google-cloud-secret_manager-v1 0.4.5 → 0.5.0
Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 60f66ce89caf973101116d6d957c9b4ba970b5330b1f8861031e8003c5c7a165
|
4
|
+
data.tar.gz: dd5055b0d36e650f2b725081fbda8db240da05986d388a2b202634cd0441dc97
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: d1cc3dff17faab412f0fe300f5f3226045cf00f965ef0ed3073d052a372a71f62b999bc8b3ee2ae67dfc82a699dda3a411d4a69c6016cf0b8d783a3490a5ca34
|
7
|
+
data.tar.gz: 7ea0ce88abfc1b4423d27723d48857610a245a393b8f5a083664f5bbf6465d112cdbe3ac1986279aac74406c76c0bee05c5a872626c51b94270c996cf021a4a2
|
@@ -20,6 +20,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
20
20
|
optional :create_time, :message, 2, "google.protobuf.Timestamp"
|
21
21
|
optional :destroy_time, :message, 3, "google.protobuf.Timestamp"
|
22
22
|
optional :state, :enum, 4, "google.cloud.secretmanager.v1.SecretVersion.State"
|
23
|
+
optional :replication_status, :message, 5, "google.cloud.secretmanager.v1.ReplicationStatus"
|
23
24
|
end
|
24
25
|
add_enum "google.cloud.secretmanager.v1.SecretVersion.State" do
|
25
26
|
value :STATE_UNSPECIFIED, 0
|
@@ -34,12 +35,36 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
34
35
|
end
|
35
36
|
end
|
36
37
|
add_message "google.cloud.secretmanager.v1.Replication.Automatic" do
|
38
|
+
optional :customer_managed_encryption, :message, 1, "google.cloud.secretmanager.v1.CustomerManagedEncryption"
|
37
39
|
end
|
38
40
|
add_message "google.cloud.secretmanager.v1.Replication.UserManaged" do
|
39
41
|
repeated :replicas, :message, 1, "google.cloud.secretmanager.v1.Replication.UserManaged.Replica"
|
40
42
|
end
|
41
43
|
add_message "google.cloud.secretmanager.v1.Replication.UserManaged.Replica" do
|
42
44
|
optional :location, :string, 1
|
45
|
+
optional :customer_managed_encryption, :message, 2, "google.cloud.secretmanager.v1.CustomerManagedEncryption"
|
46
|
+
end
|
47
|
+
add_message "google.cloud.secretmanager.v1.CustomerManagedEncryption" do
|
48
|
+
optional :kms_key_name, :string, 1
|
49
|
+
end
|
50
|
+
add_message "google.cloud.secretmanager.v1.ReplicationStatus" do
|
51
|
+
oneof :replication_status do
|
52
|
+
optional :automatic, :message, 1, "google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus"
|
53
|
+
optional :user_managed, :message, 2, "google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus"
|
54
|
+
end
|
55
|
+
end
|
56
|
+
add_message "google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus" do
|
57
|
+
optional :customer_managed_encryption, :message, 1, "google.cloud.secretmanager.v1.CustomerManagedEncryptionStatus"
|
58
|
+
end
|
59
|
+
add_message "google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus" do
|
60
|
+
repeated :replicas, :message, 1, "google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus.ReplicaStatus"
|
61
|
+
end
|
62
|
+
add_message "google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus.ReplicaStatus" do
|
63
|
+
optional :location, :string, 1
|
64
|
+
optional :customer_managed_encryption, :message, 2, "google.cloud.secretmanager.v1.CustomerManagedEncryptionStatus"
|
65
|
+
end
|
66
|
+
add_message "google.cloud.secretmanager.v1.CustomerManagedEncryptionStatus" do
|
67
|
+
optional :kms_key_version_name, :string, 1
|
43
68
|
end
|
44
69
|
add_message "google.cloud.secretmanager.v1.SecretPayload" do
|
45
70
|
optional :data, :bytes, 1
|
@@ -58,6 +83,12 @@ module Google
|
|
58
83
|
Replication::Automatic = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.Replication.Automatic").msgclass
|
59
84
|
Replication::UserManaged = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.Replication.UserManaged").msgclass
|
60
85
|
Replication::UserManaged::Replica = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.Replication.UserManaged.Replica").msgclass
|
86
|
+
CustomerManagedEncryption = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.CustomerManagedEncryption").msgclass
|
87
|
+
ReplicationStatus = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.ReplicationStatus").msgclass
|
88
|
+
ReplicationStatus::AutomaticStatus = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus").msgclass
|
89
|
+
ReplicationStatus::UserManagedStatus = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus").msgclass
|
90
|
+
ReplicationStatus::UserManagedStatus::ReplicaStatus = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus.ReplicaStatus").msgclass
|
91
|
+
CustomerManagedEncryptionStatus = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.CustomerManagedEncryptionStatus").msgclass
|
61
92
|
SecretPayload = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.secretmanager.v1.SecretPayload").msgclass
