google-cloud-spanner-admin-database-v1 0.2.1 → 0.6.0

data/lib/google/cloud/spanner/admin/database/v1/database_admin/paths.rb

@@ -45,6 +45,50 @@ module Google
                   "projects/#{project}/instances/#{instance}/backups/#{backup}"
                 end
 
+                ##
+                # Create a fully-qualified CryptoKey resource string.
+                #
+                # The resource will be in the following format:
+                #
+                # `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`
+                #
+                # @param project [String]
+                # @param location [String]
+                # @param key_ring [String]
+                # @param crypto_key [String]
+                #
+                # @return [::String]
+                def crypto_key_path project:, location:, key_ring:, crypto_key:
+                  raise ::ArgumentError, "project cannot contain /" if project.to_s.include? "/"
+                  raise ::ArgumentError, "location cannot contain /" if location.to_s.include? "/"
+                  raise ::ArgumentError, "key_ring cannot contain /" if key_ring.to_s.include? "/"
+
+                  "projects/#{project}/locations/#{location}/keyRings/#{key_ring}/cryptoKeys/#{crypto_key}"
+                end
+
+                ##
+                # Create a fully-qualified CryptoKeyVersion resource string.
+                #
+                # The resource will be in the following format:
+                #
+                # `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}/cryptoKeyVersions/{crypto_key_version}`
+                #
+                # @param project [String]
+                # @param location [String]
+                # @param key_ring [String]
+                # @param crypto_key [String]
+                # @param crypto_key_version [String]
+                #
+                # @return [::String]
+                def crypto_key_version_path project:, location:, key_ring:, crypto_key:, crypto_key_version:
+                  raise ::ArgumentError, "project cannot contain /" if project.to_s.include? "/"
+                  raise ::ArgumentError, "location cannot contain /" if location.to_s.include? "/"
+                  raise ::ArgumentError, "key_ring cannot contain /" if key_ring.to_s.include? "/"
+                  raise ::ArgumentError, "crypto_key cannot contain /" if crypto_key.to_s.include? "/"
+
+                  "projects/#{project}/locations/#{location}/keyRings/#{key_ring}/cryptoKeys/#{crypto_key}/cryptoKeyVersions/#{crypto_key_version}"
+                end
+
                 ##
                 # Create a fully-qualified Database resource string.
                 #

data/lib/google/cloud/spanner/admin/database/v1/version.rb

@@ -23,7 +23,7 @@ module Google
       module Admin
         module Database
           module V1
-            VERSION = "0.2.1"
+            VERSION = "0.6.0"
           end
         end
       end

data/lib/google/spanner/admin/database/v1/backup_pb.rb

@@ -14,12 +14,14 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/spanner/admin/database/v1/backup.proto", :syntax => :proto3) do
     add_message "google.spanner.admin.database.v1.Backup" do
       optional :database, :string, 2
+      optional :version_time, :message, 9, "google.protobuf.Timestamp"
       optional :expire_time, :message, 3, "google.protobuf.Timestamp"
       optional :name, :string, 1
       optional :create_time, :message, 4, "google.protobuf.Timestamp"
       optional :size_bytes, :int64, 5
       optional :state, :enum, 6, "google.spanner.admin.database.v1.Backup.State"
       repeated :referencing_databases, :string, 7
+      optional :encryption_info, :message, 8, "google.spanner.admin.database.v1.EncryptionInfo"
     end
     add_enum "google.spanner.admin.database.v1.Backup.State" do
       value :STATE_UNSPECIFIED, 0
@@ -30,6 +32,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :parent, :string, 1
       optional :backup_id, :string, 2
       optional :backup, :message, 3, "google.spanner.admin.database.v1.Backup"
+      optional :encryption_config, :message, 4, "google.spanner.admin.database.v1.CreateBackupEncryptionConfig"
     end
     add_message "google.spanner.admin.database.v1.CreateBackupMetadata" do
       optional :name, :string, 1
@@ -69,9 +72,20 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
     end
     add_message "google.spanner.admin.database.v1.BackupInfo" do
       optional :backup, :string, 1
+      optional :version_time, :message, 4, "google.protobuf.Timestamp"
       optional :create_time, :message, 2, "google.protobuf.Timestamp"
       optional :source_database, :string, 3
     end
+    add_message "google.spanner.admin.database.v1.CreateBackupEncryptionConfig" do
+      optional :encryption_type, :enum, 1, "google.spanner.admin.database.v1.CreateBackupEncryptionConfig.EncryptionType"
+      optional :kms_key_name, :string, 2
+    end
+    add_enum "google.spanner.admin.database.v1.CreateBackupEncryptionConfig.EncryptionType" do
+      value :ENCRYPTION_TYPE_UNSPECIFIED, 0
+      value :USE_DATABASE_ENCRYPTION, 1
+      value :GOOGLE_DEFAULT_ENCRYPTION, 2
+      value :CUSTOMER_MANAGED_ENCRYPTION, 3
+    end
   end
 end
 
