google-cloud-resource_manager-v3 0.4.0 → 0.5.1

data/proto_docs/google/cloud/resourcemanager/v3/tag_bindings.rb

@@ -22,9 +22,8 @@ module Google
     module ResourceManager
       module V3
         # A TagBinding represents a connection between a TagValue and a cloud
-        # resource (currently project, folder, or organization). Once a TagBinding is
-        # created, the TagValue is applied to all the descendants of the cloud
-        # resource.
+        # resource Once a TagBinding is created, the TagValue is applied to all the
+        # descendants of the Google Cloud resource.
         # @!attribute [r] name
         #   @return [::String]
         #     Output only. The name of the TagBinding. This is a String of the form:
@@ -38,6 +37,15 @@ module Google
         #   @return [::String]
         #     The TagValue of the TagBinding.
         #     Must be of the form `tagValues/456`.
+        # @!attribute [rw] tag_value_namespaced_name
+        #   @return [::String]
+        #     The namespaced name for the TagValue of the TagBinding.
+        #     Must be in the format
+        #     `{parent_id}/{tag_key_short_name}/{short_name}`.
+        #
+        #     For methods that support TagValue namespaced name, only one of
+        #     tag_value_namespaced_name or tag_value may be filled. Requests with both
+        #     fields will be rejected.
         class TagBinding
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -55,8 +63,8 @@ module Google
         #     Required. The TagBinding to be created.
         # @!attribute [rw] validate_only
         #   @return [::Boolean]
-        #     Optional. Set to true to perform the validations necessary for creating the resource,
-        #     but not actually perform the action.
+        #     Optional. Set to true to perform the validations necessary for creating the
+        #     resource, but not actually perform the action.
         class CreateTagBindingRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -82,18 +90,18 @@ module Google
         # The request message to list all TagBindings for a parent.
         # @!attribute [rw] parent
         #   @return [::String]
-        #     Required. The full resource name of a resource for which you want to list existing
-        #     TagBindings.
-        #     E.g. "//cloudresourcemanager.googleapis.com/projects/123"
+        #     Required. The full resource name of a resource for which you want to list
+        #     existing TagBindings. E.g.
+        #     "//cloudresourcemanager.googleapis.com/projects/123"
         # @!attribute [rw] page_size
         #   @return [::Integer]
-        #     Optional. The maximum number of TagBindings to return in the response. The server
-        #     allows a maximum of 300 TagBindings to return. If unspecified, the server
-        #     will use 100 as the default.
+        #     Optional. The maximum number of TagBindings to return in the response. The
+        #     server allows a maximum of 300 TagBindings to return. If unspecified, the
+        #     server will use 100 as the default.
         # @!attribute [rw] page_token
         #   @return [::String]
-        #     Optional. A pagination token returned from a previous call to `ListTagBindings`
-        #     that indicates where this listing should continue from.
+        #     Optional. A pagination token returned from a previous call to
+        #     `ListTagBindings` that indicates where this listing should continue from.
         class ListTagBindingsRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -102,8 +110,7 @@ module Google
         # The ListTagBindings response.
         # @!attribute [rw] tag_bindings
         #   @return [::Array<::Google::Cloud::ResourceManager::V3::TagBinding>]
-        #     A possibly paginated list of TagBindings for the specified TagValue or
-        #     resource.
+        #     A possibly paginated list of TagBindings for the specified resource.
         # @!attribute [rw] next_page_token
         #   @return [::String]
         #     Pagination token.
@@ -121,6 +128,88 @@ module Google
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
+
+        # The request message to ListEffectiveTags
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The full resource name of a resource for which you want to list
+        #     the effective tags. E.g.
+        #     "//cloudresourcemanager.googleapis.com/projects/123"
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     Optional. The maximum number of effective tags to return in the response.
+        #     The server allows a maximum of 300 effective tags to return in a single
+        #     page. If unspecified, the server will use 100 as the default.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     Optional. A pagination token returned from a previous call to
+        #     `ListEffectiveTags` that indicates from where this listing should continue.
+        class ListEffectiveTagsRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # The response of ListEffectiveTags.
+        # @!attribute [rw] effective_tags
+        #   @return [::Array<::Google::Cloud::ResourceManager::V3::EffectiveTag>]
+        #     A possibly paginated list of effective tags for the specified resource.
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     Pagination token.
+        #
+        #     If the result set is too large to fit in a single response, this token
+        #     is returned. It encodes the position of the current result cursor.
