npm - @ibm-cloud/secrets-manager - Versions diffs - 2.0.7 → 2.0.9 - Mend

@ibm-cloud/secrets-manager 2.0.7 → 2.0.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (7) hide show

package/CHANGELOG.md +4 -0
package/README.md +0 -2
package/examples/secrets-manager.v2.test.js +1211 -1211
package/package.json +2 -2
package/secrets-manager/v2.d.ts +540 -186
package/secrets-manager/v2.js +150 -68
package/secrets-manager/v2.js.map +1 -1

package/secrets-manager/v2.d.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 /**
- * (C) Copyright IBM Corp. 2024.
+ * (C) Copyright IBM Corp. 2025.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -106,7 +106,7 @@ declare class SecretsManagerV2 extends BaseService {
      * Get the properties of an existing secret group by specifying the ID of the group.
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.id - The v4 UUID that uniquely identifies your secret group.
+     * @param {string} params.id - The UUID that uniquely identifies your secret group.
      * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
      * @returns {Promise<SecretsManagerV2.Response<SecretsManagerV2.SecretGroup>>}
      */
@@ -117,7 +117,7 @@ declare class SecretsManagerV2 extends BaseService {
      * Update the properties of an existing secret group, such as its name or description.
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.id - The v4 UUID that uniquely identifies your secret group.
+     * @param {string} params.id - The UUID that uniquely identifies your secret group.
      * @param {string} [params.name] - The name of your secret group.
      * @param {string} [params.description] - An extended description of your secret group.
      *
@@ -136,7 +136,7 @@ declare class SecretsManagerV2 extends BaseService {
      * you must first delete the secrets that are associated with the group.
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.id - The v4 UUID that uniquely identifies your secret group.
+     * @param {string} params.id - The UUID that uniquely identifies your secret group.
      * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
      * @returns {Promise<SecretsManagerV2.Response<SecretsManagerV2.EmptyObject>>}
      */
@@ -226,7 +226,7 @@ declare class SecretsManagerV2 extends BaseService {
      * view only the details of a specified secret without retrieving its value, use the Get secret metadata operation.
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.id - The v4 UUID that uniquely identifies your secret.
+     * @param {string} params.id - The UUID that uniquely identifies your secret.
      * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
      * @returns {Promise<SecretsManagerV2.Response<SecretsManagerV2.Secret>>}
      */
@@ -237,7 +237,7 @@ declare class SecretsManagerV2 extends BaseService {
      * Delete a secret by specifying the ID of the secret.
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.id - The v4 UUID that uniquely identifies your secret.
+     * @param {string} params.id - The UUID that uniquely identifies your secret.
      * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
      * @returns {Promise<SecretsManagerV2.Response<SecretsManagerV2.EmptyObject>>}
      */
@@ -248,7 +248,7 @@ declare class SecretsManagerV2 extends BaseService {
      * Get the metadata of a secret by specifying the ID of the secret.
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.id - The v4 UUID that uniquely identifies your secret.
+     * @param {string} params.id - The UUID that uniquely identifies your secret.
      * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
      * @returns {Promise<SecretsManagerV2.Response<SecretsManagerV2.SecretMetadata>>}
      */
@@ -259,7 +259,7 @@ declare class SecretsManagerV2 extends BaseService {
      * Update the metadata of a secret, such as its name or description.
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.id - The v4 UUID that uniquely identifies your secret.
+     * @param {string} params.id - The UUID that uniquely identifies your secret.
      * @param {SecretMetadataPatch} params.secretMetadataPatch -
      * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
      * @returns {Promise<SecretsManagerV2.Response<SecretsManagerV2.SecretMetadata>>}
@@ -271,7 +271,7 @@ declare class SecretsManagerV2 extends BaseService {
      * Create a secret action. This operation supports the following actions:.
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.id - The v4 UUID that uniquely identifies your secret.
+     * @param {string} params.id - The UUID that uniquely identifies your secret.
      * @param {SecretActionPrototype} params.secretActionPrototype -
      * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
      * @returns {Promise<SecretsManagerV2.Response<SecretsManagerV2.SecretAction>>}
@@ -304,7 +304,7 @@ declare class SecretsManagerV2 extends BaseService {
      * Create a new secret version.
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.secretId - The v4 UUID that uniquely identifies your secret.
+     * @param {string} params.secretId - The UUID that uniquely identifies your secret.
      * @param {SecretVersionPrototype} params.secretVersionPrototype -
      * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
      * @returns {Promise<SecretsManagerV2.Response<SecretsManagerV2.SecretVersion>>}
@@ -318,7 +318,7 @@ declare class SecretsManagerV2 extends BaseService {
      * A successful request returns the list of versions of a secret, along with the metadata of each version.
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.secretId - The v4 UUID that uniquely identifies your secret.
+     * @param {string} params.secretId - The UUID that uniquely identifies your secret.
      * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
      * @returns {Promise<SecretsManagerV2.Response<SecretsManagerV2.SecretVersionMetadataCollection>>}
      */
@@ -333,8 +333,8 @@ declare class SecretsManagerV2 extends BaseService {
      * with other metadata.
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.secretId - The v4 UUID that uniquely identifies your secret.
-     * @param {string} params.id - The v4 UUID that uniquely identifies your secret version. You can use the `current` or
+     * @param {string} params.secretId - The UUID that uniquely identifies your secret.
+     * @param {string} params.id - The UUID that uniquely identifies your secret version. You can use the `current` or
      * `previous` aliases to refer to the current or previous secret version.
      * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
      * @returns {Promise<SecretsManagerV2.Response<SecretsManagerV2.SecretVersion>>}
@@ -348,8 +348,8 @@ declare class SecretsManagerV2 extends BaseService {
      * This operation is available for secret type: iam_credentials current version.
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.secretId - The v4 UUID that uniquely identifies your secret.
-     * @param {string} params.id - The v4 UUID that uniquely identifies your secret version. You can use the `current` or
+     * @param {string} params.secretId - The UUID that uniquely identifies your secret.
+     * @param {string} params.id - The UUID that uniquely identifies your secret version. You can use the `current` or
      * `previous` aliases to refer to the current or previous secret version.
      * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
      * @returns {Promise<SecretsManagerV2.Response<SecretsManagerV2.EmptyObject>>}
@@ -364,8 +364,8 @@ declare class SecretsManagerV2 extends BaseService {
      * A successful request returns the metadata that is associated with the specified version of your secret.
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.secretId - The v4 UUID that uniquely identifies your secret.
-     * @param {string} params.id - The v4 UUID that uniquely identifies your secret version. You can use the `current` or
+     * @param {string} params.secretId - The UUID that uniquely identifies your secret.
+     * @param {string} params.id - The UUID that uniquely identifies your secret version. You can use the `current` or
      * `previous` aliases to refer to the current or previous secret version.
      * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
      * @returns {Promise<SecretsManagerV2.Response<SecretsManagerV2.SecretVersionMetadata>>}
@@ -377,8 +377,8 @@ declare class SecretsManagerV2 extends BaseService {
      * Update the custom metadata of a secret version.
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.secretId - The v4 UUID that uniquely identifies your secret.
-     * @param {string} params.id - The v4 UUID that uniquely identifies your secret version. You can use the `current` or
+     * @param {string} params.secretId - The UUID that uniquely identifies your secret.
+     * @param {string} params.id - The UUID that uniquely identifies your secret version. You can use the `current` or
      * `previous` aliases to refer to the current or previous secret version.
      * @param {JsonObject} [params.versionCustomMetadata] - The secret version metadata that a user can customize.
      * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
@@ -393,8 +393,8 @@ declare class SecretsManagerV2 extends BaseService {
      * - `private_cert_action_revoke_certificate`: Revoke a version of a private certificate.
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.secretId - The v4 UUID that uniquely identifies your secret.
-     * @param {string} params.id - The v4 UUID that uniquely identifies your secret version. You can use the `current` or
+     * @param {string} params.secretId - The UUID that uniquely identifies your secret.
+     * @param {string} params.id - The UUID that uniquely identifies your secret version. You can use the `current` or
      * `previous` aliases to refer to the current or previous secret version.
      * @param {SecretVersionActionPrototype} params.secretVersionActionPrototype -
      * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
@@ -442,7 +442,7 @@ declare class SecretsManagerV2 extends BaseService {
      * List the locks that are associated with a specified secret.
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.id - The v4 UUID that uniquely identifies your secret.
+     * @param {string} params.id - The UUID that uniquely identifies your secret.
      * @param {number} [params.offset] - The number of locks to skip. By specifying `offset`, you retrieve a subset of
      * items that starts with the `offset` value. Use `offset` with `limit` to page through your available resources.
      *
@@ -485,7 +485,7 @@ declare class SecretsManagerV2 extends BaseService {
      * the data of the previous secret version if it doesn't have any locks.
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.id - The v4 UUID that uniquely identifies your secret.
+     * @param {string} params.id - The UUID that uniquely identifies your secret.
      * @param {SecretLockPrototype[]} params.locks - The locks data to be attached to a secret version.
      * @param {string} [params.mode] - An optional lock mode. When you create a lock, you can set one of the following
      * modes to clear any matching locks on a secret version.
@@ -510,7 +510,7 @@ declare class SecretsManagerV2 extends BaseService {
      * of your secret.
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.id - The v4 UUID that uniquely identifies your secret.
+     * @param {string} params.id - The UUID that uniquely identifies your secret.
      * @param {string[]} [params.name] - Specify the names of the secret locks to be deleted.
      * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
      * @returns {Promise<SecretsManagerV2.Response<SecretsManagerV2.SecretLocks>>}
@@ -522,8 +522,8 @@ declare class SecretsManagerV2 extends BaseService {
      * List the locks that are associated with a specified secret version.