@@ -93,6 +107,8 @@ module Google
             ListBackupOperationsRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.spanner.admin.database.v1.ListBackupOperationsRequest").msgclass
             ListBackupOperationsResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.spanner.admin.database.v1.ListBackupOperationsResponse").msgclass
             BackupInfo = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.spanner.admin.database.v1.BackupInfo").msgclass
+            CreateBackupEncryptionConfig = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.spanner.admin.database.v1.CreateBackupEncryptionConfig").msgclass
+            CreateBackupEncryptionConfig::EncryptionType = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.spanner.admin.database.v1.CreateBackupEncryptionConfig.EncryptionType").enummodule
           end
         end
       end

data/lib/google/spanner/admin/database/v1/common_pb.rb

@@ -4,7 +4,9 @@
 require 'google/protobuf'
 
 require 'google/api/field_behavior_pb'
+require 'google/api/resource_pb'
 require 'google/protobuf/timestamp_pb'
+require 'google/rpc/status_pb'
 require 'google/api/annotations_pb'
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/spanner/admin/database/v1/common.proto", :syntax => :proto3) do
@@ -13,6 +15,19 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :start_time, :message, 2, "google.protobuf.Timestamp"
       optional :end_time, :message, 3, "google.protobuf.Timestamp"
     end
+    add_message "google.spanner.admin.database.v1.EncryptionConfig" do
+      optional :kms_key_name, :string, 2
+    end
+    add_message "google.spanner.admin.database.v1.EncryptionInfo" do
+      optional :encryption_type, :enum, 3, "google.spanner.admin.database.v1.EncryptionInfo.Type"
+      optional :encryption_status, :message, 4, "google.rpc.Status"
+      optional :kms_key_version, :string, 2
+    end
+    add_enum "google.spanner.admin.database.v1.EncryptionInfo.Type" do
+      value :TYPE_UNSPECIFIED, 0
+      value :GOOGLE_DEFAULT_ENCRYPTION, 1
+      value :CUSTOMER_MANAGED_ENCRYPTION, 2
+    end
   end
 end
 
@@ -23,6 +38,9 @@ module Google
         module Database
           module V1
             OperationProgress = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.spanner.admin.database.v1.OperationProgress").msgclass
+            EncryptionConfig = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.spanner.admin.database.v1.EncryptionConfig").msgclass
+            EncryptionInfo = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.spanner.admin.database.v1.EncryptionInfo").msgclass
+            EncryptionInfo::Type = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.spanner.admin.database.v1.EncryptionInfo.Type").enummodule
           end
         end
       end

