google-api-python-client 2.168.0__py3-none-any.whl → 2.170.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/networksecurity.v1beta1.json

@@ -5070,7 +5070,7 @@
 }
 }
 },
-"revision": "20250326",
+"revision": "20250428",
 "rootUrl": "https://networksecurity.googleapis.com/",
 "schemas": {
 "AddAddressGroupItemsRequest": {
@@ -5209,7 +5209,7 @@
 ],
 "enumDescriptions": [
 "Protocol not specified.",
-"SMTP prtocol",
+"SMTP protocol",
 "SMB protocol",
 "POP3 protocol",
 "IMAP protocol",
@@ -5387,7 +5387,7 @@
 "id": "AuthzPolicyAuthzRuleFromRequestSource",
 "properties": {
 "principals": {
-"description": "Optional. A list of identities derived from the client's certificate. This field will not match on a request unless mutual TLS is enabled for the forwarding rule or Gateway. For Application Load Balancers, each identity is a string whose value is matched against the URI SAN, or DNS SAN, or SPIFFE ID, or the subject field in the client's certificate. For Cloud Service Mesh, each identity is a string whose value is matched against the URI SAN, or DNS SAN, or the subject field in the client's certificate. The match can be exact, prefix, suffix, or a substring match. One of exact, prefix, suffix, or contains must be specified. Limited to 5 principals.",
+"description": "Optional. A list of identities derived from the client's certificate. This field is under development and we don't recommend using it at this time. Limited to 5 principals.",
 "items": {
 "$ref": "AuthzPolicyAuthzRuleStringMatch"
 },

googleapiclient/discovery_cache/documents/networkservices.v1.json

@@ -2184,6 +2184,40 @@
 "scopes": [
 "https://www.googleapis.com/auth/cloud-platform"
 ]
+},
+"patch": {
+"description": "Updates the parameters of a single ServiceBinding.",
+"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/serviceBindings/{serviceBindingsId}",
+"httpMethod": "PATCH",
+"id": "networkservices.projects.locations.serviceBindings.patch",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Identifier. Name of the ServiceBinding resource. It matches pattern `projects/*/locations/*/serviceBindings/`.",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/serviceBindings/[^/]+$",
+"required": true,
+"type": "string"
+},
+"updateMask": {
+"description": "Optional. Field mask is used to specify the fields to be overwritten in the ServiceBinding resource by the update. The fields specified in the update_mask are relative to the resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.",
+"format": "google-fieldmask",
+"location": "query",
+"type": "string"
+}
+},
+"path": "v1/{+name}",
+"request": {
+"$ref": "ServiceBinding"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
 }
 }
 },
@@ -2970,7 +3004,7 @@
 }
 }
 },
-"revision": "20250410",
+"revision": "20250508",
 "rootUrl": "https://networkservices.googleapis.com/",
 "schemas": {
 "AuditConfig": {
@@ -3375,7 +3409,7 @@
 "type": "array"
 },
 "timeout": {
-"description": "Optional. Specifies the timeout for each individual message on the stream. The timeout must be between `10`-`1000` milliseconds. Required for callout extensions. This field is not supported for plugin extensions. Setting it results in a validation error.",
+"description": "Optional. Specifies the timeout for each individual message on the stream. The timeout must be between `10`-`10000` milliseconds. Required for callout extensions. This field is not supported for plugin extensions. Setting it results in a validation error.",
 "format": "google-duration",
 "type": "string"
 }