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.secretId - The v4 UUID that uniquely identifies your secret.
-     * @param {string} params.id - The v4 UUID that uniquely identifies your secret version. You can use the `current` or
+     * @param {string} params.secretId - The UUID that uniquely identifies your secret.
+     * @param {string} params.id - The UUID that uniquely identifies your secret version. You can use the `current` or
      * `previous` aliases to refer to the current or previous secret version.
      * @param {number} [params.offset] - The number of locks to skip. By specifying `offset`, you retrieve a subset of
      * items that starts with the `offset` value. Use `offset` with `limit` to page through your available resources.
@@ -567,8 +567,8 @@ declare class SecretsManagerV2 extends BaseService {
      * the data of the previous secret version if it doesn't have any locks.
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.secretId - The v4 UUID that uniquely identifies your secret.
-     * @param {string} params.id - The v4 UUID that uniquely identifies your secret version. You can use the `current` or
+     * @param {string} params.secretId - The UUID that uniquely identifies your secret.
+     * @param {string} params.id - The UUID that uniquely identifies your secret version. You can use the `current` or
      * `previous` aliases to refer to the current or previous secret version.
      * @param {SecretLockPrototype[]} params.locks - The locks data to be attached to a secret version.
      * @param {string} [params.mode] - An optional lock mode. When you create a lock, you can set one of the following
@@ -594,8 +594,8 @@ declare class SecretsManagerV2 extends BaseService {
      * of your secret.
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.secretId - The v4 UUID that uniquely identifies your secret.
-     * @param {string} params.id - The v4 UUID that uniquely identifies your secret version. You can use the `current` or
+     * @param {string} params.secretId - The UUID that uniquely identifies your secret.
+     * @param {string} params.id - The UUID that uniquely identifies your secret version. You can use the `current` or
      * `previous` aliases to refer to the current or previous secret version.
      * @param {string[]} [params.name] - Specify the names of the secret locks to be deleted.
      * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
@@ -725,6 +725,8 @@ declare class SecretsManagerV2 extends BaseService {
      * authority certificate.
      * - `private_cert_configuration_action_rotate_crl`: Rotate the certificate revocation list (CRL) of an intermediate
      * certificate authority.
+     * - `private_cert_configuration_action_rotate_intermediate`: Rotate an internally signed intermediate certificate
+     * authority certificate.
      *
      * @param {Object} params - The parameters to send to the service.
      * @param {string} params.name - The name that uniquely identifies a configuration.
@@ -837,13 +839,13 @@ declare namespace SecretsManagerV2 {
     }
     /** Parameters for the `getSecretGroup` operation. */
     interface GetSecretGroupParams {
-        /** The v4 UUID that uniquely identifies your secret group. */
+        /** The UUID that uniquely identifies your secret group. */
         id: string;
         headers?: OutgoingHttpHeaders;
     }
     /** Parameters for the `updateSecretGroup` operation. */
     interface UpdateSecretGroupParams {
-        /** The v4 UUID that uniquely identifies your secret group. */
+        /** The UUID that uniquely identifies your secret group. */
         id: string;
         /** The name of your secret group. */
         name?: string;
@@ -857,7 +859,7 @@ declare namespace SecretsManagerV2 {
     }
     /** Parameters for the `deleteSecretGroup` operation. */
     interface DeleteSecretGroupParams {
-        /** The v4 UUID that uniquely identifies your secret group. */
+        /** The UUID that uniquely identifies your secret group. */
         id: string;
         headers?: OutgoingHttpHeaders;
     }
@@ -944,32 +946,32 @@ declare namespace SecretsManagerV2 {
     }
     /** Parameters for the `getSecret` operation. */
     interface GetSecretParams {
-        /** The v4 UUID that uniquely identifies your secret. */
+        /** The UUID that uniquely identifies your secret. */
         id: string;
         headers?: OutgoingHttpHeaders;
     }
     /** Parameters for the `deleteSecret` operation. */
     interface DeleteSecretParams {
-        /** The v4 UUID that uniquely identifies your secret. */
+        /** The UUID that uniquely identifies your secret. */
         id: string;
         headers?: OutgoingHttpHeaders;
     }
     /** Parameters for the `getSecretMetadata` operation. */
     interface GetSecretMetadataParams {
-        /** The v4 UUID that uniquely identifies your secret. */
+        /** The UUID that uniquely identifies your secret. */
         id: string;
         headers?: OutgoingHttpHeaders;
     }
     /** Parameters for the `updateSecretMetadata` operation. */
     interface UpdateSecretMetadataParams {
-        /** The v4 UUID that uniquely identifies your secret. */
+        /** The UUID that uniquely identifies your secret. */
         id: string;
         secretMetadataPatch: SecretMetadataPatch;
         headers?: OutgoingHttpHeaders;
     }
     /** Parameters for the `createSecretAction` operation. */
     interface CreateSecretActionParams {
-        /** The v4 UUID that uniquely identifies your secret. */
+        /** The UUID that uniquely identifies your secret. */
         id: string;
         secretActionPrototype: SecretActionPrototype;
         headers?: OutgoingHttpHeaders;
@@ -1004,22 +1006,22 @@ declare namespace SecretsManagerV2 {
     }
     /** Parameters for the `createSecretVersion` operation. */
     interface CreateSecretVersionParams {
-        /** The v4 UUID that uniquely identifies your secret. */
+        /** The UUID that uniquely identifies your secret. */
         secretId: string;
         secretVersionPrototype: SecretVersionPrototype;
         headers?: OutgoingHttpHeaders;
     }
     /** Parameters for the `listSecretVersions` operation. */
     interface ListSecretVersionsParams {
-        /** The v4 UUID that uniquely identifies your secret. */
+        /** The UUID that uniquely identifies your secret. */
         secretId: string;
         headers?: OutgoingHttpHeaders;
     }
     /** Parameters for the `getSecretVersion` operation. */
     interface GetSecretVersionParams {
-        /** The v4 UUID that uniquely identifies your secret. */
+        /** The UUID that uniquely identifies your secret. */
         secretId: string;
-        /** The v4 UUID that uniquely identifies your secret version. You can use the `current` or `previous` aliases to
+        /** The UUID that uniquely identifies your secret version. You can use the `current` or `previous` aliases to
          *  refer to the current or previous secret version.
          */
         id: string;
@@ -1027,9 +1029,9 @@ declare namespace SecretsManagerV2 {
     }
     /** Parameters for the `deleteSecretVersionData` operation. */
     interface DeleteSecretVersionDataParams {
-        /** The v4 UUID that uniquely identifies your secret. */
+        /** The UUID that uniquely identifies your secret. */
         secretId: string;
-        /** The v4 UUID that uniquely identifies your secret version. You can use the `current` or `previous` aliases to
+        /** The UUID that uniquely identifies your secret version. You can use the `current` or `previous` aliases to
          *  refer to the current or previous secret version.
          */
         id: string;
@@ -1037,9 +1039,9 @@ declare namespace SecretsManagerV2 {
     }
     /** Parameters for the `getSecretVersionMetadata` operation. */
     interface GetSecretVersionMetadataParams {
-        /** The v4 UUID that uniquely identifies your secret. */
+        /** The UUID that uniquely identifies your secret. */
         secretId: string;
-        /** The v4 UUID that uniquely identifies your secret version. You can use the `current` or `previous` aliases to
+        /** The UUID that uniquely identifies your secret version. You can use the `current` or `previous` aliases to
          *  refer to the current or previous secret version.
          */
         id: string;
@@ -1047,9 +1049,9 @@ declare namespace SecretsManagerV2 {
     }
     /** Parameters for the `updateSecretVersionMetadata` operation. */
     interface UpdateSecretVersionMetadataParams {
-        /** The v4 UUID that uniquely identifies your secret. */
+        /** The UUID that uniquely identifies your secret. */
         secretId: string;
-        /** The v4 UUID that uniquely identifies your secret version. You can use the `current` or `previous` aliases to
+        /** The UUID that uniquely identifies your secret version. You can use the `current` or `previous` aliases to
          *  refer to the current or previous secret version.
          */
         id: string;
@@ -1059,9 +1061,9 @@ declare namespace SecretsManagerV2 {
     }
     /** Parameters for the `createSecretVersionAction` operation. */
     interface CreateSecretVersionActionParams {
-        /** The v4 UUID that uniquely identifies your secret. */
+        /** The UUID that uniquely identifies your secret. */
         secretId: string;
-        /** The v4 UUID that uniquely identifies your secret version. You can use the `current` or `previous` aliases to
+        /** The UUID that uniquely identifies your secret version. You can use the `current` or `previous` aliases to
          *  refer to the current or previous secret version.
          */
         id: string;
@@ -1104,7 +1106,7 @@ declare namespace SecretsManagerV2 {
     }
     /** Parameters for the `listSecretLocks` operation. */
     interface ListSecretLocksParams {
-        /** The v4 UUID that uniquely identifies your secret. */
+        /** The UUID that uniquely identifies your secret. */
         id: string;
         /** The number of locks to skip. By specifying `offset`, you retrieve a subset of items that starts with the
          *  `offset` value. Use `offset` with `limit` to page through your available resources.