+        #     Feeding this value into a new list request with the `page_token` parameter
+        #     gives the next page of the results.
+        #
+        #     When `next_page_token` is not filled in, there is no next page and
+        #     the list returned is the last page in the result set.
+        #
+        #     Pagination tokens have a limited lifetime.
+        class ListEffectiveTagsResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # An EffectiveTag represents a tag that applies to a resource during policy
+        # evaluation. Tags can be either directly bound to a resource or inherited from
+        # its ancestor. EffectiveTag contains the name and
+        # namespaced_name of the tag value and tag key, with additional fields of
+        # `inherited` to indicate the inheritance status of the effective tag.
+        # @!attribute [rw] tag_value
+        #   @return [::String]
+        #     Resource name for TagValue in the format `tagValues/456`.
+        # @!attribute [rw] namespaced_tag_value
+        #   @return [::String]
+        #     The namespaced name of the TagValue. Can be in the form
+        #     `{organization_id}/{tag_key_short_name}/{tag_value_short_name}` or
+        #     `{project_id}/{tag_key_short_name}/{tag_value_short_name}` or
+        #     `{project_number}/{tag_key_short_name}/{tag_value_short_name}`.
+        # @!attribute [rw] tag_key
+        #   @return [::String]
+        #     The name of the TagKey, in the format `tagKeys/{id}`, such as
+        #     `tagKeys/123`.
+        # @!attribute [rw] namespaced_tag_key
+        #   @return [::String]
+        #     The namespaced name of the TagKey. Can be in the form
+        #     `{organization_id}/{tag_key_short_name}` or
+        #     `{project_id}/{tag_key_short_name}` or
+        #     `{project_number}/{tag_key_short_name}`.
+        # @!attribute [rw] tag_key_parent_name
+        #   @return [::String]
+        #     The parent name of the tag key.
+        #     Must be in the format `organizations/{organization_id}` or
+        #     `projects/{project_number}`
+        # @!attribute [rw] inherited
+        #   @return [::Boolean]
+        #     Indicates the inheritance status of a tag value
+        #     attached to the given resource. If the tag value is inherited from one of
+        #     the resource's ancestors, inherited will be true. If false, then the tag
+        #     value is directly attached to the resource, inherited will be false.
+        class EffectiveTag
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
       end
     end
   end

data/proto_docs/google/cloud/resourcemanager/v3/tag_holds.rb

@@ -0,0 +1,161 @@
+# frozen_string_literal: true
+
+# Copyright 2023 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module ResourceManager
+      module V3
+        # A TagHold represents the use of a TagValue that is not captured by
+        # TagBindings. If a TagValue has any TagHolds, deletion will be blocked.
+        # This resource is intended to be created in the same cloud location as the
+        # `holder`.
+        # @!attribute [r] name
+        #   @return [::String]
+        #     Output only. The resource name of a TagHold. This is a String of the form:
+        #     `tagValues/{tag-value-id}/tagHolds/{tag-hold-id}`
+        #     (e.g. `tagValues/123/tagHolds/456`). This resource name is generated by
+        #     the server.
+        # @!attribute [rw] holder
+        #   @return [::String]
+        #     Required. The name of the resource where the TagValue is being used. Must
+        #     be less than 200 characters. E.g.
+        #     `//compute.googleapis.com/compute/projects/myproject/regions/us-east-1/instanceGroupManagers/instance-group`
+        # @!attribute [rw] origin
+        #   @return [::String]
+        #     Optional. An optional string representing the origin of this request. This
+        #     field should include human-understandable information to distinguish
+        #     origins from each other. Must be less than 200 characters. E.g.
+        #     `migs-35678234`
+        # @!attribute [rw] help_link
+        #   @return [::String]
+        #     Optional. A URL where an end user can learn more about removing this hold.
+        #     E.g.
+        #     `https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing`
+        # @!attribute [r] create_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The time this TagHold was created.
+        class TagHold
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # The request message to create a TagHold.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The resource name of the TagHold's parent TagValue. Must be of
+        #     the form: `tagValues/{tag-value-id}`.
+        # @!attribute [rw] tag_hold
+        #   @return [::Google::Cloud::ResourceManager::V3::TagHold]
+        #     Required. The TagHold to be created.
+        # @!attribute [rw] validate_only
+        #   @return [::Boolean]
+        #     Optional. Set to true to perform the validations necessary for creating the
+        #     resource, but not actually perform the action.
