google-cloud-secret_manager-v1 0.4.2 → 0.5.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +4 -0
- data/lib/google/cloud/secret_manager/v1.rb +3 -0
- data/lib/google/cloud/secret_manager/v1/secret_manager_service/client.rb +3 -3
- data/lib/google/cloud/secret_manager/v1/version.rb +1 -1
- data/lib/google/cloud/secretmanager/v1/resources_pb.rb +31 -0
- data/lib/google/cloud/secretmanager/v1/service_services_pb.rb +15 -18
- data/proto_docs/google/api/resource.rb +50 -14
- data/proto_docs/google/cloud/secretmanager/v1/resources.rb +112 -1
- metadata +5 -5
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: bf03cd5041b88a10cdc8648e70d6286e77a5eb6255873b22233d232d749d9d04
|
|
4
|
+
data.tar.gz: 0b7d87e1e5fc9e93130d2acad124dc6f2023879c993b503e03fb43b654325fb1
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: db62de628ee454c81f5b7b46cb96fbc1d304ae3b2ffd8a700be85b77876cbca05aa15a6df8c7cdaf357e05f7ee043552f37f7f8fbcdff72d11896ad5a6b3509a
|
|
7
|
+
data.tar.gz: d3a282e5589d7d86c1ec1235239670769e8e21f90d40dbbfeabbef1b28b937415dfdb65c377a2cd1ead9ad810de3636c182844884c284f4c5fc4c7794d882e55
|
data/README.md
CHANGED
|
@@ -18,6 +18,7 @@ In order to use this library, you first need to go through the following steps:
|
|
|
18
18
|
|
|
19
19
|
1. [Select or create a Cloud Platform project.](https://console.cloud.google.com/project)
|
|
20
20
|
1. [Enable billing for your project.](https://cloud.google.com/billing/docs/how-to/modify-project#enable_billing_for_a_project)
|
|
21
|
+
1. [Enable the API.](https://console.cloud.google.com/apis/library/secretmanager.googleapis.com)
|
|
21
22
|
1. {file:AUTHENTICATION.md Set up authentication.}
|
|
22
23
|
|
|
23
24
|
## Quick Start
|
|
@@ -33,6 +34,9 @@ response = client.list_secrets request
|
|
|
33
34
|
View the [Client Library Documentation](https://googleapis.dev/ruby/google-cloud-secret_manager-v1/latest)
|
|
34
35
|
for class and method documentation.
|
|
35
36
|
|
|
37
|
+
See also the [Product Documentation](https://cloud.google.com/secret-manager)
|
|
38
|
+
for general usage information.
|
|
39
|
+
|
|
36
40
|
## Enabling Logging
|
|
37
41
|
|
|
38
42
|
To enable logging for this library, set the logger for the underlying [gRPC](https://github.com/grpc/grpc/tree/master/src/ruby) library.
|
|
@@ -92,7 +92,7 @@ module Google
|
|
|
92
92
|
initial_delay: 1.0,
|
|
93
93
|
max_delay: 60.0,
|
|
94
94
|
multiplier: 1.3,
|
|
95
|
-
retry_codes: [
|
|
95
|
+
retry_codes: [14, 2]
|
|
96
96
|
}
|
|
97
97
|
|
|
98
98
|
default_config.rpcs.disable_secret_version.timeout = 60.0
|
|
@@ -1347,7 +1347,7 @@ module Google
|
|
|
1347
1347
|
|
|
1348
1348
|
config_attr :endpoint, "secretmanager.googleapis.com", ::String
|
|
1349
1349
|
config_attr :credentials, nil do |value|
|
|
1350
|
-
allowed = [::String, ::Hash, ::Proc, ::Google::Auth::Credentials, ::Signet::OAuth2::Client, nil]
|
|
1350
|
+
allowed = [::String, ::Hash, ::Proc, ::Symbol, ::Google::Auth::Credentials, ::Signet::OAuth2::Client, nil]
|
|
1351
1351
|
allowed += [::GRPC::Core::Channel, ::GRPC::Core::ChannelCredentials] if defined? ::GRPC
|
|
1352
1352
|
allowed.any? { |klass| klass === value }
|
|
1353
1353
|
end
|
|
@@ -1387,7 +1387,7 @@ module Google
|
|
|
1387
1387
|
# Each configuration object is of type `Gapic::Config::Method` and includes
|
|
1388
1388
|
# the following configuration fields:
|
|
1389
1389
|
#
|
|
1390
|
-
# * `timeout` (*type:* `Numeric`) - The call timeout in
|
|
1390
|
+
# * `timeout` (*type:* `Numeric`) - The call timeout in seconds
|
|
1391
1391
|
# * `metadata` (*type:* `Hash{Symbol=>String}`) - Additional gRPC headers
|
|
1392
1392
|
# * `retry_policy (*type:* `Hash`) - The retry policy. The policy fields
|
|
1393
1393
|
# include the following keys:
|
|
@@ -20,6 +20,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
|
20
20
|
optional :create_time, :message, 2, "google.protobuf.Timestamp"
|
|
21
21
|
optional :destroy_time, :message, 3, "google.protobuf.Timestamp"
|
|
22
22
|
optional :state, :enum, 4, "google.cloud.secretmanager.v1.SecretVersion.State"
|
|
23
|
+
optional :replication_status, :message, 5, "google.cloud.secretmanager.v1.ReplicationStatus"
|
|
23
24
|
end
|
|
24
25
|
add_enum "google.cloud.secretmanager.v1.SecretVersion.State" do
|
