@googleapis/sqladmin 34.1.0 → 34.2.1

package/v1beta4.ts

@@ -1564,6 +1564,23 @@ export namespace sqladmin_v1beta4 {
      */
     importContext?: Schema$ImportContext;
   }
+  /**
+   * Instances ListEntraIdCertificates response.
+   */
+  export interface Schema$InstancesListEntraIdCertificatesResponse {
+    /**
+     * The `sha1_fingerprint` of the active certificate from `certs`.
+     */
+    activeVersion?: string | null;
+    /**
+     * List of Entra ID certificates for the instance.
+     */
+    certs?: Schema$SslCert[];
+    /**
+     * This is always `sql#instancesListEntraIdCertificates`.
+     */
+    kind?: string | null;
+  }
   /**
    * Database instances list response.
    */
@@ -1663,6 +1680,15 @@ export namespace sqladmin_v1beta4 {
      */
     restoreInstanceSettings?: Schema$DatabaseInstance;
   }
+  /**
+   * Rotate Entra ID Certificate request.
+   */
+  export interface Schema$InstancesRotateEntraIdCertificateRequest {
+    /**
+     * Optional. Contains details about the rotate Entra ID certificate operation.
+     */
+    rotateEntraIdCertificateContext?: Schema$RotateEntraIdCertificateContext;
+  }
   /**
    * Rotate Server CA request.
    */
@@ -1747,6 +1773,10 @@ export namespace sqladmin_v1beta4 {
      * Optional. The resource name of the server CA pool for an instance with `CUSTOMER_MANAGED_CAS_CA` as the `server_ca_mode`. Format: projects/{PROJECT\}/locations/{REGION\}/caPools/{CA_POOL_ID\}
      */
     serverCaPool?: string | null;
+    /**
+     * Optional. Controls the automatic server certificate rotation feature. This feature is disabled by default. When enabled, the server certificate will be automatically rotated during Cloud SQL scheduled maintenance or self-service maintenance updates up to six months before it expires. This setting can only be set if server_ca_mode is either GOOGLE_MANAGED_CAS_CA or CUSTOMER_MANAGED_CAS_CA.
+     */
+    serverCertificateRotationMode?: string | null;
     /**
      * Specify how SSL/TLS is enforced in database connections. If you must use the `require_ssl` flag for backward compatibility, then only the following value pairs are valid: For PostgreSQL and MySQL: * `ssl_mode=ALLOW_UNENCRYPTED_AND_ENCRYPTED` and `require_ssl=false` * `ssl_mode=ENCRYPTED_ONLY` and `require_ssl=false` * `ssl_mode=TRUSTED_CLIENT_CERTIFICATE_REQUIRED` and `require_ssl=true` For SQL Server: * `ssl_mode=ALLOW_UNENCRYPTED_AND_ENCRYPTED` and `require_ssl=false` * `ssl_mode=ENCRYPTED_ONLY` and `require_ssl=true` The value of `ssl_mode` has priority over the value of `require_ssl`. For example, for the pair `ssl_mode=ENCRYPTED_ONLY` and `require_ssl=false`, `ssl_mode=ENCRYPTED_ONLY` means accept only SSL connections, while `require_ssl=false` means accept both non-SSL and SSL connections. In this case, MySQL and PostgreSQL databases respect `ssl_mode` and accepts only SSL connections.
      */
@@ -2175,7 +2205,7 @@ export namespace sqladmin_v1beta4 {
     targetSizeGb?: string | null;
   }
   /**
-   * Context to perform a point-in-time restore of an instance managed by Google Cloud Backup and Disaster Recovery.
+   * Context to perform a point-in-time restore of an instance managed by Backup and Disaster Recovery (DR) Service.
    */
   export interface Schema$PointInTimeRestoreContext {
     /**
@@ -2183,7 +2213,7 @@ export namespace sqladmin_v1beta4 {
      */
     allocatedIpRange?: string | null;
     /**
-     * The Google Cloud Backup and Disaster Recovery Datasource URI. Format: projects/{project\}/locations/{region\}/backupVaults/{backupvault\}/dataSources/{datasource\}.
+     * The Backup and Disaster Recovery (DR) Service Datasource URI. Format: projects/{project\}/locations/{region\}/backupVaults/{backupvault\}/dataSources/{datasource\}.
      */
     datasource?: string | null;
     /**
@@ -2443,6 +2473,19 @@ export namespace sqladmin_v1beta4 {
      */
     project?: string | null;
   }
+  /**
+   * Instance rotate Entra ID certificate context.
+   */
+  export interface Schema$RotateEntraIdCertificateContext {
+    /**
+     * Optional. This is always `sql#rotateEntraIdCertificateContext`.
+     */
+    kind?: string | null;
+    /**
+     * Optional. The fingerprint of the next version to be rotated to. If left unspecified, will be rotated to the most recently added Entra ID certificate version.
+     */
+    nextVersion?: string | null;
+  }
   /**
    * Instance rotate server CA context.
    */
@@ -2536,7 +2579,7 @@ export namespace sqladmin_v1beta4 {
      */
     crashSafeReplicationEnabled?: boolean | null;
     /**
-     * This parameter controls whether to allow using Data API to connect to the instance. Not allowed by default.
+     * This parameter controls whether to allow using ExecuteSql API to connect to the instance. Not allowed by default.
      */
     dataApiAccess?: string | null;
     /**
@@ -2587,6 +2630,10 @@ export namespace sqladmin_v1beta4 {
      * Optional. When this parameter is set to true, Cloud SQL instances can connect to Vertex AI to pass requests for real-time predictions and insights to the AI. The default value is false. This applies only to Cloud SQL for MySQL and Cloud SQL for PostgreSQL instances.
      */
     enableGoogleMlIntegration?: boolean | null;
+    /**
+     * Optional. The Microsoft Entra ID configuration for the SQL Server instance.
