// Copyright 2026 Google LLC. // Use of this source code is governed by a BSD-style // license that can be found in the LICENSE file. // Code generated file. DO NOT EDIT. // Package cloudkms provides access to the Cloud Key Management Service (KMS) API. // // This package is DEPRECATED. Use package cloud.google.com/go/kms/apiv1 instead. // // For product documentation, see: https://cloud.google.com/kms/ // // # Library status // // These client libraries are officially supported by Google. However, this // library is considered complete and is in maintenance mode. This means // that we will address critical bugs and security issues but will not add // any new features. // // When possible, we recommend using our newer // [Cloud Client Libraries for Go](https://pkg.go.dev/cloud.google.com/go) // that are still actively being worked and iterated on. // // # Creating a client // // Usage example: // // import "google.golang.org/api/cloudkms/v1" // ... // ctx := context.Background() // cloudkmsService, err := cloudkms.NewService(ctx) // // In this example, Google Application Default Credentials are used for // authentication. For information on how to create and obtain Application // Default Credentials, see https://developers.google.com/identity/protocols/application-default-credentials. // // # Other authentication options // // By default, all available scopes (see "Constants") are used to authenticate. // To restrict scopes, use [google.golang.org/api/option.WithScopes]: // // cloudkmsService, err := cloudkms.NewService(ctx, option.WithScopes(cloudkms.CloudkmsScope)) // // To use an API key for authentication (note: some APIs do not support API // keys), use [google.golang.org/api/option.WithAPIKey]: // // cloudkmsService, err := cloudkms.NewService(ctx, option.WithAPIKey("AIza...")) // // To use an OAuth token (e.g., a user token obtained via a three-legged OAuth // flow, use [google.golang.org/api/option.WithTokenSource]: // // config := &oauth2.Config{...} // // ... // token, err := config.Exchange(ctx, ...) // cloudkmsService, err := cloudkms.NewService(ctx, option.WithTokenSource(config.TokenSource(ctx, token))) // // See [google.golang.org/api/option.ClientOption] for details on options. package cloudkms // import "google.golang.org/api/cloudkms/v1" import ( "bytes" "context" "encoding/json" "errors" "fmt" "io" "log/slog" "net/http" "net/url" "strconv" "strings" "github.com/googleapis/gax-go/v2/internallog" googleapi "google.golang.org/api/googleapi" internal "google.golang.org/api/internal" gensupport "google.golang.org/api/internal/gensupport" option "google.golang.org/api/option" internaloption "google.golang.org/api/option/internaloption" htransport "google.golang.org/api/transport/http" ) // Always reference these packages, just in case the auto-generated code // below doesn't. var _ = bytes.NewBuffer var _ = strconv.Itoa var _ = fmt.Sprintf var _ = json.NewDecoder var _ = io.Copy var _ = url.Parse var _ = gensupport.MarshalJSON var _ = googleapi.Version var _ = errors.New var _ = strings.Replace var _ = context.Canceled var _ = internaloption.WithDefaultEndpoint var _ = internal.Version var _ = internallog.New const apiId = "cloudkms:v1" const apiName = "cloudkms" const apiVersion = "v1" const basePath = "https://cloudkms.googleapis.com/" const basePathTemplate = "https://cloudkms.UNIVERSE_DOMAIN/" const mtlsBasePath = "https://cloudkms.mtls.googleapis.com/" // OAuth2 scopes used by this API. const ( // See, edit, configure, and delete your Google Cloud data and see the email // address for your Google Account. CloudPlatformScope = "https://www.googleapis.com/auth/cloud-platform" // View and manage your keys and secrets stored in Cloud Key Management Service CloudkmsScope = "https://www.googleapis.com/auth/cloudkms" ) // NewService creates a new Service. func NewService(ctx context.Context, opts ...option.ClientOption) (*Service, error) { scopesOption := internaloption.WithDefaultScopes( "https://www.googleapis.com/auth/cloud-platform", "https://www.googleapis.com/auth/cloudkms", ) // NOTE: prepend, so we don't override user-specified scopes. opts = append([]option.ClientOption{scopesOption}, opts...) opts = append(opts, internaloption.WithDefaultEndpoint(basePath)) opts = append(opts, internaloption.WithDefaultEndpointTemplate(basePathTemplate)) opts = append(opts, internaloption.WithDefaultMTLSEndpoint(mtlsBasePath)) opts = append(opts, internaloption.EnableNewAuthLibrary()) client, endpoint, err := htransport.NewClient(ctx, opts...) if err != nil { return nil, err } s := &Service{client: client, BasePath: basePath, logger: internaloption.GetLogger(opts)} s.Folders = NewFoldersService(s) s.Organizations = NewOrganizationsService(s) s.Projects = NewProjectsService(s) if endpoint != "" { s.BasePath = endpoint } return s, nil } // New creates a new Service. It uses the provided http.Client for requests. // // Deprecated: please use NewService instead. // To provide a custom HTTP client, use option.WithHTTPClient. // If you are using google.golang.org/api/googleapis/transport.APIKey, use option.WithAPIKey with NewService instead. func New(client *http.Client) (*Service, error) { if client == nil { return nil, errors.New("client is nil") } return NewService(context.TODO(), option.WithHTTPClient(client)) } type Service struct { client *http.Client logger *slog.Logger BasePath string // API endpoint base URL UserAgent string // optional additional User-Agent fragment Folders *FoldersService Organizations *OrganizationsService Projects *ProjectsService } func (s *Service) userAgent() string { if s.UserAgent == "" { return googleapi.UserAgent } return googleapi.UserAgent + " " + s.UserAgent } func NewFoldersService(s *Service) *FoldersService { rs := &FoldersService{s: s} return rs } type FoldersService struct { s *Service } func NewOrganizationsService(s *Service) *OrganizationsService { rs := &OrganizationsService{s: s} return rs } type OrganizationsService struct { s *Service } func NewProjectsService(s *Service) *ProjectsService { rs := &ProjectsService{s: s} rs.Locations = NewProjectsLocationsService(s) return rs } type ProjectsService struct { s *Service Locations *ProjectsLocationsService } func NewProjectsLocationsService(s *Service) *ProjectsLocationsService { rs := &ProjectsLocationsService{s: s} rs.EkmConfig = NewProjectsLocationsEkmConfigService(s) rs.EkmConnections = NewProjectsLocationsEkmConnectionsService(s) rs.KeyHandles = NewProjectsLocationsKeyHandlesService(s) rs.KeyRings = NewProjectsLocationsKeyRingsService(s) rs.Operations = NewProjectsLocationsOperationsService(s) rs.RetiredResources = NewProjectsLocationsRetiredResourcesService(s) rs.SingleTenantHsmInstances = NewProjectsLocationsSingleTenantHsmInstancesService(s) return rs } type ProjectsLocationsService struct { s *Service EkmConfig *ProjectsLocationsEkmConfigService EkmConnections *ProjectsLocationsEkmConnectionsService KeyHandles *ProjectsLocationsKeyHandlesService KeyRings *ProjectsLocationsKeyRingsService Operations *ProjectsLocationsOperationsService RetiredResources *ProjectsLocationsRetiredResourcesService SingleTenantHsmInstances *ProjectsLocationsSingleTenantHsmInstancesService } func NewProjectsLocationsEkmConfigService(s *Service) *ProjectsLocationsEkmConfigService { rs := &ProjectsLocationsEkmConfigService{s: s} return rs } type ProjectsLocationsEkmConfigService struct { s *Service } func NewProjectsLocationsEkmConnectionsService(s *Service) *ProjectsLocationsEkmConnectionsService { rs := &ProjectsLocationsEkmConnectionsService{s: s} return rs } type ProjectsLocationsEkmConnectionsService struct { s *Service } func NewProjectsLocationsKeyHandlesService(s *Service) *ProjectsLocationsKeyHandlesService { rs := &ProjectsLocationsKeyHandlesService{s: s} return rs } type ProjectsLocationsKeyHandlesService struct { s *Service } func NewProjectsLocationsKeyRingsService(s *Service) *ProjectsLocationsKeyRingsService { rs := &ProjectsLocationsKeyRingsService{s: s} rs.CryptoKeys = NewProjectsLocationsKeyRingsCryptoKeysService(s) rs.ImportJobs = NewProjectsLocationsKeyRingsImportJobsService(s) return rs } type ProjectsLocationsKeyRingsService struct { s *Service CryptoKeys *ProjectsLocationsKeyRingsCryptoKeysService ImportJobs *ProjectsLocationsKeyRingsImportJobsService } func NewProjectsLocationsKeyRingsCryptoKeysService(s *Service) *ProjectsLocationsKeyRingsCryptoKeysService { rs := &ProjectsLocationsKeyRingsCryptoKeysService{s: s} rs.CryptoKeyVersions = NewProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsService(s) return rs } type ProjectsLocationsKeyRingsCryptoKeysService struct { s *Service CryptoKeyVersions *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsService } func NewProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsService(s *Service) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsService { rs := &ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsService{s: s} return rs } type ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsService struct { s *Service } func NewProjectsLocationsKeyRingsImportJobsService(s *Service) *ProjectsLocationsKeyRingsImportJobsService { rs := &ProjectsLocationsKeyRingsImportJobsService{s: s} return rs } type ProjectsLocationsKeyRingsImportJobsService struct { s *Service } func NewProjectsLocationsOperationsService(s *Service) *ProjectsLocationsOperationsService { rs := &ProjectsLocationsOperationsService{s: s} return rs } type ProjectsLocationsOperationsService struct { s *Service } func NewProjectsLocationsRetiredResourcesService(s *Service) *ProjectsLocationsRetiredResourcesService { rs := &ProjectsLocationsRetiredResourcesService{s: s} return rs } type ProjectsLocationsRetiredResourcesService struct { s *Service } func NewProjectsLocationsSingleTenantHsmInstancesService(s *Service) *ProjectsLocationsSingleTenantHsmInstancesService { rs := &ProjectsLocationsSingleTenantHsmInstancesService{s: s} rs.Proposals = NewProjectsLocationsSingleTenantHsmInstancesProposalsService(s) return rs } type ProjectsLocationsSingleTenantHsmInstancesService struct { s *Service Proposals *ProjectsLocationsSingleTenantHsmInstancesProposalsService } func NewProjectsLocationsSingleTenantHsmInstancesProposalsService(s *Service) *ProjectsLocationsSingleTenantHsmInstancesProposalsService { rs := &ProjectsLocationsSingleTenantHsmInstancesProposalsService{s: s} return rs } type ProjectsLocationsSingleTenantHsmInstancesProposalsService struct { s *Service } // AddQuorumMember: Add a quorum member to the SingleTenantHsmInstance. This // will increase the total_approver_count by 1. The SingleTenantHsmInstance // must be in the ACTIVE state to perform this operation. type AddQuorumMember struct { // TwoFactorPublicKeyPem: Required. The public key associated with the 2FA key // for the new quorum member to add. Public keys must be associated with RSA // 2048 keys. TwoFactorPublicKeyPem string `json:"twoFactorPublicKeyPem,omitempty"` // ForceSendFields is a list of field names (e.g. "TwoFactorPublicKeyPem") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "TwoFactorPublicKeyPem") to // include in API requests with the JSON null value. By default, fields with // empty values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s AddQuorumMember) MarshalJSON() ([]byte, error) { type NoMethod AddQuorumMember return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // ApproveSingleTenantHsmInstanceProposalRequest: Request message for // HsmManagement.ApproveSingleTenantHsmInstanceProposal. type ApproveSingleTenantHsmInstanceProposalRequest struct { // QuorumReply: Required. The reply to QuorumParameters for approving the // proposal. QuorumReply *QuorumReply `json:"quorumReply,omitempty"` // RequiredActionQuorumReply: Required. The reply to // RequiredActionQuorumParameters for approving the proposal. RequiredActionQuorumReply *RequiredActionQuorumReply `json:"requiredActionQuorumReply,omitempty"` // ForceSendFields is a list of field names (e.g. "QuorumReply") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "QuorumReply") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s ApproveSingleTenantHsmInstanceProposalRequest) MarshalJSON() ([]byte, error) { type NoMethod ApproveSingleTenantHsmInstanceProposalRequest return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // ApproveSingleTenantHsmInstanceProposalResponse: Response message for // HsmManagement.ApproveSingleTenantHsmInstanceProposal. type ApproveSingleTenantHsmInstanceProposalResponse struct { // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` } // AsymmetricDecryptRequest: Request message for // KeyManagementService.AsymmetricDecrypt. type AsymmetricDecryptRequest struct { // Ciphertext: Required. The data encrypted with the named CryptoKeyVersion's // public key using OAEP. Ciphertext string `json:"ciphertext,omitempty"` // CiphertextCrc32c: Optional. An optional CRC32C checksum of the // AsymmetricDecryptRequest.ciphertext. If specified, KeyManagementService will // verify the integrity of the received AsymmetricDecryptRequest.ciphertext // using this checksum. KeyManagementService will report an error if the // checksum verification fails. If you receive a checksum error, your client // should verify that CRC32C(AsymmetricDecryptRequest.ciphertext) is equal to // AsymmetricDecryptRequest.ciphertext_crc32c, and if so, perform a limited // number of retries. A persistent mismatch may indicate an issue in your // computation of the CRC32C checksum. Note: This field is defined as int64 for // reasons of compatibility across different languages. However, it is a // non-negative integer, which will never exceed 2^32-1, and can be safely // downconverted to uint32 in languages that support this type. CiphertextCrc32c int64 `json:"ciphertextCrc32c,omitempty,string"` // ForceSendFields is a list of field names (e.g. "Ciphertext") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Ciphertext") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s AsymmetricDecryptRequest) MarshalJSON() ([]byte, error) { type NoMethod AsymmetricDecryptRequest return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // AsymmetricDecryptResponse: Response message for // KeyManagementService.AsymmetricDecrypt. type AsymmetricDecryptResponse struct { // Plaintext: The decrypted data originally encrypted with the matching public // key. Plaintext string `json:"plaintext,omitempty"` // PlaintextCrc32c: Integrity verification field. A CRC32C checksum of the // returned AsymmetricDecryptResponse.plaintext. An integrity check of // AsymmetricDecryptResponse.plaintext can be performed by computing the CRC32C // checksum of AsymmetricDecryptResponse.plaintext and comparing your results // to this field. Discard the response in case of non-matching checksum values, // and perform a limited number of retries. A persistent mismatch may indicate // an issue in your computation of the CRC32C checksum. Note: This field is // defined as int64 for reasons of compatibility across different languages. // However, it is a non-negative integer, which will never exceed 2^32-1, and // can be safely downconverted to uint32 in languages that support this type. PlaintextCrc32c int64 `json:"plaintextCrc32c,omitempty,string"` // ProtectionLevel: The ProtectionLevel of the CryptoKeyVersion used in // decryption. // // Possible values: // "PROTECTION_LEVEL_UNSPECIFIED" - Not specified. // "SOFTWARE" - Crypto operations are performed in software. // "HSM" - Crypto operations are performed in a Hardware Security Module. // "EXTERNAL" - Crypto operations are performed by an external key manager. // "EXTERNAL_VPC" - Crypto operations are performed in an EKM-over-VPC // backend. // "HSM_SINGLE_TENANT" - Crypto operations are performed in a single-tenant // HSM. ProtectionLevel string `json:"protectionLevel,omitempty"` // VerifiedCiphertextCrc32c: Integrity verification field. A flag indicating // whether AsymmetricDecryptRequest.ciphertext_crc32c was received by // KeyManagementService and used for the integrity