|
25
26
|
value :STATE_UNSPECIFIED, 0
|
|
@@ -34,12 +35,36 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
|
34
35
|
end
|
|
35
36
|
end
|
|
36
37
|
add_message "google.cloud.secretmanager.v1.Replication.Automatic" do
|
|
38
|
+
optional :customer_managed_encryption, :message, 1, "google.cloud.secretmanager.v1.CustomerManagedEncryption"
|
|
37
39
|
end
|
|
38
40
|
add_message "google.cloud.secretmanager.v1.Replication.UserManaged" do
|
|
39
41
|
repeated :replicas, :message, 1, "google.cloud.secretmanager.v1.Replication.UserManaged.Replica"
|
|
40
42
|
end
|
|
41
43
|
add_message "google.cloud.secretmanager.v1.Replication.UserManaged.Replica" do
|
|
42
44
|
optional :location, :string, 1
|
|
45
|
+
optional :customer_managed_encryption, :message, 2, "google.cloud.secretmanager.v1.CustomerManagedEncryption"
|
|
46
|
+
end
|
|
47
|
+
add_message "google.cloud.secretmanager.v1.CustomerManagedEncryption" do
|
|
48
|
+
optional :kms_key_name, :string, 1
|
|
49
|
+
end
|
|
50
|
+
add_message "google.cloud.secretmanager.v1.ReplicationStatus" do
|
|
51
|
+
oneof :replication_status do
|
|
52
|
+
optional :automatic, :message, 1, "google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus"
|
|
53
|
+
optional :user_managed, :message, 2, "google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus"
|
|
54
|
+
end
|
|
55
|
+
end
|
|
56
|
+
add_message "google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus" do
|
|
57
|
+
optional :customer_managed_encryption, :message, 1, "google.cloud.secretmanager.v1.CustomerManagedEncryptionStatus"
|
|
58
|
+
end
|
|
59
|
+
add_message "google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus" do
|
|
60
|
+
repeated :replicas, :message, 1, "google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus.ReplicaStatus"
|
|
61
|
+
end
|
|
62
|
+
add_message "google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus.ReplicaStatus" do
|
|
63
|
+
optional :location, :string, 1
|
|
64
|
+
optional :customer_managed_encryption, :message, 2, "google.cloud.secretmanager.v1.CustomerManagedEncryptionStatus"
|
|
65
|
+
end
|
|
66
|
+
add_message "google.cloud.secretmanager.v1.CustomerManagedEncryptionStatus" do
|
|
67
|
+
optional :kms_key_version_name, :string, 1
|
|
43
68
|
end
|
|
44
69
|
add_message "google.cloud.secretmanager.v1.SecretPayload" do
|
|
45
70
|
optional :data, :bytes, 1
|
|
@@ -58,6 +83,12 @@ module Google
|
|
|
58
83
|
Replication::Automatic = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.Replication.Automatic").msgclass
|
|
59
84
|
Replication::UserManaged = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.Replication.UserManaged").msgclass
|
|
60
85
|
Replication::UserManaged::Replica = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.Replication.UserManaged.Replica").msgclass
|
|
86
|
+
CustomerManagedEncryption = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.CustomerManagedEncryption").msgclass
|
|
87
|
+
ReplicationStatus = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.ReplicationStatus").msgclass
|
|
88
|
+
ReplicationStatus::AutomaticStatus = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus").msgclass
|
|
89
|
+
ReplicationStatus::UserManagedStatus = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus").msgclass
|
|
90
|
+
ReplicationStatus::UserManagedStatus::ReplicaStatus = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus.ReplicaStatus").msgclass
|
|
91
|
+
CustomerManagedEncryptionStatus = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.CustomerManagedEncryptionStatus").msgclass
|
|
61
92
|
SecretPayload = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.SecretPayload").msgclass
|
|
62
93
|
end
|
|
63
94
|
end
|
|
@@ -24,9 +24,6 @@ module Google
|
|
|
24
24
|
module SecretManager
|
|
25
25
|
module V1
|
|
26
26
|
module SecretManagerService
|
|
27
|
-
# `projects/*/secrets/*/versions/latest` is an alias to the `latest`
|
|
28
|
-
# [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
|
|
29
|
-
#
|
|
30
27
|
# Secret Manager Service
|
|
31
28
|
#
|
|
32
29
|
# Manages secrets and operations using those secrets. Implements a REST
|
|
@@ -43,56 +40,56 @@ module Google
|
|
|
43
40
|
self.service_name = 'google.cloud.secretmanager.v1.SecretManagerService'