@@ -1139,7 +1141,7 @@ declare namespace SecretsManagerV2 {
     }
     /** Parameters for the `createSecretLocksBulk` operation. */
     interface CreateSecretLocksBulkParams {
-        /** The v4 UUID that uniquely identifies your secret. */
+        /** The UUID that uniquely identifies your secret. */
         id: string;
         /** The locks data to be attached to a secret version. */
         locks: SecretLockPrototype[];
@@ -1162,7 +1164,7 @@ declare namespace SecretsManagerV2 {
     }
     /** Parameters for the `deleteSecretLocksBulk` operation. */
     interface DeleteSecretLocksBulkParams {
-        /** The v4 UUID that uniquely identifies your secret. */
+        /** The UUID that uniquely identifies your secret. */
         id: string;
         /** Specify the names of the secret locks to be deleted. */
         name?: string[];
@@ -1170,9 +1172,9 @@ declare namespace SecretsManagerV2 {
     }
     /** Parameters for the `listSecretVersionLocks` operation. */
     interface ListSecretVersionLocksParams {
-        /** The v4 UUID that uniquely identifies your secret. */
+        /** The UUID that uniquely identifies your secret. */
         secretId: string;
-        /** The v4 UUID that uniquely identifies your secret version. You can use the `current` or `previous` aliases to
+        /** The UUID that uniquely identifies your secret version. You can use the `current` or `previous` aliases to
          *  refer to the current or previous secret version.
          */
         id: string;
@@ -1209,9 +1211,9 @@ declare namespace SecretsManagerV2 {
     }
     /** Parameters for the `createSecretVersionLocksBulk` operation. */
     interface CreateSecretVersionLocksBulkParams {
-        /** The v4 UUID that uniquely identifies your secret. */
+        /** The UUID that uniquely identifies your secret. */
         secretId: string;
-        /** The v4 UUID that uniquely identifies your secret version. You can use the `current` or `previous` aliases to
+        /** The UUID that uniquely identifies your secret version. You can use the `current` or `previous` aliases to
          *  refer to the current or previous secret version.
          */
         id: string;
@@ -1236,9 +1238,9 @@ declare namespace SecretsManagerV2 {
     }
     /** Parameters for the `deleteSecretVersionLocksBulk` operation. */
     interface DeleteSecretVersionLocksBulkParams {
-        /** The v4 UUID that uniquely identifies your secret. */
+        /** The UUID that uniquely identifies your secret. */
         secretId: string;
-        /** The v4 UUID that uniquely identifies your secret version. You can use the `current` or `previous` aliases to
+        /** The UUID that uniquely identifies your secret version. You can use the `current` or `previous` aliases to
          *  refer to the current or previous secret version.
          */
         id: string;
@@ -1534,6 +1536,200 @@ declare namespace SecretsManagerV2 {
      */
     interface ConfigurationPrototype {
     }
+    /**
+     * The data specified to create the CSR and the private key.
+     */
+    interface ImportedCertificateManagedCsr {
+        /** The Organizational Unit (OU) values to define in the subject field of the resulting certificate. */
+        ou?: string[];
+        /** The Organization (O) values to define in the subject field of the resulting certificate. */
+        organization?: string[];
+        /** The Country (C) values to define in the subject field of the resulting certificate. */
+        country?: string[];
+        /** The Locality (L) values to define in the subject field of the resulting certificate. */
+        locality?: string[];
+        /** The Province (ST) values to define in the subject field of the resulting certificate. */
+        province?: string[];
+        /** The street address values to define in the subject field of the resulting certificate. */
+        street_address?: string[];
+        /** The postal code values to define in the subject field of the resulting certificate. */
+        postal_code?: string[];
+        /** If set to false, makes the common_name field optional while generating a certificate. */
+        require_cn?: boolean;
+        /** The Common Name (CN) represents the server name protected by the SSL certificate. */
+        common_name?: string;
+        /** With the Subject Alternative Name field, you can specify additional hostnames to be protected by a single
+         *  SSL certificate.
+         */
+        alt_names?: string;
+        /** The IP Subject Alternative Names to define for the certificate, in a comma-delimited list. */
+        ip_sans?: string;
+        /** The URI Subject Alternative Names to define for the certificate, in a comma-delimited list. */
+        uri_sans?: string;
+        /** The custom Object Identifier (OID) or UTF8-string Subject Alternative Names to define for the certificate,
+         *  in a comma-delimited list.
+         *
+         *  The format is the same as OpenSSL: `<oid>:<type>:<value>` where the current valid type is `UTF8`.
+         */
+        other_sans?: string;
+        /** This parameter controls whether the common name is excluded from Subject Alternative Names (SANs).
+         *
+         *  If the common name is set to `true`, it is not included in DNS, or email SANs if they apply. This field can be
+         *  useful if the common name is a human-readable identifier, instead of a hostname or an email address.
+         */
+        exclude_cn_from_sans?: boolean;
+        /** Specifies the list of requested User ID (OID 0.9.2342.19200300.100.1.1) Subject values to be placed on the
+         *  signed certificate.
+         */
+        user_ids?: string;
+        /** This field indicates whether certificate is flagged for server use. */
+        server_flag?: boolean;
+        /** This field indicates whether certificate is flagged for client use. */
+        client_flag?: boolean;
+        /** This field indicates whether certificate is flagged for code signing use. */
+        code_signing_flag?: boolean;
+        /** This field indicates whether certificate is flagged for email protection use. */
+        email_protection_flag?: boolean;
+        /** The type of private key to generate. */
+        key_type?: ImportedCertificateManagedCsr.Constants.KeyType | string;
+        /** The number of bits to use to generate the private key.
+         *
+         *  Allowable values for RSA keys are: `2048`, `3072`, `4096` and `8192`. Allowable values for EC keys are: `224`,
+         *  `256`, `384`, and `521`. The default for RSA keys is `2048`. The default for EC keys is `256`. Ignored for
+         *  ed25519 keys.
+         */
+        key_bits?: number;
+        /** The allowed key usage constraint to define for certificate, in a comma-delimited list.
+         *
+         *  You can find valid values in the [Go x509 package documentation](https://pkg.go.dev/crypto/x509#KeyUsage). Omit
+         *  the `KeyUsage` part of the value. Values are not case-sensitive. To specify no key usage constraints, set this
+         *  field to an empty string.
+         */
+        key_usage?: string;
+        /** The allowed extended key usage constraint on certificate, in a comma-delimited list.
+         *
+         *  You can find valid values in the [Go x509 package
+         *  documentation](https://golang.org/pkg/crypto/x509/#ExtKeyUsage). Omit the `ExtKeyUsage` part of the value.
+         *  Values are not case-sensitive. To specify no key usage constraints, set this field to an empty string.
+         */
+        ext_key_usage?: string;
+        /** A comma-delimited list of policy Object Identifiers (OIDs). */
+        policy_identifiers?: string;
+        /** A comma-delimited list of extended key usage Object Identifiers (OIDs). */
+        ext_key_usage_oids?: string;
+        /** This field indicates whether the private key will be rotated. */
+        rotate_keys?: boolean;
+    }
+    namespace ImportedCertificateManagedCsr {
+        namespace Constants {
+            /** The type of private key to generate. */
+            enum KeyType {
+                RSA = "rsa",
+                EC = "ec",
+                ED25519 = "ed25519"
+            }
+        }
+    }
+    /**
+     * The data specified to create the CSR and the private key.
+     */
+    interface ImportedCertificateManagedCsrResponse {
+        /** The Organizational Unit (OU) values to define in the subject field of the resulting certificate. */
+        ou: string[];
+        /** The Organization (O) values to define in the subject field of the resulting certificate. */
+        organization: string[];
+        /** The Country (C) values to define in the subject field of the resulting certificate. */
+        country: string[];
+        /** The Locality (L) values to define in the subject field of the resulting certificate. */
+        locality: string[];
+        /** The Province (ST) values to define in the subject field of the resulting certificate. */
+        province: string[];
+        /** The street address values to define in the subject field of the resulting certificate. */
+        street_address: string[];
+        /** The postal code values to define in the subject field of the resulting certificate. */
+        postal_code: string[];
+        /** If set to false, makes the common_name field optional while generating a certificate. */
+        require_cn: boolean;
+        /** The Common Name (CN) represents the server name protected by the SSL certificate. */
+        common_name?: string;
+        /** With the Subject Alternative Name field, you can specify additional hostnames to be protected by a single
+         *  SSL certificate.
+         */
+        alt_names?: string;
+        /** The IP Subject Alternative Names to define for the certificate, in a comma-delimited list. */
+        ip_sans?: string;
+        /** The URI Subject Alternative Names to define for the certificate, in a comma-delimited list. */
+        uri_sans?: string;
+        /** The custom Object Identifier (OID) or UTF8-string Subject Alternative Names to define for the certificate,
+         *  in a comma-delimited list.
+         *
+         *  The format is the same as OpenSSL: `<oid>:<type>:<value>` where the current valid type is `UTF8`.
+         */
+        other_sans?: string;
+        /** This parameter controls whether the common name is excluded from Subject Alternative Names (SANs).
+         *
+         *  If the common name is set to `true`, it is not included in DNS, or email SANs if they apply. This field can be
+         *  useful if the common name is a human-readable identifier, instead of a hostname or an email address.
+         */
+        exclude_cn_from_sans: boolean;
+        /** Specifies the list of requested User ID (OID 0.9.2342.19200300.100.1.1) Subject values to be placed on the
+         *  signed certificate.
+         */
+        user_ids?: string;
+        /** This field indicates whether certificate is flagged for server use. */
+        server_flag: boolean;
+        /** This field indicates whether certificate is flagged for client use. */
+        client_flag: boolean;
+        /** This field indicates whether certificate is flagged for code signing use. */
+        code_signing_flag: boolean;
+        /** This field indicates whether certificate is flagged for email protection use. */
+        email_protection_flag: boolean;
+        /** The type of private key to generate. */
+        key_type: ImportedCertificateManagedCsrResponse.Constants.KeyType | string;
+        /** The number of bits to use to generate the private key.
+         *
+         *  Allowable values for RSA keys are: `2048`, `3072`, `4096` and `8192`. Allowable values for EC keys are: `224`,
+         *  `256`, `384`, and `521`. The default for RSA keys is `2048`. The default for EC keys is `256`. Ignored for
+         *  ed25519 keys.
