-        #     the authorization credentials belong to an Organziation, the parent
+        #     the authorization credentials belong to an Organization, the parent
         #     will be set to that Organization.
         class CreateProjectRequest
           include ::Google::Protobuf::MessageExts

data/proto_docs/google/cloud/resourcemanager/v3/tag_bindings.rb

@@ -22,9 +22,8 @@ module Google
     module ResourceManager
       module V3
         # A TagBinding represents a connection between a TagValue and a cloud
-        # resource (currently project, folder, or organization). Once a TagBinding is
-        # created, the TagValue is applied to all the descendants of the cloud
-        # resource.
+        # resource Once a TagBinding is created, the TagValue is applied to all the
+        # descendants of the Google Cloud resource.
         # @!attribute [r] name
         #   @return [::String]
         #     Output only. The name of the TagBinding. This is a String of the form:
@@ -38,6 +37,15 @@ module Google
         #   @return [::String]
         #     The TagValue of the TagBinding.
         #     Must be of the form `tagValues/456`.
+        # @!attribute [rw] tag_value_namespaced_name
+        #   @return [::String]
+        #     The namespaced name for the TagValue of the TagBinding.
+        #     Must be in the format
+        #     `{parent_id}/{tag_key_short_name}/{short_name}`.
+        #
+        #     For methods that support TagValue namespaced name, only one of
+        #     tag_value_namespaced_name or tag_value may be filled. Requests with both
+        #     fields will be rejected.
         class TagBinding
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -55,8 +63,8 @@ module Google
         #     Required. The TagBinding to be created.
         # @!attribute [rw] validate_only
         #   @return [::Boolean]
-        #     Optional. Set to true to perform the validations necessary for creating the resource,
-        #     but not actually perform the action.
+        #     Optional. Set to true to perform the validations necessary for creating the
+        #     resource, but not actually perform the action.
         class CreateTagBindingRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -82,18 +90,18 @@ module Google
         # The request message to list all TagBindings for a parent.
         # @!attribute [rw] parent
         #   @return [::String]
-        #     Required. The full resource name of a resource for which you want to list existing
-        #     TagBindings.
-        #     E.g. "//cloudresourcemanager.googleapis.com/projects/123"
+        #     Required. The full resource name of a resource for which you want to list
+        #     existing TagBindings. E.g.
+        #     "//cloudresourcemanager.googleapis.com/projects/123"
         # @!attribute [rw] page_size
         #   @return [::Integer]
-        #     Optional. The maximum number of TagBindings to return in the response. The server
-        #     allows a maximum of 300 TagBindings to return. If unspecified, the server
-        #     will use 100 as the default.
+        #     Optional. The maximum number of TagBindings to return in the response. The
+        #     server allows a maximum of 300 TagBindings to return. If unspecified, the
+        #     server will use 100 as the default.
         # @!attribute [rw] page_token
         #   @return [::String]
-        #     Optional. A pagination token returned from a previous call to `ListTagBindings`
-        #     that indicates where this listing should continue from.
+        #     Optional. A pagination token returned from a previous call to
+        #     `ListTagBindings` that indicates where this listing should continue from.
         class ListTagBindingsRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -102,8 +110,7 @@ module Google
         # The ListTagBindings response.
         # @!attribute [rw] tag_bindings
         #   @return [::Array<::Google::Cloud::ResourceManager::V3::TagBinding>]
-        #     A possibly paginated list of TagBindings for the specified TagValue or
-        #     resource.
+        #     A possibly paginated list of TagBindings for the specified resource.
         # @!attribute [rw] next_page_token
         #   @return [::String]
         #     Pagination token.
@@ -121,6 +128,85 @@ module Google
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
+
+        # The request message to ListEffectiveTags
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The full resource name of a resource for which you want to list
+        #     the effective tags. E.g.
+        #     "//cloudresourcemanager.googleapis.com/projects/123"
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     Optional. The maximum number of effective tags to return in the response.
+        #     The server allows a maximum of 300 effective tags to return in a single
+        #     page. If unspecified, the server will use 100 as the default.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     Optional. A pagination token returned from a previous call to
+        #     `ListEffectiveTags` that indicates from where this listing should continue.
+        class ListEffectiveTagsRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # The response of ListEffectiveTags.
+        # @!attribute [rw] effective_tags
+        #   @return [::Array<::Google::Cloud::ResourceManager::V3::EffectiveTag>]
+        #     A possibly paginated list of effective tags for the specified resource.
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     Pagination token.
+        #
+        #     If the result set is too large to fit in a single response, this token
+        #     is returned. It encodes the position of the current result cursor.
+        #     Feeding this value into a new list request with the `page_token` parameter
+        #     gives the next page of the results.
+        #
+        #     When `next_page_token` is not filled in, there is no next page and
+        #     the list returned is the last page in the result set.
+        #
+        #     Pagination tokens have a limited lifetime.
+        class ListEffectiveTagsResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # An EffectiveTag represents a tag that applies to a resource during policy
+        # evaluation. Tags can be either directly bound to a resource or inherited from
+        # its ancestor. EffectiveTag contains the name and
+        # namespaced_name of the tag value and tag key, with additional fields of
+        # `inherited` to indicate the inheritance status of the effective tag.
+        # @!attribute [rw] tag_value
+        #   @return [::String]
+        #     Resource name for TagValue in the format `tagValues/456`.
+        # @!attribute [rw] namespaced_tag_value
+        #   @return [::String]
+        #     Namespaced name of the TagValue. Now only supported in the format
+        #     `{organization_id}/{tag_key_short_name}/{tag_value_short_name}`.
+        #     Other formats will be supported when we add non-org parented tags.
+        # @!attribute [rw] tag_key
+        #   @return [::String]
+        #     The name of the TagKey, in the format `tagKeys/{id}`, such as
+        #     `tagKeys/123`.
+        # @!attribute [rw] namespaced_tag_key
+        #   @return [::String]
+        #     The namespaced_name of the TagKey. Now only supported in the format of
+        #     `{organization_id}/{tag_key_short_name}`. Other formats will be
+        #     supported when we add non-org parented tags.
+        # @!attribute [rw] tag_key_parent_name
+        #   @return [::String]
+        #     The parent name of the tag key.
+        #     Must be in the format `organizations/{organization_id}`.
+        # @!attribute [rw] inherited
+        #   @return [::Boolean]
+        #     Indicates the inheritance status of a tag value
+        #     attached to the given resource. If the tag value is inherited from one of
+        #     the resource's ancestors, inherited will be true. If false, then the tag
+        #     value is directly attached to the resource, inherited will be false.
+        class EffectiveTag
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
       end
     end
   end