|
|
44
41
|
|
|
45
42
|
# Lists [Secrets][google.cloud.secretmanager.v1.Secret].
|
|
46
|
-
rpc :ListSecrets, Google::Cloud::SecretManager::V1::ListSecretsRequest, Google::Cloud::SecretManager::V1::ListSecretsResponse
|
|
43
|
+
rpc :ListSecrets, ::Google::Cloud::SecretManager::V1::ListSecretsRequest, ::Google::Cloud::SecretManager::V1::ListSecretsResponse
|
|
47
44
|
# Creates a new [Secret][google.cloud.secretmanager.v1.Secret] containing no [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
|
|
48
|
-
rpc :CreateSecret, Google::Cloud::SecretManager::V1::CreateSecretRequest, Google::Cloud::SecretManager::V1::Secret
|
|
45
|
+
rpc :CreateSecret, ::Google::Cloud::SecretManager::V1::CreateSecretRequest, ::Google::Cloud::SecretManager::V1::Secret
|
|
49
46
|
# Creates a new [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] containing secret data and attaches
|
|
50
47
|
# it to an existing [Secret][google.cloud.secretmanager.v1.Secret].
|
|
51
|
-
rpc :AddSecretVersion, Google::Cloud::SecretManager::V1::AddSecretVersionRequest, Google::Cloud::SecretManager::V1::SecretVersion
|
|
48
|
+
rpc :AddSecretVersion, ::Google::Cloud::SecretManager::V1::AddSecretVersionRequest, ::Google::Cloud::SecretManager::V1::SecretVersion
|
|
52
49
|
# Gets metadata for a given [Secret][google.cloud.secretmanager.v1.Secret].
|
|
53
|
-
rpc :GetSecret, Google::Cloud::SecretManager::V1::GetSecretRequest, Google::Cloud::SecretManager::V1::Secret
|
|
50
|
+
rpc :GetSecret, ::Google::Cloud::SecretManager::V1::GetSecretRequest, ::Google::Cloud::SecretManager::V1::Secret
|
|
54
51
|
# Updates metadata of an existing [Secret][google.cloud.secretmanager.v1.Secret].
|
|
55
|
-
rpc :UpdateSecret, Google::Cloud::SecretManager::V1::UpdateSecretRequest, Google::Cloud::SecretManager::V1::Secret
|
|
52
|
+
rpc :UpdateSecret, ::Google::Cloud::SecretManager::V1::UpdateSecretRequest, ::Google::Cloud::SecretManager::V1::Secret
|
|
56
53
|
# Deletes a [Secret][google.cloud.secretmanager.v1.Secret].
|
|
57
|
-
rpc :DeleteSecret, Google::Cloud::SecretManager::V1::DeleteSecretRequest, Google::Protobuf::Empty
|
|
54
|
+
rpc :DeleteSecret, ::Google::Cloud::SecretManager::V1::DeleteSecretRequest, ::Google::Protobuf::Empty