+     */
+    entraidConfig?: Schema$SqlServerEntraIdConfig;
     /**
      * Optional. The final backup configuration for the instance.
      */
@@ -2719,6 +2766,10 @@ export namespace sqladmin_v1beta4 {
      */
     operationId?: string | null;
   }
+  /**
+   * Request for AddEntraIdCertificate RPC.
+   */
+  export interface Schema$SqlInstancesAddEntraIdCertificateRequest {}
   /**
    * Execute SQL statements response.
    */
@@ -2934,6 +2985,23 @@ export namespace sqladmin_v1beta4 {
      */
     recoveryModel?: string | null;
   }
+  /**
+   * SQL Server Entra ID configuration.
+   */
+  export interface Schema$SqlServerEntraIdConfig {
+    /**
+     * Optional. The application ID for the Entra ID configuration.
+     */
+    applicationId?: string | null;
+    /**
+     * Output only. This is always sql#sqlServerEntraIdConfig
+     */
+    kind?: string | null;
+    /**
+     * Optional. The tenant ID for the Entra ID configuration.
+     */
+    tenantId?: string | null;
+  }
   /**
    * Represents a Sql Server user on the Cloud SQL instance.
    */
@@ -3164,6 +3232,10 @@ export namespace sqladmin_v1beta4 {
    * A Cloud SQL user resource.
    */
   export interface Schema$User {
+    /**
+     * Optional. Role memberships of the user
+     */
+    databaseRoles?: string[] | null;
     /**
      * Dual password status for the user.
      */
@@ -3937,8 +4009,7 @@ export namespace sqladmin_v1beta4 {
     }
   }
 
-  export interface Params$Resource$Backupruns$Delete
-    extends StandardParameters {
+  export interface Params$Resource$Backupruns$Delete extends StandardParameters {
     /**
      * The ID of the backup run to delete. To find a backup run ID, use the [list](https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/backupRuns/list) method.
      */
@@ -3966,8 +4037,7 @@ export namespace sqladmin_v1beta4 {
      */
     project?: string;
   }
-  export interface Params$Resource$Backupruns$Insert
-    extends StandardParameters {
+  export interface Params$Resource$Backupruns$Insert extends StandardParameters {
     /**
      * Cloud SQL instance ID. This does not include the project ID.
      */
@@ -4859,8 +4929,7 @@ export namespace sqladmin_v1beta4 {
     }
   }
 
-  export interface Params$Resource$Backups$Createbackup
-    extends StandardParameters {
+  export interface Params$Resource$Backups$Createbackup extends StandardParameters {
     /**
      * Required. The parent resource where this backup is created. Format: projects/{project\}
      */
@@ -4871,22 +4940,19 @@ export namespace sqladmin_v1beta4 {
      */
     requestBody?: Schema$Backup;
   }
-  export interface Params$Resource$Backups$Deletebackup
-    extends StandardParameters {
+  export interface Params$Resource$Backups$Deletebackup extends StandardParameters {
     /**
      * Required. The name of the backup to delete. Format: projects/{project\}/backups/{backup\}
      */
     name?: string;
   }
-  export interface Params$Resource$Backups$Getbackup
-    extends StandardParameters {
+  export interface Params$Resource$Backups$Getbackup extends StandardParameters {
     /**
      * Required. The name of the backup to retrieve. Format: projects/{project\}/backups/{backup\}
      */
     name?: string;
   }
-  export interface Params$Resource$Backups$Listbackups
-    extends StandardParameters {
+  export interface Params$Resource$Backups$Listbackups extends StandardParameters {
     /**
      * Multiple filter queries are separated by spaces. For example, 'instance:abc AND type:FINAL, 'location:us', 'backupInterval.startTime\>=1950-01-01T01:01:25.771Z'. You can filter by type, instance, backupInterval.startTime (creation time), or location.
      */
@@ -4904,8 +4970,7 @@ export namespace sqladmin_v1beta4 {
      */
     parent?: string;
   }
-  export interface Params$Resource$Backups$Updatebackup
-    extends StandardParameters {
+  export interface Params$Resource$Backups$Updatebackup extends StandardParameters {
     /**
      * Output only. The resource name of the backup. Format: projects/{project\}/backups/{backup\}.
      */
@@ -5243,8 +5308,7 @@ export namespace sqladmin_v1beta4 {
     }
   }
 
-  export interface Params$Resource$Connect$Generateephemeralcert
-    extends StandardParameters {
+  export interface Params$Resource$Connect$Generateephemeralcert extends StandardParameters {
     /**
      * Cloud SQL instance ID. This does not include the project ID.
      */
@@ -6685,6 +6749,175 @@ export namespace sqladmin_v1beta4 {
       }
     }
 
+    /**
+     * Adds a new Entra ID certificate for the specified instance. If an Entra ID certificate was previously added but never used in a certificate rotation, this operation replaces that version.
+     * @example
+     * ```js
+     * // Before running the sample:
+     * // - Enable the API at:
+     * //   https://console.developers.google.com/apis/api/sqladmin.googleapis.com
+     * // - Login into gcloud by running:
+     * //   ```sh
+     * //   $ gcloud auth application-default login
+     * //   ```
+     * // - Install the npm module by running:
+     * //   ```sh
+     * //   $ npm install googleapis
+     * //   ```
+     *
+     * const {google} = require('googleapis');
+     * const sqladmin = google.sqladmin('v1beta4');
+     *
+     * async function main() {
+     *   const auth = new google.auth.GoogleAuth({
+     *     // Scopes can be specified either as an array or as a single, space-delimited string.
+     *     scopes: [
+     *       'https://www.googleapis.com/auth/cloud-platform',
+     *       'https://www.googleapis.com/auth/sqlservice.admin',
+     *     ],
+     *   });
+     *
+     *   // Acquire an auth client, and bind it to all future calls
+     *   const authClient = await auth.getClient();
+     *   google.options({auth: authClient});
+     *
+     *   // Do the magic
+     *   const res = await sql.instances.addEntraIdCertificate({
+     *     // Required. Cloud SQL instance ID. This does not include the project ID.