+        class CreateTagHoldRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Runtime operation information for creating a TagHold.
+        # (-- The metadata is currently empty, but may include information in the
+        # future. --)
+        class CreateTagHoldMetadata
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # The request message to delete a TagHold.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. The resource name of the TagHold to delete. Must be of the form:
+        #     `tagValues/{tag-value-id}/tagHolds/{tag-hold-id}`.
+        # @!attribute [rw] validate_only
+        #   @return [::Boolean]
+        #     Optional. Set to true to perform the validations necessary for deleting the
+        #     resource, but not actually perform the action.
+        class DeleteTagHoldRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Runtime operation information for deleting a TagHold.
+        # (-- The metadata is currently empty, but may include information in the
+        # future. --)
+        class DeleteTagHoldMetadata
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # The request message for listing the TagHolds under a TagValue.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The resource name of the parent TagValue. Must be of the form:
+        #     `tagValues/{tag-value-id}`.
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     Optional. The maximum number of TagHolds to return in the response. The
+        #     server allows a maximum of 300 TagHolds to return. If unspecified, the
+        #     server will use 100 as the default.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     Optional. A pagination token returned from a previous call to
+        #     `ListTagHolds` that indicates where this listing should continue from.
+        # @!attribute [rw] filter
+        #   @return [::String]
+        #     Optional. Criteria used to select a subset of TagHolds parented by the
+        #     TagValue to return. This field follows the syntax defined by aip.dev/160;
+        #     the `holder` and `origin` fields are supported for filtering. Currently
+        #     only `AND` syntax is supported. Some example queries are:
+        #
+        #       * `holder =
+        #         //compute.googleapis.com/compute/projects/myproject/regions/us-east-1/instanceGroupManagers/instance-group`
+        #       * `origin = 35678234`
+        #       * `holder =
+        #         //compute.googleapis.com/compute/projects/myproject/regions/us-east-1/instanceGroupManagers/instance-group
+        #         AND origin = 35678234`
+        class ListTagHoldsRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # The ListTagHolds response.
+        # @!attribute [rw] tag_holds
+        #   @return [::Array<::Google::Cloud::ResourceManager::V3::TagHold>]
+        #     A possibly paginated list of TagHolds.
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     Pagination token.
+        #
+        #     If the result set is too large to fit in a single response, this token
+        #     is returned. It encodes the position of the current result cursor.
+        #     Feeding this value into a new list request with the `page_token` parameter
+        #     gives the next page of the results.
+        #
+        #     When `next_page_token` is not filled in, there is no next page and
+        #     the list returned is the last page in the result set.
+        #
+        #     Pagination tokens have a limited lifetime.
+        class ListTagHoldsResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+      end
+    end
+  end
+end

data/proto_docs/google/cloud/resourcemanager/v3/tag_keys.rb

@@ -29,12 +29,15 @@ module Google
         #     the TagKey.
         # @!attribute [rw] parent
         #   @return [::String]
-        #     Immutable. The resource name of the new TagKey's parent.
-        #     Must be of the form `organizations/{org_id}`.
+        #     Immutable. The resource name of the TagKey's parent. A TagKey can be
+        #     parented by an Organization or a Project. For a TagKey parented by an
+        #     Organization, its parent must be in the form `organizations/{org_id}`. For
+        #     a TagKey parented by a Project, its parent can be in the form
+        #     `projects/{project_id}` or `projects/{project_number}`.
         # @!attribute [rw] short_name
         #   @return [::String]
-        #     Required. Immutable. The user friendly name for a TagKey. The short name should be
-        #     unique for TagKeys within the same tag namespace.
+        #     Required. Immutable. The user friendly name for a TagKey. The short name
+        #     should be unique for TagKeys within the same tag namespace.
         #
         #     The short name must be 1-63 characters, beginning and ending with
         #     an alphanumeric character ([a-z0-9A-Z]) with dashes (-), underscores (_),
@@ -44,7 +47,8 @@ module Google
         #     Output only. Immutable. Namespaced name of the TagKey.
         # @!attribute [rw] description
         #   @return [::String]
-        #     Optional. User-assigned description of the TagKey. Must not exceed 256 characters.
+        #     Optional. User-assigned description of the TagKey. Must not exceed 256
+        #     characters.