|
62
93
|
end
|
63
94
|
end
|
@@ -24,9 +24,6 @@ module Google
|
|
24
24
|
module SecretManager
|
25
25
|
module V1
|
26
26
|
module SecretManagerService
|
27
|
-
# `projects/*/secrets/*/versions/latest` is an alias to the `latest`
|
28
|
-
# [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
|
29
|
-
#
|
30
27
|
# Secret Manager Service
|
31
28
|
#
|
32
29
|
# Manages secrets and operations using those secrets. Implements a REST
|
@@ -83,6 +83,9 @@ module Google
|
|
83
83
|
# @!attribute [r] state
|
84
84
|
# @return [::Google::Cloud::SecretManager::V1::SecretVersion::State]
|
85
85
|
# Output only. The current state of the {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}.
|
86
|
+
# @!attribute [rw] replication_status
|
87
|
+
# @return [::Google::Cloud::SecretManager::V1::ReplicationStatus]
|
88
|
+
# The replication status of the {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}.
|
86
89
|
class SecretVersion
|
87
90
|
include ::Google::Protobuf::MessageExts
|
88
91
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
@@ -106,7 +109,7 @@ module Google
|
|
106
109
|
end
|
107
110
|
end
|
108
111
|
|
109
|
-
# A policy that defines the replication configuration of data.
|
112
|
+
# A policy that defines the replication and encryption configuration of data.
|
110
113
|
# @!attribute [rw] automatic
|
111
114
|
# @return [::Google::Cloud::SecretManager::V1::Replication::Automatic]
|
112
115
|
# The {::Google::Cloud::SecretManager::V1::Secret Secret} will automatically be replicated without any restrictions.
|
@@ -119,6 +122,14 @@ module Google
|
|
119
122
|
|
120
123
|
# A replication policy that replicates the {::Google::Cloud::SecretManager::V1::Secret Secret} payload without any
|
121
124
|
# restrictions.
|
125
|
+
# @!attribute [rw] customer_managed_encryption
|
126
|
+
# @return [::Google::Cloud::SecretManager::V1::CustomerManagedEncryption]
|
127
|
+
# Optional. The customer-managed encryption configuration of the {::Google::Cloud::SecretManager::V1::Secret Secret}. If no