data/lib/google/spanner/admin/database/v1/spanner_database_admin_pb.rb

@@ -27,6 +27,10 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :state, :enum, 2, "google.spanner.admin.database.v1.Database.State"
       optional :create_time, :message, 3, "google.protobuf.Timestamp"
       optional :restore_info, :message, 4, "google.spanner.admin.database.v1.RestoreInfo"
+      optional :encryption_config, :message, 5, "google.spanner.admin.database.v1.EncryptionConfig"
+      repeated :encryption_info, :message, 8, "google.spanner.admin.database.v1.EncryptionInfo"
+      optional :version_retention_period, :string, 6
+      optional :earliest_version_time, :message, 7, "google.protobuf.Timestamp"
     end
     add_enum "google.spanner.admin.database.v1.Database.State" do
       value :STATE_UNSPECIFIED, 0
@@ -47,6 +51,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :parent, :string, 1
       optional :create_statement, :string, 2
       repeated :extra_statements, :string, 3
+      optional :encryption_config, :message, 4, "google.spanner.admin.database.v1.EncryptionConfig"
     end
     add_message "google.spanner.admin.database.v1.CreateDatabaseMetadata" do
       optional :database, :string, 1
@@ -64,6 +69,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       repeated :statements, :string, 2
       repeated :commit_timestamps, :message, 3, "google.protobuf.Timestamp"
       optional :throttled, :bool, 4
+      repeated :progress, :message, 5, "google.spanner.admin.database.v1.OperationProgress"
     end
     add_message "google.spanner.admin.database.v1.DropDatabaseRequest" do
       optional :database, :string, 1
@@ -87,10 +93,21 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
     add_message "google.spanner.admin.database.v1.RestoreDatabaseRequest" do
       optional :parent, :string, 1
       optional :database_id, :string, 2
+      optional :encryption_config, :message, 4, "google.spanner.admin.database.v1.RestoreDatabaseEncryptionConfig"
       oneof :source do
         optional :backup, :string, 3
       end
     end
+    add_message "google.spanner.admin.database.v1.RestoreDatabaseEncryptionConfig" do
+      optional :encryption_type, :enum, 1, "google.spanner.admin.database.v1.RestoreDatabaseEncryptionConfig.EncryptionType"
+      optional :kms_key_name, :string, 2
+    end
+    add_enum "google.spanner.admin.database.v1.RestoreDatabaseEncryptionConfig.EncryptionType" do
+      value :ENCRYPTION_TYPE_UNSPECIFIED, 0
+      value :USE_CONFIG_DEFAULT_OR_BACKUP_ENCRYPTION, 1
+      value :GOOGLE_DEFAULT_ENCRYPTION, 2
+      value :CUSTOMER_MANAGED_ENCRYPTION, 3
+    end
     add_message "google.spanner.admin.database.v1.RestoreDatabaseMetadata" do
       optional :name, :string, 1
       optional :source_type, :enum, 2, "google.spanner.admin.database.v1.RestoreSourceType"
@@ -134,6 +151,8 @@ module Google
             ListDatabaseOperationsRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.spanner.admin.database.v1.ListDatabaseOperationsRequest").msgclass
             ListDatabaseOperationsResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.spanner.admin.database.v1.ListDatabaseOperationsResponse").msgclass
             RestoreDatabaseRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.spanner.admin.database.v1.RestoreDatabaseRequest").msgclass
+            RestoreDatabaseEncryptionConfig = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.spanner.admin.database.v1.RestoreDatabaseEncryptionConfig").msgclass
+            RestoreDatabaseEncryptionConfig::EncryptionType = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.spanner.admin.database.v1.RestoreDatabaseEncryptionConfig.EncryptionType").enummodule
             RestoreDatabaseMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.spanner.admin.database.v1.RestoreDatabaseMetadata").msgclass
             OptimizeRestoredDatabaseMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.spanner.admin.database.v1.OptimizeRestoredDatabaseMetadata").msgclass
             RestoreSourceType = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.spanner.admin.database.v1.RestoreSourceType").enummodule