verification of the // ciphertext. A false value of this field indicates either that // AsymmetricDecryptRequest.ciphertext_crc32c was left unset or that it was not // delivered to KeyManagementService. If you've set // AsymmetricDecryptRequest.ciphertext_crc32c but this field is still false, // discard the response and perform a limited number of retries. VerifiedCiphertextCrc32c bool `json:"verifiedCiphertextCrc32c,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "Plaintext") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Plaintext") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s AsymmetricDecryptResponse) MarshalJSON() ([]byte, error) { type NoMethod AsymmetricDecryptResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // AsymmetricSignRequest: Request message for // KeyManagementService.AsymmetricSign. type AsymmetricSignRequest struct { // Data: Optional. The data to sign. It can't be supplied if // AsymmetricSignRequest.digest is supplied. Data string `json:"data,omitempty"` // DataCrc32c: Optional. An optional CRC32C checksum of the // AsymmetricSignRequest.data. If specified, KeyManagementService will verify // the integrity of the received AsymmetricSignRequest.data using this // checksum. KeyManagementService will report an error if the checksum // verification fails. If you receive a checksum error, your client should // verify that CRC32C(AsymmetricSignRequest.data) is equal to // AsymmetricSignRequest.data_crc32c, and if so, perform a limited number of // retries. A persistent mismatch may indicate an issue in your computation of // the CRC32C checksum. Note: This field is defined as int64 for reasons of // compatibility across different languages. However, it is a non-negative // integer, which will never exceed 2^32-1, and can be safely downconverted to // uint32 in languages that support this type. DataCrc32c int64 `json:"dataCrc32c,omitempty,string"` // Digest: Optional. The digest of the data to sign. The digest must be // produced with the same digest algorithm as specified by the key version's // algorithm. This field may not be supplied if AsymmetricSignRequest.data is // supplied. Digest *Digest `json:"digest,omitempty"` // DigestCrc32c: Optional. An optional CRC32C checksum of the // AsymmetricSignRequest.digest. If specified, KeyManagementService will verify // the integrity of the received AsymmetricSignRequest.digest using this // checksum. KeyManagementService will report an error if the checksum // verification fails. If you receive a checksum error, your client should // verify that CRC32C(AsymmetricSignRequest.digest) is equal to // AsymmetricSignRequest.digest_crc32c, and if so, perform a limited number of // retries. A persistent mismatch may indicate an issue in your computation of // the CRC32C checksum. Note: This field is defined as int64 for reasons of // compatibility across different languages. However, it is a non-negative // integer, which will never exceed 2^32-1, and can be safely downconverted to // uint32 in languages that support this type. DigestCrc32c int64 `json:"digestCrc32c,omitempty,string"` // ForceSendFields is a list of field names (e.g. "Data") to unconditionally // include in API requests. By default, fields with empty or default values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Data") to include in API requests // with the JSON null value. By default, fields with empty values are omitted // from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s AsymmetricSignRequest) MarshalJSON() ([]byte, error) { type NoMethod AsymmetricSignRequest return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // AsymmetricSignResponse: Response message for // KeyManagementService.AsymmetricSign. type AsymmetricSignResponse struct { // Name: The resource name of the CryptoKeyVersion used for signing. Check this // field to verify that the intended resource was used for signing. Name string `json:"name,omitempty"` // ProtectionLevel: The ProtectionLevel of the CryptoKeyVersion used for // signing. // // Possible values: // "PROTECTION_LEVEL_UNSPECIFIED" - Not specified. // "SOFTWARE" - Crypto operations are performed in software. // "HSM" - Crypto operations are performed in a Hardware Security Module. // "EXTERNAL" - Crypto operations are performed by an external key manager. // "EXTERNAL_VPC" - Crypto operations are performed in an EKM-over-VPC // backend. // "HSM_SINGLE_TENANT" - Crypto operations are performed in a single-tenant // HSM. ProtectionLevel string `json:"protectionLevel,omitempty"` // Signature: The created signature. Signature string `json:"signature,omitempty"` // SignatureCrc32c: Integrity verification field. A CRC32C checksum of the // returned AsymmetricSignResponse.signature. An integrity check of // AsymmetricSignResponse.signature can be performed by computing the CRC32C // checksum of AsymmetricSignResponse.signature and comparing your results to // this field. Discard the response in case of non-matching checksum values, // and perform a limited number of retries. A persistent mismatch may indicate // an issue in your computation of the CRC32C checksum. Note: This field is // defined as int64 for reasons of compatibility across different languages. // However, it is a non-negative integer, which will never exceed 2^32-1, and // can be safely downconverted to uint32 in languages that support this type. SignatureCrc32c int64 `json:"signatureCrc32c,omitempty,string"` // VerifiedDataCrc32c: Integrity verification field. A flag indicating whether // AsymmetricSignRequest.data_crc32c was received by KeyManagementService and // used for the integrity verification of the data. A false value of this field // indicates either that AsymmetricSignRequest.data_crc32c was left unset or // that it was not delivered to KeyManagementService. If you've set // AsymmetricSignRequest.data_crc32c but this field is still false, discard the // response and perform a limited number of retries. VerifiedDataCrc32c bool `json:"verifiedDataCrc32c,omitempty"` // VerifiedDigestCrc32c: Integrity verification field. A flag indicating // whether AsymmetricSignRequest.digest_crc32c was received by // KeyManagementService and used for the integrity verification of the digest. // A false value of this field indicates either that // AsymmetricSignRequest.digest_crc32c was left unset or that it was not // delivered to KeyManagementService. If you've set // AsymmetricSignRequest.digest_crc32c but this field is still false, discard // the response and perform a limited number of retries. VerifiedDigestCrc32c bool `json:"verifiedDigestCrc32c,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "Name") to unconditionally // include in API requests. By default, fields with empty or default values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Name") to include in API requests // with the JSON null value. By default, fields with empty values are omitted // from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s AsymmetricSignResponse) MarshalJSON() ([]byte, error) { type NoMethod AsymmetricSignResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // AuditConfig: Specifies the audit configuration for a service. The // configuration determines which permission types are logged, and what // identities, if any, are exempted from logging. An AuditConfig must have one // or more AuditLogConfigs. If there are AuditConfigs for both `allServices` // and a specific service, the union of the two AuditConfigs is used for that // service: the log_types specified in each AuditConfig are enabled, and the // exempted_members in each AuditLogConfig are exempted. Example Policy with // multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", // "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ // "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": // "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", // "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": // "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For // sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ // logging. It also exempts `jose@example.com` from DATA_READ logging, and // `aliya@example.com` from DATA_WRITE logging. type AuditConfig struct { // AuditLogConfigs: The configuration for logging of each type of permission. AuditLogConfigs []*AuditLogConfig `json:"auditLogConfigs,omitempty"` // Service: Specifies a service that will be enabled for audit logging. For // example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` // is a special value that covers all services. Service string `json:"service,omitempty"` // ForceSendFields is a list of field names (e.g. "AuditLogConfigs") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "AuditLogConfigs") to include in // API requests with the JSON null value. By default, fields with empty values // are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s AuditConfig) MarshalJSON() ([]byte, error) { type NoMethod AuditConfig return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // AuditLogConfig: Provides the configuration for logging a type of // permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", // "exempted_members": [ "user:jose@example.com" ] }, { "log_type": // "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while // exempting jose@example.com from DATA_READ logging. type AuditLogConfig struct { // ExemptedMembers: Specifies the identities that do not cause logging for this // type of permission. Follows the same format of Binding.members. ExemptedMembers []string `json:"exemptedMembers,omitempty"` // LogType: The log type that this config enables. // // Possible values: // "LOG_TYPE_UNSPECIFIED" - Default case. Should never be this. // "ADMIN_READ" - Admin reads. Example: CloudIAM getIamPolicy // "DATA_WRITE" - Data writes. Example: CloudSQL Users create // "DATA_READ" - Data reads. Example: CloudSQL Users list LogType string `json:"logType,omitempty"` // ForceSendFields is a list of field names (e.g. "ExemptedMembers") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "ExemptedMembers") to include in // API requests with the JSON null value. By default, fields with empty values // are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s AuditLogConfig) MarshalJSON() ([]byte, error) { type NoMethod AuditLogConfig return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // AutokeyConfig: Cloud KMS Autokey configuration for a folder. type AutokeyConfig struct { // Etag: Optional. A checksum computed by the server based on the value of // other fields. This may be sent on update requests to ensure that the client // has an up-to-date value before proceeding. The request will be rejected with // an ABORTED error on a mismatched etag. Etag string `json:"etag,omitempty"` // KeyProject: Optional. Name of the key project, e.g. `projects/{PROJECT_ID}` // or `projects/{PROJECT_NUMBER}`, where Cloud KMS Autokey will provision a new // CryptoKey when a KeyHandle is created. On UpdateAutokeyConfig, the caller // will require `cloudkms.cryptoKeys.setIamPolicy` permission on this key // project. Once configured, for Cloud KMS Autokey to function properly, this // key project must have the Cloud KMS API activated and the Cloud KMS Service // Agent for this key project must be granted the `cloudkms.admin` role (or // pertinent permissions). A request with an empty key project field will clear // the configuration. KeyProject string `json:"keyProject,omitempty"` // KeyProjectResolutionMode: Optional. KeyProjectResolutionMode for the // AutokeyConfig. Valid values are `DEDICATED_KEY_PROJECT`, `RESOURCE_PROJECT`, // or `DISABLED`. // // Possible values: // "KEY_PROJECT_RESOLUTION_MODE_UNSPECIFIED" - Default value. // KeyProjectResolutionMode when not specified will act as // `DEDICATED_KEY_PROJECT`. // "DEDICATED_KEY_PROJECT" - Keys are created in a dedicated project // specified by `key_project`. // "RESOURCE_PROJECT" - Keys are created in the same project as the resource // requesting the key. The `key_project` must not be set when this mode is // used. // "DISABLED" - Disables the AutokeyConfig. When this mode is set, any // AutokeyConfig from higher levels in the resource hierarchy are ignored for // this resource and its descendants. This setting can be overridden by a more // specific configuration at a lower level. For example, if Autokey is disabled // on a folder, it can be re-enabled on a sub-folder or project within that // folder by setting a different mode (e.g., DEDICATED_KEY_PROJECT or // RESOURCE_PROJECT). KeyProjectResolutionMode string `json:"keyProjectResolutionMode,omitempty"` // Name: Identifier. Name of the AutokeyConfig resource, e.g. // `folders/{FOLDER_NUMBER}/autokeyConfig` or // `projects/{PROJECT_NUMBER}/autokeyConfig`. Name string `json:"name,omitempty"` // State: Output only. The state for the AutokeyConfig. // // Possible values: // "STATE_UNSPECIFIED" - The state of the AutokeyConfig is unspecified. // "ACTIVE" - The AutokeyConfig is currently active. // "KEY_PROJECT_DELETED" - A previously configured key project has been // deleted and the current AutokeyConfig is unusable. // "UNINITIALIZED" - The AutokeyConfig is not yet initialized or has been // reset to its default uninitialized state. State string `json:"state,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "Etag") to unconditionally // include in API requests. By default, fields with empty or default values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Etag") to include in API requests // with the JSON null value. By default, fields with empty values are omitted // from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s AutokeyConfig) MarshalJSON() ([]byte, error) { type NoMethod AutokeyConfig return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // Binding: Associates `members`, or principals, with a `role`. type Binding struct { // Condition: The condition that is associated with this binding. If the // condition evaluates to `true`, then this binding applies to the current // request. If the condition evaluates to `false`, then this binding does not // apply to the current request. However, a different role binding might grant // the same role to one or more of the principals in this binding. To learn // which resources support conditions in their IAM policies, see the IAM // documentation // (https://cloud.google.com/iam/help/conditions/resource-policies). Condition *Expr `json:"condition,omitempty"` // Members: Specifies the principals requesting access for a Google Cloud // resource. `members` can have the following values: * `allUsers`: A special // identifier that represents anyone who is on the internet; with or without a // Google account. * `allAuthenticatedUsers`: A special identifier that // represents anyone who is authenticated with a Google account or a service // account. Does not include identities that come from external identity // providers (IdPs) through identity federation. * `user:{emailid}`: An email // address that represents a specific Google account. For example, // `alice@example.com` . * `serviceAccount:{emailid}`: An email address that // represents a Google service account. For example, // `my-other-app@appspot.gserviceaccount.com`. * // `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An // identifier for a Kubernetes service account // (https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). // For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * // `group:{emailid}`: An email address that represents a Google group. For // example, `admins@example.com`. * `domain:{domain}`: The G Suite domain // (primary) that represents all the users of that domain. For example, // `google.com` or `example.com`. * // `principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/sub // ject/{subject_attribute_value}`: A single identity in a workforce identity // pool. * // `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/ // group/{group_id}`: All workforce identities in a group. * // `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/ // attribute.