+         */
+        key_bits: number;
+        /** The allowed key usage constraint to define for certificate, in a comma-delimited list.
+         *
+         *  You can find valid values in the [Go x509 package documentation](https://pkg.go.dev/crypto/x509#KeyUsage). Omit
+         *  the `KeyUsage` part of the value. Values are not case-sensitive. To specify no key usage constraints, set this
+         *  field to an empty string.
+         */
+        key_usage?: string;
+        /** The allowed extended key usage constraint on certificate, in a comma-delimited list.
+         *
+         *  You can find valid values in the [Go x509 package
+         *  documentation](https://golang.org/pkg/crypto/x509/#ExtKeyUsage). Omit the `ExtKeyUsage` part of the value.
+         *  Values are not case-sensitive. To specify no key usage constraints, set this field to an empty string.
+         */
+        ext_key_usage?: string;
+        /** A comma-delimited list of policy Object Identifiers (OIDs). */
+        policy_identifiers?: string;
+        /** A comma-delimited list of extended key usage Object Identifiers (OIDs). */
+        ext_key_usage_oids?: string;
+        /** This field indicates whether the private key will be rotated. */
+        rotate_keys?: boolean;
+        /** The certificate signing request. */
+        csr: string;
+        /** The PEM-encoded private key that is associated with the certificate. The data must be formatted on a single
+         *  line with embedded newline characters.
+         */
+        private_key: string;
+    }
+    namespace ImportedCertificateManagedCsrResponse {
+        namespace Constants {
+            /** The type of private key to generate. */
+            enum KeyType {
+                RSA = "rsa",
+                EC = "ec",
+                ED25519 = "ed25519"
+            }
+        }
+    }
     /**
      * The details of the Event Notifications registration.
      */
@@ -1614,6 +1810,96 @@ declare namespace SecretsManagerV2 {
      */
     interface PrivateCertificateCAData {
     }
+    /**
+     * The response body of the action to rotate an intermediate certificate authority for the private certificate
+     * configuration.
+     */
+    interface PrivateCertificateConfigurationRotateAction {
+        /** The Common Name (CN) represents the server name that is protected by the SSL certificate. */
+        common_name?: string;
+        /** With the Subject Alternative Name field, you can specify additional hostnames to be protected by a single
+         *  SSL certificate.
+         */
+        alt_names?: string[];
+        /** The IP Subject Alternative Names to define for the CA certificate, in a comma-delimited list. */
+        ip_sans?: string;
+        /** The URI Subject Alternative Names to define for the CA certificate, in a comma-delimited list. */
+        uri_sans?: string;
+        /** The custom Object Identifier (OID) or UTF8-string Subject Alternative Names to define for the CA
+         *  certificate.
+         *
+         *  The alternative names must match the values that are specified in the `allowed_other_sans` field in the
+         *  associated certificate template. The format is the same as OpenSSL: `<oid>:<type>:<value>` where the current
+         *  valid type is `UTF8`.
+         */
+        other_sans?: string[];
+        /** he requested TTL, after which the certificate expires. */
+        ttl?: number;
+        /** The format of the returned data. */
+        format?: PrivateCertificateConfigurationRotateAction.Constants.Format | string;
+        /** The maximum path length to encode in the generated certificate. `-1` means no limit.
+         *
+         *  If the signing certificate has a maximum path length set, the path length is set to one less than that of the
+         *  signing certificate. A limit of `0` means a literal path length of zero.
+         */
+        max_path_length?: number;
+        /** This parameter controls whether the common name is excluded from Subject Alternative Names (SANs).
+         *
+         *  If the common name is set to `true`, it is not included in DNS, or email SANs if they apply. This field can be
+         *  useful if the common name is a human-readable identifier, instead of a hostname or an email address.
+         */
+        exclude_cn_from_sans?: boolean;
+        /** The allowed DNS domains or subdomains for the certificates that are to be signed and issued by this CA
+         *  certificate.
+         */
+        permitted_dns_domains?: string[];
+        /** This field indicates whether to use values from a certificate signing request (CSR) to complete a
+         *  `private_cert_configuration_action_sign_csr` action. If it is set to `true`, then:
+         *
+         *  1) Subject information, including names and alternate names, are preserved from the CSR rather than by using the
+         *  values that are provided in the other parameters to this operation.
+         *
+         *  2) Any key usage, for example, non-repudiation, that is requested in the CSR are added to the basic set of key
+         *  usages used for CA certificates that are signed by the intermediate authority.
+         *
+         *  3) Extensions that are requested in the CSR are copied into the issued private certificate.
+         */
+        use_csr_values?: boolean;
+        /** The Organizational Unit (OU) values to define in the subject field of the resulting certificate. */
+        ou?: string[];
+        /** The Organization (O) values to define in the subject field of the resulting certificate. */
+        organization?: string[];
+        /** The Country (C) values to define in the subject field of the resulting certificate. */
+        country?: string[];
+        /** The Locality (L) values to define in the subject field of the resulting certificate. */
+        locality?: string[];
+        /** The Province (ST) values to define in the subject field of the resulting certificate. */
+        province?: string[];
+        /** The street address values to define in the subject field of the resulting certificate. */
+        street_address?: string[];
+        /** The postal code values to define in the subject field of the resulting certificate. */
+        postal_code?: string[];
+        /** The requested value for the [`serialNumber`](https://datatracker.ietf.org/doc/html/rfc4519#section-2.31)
+         *  attribute that is in the certificate's distinguished name (DN).
+         *
+         *  **Note:** This field is not related to the `serial_number` field that is returned in the API response. The
+         *  `serial_number` field represents the certificate's randomly assigned serial number.
+         */
+        serial_number?: string;
+        /** The certificate signing request. */
+        csr?: string;
+        /** The data that is associated with the root certificate authority. */
+        data?: PrivateCertificateConfigurationCACertificate;
+    }
+    namespace PrivateCertificateConfigurationRotateAction {
+        namespace Constants {
+            /** The format of the returned data. */
+            enum Format {
+                PEM = "pem",
+                PEM_BUNDLE = "pem_bundle"
+            }
+        }
+    }
     /**
      * The data that is associated with a cryptographic key.
      */
@@ -1677,7 +1963,7 @@ declare namespace SecretsManagerV2 {
      * Properties that describe a secret group.
      */
     interface SecretGroup {
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         id: string;
         /** The name of your existing secret group. */
         name?: string;
@@ -1727,11 +2013,11 @@ declare namespace SecretsManagerV2 {
         updated_at: string;
         /** The unique identifier that is associated with the entity that created the secret. */
         created_by: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         secret_id: string;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         secret_version_id: string;
         /** A human-readable alias that describes the secret version. 'Current' is used for version `n` and 'previous'
          *  is used for version `n-1`.
@@ -1770,14 +2056,14 @@ declare namespace SecretsManagerV2 {
      * Create locks response body containing a collection of locks that are attached to a secret.
      */
     interface SecretLocks {
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         secret_id: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** The secret type. Supported types are arbitrary, imported_cert, public_cert, private_cert, iam_credentials,
          *  service_credentials, kv, and username_password.
          */
-        secret_type?: SecretLocks.Constants.SecretType | string;
+        secret_type: SecretLocks.Constants.SecretType | string;
         /** The human-readable name of your secret. */
         secret_name?: string;
         /** A collection of locks that are attached to a secret. */
@@ -1869,7 +2155,7 @@ declare namespace SecretsManagerV2 {
      * SecretVersionLocks.
      */
     interface SecretVersionLocks {
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         version_id: string;
         /** A human-readable alias that describes the secret version. 'Current' is used for version `n` and 'previous'
          *  is used for version `n-1`.
@@ -2123,7 +2409,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** Labels that you can use to search secrets in your instance. Only 30 labels can be created.
          *
@@ -2136,7 +2422,7 @@ declare namespace SecretsManagerV2 {
         locks_total?: number;
         /** The human-readable name of your secret. */
         name?: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** The secret type. Supported types are arbitrary, imported_cert, public_cert, private_cert, iam_credentials,
          *  service_credentials, kv, and username_password.
@@ -2206,7 +2492,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** Labels that you can use to search secrets in your instance. Only 30 labels can be created.
          *
@@ -2219,7 +2505,7 @@ declare namespace SecretsManagerV2 {
         locks_total?: number;
         /** The human-readable name of your secret. */
         name?: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** The secret type. Supported types are arbitrary, imported_cert, public_cert, private_cert, iam_credentials,
          *  service_credentials, kv, and username_password.
@@ -2322,7 +2608,7 @@ declare namespace SecretsManagerV2 {
          *  To protect your privacy, do not use personal data, such as your name or location, as a name for your secret.
          */
         name: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id?: string;
         /** The secret type. Supported types are arbitrary, imported_cert, public_cert, private_cert, iam_credentials,
          *  service_credentials, kv, and username_password.
@@ -2362,7 +2648,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** The human-readable name of your secret. */
         secret_name?: string;
@@ -2370,7 +2656,7 @@ declare namespace SecretsManagerV2 {
          *  service_credentials, kv, and username_password.
          */
         secret_type: ArbitrarySecretVersion.Constants.SecretType | string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** Indicates whether the secret payload is available in this secret version. */
         payload_available: boolean;
@@ -2380,7 +2666,7 @@ declare namespace SecretsManagerV2 {
         alias?: ArbitrarySecretVersion.Constants.Alias | string;
         /** The secret version metadata that a user can customize. */
         version_custom_metadata?: JsonObject;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         secret_id: string;
         /** The date when the secret material expires. The date format follows the `RFC 3339` format. Supported secret
          *  types: Arbitrary, username_password.
@@ -2423,7 +2709,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** The human-readable name of your secret. */
         secret_name?: string;
@@ -2431,7 +2717,7 @@ declare namespace SecretsManagerV2 {
          *  service_credentials, kv, and username_password.