googleapiclient/discovery_cache/documents/networkservices.v1beta1.json

@@ -2093,6 +2093,40 @@
 "scopes": [
 "https://www.googleapis.com/auth/cloud-platform"
 ]
+},
+"patch": {
+"description": "Updates the parameters of a single ServiceBinding.",
+"flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/serviceBindings/{serviceBindingsId}",
+"httpMethod": "PATCH",
+"id": "networkservices.projects.locations.serviceBindings.patch",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Identifier. Name of the ServiceBinding resource. It matches pattern `projects/*/locations/*/serviceBindings/`.",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/serviceBindings/[^/]+$",
+"required": true,
+"type": "string"
+},
+"updateMask": {
+"description": "Optional. Field mask is used to specify the fields to be overwritten in the ServiceBinding resource by the update. The fields specified in the update_mask are relative to the resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.",
+"format": "google-fieldmask",
+"location": "query",
+"type": "string"
+}
+},
+"path": "v1beta1/{+name}",
+"request": {
+"$ref": "ServiceBinding"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
 }
 }
 },
@@ -2879,7 +2913,7 @@
 }
 }
 },
-"revision": "20250410",
+"revision": "20250508",
 "rootUrl": "https://networkservices.googleapis.com/",
 "schemas": {
 "AuthzExtension": {
@@ -3180,7 +3214,7 @@
 "type": "array"
 },
 "timeout": {
-"description": "Optional. Specifies the timeout for each individual message on the stream. The timeout must be between `10`-`1000` milliseconds. Required for callout extensions. This field is not supported for plugin extensions. Setting it results in a validation error.",
+"description": "Optional. Specifies the timeout for each individual message on the stream. The timeout must be between `10`-`10000` milliseconds. Required for callout extensions. This field is not supported for plugin extensions. Setting it results in a validation error.",
 "format": "google-duration",
 "type": "string"
 }
@@ -5245,6 +5279,10 @@
 "$ref": "ServiceLbPolicyFailoverConfig",
 "description": "Optional. Configuration related to health based failover."
 },
+"isolationConfig": {
+"$ref": "ServiceLbPolicyIsolationConfig",
+"description": "Optional. Configuration to provide isolation support for the associated Backend Service."
+},
 "labels": {
 "additionalProperties": {
 "type": "string"
@@ -5306,6 +5344,39 @@
 },
 "type": "object"
 },
+"ServiceLbPolicyIsolationConfig": {
+"description": "Configuration to provide isolation support for the associated Backend Service.",
+"id": "ServiceLbPolicyIsolationConfig",
+"properties": {
+"isolationGranularity": {
+"description": "Optional. The isolation granularity of the load balancer.",
+"enum": [
+"ISOLATION_GRANULARITY_UNSPECIFIED",
+"REGION"
+],
+"enumDescriptions": [
+"No isolation is configured for the backend service. Traffic can overflow based on the load balancing algorithm.",
+"Traffic for this service will be isolated at the cloud region level."
+],
+"type": "string"
+},
+"isolationMode": {
+"description": "Optional. The isolation mode of the load balancer.",
+"enum": [
+"ISOLATION_MODE_UNSPECIFIED",
+"NEAREST",
+"STRICT"
+],
+"enumDescriptions": [
+"No isolation mode is configured for the backend service.",
+"Traffic will be sent to the nearest region.",
+"Traffic will fail if no serving backends are available in the same region as the load balancer."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "Status": {
 "description": "The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors).",
 "id": "Status",

googleapiclient/discovery_cache/documents/notebooks.v1.json

@@ -143,6 +143,12 @@
 "name"
 ],
 "parameters": {
+"extraLocationTypes": {
+"description": "Optional. A list of extra location types that should be used as conditions for controlling the visibility of the locations.",
+"location": "query",
+"repeated": true,
+"type": "string"
+},
 "filter": {
 "description": "A filter to narrow down results to a preferred subset. The filtering language accepts strings like `\"displayName=tokyo\"`, and is documented in more detail in [AIP-160](https://google.aip.dev/160).",
 "location": "query",
@@ -2008,7 +2014,7 @@
 }
 }
 },
-"revision": "20241204",
+"revision": "20250430",
 "rootUrl": "https://notebooks.googleapis.com/",
 "schemas": {
 "AcceleratorConfig": {

googleapiclient/discovery_cache/documents/notebooks.v2.json

@@ -143,6 +143,12 @@
 "name"
 ],
 "parameters": {
+"extraLocationTypes": {
+"description": "Optional. A list of extra location types that should be used as conditions for controlling the visibility of the locations.",
+"location": "query",
+"repeated": true,
+"type": "string"
+},
 "filter": {
 "description": "A filter to narrow down results to a preferred subset. The filtering language accepts strings like `\"displayName=tokyo\"`, and is documented in more detail in [AIP-160](https://google.aip.dev/160).",
 "location": "query",
@@ -904,7 +910,7 @@
 }
 }
 },
-"revision": "20250319",
+"revision": "20250430",
 "rootUrl": "https://notebooks.googleapis.com/",
 "schemas": {
 "AcceleratorConfig": {
@@ -1071,21 +1077,13 @@
 "description": "Optional. Defines the type of technology used by the confidential instance.",
 "enum": [
 "CONFIDENTIAL_INSTANCE_TYPE_UNSPECIFIED",
-"SEV",
-"SEV_SNP",
-"TDX"
+"SEV"
 ],
 "enumDescriptions": [
 "No type specified. Do not use this value.",
-"AMD Secure Encrypted Virtualization.",
-"AMD Secure Encrypted Virtualization - Secure Nested Paging.",
-"Intel Trust Domain eXtension."
+"AMD Secure Encrypted Virtualization."
 ],
 "type": "string"
-},
-"enableConfidentialCompute": {
-"description": "Optional. Defines whether the instance should have confidential compute enabled.",
-"type": "boolean"
 }
 },
 "type": "object"
@@ -1385,6 +1383,10 @@
 },
 "type": "array"
 },
+"reservationAffinity": {
+"$ref": "ReservationAffinity",
+"description": "Optional. Specifies the reservations that this instance can consume from."
+},
 "serviceAccounts": {
 "description": "Optional. The service account that serves as an identity for the VM instance. Currently supports only one service account.",
 "items": {
@@ -1446,6 +1448,10 @@
 "description": "Optional. If true, the notebook instance will not register with the proxy.",
 "type": "boolean"
 },
+"enableDeletionProtection": {
+"description": "Optional. If true, deletion protection will be enabled for this Workbench Instance. If false, deletion protection will be disabled for this Workbench Instance.",
+"type": "boolean"
+},
 "enableThirdPartyIdentity": {
 "description": "Optional. Flag that specifies that a notebook can be accessed with third party identity provider.",
 "type": "boolean"
@@ -1819,6 +1825,40 @@
 },
 "type": "object"
 },
+"ReservationAffinity": {
+"description": "A reservation that an instance can consume from.",
+"id": "ReservationAffinity",
+"properties": {
+"consumeReservationType": {
+"description": "Required. Specifies the type of reservation from which this instance can consume resources: RESERVATION_ANY (default), RESERVATION_SPECIFIC, or RESERVATION_NONE. See Consuming reserved instances for examples.",
+"enum": [
+"RESERVATION_UNSPECIFIED",
+"RESERVATION_NONE",
+"RESERVATION_ANY",
+"RESERVATION_SPECIFIC"
+],
+"enumDescriptions": [
+"Default type.",
+"Do not consume from any allocated capacity.",
+"Consume any reservation available.",
+"Must consume from a specific reservation. Must specify key value fields for specifying the reservations."
+],
+"type": "string"
+},
+"key": {
+"description": "Optional. Corresponds to the label key of a reservation resource. To target a RESERVATION_SPECIFIC by name, use compute.googleapis.com/reservation-name as the key and specify the name of your reservation as its value.",
+"type": "string"
+},
+"values": {
+"description": "Optional. Corresponds to the label values of a reservation resource. This can be either a name to a reservation in the same project or \"projects/different-project/reservations/some-reservation-name\" to target a shared reservation in the same zone but in a different project.",
+"items": {
+"type": "string"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
 "ResetInstanceRequest": {
 "description": "Request for resetting a notebook instance",
 "id": "ResetInstanceRequest",
@@ -1902,7 +1942,7 @@
 "id": "ShieldedInstanceConfig",
 "properties": {
 "enableIntegrityMonitoring": {
-"description": "Optional. Defines whether the VM instance has integrity monitoring enabled. Enables monitoring and attestation of the boot integrity of the VM instance. The attestation is performed against the integrity policy baseline. This baseline is initially derived from the implicitly trusted boot image when the VM instance is created. Enabled by default.",
+"description": "Optional. Defines whether the VM instance has integrity monitoring enabled. Enables monitoring and attestation of the boot integrity of the VM instance. The attestation is performed against the integrity policy baseline. This baseline is initially derived from the implicitly trusted boot image when the VM instance is created.",
 "type": "boolean"
 },
 "enableSecureBoot": {
@@ -1910,7 +1950,7 @@
 "type": "boolean"
 },
 "enableVtpm": {
-"description": "Optional. Defines whether the VM instance has the vTPM enabled. Enabled by default.",
+"description": "Optional. Defines whether the VM instance has the vTPM enabled.",
 "type": "boolean"
 }
 },

googleapiclient/discovery_cache/documents/observability.v1.json

@@ -350,7 +350,7 @@
 "type": "string"
 },
 "updateMask": {
-"description": "Optional. Field mask is used to specify the fields to be overwritten in the Scope resource by the update. The fields specified in the update_mask are relative to the resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields present in the request will be overwritten.",
+"description": "Optional. Field mask is used to specify the fields to be overwritten in the Scope resource by the update. The fields specified in the update_mask are relative to the resource, not the full request. A field is overwritten when it is in the mask. If the user does not provide a mask, then all fields present in the request are overwritten.",
 "format": "google-fieldmask",
 "location": "query",
 "type": "string"
@@ -374,7 +374,7 @@
 }
 }
 },
-"revision": "20250320",
+"revision": "20250417",
 "rootUrl": "https://observability.googleapis.com/",
 "schemas": {
 "CancelOperationRequest": {

googleapiclient/discovery_cache/documents/ondemandscanning.v1.json

@@ -339,7 +339,7 @@
 }
 }
 },
-"revision": "20250321",
+"revision": "20250505",
 "rootUrl": "https://ondemandscanning.googleapis.com/",
 "schemas": {
 "AliasContext": {
@@ -1307,6 +1307,10 @@
 },
 "type": "array"
 },
+"chainId": {
+"description": "The layer chain ID (sha256 hash) of the layer in the container image. https://github.com/opencontainers/image-spec/blob/main/config.md#layer-chainid",
+"type": "string"
+},
 "command": {
 "description": "The layer build command that was used to build the layer. This may not be found in all layers depending on how the container image is built.",
 "type": "string"
@@ -1647,6 +1651,10 @@
 },
 "type": "array"
 },
+"chainId": {
+"description": "The layer chain ID (sha256 hash) of the layer in the container image. https://github.com/opencontainers/image-spec/blob/main/config.md#layer-chainid",
+"type": "string"
+},
 "command": {
 "description": "The layer build command that was used to build the layer. This may not be found in all layers depending on how the container image is built.",
 "type": "string"
@@ -1870,7 +1878,8 @@
 "COMPLIANCE",
 "DSSE_ATTESTATION",
 "VULNERABILITY_ASSESSMENT",
-"SBOM_REFERENCE"
+"SBOM_REFERENCE",
+"SECRET"
 ],
 "enumDescriptions": [
 "Default value. This value is unused.",
@@ -1885,7 +1894,8 @@
 "This represents a Compliance Note",
 "This represents a DSSE attestation Note",
 "This represents a Vulnerability Assessment.",
-"This represents an SBOM Reference."
+"This represents an SBOM Reference.",
+"This represents a secret."
 ],
 "type": "string"
 },
@@ -1913,6 +1923,10 @@
 "$ref": "SBOMReferenceOccurrence",
 "description": "Describes a specific SBOM reference occurrences."
 },
+"secret": {
+"$ref": "SecretOccurrence",
+"description": "Describes a secret."
+},
 "updateTime": {
 "description": "Output only. The time this occurrence was last updated.",
 "format": "google-datetime",
@@ -2056,7 +2070,7 @@
 "NPM packages.",
 "Nuget (C#/.NET) packages.",
 "Ruby packges (from RubyGems package manager).",
-"Rust packages from Cargo (Github ecosystem is `RUST`).",
+"Rust packages from Cargo (GitHub ecosystem is `RUST`).",
 "PHP packages from Composer package manager.",
 "Swift packages from Swift Package Manager (SwiftPM)."
 ],
@@ -2516,6 +2530,84 @@
 },
 "type": "object"
 },
+"SecretLocation": {
+"description": "The location of the secret.",
+"id": "SecretLocation",
+"properties": {
+"fileLocation": {
+"$ref": "GrafeasV1FileLocation",
+"description": "The secret is found from a file."
+}
+},
+"type": "object"
+},
+"SecretOccurrence": {
+"description": "The occurrence provides details of a secret.",
+"id": "SecretOccurrence",
+"properties": {
+"kind": {
+"description": "Required. Type of secret.",
+"enum": [
+"SECRET_KIND_UNSPECIFIED",
+"SECRET_KIND_UNKNOWN",
+"SECRET_KIND_GCP_SERVICE_ACCOUNT_KEY"
+],
+"enumDescriptions": [
+"Unspecified",
+"The secret kind is unknown.",
+"A GCP service account key per: https://cloud.google.com/iam/docs/creating-managing-service-account-keys"
+],
+"type": "string"
+},
+"locations": {
+"description": "Optional. Locations where the secret is detected.",
+"items": {
+"$ref": "SecretLocation"
+},
+"type": "array"
+},
+"statuses": {
+"description": "Optional. Status of the secret.",
+"items": {
+"$ref": "SecretStatus"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"SecretStatus": {
+"description": "The status of the secret with a timestamp.",
+"id": "SecretStatus",
+"properties": {
+"message": {
+"description": "Optional. Optional message about the status code.",
+"type": "string"
+},
+"status": {
+"description": "Optional. The status of the secret.",
+"enum": [
+"STATUS_UNSPECIFIED",
+"UNKNOWN",
+"VALID",
+"INVALID"
+],
+"enumDescriptions": [
+"Unspecified",
+"The status of the secret is unknown.",
+"The secret is valid.",
+"The secret is invalid."
+],
+"type": "string"
+},
+"updateTime": {
+"description": "Optional. The time the secret status was last updated.",
+"format": "google-datetime",
+"type": "string"
+}
+},
+"type": "object"
+},
 "Signature": {
 "description": "Verifiers (e.g. Kritis implementations) MUST verify signatures with respect to the trust anchors defined in policy (e.g. a Kritis policy). Typically this means that the verifier has been configured with a map from `public_key_id` to public key material (and any required parameters, e.g. signing algorithm). In particular, verification implementations MUST NOT treat the signature `public_key_id` as anything more than a key lookup hint. The `public_key_id` DOES NOT validate or authenticate a public key; it only provides a mechanism for quickly selecting a public key ALREADY CONFIGURED on the verifier through a trusted channel. Verification implementations MUST reject signatures in any of the following circumstances: * The `public_key_id` is not recognized by the verifier. * The public key that `public_key_id` refers to does not verify the signature with respect to the payload. The `signature` contents SHOULD NOT be \"attached\" (where the payload is included with the serialized `signature` bytes). Verifiers MUST ignore any \"attached\" payload and only verify signatures with respect to explicitly provided payload (e.g. a `payload` field on the proto message that holds this Signature, or the canonical serialization of the proto message that holds this signature).",
 "id": "Signature",