{attribute_name}/{attribute_value}`: All workforce identities with // a specific attribute value. * // `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/ // *`: All identities in a workforce identity pool. * // `principal://iam.googleapis.com/projects/{project_number}/locations/global/wo // rkloadIdentityPools/{pool_id}/subject/{subject_attribute_value}`: A single // identity in a workload identity pool. * // `principalSet://iam.googleapis.com/projects/{project_number}/locations/global // /workloadIdentityPools/{pool_id}/group/{group_id}`: A workload identity pool // group. * // `principalSet://iam.googleapis.com/projects/{project_number}/locations/global // /workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{attribute_value} // `: All identities in a workload identity pool with a certain attribute. * // `principalSet://iam.googleapis.com/projects/{project_number}/locations/global // /workloadIdentityPools/{pool_id}/*`: All identities in a workload identity // pool. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus // unique identifier) representing a user that has been recently deleted. For // example, `alice@example.com?uid=123456789012345678901`. If the user is // recovered, this value reverts to `user:{emailid}` and the recovered user // retains the role in the binding. * // `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus // unique identifier) representing a service account that has been recently // deleted. For example, // `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the // service account is undeleted, this value reverts to // `serviceAccount:{emailid}` and the undeleted service account retains the // role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email // address (plus unique identifier) representing a Google group that has been // recently deleted. For example, // `admins@example.com?uid=123456789012345678901`. If the group is recovered, // this value reverts to `group:{emailid}` and the recovered group retains the // role in the binding. * // `deleted:principal://iam.googleapis.com/locations/global/workforcePools/{pool // _id}/subject/{subject_attribute_value}`: Deleted single identity in a // workforce identity pool. For example, // `deleted:principal://iam.googleapis.com/locations/global/workforcePools/my-po // ol-id/subject/my-subject-attribute-value`. Members []string `json:"members,omitempty"` // Role: Role that is assigned to the list of `members`, or principals. For // example, `roles/viewer`, `roles/editor`, or `roles/owner`. For an overview // of the IAM roles and permissions, see the IAM documentation // (https://cloud.google.com/iam/docs/roles-overview). For a list of the // available pre-defined roles, see here // (https://cloud.google.com/iam/docs/understanding-roles). Role string `json:"role,omitempty"` // ForceSendFields is a list of field names (e.g. "Condition") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Condition") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s Binding) MarshalJSON() ([]byte, error) { type NoMethod Binding return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // Certificate: A Certificate represents an X.509 certificate used to // authenticate HTTPS connections to EKM replicas. type Certificate struct { // Issuer: Output only. The issuer distinguished name in RFC 2253 format. Only // present if parsed is true. Issuer string `json:"issuer,omitempty"` // NotAfterTime: Output only. The certificate is not valid after this time. // Only present if parsed is true. NotAfterTime string `json:"notAfterTime,omitempty"` // NotBeforeTime: Output only. The certificate is not valid before this time. // Only present if parsed is true. NotBeforeTime string `json:"notBeforeTime,omitempty"` // Parsed: Output only. True if the certificate was parsed successfully. Parsed bool `json:"parsed,omitempty"` // RawDer: Required. The raw certificate bytes in DER format. RawDer string `json:"rawDer,omitempty"` // SerialNumber: Output only. The certificate serial number as a hex string. // Only present if parsed is true. SerialNumber string `json:"serialNumber,omitempty"` // Sha256Fingerprint: Output only. The SHA-256 certificate fingerprint as a hex // string. Only present if parsed is true. Sha256Fingerprint string `json:"sha256Fingerprint,omitempty"` // Subject: Output only. The subject distinguished name in RFC 2253 format. // Only present if parsed is true. Subject string `json:"subject,omitempty"` // SubjectAlternativeDnsNames: Output only. The subject Alternative DNS names. // Only present if parsed is true. SubjectAlternativeDnsNames []string `json:"subjectAlternativeDnsNames,omitempty"` // ForceSendFields is a list of field names (e.g. "Issuer") to unconditionally // include in API requests. By default, fields with empty or default values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Issuer") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s Certificate) MarshalJSON() ([]byte, error) { type NoMethod Certificate return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // CertificateChains: Certificate chains needed to verify the attestation. // Certificates in chains are PEM-encoded and are ordered based on // https://tools.ietf.org/html/rfc5246#section-7.4.2. type CertificateChains struct { // CaviumCerts: Cavium certificate chain corresponding to the attestation. CaviumCerts []string `json:"caviumCerts,omitempty"` // GoogleCardCerts: Google card certificate chain corresponding to the // attestation. GoogleCardCerts []string `json:"googleCardCerts,omitempty"` // GooglePartitionCerts: Google partition certificate chain corresponding to // the attestation. GooglePartitionCerts []string `json:"googlePartitionCerts,omitempty"` // ForceSendFields is a list of field names (e.g. "CaviumCerts") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "CaviumCerts") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s CertificateChains) MarshalJSON() ([]byte, error) { type NoMethod CertificateChains return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // Challenge: A challenge to be signed by a 2FA key. type Challenge struct { // Challenge: Output only. The challenge to be signed by the 2FA key indicated // by the public key. Challenge string `json:"challenge,omitempty"` // PublicKeyPem: Output only. The public key associated with the 2FA key that // should sign the challenge. PublicKeyPem string `json:"publicKeyPem,omitempty"` // ForceSendFields is a list of field names (e.g. "Challenge") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Challenge") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s Challenge) MarshalJSON() ([]byte, error) { type NoMethod Challenge return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // ChallengeReply: A reply to a challenge signed by a 2FA key. type ChallengeReply struct { // PublicKeyPem: Required. The public key associated with the 2FA key. PublicKeyPem string `json:"publicKeyPem,omitempty"` // SignedChallenge: Required. The signed challenge associated with the 2FA key. // The signature must be RSASSA-PKCS1 v1.5 with a SHA256 digest. SignedChallenge string `json:"signedChallenge,omitempty"` // ForceSendFields is a list of field names (e.g. "PublicKeyPem") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "PublicKeyPem") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s ChallengeReply) MarshalJSON() ([]byte, error) { type NoMethod ChallengeReply return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // ChecksummedData: Data with integrity verification field. type ChecksummedData struct { // Crc32cChecksum: Integrity verification field. A CRC32C checksum of the // returned ChecksummedData.data. An integrity check of ChecksummedData.data // can be performed by computing the CRC32C checksum of ChecksummedData.data // and comparing your results to this field. Discard the response in case of // non-matching checksum values, and perform a limited number of retries. A // persistent mismatch may indicate an issue in your computation of the CRC32C // checksum. Note: This field is defined as int64 for reasons of compatibility // across different languages. However, it is a non-negative integer, which // will never exceed `2^32-1`, and can be safely downconverted to uint32 in // languages that support this type. Crc32cChecksum int64 `json:"crc32cChecksum,omitempty,string"` // Data: Raw Data. Data string `json:"data,omitempty"` // ForceSendFields is a list of field names (e.g. "Crc32cChecksum") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Crc32cChecksum") to include in // API requests with the JSON null value. By default, fields with empty values // are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s ChecksummedData) MarshalJSON() ([]byte, error) { type NoMethod ChecksummedData return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // CryptoKey: A CryptoKey represents a logical key that can be used for // cryptographic operations. A CryptoKey is made up of zero or more versions, // which represent the actual key material used in cryptographic operations. type CryptoKey struct { // CreateTime: Output only. The time at which this CryptoKey was created. CreateTime string `json:"createTime,omitempty"` // CryptoKeyBackend: Immutable. The resource name of the backend environment // where the key material for all CryptoKeyVersions associated with this // CryptoKey reside and where all related cryptographic operations are // performed. Only applicable if CryptoKeyVersions have a ProtectionLevel of // EXTERNAL_VPC, with the resource name in the format // `projects/*/locations/*/ekmConnections/*`. Only applicable if // CryptoKeyVersions have a ProtectionLevel of HSM_SINGLE_TENANT, with the // resource name in the format // `projects/*/locations/*/singleTenantHsmInstances/*`. Note, this list is // non-exhaustive and may apply to additional ProtectionLevels in the future. CryptoKeyBackend string `json:"cryptoKeyBackend,omitempty"` // DestroyScheduledDuration: Immutable. The period of time that versions of // this key spend in the DESTROY_SCHEDULED state before transitioning to // DESTROYED. If not specified at creation time, the default duration is 30 // days. DestroyScheduledDuration string `json:"destroyScheduledDuration,omitempty"` // ImportOnly: Immutable. Whether this key may contain imported versions only. ImportOnly bool `json:"importOnly,omitempty"` // KeyAccessJustificationsPolicy: Optional. The policy used for Key Access // Justifications Policy Enforcement. If this field is present and this key is // enrolled in Key Access Justifications Policy Enforcement, the policy will be // evaluated in encrypt, decrypt, and sign operations, and the operation will // fail if rejected by the policy. The policy is defined by specifying zero or // more allowed justification codes. // https://cloud.google.com/assured-workloads/key-access-justifications/docs/justification-codes // By default, this field is absent, and all justification codes are allowed. // If the `key_access_justifications_policy.allowed_access_reasons` is empty // (zero allowed justification code), all encrypt, decrypt, and sign operations // will fail. KeyAccessJustificationsPolicy *KeyAccessJustificationsPolicy `json:"keyAccessJustificationsPolicy,omitempty"` // Labels: Labels with user-defined metadata. For more information, see // Labeling Keys (https://cloud.google.com/kms/docs/labeling-keys). Labels map[string]string `json:"labels,omitempty"` // Name: Output only. The resource name for this CryptoKey in the format // `projects/*/locations/*/keyRings/*/cryptoKeys/*`. Name string `json:"name,omitempty"` // NextRotationTime: At next_rotation_time, the Key Management Service will // automatically: 1. Create a new version of this CryptoKey. 2. Mark the new // version as primary. Key rotations performed manually via // CreateCryptoKeyVersion and UpdateCryptoKeyPrimaryVersion do not affect // next_rotation_time. Keys with purpose ENCRYPT_DECRYPT support automatic // rotation. For other keys, this field must be omitted. NextRotationTime string `json:"nextRotationTime,omitempty"` // Primary: Output only. A copy of the "primary" CryptoKeyVersion that will be // used by Encrypt when this CryptoKey is given in EncryptRequest.name. The // CryptoKey's primary version can be updated via // UpdateCryptoKeyPrimaryVersion. Keys with purpose ENCRYPT_DECRYPT may have a // primary. For other keys, this field will be omitted. Primary *CryptoKeyVersion `json:"primary,omitempty"` // Purpose: Immutable. The immutable purpose of this CryptoKey. // // Possible values: // "CRYPTO_KEY_PURPOSE_UNSPECIFIED" - Not specified. // "ENCRYPT_DECRYPT" - CryptoKeys with this purpose may be used with Encrypt // and Decrypt. // "ASYMMETRIC_SIGN" - CryptoKeys with this purpose may be used with // AsymmetricSign and GetPublicKey. // "ASYMMETRIC_DECRYPT" - CryptoKeys with this purpose may be used with // AsymmetricDecrypt and GetPublicKey. // "RAW_ENCRYPT_DECRYPT" - CryptoKeys with this purpose may be used with // RawEncrypt and RawDecrypt. This purpose is meant to be used for // interoperable symmetric encryption and does not support automatic CryptoKey // rotation. // "MAC" - CryptoKeys with this purpose may be used with MacSign. // "KEY_ENCAPSULATION" - CryptoKeys with this purpose may be used with // GetPublicKey and Decapsulate. Purpose string `json:"purpose,omitempty"` // RotationPeriod: next_rotation_time will be advanced by this period when the // service automatically rotates a key. Must be at least 24 hours and at most // 876,000 hours. If rotation_period is set, next_rotation_time must also be // set. Keys with purpose ENCRYPT_DECRYPT support automatic rotation. For other // keys, this field must be omitted. RotationPeriod string `json:"rotationPeriod,omitempty"` // VersionTemplate: A template describing settings for new CryptoKeyVersion // instances. The properties of new CryptoKeyVersion instances created by // either CreateCryptoKeyVersion or auto-rotation are controlled by this // template. VersionTemplate *CryptoKeyVersionTemplate `json:"versionTemplate,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "CreateTime") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "CreateTime") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s CryptoKey) MarshalJSON() ([]byte, error) { type NoMethod CryptoKey return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // CryptoKeyVersion: A CryptoKeyVersion represents an individual cryptographic // key, and the associated key material. An ENABLED version can be used for // cryptographic operations. For security reasons, the raw cryptographic key // material represented by a CryptoKeyVersion can never be viewed or exported. // It can only be used to encrypt, decrypt, or sign data when an authorized // user or application invokes Cloud KMS. type CryptoKeyVersion struct { // Algorithm: Output only. The CryptoKeyVersionAlgorithm that this // CryptoKeyVersion supports. // // Possible values: // "CRYPTO_KEY_VERSION_ALGORITHM_UNSPECIFIED" - Not specified. // "GOOGLE_SYMMETRIC_ENCRYPTION" - Creates symmetric encryption keys. // "AES_128_GCM" - AES-GCM (Galois Counter Mode) using 128-bit keys. // "AES_256_GCM" - AES-GCM (Galois Counter Mode) using 256-bit keys. // "AES_128_CBC" - AES-CBC (Cipher Block Chaining Mode) using 128-bit keys. // "AES_256_CBC" - AES-CBC (Cipher Block Chaining Mode) using 256-bit keys. // "AES_128_CTR" - AES-CTR (Counter Mode) using 128-bit keys. // "AES_256_CTR" - AES-CTR (Counter Mode) using 256-bit keys. // "RSA_SIGN_PSS_2048_SHA256" - RSASSA-PSS 2048 bit key with a SHA256 digest. // "RSA_SIGN_PSS_3072_SHA256" - RSASSA-PSS 3072 bit key with a SHA256 digest. // "RSA_SIGN_PSS_4096_SHA256" - RSASSA-PSS 4096 bit key with a SHA256 digest. // "RSA_SIGN_PSS_4096_SHA512" - RSASSA-PSS 4096 bit key with a SHA512 digest. // "RSA_SIGN_PKCS1_2048_SHA256" - RSASSA-PKCS1-v1_5 with a 2048 bit key and a // SHA256 digest. // "RSA_SIGN_PKCS1_3072_SHA256" - RSASSA-PKCS1-v1_5 