          */
         secret_type: ArbitrarySecretVersionMetadata.Constants.SecretType | string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** Indicates whether the secret payload is available in this secret version. */
         payload_available: boolean;
@@ -2441,7 +2727,7 @@ declare namespace SecretsManagerV2 {
         alias?: ArbitrarySecretVersionMetadata.Constants.Alias | string;
         /** The secret version metadata that a user can customize. */
         version_custom_metadata?: JsonObject;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         secret_id: string;
         /** The date when the secret material expires. The date format follows the `RFC 3339` format. Supported secret
          *  types: Arbitrary, username_password.
@@ -2686,7 +2972,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** Labels that you can use to search secrets in your instance. Only 30 labels can be created.
          *
@@ -2699,7 +2985,7 @@ declare namespace SecretsManagerV2 {
         locks_total?: number;
         /** The human-readable name of your secret. */
         name?: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** The secret type. Supported types are arbitrary, imported_cert, public_cert, private_cert, iam_credentials,
          *  service_credentials, kv, and username_password.
@@ -2827,7 +3113,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** Labels that you can use to search secrets in your instance. Only 30 labels can be created.
          *
@@ -2840,7 +3126,7 @@ declare namespace SecretsManagerV2 {
         locks_total?: number;
         /** The human-readable name of your secret. */
         name?: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** The secret type. Supported types are arbitrary, imported_cert, public_cert, private_cert, iam_credentials,
          *  service_credentials, kv, and username_password.
@@ -2996,7 +3282,7 @@ declare namespace SecretsManagerV2 {
          *  secret group.
          */
         description?: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id?: string;
         /** Labels that you can use to search secrets in your instance. Only 30 labels can be created.
          *
@@ -3068,7 +3354,7 @@ declare namespace SecretsManagerV2 {
      * IAMCredentialsSecretRestoreFromVersionPrototype.
      */
     interface IAMCredentialsSecretRestoreFromVersionPrototype extends SecretVersionPrototype {
-        /** A v4 UUID identifier, or `current` or `previous` secret version aliases. */
+        /** A UUID identifier, or `current` or `previous` secret version aliases. */
         restore_from_version: string;
         /** The secret metadata that a user can customize. */
         custom_metadata?: JsonObject;
@@ -3089,7 +3375,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** The human-readable name of your secret. */
         secret_name?: string;
@@ -3097,7 +3383,7 @@ declare namespace SecretsManagerV2 {
          *  service_credentials, kv, and username_password.
          */
         secret_type: IAMCredentialsSecretVersion.Constants.SecretType | string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** Indicates whether the secret payload is available in this secret version. */
         payload_available: boolean;
@@ -3107,7 +3393,7 @@ declare namespace SecretsManagerV2 {
         alias?: IAMCredentialsSecretVersion.Constants.Alias | string;
         /** The secret version metadata that a user can customize. */
         version_custom_metadata?: JsonObject;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         secret_id: string;
         /** The date when the secret material expires. The date format follows the `RFC 3339` format. Supported secret
          *  types: Arbitrary, username_password.
@@ -3167,7 +3453,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** The human-readable name of your secret. */
         secret_name?: string;
@@ -3175,7 +3461,7 @@ declare namespace SecretsManagerV2 {
          *  service_credentials, kv, and username_password.
          */
         secret_type: IAMCredentialsSecretVersionMetadata.Constants.SecretType | string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** Indicates whether the secret payload is available in this secret version. */
         payload_available: boolean;
@@ -3185,7 +3471,7 @@ declare namespace SecretsManagerV2 {
         alias?: IAMCredentialsSecretVersionMetadata.Constants.Alias | string;
         /** The secret version metadata that a user can customize. */
         version_custom_metadata?: JsonObject;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         secret_id: string;
         /** The date when the secret material expires. The date format follows the `RFC 3339` format. Supported secret
          *  types: Arbitrary, username_password.
@@ -3255,7 +3541,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** Labels that you can use to search secrets in your instance. Only 30 labels can be created.
          *
@@ -3268,7 +3554,7 @@ declare namespace SecretsManagerV2 {
         locks_total?: number;
         /** The human-readable name of your secret. */
         name?: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** The secret type. Supported types are arbitrary, imported_cert, public_cert, private_cert, iam_credentials,
          *  service_credentials, kv, and username_password.
@@ -3289,7 +3575,7 @@ declare namespace SecretsManagerV2 {
         /** The identifier for the cryptographic algorithm that is used by the issuing certificate authority to sign a
          *  certificate.
          */
-        signing_algorithm: string;
+        signing_algorithm?: string;
         /** With the Subject Alternative Name field, you can specify additional hostnames to be protected by a single
          *  SSL certificate.
          */
@@ -3299,23 +3585,25 @@ declare namespace SecretsManagerV2 {
         /** The date when the secret material expires. The date format follows the `RFC 3339` format. Supported secret
          *  types: Arbitrary, username_password.
          */
-        expiration_date: string;
+        expiration_date?: string;
         /** Indicates whether the certificate was imported with an associated intermediate certificate. */
-        intermediate_included: boolean;
+        intermediate_included?: boolean;
         /** The distinguished name that identifies the entity that signed and issued the certificate. */
-        issuer: string;
+        issuer?: string;
         /** The identifier for the cryptographic algorithm used to generate the public key that is associated with the
          *  certificate.
          */
         key_algorithm?: string;
         /** Indicates whether the certificate was imported with an associated private key. */
-        private_key_included: boolean;
+        private_key_included?: boolean;
         /** The unique serial number that was assigned to a certificate by the issuing certificate authority. */
-        serial_number: string;
+        serial_number?: string;
         /** The date and time that the certificate validity period begins and ends. */
-        validity: CertificateValidity;
+        validity?: CertificateValidity;
+        /** The data specified to create the CSR and the private key. */
+        managed_csr?: ImportedCertificateManagedCsrResponse;
         /** Your PEM-encoded certificate. The data must be formatted on a single line with embedded newline characters. */
-        certificate: string;
+        certificate?: string;
         /** The PEM-encoded intermediate certificate that is associated with the root certificate. The data must be
          *  formatted on a single line with embedded newline characters.
          */
@@ -3324,6 +3612,8 @@ declare namespace SecretsManagerV2 {
          *  line with embedded newline characters.
          */
         private_key?: string;
+        /** The certificate signing request. */
+        csr?: string;
     }
     namespace ImportedCertificate {
         namespace Constants {
@@ -3370,7 +3660,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** Labels that you can use to search secrets in your instance. Only 30 labels can be created.
          *
@@ -3383,7 +3673,7 @@ declare namespace SecretsManagerV2 {
         locks_total?: number;
         /** The human-readable name of your secret. */
         name?: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** The secret type. Supported types are arbitrary, imported_cert, public_cert, private_cert, iam_credentials,
          *  service_credentials, kv, and username_password.
@@ -3404,7 +3694,7 @@ declare namespace SecretsManagerV2 {
         /** The identifier for the cryptographic algorithm that is used by the issuing certificate authority to sign a
          *  certificate.
          */
-        signing_algorithm: string;
+        signing_algorithm?: string;
         /** With the Subject Alternative Name field, you can specify additional hostnames to be protected by a single
          *  SSL certificate.
          */
@@ -3414,21 +3704,23 @@ declare namespace SecretsManagerV2 {
         /** The date when the secret material expires. The date format follows the `RFC 3339` format. Supported secret
          *  types: Arbitrary, username_password.
          */
-        expiration_date: string;
+        expiration_date?: string;
         /** Indicates whether the certificate was imported with an associated intermediate certificate. */
-        intermediate_included: boolean;
+        intermediate_included?: boolean;
         /** The distinguished name that identifies the entity that signed and issued the certificate. */
-        issuer: string;
+        issuer?: string;
         /** The identifier for the cryptographic algorithm used to generate the public key that is associated with the
          *  certificate.
          */
         key_algorithm?: string;
         /** Indicates whether the certificate was imported with an associated private key. */
-        private_key_included: boolean;
+        private_key_included?: boolean;
         /** The unique serial number that was assigned to a certificate by the issuing certificate authority. */
-        serial_number: string;
+        serial_number?: string;
         /** The date and time that the certificate validity period begins and ends. */
-        validity: CertificateValidity;
+        validity?: CertificateValidity;
+        /** The data specified to create the CSR and the private key. */
+        managed_csr?: ImportedCertificateManagedCsrResponse;
     }
     namespace ImportedCertificateMetadata {
         namespace Constants {
@@ -3477,6 +3769,8 @@ declare namespace SecretsManagerV2 {
         labels?: string[];
         /** The secret metadata that a user can customize. */
         custom_metadata?: JsonObject;
+        /** The data specified to create the CSR and the private key. */
+        managed_csr?: ImportedCertificateManagedCsr;
     }
     /**
      * ImportedCertificatePrototype.
@@ -3497,7 +3791,7 @@ declare namespace SecretsManagerV2 {
          *  secret group.
          */
         description?: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id?: string;
         /** Labels that you can use to search secrets in your instance. Only 30 labels can be created.
          *
@@ -3507,7 +3801,7 @@ declare namespace SecretsManagerV2 {
          */
         labels?: string[];
         /** Your PEM-encoded certificate. The data must be formatted on a single line with embedded newline characters. */
-        certificate: string;
+        certificate?: string;
         /** The PEM-encoded intermediate certificate that is associated with the root certificate. The data must be
          *  formatted on a single line with embedded newline characters.
          */
@@ -3516,6 +3810,8 @@ declare namespace SecretsManagerV2 {
          *  line with embedded newline characters.