data/proto_docs/google/cloud/resourcemanager/v3/tag_holds.rb

@@ -0,0 +1,161 @@
+# frozen_string_literal: true
+
+# Copyright 2023 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module ResourceManager
+      module V3
+        # A TagHold represents the use of a TagValue that is not captured by
+        # TagBindings. If a TagValue has any TagHolds, deletion will be blocked.
+        # This resource is intended to be created in the same cloud location as the
+        # `holder`.
+        # @!attribute [r] name
+        #   @return [::String]
+        #     Output only. The resource name of a TagHold. This is a String of the form:
+        #     `tagValues/{tag-value-id}/tagHolds/{tag-hold-id}`
+        #     (e.g. `tagValues/123/tagHolds/456`). This resource name is generated by
+        #     the server.
+        # @!attribute [rw] holder
+        #   @return [::String]
+        #     Required. The name of the resource where the TagValue is being used. Must
+        #     be less than 200 characters. E.g.
+        #     `//compute.googleapis.com/compute/projects/myproject/regions/us-east-1/instanceGroupManagers/instance-group`
+        # @!attribute [rw] origin
+        #   @return [::String]
+        #     Optional. An optional string representing the origin of this request. This
+        #     field should include human-understandable information to distinguish
+        #     origins from each other. Must be less than 200 characters. E.g.
+        #     `migs-35678234`
+        # @!attribute [rw] help_link
+        #   @return [::String]
+        #     Optional. A URL where an end user can learn more about removing this hold.
+        #     E.g.
+        #     `https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing`
+        # @!attribute [r] create_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The time this TagHold was created.
+        class TagHold
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # The request message to create a TagHold.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The resource name of the TagHold's parent TagValue. Must be of
+        #     the form: `tagValues/{tag-value-id}`.
+        # @!attribute [rw] tag_hold
+        #   @return [::Google::Cloud::ResourceManager::V3::TagHold]
+        #     Required. The TagHold to be created.
+        # @!attribute [rw] validate_only
+        #   @return [::Boolean]
+        #     Optional. Set to true to perform the validations necessary for creating the
+        #     resource, but not actually perform the action.
+        class CreateTagHoldRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Runtime operation information for creating a TagHold.
+        # (-- The metadata is currently empty, but may include information in the
+        # future. --)
+        class CreateTagHoldMetadata
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # The request message to delete a TagHold.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. The resource name of the TagHold to delete. Must be of the form:
+        #     `tagValues/{tag-value-id}/tagHolds/{tag-hold-id}`.
+        # @!attribute [rw] validate_only
+        #   @return [::Boolean]
+        #     Optional. Set to true to perform the validations necessary for deleting the
+        #     resource, but not actually perform the action.
+        class DeleteTagHoldRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Runtime operation information for deleting a TagHold.
+        # (-- The metadata is currently empty, but may include information in the
+        # future. --)
+        class DeleteTagHoldMetadata
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # The request message for listing the TagHolds under a TagValue.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The resource name of the parent TagValue. Must be of the form:
+        #     `tagValues/{tag-value-id}`.
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     Optional. The maximum number of TagHolds to return in the response. The
+        #     server allows a maximum of 300 TagHolds to return. If unspecified, the
+        #     server will use 100 as the default.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     Optional. A pagination token returned from a previous call to
+        #     `ListTagHolds` that indicates where this listing should continue from.
+        # @!attribute [rw] filter
+        #   @return [::String]
+        #     Optional. Criteria used to select a subset of TagHolds parented by the
+        #     TagValue to return. This field follows the syntax defined by aip.dev/160;
+        #     the `holder` and `origin` fields are supported for filtering. Currently
+        #     only `AND` syntax is supported. Some example queries are:
+        #
+        #       * `holder =
+        #         //compute.googleapis.com/compute/projects/myproject/regions/us-east-1/instanceGroupManagers/instance-group`
+        #       * `origin = 35678234`
+        #       * `holder =
+        #         //compute.googleapis.com/compute/projects/myproject/regions/us-east-1/instanceGroupManagers/instance-group
+        #         AND origin = 35678234`
+        class ListTagHoldsRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # The ListTagHolds response.
+        # @!attribute [rw] tag_holds
+        #   @return [::Array<::Google::Cloud::ResourceManager::V3::TagHold>]
+        #     A possibly paginated list of TagHolds.
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     Pagination token.
+        #
+        #     If the result set is too large to fit in a single response, this token
+        #     is returned. It encodes the position of the current result cursor.
+        #     Feeding this value into a new list request with the `page_token` parameter
+        #     gives the next page of the results.
+        #
+        #     When `next_page_token` is not filled in, there is no next page and
+        #     the list returned is the last page in the result set.
+        #
+        #     Pagination tokens have a limited lifetime.
+        class ListTagHoldsResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+      end
+    end
+  end
+end