with a 3072 bit key and a // SHA256 digest. // "RSA_SIGN_PKCS1_4096_SHA256" - RSASSA-PKCS1-v1_5 with a 4096 bit key and a // SHA256 digest. // "RSA_SIGN_PKCS1_4096_SHA512" - RSASSA-PKCS1-v1_5 with a 4096 bit key and a // SHA512 digest. // "RSA_SIGN_RAW_PKCS1_2048" - RSASSA-PKCS1-v1_5 signing without encoding, // with a 2048 bit key. // "RSA_SIGN_RAW_PKCS1_3072" - RSASSA-PKCS1-v1_5 signing without encoding, // with a 3072 bit key. // "RSA_SIGN_RAW_PKCS1_4096" - RSASSA-PKCS1-v1_5 signing without encoding, // with a 4096 bit key. // "RSA_DECRYPT_OAEP_2048_SHA256" - RSAES-OAEP 2048 bit key with a SHA256 // digest. // "RSA_DECRYPT_OAEP_3072_SHA256" - RSAES-OAEP 3072 bit key with a SHA256 // digest. // "RSA_DECRYPT_OAEP_4096_SHA256" - RSAES-OAEP 4096 bit key with a SHA256 // digest. // "RSA_DECRYPT_OAEP_4096_SHA512" - RSAES-OAEP 4096 bit key with a SHA512 // digest. // "RSA_DECRYPT_OAEP_2048_SHA1" - RSAES-OAEP 2048 bit key with a SHA1 digest. // "RSA_DECRYPT_OAEP_3072_SHA1" - RSAES-OAEP 3072 bit key with a SHA1 digest. // "RSA_DECRYPT_OAEP_4096_SHA1" - RSAES-OAEP 4096 bit key with a SHA1 digest. // "EC_SIGN_P256_SHA256" - ECDSA on the NIST P-256 curve with a SHA256 // digest. Other hash functions can also be used: // https://cloud.google.com/kms/docs/create-validate-signatures#ecdsa_support_for_other_hash_algorithms // "EC_SIGN_P384_SHA384" - ECDSA on the NIST P-384 curve with a SHA384 // digest. Other hash functions can also be used: // https://cloud.google.com/kms/docs/create-validate-signatures#ecdsa_support_for_other_hash_algorithms // "EC_SIGN_SECP256K1_SHA256" - ECDSA on the non-NIST secp256k1 curve. This // curve is only supported for HSM protection level. Other hash functions can // also be used: // https://cloud.google.com/kms/docs/create-validate-signatures#ecdsa_support_for_other_hash_algorithms // "EC_SIGN_ED25519" - EdDSA on the Curve25519 in pure mode (taking data as // input). // "HMAC_SHA256" - HMAC-SHA256 signing with a 256 bit key. // "HMAC_SHA1" - HMAC-SHA1 signing with a 160 bit key. // "HMAC_SHA384" - HMAC-SHA384 signing with a 384 bit key. // "HMAC_SHA512" - HMAC-SHA512 signing with a 512 bit key. // "HMAC_SHA224" - HMAC-SHA224 signing with a 224 bit key. // "EXTERNAL_SYMMETRIC_ENCRYPTION" - Algorithm representing symmetric // encryption by an external key manager. // "ML_KEM_768" - ML-KEM-768 (FIPS 203) // "ML_KEM_1024" - ML-KEM-1024 (FIPS 203) // "KEM_XWING" - X-Wing hybrid KEM combining ML-KEM-768 with X25519 following // datatracker.ietf.org/doc/draft-connolly-cfrg-xwing-kem/. // "PQ_SIGN_ML_DSA_44" - The post-quantum Module-Lattice-Based Digital // Signature Algorithm, at security level 1. Randomized version. // "PQ_SIGN_ML_DSA_65" - The post-quantum Module-Lattice-Based Digital // Signature Algorithm, at security level 3. Randomized version. // "PQ_SIGN_ML_DSA_87" - The post-quantum Module-Lattice-Based Digital // Signature Algorithm, at security level 5. Randomized version. // "PQ_SIGN_SLH_DSA_SHA2_128S" - The post-quantum stateless hash-based // digital signature algorithm, at security level 1. Randomized version. // "PQ_SIGN_HASH_SLH_DSA_SHA2_128S_SHA256" - The post-quantum stateless // hash-based digital signature algorithm, at security level 1. Randomized // pre-hash version supporting SHA256 digests. // "PQ_SIGN_ML_DSA_44_EXTERNAL_MU" - The post-quantum Module-Lattice-Based // Digital Signature Algorithm, at security level 1. Randomized version // supporting externally-computed message representatives. // "PQ_SIGN_ML_DSA_65_EXTERNAL_MU" - The post-quantum Module-Lattice-Based // Digital Signature Algorithm, at security level 3. Randomized version // supporting externally-computed message representatives. // "PQ_SIGN_ML_DSA_87_EXTERNAL_MU" - The post-quantum Module-Lattice-Based // Digital Signature Algorithm, at security level 5. Randomized version // supporting externally-computed message representatives. Algorithm string `json:"algorithm,omitempty"` // Attestation: Output only. Statement that was generated and signed by the HSM // at key creation time. Use this statement to verify attributes of the key as // stored on the HSM, independently of Google. Only provided for key versions // with protection_level HSM. Attestation *KeyOperationAttestation `json:"attestation,omitempty"` // CreateTime: Output only. The time at which this CryptoKeyVersion was // created. CreateTime string `json:"createTime,omitempty"` // DestroyEventTime: Output only. The time this CryptoKeyVersion's key material // was destroyed. Only present if state is DESTROYED. DestroyEventTime string `json:"destroyEventTime,omitempty"` // DestroyTime: Output only. The time this CryptoKeyVersion's key material is // scheduled for destruction. Only present if state is DESTROY_SCHEDULED. DestroyTime string `json:"destroyTime,omitempty"` // ExternalDestructionFailureReason: Output only. The root cause of the most // recent external destruction failure. Only present if state is // EXTERNAL_DESTRUCTION_FAILED. ExternalDestructionFailureReason string `json:"externalDestructionFailureReason,omitempty"` // ExternalProtectionLevelOptions: ExternalProtectionLevelOptions stores a // group of additional fields for configuring a CryptoKeyVersion that are // specific to the EXTERNAL protection level and EXTERNAL_VPC protection // levels. ExternalProtectionLevelOptions *ExternalProtectionLevelOptions `json:"externalProtectionLevelOptions,omitempty"` // GenerateTime: Output only. The time this CryptoKeyVersion's key material was // generated. GenerateTime string `json:"generateTime,omitempty"` // GenerationFailureReason: Output only. The root cause of the most recent // generation failure. Only present if state is GENERATION_FAILED. GenerationFailureReason string `json:"generationFailureReason,omitempty"` // ImportFailureReason: Output only. The root cause of the most recent import // failure. Only present if state is IMPORT_FAILED. ImportFailureReason string `json:"importFailureReason,omitempty"` // ImportJob: Output only. The name of the ImportJob used in the most recent // import of this CryptoKeyVersion. Only present if the underlying key material // was imported. ImportJob string `json:"importJob,omitempty"` // ImportTime: Output only. The time at which this CryptoKeyVersion's key // material was most recently imported. ImportTime string `json:"importTime,omitempty"` // Name: Output only. The resource name for this CryptoKeyVersion in the format // `projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*`. Name string `json:"name,omitempty"` // ProtectionLevel: Output only. The ProtectionLevel describing how crypto // operations are performed with this CryptoKeyVersion. // // Possible values: // "PROTECTION_LEVEL_UNSPECIFIED" - Not specified. // "SOFTWARE" - Crypto operations are performed in software. // "HSM" - Crypto operations are performed in a Hardware Security Module. // "EXTERNAL" - Crypto operations are performed by an external key manager. // "EXTERNAL_VPC" - Crypto operations are performed in an EKM-over-VPC // backend. // "HSM_SINGLE_TENANT" - Crypto operations are performed in a single-tenant // HSM. ProtectionLevel string `json:"protectionLevel,omitempty"` // ReimportEligible: Output only. Whether or not this key version is eligible // for reimport, by being specified as a target in // ImportCryptoKeyVersionRequest.crypto_key_version. ReimportEligible bool `json:"reimportEligible,omitempty"` // State: The current state of the CryptoKeyVersion. // // Possible values: // "CRYPTO_KEY_VERSION_STATE_UNSPECIFIED" - Not specified. // "PENDING_GENERATION" - This version is still being generated. It may not // be used, enabled, disabled, or destroyed yet. Cloud KMS will automatically // mark this version ENABLED as soon as the version is ready. // "ENABLED" - This version may be used for cryptographic operations. // "DISABLED" - This version may not be used, but the key material is still // available, and the version can be placed back into the ENABLED state. // "DESTROYED" - The key material of this version is destroyed and no longer // stored. This version may only become ENABLED again if this version is // reimport_eligible and the original key material is reimported with a call to // KeyManagementService.ImportCryptoKeyVersion. // "DESTROY_SCHEDULED" - This version is scheduled for destruction, and will // be destroyed soon. Call RestoreCryptoKeyVersion to put it back into the // DISABLED state. // "PENDING_IMPORT" - This version is still being imported. It may not be // used, enabled, disabled, or destroyed yet. Cloud KMS will automatically mark // this version ENABLED as soon as the version is ready. // "IMPORT_FAILED" - This version was not imported successfully. It may not // be used, enabled, disabled, or destroyed. The submitted key material has // been discarded. Additional details can be found in // CryptoKeyVersion.import_failure_reason. // "GENERATION_FAILED" - This version was not generated successfully. It may // not be used, enabled, disabled, or destroyed. Additional details can be // found in CryptoKeyVersion.generation_failure_reason. // "PENDING_EXTERNAL_DESTRUCTION" - This version was destroyed, and it may // not be used or enabled again. Cloud KMS is waiting for the corresponding key // material residing in an external key manager to be destroyed. // "EXTERNAL_DESTRUCTION_FAILED" - This version was destroyed, and it may not // be used or enabled again. However, Cloud KMS could not confirm that the // corresponding key material residing in an external key manager was // destroyed. Additional details can be found in // CryptoKeyVersion.external_destruction_failure_reason. State string `json:"state,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "Algorithm") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Algorithm") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s CryptoKeyVersion) MarshalJSON() ([]byte, error) { type NoMethod CryptoKeyVersion return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // CryptoKeyVersionTemplate: A CryptoKeyVersionTemplate specifies the // properties to use when creating a new CryptoKeyVersion, either manually with // CreateCryptoKeyVersion or automatically as a result of auto-rotation. type CryptoKeyVersionTemplate struct { // Algorithm: Required. Algorithm to use when creating a CryptoKeyVersion based // on this template. For backwards compatibility, GOOGLE_SYMMETRIC_ENCRYPTION // is implied if both this field is omitted and CryptoKey.purpose is // ENCRYPT_DECRYPT. // // Possible values: // "CRYPTO_KEY_VERSION_ALGORITHM_UNSPECIFIED" - Not specified. // "GOOGLE_SYMMETRIC_ENCRYPTION" - Creates symmetric encryption keys. // "AES_128_GCM" - AES-GCM (Galois Counter Mode) using 128-bit keys. // "AES_256_GCM" - AES-GCM (Galois Counter Mode) using 256-bit keys. // "AES_128_CBC" - AES-CBC (Cipher Block Chaining Mode) using 128-bit keys. // "AES_256_CBC" - AES-CBC (Cipher Block Chaining Mode) using 256-bit keys. // "AES_128_CTR" - AES-CTR (Counter Mode) using 128-bit keys. // "AES_256_CTR" - AES-CTR (Counter Mode) using 256-bit keys. // "RSA_SIGN_PSS_2048_SHA256" - RSASSA-PSS 2048 bit key with a SHA256 digest. // "RSA_SIGN_PSS_3072_SHA256" - RSASSA-PSS 3072 bit key with a SHA256 digest. // "RSA_SIGN_PSS_4096_SHA256" - RSASSA-PSS 4096 bit key with a SHA256 digest. // "RSA_SIGN_PSS_4096_SHA512" - RSASSA-PSS 4096 bit key with a SHA512 digest. // "RSA_SIGN_PKCS1_2048_SHA256" - RSASSA-PKCS1-v1_5 with a 2048 bit key and a // SHA256 digest. // "RSA_SIGN_PKCS1_3072_SHA256" - RSASSA-PKCS1-v1_5 with a 3072 bit key and a // SHA256 digest. // "RSA_SIGN_PKCS1_4096_SHA256" - RSASSA-PKCS1-v1_5 with a 4096 bit key and a // SHA256 digest. // "RSA_SIGN_PKCS1_4096_SHA512" - RSASSA-PKCS1-v1_5 with a 4096 bit key and a // SHA512 digest. // "RSA_SIGN_RAW_PKCS1_2048" - RSASSA-PKCS1-v1_5 signing without encoding, // with a 2048 bit key. // "RSA_SIGN_RAW_PKCS1_3072" - RSASSA-PKCS1-v1_5 signing without encoding, // with a 3072 bit key. // "RSA_SIGN_RAW_PKCS1_4096" - RSASSA-PKCS1-v1_5 signing without encoding, // with a 4096 bit key. // "RSA_DECRYPT_OAEP_2048_SHA256" - RSAES-OAEP 2048 bit key with a SHA256 // digest. // "RSA_DECRYPT_OAEP_3072_SHA256" - RSAES-OAEP 3072 bit key with a SHA256 // digest. // "RSA_DECRYPT_OAEP_4096_SHA256" - RSAES-OAEP 4096 bit key with a SHA256 // digest. // "RSA_DECRYPT_OAEP_4096_SHA512" - RSAES-OAEP 4096 bit key with a SHA512 // digest. // "RSA_DECRYPT_OAEP_2048_SHA1" - RSAES-OAEP 2048 bit key with a SHA1 digest. // "RSA_DECRYPT_OAEP_3072_SHA1" - RSAES-OAEP 3072 bit key with a SHA1 digest. // "RSA_DECRYPT_OAEP_4096_SHA1" - RSAES-OAEP 4096 bit key with a SHA1 digest. // "EC_SIGN_P256_SHA256" - ECDSA on the NIST P-256 curve with a SHA256 // digest. Other hash functions can also be used: // https://cloud.google.com/kms/docs/create-validate-signatures#ecdsa_support_for_other_hash_algorithms // "EC_SIGN_P384_SHA384" - ECDSA on the NIST P-384 curve with a SHA384 // digest. Other hash functions can also be used: // https://cloud.google.com/kms/docs/create-validate-signatures#ecdsa_support_for_other_hash_algorithms // "EC_SIGN_SECP256K1_SHA256" - ECDSA on the non-NIST secp256k1 curve. This // curve is only supported for HSM protection level. Other hash functions can // also be used: // https://cloud.google.com/kms/docs/create-validate-signatures#ecdsa_support_for_other_hash_algorithms // "EC_SIGN_ED25519" - EdDSA on the Curve25519 in pure mode (taking data as // input). // "HMAC_SHA256" - HMAC-SHA256 signing with a 256 bit key. // "HMAC_SHA1" - HMAC-SHA1 signing with a 160 bit key. // "HMAC_SHA384" - HMAC-SHA384 signing with a 384 bit key. // "HMAC_SHA512" - HMAC-SHA512 signing with a 512 bit key. // "HMAC_SHA224" - HMAC-SHA224 signing with a 224 bit key. // "EXTERNAL_SYMMETRIC_ENCRYPTION" - Algorithm representing symmetric // encryption by an external key manager. // "ML_KEM_768" - ML-KEM-768 (FIPS 203) // "ML_KEM_1024" - ML-KEM-1024 (FIPS 203) // "KEM_XWING" - X-Wing hybrid KEM combining ML-KEM-768 with X25519 following // datatracker.ietf.org/doc/draft-connolly-cfrg-xwing-kem/. // "PQ_SIGN_ML_DSA_44" - The post-quantum Module-Lattice-Based Digital // Signature Algorithm, at security level 1. Randomized version. // "PQ_SIGN_ML_DSA_65" - The post-quantum Module-Lattice-Based Digital // Signature Algorithm, at security level 3. Randomized version. // "PQ_SIGN_ML_DSA_87" - The post-quantum Module-Lattice-Based Digital // Signature Algorithm, at security level 5. Randomized version. // "PQ_SIGN_SLH_DSA_SHA2_128S" - The post-quantum stateless hash-based // digital signature algorithm, at security level 1. Randomized version. // "PQ_SIGN_HASH_SLH_DSA_SHA2_128S_SHA256" - The post-quantum stateless // hash-based digital signature algorithm, at security level 1. Randomized // pre-hash version supporting SHA256 digests. // "PQ_SIGN_ML_DSA_44_EXTERNAL_MU" - The post-quantum Module-Lattice-Based // Digital Signature Algorithm, at security level 1. Randomized version // supporting externally-computed message representatives. // "PQ_SIGN_ML_DSA_65_EXTERNAL_MU" - The post-quantum Module-Lattice-Based // Digital Signature Algorithm, at security level 3. Randomized version // supporting externally-computed message representatives. // "PQ_SIGN_ML_DSA_87_EXTERNAL_MU" - The post-quantum Module-Lattice-Based // Digital Signature Algorithm, at security level 5. Randomized version // supporting externally-computed message representatives. Algorithm string `json:"algorithm,omitempty"` // ProtectionLevel: ProtectionLevel to use when creating a CryptoKeyVersion // based on this template. Immutable. Defaults to SOFTWARE. // // Possible values: // "PROTECTION_LEVEL_UNSPECIFIED" - Not specified. // "SOFTWARE" - Crypto operations are performed in software. // "HSM" - Crypto operations are performed in a Hardware Security Module. // "EXTERNAL" - Crypto operations are performed by an external key manager. // "EXTERNAL_VPC" - Crypto operations are performed in an EKM-over-VPC // backend. // "HSM_SINGLE_TENANT" - Crypto operations