         #
         #     Read-write.
         # @!attribute [r] create_time
@@ -55,23 +59,49 @@ module Google
         #     Output only. Update time.
         # @!attribute [rw] etag
         #   @return [::String]
-        #     Optional. Entity tag which users can pass to prevent race conditions. This field is
-        #     always set in server responses. See UpdateTagKeyRequest for details.
+        #     Optional. Entity tag which users can pass to prevent race conditions. This
+        #     field is always set in server responses. See UpdateTagKeyRequest for
+        #     details.
+        # @!attribute [rw] purpose
+        #   @return [::Google::Cloud::ResourceManager::V3::Purpose]
+        #     Optional. A purpose denotes that this Tag is intended for use in policies
+        #     of a specific policy engine, and will involve that policy engine in
+        #     management operations involving this Tag. A purpose does not grant a
+        #     policy engine exclusive rights to the Tag, and it may be referenced by
+        #     other policy engines.
+        #
+        #     A purpose cannot be changed once set.
+        # @!attribute [rw] purpose_data
+        #   @return [::Google::Protobuf::Map{::String => ::String}]
+        #     Optional. Purpose data corresponds to the policy system that the tag is
+        #     intended for. See documentation for `Purpose` for formatting of this field.
+        #
+        #     Purpose data cannot be changed once set.
         class TagKey
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # @!attribute [rw] key
+          #   @return [::String]
+          # @!attribute [rw] value
+          #   @return [::String]
+          class PurposeDataEntry
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
         end
 
         # The request message for listing all TagKeys under a parent resource.
         # @!attribute [rw] parent
         #   @return [::String]
-        #     Required. The resource name of the new TagKey's parent.
-        #     Must be of the form `folders/{folder_id}` or `organizations/{org_id}`.
+        #     Required. The resource name of the TagKey's parent.
+        #     Must be of the form `organizations/{org_id}` or `projects/{project_id}` or
+        #     `projects/{project_number}`
         # @!attribute [rw] page_size
         #   @return [::Integer]
-        #     Optional. The maximum number of TagKeys to return in the response. The server allows
-        #     a maximum of 300 TagKeys to return. If unspecified, the server will use 100
-        #     as the default.
+        #     Optional. The maximum number of TagKeys to return in the response. The
+        #     server allows a maximum of 300 TagKeys to return. If unspecified, the
+        #     server will use 100 as the default.
         # @!attribute [rw] page_token
         #   @return [::String]
         #     Optional. A pagination token returned from a previous call to `ListTagKey`
@@ -104,15 +134,27 @@ module Google
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
+        # The request message for getting a TagKey by its namespaced name.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A namespaced tag key name in the format
+        #     `{parentId}/{tagKeyShort}`, such as `42/foo` for a key with short name
+        #     "foo" under the organization with ID 42 or `r2-d2/bar` for a key with short
+        #     name "bar" under the project `r2-d2`.
+        class GetNamespacedTagKeyRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
         # The request message for creating a TagKey.
         # @!attribute [rw] tag_key
         #   @return [::Google::Cloud::ResourceManager::V3::TagKey]
-        #     Required. The TagKey to be created. Only fields `short_name`, `description`,
-        #     and `parent` are considered during the creation request.
+        #     Required. The TagKey to be created. Only fields `short_name`,
+        #     `description`, and `parent` are considered during the creation request.
         # @!attribute [rw] validate_only
         #   @return [::Boolean]
-        #     Optional. Set to true to perform validations necessary for creating the resource, but
-        #     not actually perform the action.
+        #     Optional. Set to true to perform validations necessary for creating the
+        #     resource, but not actually perform the action.
         class CreateTagKeyRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -127,10 +169,10 @@ module Google
         # The request message for updating a TagKey.
         # @!attribute [rw] tag_key
         #   @return [::Google::Cloud::ResourceManager::V3::TagKey]
-        #     Required. The new definition of the TagKey. Only the `description` and `etag` fields
-        #     can be updated by this request. If the `etag` field is not empty, it
-        #     must match the `etag` field of the existing tag key. Otherwise,
-        #     `FAILED_PRECONDITION` will be returned.
+        #     Required. The new definition of the TagKey. Only the `description` and
+        #     `etag` fields can be updated by this request. If the `etag` field is not
+        #     empty, it must match the `etag` field of the existing tag key. Otherwise,
+        #     `ABORTED` will be returned.
         # @!attribute [rw] update_mask
         #   @return [::Google::Protobuf::FieldMask]
         #     Fields to be updated. The mask may only contain `description` or
@@ -154,17 +196,17 @@ module Google
         # The request message for deleting a TagKey.
         # @!attribute [rw] name
         #   @return [::String]
-        #     Required. The resource name of a TagKey to be deleted in the format `tagKeys/123`.