data/proto_docs/google/api/field_behavior.rb

@@ -54,6 +54,12 @@ module Google
       # This indicates that the field may be set once in a request to create a
       # resource, but may not be changed thereafter.
       IMMUTABLE = 5
+
+      # Denotes that a (repeated) field is an unordered list.
+      # This indicates that the service may provide the elements of the list
+      # in any arbitrary order, rather than the order the user originally
+      # provided. Additionally, the list's order may or may not be stable.
+      UNORDERED_LIST = 6
     end
   end
 end

data/proto_docs/google/longrunning/operations.rb

@@ -25,7 +25,7 @@ module Google
     #   @return [::String]
     #     The server-assigned name, which is only unique within the same service that
     #     originally returns it. If you use the default HTTP mapping, the
-    #     `name` should have the format of `operations/some/unique/name`.
+    #     `name` should be a resource name ending with `operations/{unique_id}`.
     # @!attribute [rw] metadata
     #   @return [::Google::Protobuf::Any]
     #     Service-specific metadata associated with the operation.  It typically
@@ -35,7 +35,7 @@ module Google
     # @!attribute [rw] done
     #   @return [::Boolean]
     #     If the value is `false`, it means the operation is still in progress.
-    #     If true, the operation is completed, and either `error` or `response` is
+    #     If `true`, the operation is completed, and either `error` or `response` is
     #     available.
     # @!attribute [rw] error
     #   @return [::Google::Rpc::Status]
@@ -67,7 +67,7 @@ module Google
     # The request message for Operations.ListOperations.
     # @!attribute [rw] name
     #   @return [::String]
-    #     The name of the operation collection.
+    #     The name of the operation's parent resource.
     # @!attribute [rw] filter
     #   @return [::String]
     #     The standard list filter.
@@ -112,6 +112,20 @@ module Google
       extend ::Google::Protobuf::MessageExts::ClassMethods
     end
 
+    # The request message for Operations.WaitOperation.
+    # @!attribute [rw] name
+    #   @return [::String]
+    #     The name of the operation resource to wait on.
+    # @!attribute [rw] timeout
+    #   @return [::Google::Protobuf::Duration]
+    #     The maximum duration to wait before timing out. If left blank, the wait
+    #     will be at most the time permitted by the underlying HTTP/RPC protocol.
+    #     If RPC context deadline is also specified, the shorter one will be used.
+    class WaitOperationRequest
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+    end
+
     # A message representing the message types used by a long-running operation.
     #
     # Example:

data/proto_docs/google/protobuf/any.rb

@@ -57,10 +57,13 @@ module Google
     #  Example 4: Pack and unpack a message in Go
     #
     #      foo := &pb.Foo{...}
-    #      any, err := ptypes.MarshalAny(foo)
+    #      any, err := anypb.New(foo)
+    #      if err != nil {
+    #        ...
+    #      }
     #      ...
     #      foo := &pb.Foo{}
-    #      if err := ptypes.UnmarshalAny(any, foo); err != nil {
+    #      if err := any.UnmarshalTo(foo); err != nil {
     #        ...
     #      }
     #