are performed in a single-tenant // HSM. ProtectionLevel string `json:"protectionLevel,omitempty"` // ForceSendFields is a list of field names (e.g. "Algorithm") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Algorithm") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s CryptoKeyVersionTemplate) MarshalJSON() ([]byte, error) { type NoMethod CryptoKeyVersionTemplate return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // DecapsulateRequest: Request message for KeyManagementService.Decapsulate. type DecapsulateRequest struct { // Ciphertext: Required. The ciphertext produced from encapsulation with the // named CryptoKeyVersion public key(s). Ciphertext string `json:"ciphertext,omitempty"` // CiphertextCrc32c: Optional. A CRC32C checksum of the // DecapsulateRequest.ciphertext. If specified, KeyManagementService will // verify the integrity of the received DecapsulateRequest.ciphertext using // this checksum. KeyManagementService will report an error if the checksum // verification fails. If you receive a checksum error, your client should // verify that CRC32C(DecapsulateRequest.ciphertext) is equal to // DecapsulateRequest.ciphertext_crc32c, and if so, perform a limited number of // retries. A persistent mismatch may indicate an issue in your computation of // the CRC32C checksum. Note: This field is defined as int64 for reasons of // compatibility across different languages. However, it is a non-negative // integer, which will never exceed 2^32-1, and can be safely downconverted to // uint32 in languages that support this type. CiphertextCrc32c int64 `json:"ciphertextCrc32c,omitempty,string"` // ForceSendFields is a list of field names (e.g. "Ciphertext") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Ciphertext") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s DecapsulateRequest) MarshalJSON() ([]byte, error) { type NoMethod DecapsulateRequest return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // DecapsulateResponse: Response message for KeyManagementService.Decapsulate. type DecapsulateResponse struct { // Name: The resource name of the CryptoKeyVersion used for decapsulation. // Check this field to verify that the intended resource was used for // decapsulation. Name string `json:"name,omitempty"` // ProtectionLevel: The ProtectionLevel of the CryptoKeyVersion used in // decapsulation. // // Possible values: // "PROTECTION_LEVEL_UNSPECIFIED" - Not specified. // "SOFTWARE" - Crypto operations are performed in software. // "HSM" - Crypto operations are performed in a Hardware Security Module. // "EXTERNAL" - Crypto operations are performed by an external key manager. // "EXTERNAL_VPC" - Crypto operations are performed in an EKM-over-VPC // backend. // "HSM_SINGLE_TENANT" - Crypto operations are performed in a single-tenant // HSM. ProtectionLevel string `json:"protectionLevel,omitempty"` // SharedSecret: The decapsulated shared_secret originally encapsulated with // the matching public key. SharedSecret string `json:"sharedSecret,omitempty"` // SharedSecretCrc32c: Integrity verification field. A CRC32C checksum of the // returned DecapsulateResponse.shared_secret. An integrity check of // DecapsulateResponse.shared_secret can be performed by computing the CRC32C // checksum of DecapsulateResponse.shared_secret and comparing your results to // this field. Discard the response in case of non-matching checksum values, // and perform a limited number of retries. A persistent mismatch may indicate // an issue in your computation of the CRC32C checksum. Note: receiving this // response message indicates that KeyManagementService is able to successfully // decrypt the ciphertext. Note: This field is defined as int64 for reasons of // compatibility across different languages. However, it is a non-negative // integer, which will never exceed 2^32-1, and can be safely downconverted to // uint32 in languages that support this type. SharedSecretCrc32c int64 `json:"sharedSecretCrc32c,omitempty,string"` // VerifiedCiphertextCrc32c: Integrity verification field. A flag indicating // whether DecapsulateRequest.ciphertext_crc32c was received by // KeyManagementService and used for the integrity verification of the // ciphertext. A false value of this field indicates either that // DecapsulateRequest.ciphertext_crc32c was left unset or that it was not // delivered to KeyManagementService. If you've set // DecapsulateRequest.ciphertext_crc32c but this field is still false, discard // the response and perform a limited number of retries. VerifiedCiphertextCrc32c bool `json:"verifiedCiphertextCrc32c,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "Name") to unconditionally // include in API requests. By default, fields with empty or default values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Name") to include in API requests // with the JSON null value. By default, fields with empty values are omitted // from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s DecapsulateResponse) MarshalJSON() ([]byte, error) { type NoMethod DecapsulateResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // DecryptRequest: Request message for KeyManagementService.Decrypt. type DecryptRequest struct { // AdditionalAuthenticatedData: Optional. Optional data that must match the // data originally supplied in EncryptRequest.additional_authenticated_data. AdditionalAuthenticatedData string `json:"additionalAuthenticatedData,omitempty"` // AdditionalAuthenticatedDataCrc32c: Optional. An optional CRC32C checksum of // the DecryptRequest.additional_authenticated_data. If specified, // KeyManagementService will verify the integrity of the received // DecryptRequest.additional_authenticated_data using this checksum. // KeyManagementService will report an error if the checksum verification // fails. If you receive a checksum error, your client should verify that // CRC32C(DecryptRequest.additional_authenticated_data) is equal to // DecryptRequest.additional_authenticated_data_crc32c, and if so, perform a // limited number of retries. A persistent mismatch may indicate an issue in // your computation of the CRC32C checksum. Note: This field is defined as // int64 for reasons of compatibility across different languages. However, it // is a non-negative integer, which will never exceed 2^32-1, and can be safely // downconverted to uint32 in languages that support this type. AdditionalAuthenticatedDataCrc32c int64 `json:"additionalAuthenticatedDataCrc32c,omitempty,string"` // Ciphertext: Required. The encrypted data originally returned in // EncryptResponse.ciphertext. Ciphertext string `json:"ciphertext,omitempty"` // CiphertextCrc32c: Optional. An optional CRC32C checksum of the // DecryptRequest.ciphertext. If specified, KeyManagementService will verify // the integrity of the received DecryptRequest.ciphertext using this checksum. // KeyManagementService will report an error if the checksum verification // fails. If you receive a checksum error, your client should verify that // CRC32C(DecryptRequest.ciphertext) is equal to // DecryptRequest.ciphertext_crc32c, and if so, perform a limited number of // retries. A persistent mismatch may indicate an issue in your computation of // the CRC32C checksum. Note: This field is defined as int64 for reasons of // compatibility across different languages. However, it is a non-negative // integer, which will never exceed 2^32-1, and can be safely downconverted to // uint32 in languages that support this type. CiphertextCrc32c int64 `json:"ciphertextCrc32c,omitempty,string"` // ForceSendFields is a list of field names (e.g. // "AdditionalAuthenticatedData") to unconditionally include in API requests. // By default, fields with empty or default values are omitted from API // requests. See https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields // for more details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "AdditionalAuthenticatedData") to // include in API requests with the JSON null value. By default, fields with // empty values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s DecryptRequest) MarshalJSON() ([]byte, error) { type NoMethod DecryptRequest return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // DecryptResponse: Response message for KeyManagementService.Decrypt. type DecryptResponse struct { // Plaintext: The decrypted data originally supplied in // EncryptRequest.plaintext. Plaintext string `json:"plaintext,omitempty"` // PlaintextCrc32c: Integrity verification field. A CRC32C checksum of the // returned DecryptResponse.plaintext. An integrity check of // DecryptResponse.plaintext can be performed by computing the CRC32C checksum // of DecryptResponse.plaintext and comparing your results to this field. // Discard the response in case of non-matching checksum values, and perform a // limited number of retries. A persistent mismatch may indicate an issue in // your computation of the CRC32C checksum. Note: receiving this response // message indicates that KeyManagementService is able to successfully decrypt // the ciphertext. Note: This field is defined as int64 for reasons of // compatibility across different languages. However, it is a non-negative // integer, which will never exceed 2^32-1, and can be safely downconverted to // uint32 in languages that support this type. PlaintextCrc32c int64 `json:"plaintextCrc32c,omitempty,string"` // ProtectionLevel: The ProtectionLevel of the CryptoKeyVersion used in // decryption. // // Possible values: // "PROTECTION_LEVEL_UNSPECIFIED" - Not specified. // "SOFTWARE" - Crypto operations are performed in software. // "HSM" - Crypto operations are performed in a Hardware Security Module. // "EXTERNAL" - Crypto operations are performed by an external key manager. // "EXTERNAL_VPC" - Crypto operations are performed in an EKM-over-VPC // backend. // "HSM_SINGLE_TENANT" - Crypto operations are performed in a single-tenant // HSM. ProtectionLevel string `json:"protectionLevel,omitempty"` // UsedPrimary: Whether the Decryption was performed using the primary key // version. UsedPrimary bool `json:"usedPrimary,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "Plaintext") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Plaintext") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s DecryptResponse) MarshalJSON() ([]byte, error) { type NoMethod DecryptResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // DeleteSingleTenantHsmInstance: Delete the SingleTenantHsmInstance. Deleting // a SingleTenantHsmInstance will make all CryptoKeys attached to the // SingleTenantHsmInstance unusable. The SingleTenantHsmInstance must not be in // the DELETING or DELETED state to perform this operation. type DeleteSingleTenantHsmInstance struct { } // DestroyCryptoKeyVersionRequest: Request message for // KeyManagementService.DestroyCryptoKeyVersion. type DestroyCryptoKeyVersionRequest struct { } // Digest: A Digest holds a cryptographic message digest. type Digest struct { // ExternalMu: A message digest produced with SHAKE-256, to be used with ML-DSA // external-μ algorithms only. See "message representative" note in section // 6.2, algorithm 7 of the FIPS-204 standard: // https://doi.org/10.6028/nist.fips.204 ExternalMu string `json:"externalMu,omitempty"` // Sha256: A message digest produced with the SHA-256 algorithm. Sha256 string `json:"sha256,omitempty"` // Sha384: A message digest produced with the SHA-384 algorithm. Sha384 string `json:"sha384,omitempty"` // Sha512: A message digest produced with the SHA-512 algorithm. Sha512 string `json:"sha512,omitempty"` // ForceSendFields is a list of field names (e.g. "ExternalMu") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "ExternalMu") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s Digest) MarshalJSON() ([]byte, error) { type NoMethod Digest return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // DisableSingleTenantHsmInstance: Disable the SingleTenantHsmInstance. The // SingleTenantHsmInstance must be in the ACTIVE state to perform this // operation. type DisableSingleTenantHsmInstance struct { } // EkmConfig: An EkmConfig is a singleton resource that represents // configuration parameters that apply to all CryptoKeys and CryptoKeyVersions // with a ProtectionLevel of EXTERNAL_VPC in a given project and location. type EkmConfig struct { // DefaultEkmConnection: Optional. Resource name of the default EkmConnection. // Setting this field to the empty string removes the default. DefaultEkmConnection string `json:"defaultEkmConnection,omitempty"` // Name: Output only. The resource name for the EkmConfig in the format // `projects/*/locations/*/ekmConfig`. Name string `json:"name,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "DefaultEkmConnection") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "DefaultEkmConnection") to include // in API requests with the JSON null value. By default, fields with empty // values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s EkmConfig) MarshalJSON() ([]byte, error) { type NoMethod EkmConfig return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // EkmConnection: An EkmConnection represents an individual EKM connection. It // can be used for creating CryptoKeys and CryptoKeyVersions with a // ProtectionLevel of EXTERNAL_VPC, as well as performing cryptographic // operations using keys created within the EkmConnection. type EkmConnection struct { // CreateTime: Output only. The time at which the EkmConnection was created. CreateTime string `json:"createTime,omitempty"` // CryptoSpacePath: Optional. Identifies the EKM Crypto Space that this // EkmConnection maps to. Note: This field is required if KeyManagementMode is // CLOUD_KMS. CryptoSpacePath string `json:"cryptoSpacePath,omitempty"` // Etag: Optional. Etag of the currently stored EkmConnection. Etag string `json:"etag,omitempty"` // KeyManagementMode: Optional. Describes who can perform control plane // operations on the EKM. If unset, this defaults to MANUAL. // // Possible values: // "KEY_MANAGEMENT_MODE_UNSPECIFIED" - Not specified. // "MANUAL" - EKM-side key management operations on CryptoKeys created with // this EkmConnection must be initiated from the EKM directly and cannot be // performed from Cloud KMS. This means that: * When creating a // CryptoKeyVersion associated with this EkmConnection, the caller must supply // the key path of pre-existing external key material that will be linked to // the CryptoKeyVersion. * Destruction of external key material cannot be // requested via the Cloud KMS API and must be performed directly in the EKM. * // Automatic rotation of key material is not supported. // "CLOUD_KMS" - All CryptoKeys created with this EkmConnection use EKM-side // key management operations initiated from Cloud KMS. This means that: * When // a CryptoKeyVersion associated with this EkmConnection is created, the EKM // automatically generates new key material and a new key path. The caller // cannot supply the key path of pre-existing external key material. * // Destruction of external key material associated with this EkmConnection can // be requested by calling DestroyCryptoKeyVersion. * Automatic rotation of key // material is supported. KeyManagementMode string `json:"keyManagementMode,omitempty"` // Name: Output only. The resource name for the EkmConnection in the format // `projects/*/locations/*/ekmConnections/*`. Name string `json:"name,omitempty"` // ServiceResolvers: Optional. A list of ServiceResolvers where the EKM can be // reached. There should be one ServiceResolver per EKM replica. Currently, // only a single ServiceResolver is supported. ServiceResolvers []*ServiceResolver `json:"serviceResolvers,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "CreateTime") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "CreateTime") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s EkmConnection) MarshalJSON() ([]byte, error) { type NoMethod EkmConnection return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // Empty: A generic empty message that you can re-use to avoid defining // duplicated empty messages in your APIs. A typical example is to use it as // the request or the response type of an API method. For instance: service Foo // { rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty); } type Empty struct { // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` } // EnableSingleTenantHsmInstance: Enable the SingleTenantHsmInstance. The // SingleTenantHsmInstance must be in the DISABLED state to perform this // operation. type EnableSingleTenantHsmInstance struct { } // EncryptRequest: Request message for KeyManagementService.Encrypt. type EncryptRequest struct { // AdditionalAuthenticatedData: Optional. Optional data that, if specified, // must also be provided during decryption through // DecryptRequest.additional_authenticated_data. The maximum size depends on // the key version's protection_level. For SOFTWARE, EXTERNAL, and EXTERNAL_VPC // keys the AAD must be no larger than 64KiB. For HSM keys, the combined length // of the plaintext and additional_authenticated_data fields must be no larger // than 8KiB. AdditionalAuthenticatedData string `json:"additionalAuthenticatedData,omitempty"` // AdditionalAuthenticatedDataCrc32c: Optional. An optional CRC32C checksum of // the EncryptRequest.additional_authenticated_data. If specified, // KeyManagementService will verify the integrity of the received // EncryptRequest.additional_authenticated_data using this checksum. // KeyManagementService will report an error if the checksum verification // fails. If you receive a checksum error, your client should verify that // CRC32C(EncryptRequest.additional_authenticated_data) is equal to // EncryptRequest.additional_authenticated_data_crc32c, and if so, perform a // limited number of retries. A persistent mismatch may indicate an issue in // your computation of the CRC32C checksum. Note: This field is defined as // int64 for reasons of compatibility across different languages. However, it // is a non-negative integer, which will never exceed 2^32-1, and can be safely // downconverted to uint32 in languages that support this type. AdditionalAuthenticatedDataCrc32c int64 `json:"additionalAuthenticatedDataCrc32c,omitempty,string"` // Plaintext: Required. The data to encrypt. Must be no larger than 64KiB. The // maximum size depends on the key version's protection_level. For SOFTWARE, // EXTERNAL, and EXTERNAL_VPC keys, the plaintext must be no larger than 64KiB. // For HSM keys, the combined length of the plaintext and // additional_authenticated_data fields must be no larger than 8KiB. Plaintext string `json:"plaintext,omitempty"` // PlaintextCrc32c: Optional. An optional CRC32C checksum of the // EncryptRequest.plaintext. If specified, KeyManagementService will verify the // integrity of the received EncryptRequest.plaintext using this checksum. // KeyManagementService will report an error if the checksum verification // fails. If you receive a checksum error, your client should verify that // CRC32C(EncryptRequest.plaintext) is equal to // EncryptRequest.plaintext_crc32c, and if so, perform a limited number of // retries. A persistent mismatch may indicate an issue in your computation of // the CRC32C checksum. Note: This field is defined as int64 for reasons of // compatibility across different languages. However, it is a non-negative // integer, which will never exceed 2^32-1, and can be safely downconverted to // uint32 in languages that support this type. PlaintextCrc32c int64 `json:"plaintextCrc32c,omitempty,string"` // ForceSendFields is a list of field names (e.g. // "AdditionalAuthenticatedData") to unconditionally include in API requests. // By default, fields with empty or default values are omitted from API // requests. See https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields // for more details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "AdditionalAuthenticatedData") to // include in API requests with the JSON null value. By default, fields with // empty values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s EncryptRequest) MarshalJSON() ([]byte, error) { type NoMethod EncryptRequest return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // EncryptResponse: Response message for KeyManagementService.Encrypt. type EncryptResponse struct { // Ciphertext: The encrypted data. Ciphertext string `json:"ciphertext,omitempty"` // CiphertextCrc32c: Integrity verification field. A CRC32C checksum of the // returned EncryptResponse.ciphertext. An integrity check of // EncryptResponse.ciphertext can be performed by computing the CRC32C checksum // of EncryptResponse.ciphertext and comparing your results to this field. // Discard the response in case of non-matching checksum values, and perform a // limited number of retries. A persistent mismatch may indicate an issue in // your computation of the CRC32C checksum. Note: This field is defined as // int64 for reasons of compatibility across different languages. However, it // is a non-negative integer, which will never exceed 2^32-1, and can be safely // downconverted to uint32 in languages that support this type. CiphertextCrc32c int64 `json:"ciphertextCrc32c,omitempty,string"` // Name: The resource name of the CryptoKeyVersion used in encryption. Check // this field to verify that the intended resource was used for encryption. Name string `json:"name,omitempty"` // ProtectionLevel: The ProtectionLevel of the CryptoKeyVersion used in // encryption. // // Possible values: // "PROTECTION_LEVEL_UNSPECIFIED" - Not specified. // "SOFTWARE" - Crypto operations are performed in software. // "HSM" - Crypto operations are performed in a Hardware Security Module. // "EXTERNAL" - Crypto operations are performed by an external key manager. // "EXTERNAL_VPC" - Crypto operations are performed in an EKM-over-VPC // backend. // "HSM_SINGLE_TENANT" - Crypto operations are performed in a single-tenant // HSM. ProtectionLevel string `json:"protectionLevel,omitempty"` // VerifiedAdditionalAuthenticatedDataCrc32c: Integrity verification field. A // flag indicating whether EncryptRequest.additional_authenticated_data_crc32c // was received by KeyManagementService and used for the integrity verification // of the AAD. A false value of this field indicates either that // EncryptRequest.additional_authenticated_data_crc32c was left unset or that // it was not delivered to KeyManagementService. If you've set // EncryptRequest.additional_authenticated_data_crc32c but this field is still // false, discard the response and perform a limited number of retries. VerifiedAdditionalAuthenticatedDataCrc32c bool `json:"verifiedAdditionalAuthenticatedDataCrc32c,omitempty"` // VerifiedPlaintextCrc32c: Integrity verification field. A flag indicating // whether EncryptRequest.plaintext_crc32c was received by KeyManagementService // and used for the integrity verification of the plaintext. A false value of // this field indicates either that EncryptRequest.plaintext_crc32c was left // unset or that it was not delivered to KeyManagementService. If you've set // EncryptRequest.plaintext_crc32c but this field is still false, discard the // response and perform a limited number of retries. VerifiedPlaintextCrc32c bool `json:"verifiedPlaintextCrc32c,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "Ciphertext") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Ciphertext") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s EncryptResponse) MarshalJSON() ([]byte, error) { type NoMethod EncryptResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // ExecuteSingleTenantHsmInstanceProposalRequest: Request message for // HsmManagement.ExecuteSingleTenantHsmInstanceProposal. type ExecuteSingleTenantHsmInstanceProposalRequest struct { } // Expr: Represents a textual expression in the Common Expression Language // (CEL) syntax. CEL is a C-like expression language. The syntax and semantics // of CEL are documented at https://github.com/google/cel-spec. Example // (Comparison): title: "Summary size limit" description: "Determines if a // summary is less than 100 chars" expression: "document.summary.size() < 100" // Example (Equality): title: "Requestor is owner" description: "Determines if // requestor is the document owner" expression: "document.owner == // request.auth.claims.email" Example (Logic): title: "Public documents" // description: "Determine whether the document should be publicly visible" // expression: "document.type != 'private' && document.type != 'internal'" // Example (Data Manipulation): title: "Notification string" description: // "Create a notification string with a timestamp." expression: "'New message // received at ' + string(document.create_time)" The exact variables and // functions that may be referenced within an expression are determined by the // service that evaluates it. See the service documentation for additional // information. type Expr struct { // Description: Optional. Description of the expression. This is a longer text // which describes the expression, e.g. when hovered over it in a UI. Description string `json:"description,omitempty"` // Expression: Textual representation of an expression in Common Expression // Language syntax. Expression string `json:"expression,omitempty"` // Location: Optional. String indicating the location of the expression for // error reporting, e.g. a file name and a position in the file. Location string `json:"location,omitempty"` // Title: Optional. Title for the expression, i.e. a short string describing // its purpose. This can be used e.g. in UIs which allow to enter the // expression. Title string `json:"title,omitempty"` // ForceSendFields is a list of field names (e.g. "Description") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Description") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s Expr) MarshalJSON() ([]byte, error) { type NoMethod Expr return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // ExternalProtectionLevelOptions: ExternalProtectionLevelOptions stores a // group of additional fields for configuring a CryptoKeyVersion that are // specific to the EXTERNAL protection level and EXTERNAL_VPC protection // levels. type ExternalProtectionLevelOptions struct { // EkmConnectionKeyPath: The path to the external key material on the EKM when // using EkmConnection e.g., "v0/my/key". Set this field instead of // external_key_uri when using an EkmConnection. EkmConnectionKeyPath string `json:"ekmConnectionKeyPath,omitempty"` // ExternalKeyUri: The URI for an external resource that this CryptoKeyVersion // represents. ExternalKeyUri string `json:"externalKeyUri,omitempty"` // ForceSendFields is a list of field names (e.g. "EkmConnectionKeyPath") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "EkmConnectionKeyPath") to include // in API requests with the JSON null value. By default, fields with empty // values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s ExternalProtectionLevelOptions) MarshalJSON() ([]byte, error) { type NoMethod ExternalProtectionLevelOptions return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // GenerateRandomBytesRequest: Request message for // KeyManagementService.GenerateRandomBytes. type GenerateRandomBytesRequest struct { // LengthBytes: The length in bytes of the amount of randomness to retrieve. // Minimum 8 bytes, maximum 1024 bytes. LengthBytes int64 `json:"lengthBytes,omitempty"` // ProtectionLevel: The ProtectionLevel to use when generating the random data. // Currently, only HSM protection level is supported. // // Possible values: // "PROTECTION_LEVEL_UNSPECIFIED" - Not specified. // "SOFTWARE" - Crypto operations are performed in software. // "HSM" - Crypto operations are performed in a Hardware Security Module. // "EXTERNAL" - Crypto operations are performed by an external key manager. // "EXTERNAL_VPC" - Crypto operations are performed in an EKM-over-VPC // backend. // "HSM_SINGLE_TENANT" - Crypto operations are performed in a single-tenant // HSM. ProtectionLevel string `json:"protectionLevel,omitempty"` // ForceSendFields is a list of field names (e.g. "LengthBytes") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "LengthBytes") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s GenerateRandomBytesRequest) MarshalJSON() ([]byte, error) { type NoMethod GenerateRandomBytesRequest return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // GenerateRandomBytesResponse: Response message for // KeyManagementService.GenerateRandomBytes. type GenerateRandomBytesResponse struct { // Data: The generated data. Data string `json:"data,omitempty"` // DataCrc32c: Integrity verification field. A CRC32C checksum of the returned // GenerateRandomBytesResponse.data. An integrity check of // GenerateRandomBytesResponse.data can be performed by computing the CRC32C // checksum of GenerateRandomBytesResponse.data and comparing your results to // this field. Discard the response in case of non-matching checksum values, // and perform a limited number of retries. A persistent mismatch may indicate // an issue in your computation of the CRC32C checksum. Note: This field is // defined as int64 for reasons of compatibility across different languages. // However, it is a non-negative integer, which will never exceed 2^32-1, and // can be safely downconverted to uint32 in languages that support this type. DataCrc32c int64 `json:"dataCrc32c,omitempty,string"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "Data") to unconditionally // include in API requests. By default, fields with empty or default values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Data") to include in API requests // with the JSON null value. By default, fields with empty values are omitted // from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s GenerateRandomBytesResponse) MarshalJSON() ([]byte, error) { type NoMethod GenerateRandomBytesResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // ImportCryptoKeyVersionRequest: Request message for // KeyManagementService.ImportCryptoKeyVersion. type ImportCryptoKeyVersionRequest struct { // Algorithm: Required. The algorithm of the key being imported. This does not // need to match the version_template of the CryptoKey this version imports // into. // // Possible values: // "CRYPTO_KEY_VERSION_ALGORITHM_UNSPECIFIED" - Not specified. // "GOOGLE_SYMMETRIC_ENCRYPTION" - Creates symmetric encryption keys. // "AES_128_GCM" - AES-GCM (Galois Counter Mode) using 128-bit keys. // "AES_256_GCM" - AES-GCM (Galois Counter Mode) using 256-bit keys. // "AES_128_CBC" - AES-CBC (Cipher Block Chaining Mode) using 128-bit keys. // "AES_256_CBC" - AES-CBC (Cipher Block Chaining Mode) using 256-bit keys. // "AES_128_CTR" - AES-CTR (Counter Mode) using 128-bit keys. // "AES_256_CTR" - AES-CTR (Counter Mode) using 256-bit keys. // "RSA_SIGN_PSS_2048_SHA256" - RSASSA-PSS 2048 bit key with a SHA256 digest. // "RSA_SIGN_PSS_3072_SHA256" - RSASSA-PSS 3072 bit key with a SHA256 digest. // "RSA_SIGN_PSS_4096_SHA256" - RSASSA-PSS 4096 bit key with a SHA256 digest. // "RSA_SIGN_PSS_4096_SHA512" - RSASSA-PSS 4096 bit key with a SHA512 digest. // "RSA_SIGN_PKCS1_2048_SHA256" - RSASSA-PKCS1-v1_5 with a 2048 bit key and a // SHA256 digest. // "RSA_SIGN_PKCS1_3072_SHA256" - RSASSA-PKCS1-v1_5 with a 3072 bit key and a // SHA256 digest. // "RSA_SIGN_PKCS1_4096_SHA256" - RSASSA-PKCS1-v1_5 with a 4096 bit key and a // SHA256 digest. // "RSA_SIGN_PKCS1_4096_SHA512" - RSASSA-PKCS1-v1_5 with a 4096 bit key and a // SHA512 digest. // "RSA_SIGN_RAW_PKCS1_2048" - RSASSA-PKCS1-v1_5 signing without encoding, // with a 2048 bit key. // "RSA_SIGN_RAW_PKCS1_3072" - RSASSA-PKCS1-v1_5 signing without encoding, // with a 3072 bit key. // "RSA_SIGN_RAW_PKCS1_4096" - RSASSA-PKCS1-v1_5 signing without encoding, // with a 4096 bit key. // "RSA_DECRYPT_OAEP_2048_SHA256" - RSAES-OAEP 2048 bit key with a SHA256 // digest. // "RSA_DECRYPT_OAEP_3072_SHA256" - RSAES-OAEP 3072 bit key with a SHA256 // digest. // "RSA_DECRYPT_OAEP_4096_SHA256" - RSAES-OAEP 4096 bit key with a SHA256 // digest. // "RSA_DECRYPT_OAEP_4096_SHA512" - RSAES-OAEP 4096 bit key with a SHA512 // digest. // "RSA_DECRYPT_OAEP_2048_SHA1" - RSAES-OAEP 2048 bit key with a SHA1 digest. // "RSA_DECRYPT_OAEP_3072_SHA1" - RSAES-OAEP 3072 bit key with a SHA1 digest. // "RSA_DECRYPT_OAEP_4096_SHA1" - RSAES-OAEP 4096 bit key with a SHA1 digest. // "EC_SIGN_P256_SHA256" - ECDSA on the NIST P-256 curve with a SHA256 // digest. Other hash functions can also be used: // https://cloud.google.com/kms/docs/create-validate-signatures#ecdsa_support_for_other_hash_algorithms // "EC_SIGN_P384_SHA384" - ECDSA on the NIST P-384 curve with a SHA384 // digest. Other hash functions can also be used: // https://cloud.google.com/kms/docs/create-validate-signatures#ecdsa_support_for_other_hash_algorithms // "EC_SIGN_SECP256K1_SHA256" - ECDSA on the non-NIST secp256k1 curve. This // curve is only supported for HSM protection level. Other hash functions can // also be used: // https://cloud.google.com/kms/docs/create-validate-signatures#ecdsa_support_for_other_hash_algorithms // "EC_SIGN_ED25519" - EdDSA on the Curve25519 in pure mode (taking data as // input). // "HMAC_SHA256" - HMAC-SHA256 signing with a 256 bit key. // "HMAC_SHA1" - HMAC-SHA1 signing with a 160 bit key. // "HMAC_SHA384" - HMAC-SHA384 signing with a 384 bit key. // "HMAC_SHA512" - HMAC-SHA512 signing with a 512 bit key. // "HMAC_SHA224" - HMAC-SHA224 signing with a 224 bit key. // "EXTERNAL_SYMMETRIC_ENCRYPTION" - Algorithm representing symmetric // encryption by an external key manager. // "ML_KEM_768" - ML-KEM-768 (FIPS 203) // "ML_KEM_1024" - ML-KEM-1024 (FIPS 203) // "KEM_XWING" - X-Wing hybrid KEM combining ML-KEM-768 with X25519 following // datatracker.ietf.org/doc/draft-connolly-cfrg-xwing-kem/. // "PQ_SIGN_ML_DSA_44" - The post-quantum Module-Lattice-Based Digital // Signature Algorithm, at security level 1. Randomized version. // "PQ_SIGN_ML_DSA_65" - The post-quantum Module-Lattice-Based Digital // Signature Algorithm, at security level 3. Randomized version. // "PQ_SIGN_ML_DSA_87" - The post-quantum Module-Lattice-Based Digital // Signature Algorithm, at security level 5. Randomized version. // "PQ_SIGN_SLH_DSA_SHA2_128S" - The post-quantum stateless hash-based // digital signature algorithm, at security level 1. Randomized version. // "PQ_SIGN_HASH_SLH_DSA_SHA2_128S_SHA256" - The post-quantum stateless // hash-based digital signature algorithm, at security level 1. Randomized // pre-hash version supporting SHA256 digests. // "PQ_SIGN_ML_DSA_44_EXTERNAL_MU" - The post-quantum Module-Lattice-Based // Digital Signature Algorithm, at security level 1. Randomized version // supporting externally-computed message representatives. // "PQ_SIGN_ML_DSA_65_EXTERNAL_MU" - The post-quantum Module-Lattice-Based // Digital Signature Algorithm, at security level 3. Randomized version // supporting externally-computed message representatives. // "PQ_SIGN_ML_DSA_87_EXTERNAL_MU" - The post-quantum Module-Lattice-Based // Digital Signature Algorithm, at security level 5. Randomized version // supporting externally-computed message representatives. Algorithm string `json:"algorithm,omitempty"` // CryptoKeyVersion: Optional. The optional name of an existing // CryptoKeyVersion to target for an import operation. If this field is not // present, a new CryptoKeyVersion containing the supplied key material is // created. If this field is present, the supplied key material is imported // into the existing CryptoKeyVersion. To import into an existing // CryptoKeyVersion, the CryptoKeyVersion must be a child of // ImportCryptoKeyVersionRequest.parent, have been previously created via // ImportCryptoKeyVersion, and be in DESTROYED or IMPORT_FAILED state. The key // material and algorithm must match the previous CryptoKeyVersion exactly if // the CryptoKeyVersion has ever contained key material. CryptoKeyVersion string `json:"cryptoKeyVersion,omitempty"` // ImportJob: Required. The name of the ImportJob that was used to wrap this // key material. ImportJob string `json:"importJob,omitempty"` // RsaAesWrappedKey: Optional. This field has the same meaning as wrapped_key. // Prefer to use that field in new work. Either that field or this field (but // not both) must be specified. RsaAesWrappedKey string `json:"rsaAesWrappedKey,omitempty"` // WrappedKey: Optional. The wrapped key material to import. Before wrapping, // key material must be formatted. If importing symmetric key material, the // expected key material format is plain bytes. If importing asymmetric key // material, the expected key material format is PKCS#8-encoded DER (the // PrivateKeyInfo structure from RFC 5208). When wrapping with import methods // (RSA_OAEP_3072_SHA1_AES_256 or RSA_OAEP_4096_SHA1_AES_256 or // RSA_OAEP_3072_SHA256_AES_256 or RSA_OAEP_4096_SHA256_AES_256), this field // must contain the concatenation of: 1. An ephemeral AES-256 wrapping key // wrapped with the public_key using RSAES-OAEP with SHA-1/SHA-256, MGF1 with // SHA-1/SHA-256, and an empty label. 2. The formatted key to be imported, // wrapped with the ephemeral AES-256 key using AES-KWP (RFC 5649). This format // is the same as the format produced by PKCS#11 mechanism // CKM_RSA_AES_KEY_WRAP. When wrapping with import methods // (RSA_OAEP_3072_SHA256 or RSA_OAEP_4096_SHA256), this field must contain the // formatted key to be imported, wrapped with the public_key using RSAES-OAEP // with SHA-256, MGF1 with SHA-256, and an empty label. WrappedKey string `json:"wrappedKey,omitempty"` // ForceSendFields is a list of field names (e.g. "Algorithm") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Algorithm") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s ImportCryptoKeyVersionRequest) MarshalJSON() ([]byte, error) { type NoMethod ImportCryptoKeyVersionRequest return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // ImportJob: An ImportJob can be used to create CryptoKeys and // CryptoKeyVersions using pre-existing key material, generated outside of // Cloud KMS. When an ImportJob is created, Cloud KMS will generate a "wrapping // key", which is a public/private key pair. You use the wrapping key to // encrypt (also known as wrap) the pre-existing key material to protect it // during the import process. The nature of the wrapping key depends on the // choice of import_method. When the wrapping key generation is complete, the // state will be set to ACTIVE and the public_key can be fetched. The fetched // public key can then be used to wrap your pre-existing key material. Once the // key material is wrapped, it can be imported into a new CryptoKeyVersion in // an existing CryptoKey by calling ImportCryptoKeyVersion. Multiple // CryptoKeyVersions can be imported with a single ImportJob. Cloud KMS uses // the private key portion of the wrapping key to unwrap the key material. Only // Cloud KMS has access to the private key. An ImportJob expires 3 days after // it is created. Once expired, Cloud KMS will no longer be able to import or // unwrap any key material that was wrapped with the ImportJob's public key. // For more information, see Importing a key // (https://cloud.google.com/kms/docs/importing-a-key). type ImportJob struct { // Attestation: Output only. Statement that was generated and signed by the key // creator (for example, an HSM) at key creation time. Use this statement to // verify attributes of the key as stored on the HSM, independently of Google. // Only present if the chosen ImportMethod is one with a protection level of // HSM. Attestation *KeyOperationAttestation `json:"attestation,omitempty"` // CreateTime: Output only. The time at which this ImportJob was created. CreateTime string `json:"createTime,omitempty"` // CryptoKeyBackend: Immutable. The resource name of the backend environment // where the key material for the wrapping key resides and where all related // cryptographic operations are performed. Currently, this field is only // populated for keys stored in HSM_SINGLE_TENANT. Note, this list is // non-exhaustive and may apply to additional ProtectionLevels in the future. // Supported resources: * "projects/*/locations/*/singleTenantHsmInstances/*" CryptoKeyBackend string `json:"cryptoKeyBackend,omitempty"` // ExpireEventTime: Output only. The time this ImportJob expired. Only present // if state is EXPIRED. ExpireEventTime string `json:"expireEventTime,omitempty"` // ExpireTime: Output only. The time at which this ImportJob is scheduled for // expiration and can no longer be used to import key material. ExpireTime string `json:"expireTime,omitempty"` // GenerateTime: Output only. The time this ImportJob's key material was // generated. GenerateTime string `json:"generateTime,omitempty"` // ImportMethod: Required. Immutable. The wrapping method to be used for // incoming key material. // // Possible values: // "IMPORT_METHOD_UNSPECIFIED" - Not specified. // "RSA_OAEP_3072_SHA1_AES_256" - This ImportMethod represents the // CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. // In summary, this involves wrapping the raw key with an ephemeral AES key, // and wrapping the ephemeral AES key with a 3072 bit RSA key. For more // details, see [RSA AES key wrap // mechanism](http://docs.oasis-open.org/pkcs11/pkcs11-curr/v2.40/cos01/pkcs11-c // urr-v2.40-cos01.html#_Toc408226908). // "RSA_OAEP_4096_SHA1_AES_256" - This ImportMethod represents the // CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. // In summary, this involves wrapping the raw key with an ephemeral AES key, // and wrapping the ephemeral AES key with a 4096 bit RSA key. For more // details, see [RSA AES key wrap // mechanism](http://docs.oasis-open.org/pkcs11/pkcs11-curr/v2.40/cos01/pkcs11-c // urr-v2.40-cos01.html#_Toc408226908). // "RSA_OAEP_3072_SHA256_AES_256" - This ImportMethod represents the // CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. // In summary, this involves wrapping the raw key with an ephemeral AES key, // and wrapping the ephemeral AES key with a 3072 bit RSA key. For more // details, see [RSA AES key wrap // mechanism](http://docs.oasis-open.org/pkcs11/pkcs11-curr/v2.40/cos01/pkcs11-c // urr-v2.40-cos01.html#_Toc408226908). // "RSA_OAEP_4096_SHA256_AES_256" - This ImportMethod represents the // CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. // In summary, this involves wrapping the raw key with an ephemeral AES key, // and wrapping the ephemeral AES key with a 4096 bit RSA key. For more // details, see [RSA AES key wrap // mechanism](http://docs.oasis-open.org/pkcs11/pkcs11-curr/v2.40/cos01/pkcs11-c // urr-v2.40-cos01.html#_Toc408226908). // "RSA_OAEP_3072_SHA256" - This ImportMethod represents RSAES-OAEP with a // 3072 bit RSA key. The key material to be imported is wrapped directly with // the RSA key. Due to technical limitations of RSA wrapping, this method // cannot be used to wrap RSA keys for import. // "RSA_OAEP_4096_SHA256" - This ImportMethod represents RSAES-OAEP with a // 4096 bit RSA key. The key material to be imported is wrapped directly with // the RSA key. Due to technical limitations of RSA wrapping, this method // cannot be used to wrap RSA keys for import. ImportMethod string `json:"importMethod,omitempty"` // Name: Output only. The resource name for this ImportJob in the format // `projects/*/locations/*/keyRings/*/importJobs/*`. Name string `json:"name,omitempty"` // ProtectionLevel: Required. Immutable. The protection level of the ImportJob. // This must match the protection_level of the version_template on the // CryptoKey you attempt to import into. // // Possible values: // "PROTECTION_LEVEL_UNSPECIFIED" - Not specified. // "SOFTWARE" - Crypto operations are performed in software. // "HSM" - Crypto operations are performed in a Hardware Security Module. // "EXTERNAL" - Crypto operations are performed by an external key manager. // "EXTERNAL_VPC" - Crypto operations are performed in an EKM-over-VPC // backend. // "HSM_SINGLE_TENANT" - Crypto operations are performed in a single-tenant // HSM. ProtectionLevel string `json:"protectionLevel,omitempty"` // PublicKey: Output only. The public key with which to wrap key material prior // to import. Only returned if state is ACTIVE. PublicKey *WrappingPublicKey `json:"publicKey,omitempty"` // State: Output only. The current state of the ImportJob, indicating if it can // be used. // // Possible values: // "IMPORT_JOB_STATE_UNSPECIFIED" - Not specified. // "PENDING_GENERATION" - The wrapping key for this job is still being // generated. It may not be used. Cloud KMS will automatically mark this job as // ACTIVE as soon as the wrapping key is generated. // "ACTIVE" - This job may be used in CreateCryptoKey and // CreateCryptoKeyVersion requests. // "EXPIRED" - This job can no longer be used and may not leave this state // once entered. State string `json:"state,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "Attestation") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Attestation") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s ImportJob) MarshalJSON() ([]byte, error) { type NoMethod ImportJob return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // KeyAccessJustificationsEnrollmentConfig: Represents the configuration of a // protection level for a project's Key Access Justifications enrollment. type KeyAccessJustificationsEnrollmentConfig struct { // AuditLogging: Indicates whether the project has KAJ logging enabled. AuditLogging bool `json:"auditLogging,omitempty"` // PolicyEnforcement: Indicates whether the project is enrolled in KAJ policy // enforcement. PolicyEnforcement bool `json:"policyEnforcement,omitempty"` // ForceSendFields is a list of field names (e.g. "AuditLogging") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "AuditLogging") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s KeyAccessJustificationsEnrollmentConfig) MarshalJSON() ([]byte, error) { type NoMethod KeyAccessJustificationsEnrollmentConfig return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // KeyAccessJustificationsPolicy: A KeyAccessJustificationsPolicy specifies // zero or more allowed AccessReason values for encrypt, decrypt, and sign // operations on a CryptoKey or KeyAccessJustificationsPolicyConfig (the // default Key Access Justifications policy). type KeyAccessJustificationsPolicy struct { // AllowedAccessReasons: The list of allowed reasons for access to a CryptoKey. // Note that empty allowed_access_reasons has a different meaning depending on // where this message appears. If this is under // KeyAccessJustificationsPolicyConfig, it means allow-all. If this is under // CryptoKey, it means deny-all. // // Possible values: // "REASON_UNSPECIFIED" - Unspecified access reason. // "CUSTOMER_INITIATED_SUPPORT" - Customer-initiated support. // "GOOGLE_INITIATED_SERVICE" - Google-initiated access for system management // and troubleshooting. // "THIRD_PARTY_DATA_REQUEST" - Google-initiated access in response to a // legal request or legal process. // "GOOGLE_INITIATED_REVIEW" - Google-initiated access for security, fraud, // abuse, or compliance purposes. // "CUSTOMER_INITIATED_ACCESS" - Customer uses their account to perform any // access to their own data which their IAM policy authorizes. // "GOOGLE_INITIATED_SYSTEM_OPERATION" - Google systems access customer data // to help optimize the structure of the data or quality for future uses by the // customer. // "REASON_NOT_EXPECTED" - No reason is expected for this key request. // "MODIFIED_CUSTOMER_INITIATED_ACCESS" - Deprecated: This code is no longer // generated by Google Cloud. The GOOGLE_RESPONSE_TO_PRODUCTION_ALERT // justification codes available in both Key Access Justifications and Access // Transparency logs provide customer-visible signals of emergency access in // more precise contexts. Customer uses their account to perform any access to // their own data which their IAM policy authorizes, and one of the following // is true: * A Google