+     *     instance: 'placeholder-value',
+     *     // Required. Project ID of the project that contains the instance.
+     *     project: 'placeholder-value',
+     *
+     *     // Request body metadata
+     *     requestBody: {
+     *       // request body parameters
+     *       // {}
+     *     },
+     *   });
+     *   console.log(res.data);
+     *
+     *   // Example response
+     *   // {
+     *   //   "acquireSsrsLeaseContext": {},
+     *   //   "apiWarning": {},
+     *   //   "backupContext": {},
+     *   //   "endTime": "my_endTime",
+     *   //   "error": {},
+     *   //   "exportContext": {},
+     *   //   "importContext": {},
+     *   //   "insertTime": "my_insertTime",
+     *   //   "kind": "my_kind",
+     *   //   "name": "my_name",
+     *   //   "operationType": "my_operationType",
+     *   //   "preCheckMajorVersionUpgradeContext": {},
+     *   //   "selfLink": "my_selfLink",
+     *   //   "startTime": "my_startTime",
+     *   //   "status": "my_status",
+     *   //   "subOperationType": {},
+     *   //   "targetId": "my_targetId",
+     *   //   "targetLink": "my_targetLink",
+     *   //   "targetProject": "my_targetProject",
+     *   //   "user": "my_user"
+     *   // }
+     * }
+     *
+     * main().catch(e => {
+     *   console.error(e);
+     *   throw e;
+     * });
+     *
+     * ```
+     *
+     * @param params - Parameters for request
+     * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
+     * @param callback - Optional callback that handles the response.
+     * @returns A promise if used with async/await, or void if used with a callback.
+     */
+    addEntraIdCertificate(
+      params: Params$Resource$Instances$Addentraidcertificate,
+      options: StreamMethodOptions
+    ): Promise<GaxiosResponseWithHTTP2<Readable>>;
+    addEntraIdCertificate(
+      params?: Params$Resource$Instances$Addentraidcertificate,
+      options?: MethodOptions
+    ): Promise<GaxiosResponseWithHTTP2<Schema$Operation>>;
+    addEntraIdCertificate(
+      params: Params$Resource$Instances$Addentraidcertificate,
+      options: StreamMethodOptions | BodyResponseCallback<Readable>,
+      callback: BodyResponseCallback<Readable>
+    ): void;
+    addEntraIdCertificate(
+      params: Params$Resource$Instances$Addentraidcertificate,
+      options: MethodOptions | BodyResponseCallback<Schema$Operation>,
+      callback: BodyResponseCallback<Schema$Operation>
+    ): void;
+    addEntraIdCertificate(
+      params: Params$Resource$Instances$Addentraidcertificate,
+      callback: BodyResponseCallback<Schema$Operation>
+    ): void;
+    addEntraIdCertificate(
+      callback: BodyResponseCallback<Schema$Operation>
+    ): void;
+    addEntraIdCertificate(
+      paramsOrCallback?:
+        | Params$Resource$Instances$Addentraidcertificate
+        | BodyResponseCallback<Schema$Operation>
+        | BodyResponseCallback<Readable>,
+      optionsOrCallback?:
+        | MethodOptions
+        | StreamMethodOptions
+        | BodyResponseCallback<Schema$Operation>
+        | BodyResponseCallback<Readable>,
+      callback?:
+        | BodyResponseCallback<Schema$Operation>
+        | BodyResponseCallback<Readable>
+    ):
+      | void
+      | Promise<GaxiosResponseWithHTTP2<Schema$Operation>>
+      | Promise<GaxiosResponseWithHTTP2<Readable>> {
+      let params = (paramsOrCallback ||
+        {}) as Params$Resource$Instances$Addentraidcertificate;
+      let options = (optionsOrCallback || {}) as MethodOptions;
+
+      if (typeof paramsOrCallback === 'function') {
+        callback = paramsOrCallback;
+        params = {} as Params$Resource$Instances$Addentraidcertificate;
+        options = {};
+      }
+
+      if (typeof optionsOrCallback === 'function') {
+        callback = optionsOrCallback;
+        options = {};
+      }
+
+      const rootUrl = options.rootUrl || 'https://sqladmin.googleapis.com/';
+      const parameters = {
+        options: Object.assign(
+          {
+            url: (
+              rootUrl +
+              '/sql/v1beta4/projects/{project}/instances/{instance}/addEntraIdCertificate'
+            ).replace(/([^:]\/)\/+/g, '$1'),
+            method: 'POST',
+            apiVersion: '',
+          },
+          options
+        ),
+        params,
+        requiredParams: ['project', 'instance'],
+        pathParams: ['instance', 'project'],
+        context: this.context,
+      };
+      if (callback) {
+        createAPIRequest<Schema$Operation>(
+          parameters,
+          callback as BodyResponseCallback<unknown>
+        );
+      } else {
+        return createAPIRequest<Schema$Operation>(parameters);
+      }
+    }
+
     /**
      * Add a new trusted Certificate Authority (CA) version for the specified instance. Required to prepare for a certificate rotation. If a CA version was previously added but never used in a certificate rotation, this operation replaces that version. There cannot be more than one CA version waiting to be rotated in. For instances that have enabled Certificate Authority Service (CAS) based server CA, use AddServerCertificate to add a new server certificate.
      * @example
@@ -8898,6 +9131,160 @@ export namespace sqladmin_v1beta4 {
       }
     }
 
+    /**
+     * Lists all versions of EntraID certificates for the specified instance. There can be up to three sets of certificates listed: the certificate that is currently in use, a future that has been added but not yet used to sign a certificate, and a certificate that has been rotated out.