|
128
|
+
# configuration is provided, Google-managed default encryption is used.
|
129
|
+
#
|
130
|
+
# Updates to the {::Google::Cloud::SecretManager::V1::Secret Secret} encryption configuration only apply to
|
131
|
+
# {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersions} added afterwards. They do not apply
|
132
|
+
# retroactively to existing {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersions}.
|
122
133
|
class Automatic
|
123
134
|
include ::Google::Protobuf::MessageExts
|
124
135
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
@@ -140,6 +151,15 @@ module Google
|
|
140
151
|
# @return [::String]
|
141
152
|
# The canonical IDs of the location to replicate data.
|
142
153
|
# For example: `"us-east1"`.
|
154
|
+
# @!attribute [rw] customer_managed_encryption
|
155
|
+
# @return [::Google::Cloud::SecretManager::V1::CustomerManagedEncryption]
|
156
|
+
# Optional. The customer-managed encryption configuration of the [User-Managed
|
157
|
+
# Replica][Replication.UserManaged.Replica]. If no configuration is
|
158
|
+
# provided, Google-managed default encryption is used.
|
159
|
+
#
|
160
|
+
# Updates to the {::Google::Cloud::SecretManager::V1::Secret Secret} encryption configuration only apply to
|
161
|
+
# {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersions} added afterwards. They do not apply
|
162
|
+
# retroactively to existing {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersions}.
|
143
163
|
class Replica
|
144
164
|
include ::Google::Protobuf::MessageExts
|
145
165
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
@@ -147,6 +167,97 @@ module Google
|
|
147
167
|
end
|
148
168
|
end
|
149
169
|
|
170
|
+
# Configuration for encrypting secret payloads using customer-managed
|
171
|
+
# encryption keys (CMEK).
|
172
|
+
# @!attribute [rw] kms_key_name
|
173
|
+
# @return [::String]
|
174
|
+
# Required. The resource name of the Cloud KMS CryptoKey used to encrypt secret
|
175
|
+
# payloads.
|
176
|
+
#
|
177
|
+
# For secrets using the {::Google::Cloud::SecretManager::V1::Replication::UserManaged UserManaged} replication
|
178
|
+
# policy type, Cloud KMS CryptoKeys must reside in the same location as the
|
179
|
+
# [replica location][Secret.UserManaged.Replica.location].
|
180
|
+
#
|
181
|
+
# For secrets using the {::Google::Cloud::SecretManager::V1::Replication::Automatic Automatic} replication policy
|
182
|
+
# type, Cloud KMS CryptoKeys must reside in `global`.
|
183
|
+
#
|
184
|
+
# The expected format is `projects/*/locations/*/keyRings/*/cryptoKeys/*`.
|
185
|
+
class CustomerManagedEncryption
|
186
|
+
include ::Google::Protobuf::MessageExts
|
187
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
188
|
+
end
|
189
|
+
|
190
|
+
# The replication status of a {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}.
|
191
|
+
# @!attribute [rw] automatic
|
192
|
+
# @return [::Google::Cloud::SecretManager::V1::ReplicationStatus::AutomaticStatus]
|
193
|
+
# Describes the replication status of a {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion} with
|
194
|
+
# automatic replication.
|
195
|
+
#
|
196
|
+
# Only populated if the parent {::Google::Cloud::SecretManager::V1::Secret Secret} has an automatic replication
|
197
|
+
# policy.
|
198
|
+
# @!attribute [rw] user_managed
|
199
|
+
# @return [::Google::Cloud::SecretManager::V1::ReplicationStatus::UserManagedStatus]
|
200
|
+
# Describes the replication status of a {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion} with
|
201
|
+
# user-managed replication.
|
202
|
+
#
|
203
|
+
# Only populated if the parent {::Google::Cloud::SecretManager::V1::Secret Secret} has a user-managed replication
|
204
|
+
# policy.
|
205
|
+
class ReplicationStatus
|
206
|
+
include ::Google::Protobuf::MessageExts
|
207
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
208
|
+
|
209
|
+
# The replication status of a {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion} using automatic replication.
|
210
|
+
#
|
211
|
+
# Only populated if the parent {::Google::Cloud::SecretManager::V1::Secret Secret} has an automatic replication
|
212
|
+
# policy.
|
213
|
+
# @!attribute [r] customer_managed_encryption
|
214
|
+
# @return [::Google::Cloud::SecretManager::V1::CustomerManagedEncryptionStatus]
|
215
|
+
# Output only. The customer-managed encryption status of the {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}. Only
|
216
|
+
# populated if customer-managed encryption is used.
|
217
|
+
class AutomaticStatus
|
218
|
+
include ::Google::Protobuf::MessageExts
|
219
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
220
|
+
end
|
221
|
+
|
222
|
+
# The replication status of a {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion} using user-managed
|
223
|
+
# replication.
|
224
|
+
#
|
225
|
+
# Only populated if the parent {::Google::Cloud::SecretManager::V1::Secret Secret} has a user-managed replication
|
226
|
+
# policy.
|
227
|
+
# @!attribute [r] replicas
|
228
|
+
# @return [::Array<::Google::Cloud::SecretManager::V1::ReplicationStatus::UserManagedStatus::ReplicaStatus>]
|
229
|
+
# Output only. The list of replica statuses for the {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}.
|
230
|
+
class UserManagedStatus
|
231
|
+
include ::Google::Protobuf::MessageExts
|
232
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
233
|
+
|
234
|
+
# Describes the status of a user-managed replica for the {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}.
|
235
|
+
# @!attribute [r] location
|
236
|
+
# @return [::String]
|
237
|
+
# Output only. The canonical ID of the replica location.
|
238
|
+
# For example: `"us-east1"`.
|
239
|
+
# @!attribute [r] customer_managed_encryption
|
240
|
+
# @return [::Google::Cloud::SecretManager::V1::CustomerManagedEncryptionStatus]
|
241
|
+
# Output only. The customer-managed encryption status of the {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}. Only
|
242
|
+
# populated if customer-managed encryption is used.
|
243
|
+
class ReplicaStatus
|
244
|
+
include ::Google::Protobuf::MessageExts
|
245
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
246
|
+
end
|
247
|
+
end
|
248
|
+
end
|
249
|
+
|
250
|
+
# Describes the status of customer-managed encryption.
|
251
|
+
# @!attribute [rw] kms_key_version_name
|
252
|
+
# @return [::String]
|
253
|
+
# Required. The resource name of the Cloud KMS CryptoKeyVersion used to encrypt the
|
254
|
+
# secret payload, in the following format:
|
255
|
+
# `projects/*/locations/*/keyRings/*/cryptoKeys/*/versions/*`.
|
256
|
+
class CustomerManagedEncryptionStatus
|
257
|
+
include ::Google::Protobuf::MessageExts
|
258
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
259
|
+
end
|
260
|
+
|
150
261
|
# A secret payload resource in the Secret Manager API. This contains the
|
151
262
|
# sensitive secret payload that is associated with a {::Google::Cloud::SecretManager::V1::SecretVersion SecretVersion}.
|
152
263
|
# @!attribute [rw] data
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: google-cloud-secret_manager-v1
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.5.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Google LLC
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2020-
|
11
|
+
date: 2020-09-10 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: gapic-common
|