|
|
58
55
|
# Lists [SecretVersions][google.cloud.secretmanager.v1.SecretVersion]. This call does not return secret
|
|
59
56
|
# data.
|
|
60
|
-
rpc :ListSecretVersions, Google::Cloud::SecretManager::V1::ListSecretVersionsRequest, Google::Cloud::SecretManager::V1::ListSecretVersionsResponse
|
|
57
|
+
rpc :ListSecretVersions, ::Google::Cloud::SecretManager::V1::ListSecretVersionsRequest, ::Google::Cloud::SecretManager::V1::ListSecretVersionsResponse
|
|
61
58
|
# Gets metadata for a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
|
|
62
59
|
#
|
|
63
60
|
# `projects/*/secrets/*/versions/latest` is an alias to the `latest`
|
|
64
61
|
# [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
|
|
65
|
-
rpc :GetSecretVersion, Google::Cloud::SecretManager::V1::GetSecretVersionRequest, Google::Cloud::SecretManager::V1::SecretVersion
|
|
62
|
+
rpc :GetSecretVersion, ::Google::Cloud::SecretManager::V1::GetSecretVersionRequest, ::Google::Cloud::SecretManager::V1::SecretVersion
|
|
66
63
|
# Accesses a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. This call returns the secret data.
|
|
67
64
|
#
|
|
68
65
|
# `projects/*/secrets/*/versions/latest` is an alias to the `latest`
|
|
69
66
|
# [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
|
|
70
|
-
rpc :AccessSecretVersion, Google::Cloud::SecretManager::V1::AccessSecretVersionRequest, Google::Cloud::SecretManager::V1::AccessSecretVersionResponse
|
|
67
|
+
rpc :AccessSecretVersion, ::Google::Cloud::SecretManager::V1::AccessSecretVersionRequest, ::Google::Cloud::SecretManager::V1::AccessSecretVersionResponse
|
|
71
68
|
# Disables a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
|
|
72
69
|
#
|
|
73
70
|
# Sets the [state][google.cloud.secretmanager.v1.SecretVersion.state] of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] to
|
|
74
71
|
# [DISABLED][google.cloud.secretmanager.v1.SecretVersion.State.DISABLED].
|
|
75
|
-
rpc :DisableSecretVersion, Google::Cloud::SecretManager::V1::DisableSecretVersionRequest, Google::Cloud::SecretManager::V1::SecretVersion
|
|
72
|
+
rpc :DisableSecretVersion, ::Google::Cloud::SecretManager::V1::DisableSecretVersionRequest, ::Google::Cloud::SecretManager::V1::SecretVersion
|
|
76
73
|
# Enables a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
|
|
77
74
|
#
|
|
78
75
|
# Sets the [state][google.cloud.secretmanager.v1.SecretVersion.state] of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] to
|
|
79
76
|
# [ENABLED][google.cloud.secretmanager.v1.SecretVersion.State.ENABLED].
|
|
80
|
-
rpc :EnableSecretVersion, Google::Cloud::SecretManager::V1::EnableSecretVersionRequest, Google::Cloud::SecretManager::V1::SecretVersion
|
|
77
|
+
rpc :EnableSecretVersion, ::Google::Cloud::SecretManager::V1::EnableSecretVersionRequest, ::Google::Cloud::SecretManager::V1::SecretVersion
|
|
81
78
|
# Destroys a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
|
|
82
79
|
#
|
|
83
80
|
# Sets the [state][google.cloud.secretmanager.v1.SecretVersion.state] of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] to
|
|
84
81
|
# [DESTROYED][google.cloud.secretmanager.v1.SecretVersion.State.DESTROYED] and irrevocably destroys the
|
|
85
82
|
# secret data.
|
|
86
|
-
rpc :DestroySecretVersion, Google::Cloud::SecretManager::V1::DestroySecretVersionRequest, Google::Cloud::SecretManager::V1::SecretVersion
|
|
83
|
+
rpc :DestroySecretVersion, ::Google::Cloud::SecretManager::V1::DestroySecretVersionRequest, ::Google::Cloud::SecretManager::V1::SecretVersion
|
|
87
84
|
# Sets the access control policy on the specified secret. Replaces any
|
|
88
85
|
# existing policy.
|
|
89
86
|
#
|
|
90
87
|
# Permissions on [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] are enforced according
|
|
91
88
|
# to the policy set on the associated [Secret][google.cloud.secretmanager.v1.Secret].
|
|
92
|
-
rpc :SetIamPolicy, Google::Iam::V1::SetIamPolicyRequest, Google::Iam::V1::Policy
|
|
89
|
+
rpc :SetIamPolicy, ::Google::Iam::V1::SetIamPolicyRequest, ::Google::Iam::V1::Policy