+     * @example
+     * ```js
+     * // Before running the sample:
+     * // - Enable the API at:
+     * //   https://console.developers.google.com/apis/api/sqladmin.googleapis.com
+     * // - Login into gcloud by running:
+     * //   ```sh
+     * //   $ gcloud auth application-default login
+     * //   ```
+     * // - Install the npm module by running:
+     * //   ```sh
+     * //   $ npm install googleapis
+     * //   ```
+     *
+     * const {google} = require('googleapis');
+     * const sqladmin = google.sqladmin('v1beta4');
+     *
+     * async function main() {
+     *   const auth = new google.auth.GoogleAuth({
+     *     // Scopes can be specified either as an array or as a single, space-delimited string.
+     *     scopes: [
+     *       'https://www.googleapis.com/auth/cloud-platform',
+     *       'https://www.googleapis.com/auth/sqlservice.admin',
+     *     ],
+     *   });
+     *
+     *   // Acquire an auth client, and bind it to all future calls
+     *   const authClient = await auth.getClient();
+     *   google.options({auth: authClient});
+     *
+     *   // Do the magic
+     *   const res = await sql.instances.ListEntraIdCertificates({
+     *     // Required. Cloud SQL instance ID. This does not include the project ID.
+     *     instance: 'placeholder-value',
+     *     // Required. Project ID of the project that contains the instance.
+     *     project: 'placeholder-value',
+     *   });
+     *   console.log(res.data);
+     *
+     *   // Example response
+     *   // {
+     *   //   "activeVersion": "my_activeVersion",
+     *   //   "certs": [],
+     *   //   "kind": "my_kind"
+     *   // }
+     * }
+     *
+     * main().catch(e => {
+     *   console.error(e);
+     *   throw e;
+     * });
+     *
+     * ```
+     *
+     * @param params - Parameters for request
+     * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
+     * @param callback - Optional callback that handles the response.
+     * @returns A promise if used with async/await, or void if used with a callback.
+     */
+    ListEntraIdCertificates(
+      params: Params$Resource$Instances$Listentraidcertificates,
+      options: StreamMethodOptions
+    ): Promise<GaxiosResponseWithHTTP2<Readable>>;
+    ListEntraIdCertificates(
+      params?: Params$Resource$Instances$Listentraidcertificates,
+      options?: MethodOptions
+    ): Promise<
+      GaxiosResponseWithHTTP2<Schema$InstancesListEntraIdCertificatesResponse>
+    >;
+    ListEntraIdCertificates(
+      params: Params$Resource$Instances$Listentraidcertificates,
+      options: StreamMethodOptions | BodyResponseCallback<Readable>,
+      callback: BodyResponseCallback<Readable>
+    ): void;
+    ListEntraIdCertificates(
+      params: Params$Resource$Instances$Listentraidcertificates,
+      options:
+        | MethodOptions
+        | BodyResponseCallback<Schema$InstancesListEntraIdCertificatesResponse>,
+      callback: BodyResponseCallback<Schema$InstancesListEntraIdCertificatesResponse>
+    ): void;
+    ListEntraIdCertificates(
+      params: Params$Resource$Instances$Listentraidcertificates,
+      callback: BodyResponseCallback<Schema$InstancesListEntraIdCertificatesResponse>
+    ): void;
+    ListEntraIdCertificates(
+      callback: BodyResponseCallback<Schema$InstancesListEntraIdCertificatesResponse>
+    ): void;
+    ListEntraIdCertificates(
+      paramsOrCallback?:
+        | Params$Resource$Instances$Listentraidcertificates
+        | BodyResponseCallback<Schema$InstancesListEntraIdCertificatesResponse>
+        | BodyResponseCallback<Readable>,
+      optionsOrCallback?:
+        | MethodOptions
+        | StreamMethodOptions
+        | BodyResponseCallback<Schema$InstancesListEntraIdCertificatesResponse>
+        | BodyResponseCallback<Readable>,
+      callback?:
+        | BodyResponseCallback<Schema$InstancesListEntraIdCertificatesResponse>
+        | BodyResponseCallback<Readable>
+    ):
+      | void
+      | Promise<
+          GaxiosResponseWithHTTP2<Schema$InstancesListEntraIdCertificatesResponse>
+        >
+      | Promise<GaxiosResponseWithHTTP2<Readable>> {
+      let params = (paramsOrCallback ||
+        {}) as Params$Resource$Instances$Listentraidcertificates;
+      let options = (optionsOrCallback || {}) as MethodOptions;
+
+      if (typeof paramsOrCallback === 'function') {
+        callback = paramsOrCallback;
+        params = {} as Params$Resource$Instances$Listentraidcertificates;
+        options = {};
+      }
+
+      if (typeof optionsOrCallback === 'function') {
+        callback = optionsOrCallback;
+        options = {};
+      }
+
+      const rootUrl = options.rootUrl || 'https://sqladmin.googleapis.com/';
+      const parameters = {
+        options: Object.assign(
+          {
+            url: (
+              rootUrl +
+              '/sql/v1beta4/projects/{project}/instances/{instance}/listEntraIdCertificates'
+            ).replace(/([^:]\/)\/+/g, '$1'),
+            method: 'GET',
+            apiVersion: '',
+          },
+          options
+        ),
+        params,
+        requiredParams: ['project', 'instance'],
+        pathParams: ['instance', 'project'],
+        context: this.context,
+      };
+      if (callback) {
+        createAPIRequest<Schema$InstancesListEntraIdCertificatesResponse>(
+          parameters,
+          callback as BodyResponseCallback<unknown>
+        );
+      } else {
+        return createAPIRequest<Schema$InstancesListEntraIdCertificatesResponse>(
+          parameters
+        );
+      }
+    }
+
     /**
      * Lists all of the trusted Certificate Authorities (CAs) for the specified instance. There can be up to three CAs listed: the CA that was used to sign the certificate that is currently in use, a CA that has been added but not yet used to sign a certificate, and a CA used to sign a certificate that has previously rotated out.