data/proto_docs/google/cloud/resourcemanager/v3/tag_keys.rb

@@ -33,8 +33,8 @@ module Google
         #     Must be of the form `organizations/{org_id}`.
         # @!attribute [rw] short_name
         #   @return [::String]
-        #     Required. Immutable. The user friendly name for a TagKey. The short name should be
-        #     unique for TagKeys within the same tag namespace.
+        #     Required. Immutable. The user friendly name for a TagKey. The short name
+        #     should be unique for TagKeys within the same tag namespace.
         #
         #     The short name must be 1-63 characters, beginning and ending with
         #     an alphanumeric character ([a-z0-9A-Z]) with dashes (-), underscores (_),
@@ -44,7 +44,8 @@ module Google
         #     Output only. Immutable. Namespaced name of the TagKey.
         # @!attribute [rw] description
         #   @return [::String]
-        #     Optional. User-assigned description of the TagKey. Must not exceed 256 characters.
+        #     Optional. User-assigned description of the TagKey. Must not exceed 256
+        #     characters.
         #
         #     Read-write.
         # @!attribute [r] create_time
@@ -55,11 +56,36 @@ module Google
         #     Output only. Update time.
         # @!attribute [rw] etag
         #   @return [::String]
-        #     Optional. Entity tag which users can pass to prevent race conditions. This field is
-        #     always set in server responses. See UpdateTagKeyRequest for details.
+        #     Optional. Entity tag which users can pass to prevent race conditions. This
+        #     field is always set in server responses. See UpdateTagKeyRequest for
+        #     details.
+        # @!attribute [rw] purpose
+        #   @return [::Google::Cloud::ResourceManager::V3::Purpose]
+        #     Optional. A purpose denotes that this Tag is intended for use in policies
+        #     of a specific policy engine, and will involve that policy engine in
+        #     management operations involving this Tag. A purpose does not grant a
+        #     policy engine exclusive rights to the Tag, and it may be referenced by
+        #     other policy engines.
+        #
+        #     A purpose cannot be changed once set.
+        # @!attribute [rw] purpose_data
+        #   @return [::Google::Protobuf::Map{::String => ::String}]
+        #     Optional. Purpose data corresponds to the policy system that the tag is
+        #     intended for. See documentation for `Purpose` for formatting of this field.
+        #
+        #     Purpose data cannot be changed once set.
         class TagKey
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # @!attribute [rw] key
+          #   @return [::String]
+          # @!attribute [rw] value
+          #   @return [::String]
+          class PurposeDataEntry
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
         end
 