          */
         private_key?: string;
+        /** The data specified to create the CSR and the private key. */
+        managed_csr?: ImportedCertificateManagedCsr;
         /** The secret metadata that a user can customize. */
         custom_metadata?: JsonObject;
         /** The secret version metadata that a user can customize. */
@@ -3550,7 +3846,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** The human-readable name of your secret. */
         secret_name?: string;
@@ -3558,7 +3854,7 @@ declare namespace SecretsManagerV2 {
          *  service_credentials, kv, and username_password.
          */
         secret_type: ImportedCertificateVersion.Constants.SecretType | string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** Indicates whether the secret payload is available in this secret version. */
         payload_available: boolean;
@@ -3568,7 +3864,7 @@ declare namespace SecretsManagerV2 {
         alias?: ImportedCertificateVersion.Constants.Alias | string;
         /** The secret version metadata that a user can customize. */
         version_custom_metadata?: JsonObject;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         secret_id: string;
         /** The date when the secret material expires. The date format follows the `RFC 3339` format. Supported secret
          *  types: Arbitrary, username_password.
@@ -3579,7 +3875,7 @@ declare namespace SecretsManagerV2 {
         /** The date and time that the certificate validity period begins and ends. */
         validity: CertificateValidity;
         /** Your PEM-encoded certificate. The data must be formatted on a single line with embedded newline characters. */
-        certificate: string;
+        certificate?: string;
         /** The PEM-encoded intermediate certificate that is associated with the root certificate. The data must be
          *  formatted on a single line with embedded newline characters.
          */
@@ -3588,6 +3884,8 @@ declare namespace SecretsManagerV2 {
          *  line with embedded newline characters.
          */
         private_key?: string;
+        /** The certificate signing request. */
+        csr?: string;
     }
     namespace ImportedCertificateVersion {
         namespace Constants {
@@ -3623,7 +3921,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** The human-readable name of your secret. */
         secret_name?: string;
@@ -3631,7 +3929,7 @@ declare namespace SecretsManagerV2 {
          *  service_credentials, kv, and username_password.
          */
         secret_type: ImportedCertificateVersionMetadata.Constants.SecretType | string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** Indicates whether the secret payload is available in this secret version. */
         payload_available: boolean;
@@ -3641,7 +3939,7 @@ declare namespace SecretsManagerV2 {
         alias?: ImportedCertificateVersionMetadata.Constants.Alias | string;
         /** The secret version metadata that a user can customize. */
         version_custom_metadata?: JsonObject;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         secret_id: string;
         /** The date when the secret material expires. The date format follows the `RFC 3339` format. Supported secret
          *  types: Arbitrary, username_password.
@@ -3713,7 +4011,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** Labels that you can use to search secrets in your instance. Only 30 labels can be created.
          *
@@ -3726,7 +4024,7 @@ declare namespace SecretsManagerV2 {
         locks_total?: number;
         /** The human-readable name of your secret. */
         name?: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** The secret type. Supported types are arbitrary, imported_cert, public_cert, private_cert, iam_credentials,
          *  service_credentials, kv, and username_password.
@@ -3792,7 +4090,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** Labels that you can use to search secrets in your instance. Only 30 labels can be created.
          *
@@ -3805,7 +4103,7 @@ declare namespace SecretsManagerV2 {
         locks_total?: number;
         /** The human-readable name of your secret. */
         name?: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** The secret type. Supported types are arbitrary, imported_cert, public_cert, private_cert, iam_credentials,
          *  service_credentials, kv, and username_password.
@@ -3891,7 +4189,7 @@ declare namespace SecretsManagerV2 {
          *  secret group.
          */
         description?: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id?: string;
         /** Labels that you can use to search secrets in your instance. Only 30 labels can be created.
          *
@@ -3936,7 +4234,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** The human-readable name of your secret. */
         secret_name?: string;
@@ -3944,7 +4242,7 @@ declare namespace SecretsManagerV2 {
          *  service_credentials, kv, and username_password.
          */
         secret_type: KVSecretVersion.Constants.SecretType | string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** Indicates whether the secret payload is available in this secret version. */
         payload_available: boolean;
@@ -3954,7 +4252,7 @@ declare namespace SecretsManagerV2 {
         alias?: KVSecretVersion.Constants.Alias | string;
         /** The secret version metadata that a user can customize. */
         version_custom_metadata?: JsonObject;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         secret_id: string;
         /** The date when the secret material expires. The date format follows the `RFC 3339` format. Supported secret
          *  types: Arbitrary, username_password.
@@ -3997,7 +4295,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** The human-readable name of your secret. */
         secret_name?: string;
@@ -4005,7 +4303,7 @@ declare namespace SecretsManagerV2 {
          *  service_credentials, kv, and username_password.
          */
         secret_type: KVSecretVersionMetadata.Constants.SecretType | string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** Indicates whether the secret payload is available in this secret version. */
         payload_available: boolean;
@@ -4015,7 +4313,7 @@ declare namespace SecretsManagerV2 {
         alias?: KVSecretVersionMetadata.Constants.Alias | string;
         /** The secret version metadata that a user can customize. */
         version_custom_metadata?: JsonObject;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         secret_id: string;
         /** The date when the secret material expires. The date format follows the `RFC 3339` format. Supported secret
          *  types: Arbitrary, username_password.
@@ -4075,7 +4373,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** Labels that you can use to search secrets in your instance. Only 30 labels can be created.
          *
@@ -4088,7 +4386,7 @@ declare namespace SecretsManagerV2 {
         locks_total?: number;
         /** The human-readable name of your secret. */
         name?: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** The secret type. Supported types are arbitrary, imported_cert, public_cert, private_cert, iam_credentials,
          *  service_credentials, kv, and username_password.
@@ -4233,7 +4531,8 @@ declare namespace SecretsManagerV2 {
                 PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_INTERMEDIATE = "private_cert_configuration_action_sign_intermediate",
                 PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_CSR = "private_cert_configuration_action_sign_csr",
                 PRIVATE_CERT_CONFIGURATION_ACTION_SET_SIGNED = "private_cert_configuration_action_set_signed",
-                PRIVATE_CERT_CONFIGURATION_ACTION_REVOKE_CA_CERTIFICATE = "private_cert_configuration_action_revoke_ca_certificate"
+                PRIVATE_CERT_CONFIGURATION_ACTION_REVOKE_CA_CERTIFICATE = "private_cert_configuration_action_revoke_ca_certificate",
+                PRIVATE_CERT_CONFIGURATION_ACTION_ROTATE_INTERMEDIATE = "private_cert_configuration_action_rotate_intermediate"
             }
         }
     }
@@ -4252,7 +4551,34 @@ declare namespace SecretsManagerV2 {
                 PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_INTERMEDIATE = "private_cert_configuration_action_sign_intermediate",
                 PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_CSR = "private_cert_configuration_action_sign_csr",
                 PRIVATE_CERT_CONFIGURATION_ACTION_SET_SIGNED = "private_cert_configuration_action_set_signed",
-                PRIVATE_CERT_CONFIGURATION_ACTION_REVOKE_CA_CERTIFICATE = "private_cert_configuration_action_revoke_ca_certificate"
+                PRIVATE_CERT_CONFIGURATION_ACTION_REVOKE_CA_CERTIFICATE = "private_cert_configuration_action_revoke_ca_certificate",
+                PRIVATE_CERT_CONFIGURATION_ACTION_ROTATE_INTERMEDIATE = "private_cert_configuration_action_rotate_intermediate"
+            }
+        }
+    }
+    /**
+     * The response body to specify the properties of the action to rotate the private certificate.
+     */
+    interface PrivateCertificateConfigurationActionRotate extends ConfigurationAction {
+        /** The type of configuration action. */
+        action_type: PrivateCertificateConfigurationActionRotate.Constants.ActionType | string;
+        /** The name of the intermediate certificate authority configuration. */
+        name: string;
+        /** The response body of the action to rotate an intermediate certificate authority for the private certificate
+         *  configuration.
+         */
+        config: PrivateCertificateConfigurationRotateAction;
+    }
+    namespace PrivateCertificateConfigurationActionRotate {
+        namespace Constants {
+            /** The type of configuration action. */
+            enum ActionType {
+                PRIVATE_CERT_CONFIGURATION_ACTION_ROTATE_CRL = "private_cert_configuration_action_rotate_crl",
+                PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_INTERMEDIATE = "private_cert_configuration_action_sign_intermediate",
+                PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_CSR = "private_cert_configuration_action_sign_csr",
+                PRIVATE_CERT_CONFIGURATION_ACTION_SET_SIGNED = "private_cert_configuration_action_set_signed",
+                PRIVATE_CERT_CONFIGURATION_ACTION_REVOKE_CA_CERTIFICATE = "private_cert_configuration_action_revoke_ca_certificate",
+                PRIVATE_CERT_CONFIGURATION_ACTION_ROTATE_INTERMEDIATE = "private_cert_configuration_action_rotate_intermediate"
             }
         }
     }
@@ -4276,7 +4602,8 @@ declare namespace SecretsManagerV2 {
                 PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_INTERMEDIATE = "private_cert_configuration_action_sign_intermediate",
                 PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_CSR = "private_cert_configuration_action_sign_csr",
                 PRIVATE_CERT_CONFIGURATION_ACTION_SET_SIGNED = "private_cert_configuration_action_set_signed",
-                PRIVATE_CERT_CONFIGURATION_ACTION_REVOKE_CA_CERTIFICATE = "private_cert_configuration_action_revoke_ca_certificate"
+                PRIVATE_CERT_CONFIGURATION_ACTION_REVOKE_CA_CERTIFICATE = "private_cert_configuration_action_revoke_ca_certificate",
+                PRIVATE_CERT_CONFIGURATION_ACTION_ROTATE_INTERMEDIATE = "private_cert_configuration_action_rotate_intermediate"
             }
         }
     }
@@ -4296,7 +4623,28 @@ declare namespace SecretsManagerV2 {
                 PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_INTERMEDIATE = "private_cert_configuration_action_sign_intermediate",
                 PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_CSR = "private_cert_configuration_action_sign_csr",
                 PRIVATE_CERT_CONFIGURATION_ACTION_SET_SIGNED = "private_cert_configuration_action_set_signed",
-                PRIVATE_CERT_CONFIGURATION_ACTION_REVOKE_CA_CERTIFICATE = "private_cert_configuration_action_revoke_ca_certificate"
+                PRIVATE_CERT_CONFIGURATION_ACTION_REVOKE_CA_CERTIFICATE = "private_cert_configuration_action_revoke_ca_certificate",
+                PRIVATE_CERT_CONFIGURATION_ACTION_ROTATE_INTERMEDIATE = "private_cert_configuration_action_rotate_intermediate"
+            }
+        }
+    }
+    /**
+     * The request body to specify the properties of the action to rotate an intermediate CA certificate.