-        #     The TagKey cannot be a parent of any existing TagValues or it will not be
-        #     deleted successfully.
+        #     Required. The resource name of a TagKey to be deleted in the format
+        #     `tagKeys/123`. The TagKey cannot be a parent of any existing TagValues or
+        #     it will not be deleted successfully.
         # @!attribute [rw] validate_only
         #   @return [::Boolean]
-        #     Optional. Set as true to perform validations necessary for deletion, but not actually
-        #     perform the action.
+        #     Optional. Set as true to perform validations necessary for deletion, but
+        #     not actually perform the action.
         # @!attribute [rw] etag
         #   @return [::String]
-        #     Optional. The etag known to the client for the expected state of the TagKey. This is
-        #     to be used for optimistic concurrency.
+        #     Optional. The etag known to the client for the expected state of the
+        #     TagKey. This is to be used for optimistic concurrency.
         class DeleteTagKeyRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -175,6 +217,30 @@ module Google
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
+
+        # A purpose for each policy engine requiring such an integration. A single
+        # policy engine may have multiple purposes defined, however a TagKey may only
+        # specify a single purpose.
+        module Purpose
+          # Unspecified purpose.
+          PURPOSE_UNSPECIFIED = 0
+
+          # Purpose for Compute Engine firewalls.
+          # A corresponding `purpose_data` should be set for the network the tag is
+          # intended for. The key should be `network` and the value should be in
+          # either of these two formats:
+          #
+          # -
+          # `https://www.googleapis.com/compute/{compute_version}/projects/{project_id}/global/networks/{network_id}`
+          # - `{project_id}/{network_name}`
+          #
+          # Examples:
+          #
+          # -
+          # `https://www.googleapis.com/compute/staging_v1/projects/fail-closed-load-testing/global/networks/6992953698831725600`
+          # - `fail-closed-load-testing/load-testing-network`
+          GCE_FIREWALL = 1
+        end
       end
     end
   end

data/proto_docs/google/cloud/resourcemanager/v3/tag_values.rb

@@ -32,16 +32,18 @@ module Google
         #     Must be of the form `tagKeys/{tag_key_id}`.
         # @!attribute [rw] short_name
         #   @return [::String]
-        #     Required. Immutable. User-assigned short name for TagValue. The short name should be
-        #     unique for TagValues within the same parent TagKey.
+        #     Required. Immutable. User-assigned short name for TagValue. The short name
+        #     should be unique for TagValues within the same parent TagKey.
         #
         #     The short name must be 63 characters or less, beginning and ending with
         #     an alphanumeric character ([a-z0-9A-Z]) with dashes (-), underscores (_),
         #     dots (.), and alphanumerics between.
         # @!attribute [r] namespaced_name
         #   @return [::String]
-        #     Output only. Namespaced name of the TagValue. Must be in the format
-        #     `{organization_id}/{tag_key_short_name}/{short_name}`.
+        #     Output only. The namespaced name of the TagValue. Can be in the form
+        #     `{organization_id}/{tag_key_short_name}/{tag_value_short_name}` or
+        #     `{project_id}/{tag_key_short_name}/{tag_value_short_name}` or
+        #     `{project_number}/{tag_key_short_name}/{tag_value_short_name}`.
         # @!attribute [rw] description
         #   @return [::String]
         #     Optional. User-assigned description of the TagValue.
@@ -56,27 +58,29 @@ module Google
         #     Output only. Update time.
         # @!attribute [rw] etag
         #   @return [::String]
-        #     Optional. Entity tag which users can pass to prevent race conditions. This field is
-        #     always set in server responses. See UpdateTagValueRequest for details.
+        #     Optional. Entity tag which users can pass to prevent race conditions. This
+        #     field is always set in server responses. See UpdateTagValueRequest for
+        #     details.
         class TagValue
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
         # The request message for listing TagValues for the specified TagKey.
+        # Resource name for TagKey, parent of the TagValues to be listed,
+        # in the format `tagKeys/123`.
         # @!attribute [rw] parent
         #   @return [::String]
-        #     Required. Resource name for TagKey, parent of the TagValues to be listed,
-        #     in the format `tagKeys/123`.
+        #     Required.