         # The request message for listing all TagKeys under a parent resource.
@@ -69,9 +95,9 @@ module Google
         #     Must be of the form `folders/{folder_id}` or `organizations/{org_id}`.
         # @!attribute [rw] page_size
         #   @return [::Integer]
-        #     Optional. The maximum number of TagKeys to return in the response. The server allows
-        #     a maximum of 300 TagKeys to return. If unspecified, the server will use 100
-        #     as the default.
+        #     Optional. The maximum number of TagKeys to return in the response. The
+        #     server allows a maximum of 300 TagKeys to return. If unspecified, the
+        #     server will use 100 as the default.
         # @!attribute [rw] page_token
         #   @return [::String]
         #     Optional. A pagination token returned from a previous call to `ListTagKey`
@@ -104,15 +130,27 @@ module Google
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
+        # The request message for getting a TagKey by its namespaced name.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A namespaced tag key name in the format
+        #     `{parentId}/{tagKeyShort}`, such as `42/foo` for a key with short name
+        #     "foo" under the organization with ID 42 or `r2-d2/bar` for a key with short
+        #     name "bar" under the project `r2-d2`.
+        class GetNamespacedTagKeyRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
         # The request message for creating a TagKey.
         # @!attribute [rw] tag_key
         #   @return [::Google::Cloud::ResourceManager::V3::TagKey]
-        #     Required. The TagKey to be created. Only fields `short_name`, `description`,
-        #     and `parent` are considered during the creation request.
+        #     Required. The TagKey to be created. Only fields `short_name`,
+        #     `description`, and `parent` are considered during the creation request.
         # @!attribute [rw] validate_only
         #   @return [::Boolean]
-        #     Optional. Set to true to perform validations necessary for creating the resource, but
-        #     not actually perform the action.
+        #     Optional. Set to true to perform validations necessary for creating the
+        #     resource, but not actually perform the action.
         class CreateTagKeyRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -127,10 +165,10 @@ module Google
         # The request message for updating a TagKey.
         # @!attribute [rw] tag_key
         #   @return [::Google::Cloud::ResourceManager::V3::TagKey]
-        #     Required. The new definition of the TagKey. Only the `description` and `etag` fields
-        #     can be updated by this request. If the `etag` field is not empty, it
-        #     must match the `etag` field of the existing tag key. Otherwise,
-        #     `FAILED_PRECONDITION` will be returned.
+        #     Required. The new definition of the TagKey. Only the `description` and
+        #     `etag` fields can be updated by this request. If the `etag` field is not
+        #     empty, it must match the `etag` field of the existing tag key. Otherwise,
+        #     `ABORTED` will be returned.
         # @!attribute [rw] update_mask
         #   @return [::Google::Protobuf::FieldMask]
         #     Fields to be updated. The mask may only contain `description` or
@@ -154,17 +192,17 @@ module Google
         # The request message for deleting a TagKey.
         # @!attribute [rw] name
         #   @return [::String]
-        #     Required. The resource name of a TagKey to be deleted in the format `tagKeys/123`.
-        #     The TagKey cannot be a parent of any existing TagValues or it will not be
-        #     deleted successfully.
+        #     Required. The resource name of a TagKey to be deleted in the format
+        #     `tagKeys/123`. The TagKey cannot be a parent of any existing TagValues or
+        #     it will not be deleted successfully.
         # @!attribute [rw] validate_only
         #   @return [::Boolean]
-        #     Optional. Set as true to perform validations necessary for deletion, but not actually
-        #     perform the action.
+        #     Optional. Set as true to perform validations necessary for deletion, but
+        #     not actually perform the action.
         # @!attribute [rw] etag
         #   @return [::String]
-        #     Optional. The etag known to the client for the expected state of the TagKey. This is
-        #     to be used for optimistic concurrency.
+        #     Optional. The etag known to the client for the expected state of the
+        #     TagKey. This is to be used for optimistic concurrency.
         class DeleteTagKeyRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -175,6 +213,26 @@ module Google
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
+
+        # A purpose for each policy engine requiring such an integration. A single
+        # policy engine may have multiple purposes defined, however a TagKey may only
+        # specify a single purpose.
+        module Purpose
+          # Unspecified purpose.
+          PURPOSE_UNSPECIFIED = 0
+
+          # Purpose for Compute Engine firewalls.
+          # A corresponding purpose_data should be set for the network the tag is
+          # intended for. The key should be 'network' and the value should be in
+          # either of these two formats:
+          # -https://www.googleapis.com/compute/\\{compute_version}/projects/\\{project_id}/global/networks/\\{network_id}
+          # -\\{project_id}/\\{network_name}
+          #
+          # Examples:
+          # -https://www.googleapis.com/compute/staging_v1/projects/fail-closed-load-testing/global/networks/6992953698831725600
+          # -fail-closed-load-testing/load-testing-network
+          GCE_FIREWALL = 1
+        end
       end
     end
   end