      * @example
@@ -10744,6 +11131,177 @@ export namespace sqladmin_v1beta4 {
       }
     }
 
+    /**
+     * Rotates the Entra Id certificate version to one previously added with the addEntraIdCertificate method.
+     * @example
+     * ```js
+     * // Before running the sample:
+     * // - Enable the API at:
+     * //   https://console.developers.google.com/apis/api/sqladmin.googleapis.com
+     * // - Login into gcloud by running:
+     * //   ```sh
+     * //   $ gcloud auth application-default login
+     * //   ```
+     * // - Install the npm module by running:
+     * //   ```sh
+     * //   $ npm install googleapis
+     * //   ```
+     *
+     * const {google} = require('googleapis');
+     * const sqladmin = google.sqladmin('v1beta4');
+     *
+     * async function main() {
+     *   const auth = new google.auth.GoogleAuth({
+     *     // Scopes can be specified either as an array or as a single, space-delimited string.
+     *     scopes: [
+     *       'https://www.googleapis.com/auth/cloud-platform',
+     *       'https://www.googleapis.com/auth/sqlservice.admin',
+     *     ],
+     *   });
+     *
+     *   // Acquire an auth client, and bind it to all future calls
+     *   const authClient = await auth.getClient();
+     *   google.options({auth: authClient});
+     *
+     *   // Do the magic
+     *   const res = await sql.instances.RotateEntraIdCertificate({
+     *     // Required. Cloud SQL instance ID. This does not include the project ID.
+     *     instance: 'placeholder-value',
+     *     // Required. Project ID of the project that contains the instance.
+     *     project: 'placeholder-value',
+     *
+     *     // Request body metadata
+     *     requestBody: {
+     *       // request body parameters
+     *       // {
+     *       //   "rotateEntraIdCertificateContext": {}
+     *       // }
+     *     },
+     *   });
+     *   console.log(res.data);
+     *
+     *   // Example response
+     *   // {
+     *   //   "acquireSsrsLeaseContext": {},
+     *   //   "apiWarning": {},
+     *   //   "backupContext": {},
+     *   //   "endTime": "my_endTime",
+     *   //   "error": {},
+     *   //   "exportContext": {},
+     *   //   "importContext": {},
+     *   //   "insertTime": "my_insertTime",
+     *   //   "kind": "my_kind",
+     *   //   "name": "my_name",
+     *   //   "operationType": "my_operationType",
+     *   //   "preCheckMajorVersionUpgradeContext": {},
+     *   //   "selfLink": "my_selfLink",
+     *   //   "startTime": "my_startTime",
+     *   //   "status": "my_status",
+     *   //   "subOperationType": {},
+     *   //   "targetId": "my_targetId",
+     *   //   "targetLink": "my_targetLink",
+     *   //   "targetProject": "my_targetProject",
+     *   //   "user": "my_user"
+     *   // }
+     * }
+     *
+     * main().catch(e => {
+     *   console.error(e);
+     *   throw e;
+     * });
+     *
+     * ```
+     *
+     * @param params - Parameters for request
+     * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
+     * @param callback - Optional callback that handles the response.
+     * @returns A promise if used with async/await, or void if used with a callback.
+     */
+    RotateEntraIdCertificate(
+      params: Params$Resource$Instances$Rotateentraidcertificate,
+      options: StreamMethodOptions
+    ): Promise<GaxiosResponseWithHTTP2<Readable>>;
+    RotateEntraIdCertificate(
+      params?: Params$Resource$Instances$Rotateentraidcertificate,
+      options?: MethodOptions
+    ): Promise<GaxiosResponseWithHTTP2<Schema$Operation>>;
+    RotateEntraIdCertificate(
+      params: Params$Resource$Instances$Rotateentraidcertificate,
+      options: StreamMethodOptions | BodyResponseCallback<Readable>,
+      callback: BodyResponseCallback<Readable>
+    ): void;
+    RotateEntraIdCertificate(
+      params: Params$Resource$Instances$Rotateentraidcertificate,
+      options: MethodOptions | BodyResponseCallback<Schema$Operation>,
+      callback: BodyResponseCallback<Schema$Operation>
+    ): void;
+    RotateEntraIdCertificate(
+      params: Params$Resource$Instances$Rotateentraidcertificate,
+      callback: BodyResponseCallback<Schema$Operation>
+    ): void;
+    RotateEntraIdCertificate(
+      callback: BodyResponseCallback<Schema$Operation>
+    ): void;
+    RotateEntraIdCertificate(
+      paramsOrCallback?:
+        | Params$Resource$Instances$Rotateentraidcertificate
+        | BodyResponseCallback<Schema$Operation>
+        | BodyResponseCallback<Readable>,
+      optionsOrCallback?:
+        | MethodOptions
+        | StreamMethodOptions
+        | BodyResponseCallback<Schema$Operation>
+        | BodyResponseCallback<Readable>,
+      callback?:
+        | BodyResponseCallback<Schema$Operation>
+        | BodyResponseCallback<Readable>
+    ):
+      | void
+      | Promise<GaxiosResponseWithHTTP2<Schema$Operation>>
+      | Promise<GaxiosResponseWithHTTP2<Readable>> {
+      let params = (paramsOrCallback ||
+        {}) as Params$Resource$Instances$Rotateentraidcertificate;
+      let options = (optionsOrCallback || {}) as MethodOptions;
+
+      if (typeof paramsOrCallback === 'function') {
+        callback = paramsOrCallback;
+        params = {} as Params$Resource$Instances$Rotateentraidcertificate;
+        options = {};
+      }
+
+      if (typeof optionsOrCallback === 'function') {
+        callback = optionsOrCallback;
+        options = {};
+      }
+
+      const rootUrl = options.rootUrl || 'https://sqladmin.googleapis.com/';
+      const parameters = {
+        options: Object.assign(
+          {
+            url: (
+              rootUrl +
+              '/sql/v1beta4/projects/{project}/instances/{instance}/rotateEntraIdCertificate'
+            ).replace(/([^:]\/)\/+/g, '$1'),
+            method: 'POST',
+            apiVersion: '',
+          },
+          options
+        ),
+        params,
+        requiredParams: ['project', 'instance'],
+        pathParams: ['instance', 'project'],
+        context: this.context,
+      };
+      if (callback) {
+        createAPIRequest<Schema$Operation>(
+          parameters,
+          callback as BodyResponseCallback<unknown>
+        );
+      } else {
+        return createAPIRequest<Schema$Operation>(parameters);
+      }
+    }
+
     /**
      * Rotates the server certificate to one signed by the Certificate Authority (CA) version previously added with the addServerCA method. For instances that have enabled Certificate Authority Service (CAS) based server CA, use RotateServerCertificate to rotate the server certificate.