|
|
93
90
|
# Gets the access control policy for a secret.
|
|
94
91
|
# Returns empty policy if the secret exists and does not have a policy set.
|
|
95
|
-
rpc :GetIamPolicy, Google::Iam::V1::GetIamPolicyRequest, Google::Iam::V1::Policy
|
|
92
|
+
rpc :GetIamPolicy, ::Google::Iam::V1::GetIamPolicyRequest, ::Google::Iam::V1::Policy
|
|
96
93
|
# Returns permissions that a caller has for the specified secret.
|
|
97
94
|
# If the secret does not exist, this call returns an empty set of
|
|
98
95
|
# permissions, not a NOT_FOUND error.
|
|
@@ -100,7 +97,7 @@ module Google
|
|
|
100
97
|
# Note: This operation is designed to be used for building permission-aware
|
|
101
98
|
# UIs and command-line tools, not for authorization checking. This operation
|
|
102
99
|
# may "fail open" without warning.
|
|
103
|
-
rpc :TestIamPermissions, Google::Iam::V1::TestIamPermissionsRequest, Google::Iam::V1::TestIamPermissionsResponse
|
|
100
|
+
rpc :TestIamPermissions, ::Google::Iam::V1::TestIamPermissionsRequest, ::Google::Iam::V1::TestIamPermissionsResponse
|
|
104
101
|
end
|
|
105
102
|
|
|
106
103
|
Stub = Service.rpc_stub_class
|
|
@@ -43,12 +43,12 @@ module Google
|
|
|
43
43
|
#
|
|
44
44
|
# The ResourceDescriptor Yaml config will look like:
|
|
45
45
|
#
|
|
46
|
-
#
|
|
47
|
-
#
|
|
48
|
-
#
|
|
49
|
-
#
|
|
50
|
-
#
|
|
51
|
-
#
|
|
46
|
+
# resources:
|
|
47
|
+
# - type: "pubsub.googleapis.com/Topic"
|
|
48
|
+
# name_descriptor:
|
|
49
|
+
# - pattern: "projects/{project}/topics/{topic}"
|
|
50
|
+
# parent_type: "cloudresourcemanager.googleapis.com/Project"
|
|
51
|
+
# parent_name_extractor: "projects/{project}"
|
|
52
52
|
#
|
|
53
53
|
# Sometimes, resources have multiple patterns, typically because they can
|
|
54
54
|
# live under multiple parents.
|
|
@@ -183,15 +183,24 @@ module Google
|
|
|
183
183
|
# }
|
|
184
184
|
# @!attribute [rw] plural
|
|
185
185
|
# @return [::String]
|
|
186
|
-
# The plural name used in the resource name, such as
|
|
187
|
-
# the name of 'projects/\\{project}'
|
|
188
|
-
#
|
|
186
|
+
# The plural name used in the resource name and permission names, such as
|
|
187
|
+
# 'projects' for the resource name of 'projects/\\{project}' and the permission
|
|
188
|
+
# name of 'cloudresourcemanager.googleapis.com/projects.get'. It is the same
|
|
189
|
+
# concept of the `plural` field in k8s CRD spec
|
|
189
190
|
# https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions/
|
|
191
|
+
#
|
|
192
|
+
# Note: The plural form is required even for singleton resources. See
|
|
193
|
+
# https://aip.dev/156
|
|
190
194
|
# @!attribute [rw] singular
|
|
191
195
|
# @return [::String]
|
|
192
196
|
# The same concept of the `singular` field in k8s CRD spec
|
|
193
197
|
# https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions/
|
|
194
198
|
# Such as "project" for the `resourcemanager.googleapis.com/Project` type.
|
|
199
|
+
# @!attribute [rw] style
|
|
200
|
+
# @return [::Array<::Google::Api::ResourceDescriptor::Style>]
|
|
201
|
+
# Style flag(s) for this resource.
|
|
202
|
+
# These indicate that a resource is expected to conform to a given
|
|
203
|
+
# style. See the specific style flags for additional information.
|
|
195
204
|
class ResourceDescriptor
|
|
196
205
|
include ::Google::Protobuf::MessageExts
|
|
197
206
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -211,6 +220,22 @@ module Google
