google-cloud-secret_manager-v1 0.4.5 → 0.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 60f66ce89caf973101116d6d957c9b4ba970b5330b1f8861031e8003c5c7a165
|
|
4
|
+
data.tar.gz: dd5055b0d36e650f2b725081fbda8db240da05986d388a2b202634cd0441dc97
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: d1cc3dff17faab412f0fe300f5f3226045cf00f965ef0ed3073d052a372a71f62b999bc8b3ee2ae67dfc82a699dda3a411d4a69c6016cf0b8d783a3490a5ca34
|
|
7
|
+
data.tar.gz: 7ea0ce88abfc1b4423d27723d48857610a245a393b8f5a083664f5bbf6465d112cdbe3ac1986279aac74406c76c0bee05c5a872626c51b94270c996cf021a4a2
|
|
@@ -20,6 +20,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
|
20
20
|
optional :create_time, :message, 2, "google.protobuf.Timestamp"
|
|
21
21
|
optional :destroy_time, :message, 3, "google.protobuf.Timestamp"
|
|
22
22
|
optional :state, :enum, 4, "google.cloud.secretmanager.v1.SecretVersion.State"
|
|
23
|
+
optional :replication_status, :message, 5, "google.cloud.secretmanager.v1.ReplicationStatus"
|
|
23
24
|
end
|
|
24
25
|
add_enum "google.cloud.secretmanager.v1.SecretVersion.State" do
|
|
25
26
|
value :STATE_UNSPECIFIED, 0
|
|
@@ -34,12 +35,36 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
|
34
35
|
end
|
|
35
36
|
end
|
|
36
37
|
add_message "google.cloud.secretmanager.v1.Replication.Automatic" do
|
|
38
|
+
optional :customer_managed_encryption, :message, 1, "google.cloud.secretmanager.v1.CustomerManagedEncryption"
|
|
37
39
|
end
|
|
38
40
|
add_message "google.cloud.secretmanager.v1.Replication.UserManaged" do
|
|
39
41
|
repeated :replicas, :message, 1, "google.cloud.secretmanager.v1.Replication.UserManaged.Replica"
|
|
40
42
|
end
|
|
41
43
|
add_message "google.cloud.secretmanager.v1.Replication.UserManaged.Replica" do
|
|
42
44
|
optional :location, :string, 1
|
|
45
|
+
optional :customer_managed_encryption, :message, 2, "google.cloud.secretmanager.v1.CustomerManagedEncryption"
|
|
46
|
+
end
|
|
47
|
+
add_message "google.cloud.secretmanager.v1.CustomerManagedEncryption" do
|
|
48
|
+
optional :kms_key_name, :string, 1
|
|
49
|
+
end
|
|
50
|
+
add_message "google.cloud.secretmanager.v1.ReplicationStatus" do
|
|
51
|
+
oneof :replication_status do
|
|
52
|
+
optional :automatic, :message, 1, "google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus"
|
|
53
|
+
optional :user_managed, :message, 2, "google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus"
|
|
54
|
+
end
|
|
55
|
+
end
|
|
56
|
+
add_message "google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus" do
|
|
57
|
+
optional :customer_managed_encryption, :message, 1, "google.cloud.secretmanager.v1.CustomerManagedEncryptionStatus"
|
|
58
|
+
end
|
|
59
|
+
add_message "google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus" do
|
|
60
|
+
repeated :replicas, :message, 1, "google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus.ReplicaStatus"
|
|
61
|
+
end
|
|
62
|
+
add_message "google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus.ReplicaStatus" do
|
|
63
|
+
optional :location, :string, 1
|
|
64
|
+
optional :customer_managed_encryption, :message, 2, "google.cloud.secretmanager.v1.CustomerManagedEncryptionStatus"
|
|
65
|
+
end
|
|
66
|
+
add_message "google.cloud.secretmanager.v1.CustomerManagedEncryptionStatus" do
|
|
67
|
+
optional :kms_key_version_name, :string, 1
|
|
43
68
|
end
|
|
44
69
|
add_message "google.cloud.secretmanager.v1.SecretPayload" do
|
|
45
70
|
optional :data, :bytes, 1
|
|
@@ -58,6 +83,12 @@ module Google
|
|
|
58
83
|
Replication::Automatic = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.Replication.Automatic").msgclass
|
|
59
84
|
Replication::UserManaged = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.Replication.UserManaged").msgclass
|
|
60
85
|
Replication::UserManaged::Replica = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.Replication.UserManaged.Replica").msgclass
|
|
86
|
+
CustomerManagedEncryption = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.CustomerManagedEncryption").msgclass
|
|
87
|
+
ReplicationStatus = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.ReplicationStatus").msgclass
|
|
88
|
+
ReplicationStatus::AutomaticStatus = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus").msgclass
|
|
89
|
+
ReplicationStatus::UserManagedStatus = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus").msgclass
|
|
90
|
+
ReplicationStatus::UserManagedStatus::ReplicaStatus = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus.ReplicaStatus").msgclass
|
|
91
|
+
CustomerManagedEncryptionStatus = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.CustomerManagedEncryptionStatus").msgclass
|
|
61
92
|
SecretPayload = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.SecretPayload").msgclass