data/proto_docs/google/protobuf/duration.rb

@@ -0,0 +1,98 @@
+# frozen_string_literal: true
+
+# Copyright 2021 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Protobuf
+    # A Duration represents a signed, fixed-length span of time represented
+    # as a count of seconds and fractions of seconds at nanosecond
+    # resolution. It is independent of any calendar and concepts like "day"
+    # or "month". It is related to Timestamp in that the difference between
+    # two Timestamp values is a Duration and it can be added or subtracted
+    # from a Timestamp. Range is approximately +-10,000 years.
+    #
+    # # Examples
+    #
+    # Example 1: Compute Duration from two Timestamps in pseudo code.
+    #
+    #     Timestamp start = ...;
+    #     Timestamp end = ...;
+    #     Duration duration = ...;
+    #
+    #     duration.seconds = end.seconds - start.seconds;
+    #     duration.nanos = end.nanos - start.nanos;
+    #
+    #     if (duration.seconds < 0 && duration.nanos > 0) {
+    #       duration.seconds += 1;
+    #       duration.nanos -= 1000000000;
+    #     } else if (duration.seconds > 0 && duration.nanos < 0) {
+    #       duration.seconds -= 1;
+    #       duration.nanos += 1000000000;
+    #     }
+    #
+    # Example 2: Compute Timestamp from Timestamp + Duration in pseudo code.
+    #
+    #     Timestamp start = ...;
+    #     Duration duration = ...;
+    #     Timestamp end = ...;
+    #
+    #     end.seconds = start.seconds + duration.seconds;
+    #     end.nanos = start.nanos + duration.nanos;
+    #
+    #     if (end.nanos < 0) {
+    #       end.seconds -= 1;
+    #       end.nanos += 1000000000;
+    #     } else if (end.nanos >= 1000000000) {
+    #       end.seconds += 1;
+    #       end.nanos -= 1000000000;
+    #     }
+    #
+    # Example 3: Compute Duration from datetime.timedelta in Python.
+    #
+    #     td = datetime.timedelta(days=3, minutes=10)
+    #     duration = Duration()
+    #     duration.FromTimedelta(td)
+    #
+    # # JSON Mapping
+    #
+    # In JSON format, the Duration type is encoded as a string rather than an
+    # object, where the string ends in the suffix "s" (indicating seconds) and
+    # is preceded by the number of seconds, with nanoseconds expressed as
+    # fractional seconds. For example, 3 seconds with 0 nanoseconds should be
+    # encoded in JSON format as "3s", while 3 seconds and 1 nanosecond should
+    # be expressed in JSON format as "3.000000001s", and 3 seconds and 1
+    # microsecond should be expressed in JSON format as "3.000001s".
+    # @!attribute [rw] seconds
+    #   @return [::Integer]
+    #     Signed seconds of the span of time. Must be from -315,576,000,000
+    #     to +315,576,000,000 inclusive. Note: these bounds are computed from:
+    #     60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
+    # @!attribute [rw] nanos
+    #   @return [::Integer]
+    #     Signed fractions of a second at nanosecond resolution of the span
+    #     of time. Durations less than one second are represented with a 0
+    #     `seconds` field and a positive or negative `nanos` field. For durations
+    #     of one second or more, a non-zero value for the `nanos` field must be
+    #     of the same sign as the `seconds` field. Must be from -999,999,999
+    #     to +999,999,999 inclusive.
+    class Duration
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+    end
+  end
+end

data/proto_docs/google/protobuf/timestamp.rb

@@ -70,7 +70,16 @@ module Google
     #         .setNanos((int) ((millis % 1000) * 1000000)).build();
     #
     #
-    # Example 5: Compute Timestamp from current time in Python.
+    # Example 5: Compute Timestamp from Java `Instant.now()`.
+    #
+    #     Instant now = Instant.now();
+    #
+    #     Timestamp timestamp =
+    #         Timestamp.newBuilder().setSeconds(now.getEpochSecond())
+    #             .setNanos(now.getNano()).build();
+    #
+    #
+    # Example 6: Compute Timestamp from current time in Python.
     #
     #     timestamp = Timestamp()
     #     timestamp.GetCurrentTime()