      * @example
@@ -11956,8 +12514,7 @@ export namespace sqladmin_v1beta4 {
     }
   }
 
-  export interface Params$Resource$Instances$Acquiressrslease
-    extends StandardParameters {
+  export interface Params$Resource$Instances$Acquiressrslease extends StandardParameters {
     /**
      * Required. Cloud SQL instance ID. This doesn't include the project ID. It's composed of lowercase letters, numbers, and hyphens, and it must start with a letter. The total length must be 98 characters or less (Example: instance-id).
      */
@@ -11972,8 +12529,22 @@ export namespace sqladmin_v1beta4 {
      */
     requestBody?: Schema$InstancesAcquireSsrsLeaseRequest;
   }
-  export interface Params$Resource$Instances$Addserverca
-    extends StandardParameters {
+  export interface Params$Resource$Instances$Addentraidcertificate extends StandardParameters {
+    /**
+     * Required. Cloud SQL instance ID. This does not include the project ID.
+     */
+    instance?: string;
+    /**
+     * Required. Project ID of the project that contains the instance.
+     */
+    project?: string;
+
+    /**
+     * Request body metadata
+     */
+    requestBody?: Schema$SqlInstancesAddEntraIdCertificateRequest;
+  }
+  export interface Params$Resource$Instances$Addserverca extends StandardParameters {
     /**
      * Cloud SQL instance ID. This does not include the project ID.
      */
@@ -11983,8 +12554,7 @@ export namespace sqladmin_v1beta4 {
      */
     project?: string;
   }
-  export interface Params$Resource$Instances$Addservercertificate
-    extends StandardParameters {
+  export interface Params$Resource$Instances$Addservercertificate extends StandardParameters {
     /**
      * Required. Cloud SQL instance ID. This does not include the project ID.
      */
@@ -12050,8 +12620,7 @@ export namespace sqladmin_v1beta4 {
      */
     requestBody?: Schema$InstancesDemoteRequest;
   }
-  export interface Params$Resource$Instances$Demotemaster
-    extends StandardParameters {
+  export interface Params$Resource$Instances$Demotemaster extends StandardParameters {
     /**
      * Cloud SQL instance name.
      */
@@ -12066,8 +12635,7 @@ export namespace sqladmin_v1beta4 {
      */
     requestBody?: Schema$InstancesDemoteMasterRequest;
   }
-  export interface Params$Resource$Instances$Executesql
-    extends StandardParameters {
+  export interface Params$Resource$Instances$Executesql extends StandardParameters {
     /**
      * Required. Database instance ID. This does not include the project ID.
      */
@@ -12097,8 +12665,7 @@ export namespace sqladmin_v1beta4 {
      */
     requestBody?: Schema$InstancesExportRequest;
   }
-  export interface Params$Resource$Instances$Failover
-    extends StandardParameters {
+  export interface Params$Resource$Instances$Failover extends StandardParameters {
     /**
      * Cloud SQL instance ID. This does not include the project ID.
      */
@@ -12167,8 +12734,17 @@ export namespace sqladmin_v1beta4 {
      */
     project?: string;
   }
-  export interface Params$Resource$Instances$Listservercas
-    extends StandardParameters {
+  export interface Params$Resource$Instances$Listentraidcertificates extends StandardParameters {
+    /**
+     * Required. Cloud SQL instance ID. This does not include the project ID.
+     */
+    instance?: string;
+    /**
+     * Required. Project ID of the project that contains the instance.
+     */
+    project?: string;
+  }
+  export interface Params$Resource$Instances$Listservercas extends StandardParameters {
     /**
      * Cloud SQL instance ID. This does not include the project ID.
      */
@@ -12178,8 +12754,7 @@ export namespace sqladmin_v1beta4 {
      */
     project?: string;
   }
-  export interface Params$Resource$Instances$Listservercertificates
-    extends StandardParameters {
+  export interface Params$Resource$Instances$Listservercertificates extends StandardParameters {
     /**
      * Required. Cloud SQL instance ID. This does not include the project ID.
      */
@@ -12204,8 +12779,7 @@ export namespace sqladmin_v1beta4 {
      */
     requestBody?: Schema$DatabaseInstance;
   }
-  export interface Params$Resource$Instances$Pointintimerestore
-    extends StandardParameters {
+  export interface Params$Resource$Instances$Pointintimerestore extends StandardParameters {
     /**
      * Required. The parent resource where you created this instance. Format: projects/{project\}
      */
@@ -12216,8 +12790,7 @@ export namespace sqladmin_v1beta4 {
      */
     requestBody?: Schema$PointInTimeRestoreContext;
   }
-  export interface Params$Resource$Instances$Precheckmajorversionupgrade
-    extends StandardParameters {
+  export interface Params$Resource$Instances$Precheckmajorversionupgrade extends StandardParameters {
     /**
      * Required. Cloud SQL instance ID. This does not include the project ID.
      */
@@ -12232,8 +12805,7 @@ export namespace sqladmin_v1beta4 {
      */
     requestBody?: Schema$InstancesPreCheckMajorVersionUpgradeRequest;
   }
-  export interface Params$Resource$Instances$Promotereplica
-    extends StandardParameters {
+  export interface Params$Resource$Instances$Promotereplica extends StandardParameters {
     /**
      * Set to true to invoke a replica failover to the DR replica. As part of replica failover, the promote operation attempts to add the original primary instance as a replica of the promoted DR replica when the original primary instance comes back online. If set to false or not specified, then the original primary instance becomes an independent Cloud SQL primary instance.
      */
@@ -12247,8 +12819,7 @@ export namespace sqladmin_v1beta4 {
      */
     project?: string;
   }
-  export interface Params$Resource$Instances$Reencrypt
-    extends StandardParameters {
+  export interface Params$Resource$Instances$Reencrypt extends StandardParameters {
     /**
      * Cloud SQL instance ID. This does not include the project ID.
      */
@@ -12263,8 +12834,7 @@ export namespace sqladmin_v1beta4 {
      */
     requestBody?: Schema$InstancesReencryptRequest;
   }
-  export interface Params$Resource$Instances$Releasessrslease
-    extends StandardParameters {
+  export interface Params$Resource$Instances$Releasessrslease extends StandardParameters {
     /**
      * Required. The Cloud SQL instance ID. This doesn't include the project ID. It's composed of lowercase letters, numbers, and hyphens, and it must start with a letter. The total length must be 98 characters or less (Example: instance-id).
      */
@@ -12274,8 +12844,7 @@ export namespace sqladmin_v1beta4 {
      */
     project?: string;
   }
-  export interface Params$Resource$Instances$Resetsslconfig
-    extends StandardParameters {
+  export interface Params$Resource$Instances$Resetsslconfig extends StandardParameters {
     /**
      * Cloud SQL instance ID. This does not include the project ID.
      */
@@ -12289,8 +12858,7 @@ export namespace sqladmin_v1beta4 {
      */
     project?: string;
   }
-  export interface Params$Resource$Instances$Restart
-    extends StandardParameters {
+  export interface Params$Resource$Instances$Restart extends StandardParameters {
     /**
      * Cloud SQL instance ID. This does not include the project ID.
      */
@@ -12300,8 +12868,7 @@ export namespace sqladmin_v1beta4 {
      */
     project?: string;
   }
-  export interface Params$Resource$Instances$Restorebackup
-    extends StandardParameters {
+  export interface Params$Resource$Instances$Restorebackup extends StandardParameters {
     /**
      * Cloud SQL instance ID. This does not include the project ID.
      */
@@ -12316,8 +12883,22 @@ export namespace sqladmin_v1beta4 {
      */
     requestBody?: Schema$InstancesRestoreBackupRequest;
   }
-  export interface Params$Resource$Instances$Rotateserverca
-    extends StandardParameters {
+  export interface Params$Resource$Instances$Rotateentraidcertificate extends StandardParameters {
+    /**
+     * Required. Cloud SQL instance ID. This does not include the project ID.
+     */
+    instance?: string;
+    /**
+     * Required. Project ID of the project that contains the instance.
+     */
+    project?: string;
+
+    /**
+     * Request body metadata
+     */
+    requestBody?: Schema$InstancesRotateEntraIdCertificateRequest;
+  }
+  export interface Params$Resource$Instances$Rotateserverca extends StandardParameters {
     /**
      * Cloud SQL instance ID. This does not include the project ID.
      */
@@ -12332,8 +12913,7 @@ export namespace sqladmin_v1beta4 {
      */
     requestBody?: Schema$InstancesRotateServerCaRequest;
   }
-  export interface Params$Resource$Instances$Rotateservercertificate
-    extends StandardParameters {
+  export interface Params$Resource$Instances$Rotateservercertificate extends StandardParameters {
     /**
      * Required. Cloud SQL instance ID. This does not include the project ID.
      */
@@ -12348,8 +12928,7 @@ export namespace sqladmin_v1beta4 {
      */
     requestBody?: Schema$InstancesRotateServerCertificateRequest;
   }
-  export interface Params$Resource$Instances$Startreplica
-    extends StandardParameters {
+  export interface Params$Resource$Instances$Startreplica extends StandardParameters {
     /**
      * Cloud SQL read replica instance name.
      */
@@ -12359,8 +12938,7 @@ export namespace sqladmin_v1beta4 {
      */
     project?: string;
   }
-  export interface Params$Resource$Instances$Stopreplica
-    extends StandardParameters {
+  export interface Params$Resource$Instances$Stopreplica extends StandardParameters {
     /**
      * Cloud SQL read replica instance name.
      */
@@ -12370,8 +12948,7 @@ export namespace sqladmin_v1beta4 {
      */
     project?: string;
   }
-  export interface Params$Resource$Instances$Switchover
-    extends StandardParameters {
+  export interface Params$Resource$Instances$Switchover extends StandardParameters {
     /**
      * Optional. (MySQL and PostgreSQL only) Cloud SQL instance operations timeout, which is a sum of all database operations. Default value is 10 minutes and can be modified to a maximum value of 24 hours.
      */
@@ -12385,8 +12962,7 @@ export namespace sqladmin_v1beta4 {
      */
     project?: string;
   }
-  export interface Params$Resource$Instances$Truncatelog
-    extends StandardParameters {
+  export interface Params$Resource$Instances$Truncatelog extends StandardParameters {
     /**
      * Cloud SQL instance ID. This does not include the project ID.
      */
@@ -12871,8 +13447,7 @@ export namespace sqladmin_v1beta4 {
     }
   }
 
-  export interface Params$Resource$Operations$Cancel
-    extends StandardParameters {
+  export interface Params$Resource$Operations$Cancel extends StandardParameters {
     /**
      * Instance operation ID.
      */
@@ -14087,8 +14662,7 @@ export namespace sqladmin_v1beta4 {
     }
   }
 
-  export interface Params$Resource$Projects$Instances$Getdiskshrinkconfig
-    extends StandardParameters {
+  export interface Params$Resource$Projects$Instances$Getdiskshrinkconfig extends StandardParameters {
     /**
      * Cloud SQL instance ID. This does not include the project ID.
      */
@@ -14098,8 +14672,7 @@ export namespace sqladmin_v1beta4 {
      */
     project?: string;
   }
-  export interface Params$Resource$Projects$Instances$Getlatestrecoverytime
-    extends StandardParameters {
+  export interface Params$Resource$Projects$Instances$Getlatestrecoverytime extends StandardParameters {
     /**
      * Cloud SQL instance ID. This does not include the project ID.
      */
@@ -14113,8 +14686,7 @@ export namespace sqladmin_v1beta4 {
      */
     sourceInstanceDeletionTime?: string;
   }
-  export interface Params$Resource$Projects$Instances$Performdiskshrink
-    extends StandardParameters {
+  export interface Params$Resource$Projects$Instances$Performdiskshrink extends StandardParameters {
     /**
      * Cloud SQL instance ID. This does not include the project ID.
      */
@@ -14129,8 +14701,7 @@ export namespace sqladmin_v1beta4 {
      */
     requestBody?: Schema$PerformDiskShrinkContext;
   }
-  export interface Params$Resource$Projects$Instances$Reschedulemaintenance
-    extends StandardParameters {
+  export interface Params$Resource$Projects$Instances$Reschedulemaintenance extends StandardParameters {
     /**
      * Cloud SQL instance ID. This does not include the project ID.
      */
@@ -14145,8 +14716,7 @@ export namespace sqladmin_v1beta4 {
      */
     requestBody?: Schema$SqlInstancesRescheduleMaintenanceRequestBody;
   }
-  export interface Params$Resource$Projects$Instances$Resetreplicasize
-    extends StandardParameters {
+  export interface Params$Resource$Projects$Instances$Resetreplicasize extends StandardParameters {
     /**
      * Cloud SQL read replica instance name.
      */
@@ -14161,8 +14731,7 @@ export namespace sqladmin_v1beta4 {
      */
     requestBody?: Schema$SqlInstancesResetReplicaSizeRequest;
   }
-  export interface Params$Resource$Projects$Instances$Startexternalsync
-    extends StandardParameters {
+  export interface Params$Resource$Projects$Instances$Startexternalsync extends StandardParameters {
     /**
      * Cloud SQL instance ID. This does not include the project ID.
      */
@@ -14177,8 +14746,7 @@ export namespace sqladmin_v1beta4 {
      */
     requestBody?: Schema$SqlInstancesStartExternalSyncRequest;
   }
-  export interface Params$Resource$Projects$Instances$Verifyexternalsyncsettings
-    extends StandardParameters {
+  export interface Params$Resource$Projects$Instances$Verifyexternalsyncsettings extends StandardParameters {
     /**
      * Cloud SQL instance ID. This does not include the project ID.
      */
@@ -14971,8 +15539,7 @@ export namespace sqladmin_v1beta4 {
     }
   }
 
-  export interface Params$Resource$Sslcerts$Createephemeral
-    extends StandardParameters {
+  export interface Params$Resource$Sslcerts$Createephemeral extends StandardParameters {
     /**
      * Cloud SQL instance ID. This does not include the project ID.
      */
@@ -15412,6 +15979,7 @@ export namespace sqladmin_v1beta4 {
      *
      *   // Example response
      *   // {
+     *   //   "databaseRoles": [],
      *   //   "dualPasswordType": "my_dualPasswordType",
      *   //   "etag": "my_etag",
      *   //   "host": "my_host",
@@ -15565,6 +16133,7 @@ export namespace sqladmin_v1beta4 {
      *     requestBody: {
      *       // request body parameters
      *       // {
+     *       //   "databaseRoles": [],
      *       //   "dualPasswordType": "my_dualPasswordType",
      *       //   "etag": "my_etag",
      *       //   "host": "my_host",
@@ -15879,6 +16448,8 @@ export namespace sqladmin_v1beta4 {
      *
      *   // Do the magic
      *   const res = await sql.users.update({
+     *     // Optional. List of database roles to grant to the user. body.database_roles will be ignored for update request.
+     *     databaseRoles: 'placeholder-value',
      *     // Optional. Host of the user in the instance.
      *     host: 'placeholder-value',
      *     // Database instance ID. This does not include the project ID.
@@ -15887,11 +16458,14 @@ export namespace sqladmin_v1beta4 {
      *     name: 'placeholder-value',
      *     // Project ID of the project that contains the instance.
      *     project: 'placeholder-value',
+     *     // Optional. revoke the existing roles granted to the user.
+     *     revokeExistingRoles: 'placeholder-value',
      *
      *     // Request body metadata
      *     requestBody: {
      *       // request body parameters
      *       // {
+     *       //   "databaseRoles": [],
      *       //   "dualPasswordType": "my_dualPasswordType",
      *       //   "etag": "my_etag",
      *       //   "host": "my_host",
@@ -16092,6 +16666,10 @@ export namespace sqladmin_v1beta4 {
     project?: string;
   }
   export interface Params$Resource$Users$Update extends StandardParameters {
+    /**
+     * Optional. List of database roles to grant to the user. body.database_roles will be ignored for update request.
+     */
+    databaseRoles?: string[];
     /**
      * Optional. Host of the user in the instance.
      */
@@ -16108,6 +16686,10 @@ export namespace sqladmin_v1beta4 {
      * Project ID of the project that contains the instance.
      */
     project?: string;
+    /**
+     * Optional. revoke the existing roles granted to the user.
+     */
+    revokeExistingRoles?: boolean;
 
     /**
      * Request body metadata