|
|
62
93
|
end
|
|
63
94
|
end
|
|
@@ -24,9 +24,6 @@ module Google
|
|
|
24
24
|
module SecretManager
|
|
25
25
|
module V1
|
|
26
26
|
module SecretManagerService
|
|
27
|
-
# `projects/*/secrets/*/versions/latest` is an alias to the `latest`
|
|
28
|
-
# [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
|
|
29
|
-
#
|
|
30
27
|
# Secret Manager Service
|
|
31
28
|
#
|
|
32
29
|
# Manages secrets and operations using those secrets. Implements a REST
|
|
@@ -83,6 +83,9 @@ module Google
|
|
|
83
83
|
# @!attribute [r] state
|
|
84
84
|
# @return [::Google::Cloud::SecretManager::V1::SecretVersion::State]
|
|
85
85
|
# Output only. The current state of the {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}.
|
|
86
|
+
# @!attribute [rw] replication_status
|
|
87
|
+
# @return [::Google::Cloud::SecretManager::V1::ReplicationStatus]
|
|
88
|
+
# The replication status of the {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}.
|
|
86
89
|
class SecretVersion
|
|
87
90
|
include ::Google::Protobuf::MessageExts
|
|
88
91
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -106,7 +109,7 @@ module Google
|
|
|
106
109
|
end
|
|
107
110
|
end
|
|
108
111
|
|
|
109
|
-
# A policy that defines the replication configuration of data.
|
|
112
|
+
# A policy that defines the replication and encryption configuration of data.
|
|
110
113
|
# @!attribute [rw] automatic
|
|
111
114
|
# @return [::Google::Cloud::SecretManager::V1::Replication::Automatic]
|
|
112
115
|
# The {::Google::Cloud::SecretManager::V1::Secret Secret} will automatically be replicated without any restrictions.
|
|
@@ -119,6 +122,14 @@ module Google
|
|
|
119
122
|
|
|
120
123
|
# A replication policy that replicates the {::Google::Cloud::SecretManager::V1::Secret Secret} payload without any
|
|
121
124
|
# restrictions.
|
|
125
|
+
# @!attribute [rw] customer_managed_encryption
|
|
126
|
+
# @return [::Google::Cloud::SecretManager::V1::CustomerManagedEncryption]
|
|
127
|
+
# Optional. The customer-managed encryption configuration of the {::Google::Cloud::SecretManager::V1::Secret Secret}. If no
|
|
128
|
+
# configuration is provided, Google-managed default encryption is used.
|
|
129
|
+
#
|
|
130
|
+
# Updates to the {::Google::Cloud::SecretManager::V1::Secret Secret} encryption configuration only apply to
|
|
131
|
+
# {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersions} added afterwards. They do not apply
|
|
132
|
+
# retroactively to existing {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersions}.
|
|
122
133
|
class Automatic
|
|
123
134
|
include ::Google::Protobuf::MessageExts
|
|
124
135
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -140,6 +151,15 @@ module Google
|
|
|
140
151
|
# @return [::String]
|
|
141
152
|
# The canonical IDs of the location to replicate data.
|
|
142
153
|
# For example: `"us-east1"`.
|
|
154
|
+
# @!attribute [rw] customer_managed_encryption
|
|
155
|
+
# @return [::Google::Cloud::SecretManager::V1::CustomerManagedEncryption]
|
|
156
|
+
# Optional. The customer-managed encryption configuration of the [User-Managed
|
|
157
|
+
# Replica][Replication.UserManaged.Replica]. If no configuration is
|
|
158
|
+
# provided, Google-managed default encryption is used.
|
|
159
|
+
#
|
|
160
|
+
# Updates to the {::Google::Cloud::SecretManager::V1::Secret Secret} encryption configuration only apply to
|
|
161
|
+
# {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersions} added afterwards. They do not apply
|
|
162
|
+
# retroactively to existing {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersions}.
|
|
143
163
|
class Replica
|
|
144
164
|
include ::Google::Protobuf::MessageExts
|
|
145
165
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -147,6 +167,97 @@ module Google