|
|
|
211
220
|
# that from being necessary once there are multiple patterns.)
|
|
212
221
|
FUTURE_MULTI_PATTERN = 2
|
|
213
222
|
end
|
|
223
|
+
|
|
224
|
+
# A flag representing a specific style that a resource claims to conform to.
|
|
225
|
+
module Style
|
|
226
|
+
# The unspecified value. Do not use.
|
|
227
|
+
STYLE_UNSPECIFIED = 0
|
|
228
|
+
|
|
229
|
+
# This resource is intended to be "declarative-friendly".
|
|
230
|
+
#
|
|
231
|
+
# Declarative-friendly resources must be more strictly consistent, and
|
|
232
|
+
# setting this to true communicates to tools that this resource should
|
|
233
|
+
# adhere to declarative-friendly expectations.
|
|
234
|
+
#
|
|
235
|
+
# Note: This is used by the API linter (linter.aip.dev) to enable
|
|
236
|
+
# additional checks.
|
|
237
|
+
DECLARATIVE_FRIENDLY = 1
|
|
238
|
+
end
|
|
214
239
|
end
|
|
215
240
|
|
|
216
241
|
# Defines a proto annotation that describes a string field that refers to
|
|
@@ -226,6 +251,17 @@ module Google
|
|
|
226
251
|
# type: "pubsub.googleapis.com/Topic"
|
|
227
252
|
# }];
|
|
228
253
|
# }
|
|
254
|
+
#
|
|
255
|
+
# Occasionally, a field may reference an arbitrary resource. In this case,
|
|
256
|
+
# APIs use the special value * in their resource reference.
|
|
257
|
+
#
|
|
258
|
+
# Example:
|
|
259
|
+
#
|
|
260
|
+
# message GetIamPolicyRequest {
|
|
261
|
+
# string resource = 2 [(google.api.resource_reference) = {
|
|
262
|
+
# type: "*"
|
|
263
|
+
# }];
|
|
264
|
+
# }
|
|
229
265
|
# @!attribute [rw] child_type
|
|
230
266
|
# @return [::String]
|
|
231
267
|
# The resource type of a child collection that the annotated field
|
|
@@ -234,11 +270,11 @@ module Google
|
|
|
234
270
|
#
|
|
235
271
|
# Example:
|
|
236
272
|
#
|
|
237
|
-
#
|
|
238
|
-
#
|
|
239
|
-
#
|
|
240
|
-
#
|
|
241
|
-
#
|
|
273
|
+
# message ListLogEntriesRequest {
|
|
274
|
+
# string parent = 1 [(google.api.resource_reference) = {
|
|
275
|
+
# child_type: "logging.googleapis.com/LogEntry"
|
|
276
|
+
# };
|
|
277
|
+
# }
|
|
242
278
|
class ResourceReference
|
|
243
279
|
include ::Google::Protobuf::MessageExts
|
|
244
280
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -83,6 +83,9 @@ module Google
|
|
|
83
83
|
# @!attribute [r] state
|
|
84
84
|
# @return [::Google::Cloud::SecretManager::V1::SecretVersion::State]
|
|
85
85
|
# Output only. The current state of the {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}.
|
|
86
|
+
# @!attribute [rw] replication_status
|
|
87
|
+
# @return [::Google::Cloud::SecretManager::V1::ReplicationStatus]
|
|
88
|
+
# The replication status of the {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}.
|
|
86
89
|
class SecretVersion
|
|
87
90
|
include ::Google::Protobuf::MessageExts
|
|
88
91
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -106,7 +109,7 @@ module Google
|
|
|
106
109
|
end
|
|
107
110
|
end
|
|
108
111
|
|
|
109
|
-
# A policy that defines the replication configuration of data.
|
|
112
|
+
# A policy that defines the replication and encryption configuration of data.
|
|
110
113
|
# @!attribute [rw] automatic
|
|
111
114
|
# @return [::Google::Cloud::SecretManager::V1::Replication::Automatic]
|
|
112
115
|
# The {::Google::Cloud::SecretManager::V1::Secret Secret} will automatically be replicated without any restrictions.
|
|
@@ -119,6 +122,14 @@ module Google
|
|
|
119
122
|
|
|
120
123
|
# A replication policy that replicates the {::Google::Cloud::SecretManager::V1::Secret Secret} payload without any
|
|
121
124
|
# restrictions.
|
|
125
|
+
# @!attribute [rw] customer_managed_encryption
|
|
126
|
+
# @return [::Google::Cloud::SecretManager::V1::CustomerManagedEncryption]
|
|
127
|
+
# Optional. The customer-managed encryption configuration of the {::Google::Cloud::SecretManager::V1::Secret Secret}. If no
|
|
128
|
+
# configuration is provided, Google-managed default encryption is used.
|
|
129
|
+
#
|
|
130
|
+
# Updates to the {::Google::Cloud::SecretManager::V1::Secret Secret} encryption configuration only apply to
|
|
131
|
+
# {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersions} added afterwards. They do not apply
|
|
132
|
+
# retroactively to existing {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersions}.
|
|
122
133
|
class Automatic
|
|
123
134
|
include ::Google::Protobuf::MessageExts
|
|
124
135
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -140,6 +151,15 @@ module Google
|
|
|
140
151
|
# @return [::String]
|
|
141
152
|
# The canonical IDs of the location to replicate data.
|
|
142
153
|
# For example: `"us-east1"`.
|
|
154
|
+
# @!attribute [rw] customer_managed_encryption
|
|
155
|
+
# @return [::Google::Cloud::SecretManager::V1::CustomerManagedEncryption]
|
|
156
|
+
# Optional. The customer-managed encryption configuration of the [User-Managed
|
|
157
|
+
# Replica][Replication.UserManaged.Replica]. If no configuration is
|
|
158
|
+
# provided, Google-managed default encryption is used.
|
|
159
|
+
#
|
|
160
|
+
# Updates to the {::Google::Cloud::SecretManager::V1::Secret Secret} encryption configuration only apply to
|
|
161
|
+
# {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersions} added afterwards. They do not apply
|
|
162
|
+
# retroactively to existing {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersions}.
|
|
143
163
|
class Replica
|
|
144
164
|
include ::Google::Protobuf::MessageExts
|
|
145
165
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -147,6 +167,97 @@ module Google