+     */
+    interface PrivateCertificateConfigurationActionRotatePrototype extends ConfigurationActionPrototype {
+        /** The type of configuration action. */
+        action_type: PrivateCertificateConfigurationActionRotatePrototype.Constants.ActionType | string;
+    }
+    namespace PrivateCertificateConfigurationActionRotatePrototype {
+        namespace Constants {
+            /** The type of configuration action. */
+            enum ActionType {
+                PRIVATE_CERT_CONFIGURATION_ACTION_ROTATE_CRL = "private_cert_configuration_action_rotate_crl",
+                PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_INTERMEDIATE = "private_cert_configuration_action_sign_intermediate",
+                PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_CSR = "private_cert_configuration_action_sign_csr",
+                PRIVATE_CERT_CONFIGURATION_ACTION_SET_SIGNED = "private_cert_configuration_action_set_signed",
+                PRIVATE_CERT_CONFIGURATION_ACTION_REVOKE_CA_CERTIFICATE = "private_cert_configuration_action_revoke_ca_certificate",
+                PRIVATE_CERT_CONFIGURATION_ACTION_ROTATE_INTERMEDIATE = "private_cert_configuration_action_rotate_intermediate"
             }
         }
     }
@@ -4318,7 +4666,8 @@ declare namespace SecretsManagerV2 {
                 PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_INTERMEDIATE = "private_cert_configuration_action_sign_intermediate",
                 PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_CSR = "private_cert_configuration_action_sign_csr",
                 PRIVATE_CERT_CONFIGURATION_ACTION_SET_SIGNED = "private_cert_configuration_action_set_signed",
-                PRIVATE_CERT_CONFIGURATION_ACTION_REVOKE_CA_CERTIFICATE = "private_cert_configuration_action_revoke_ca_certificate"
+                PRIVATE_CERT_CONFIGURATION_ACTION_REVOKE_CA_CERTIFICATE = "private_cert_configuration_action_revoke_ca_certificate",
+                PRIVATE_CERT_CONFIGURATION_ACTION_ROTATE_INTERMEDIATE = "private_cert_configuration_action_rotate_intermediate"
             }
         }
     }
@@ -4340,7 +4689,8 @@ declare namespace SecretsManagerV2 {
                 PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_INTERMEDIATE = "private_cert_configuration_action_sign_intermediate",
                 PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_CSR = "private_cert_configuration_action_sign_csr",
                 PRIVATE_CERT_CONFIGURATION_ACTION_SET_SIGNED = "private_cert_configuration_action_set_signed",
-                PRIVATE_CERT_CONFIGURATION_ACTION_REVOKE_CA_CERTIFICATE = "private_cert_configuration_action_revoke_ca_certificate"
+                PRIVATE_CERT_CONFIGURATION_ACTION_REVOKE_CA_CERTIFICATE = "private_cert_configuration_action_revoke_ca_certificate",
+                PRIVATE_CERT_CONFIGURATION_ACTION_ROTATE_INTERMEDIATE = "private_cert_configuration_action_rotate_intermediate"
             }
         }
     }
@@ -4443,7 +4793,8 @@ declare namespace SecretsManagerV2 {
                 PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_INTERMEDIATE = "private_cert_configuration_action_sign_intermediate",
                 PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_CSR = "private_cert_configuration_action_sign_csr",
                 PRIVATE_CERT_CONFIGURATION_ACTION_SET_SIGNED = "private_cert_configuration_action_set_signed",
-                PRIVATE_CERT_CONFIGURATION_ACTION_REVOKE_CA_CERTIFICATE = "private_cert_configuration_action_revoke_ca_certificate"
+                PRIVATE_CERT_CONFIGURATION_ACTION_REVOKE_CA_CERTIFICATE = "private_cert_configuration_action_revoke_ca_certificate",
+                PRIVATE_CERT_CONFIGURATION_ACTION_ROTATE_INTERMEDIATE = "private_cert_configuration_action_rotate_intermediate"
             }
         }
     }
@@ -4544,7 +4895,8 @@ declare namespace SecretsManagerV2 {
                 PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_INTERMEDIATE = "private_cert_configuration_action_sign_intermediate",
                 PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_CSR = "private_cert_configuration_action_sign_csr",
                 PRIVATE_CERT_CONFIGURATION_ACTION_SET_SIGNED = "private_cert_configuration_action_set_signed",
-                PRIVATE_CERT_CONFIGURATION_ACTION_REVOKE_CA_CERTIFICATE = "private_cert_configuration_action_revoke_ca_certificate"
+                PRIVATE_CERT_CONFIGURATION_ACTION_REVOKE_CA_CERTIFICATE = "private_cert_configuration_action_revoke_ca_certificate",
+                PRIVATE_CERT_CONFIGURATION_ACTION_ROTATE_INTERMEDIATE = "private_cert_configuration_action_rotate_intermediate"
             }
         }
     }
@@ -4646,7 +4998,8 @@ declare namespace SecretsManagerV2 {
                 PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_INTERMEDIATE = "private_cert_configuration_action_sign_intermediate",
                 PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_CSR = "private_cert_configuration_action_sign_csr",
                 PRIVATE_CERT_CONFIGURATION_ACTION_SET_SIGNED = "private_cert_configuration_action_set_signed",
-                PRIVATE_CERT_CONFIGURATION_ACTION_REVOKE_CA_CERTIFICATE = "private_cert_configuration_action_revoke_ca_certificate"
+                PRIVATE_CERT_CONFIGURATION_ACTION_REVOKE_CA_CERTIFICATE = "private_cert_configuration_action_revoke_ca_certificate",
+                PRIVATE_CERT_CONFIGURATION_ACTION_ROTATE_INTERMEDIATE = "private_cert_configuration_action_rotate_intermediate"
             }
         }
     }
@@ -4748,7 +5101,8 @@ declare namespace SecretsManagerV2 {
                 PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_INTERMEDIATE = "private_cert_configuration_action_sign_intermediate",
                 PRIVATE_CERT_CONFIGURATION_ACTION_SIGN_CSR = "private_cert_configuration_action_sign_csr",
                 PRIVATE_CERT_CONFIGURATION_ACTION_SET_SIGNED = "private_cert_configuration_action_set_signed",
-                PRIVATE_CERT_CONFIGURATION_ACTION_REVOKE_CA_CERTIFICATE = "private_cert_configuration_action_revoke_ca_certificate"
+                PRIVATE_CERT_CONFIGURATION_ACTION_REVOKE_CA_CERTIFICATE = "private_cert_configuration_action_revoke_ca_certificate",
+                PRIVATE_CERT_CONFIGURATION_ACTION_ROTATE_INTERMEDIATE = "private_cert_configuration_action_rotate_intermediate"
             }
         }
     }
@@ -6356,7 +6710,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** Labels that you can use to search secrets in your instance. Only 30 labels can be created.
          *
@@ -6369,7 +6723,7 @@ declare namespace SecretsManagerV2 {
         locks_total?: number;
         /** The human-readable name of your secret. */
         name?: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** The secret type. Supported types are arbitrary, imported_cert, public_cert, private_cert, iam_credentials,
          *  service_credentials, kv, and username_password.
@@ -6501,7 +6855,7 @@ declare namespace SecretsManagerV2 {
          *  secret group.
          */
         description?: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id?: string;
         /** Labels that you can use to search secrets in your instance. Only 30 labels can be created.
          *
@@ -6596,7 +6950,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** The human-readable name of your secret. */
         secret_name?: string;
@@ -6604,7 +6958,7 @@ declare namespace SecretsManagerV2 {
          *  service_credentials, kv, and username_password.
          */
         secret_type: PrivateCertificateVersion.Constants.SecretType | string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** Indicates whether the secret payload is available in this secret version. */
         payload_available: boolean;
@@ -6614,7 +6968,7 @@ declare namespace SecretsManagerV2 {
         alias?: PrivateCertificateVersion.Constants.Alias | string;
         /** The secret version metadata that a user can customize. */
         version_custom_metadata?: JsonObject;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         secret_id: string;
         /** The date when the secret material expires. The date format follows the `RFC 3339` format. Supported secret
          *  types: Arbitrary, username_password.
@@ -6701,7 +7055,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** The human-readable name of your secret. */
         secret_name?: string;
@@ -6709,7 +7063,7 @@ declare namespace SecretsManagerV2 {
          *  service_credentials, kv, and username_password.
          */
         secret_type: PrivateCertificateVersionMetadata.Constants.SecretType | string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** Indicates whether the secret payload is available in this secret version. */
         payload_available: boolean;
@@ -6719,7 +7073,7 @@ declare namespace SecretsManagerV2 {
         alias?: PrivateCertificateVersionMetadata.Constants.Alias | string;
         /** The secret version metadata that a user can customize. */
         version_custom_metadata?: JsonObject;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         secret_id: string;
         /** The date when the secret material expires. The date format follows the `RFC 3339` format. Supported secret
          *  types: Arbitrary, username_password.