|
|
|
147
167
|
end
|
|
148
168
|
end
|
|
149
169
|
|
|
170
|
+
# Configuration for encrypting secret payloads using customer-managed
|
|
171
|
+
# encryption keys (CMEK).
|
|
172
|
+
# @!attribute [rw] kms_key_name
|
|
173
|
+
# @return [::String]
|
|
174
|
+
# Required. The resource name of the Cloud KMS CryptoKey used to encrypt secret
|
|
175
|
+
# payloads.
|
|
176
|
+
#
|
|
177
|
+
# For secrets using the {::Google::Cloud::SecretManager::V1::Replication::UserManaged UserManaged} replication
|
|
178
|
+
# policy type, Cloud KMS CryptoKeys must reside in the same location as the
|
|
179
|
+
# [replica location][Secret.UserManaged.Replica.location].
|
|
180
|
+
#
|
|
181
|
+
# For secrets using the {::Google::Cloud::SecretManager::V1::Replication::Automatic Automatic} replication policy
|
|
182
|
+
# type, Cloud KMS CryptoKeys must reside in `global`.
|
|
183
|
+
#
|
|
184
|
+
# The expected format is `projects/*/locations/*/keyRings/*/cryptoKeys/*`.
|
|
185
|
+
class CustomerManagedEncryption
|
|
186
|
+
include ::Google::Protobuf::MessageExts
|
|
187
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
188
|
+
end
|
|
189
|
+
|
|
190
|
+
# The replication status of a {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}.
|
|
191
|
+
# @!attribute [rw] automatic
|
|
192
|
+
# @return [::Google::Cloud::SecretManager::V1::ReplicationStatus::AutomaticStatus]
|
|
193
|
+
# Describes the replication status of a {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion} with
|
|
194
|
+
# automatic replication.
|
|
195
|
+
#
|
|
196
|
+
# Only populated if the parent {::Google::Cloud::SecretManager::V1::Secret Secret} has an automatic replication
|
|
197
|
+
# policy.
|
|
198
|
+
# @!attribute [rw] user_managed
|
|
199
|
+
# @return [::Google::Cloud::SecretManager::V1::ReplicationStatus::UserManagedStatus]
|
|
200
|
+
# Describes the replication status of a {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion} with
|
|
201
|
+
# user-managed replication.
|
|
202
|
+
#
|
|
203
|
+
# Only populated if the parent {::Google::Cloud::SecretManager::V1::Secret Secret} has a user-managed replication
|
|
204
|
+
# policy.
|
|
205
|
+
class ReplicationStatus
|
|
206
|
+
include ::Google::Protobuf::MessageExts
|
|
207
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
208
|
+
|
|
209
|
+
# The replication status of a {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion} using automatic replication.
|
|
210
|
+
#
|
|
211
|
+
# Only populated if the parent {::Google::Cloud::SecretManager::V1::Secret Secret} has an automatic replication
|
|
212
|
+
# policy.
|
|
213
|
+
# @!attribute [r] customer_managed_encryption
|
|
214
|
+
# @return [::Google::Cloud::SecretManager::V1::CustomerManagedEncryptionStatus]
|
|
215
|
+
# Output only. The customer-managed encryption status of the {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}. Only
|
|
216
|
+
# populated if customer-managed encryption is used.
|
|
217
|
+
class AutomaticStatus
|
|
218
|
+
include ::Google::Protobuf::MessageExts
|
|
219
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
220
|
+
end
|
|
221
|
+
|
|
222
|
+
# The replication status of a {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion} using user-managed
|
|
223
|
+
# replication.
|
|
224
|
+
#
|
|
225
|
+
# Only populated if the parent {::Google::Cloud::SecretManager::V1::Secret Secret} has a user-managed replication
|
|
226
|
+
# policy.
|
|
227
|
+
# @!attribute [r] replicas
|
|
228
|
+
# @return [::Array<::Google::Cloud::SecretManager::V1::ReplicationStatus::UserManagedStatus::ReplicaStatus>]
|
|
229
|
+
# Output only. The list of replica statuses for the {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}.
|
|
230
|
+
class UserManagedStatus
|
|
231
|
+
include ::Google::Protobuf::MessageExts
|
|
232
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
233
|
+
|
|
234
|
+
# Describes the status of a user-managed replica for the {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}.
|
|
235
|
+
# @!attribute [r] location
|
|
236
|
+
# @return [::String]
|
|
237
|
+
# Output only. The canonical ID of the replica location.
|
|
238
|
+
# For example: `"us-east1"`.
|
|
239
|
+
# @!attribute [r] customer_managed_encryption
|
|
240
|
+
# @return [::Google::Cloud::SecretManager::V1::CustomerManagedEncryptionStatus]
|
|
241
|
+
# Output only. The customer-managed encryption status of the {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}. Only
|
|
242
|
+
# populated if customer-managed encryption is used.
|
|
243
|
+
class ReplicaStatus
|
|
244
|
+
include ::Google::Protobuf::MessageExts
|
|
245
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
246
|
+
end
|
|
247
|
+
end
|
|
248
|
+
end
|
|
249
|
+
|
|
250
|
+
# Describes the status of customer-managed encryption.
|
|
251
|
+
# @!attribute [rw] kms_key_version_name
|
|
252
|
+
# @return [::String]
|
|
253
|
+
# Required. The resource name of the Cloud KMS CryptoKeyVersion used to encrypt the
|
|
254
|
+
# secret payload, in the following format:
|
|
255
|
+
# `projects/*/locations/*/keyRings/*/cryptoKeys/*/versions/*`.
|
|
256
|
+
class CustomerManagedEncryptionStatus
|
|
257
|
+
include ::Google::Protobuf::MessageExts
|
|
258
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
259
|
+
end
|
|
260
|
+
|
|
150
261
|
# A secret payload resource in the Secret Manager API. This contains the
|
|
151
262
|
# sensitive secret payload that is associated with a {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}.
|
|
152
263
|
# @!attribute [rw] data
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: google-cloud-secret_manager-v1
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.5.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Google LLC
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2020-
|
|
11
|
+
date: 2020-09-10 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: gapic-common
|