         # @!attribute [rw] page_size
         #   @return [::Integer]
-        #     Optional. The maximum number of TagValues to return in the response. The server
-        #     allows a maximum of 300 TagValues to return. If unspecified, the server
-        #     will use 100 as the default.
+        #     Optional. The maximum number of TagValues to return in the response. The
+        #     server allows a maximum of 300 TagValues to return. If unspecified, the
+        #     server will use 100 as the default.
         # @!attribute [rw] page_token
         #   @return [::String]
-        #     Optional. A pagination token returned from a previous call to `ListTagValues`
-        #     that indicates where this listing should continue from.
+        #     Optional. A pagination token returned from a previous call to
+        #     `ListTagValues` that indicates where this listing should continue from.
         class ListTagValuesRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -100,21 +104,39 @@ module Google
         # The request message for getting a TagValue.
         # @!attribute [rw] name
         #   @return [::String]
-        #     Required. Resource name for TagValue to be fetched in the format `tagValues/456`.
+        #     Required. Resource name for TagValue to be fetched in the format
+        #     `tagValues/456`.
         class GetTagValueRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
+        # The request message for getting a TagValue by its namespaced name.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A namespaced tag value name in the following format:
+        #
+        #       `{parentId}/{tagKeyShort}/{tagValueShort}`
+        #
+        #     Examples:
+        #     - `42/foo/abc` for a value with short name "abc" under the key with short
+        #       name "foo" under the organization with ID 42
+        #     - `r2-d2/bar/xyz` for a value with short name "xyz" under the key with
+        #        short name "bar" under the project with ID "r2-d2"
+        class GetNamespacedTagValueRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
         # The request message for creating a TagValue.
         # @!attribute [rw] tag_value
         #   @return [::Google::Cloud::ResourceManager::V3::TagValue]
-        #     Required. The TagValue to be created. Only fields `short_name`, `description`,
-        #     and `parent` are considered during the creation request.
+        #     Required. The TagValue to be created. Only fields `short_name`,
+        #     `description`, and `parent` are considered during the creation request.
         # @!attribute [rw] validate_only
         #   @return [::Boolean]
-        #     Optional. Set as true to perform the validations necessary for creating the resource,
-        #     but not actually perform the action.
+        #     Optional. Set as true to perform the validations necessary for creating the
+        #     resource, but not actually perform the action.
         class CreateTagValueRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -129,17 +151,17 @@ module Google
         # The request message for updating a TagValue.
         # @!attribute [rw] tag_value
         #   @return [::Google::Cloud::ResourceManager::V3::TagValue]
-        #     Required. The new definition of the TagValue. Only fields `description` and `etag`
-        #     fields can be updated by this request. If the `etag` field is nonempty, it
-        #     must match the `etag` field of the existing ControlGroup. Otherwise,
-        #     `FAILED_PRECONDITION` will be returned.
+        #     Required. The new definition of the TagValue. Only fields `description` and
+        #     `etag` fields can be updated by this request. If the `etag` field is
+        #     nonempty, it must match the `etag` field of the existing ControlGroup.
+        #     Otherwise, `ABORTED` will be returned.
         # @!attribute [rw] update_mask
         #   @return [::Google::Protobuf::FieldMask]
         #     Optional. Fields to be updated.
         # @!attribute [rw] validate_only
         #   @return [::Boolean]
-        #     Optional. True to perform validations necessary for updating the resource, but not
-        #     actually perform the action.
+        #     Optional. True to perform validations necessary for updating the resource,
+        #     but not actually perform the action.
         class UpdateTagValueRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -154,15 +176,16 @@ module Google
         # The request message for deleting a TagValue.
         # @!attribute [rw] name
         #   @return [::String]
-        #     Required. Resource name for TagValue to be deleted in the format tagValues/456.
+        #     Required. Resource name for TagValue to be deleted in the format
+        #     tagValues/456.
         # @!attribute [rw] validate_only
         #   @return [::Boolean]
-        #     Optional. Set as true to perform the validations necessary for deletion, but not
-        #     actually perform the action.
+        #     Optional. Set as true to perform the validations necessary for deletion,
+        #     but not actually perform the action.
         # @!attribute [rw] etag
         #   @return [::String]
-        #     Optional. The etag known to the client for the expected state of the TagValue. This
-        #     is to be used for optimistic concurrency.
+        #     Optional. The etag known to the client for the expected state of the
+        #     TagValue. This is to be used for optimistic concurrency.
         class DeleteTagValueRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods