google-api-python-client 2.169.0__py3-none-any.whl → 2.171.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/connectors.v1.json

@@ -529,7 +529,7 @@
 "type": "string"
 },
 "updateMask": {
-"description": "Required. You can modify only the fields listed below. To lock/unlock a connection: * `lock_config` To suspend/resume a connection: * `suspended` To update the connection details: * `description` * `labels` * `connector_version` * `config_variables` * `auth_config` * `destination_configs` * `node_config` * `log_config` * `ssl_config` * `eventing_enablement_type` * `eventing_config` * `auth_override_enabled`",
+"description": "Required. The list of fields to update. Fields are specified relative to the connection. A field will be overwritten if it is in the mask. The field mask must not be empty, and it must not contain fields that are immutable or only set by the server. You can modify only the fields listed below. To lock/unlock a connection: * `lock_config` To suspend/resume a connection: * `suspended` To update the connection details: * `description` * `labels` * `connector_version` * `config_variables` * `auth_config` * `destination_configs` * `node_config` * `log_config` * `ssl_config` * `eventing_enablement_type` * `eventing_config` * `auth_override_enabled` * `async_operations_enabled`",
 "format": "google-fieldmask",
 "location": "query",
 "type": "string"
@@ -873,6 +873,188 @@
 }
 }
 },
+"endUserAuthentications": {
+"methods": {
+"create": {
+"description": "Creates a new EndUserAuthentication in a given project,location and connection.",
+"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/connections/{connectionsId}/endUserAuthentications",
+"httpMethod": "POST",
+"id": "connectors.projects.locations.connections.endUserAuthentications.create",
+"parameterOrder": [
+"parent"
+],
+"parameters": {
+"endUserAuthenticationId": {
+"description": "Required. Identifier to assign to the EndUserAuthentication. Must be unique within scope of the parent resource.",
+"location": "query",
+"type": "string"
+},
+"parent": {
+"description": "Required. Parent resource of the EndUserAuthentication, of the form: `projects/*/locations/*/connections/*`",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/connections/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+parent}/endUserAuthentications",
+"request": {
+"$ref": "EndUserAuthentication"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"delete": {
+"description": "Deletes a single EndUserAuthentication.",
+"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/connections/{connectionsId}/endUserAuthentications/{endUserAuthenticationsId}",
+"httpMethod": "DELETE",
+"id": "connectors.projects.locations.connections.endUserAuthentications.delete",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. Resource name of the form: `projects/*/locations/*/connections/*/endUserAuthentication/*`",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/connections/[^/]+/endUserAuthentications/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+name}",
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"get": {
+"description": "Gets details of a single EndUserAuthentication.",
+"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/connections/{connectionsId}/endUserAuthentications/{endUserAuthenticationsId}",
+"httpMethod": "GET",
+"id": "connectors.projects.locations.connections.endUserAuthentications.get",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. Resource name of the form: `projects/*/locations/*/connections/*/EndUserAuthentications/*`",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/connections/[^/]+/endUserAuthentications/[^/]+$",
+"required": true,
+"type": "string"
+},
+"view": {
+"description": "Optional. View of the EndUserAuthentication to return.",
+"enum": [
+"END_USER_AUTHENTICATION_VIEW_UNSPECIFIED",
+"BASIC_VIEW",
+"FULL_VIEW"
+],
+"enumDescriptions": [
+"END_USER_AUTHENTICATION_UNSPECIFIED.",
+"Do not include secret fields.",
+"Include secret fields."
+],
+"location": "query",
+"type": "string"
+}
+},
+"path": "v1/{+name}",
+"response": {
+"$ref": "EndUserAuthentication"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"list": {
+"description": "List EndUserAuthentications in a given project,location and connection.",
+"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/connections/{connectionsId}/endUserAuthentications",
+"httpMethod": "GET",
+"id": "connectors.projects.locations.connections.endUserAuthentications.list",
+"parameterOrder": [
+"parent"
+],
+"parameters": {
+"filter": {
+"description": "Filter.",
+"location": "query",
+"type": "string"
+},
+"orderBy": {
+"description": "Order by parameters.",
+"location": "query",
+"type": "string"
+},
+"pageSize": {
+"description": "Page size.",
+"format": "int32",
+"location": "query",
+"type": "integer"
+},
+"pageToken": {
+"description": "Page token.",
+"location": "query",
+"type": "string"
+},
+"parent": {
+"description": "Required. Parent resource of the EndUserAuthentication, of the form: `projects/*/locations/*/connections/*`",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/connections/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+parent}/endUserAuthentications",
+"response": {
+"$ref": "ListEndUserAuthenticationsResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"patch": {
+"description": "Updates the parameters of a single EndUserAuthentication.",
+"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/connections/{connectionsId}/endUserAuthentications/{endUserAuthenticationsId}",
+"httpMethod": "PATCH",
+"id": "connectors.projects.locations.connections.endUserAuthentications.patch",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. Identifier. Resource name of the EndUserAuthentication. Format: projects/{project}/locations/{location}/connections/{connection}/endUserAuthentications/{end_user_authentication}",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/connections/[^/]+/endUserAuthentications/[^/]+$",
+"required": true,
+"type": "string"
+},
+"updateMask": {
+"description": "Required. The list of fields to update. A field will be overwritten if it is in the mask. You can modify only the fields listed below. To update the EndUserAuthentication details: * `notify_endpoint_destination`",
+"format": "google-fieldmask",
+"location": "query",
+"type": "string"
+}
+},
+"path": "v1/{+name}",
+"request": {
+"$ref": "EndUserAuthentication"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+}
+}
+},
 "eventSubscriptions": {
 "methods": {
 "create": {
@@ -1014,7 +1196,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. Resource name of the EventSubscription. Format: projects/{project}/locations/{location}/connections/{connection}/eventSubscriptions/{event_subscription}",
+"description": "Required. Identifier. Resource name of the EventSubscription. Format: projects/{project}/locations/{location}/connections/{connection}/eventSubscriptions/{event_subscription}",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/connections/[^/]+/eventSubscriptions/[^/]+$",
 "required": true,
@@ -1324,7 +1506,7 @@
 ],
 "parameters": {
 "endpointAttachmentId": {
-"description": "Required. Identifier to assign to the EndpointAttachment. Must be unique within scope of the parent resource.",
+"description": "Required. Identifier to assign to the EndpointAttachment. Must be unique within scope of the parent resource. The regex is: `^[a-z]([a-z0-9-]{0,61}[a-z0-9])?$`.",
 "location": "query",
 "type": "string"
 },
@@ -2463,7 +2645,6 @@
 "type": "string"
 },
 "parent": {
-"description": "Required. Parent resource of the connectors, of the form: `projects/*/locations/*/providers/*/connectors/*` Only global location is supported for ConnectorVersion resource.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/providers/[^/]+/connectors/[^/]+$",
 "required": true,
@@ -2571,7 +2752,7 @@
 }
 }
 },
-"revision": "20250423",
+"revision": "20250521",
 "rootUrl": "https://connectors.googleapis.com/",
 "schemas": {
 "AuditConfig": {
@@ -2627,18 +2808,18 @@
 "id": "AuthConfig",
 "properties": {
 "additionalVariables": {
-"description": "List containing additional auth configs.",
+"description": "Optional. List containing additional auth configs.",
 "items": {
 "$ref": "ConfigVariable"
 },
 "type": "array"
 },
 "authKey": {
-"description": "Identifier key for auth config",
+"description": "Optional. Identifier key for auth config",
 "type": "string"
 },
 "authType": {
-"description": "The type of authentication configured.",
+"description": "Optional. The type of authentication configured.",
 "enum": [
 "AUTH_TYPE_UNSPECIFIED",
 "USER_PASSWORD",
@@ -2970,7 +3151,7 @@
 "type": "string"
 },
 "key": {
-"description": "Key of the config variable.",
+"description": "Optional. Key of the config variable.",
 "type": "string"
 },
 "secretValue": {
@@ -3195,6 +3376,10 @@
 "readOnly": true,
 "type": "string"
 },
+"euaOauthAuthConfig": {
+"$ref": "AuthConfig",
+"description": "Optional. Additional Oauth2.0 Auth config for EUA. If the connection is configured using non-OAuth authentication but OAuth needs to be used for EUA, this field can be populated with the OAuth config. This should be a OAuth2AuthCodeFlow Auth type only."
+},
 "eventingConfig": {
 "$ref": "EventingConfig",
 "description": "Optional. Eventing config of a connection"
@@ -3218,6 +3403,10 @@
 "description": "Output only. Eventing Runtime Data.",
 "readOnly": true
 },
+"fallbackOnAdminCredentials": {
+"description": "Optional. Fallback on admin credentials for the connection. If this both auth_override_enabled and fallback_on_admin_credentials are set to true, the connection will use the admin credentials if the dynamic auth header is not present during auth override.",
+"type": "boolean"
+},
 "host": {
 "description": "Output only. The name of the Hostname of the Service Directory service with TLS.",
 "readOnly": true,
@@ -3594,6 +3783,20 @@
 "description": "Indicate whether connector is being migrated to TLS.",
 "type": "boolean"
 },
+"networkEgressMode": {
+"description": "Indicate whether connector is being migrated to use direct VPC egress.",
+"enum": [
+"NETWORK_EGRESS_MODE_UNSPECIFIED",
+"SERVERLESS_VPC_ACCESS_CONNECTOR",
+"DIRECT_VPC_EGRESS"
+],
+"enumDescriptions": [
+"Network egress mode is not specified.",
+"Default model VPC Access Connector.",
+"Direct VPC Egress."
+],
+"type": "string"
+},
 "provisionCloudSpanner": {
 "description": "Indicate whether cloud spanner is required for connector job.",
 "type": "boolean"
@@ -3907,7 +4110,7 @@
 "id": "ConnectorsLogConfig",
 "properties": {
 "enabled": {
-"description": "Enabled represents whether logging is enabled or not for a connection.",
+"description": "Optional. Enabled represents whether logging is enabled or not for a connection.",
 "type": "boolean"
 },
 "level": {
@@ -4165,238 +4368,670 @@
 },
 "type": "object"
 },
-"DeadLetterConfig": {
-"description": "Dead Letter configuration details provided by the user.",
-"id": "DeadLetterConfig",
+"DeadLetterConfig": {
+"description": "Dead Letter configuration details provided by the user.",
+"id": "DeadLetterConfig",
+"properties": {
+"projectId": {
+"description": "Optional. Project which has the topic given.",
+"type": "string"
+},
+"topic": {
+"description": "Optional. Topic to push events which couldn't be processed.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"DenyMaintenancePeriod": {
+"description": "DenyMaintenancePeriod definition. Maintenance is forbidden within the deny period. The start_date must be less than the end_date.",
+"id": "DenyMaintenancePeriod",
+"properties": {
+"endDate": {
+"$ref": "Date",
+"description": "Deny period end date. This can be: * A full date, with non-zero year, month and day values. * A month and day value, with a zero year. Allows recurring deny periods each year. Date matching this period will have to be before the end."
+},
+"startDate": {
+"$ref": "Date",
+"description": "Deny period start date. This can be: * A full date, with non-zero year, month and day values. * A month and day value, with a zero year. Allows recurring deny periods each year. Date matching this period will have to be the same or after the start."
+},
+"time": {
+"$ref": "TimeOfDay",
+"description": "Time in UTC when the Blackout period starts on start_date and ends on end_date. This can be: * Full time. * All zeros for 00:00:00 UTC"
+}
+},
+"type": "object"
+},
+"DeprecateCustomConnectorVersionRequest": {
+"description": "Request message for ConnectorsService.DeprecateCustomConnectorVersion",
+"id": "DeprecateCustomConnectorVersionRequest",
+"properties": {},
+"type": "object"
+},
+"Destination": {
+"id": "Destination",
+"properties": {
+"host": {
+"description": "For publicly routable host.",
+"type": "string"
+},
+"port": {
+"description": "The port is the target port number that is accepted by the destination.",
+"format": "int32",
+"type": "integer"
+},
+"serviceAttachment": {
+"deprecated": true,
+"description": "PSC service attachments. Format: projects/*/regions/*/serviceAttachments/*",
+"type": "string"
+}
+},
+"type": "object"
+},
+"DestinationConfig": {
+"description": "Define the Connectors target endpoint.",
+"id": "DestinationConfig",
+"properties": {
+"destinations": {
+"description": "The destinations for the key.",
+"items": {
+"$ref": "Destination"
+},
+"type": "array"
+},
+"key": {
+"description": "The key is the destination identifier that is supported by the Connector.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"DestinationConfigTemplate": {
+"description": "DestinationConfigTemplate defines required destinations supported by the Connector.",
+"id": "DestinationConfigTemplate",
+"properties": {
+"autocompleteSuggestions": {
+"description": "Autocomplete suggestions for destination URL field.",
+"items": {
+"type": "string"
+},
+"type": "array"
+},
+"defaultPort": {
+"description": "The default port.",
+"format": "int32",
+"type": "integer"
+},
+"description": {
+"description": "Description.",
+"type": "string"
+},
+"displayName": {
+"description": "Display name of the parameter.",
+"type": "string"
+},
+"isAdvanced": {
+"description": "Whether the current destination tempalate is part of Advanced settings",
+"type": "boolean"
+},
+"key": {
+"description": "Key of the destination.",
+"type": "string"
+},
+"max": {
+"description": "The maximum number of destinations supported for this key.",
+"format": "int32",
+"type": "integer"
+},
+"min": {
+"description": "The minimum number of destinations supported for this key.",
+"format": "int32",
+"type": "integer"
+},
+"portFieldType": {
+"description": "Whether port number should be provided by customers.",
+"enum": [
+"FIELD_TYPE_UNSPECIFIED",
+"REQUIRED",
+"OPTIONAL",
+"NOT_USED"
+],
+"enumDescriptions": [
+"",
+"",
+"",
+""
+],
+"type": "string"
+},
+"regexPattern": {
+"description": "Regex pattern for host.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"EUASecret": {
+"description": "EUASecret provides a reference to entries in Secret Manager.",
+"id": "EUASecret",
+"properties": {
+"secretValue": {
+"description": "Optional. The plain string value of the secret.",
+"type": "string"
+},
+"secretVersion": {
+"description": "Optional. The resource name of the secret version in the format, format as: `projects/*/secrets/*/versions/*`.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"EgressControlConfig": {
+"description": "Egress control config for connector runtime. These configurations define the rules to identify which outbound domains/hosts needs to be whitelisted. It may be a static information for a particular connector version or it is derived from the configurations provided by the customer in Connection resource.",
+"id": "EgressControlConfig",
+"properties": {
+"backends": {
+"description": "Static Comma separated backends which are common for all Connection resources. Supported formats for each backend are host:port or just host (host can be ip address or domain name).",
+"type": "string"
+},
+"extractionRules": {
+"$ref": "ExtractionRules",
+"description": "Extractions Rules to extract the backends from customer provided configuration."
+}
+},
+"type": "object"
+},
+"Empty": {
+"description": "A generic empty message that you can re-use to avoid defining duplicated empty messages in your APIs. A typical example is to use it as the request or the response type of an API method. For instance: service Foo { rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty); }",
+"id": "Empty",
+"properties": {},
+"type": "object"
+},
+"EncryptionConfig": {
+"description": "Regional encryption config for CMEK details.",
+"id": "EncryptionConfig",
+"properties": {
+"encryptionType": {
+"description": "Optional. Encryption type for the region.",
+"enum": [
+"ENCRYPTION_TYPE_UNSPECIFIED",
+"GMEK",
+"CMEK"
+],
+"enumDescriptions": [
+"Encryption type unspecified.",
+"Google managed encryption keys",
+"Customer managed encryption keys."
+],
+"type": "string"
+},
+"kmsKeyName": {
+"description": "Optional. KMS crypto key. This field accepts identifiers of the form `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/ {crypto_key}`",
+"type": "string"
+}
+},
+"type": "object"
+},
+"EncryptionKey": {
+"description": "Encryption Key value.",
+"id": "EncryptionKey",
+"properties": {
+"kmsKeyName": {
+"description": "Optional. The [KMS key name] with which the content of the Operation is encrypted. The expected format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`. Will be empty string if google managed.",
+"type": "string"
+},
+"type": {
+"description": "Type.",
+"enum": [
+"TYPE_UNSPECIFIED",
+"GOOGLE_MANAGED",
+"CUSTOMER_MANAGED"
+],
+"enumDescriptions": [
+"Value type is not specified.",
+"Google Managed.",
+"Customer Managed."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
+"EndPoint": {
+"description": "Endpoint message includes details of the Destination endpoint.",
+"id": "EndPoint",
+"properties": {
+"endpointUri": {
+"description": "Optional. The URI of the Endpoint.",
+"type": "string"
+},
+"headers": {
+"description": "Optional. List of Header to be added to the Endpoint.",
+"items": {
+"$ref": "Header"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"EndUserAuthentication": {
+"description": "AuthConfig defines details of a authentication type.",
+"id": "EndUserAuthentication",
+"properties": {
+"configVariables": {
+"description": "Optional. Config variables for the EndUserAuthentication.",
+"items": {
+"$ref": "EndUserAuthenticationConfigVariable"
+},
+"type": "array"
+},
+"createTime": {
+"description": "Output only. Created time.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+},
+"destinationConfigs": {
+"description": "Optional. Destination configs for the EndUserAuthentication.",
+"items": {
+"$ref": "DestinationConfig"
+},
+"type": "array"
+},
+"endUserAuthenticationConfig": {
+"$ref": "EndUserAuthenticationConfig",
+"description": "Optional. The EndUserAuthenticationConfig for the EndUserAuthentication."
+},
+"labels": {
+"description": "Optional. Labels for the EndUserAuthentication.",
+"items": {
+"type": "string"
+},
+"type": "array"
+},
+"name": {
+"description": "Required. Identifier. Resource name of the EndUserAuthentication. Format: projects/{project}/locations/{location}/connections/{connection}/endUserAuthentications/{end_user_authentication}",
+"type": "string"
+},
+"notifyEndpointDestination": {
+"$ref": "EndUserAuthenticationNotifyEndpointDestination",
+"description": "Optional. The destination to hit when we receive an event"
+},
+"roles": {
+"description": "Optional. Roles for the EndUserAuthentication.",
+"items": {
+"enum": [
+"ROLE_UNSPECIFIED",
+"READER",
+"READER_DOMAIN_WIDE_ACCESSIBLE"
+],
+"enumDescriptions": [
+"Default state.",
+"READER.",
+"READER_DOMAIN_WIDE_ACCESSIBLE which has access to only public data."
+],
+"type": "string"
+},
+"type": "array"
+},
+"status": {
+"$ref": "EndUserAuthenticationEndUserAuthenticationStatus",
+"description": "Optional. Status of the EndUserAuthentication."
+},
+"updateTime": {
+"description": "Output only. Updated time.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+},
+"userId": {
+"description": "Optional. The user id of the user.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"EndUserAuthenticationConfig": {
+"description": "EndUserAuthenticationConfig defines details of a authentication configuration for EUC",
+"id": "EndUserAuthenticationConfig",
+"properties": {
+"additionalVariables": {
+"description": "Optional. List containing additional auth configs.",
+"items": {
+"$ref": "EndUserAuthenticationConfigVariable"
+},
+"type": "array"
+},
+"authKey": {
+"description": "Identifier key for auth config",
+"type": "string"
+},
+"authType": {
+"description": "The type of authentication configured.",
+"enum": [
+"AUTH_TYPE_UNSPECIFIED",
+"USER_PASSWORD",
+"OAUTH2_JWT_BEARER",
+"OAUTH2_CLIENT_CREDENTIALS",
+"SSH_PUBLIC_KEY",
+"OAUTH2_AUTH_CODE_FLOW",
+"GOOGLE_AUTHENTICATION",
+"OAUTH2_AUTH_CODE_FLOW_GOOGLE_MANAGED"
+],
+"enumDescriptions": [
+"Authentication type not specified.",
+"Username and Password Authentication.",
+"JSON Web Token (JWT) Profile for Oauth 2.0 Authorization Grant based authentication",
+"Oauth 2.0 Client Credentials Grant Authentication",
+"SSH Public Key Authentication",
+"Oauth 2.0 Authorization Code Flow",
+"Google authentication",
+"Oauth 2.0 Authorization Code Flow with Google Provided OAuth Client"
+],
+"type": "string"
+},
+"oauth2AuthCodeFlow": {
+"$ref": "EndUserAuthenticationConfigOauth2AuthCodeFlow",
+"description": "Oauth2AuthCodeFlow."
+},
+"oauth2AuthCodeFlowGoogleManaged": {
+"$ref": "EndUserAuthenticationConfigOauth2AuthCodeFlowGoogleManaged",
+"description": "Oauth2AuthCodeFlowGoogleManaged."
+},
+"oauth2ClientCredentials": {
+"$ref": "EndUserAuthenticationConfigOauth2ClientCredentials",
+"description": "Oauth2ClientCredentials."
+},
+"oauth2JwtBearer": {
+"$ref": "EndUserAuthenticationConfigOauth2JwtBearer",
+"description": "Oauth2JwtBearer."
+},
+"sshPublicKey": {
+"$ref": "EndUserAuthenticationConfigSshPublicKey",
+"description": "SSH Public Key."
+},
+"userPassword": {
+"$ref": "EndUserAuthenticationConfigUserPassword",
+"description": "UserPassword."
+}
+},
+"type": "object"
+},
+"EndUserAuthenticationConfigOauth2AuthCodeFlow": {
+"description": "Parameters to support Oauth 2.0 Auth Code Grant Authentication. See https://www.rfc-editor.org/rfc/rfc6749#section-1.3.1 for more details.",
+"id": "EndUserAuthenticationConfigOauth2AuthCodeFlow",
+"properties": {
+"authCode": {
+"description": "Optional. Authorization code to be exchanged for access and refresh tokens.",
+"type": "string"
+},
+"authUri": {
+"description": "Optional. Auth URL for Authorization Code Flow",
+"type": "string"
+},
+"clientId": {
+"description": "Optional. Client ID for user-provided OAuth app.",
+"type": "string"
+},
+"clientSecret": {
+"$ref": "EUASecret",
+"description": "Optional. Client secret for user-provided OAuth app."
+},
+"enablePkce": {
+"description": "Optional. Whether to enable PKCE when the user performs the auth code flow.",
+"type": "boolean"
+},
+"oauthTokenData": {
+"$ref": "OAuthTokenData",
+"description": "Optional. Auth Code Data"
+},
+"pkceVerifier": {
+"description": "Optional. PKCE verifier to be used during the auth code exchange.",
+"type": "string"
+},
+"redirectUri": {
+"description": "Optional. Redirect URI to be provided during the auth code exchange.",
+"type": "string"
+},
+"scopes": {
+"description": "Optional. Scopes the connection will request when the user performs the auth code flow.",
+"items": {
+"type": "string"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"EndUserAuthenticationConfigOauth2AuthCodeFlowGoogleManaged": {
+"description": "Parameters to support Oauth 2.0 Auth Code Grant Authentication using Google Provided OAuth Client. See https://tools.ietf.org/html/rfc6749#section-1.3.1 for more details.",
+"id": "EndUserAuthenticationConfigOauth2AuthCodeFlowGoogleManaged",
+"properties": {
+"authCode": {
+"description": "Optional. Authorization code to be exchanged for access and refresh tokens.",
+"type": "string"
+},
+"oauthTokenData": {
+"$ref": "OAuthTokenData",
+"description": "Auth Code Data"
+},
+"redirectUri": {
+"description": "Optional. Redirect URI to be provided during the auth code exchange.",
+"type": "string"
+},
+"scopes": {
+"description": "Required. Scopes the connection will request when the user performs the auth code flow.",
+"items": {
+"type": "string"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"EndUserAuthenticationConfigOauth2ClientCredentials": {
+"description": "Parameters to support Oauth 2.0 Client Credentials Grant Authentication. See https://tools.ietf.org/html/rfc6749#section-1.3.4 for more details.",
+"id": "EndUserAuthenticationConfigOauth2ClientCredentials",
 "properties": {
-"projectId": {
-"description": "Optional. Project which has the topic given.",
+"clientId": {
+"description": "The client identifier.",
 "type": "string"
 },
-"topic": {
-"description": "Optional. Topic to push events which couldn't be processed.",
-"type": "string"
+"clientSecret": {
+"$ref": "EUASecret",
+"description": "Required. string value or secret version containing the client secret."
 }
 },
 "type": "object"
 },
-"DenyMaintenancePeriod": {
-"description": "DenyMaintenancePeriod definition. Maintenance is forbidden within the deny period. The start_date must be less than the end_date.",
-"id": "DenyMaintenancePeriod",
+"EndUserAuthenticationConfigOauth2JwtBearer": {
+"description": "Parameters to support JSON Web Token (JWT) Profile for Oauth 2.0 Authorization Grant based authentication. See https://tools.ietf.org/html/rfc7523 for more details.",
+"id": "EndUserAuthenticationConfigOauth2JwtBearer",
 "properties": {
-"endDate": {
-"$ref": "Date",
-"description": "Deny period end date. This can be: * A full date, with non-zero year, month and day values. * A month and day value, with a zero year. Allows recurring deny periods each year. Date matching this period will have to be before the end."
-},
-"startDate": {
-"$ref": "Date",
-"description": "Deny period start date. This can be: * A full date, with non-zero year, month and day values. * A month and day value, with a zero year. Allows recurring deny periods each year. Date matching this period will have to be the same or after the start."
+"clientKey": {
+"$ref": "EUASecret",
+"description": "Required. secret version/value reference containing a PKCS#8 PEM-encoded private key associated with the Client Certificate. This private key will be used to sign JWTs used for the jwt-bearer authorization grant. Specified in the form as: `projects/*/strings/*/versions/*`."
 },
-"time": {
-"$ref": "TimeOfDay",
-"description": "Time in UTC when the Blackout period starts on start_date and ends on end_date. This can be: * Full time. * All zeros for 00:00:00 UTC"
+"jwtClaims": {
+"$ref": "EndUserAuthenticationConfigOauth2JwtBearerJwtClaims",
+"description": "JwtClaims providers fields to generate the token."
 }
 },
 "type": "object"
 },
-"DeprecateCustomConnectorVersionRequest": {
-"description": "Request message for ConnectorsService.DeprecateCustomConnectorVersion",
-"id": "DeprecateCustomConnectorVersionRequest",
-"properties": {},
-"type": "object"
-},
-"Destination": {
-"id": "Destination",
+"EndUserAuthenticationConfigOauth2JwtBearerJwtClaims": {
+"description": "JWT claims used for the jwt-bearer authorization grant.",
+"id": "EndUserAuthenticationConfigOauth2JwtBearerJwtClaims",
 "properties": {
-"host": {
-"description": "For publicly routable host.",
+"audience": {
+"description": "Value for the \"aud\" claim.",
 "type": "string"
 },
-"port": {
-"description": "The port is the target port number that is accepted by the destination.",
-"format": "int32",
-"type": "integer"
+"issuer": {
+"description": "Value for the \"iss\" claim.",
+"type": "string"
 },
-"serviceAttachment": {
-"deprecated": true,
-"description": "PSC service attachments. Format: projects/*/regions/*/serviceAttachments/*",
+"subject": {
+"description": "Value for the \"sub\" claim.",
 "type": "string"
 }
 },
 "type": "object"
 },
-"DestinationConfig": {
-"description": "Define the Connectors target endpoint.",
-"id": "DestinationConfig",
+"EndUserAuthenticationConfigSshPublicKey": {
+"description": "Parameters to support Ssh public key Authentication.",
+"id": "EndUserAuthenticationConfigSshPublicKey",
 "properties": {
-"destinations": {
-"description": "The destinations for the key.",
-"items": {
-"$ref": "Destination"
+"certType": {
+"description": "Format of SSH Client cert.",
+"type": "string"
 },
-"type": "array"
+"sshClientCert": {
+"$ref": "EUASecret",
+"description": "Required. SSH Client Cert. It should contain both public and private key."
 },
-"key": {
-"description": "The key is the destination identifier that is supported by the Connector.",
+"sshClientCertPass": {
+"$ref": "EUASecret",
+"description": "Required. Password (passphrase) for ssh client certificate if it has one."
+},
+"username": {
+"description": "The user account used to authenticate.",
 "type": "string"
 }
 },
 "type": "object"
 },
-"DestinationConfigTemplate": {
-"description": "DestinationConfigTemplate defines required destinations supported by the Connector.",
-"id": "DestinationConfigTemplate",
+"EndUserAuthenticationConfigUserPassword": {
+"description": "Parameters to support Username and Password Authentication.",
+"id": "EndUserAuthenticationConfigUserPassword",
 "properties": {
-"autocompleteSuggestions": {
-"description": "Autocomplete suggestions for destination URL field.",
-"items": {
-"type": "string"
-},
-"type": "array"
-},
-"defaultPort": {
-"description": "The default port.",
-"format": "int32",
-"type": "integer"
+"password": {
+"$ref": "EUASecret",
+"description": "Required. string value or secret version reference containing the password."
 },
-"description": {
-"description": "Description.",
+"username": {
+"description": "Username.",
 "type": "string"
+}
 },
-"displayName": {
-"description": "Display name of the parameter.",
-"type": "string"
+"type": "object"
 },
-"isAdvanced": {
-"description": "Whether the current destination tempalate is part of Advanced settings",
+"EndUserAuthenticationConfigVariable": {
+"description": "EndUserAuthenticationConfigVariable represents a configuration variable present in a EndUserAuthentication.",
+"id": "EndUserAuthenticationConfigVariable",
+"properties": {
+"boolValue": {
+"description": "Value is a bool.",
 "type": "boolean"
 },
-"key": {
-"description": "Key of the destination.",
+"intValue": {
+"description": "Value is an integer",
+"format": "int64",
 "type": "string"
 },
-"max": {
-"description": "The maximum number of destinations supported for this key.",
-"format": "int32",
-"type": "integer"
-},
-"min": {
-"description": "The minimum number of destinations supported for this key.",
-"format": "int32",
-"type": "integer"
-},
-"portFieldType": {
-"description": "Whether port number should be provided by customers.",
-"enum": [
-"FIELD_TYPE_UNSPECIFIED",
-"REQUIRED",
-"OPTIONAL",
-"NOT_USED"
-],
-"enumDescriptions": [
-"",
-"",
-"",
-""
-],
+"key": {
+"description": "Required. Key of the config variable.",
 "type": "string"
 },
-"regexPattern": {
-"description": "Regex pattern for host.",
+"secretValue": {
+"$ref": "EUASecret",
+"description": "Value is a secret"
+},
+"stringValue": {
+"description": "Value is a string.",
 "type": "string"
 }
 },
 "type": "object"
 },
-"EgressControlConfig": {
-"description": "Egress control config for connector runtime. These configurations define the rules to identify which outbound domains/hosts needs to be whitelisted. It may be a static information for a particular connector version or it is derived from the configurations provided by the customer in Connection resource.",
-"id": "EgressControlConfig",
+"EndUserAuthenticationEndUserAuthenticationStatus": {
+"description": "EndUserAuthentication Status denotes the status of the EndUserAuthentication resource.",
+"id": "EndUserAuthenticationEndUserAuthenticationStatus",
 "properties": {
-"backends": {
-"description": "Static Comma separated backends which are common for all Connection resources. Supported formats for each backend are host:port or just host (host can be ip address or domain name).",
+"description": {
+"description": "Output only. Description of the state.",
+"readOnly": true,
 "type": "string"
 },
-"extractionRules": {
-"$ref": "ExtractionRules",
-"description": "Extractions Rules to extract the backends from customer provided configuration."
-}
-},
-"type": "object"
-},
-"Empty": {
-"description": "A generic empty message that you can re-use to avoid defining duplicated empty messages in your APIs. A typical example is to use it as the request or the response type of an API method. For instance: service Foo { rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty); }",
-"id": "Empty",
-"properties": {},
-"type": "object"
-},
-"EncryptionConfig": {
-"description": "Regional encryption config for CMEK details.",
-"id": "EncryptionConfig",
-"properties": {
-"encryptionType": {
-"description": "Optional. Encryption type for the region.",
+"state": {
+"description": "Output only. State of Event Subscription resource.",
 "enum": [
-"ENCRYPTION_TYPE_UNSPECIFIED",
-"GMEK",
-"CMEK"
+"STATE_UNSPECIFIED",
+"ACTIVE",
+"ERROR"
 ],
 "enumDescriptions": [
-"Encryption type unspecified.",
-"Google managed encryption keys",
-"Customer managed encryption keys."
+"Default state.",
+"EndUserAuthentication is in Active state.",
+"EndUserAuthentication is in Error state."
 ],
-"type": "string"
-},
-"kmsKeyName": {
-"description": "Optional. KMS crypto key. This field accepts identifiers of the form `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/ {crypto_key}`",
+"readOnly": true,
 "type": "string"
 }
 },
 "type": "object"
 },
-"EncryptionKey": {
-"description": "Encryption Key value.",
-"id": "EncryptionKey",
+"EndUserAuthenticationNotifyEndpointDestination": {
+"description": "Message for NotifyEndpointDestination Destination to hit when the refresh token is expired.",
+"id": "EndUserAuthenticationNotifyEndpointDestination",
 "properties": {
-"kmsKeyName": {
-"description": "The [KMS key name] with which the content of the Operation is encrypted. The expected format: `projects/*/locations/*/keyRings/*/cryptoKeys/*`. Will be empty string if google managed.",
+"endpoint": {
+"$ref": "EndUserAuthenticationNotifyEndpointDestinationEndPoint",
+"description": "Optional. OPTION 1: Hit an endpoint when the refresh token is expired."
+},
+"serviceAccount": {
+"description": "Required. Service account needed for runtime plane to notify the backend.",
 "type": "string"
 },
 "type": {
-"description": "Type.",
+"description": "Required. type of the destination",
 "enum": [
 "TYPE_UNSPECIFIED",
-"GOOGLE_MANAGED",
-"CUSTOMER_MANAGED"
+"ENDPOINT"
 ],
 "enumDescriptions": [
-"Value type is not specified.",
-"Google Managed.",
-"Customer Managed."
+"Default state.",
+"Endpoint - Hit the value of endpoint when event is received"
 ],
 "type": "string"
 }
 },
 "type": "object"
 },
-"EndPoint": {
+"EndUserAuthenticationNotifyEndpointDestinationEndPoint": {
 "description": "Endpoint message includes details of the Destination endpoint.",
-"id": "EndPoint",
+"id": "EndUserAuthenticationNotifyEndpointDestinationEndPoint",
 "properties": {
 "endpointUri": {
-"description": "The URI of the Endpoint.",
+"description": "Required. The URI of the Endpoint.",
 "type": "string"
 },
 "headers": {
-"description": "List of Header to be added to the Endpoint.",
+"description": "Optional. List of Header to be added to the Endpoint.",
 "items": {
-"$ref": "Header"
+"$ref": "EndUserAuthenticationNotifyEndpointDestinationEndPointHeader"
 },
 "type": "array"
 }
 },
 "type": "object"
 },
+"EndUserAuthenticationNotifyEndpointDestinationEndPointHeader": {
+"description": "Header details for a given header to be added to Endpoint.",
+"id": "EndUserAuthenticationNotifyEndpointDestinationEndPointHeader",
+"properties": {
+"key": {
+"description": "Required. Key of Header.",
+"type": "string"
+},
+"value": {
+"description": "Required. Value of Header.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "EndpointAttachment": {
 "description": "represents the Connector's Endpoint Attachment resource",
 "id": "EndpointAttachment",
@@ -4519,7 +5154,7 @@
 "description": "Optional. JMS is the source for the event listener."
 },
 "name": {
-"description": "Required. Resource name of the EventSubscription. Format: projects/{project}/locations/{location}/connections/{connection}/eventSubscriptions/{event_subscription}",
+"description": "Required. Identifier. Resource name of the EventSubscription. Format: projects/{project}/locations/{location}/connections/{connection}/eventSubscriptions/{event_subscription}",
 "type": "string"
 },
 "status": {
@@ -4563,11 +5198,11 @@
 "description": "OPTION 3: Write the event to Pub/Sub topic."
 },
 "serviceAccount": {
-"description": "Service account needed for runtime plane to trigger IP workflow.",
+"description": "Optional. Service account needed for runtime plane to trigger IP workflow.",
 "type": "string"
 },
 "type": {
-"description": "type of the destination",
+"description": "Optional. type of the destination",
 "enum": [
 "TYPE_UNSPECIFIED",
 "ENDPOINT",
@@ -5259,11 +5894,11 @@ false
 "id": "Header",
 "properties": {
 "key": {
-"description": "Key of Header.",
+"description": "Optional. Key of Header.",
 "type": "string"
 },
 "value": {
-"description": "Value of Header.",
+"description": "Optional. Value of Header.",
 "type": "string"
 }
 },
@@ -5820,15 +6455,15 @@ false
 "id": "JwtClaims",
 "properties": {
 "audience": {
-"description": "Value for the \"aud\" claim.",
+"description": "Optional. Value for the \"aud\" claim.",
 "type": "string"
 },
 "issuer": {
-"description": "Value for the \"iss\" claim.",
+"description": "Optional. Value for the \"iss\" claim.",
 "type": "string"
 },
 "subject": {
-"description": "Value for the \"sub\" claim.",
+"description": "Optional. Value for the \"sub\" claim.",
 "type": "string"
 }
 },
@@ -5977,6 +6612,31 @@ false
 },
 "type": "object"
 },
+"ListEndUserAuthenticationsResponse": {
+"description": "Response message for ConnectorsService.ListEndUserAuthentications",
+"id": "ListEndUserAuthenticationsResponse",
+"properties": {
+"endUserAuthentications": {
+"description": "Subscriptions.",
+"items": {
+"$ref": "EndUserAuthentication"
+},
+"type": "array"
+},
+"nextPageToken": {
+"description": "Next page token.",
+"type": "string"
+},
+"unreachable": {
+"description": "Locations that could not be reached.",
+"items": {
+"type": "string"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
 "ListEndpointAttachmentsResponse": {
 "description": "Response message for ConnectorsService.ListEndpointAttachments",
 "id": "ListEndpointAttachmentsResponse",
@@ -6245,11 +6905,11 @@ false
 "id": "LockConfig",
 "properties": {
 "locked": {
-"description": "Indicates whether or not the connection is locked.",
+"description": "Optional. Indicates whether or not the connection is locked.",
 "type": "boolean"
 },
 "reason": {
-"description": "Describes why a connection is locked.",
+"description": "Optional. Describes why a connection is locked.",
 "type": "string"
 }
 },
@@ -6557,12 +7217,12 @@ false
 "id": "NodeConfig",
 "properties": {
 "maxNodeCount": {
-"description": "Maximum number of nodes in the runtime nodes.",
+"description": "Optional. Maximum number of nodes in the runtime nodes.",
 "format": "int32",
 "type": "integer"
 },
 "minNodeCount": {
-"description": "Minimum number of nodes in the runtime nodes.",
+"description": "Optional. Minimum number of nodes in the runtime nodes.",
 "format": "int32",
 "type": "integer"
 }
@@ -6602,40 +7262,65 @@ false
 },
 "type": "object"
 },
+"OAuthTokenData": {
+"description": "pass only at create and not update using updateMask Auth Code Data",
+"id": "OAuthTokenData",
+"properties": {
+"accessToken": {
+"$ref": "EUASecret",
+"description": "Optional. Access token for the connection."
+},
+"createTime": {
+"description": "Optional. Timestamp when the access token was created.",
+"format": "google-datetime",
+"type": "string"
+},
+"expiry": {
+"description": "Optional. Time in seconds when the access token expires.",
+"format": "google-duration",
+"type": "string"
+},
+"refreshToken": {
+"$ref": "EUASecret",
+"description": "Optional. Refresh token for the connection."
+}
+},
+"type": "object"
+},
 "Oauth2AuthCodeFlow": {
 "description": "Parameters to support Oauth 2.0 Auth Code Grant Authentication. See https://www.rfc-editor.org/rfc/rfc6749#section-1.3.1 for more details.",
 "id": "Oauth2AuthCodeFlow",
 "properties": {
 "authCode": {
-"description": "Authorization code to be exchanged for access and refresh tokens.",
+"description": "Optional. Authorization code to be exchanged for access and refresh tokens.",
 "type": "string"
 },
 "authUri": {
-"description": "Auth URL for Authorization Code Flow",
+"description": "Optional. Auth URL for Authorization Code Flow",
 "type": "string"
 },
 "clientId": {
-"description": "Client ID for user-provided OAuth app.",
+"description": "Optional. Client ID for user-provided OAuth app.",
 "type": "string"
 },
 "clientSecret": {
 "$ref": "Secret",
-"description": "Client secret for user-provided OAuth app."
+"description": "Optional. Client secret for user-provided OAuth app."
 },
 "enablePkce": {
-"description": "Whether to enable PKCE when the user performs the auth code flow.",
+"description": "Optional. Whether to enable PKCE when the user performs the auth code flow.",
 "type": "boolean"
 },
 "pkceVerifier": {
-"description": "PKCE verifier to be used during the auth code exchange.",
+"description": "Optional. PKCE verifier to be used during the auth code exchange.",
 "type": "string"
 },
 "redirectUri": {
-"description": "Redirect URI to be provided during the auth code exchange.",
+"description": "Optional. Redirect URI to be provided during the auth code exchange.",
 "type": "string"
 },
 "scopes": {
-"description": "Scopes the connection will request when the user performs the auth code flow.",
+"description": "Optional. Scopes the connection will request when the user performs the auth code flow.",
 "items": {
 "type": "string"
 },
@@ -6671,12 +7356,12 @@ false
 "id": "Oauth2ClientCredentials",
 "properties": {
 "clientId": {
-"description": "The client identifier.",
+"description": "Optional. The client identifier.",
 "type": "string"
 },
 "clientSecret": {
 "$ref": "Secret",
-"description": "Secret version reference containing the client secret."
+"description": "Optional. Secret version reference containing the client secret."
 }
 },
 "type": "object"
@@ -6687,11 +7372,11 @@ false
 "properties": {
 "clientKey": {
 "$ref": "Secret",
-"description": "Secret version reference containing a PKCS#8 PEM-encoded private key associated with the Client Certificate. This private key will be used to sign JWTs used for the jwt-bearer authorization grant. Specified in the form as: `projects/*/secrets/*/versions/*`."
+"description": "Optional. Secret version reference containing a PKCS#8 PEM-encoded private key associated with the Client Certificate. This private key will be used to sign JWTs used for the jwt-bearer authorization grant. Specified in the form as: `projects/*/secrets/*/versions/*`."
 },
 "jwtClaims": {
 "$ref": "JwtClaims",
-"description": "JwtClaims providers fields to generate the token."
+"description": "Optional. JwtClaims providers fields to generate the token."
 }
 },
 "type": "object"
@@ -7681,7 +8366,7 @@ false
 "id": "Secret",
 "properties": {
 "secretVersion": {
-"description": "The resource name of the secret version in the format, format as: `projects/*/secrets/*/versions/*`.",
+"description": "Optional. The resource name of the secret version in the format, format as: `projects/*/secrets/*/versions/*`.",
 "type": "string"
 }
 },
@@ -7794,19 +8479,19 @@ false
 "id": "SshPublicKey",
 "properties": {
 "certType": {
-"description": "Format of SSH Client cert.",
+"description": "Optional. Format of SSH Client cert.",
 "type": "string"
 },
 "sshClientCert": {
 "$ref": "Secret",
-"description": "SSH Client Cert. It should contain both public and private key."
+"description": "Optional. SSH Client Cert. It should contain both public and private key."
 },
 "sshClientCertPass": {
 "$ref": "Secret",
-"description": "Password (passphrase) for ssh client certificate if it has one."
+"description": "Optional. Password (passphrase) for ssh client certificate if it has one."
 },
 "username": {
-"description": "The user account used to authenticate.",
+"description": "Optional. The user account used to authenticate.",
 "type": "string"
 }
 },
@@ -8148,10 +8833,10 @@ false
 "properties": {
 "password": {
 "$ref": "Secret",
-"description": "Secret version reference containing the password."
+"description": "Optional. Secret version reference containing the password."
 },
 "username": {
-"description": "Username.",
+"description": "Optional. Username.",
 "type": "string"
 }
 },