@@ -6783,7 +7137,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** Labels that you can use to search secrets in your instance. Only 30 labels can be created.
          *
@@ -6796,7 +7150,7 @@ declare namespace SecretsManagerV2 {
         locks_total?: number;
         /** The human-readable name of your secret. */
         name?: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** The secret type. Supported types are arbitrary, imported_cert, public_cert, private_cert, iam_credentials,
          *  service_credentials, kv, and username_password.
@@ -6823,7 +7177,7 @@ declare namespace SecretsManagerV2 {
          */
         alt_names?: string[];
         /** The Common Name (CN) represents the server name protected by the SSL certificate. */
-        common_name: string;
+        common_name?: string;
         /** The date when the secret material expires. The date format follows the `RFC 3339` format. Supported secret
          *  types: Arbitrary, username_password.
          */
@@ -7492,7 +7846,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** Labels that you can use to search secrets in your instance. Only 30 labels can be created.
          *
@@ -7505,7 +7859,7 @@ declare namespace SecretsManagerV2 {
         locks_total?: number;
         /** The human-readable name of your secret. */
         name?: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** The secret type. Supported types are arbitrary, imported_cert, public_cert, private_cert, iam_credentials,
          *  service_credentials, kv, and username_password.
@@ -7532,7 +7886,7 @@ declare namespace SecretsManagerV2 {
          */
         alt_names?: string[];
         /** The Common Name (CN) represents the server name protected by the SSL certificate. */
-        common_name: string;
+        common_name?: string;
         /** The date when the secret material expires. The date format follows the `RFC 3339` format. Supported secret
          *  types: Arbitrary, username_password.
          */
@@ -7635,7 +7989,7 @@ declare namespace SecretsManagerV2 {
          *  secret group.
          */
         description?: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id?: string;
         /** Labels that you can use to search secrets in your instance. Only 30 labels can be created.
          *
@@ -7645,7 +7999,7 @@ declare namespace SecretsManagerV2 {
          */
         labels?: string[];
         /** The Common Name (CN) represents the server name protected by the SSL certificate. */
-        common_name: string;
+        common_name?: string;
         /** With the Subject Alternative Name field, you can specify additional hostnames to be protected by a single
          *  SSL certificate.
          */
@@ -7725,7 +8079,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** The human-readable name of your secret. */
         secret_name?: string;
@@ -7733,7 +8087,7 @@ declare namespace SecretsManagerV2 {
          *  service_credentials, kv, and username_password.
          */
         secret_type: PublicCertificateVersion.Constants.SecretType | string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** Indicates whether the secret payload is available in this secret version. */
         payload_available: boolean;
@@ -7743,7 +8097,7 @@ declare namespace SecretsManagerV2 {
         alias?: PublicCertificateVersion.Constants.Alias | string;
         /** The secret version metadata that a user can customize. */
         version_custom_metadata?: JsonObject;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         secret_id: string;
         /** The date when the secret material expires. The date format follows the `RFC 3339` format. Supported secret
          *  types: Arbitrary, username_password.
@@ -7798,7 +8152,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** The human-readable name of your secret. */
         secret_name?: string;
@@ -7806,7 +8160,7 @@ declare namespace SecretsManagerV2 {
          *  service_credentials, kv, and username_password.
          */
         secret_type: PublicCertificateVersionMetadata.Constants.SecretType | string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** Indicates whether the secret payload is available in this secret version. */
         payload_available: boolean;
@@ -7816,7 +8170,7 @@ declare namespace SecretsManagerV2 {
         alias?: PublicCertificateVersionMetadata.Constants.Alias | string;
         /** The secret version metadata that a user can customize. */
         version_custom_metadata?: JsonObject;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         secret_id: string;
         /** The date when the secret material expires. The date format follows the `RFC 3339` format. Supported secret
          *  types: Arbitrary, username_password.
@@ -7880,7 +8234,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** Labels that you can use to search secrets in your instance. Only 30 labels can be created.
          *
@@ -7893,7 +8247,7 @@ declare namespace SecretsManagerV2 {
         locks_total?: number;
         /** The human-readable name of your secret. */
         name?: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** The secret type. Supported types are arbitrary, imported_cert, public_cert, private_cert, iam_credentials,
          *  service_credentials, kv, and username_password.
@@ -7984,7 +8338,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** Labels that you can use to search secrets in your instance. Only 30 labels can be created.
          *
@@ -7997,7 +8351,7 @@ declare namespace SecretsManagerV2 {
         locks_total?: number;
         /** The human-readable name of your secret. */
         name?: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** The secret type. Supported types are arbitrary, imported_cert, public_cert, private_cert, iam_credentials,
          *  service_credentials, kv, and username_password.
@@ -8130,7 +8484,7 @@ declare namespace SecretsManagerV2 {
          *  username_password, private_cert, public_cert, iam_credentials.
          */
         rotation?: RotationPolicy;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id?: string;
         /** The secret type. Supported types are arbitrary, imported_cert, public_cert, private_cert, iam_credentials,
          *  service_credentials, kv, and username_password.
@@ -8181,7 +8535,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** The human-readable name of your secret. */
         secret_name?: string;
@@ -8189,7 +8543,7 @@ declare namespace SecretsManagerV2 {
          *  service_credentials, kv, and username_password.
          */
         secret_type: ServiceCredentialsSecretVersion.Constants.SecretType | string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** Indicates whether the secret payload is available in this secret version. */
         payload_available: boolean;
@@ -8199,7 +8553,7 @@ declare namespace SecretsManagerV2 {
         alias?: ServiceCredentialsSecretVersion.Constants.Alias | string;
         /** The secret version metadata that a user can customize. */
         version_custom_metadata?: JsonObject;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         secret_id: string;
         /** The date when the secret material expires. The date format follows the `RFC 3339` format. Supported secret
          *  types: Arbitrary, username_password.
@@ -8244,7 +8598,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** The human-readable name of your secret. */
         secret_name?: string;
@@ -8252,7 +8606,7 @@ declare namespace SecretsManagerV2 {
          *  service_credentials, kv, and username_password.
          */
         secret_type: ServiceCredentialsSecretVersionMetadata.Constants.SecretType | string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** Indicates whether the secret payload is available in this secret version. */
         payload_available: boolean;
@@ -8262,7 +8616,7 @@ declare namespace SecretsManagerV2 {
         alias?: ServiceCredentialsSecretVersionMetadata.Constants.Alias | string;
         /** The secret version metadata that a user can customize. */
         version_custom_metadata?: JsonObject;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         secret_id: string;
         /** The date when the secret material expires. The date format follows the `RFC 3339` format. Supported secret
          *  types: Arbitrary, username_password.
@@ -8322,7 +8676,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** Labels that you can use to search secrets in your instance. Only 30 labels can be created.
          *
@@ -8335,7 +8689,7 @@ declare namespace SecretsManagerV2 {
         locks_total?: number;
         /** The human-readable name of your secret. */
         name?: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** The secret type. Supported types are arbitrary, imported_cert, public_cert, private_cert, iam_credentials,
          *  service_credentials, kv, and username_password.
@@ -8419,7 +8773,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** Labels that you can use to search secrets in your instance. Only 30 labels can be created.
          *
@@ -8432,7 +8786,7 @@ declare namespace SecretsManagerV2 {
         locks_total?: number;
         /** The human-readable name of your secret. */
         name?: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** The secret type. Supported types are arbitrary, imported_cert, public_cert, private_cert, iam_credentials,
          *  service_credentials, kv, and username_password.
@@ -8546,7 +8900,7 @@ declare namespace SecretsManagerV2 {
          *  secret group.
          */
         description?: string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id?: string;
         /** Labels that you can use to search secrets in your instance. Only 30 labels can be created.
          *
@@ -8605,7 +8959,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** The human-readable name of your secret. */
         secret_name?: string;
@@ -8613,7 +8967,7 @@ declare namespace SecretsManagerV2 {
          *  service_credentials, kv, and username_password.
          */
         secret_type: UsernamePasswordSecretVersion.Constants.SecretType | string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** Indicates whether the secret payload is available in this secret version. */
         payload_available: boolean;
@@ -8623,7 +8977,7 @@ declare namespace SecretsManagerV2 {
         alias?: UsernamePasswordSecretVersion.Constants.Alias | string;
         /** The secret version metadata that a user can customize. */
         version_custom_metadata?: JsonObject;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         secret_id: string;
         /** The date when the secret material expires. The date format follows the `RFC 3339` format. Supported secret
          *  types: Arbitrary, username_password.
@@ -8668,7 +9022,7 @@ declare namespace SecretsManagerV2 {
          *  call to the service API.
          */
         downloaded?: boolean;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         id: string;
         /** The human-readable name of your secret. */
         secret_name?: string;
@@ -8676,7 +9030,7 @@ declare namespace SecretsManagerV2 {
          *  service_credentials, kv, and username_password.
          */
         secret_type: UsernamePasswordSecretVersionMetadata.Constants.SecretType | string;
-        /** A v4 UUID identifier, or `default` secret group. */
+        /** A UUID identifier, or `default` secret group. */
         secret_group_id: string;
         /** Indicates whether the secret payload is available in this secret version. */
         payload_available: boolean;
@@ -8686,7 +9040,7 @@ declare namespace SecretsManagerV2 {
         alias?: UsernamePasswordSecretVersionMetadata.Constants.Alias | string;
         /** The secret version metadata that a user can customize. */
         version_custom_metadata?: JsonObject;
-        /** A v4 UUID identifier. */
+        /** A UUID identifier. */
         secret_id: string;
         /** The date when the secret material expires. The date format follows the `RFC 3339` format. Supported secret
          *  types: Arbitrary, username_password.