data/proto_docs/google/spanner/admin/database/v1/backup.rb

@@ -31,6 +31,12 @@ module Google
             #     created. This needs to be in the same instance as the backup.
             #     Values are of the form
             #     `projects/<project>/instances/<instance>/databases/<database>`.
+            # @!attribute [rw] version_time
+            #   @return [::Google::Protobuf::Timestamp]
+            #     The backup will contain an externally consistent copy of the database at
+            #     the timestamp specified by `version_time`. If `version_time` is not
+            #     specified, the system will set `version_time` to the `create_time` of the
+            #     backup.
             # @!attribute [rw] expire_time
             #   @return [::Google::Protobuf::Timestamp]
             #     Required for the {::Google::Cloud::Spanner::Admin::Database::V1::DatabaseAdmin::Client#create_backup CreateBackup}
@@ -56,10 +62,9 @@ module Google
             #     `projects/<project>/instances/<instance>`.
             # @!attribute [r] create_time
             #   @return [::Google::Protobuf::Timestamp]
-            #     Output only. The backup will contain an externally consistent
-            #     copy of the database at the timestamp specified by
-            #     `create_time`. `create_time` is approximately the time the
-            #     {::Google::Cloud::Spanner::Admin::Database::V1::DatabaseAdmin::Client#create_backup CreateBackup} request is received.
+            #     Output only. The time the {::Google::Cloud::Spanner::Admin::Database::V1::DatabaseAdmin::Client#create_backup CreateBackup}
+            #     request is received. If the request does not specify `version_time`, the
+            #     `version_time` of the backup will be equivalent to the `create_time`.
             # @!attribute [r] size_bytes
             #   @return [::Integer]
             #     Output only. Size of the backup in bytes.
@@ -75,6 +80,9 @@ module Google
             #     any referencing database prevents the backup from being deleted. When a
             #     restored database from the backup enters the `READY` state, the reference
             #     to the backup is removed.
+            # @!attribute [r] encryption_info
+            #   @return [::Google::Cloud::Spanner::Admin::Database::V1::EncryptionInfo]
+            #     Output only. The encryption information for the backup.
             class Backup
               include ::Google::Protobuf::MessageExts
               extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -110,6 +118,13 @@ module Google
             # @!attribute [rw] backup
             #   @return [::Google::Cloud::Spanner::Admin::Database::V1::Backup]
             #     Required. The backup to create.
+            # @!attribute [rw] encryption_config
+            #   @return [::Google::Cloud::Spanner::Admin::Database::V1::CreateBackupEncryptionConfig]
+            #     Optional. The encryption configuration used to encrypt the backup. If this field is
+            #     not specified, the backup will use the same
+            #     encryption configuration as the database by default, namely
+            #     {::Google::Cloud::Spanner::Admin::Database::V1::CreateBackupEncryptionConfig#encryption_type encryption_type} =
+            #     `USE_DATABASE_ENCRYPTION`.
             class CreateBackupRequest
               include ::Google::Protobuf::MessageExts
               extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -138,7 +153,8 @@ module Google
             #     other methods to check whether the cancellation succeeded or whether the
             #     operation completed despite cancellation. On successful cancellation,
             #     the operation is not deleted; instead, it becomes an operation with
-            #     an [Operation.error][] value with a {::Google::Rpc::Status#code google.rpc.Status.code} of 1,
+            #     an {::Google::Longrunning::Operation#error Operation.error} value with a
+            #     {::Google::Rpc::Status#code google.rpc.Status.code} of 1,
             #     corresponding to `Code.CANCELLED`.
             class CreateBackupMetadata
               include ::Google::Protobuf::MessageExts
@@ -206,8 +222,9 @@ module Google
             #       * `name`
             #       * `database`
             #       * `state`
-            #       * `create_time` (and values are of the format YYYY-MM-DDTHH:MM:SSZ)
-            #       * `expire_time` (and values are of the format YYYY-MM-DDTHH:MM:SSZ)
+            #       * `create_time`  (and values are of the format YYYY-MM-DDTHH:MM:SSZ)
+            #       * `expire_time`  (and values are of the format YYYY-MM-DDTHH:MM:SSZ)