googleapiclient/discovery_cache/documents/ondemandscanning.v1beta1.json

@@ -339,7 +339,7 @@
 }
 }
 },
-"revision": "20250321",
+"revision": "20250505",
 "rootUrl": "https://ondemandscanning.googleapis.com/",
 "schemas": {
 "AliasContext": {
@@ -1302,6 +1302,10 @@
 },
 "type": "array"
 },
+"chainId": {
+"description": "The layer chain ID (sha256 hash) of the layer in the container image. https://github.com/opencontainers/image-spec/blob/main/config.md#layer-chainid",
+"type": "string"
+},
 "command": {
 "description": "The layer build command that was used to build the layer. This may not be found in all layers depending on how the container image is built.",
 "type": "string"
@@ -1642,6 +1646,10 @@
 },
 "type": "array"
 },
+"chainId": {
+"description": "The layer chain ID (sha256 hash) of the layer in the container image. https://github.com/opencontainers/image-spec/blob/main/config.md#layer-chainid",
+"type": "string"
+},
 "command": {
 "description": "The layer build command that was used to build the layer. This may not be found in all layers depending on how the container image is built.",
 "type": "string"
@@ -1865,7 +1873,8 @@
 "COMPLIANCE",
 "DSSE_ATTESTATION",
 "VULNERABILITY_ASSESSMENT",
-"SBOM_REFERENCE"
+"SBOM_REFERENCE",
+"SECRET"
 ],
 "enumDescriptions": [
 "Default value. This value is unused.",
@@ -1880,7 +1889,8 @@
 "This represents a Compliance Note",
 "This represents a DSSE attestation Note",
 "This represents a Vulnerability Assessment.",
-"This represents an SBOM Reference."
+"This represents an SBOM Reference.",
+"This represents a secret."
 ],
 "type": "string"
 },
@@ -1908,6 +1918,10 @@
 "$ref": "SBOMReferenceOccurrence",
 "description": "Describes a specific SBOM reference occurrences."
 },
+"secret": {
+"$ref": "SecretOccurrence",
+"description": "Describes a secret."
+},
 "updateTime": {
 "description": "Output only. The time this occurrence was last updated.",
 "format": "google-datetime",
@@ -2051,7 +2065,7 @@
 "NPM packages.",
 "Nuget (C#/.NET) packages.",
 "Ruby packges (from RubyGems package manager).",
-"Rust packages from Cargo (Github ecosystem is `RUST`).",
+"Rust packages from Cargo (GitHub ecosystem is `RUST`).",
 "PHP packages from Composer package manager.",
 "Swift packages from Swift Package Manager (SwiftPM)."
 ],
@@ -2511,6 +2525,84 @@
 },
 "type": "object"
 },
+"SecretLocation": {
+"description": "The location of the secret.",
+"id": "SecretLocation",
+"properties": {
+"fileLocation": {
+"$ref": "GrafeasV1FileLocation",
+"description": "The secret is found from a file."
+}
+},
+"type": "object"
+},
+"SecretOccurrence": {
+"description": "The occurrence provides details of a secret.",
+"id": "SecretOccurrence",
+"properties": {
+"kind": {
+"description": "Required. Type of secret.",
+"enum": [
+"SECRET_KIND_UNSPECIFIED",
+"SECRET_KIND_UNKNOWN",
+"SECRET_KIND_GCP_SERVICE_ACCOUNT_KEY"
+],
+"enumDescriptions": [
+"Unspecified",
+"The secret kind is unknown.",
+"A GCP service account key per: https://cloud.google.com/iam/docs/creating-managing-service-account-keys"
+],
+"type": "string"
+},
+"locations": {
+"description": "Optional. Locations where the secret is detected.",
+"items": {
+"$ref": "SecretLocation"
+},
+"type": "array"
+},
+"statuses": {
+"description": "Optional. Status of the secret.",
+"items": {
+"$ref": "SecretStatus"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"SecretStatus": {
+"description": "The status of the secret with a timestamp.",
+"id": "SecretStatus",
+"properties": {
+"message": {
+"description": "Optional. Optional message about the status code.",
+"type": "string"
+},
+"status": {
+"description": "Optional. The status of the secret.",
+"enum": [
+"STATUS_UNSPECIFIED",
+"UNKNOWN",
+"VALID",
+"INVALID"
+],
+"enumDescriptions": [
+"Unspecified",
+"The status of the secret is unknown.",
+"The secret is valid.",
+"The secret is invalid."
+],
+"type": "string"
+},
+"updateTime": {
+"description": "Optional. The time the secret status was last updated.",
+"format": "google-datetime",
+"type": "string"
+}
+},
+"type": "object"
+},
 "Signature": {
 "description": "Verifiers (e.g. Kritis implementations) MUST verify signatures with respect to the trust anchors defined in policy (e.g. a Kritis policy). Typically this means that the verifier has been configured with a map from `public_key_id` to public key material (and any required parameters, e.g. signing algorithm). In particular, verification implementations MUST NOT treat the signature `public_key_id` as anything more than a key lookup hint. The `public_key_id` DOES NOT validate or authenticate a public key; it only provides a mechanism for quickly selecting a public key ALREADY CONFIGURED on the verifier through a trusted channel. Verification implementations MUST reject signatures in any of the following circumstances: * The `public_key_id` is not recognized by the verifier. * The public key that `public_key_id` refers to does not verify the signature with respect to the payload. The `signature` contents SHOULD NOT be \"attached\" (where the payload is included with the serialized `signature` bytes). Verifiers MUST ignore any \"attached\" payload and only verify signatures with respect to explicitly provided payload (e.g. a `payload` field on the proto message that holds this Signature, or the canonical serialization of the proto message that holds this signature).",
 "id": "Signature",