|
|
|
147
167
|
end
|
|
148
168
|
end
|
|
149
169
|
|
|
170
|
+
# Configuration for encrypting secret payloads using customer-managed
|
|
171
|
+
# encryption keys (CMEK).
|
|
172
|
+
# @!attribute [rw] kms_key_name
|
|
173
|
+
# @return [::String]
|
|
174
|
+
# Required. The resource name of the Cloud KMS CryptoKey used to encrypt secret
|
|
175
|
+
# payloads.
|
|
176
|
+
#
|
|
177
|
+
# For secrets using the {::Google::Cloud::SecretManager::V1::Replication::UserManaged UserManaged} replication
|
|
178
|
+
# policy type, Cloud KMS CryptoKeys must reside in the same location as the
|
|
179
|
+
# [replica location][Secret.UserManaged.Replica.location].
|
|
180
|
+
#
|
|
181
|
+
# For secrets using the {::Google::Cloud::SecretManager::V1::Replication::Automatic Automatic} replication policy
|
|
182
|
+
# type, Cloud KMS CryptoKeys must reside in `global`.
|
|
183
|
+
#
|
|
184
|
+
# The expected format is `projects/*/locations/*/keyRings/*/cryptoKeys/*`.
|
|
185
|
+
class CustomerManagedEncryption
|
|
186
|
+
include ::Google::Protobuf::MessageExts
|
|
187
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
188
|
+
end
|
|
189
|
+
|
|
190
|
+
# The replication status of a {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}.
|
|
191
|
+
# @!attribute [rw] automatic
|
|
192
|
+
# @return [::Google::Cloud::SecretManager::V1::ReplicationStatus::AutomaticStatus]
|
|
193
|
+
# Describes the replication status of a {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion} with
|
|
194
|
+
# automatic replication.
|
|
195
|
+
#
|
|
196
|
+
# Only populated if the parent {::Google::Cloud::SecretManager::V1::Secret Secret} has an automatic replication
|
|
197
|
+
# policy.
|
|
198
|
+
# @!attribute [rw] user_managed
|
|
199
|
+
# @return [::Google::Cloud::SecretManager::V1::ReplicationStatus::UserManagedStatus]
|
|
200
|
+
# Describes the replication status of a {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion} with
|
|
201
|
+
# user-managed replication.
|
|
202
|
+
#
|
|
203
|
+
# Only populated if the parent {::Google::Cloud::SecretManager::V1::Secret Secret} has a user-managed replication
|
|
204
|
+
# policy.
|
|
205
|
+
class ReplicationStatus
|
|
206
|
+
include ::Google::Protobuf::MessageExts
|
|
207
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
208
|
+
|
|
209
|
+
# The replication status of a {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion} using automatic replication.
|
|
210
|
+
#
|
|
211
|
+
# Only populated if the parent {::Google::Cloud::SecretManager::V1::Secret Secret} has an automatic replication
|
|
212
|
+
# policy.
|
|
213
|
+
# @!attribute [r] customer_managed_encryption
|
|
214
|
+
# @return [::Google::Cloud::SecretManager::V1::CustomerManagedEncryptionStatus]
|
|
215
|
+
# Output only. The customer-managed encryption status of the {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}. Only
|
|
216
|
+
# populated if customer-managed encryption is used.
|
|
217
|
+
class AutomaticStatus
|
|
218
|
+
include ::Google::Protobuf::MessageExts
|
|
219
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
220
|
+
end
|
|
221
|
+
|
|
222
|
+
# The replication status of a {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion} using user-managed
|
|
223
|
+
# replication.
|
|
224
|
+
#
|
|
225
|
+
# Only populated if the parent {::Google::Cloud::SecretManager::V1::Secret Secret} has a user-managed replication
|
|
226
|
+
# policy.
|
|
227
|
+
# @!attribute [r] replicas
|
|
228
|
+
# @return [::Array<::Google::Cloud::SecretManager::V1::ReplicationStatus::UserManagedStatus::ReplicaStatus>]
|
|
229
|
+
# Output only. The list of replica statuses for the {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}.
|
|
230
|
+
class UserManagedStatus
|
|
231
|
+
include ::Google::Protobuf::MessageExts
|
|
232
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
233
|
+
|
|
234
|
+
# Describes the status of a user-managed replica for the {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}.
|
|
235
|
+
# @!attribute [r] location
|
|
236
|
+
# @return [::String]
|
|
237
|
+
# Output only. The canonical ID of the replica location.
|
|
238
|
+
# For example: `"us-east1"`.
|
|
239
|
+
# @!attribute [r] customer_managed_encryption
|
|
240
|
+
# @return [::Google::Cloud::SecretManager::V1::CustomerManagedEncryptionStatus]
|
|
241
|
+
# Output only. The customer-managed encryption status of the {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}. Only
|
|
242
|
+
# populated if customer-managed encryption is used.
|
|
243
|
+
class ReplicaStatus
|
|
244
|
+
include ::Google::Protobuf::MessageExts
|
|
245
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
246
|
+
end
|
|
247
|
+
end
|
|
248
|
+
end
|
|
249
|
+
|
|
250
|
+
# Describes the status of customer-managed encryption.
|
|
251
|
+
# @!attribute [rw] kms_key_version_name
|
|
252
|
+
# @return [::String]
|
|
253
|
+
# Required. The resource name of the Cloud KMS CryptoKeyVersion used to encrypt the
|
|
254
|
+
# secret payload, in the following format:
|
|
255
|
+
# `projects/*/locations/*/keyRings/*/cryptoKeys/*/versions/*`.
|
|
256
|
+
class CustomerManagedEncryptionStatus
|
|
257
|
+
include ::Google::Protobuf::MessageExts
|
|
258
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
259
|
+
end
|
|
260
|
+
|
|
150
261
|
# A secret payload resource in the Secret Manager API. This contains the
|
|
151
262
|
# sensitive secret payload that is associated with a {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}.
|
|
152
263
|
# @!attribute [rw] data
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: google-cloud-secret_manager-v1
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.5.1
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Google LLC
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date:
|
|
11
|
+
date: 2021-01-19 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: gapic-common
|
|
@@ -16,14 +16,14 @@ dependencies:
|
|
|
16
16
|
requirements:
|
|
17
17
|
- - "~>"
|
|
18
18
|
- !ruby/object:Gem::Version
|
|
19
|
-
version: '0.
|
|
19
|
+
version: '0.3'
|
|
20
20
|
type: :runtime
|
|
21
21
|
prerelease: false
|
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
|
23
23
|
requirements:
|
|
24
24
|
- - "~>"
|
|
25
25
|
- !ruby/object:Gem::Version
|
|
26
|
-
version: '0.
|
|
26
|
+
version: '0.3'
|
|
27
27
|
- !ruby/object:Gem::Dependency
|
|
28
28
|
name: google-cloud-errors
|
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -224,7 +224,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
224
224
|
- !ruby/object:Gem::Version
|
|
225
225
|
version: '0'
|
|
226
226
|
requirements: []
|
|
227
|
-
rubygems_version: 3.
|
|
227
|
+
rubygems_version: 3.2.6
|
|
228
228
|
signing_key:
|
|
229
229
|
specification_version: 4
|
|
230
230
|
summary: API Client library for the Secret Manager V1 API
|