+            #       * `version_time` (and values are of the format YYYY-MM-DDTHH:MM:SSZ)
             #       * `size_bytes`
             #
             #     You can combine multiple expressions by enclosing each expression in
@@ -295,9 +312,9 @@ module Google
             #       * `done:true` - The operation is complete.
             #       * `metadata.database:prod` - The database the backup was taken from has
             #          a name containing the string "prod".
-            #       * `(metadata.@type=type.googleapis.com/google.spanner.admin.database.v1.CreateBackupMetadata) AND` <br/>
-            #         `(metadata.name:howl) AND` <br/>
-            #         `(metadata.progress.start_time < \"2018-03-28T14:50:00Z\") AND` <br/>
+            #       * `(metadata.@type=type.googleapis.com/google.spanner.admin.database.v1.CreateBackupMetadata) AND` \
+            #         `(metadata.name:howl) AND` \
+            #         `(metadata.progress.start_time < \"2018-03-28T14:50:00Z\") AND` \
             #         `(error:*)` - Returns operations where:
             #         * The operation's metadata type is {::Google::Cloud::Spanner::Admin::Database::V1::CreateBackupMetadata CreateBackupMetadata}.
             #         * The backup name contains the string "howl".
@@ -345,10 +362,17 @@ module Google
             # @!attribute [rw] backup
             #   @return [::String]
             #     Name of the backup.
-            # @!attribute [rw] create_time
+            # @!attribute [rw] version_time
             #   @return [::Google::Protobuf::Timestamp]
             #     The backup contains an externally consistent copy of `source_database` at
-            #     the timestamp specified by `create_time`.
+            #     the timestamp specified by `version_time`. If the
+            #     {::Google::Cloud::Spanner::Admin::Database::V1::DatabaseAdmin::Client#create_backup CreateBackup} request did not specify
+            #     `version_time`, the `version_time` of the backup is equivalent to the
+            #     `create_time`.
+            # @!attribute [rw] create_time
+            #   @return [::Google::Protobuf::Timestamp]
+            #     The time the {::Google::Cloud::Spanner::Admin::Database::V1::DatabaseAdmin::Client#create_backup CreateBackup} request was
+            #     received.
             # @!attribute [rw] source_database
             #   @return [::String]
             #     Name of the database the backup was created from.
@@ -356,6 +380,42 @@ module Google
               include ::Google::Protobuf::MessageExts
               extend ::Google::Protobuf::MessageExts::ClassMethods
             end
+
+            # Encryption configuration for the backup to create.
+            # @!attribute [rw] encryption_type
+            #   @return [::Google::Cloud::Spanner::Admin::Database::V1::CreateBackupEncryptionConfig::EncryptionType]
+            #     Required. The encryption type of the backup.
+            # @!attribute [rw] kms_key_name
+            #   @return [::String]
+            #     Optional. The Cloud KMS key that will be used to protect the backup.
+            #     This field should be set only when
+            #     {::Google::Cloud::Spanner::Admin::Database::V1::CreateBackupEncryptionConfig#encryption_type encryption_type} is
+            #     `CUSTOMER_MANAGED_ENCRYPTION`. Values are of the form
+            #     `projects/<project>/locations/<location>/keyRings/<key_ring>/cryptoKeys/<kms_key_name>`.
+            class CreateBackupEncryptionConfig
+              include ::Google::Protobuf::MessageExts
+              extend ::Google::Protobuf::MessageExts::ClassMethods
+
+              # Encryption types for the backup.
+              module EncryptionType
+                # Unspecified. Do not use.
+                ENCRYPTION_TYPE_UNSPECIFIED = 0
+
+                # Use the same encryption configuration as the database. This is the
+                # default option when
+                # {::Google::Cloud::Spanner::Admin::Database::V1::CreateBackupEncryptionConfig encryption_config} is empty.
+                # For example, if the database is using `Customer_Managed_Encryption`, the
+                # backup will be using the same Cloud KMS key as the database.
+                USE_DATABASE_ENCRYPTION = 1
+
+                # Use Google default encryption.
+                GOOGLE_DEFAULT_ENCRYPTION = 2
+
+                # Use customer managed encryption. If specified, `kms_key_name`
+                # must contain a valid Cloud KMS key.
+                CUSTOMER_MANAGED_ENCRYPTION = 3
+              end
+            end
           end
         end
       end