administrator has reset the root-access account // associated with the user's organization within the past 7 days. * A // Google-initiated emergency access operation has interacted with a resource // in the same project or folder as the currently accessed resource within the // past 7 days. // "MODIFIED_GOOGLE_INITIATED_SYSTEM_OPERATION" - Deprecated: This code is no // longer generated by Google Cloud. The GOOGLE_RESPONSE_TO_PRODUCTION_ALERT // justification codes available in both Key Access Justifications and Access // Transparency logs provide customer-visible signals of emergency access in // more precise contexts. Google systems access customer data to help optimize // the structure of the data or quality for future uses by the customer, and // one of the following is true: * A Google administrator has reset the // root-access account associated with the user's organization within the past // 7 days. * A Google-initiated emergency access operation has interacted with // a resource in the same project or folder as the currently accessed resource // within the past 7 days. // "GOOGLE_RESPONSE_TO_PRODUCTION_ALERT" - Google-initiated access to // maintain system reliability. // "CUSTOMER_AUTHORIZED_WORKFLOW_SERVICING" - One of the following operations // is being executed while simultaneously encountering an internal technical // issue which prevented a more precise justification code from being // generated: * Your account has been used to perform any access to your own // data which your IAM policy authorizes. * An automated Google system operates // on encrypted customer data which your IAM policy authorizes. * // Customer-initiated Google support access. * Google-initiated support access // to protect system reliability. AllowedAccessReasons []string `json:"allowedAccessReasons,omitempty"` // ForceSendFields is a list of field names (e.g. "AllowedAccessReasons") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "AllowedAccessReasons") to include // in API requests with the JSON null value. By default, fields with empty // values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s KeyAccessJustificationsPolicy) MarshalJSON() ([]byte, error) { type NoMethod KeyAccessJustificationsPolicy return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // KeyAccessJustificationsPolicyConfig: Represents a singleton configuration // for Key Access Justifications policies. type KeyAccessJustificationsPolicyConfig struct { // DefaultKeyAccessJustificationPolicy: Optional. Specifies the default key // access justifications (KAJ) policy used when a CryptoKey is created in this // folder. This is only used when a Key Access Justifications policy is not // provided in the CreateCryptoKeyRequest. This overrides any default policies // in its ancestry. If this field is unset, or is set but contains an empty // allowed_access_reasons list, no default Key Access Justifications (KAJ) // policy configuration is active. In this scenario, all newly created keys // will default to an "allow-all" policy. DefaultKeyAccessJustificationPolicy *KeyAccessJustificationsPolicy `json:"defaultKeyAccessJustificationPolicy,omitempty"` // DefaultPolicyAvailable: Output only. Indicates whether this parent resource // is available to default policy feature. Please consult the prerequisite of // default policy feature // (https://cloud.google.com/assured-workloads/key-access-justifications/docs/set-default-policy#before) // for more details. DefaultPolicyAvailable bool `json:"defaultPolicyAvailable,omitempty"` // Name: Identifier. Represents the resource name for this // KeyAccessJustificationsPolicyConfig in the format of // "{organizations|folders|projects}/*/kajPolicyConfig". Name string `json:"name,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. // "DefaultKeyAccessJustificationPolicy") to unconditionally include in API // requests. By default, fields with empty or default values are omitted from // API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. // "DefaultKeyAccessJustificationPolicy") to include in API requests with the // JSON null value. By default, fields with empty values are omitted from API // requests. See https://pkg.go.dev/google.golang.org/api#hdr-NullFields for // more details. NullFields []string `json:"-"` } func (s KeyAccessJustificationsPolicyConfig) MarshalJSON() ([]byte, error) { type NoMethod KeyAccessJustificationsPolicyConfig return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // KeyHandle: Resource-oriented representation of a request to Cloud KMS // Autokey and the resulting provisioning of a CryptoKey. type KeyHandle struct { // KmsKey: Output only. Name of a CryptoKey that has been provisioned for // Customer Managed Encryption Key (CMEK) use in the KeyHandle project and // location for the requested resource type. The CryptoKey project will reflect // the value configured in the AutokeyConfig on the resource project's ancestor // folder at the time of the KeyHandle creation. If more than one ancestor // folder has a configured AutokeyConfig, the nearest of these configurations // is used. KmsKey string `json:"kmsKey,omitempty"` // Name: Identifier. Name of the KeyHandle resource, e.g. // `projects/{PROJECT_ID}/locations/{LOCATION}/keyHandles/{KEY_HANDLE_ID}`. Name string `json:"name,omitempty"` // ResourceTypeSelector: Required. Indicates the resource type that the // resulting CryptoKey is meant to protect, e.g. // `{SERVICE}.googleapis.com/{TYPE}`. See documentation for supported resource // types. ResourceTypeSelector string `json:"resourceTypeSelector,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "KmsKey") to unconditionally // include in API requests. By default, fields with empty or default values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "KmsKey") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s KeyHandle) MarshalJSON() ([]byte, error) { type NoMethod KeyHandle return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // KeyOperationAttestation: Contains an HSM-generated attestation about a key // operation. For more information, see [Verifying attestations] // (https://cloud.google.com/kms/docs/attest-key). type KeyOperationAttestation struct { // CertChains: Output only. The certificate chains needed to validate the // attestation CertChains *CertificateChains `json:"certChains,omitempty"` // Content: Output only. The attestation data provided by the HSM when the key // operation was performed. Content string `json:"content,omitempty"` // Format: Output only. The format of the attestation data. // // Possible values: // "ATTESTATION_FORMAT_UNSPECIFIED" - Not specified. // "CAVIUM_V1_COMPRESSED" - Cavium HSM attestation compressed with gzip. Note // that this format is defined by Cavium and subject to change at any time. See // https://www.marvell.com/products/security-solutions/nitrox-hs-adapters/software-key-attestation.html. // "CAVIUM_V2_COMPRESSED" - Cavium HSM attestation V2 compressed with gzip. // This is a new format introduced in Cavium's version 3.2-08. Format string `json:"format,omitempty"` // ForceSendFields is a list of field names (e.g. "CertChains") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "CertChains") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s KeyOperationAttestation) MarshalJSON() ([]byte, error) { type NoMethod KeyOperationAttestation return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // KeyRing: A KeyRing is a toplevel logical grouping of CryptoKeys. type KeyRing struct { // CreateTime: Output only. The time at which this KeyRing was created. CreateTime string `json:"createTime,omitempty"` // Name: Output only. The resource name for the KeyRing in the format // `projects/*/locations/*/keyRings/*`. Name string `json:"name,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "CreateTime") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "CreateTime") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s KeyRing) MarshalJSON() ([]byte, error) { type NoMethod KeyRing return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // ListCryptoKeyVersionsResponse: Response message for // KeyManagementService.ListCryptoKeyVersions. type ListCryptoKeyVersionsResponse struct { // CryptoKeyVersions: The list of CryptoKeyVersions. CryptoKeyVersions []*CryptoKeyVersion `json:"cryptoKeyVersions,omitempty"` // NextPageToken: A token to retrieve next page of results. Pass this value in // ListCryptoKeyVersionsRequest.page_token to retrieve the next page of // results. NextPageToken string `json:"nextPageToken,omitempty"` // TotalSize: The total number of CryptoKeyVersions that matched the query. // This field is not populated if ListCryptoKeyVersionsRequest.filter is // applied. TotalSize int64 `json:"totalSize,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "CryptoKeyVersions") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "CryptoKeyVersions") to include in // API requests with the JSON null value. By default, fields with empty values // are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s ListCryptoKeyVersionsResponse) MarshalJSON() ([]byte, error) { type NoMethod ListCryptoKeyVersionsResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // ListCryptoKeysResponse: Response message for // KeyManagementService.ListCryptoKeys. type ListCryptoKeysResponse struct { // CryptoKeys: The list of CryptoKeys. CryptoKeys []*CryptoKey `json:"cryptoKeys,omitempty"` // NextPageToken: A token to retrieve next page of results. Pass this value in // ListCryptoKeysRequest.page_token to retrieve the next page of results. NextPageToken string `json:"nextPageToken,omitempty"` // TotalSize: The total number of CryptoKeys that matched the query. This field // is not populated if ListCryptoKeysRequest.filter is applied. TotalSize int64 `json:"totalSize,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "CryptoKeys") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "CryptoKeys") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s ListCryptoKeysResponse) MarshalJSON() ([]byte, error) { type NoMethod ListCryptoKeysResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // ListEkmConnectionsResponse: Response message for // EkmService.ListEkmConnections. type ListEkmConnectionsResponse struct { // EkmConnections: The list of EkmConnections. EkmConnections []*EkmConnection `json:"ekmConnections,omitempty"` // NextPageToken: A token to retrieve next page of results. Pass this value in // ListEkmConnectionsRequest.page_token to retrieve the next page of results. NextPageToken string `json:"nextPageToken,omitempty"` // TotalSize: The total number of EkmConnections that matched the query. This // field is not populated if ListEkmConnectionsRequest.filter is applied. TotalSize int64 `json:"totalSize,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "EkmConnections") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "EkmConnections") to include in // API requests with the JSON null value. By default, fields with empty values // are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s ListEkmConnectionsResponse) MarshalJSON() ([]byte, error) { type NoMethod ListEkmConnectionsResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // ListImportJobsResponse: Response message for // KeyManagementService.ListImportJobs. type ListImportJobsResponse struct { // ImportJobs: The list of ImportJobs. ImportJobs []*ImportJob `json:"importJobs,omitempty"` // NextPageToken: A token to retrieve next page of results. Pass this value in // ListImportJobsRequest.page_token to retrieve the next page of results. NextPageToken string `json:"nextPageToken,omitempty"` // TotalSize: The total number of ImportJobs that matched the query. This field // is not populated if ListImportJobsRequest.filter is applied. TotalSize int64 `json:"totalSize,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "ImportJobs") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "ImportJobs") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s ListImportJobsResponse) MarshalJSON() ([]byte, error) { type NoMethod ListImportJobsResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // ListKeyHandlesResponse: Response message for Autokey.ListKeyHandles. type ListKeyHandlesResponse struct { // KeyHandles: Resulting KeyHandles. KeyHandles []*KeyHandle `json:"keyHandles,omitempty"` // NextPageToken: A token to retrieve next page of results. Pass this value in // ListKeyHandlesRequest.page_token to retrieve the next page of results. NextPageToken string `json:"nextPageToken,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "KeyHandles") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "KeyHandles") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s ListKeyHandlesResponse) MarshalJSON() ([]byte, error) { type NoMethod ListKeyHandlesResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // ListKeyRingsResponse: Response message for // KeyManagementService.ListKeyRings. type ListKeyRingsResponse struct { // KeyRings: The list of KeyRings. KeyRings []*KeyRing `json:"keyRings,omitempty"` // NextPageToken: A token to retrieve next page of results. Pass this value in // ListKeyRingsRequest.page_token to retrieve the next page of results. NextPageToken string `json:"nextPageToken,omitempty"` // TotalSize: The total number of KeyRings that matched the query. This field // is not populated if ListKeyRingsRequest.filter is applied. TotalSize int64 `json:"totalSize,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "KeyRings") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "KeyRings") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s ListKeyRingsResponse) MarshalJSON() ([]byte, error) { type NoMethod ListKeyRingsResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // ListLocationsResponse: The response message for Locations.ListLocations. type ListLocationsResponse struct { // Locations: A list of locations that matches the specified filter in the // request. Locations []*Location `json:"locations,omitempty"` // NextPageToken: The standard List next-page token. NextPageToken string `json:"nextPageToken,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "Locations") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Locations") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s ListLocationsResponse) MarshalJSON() ([]byte, error) { type NoMethod ListLocationsResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // ListRetiredResourcesResponse: Response message for // KeyManagementService.ListRetiredResources. type ListRetiredResourcesResponse struct { // NextPageToken: A token to retrieve the next page of results. Pass this value // in ListRetiredResourcesRequest.page_token to retrieve the next page of // results. NextPageToken string `json:"nextPageToken,omitempty"` // RetiredResources: The list of RetiredResources. RetiredResources []*RetiredResource `json:"retiredResources,omitempty"` // TotalSize: The total number of RetiredResources that matched the query. TotalSize int64 `json:"totalSize,omitempty,string"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "NextPageToken") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "NextPageToken") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s ListRetiredResourcesResponse) MarshalJSON() ([]byte, error) { type NoMethod ListRetiredResourcesResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // ListSingleTenantHsmInstanceProposalsResponse: Response message for // HsmManagement.ListSingleTenantHsmInstanceProposals. type ListSingleTenantHsmInstanceProposalsResponse struct { // NextPageToken: A token to retrieve next page of results. Pass this value in // ListSingleTenantHsmInstanceProposalsRequest.page_token to retrieve the next // page of results. NextPageToken string `json:"nextPageToken,omitempty"` // SingleTenantHsmInstanceProposals: The list of // SingleTenantHsmInstanceProposals. SingleTenantHsmInstanceProposals []*SingleTenantHsmInstanceProposal `json:"singleTenantHsmInstanceProposals,omitempty"` // TotalSize: The total number of SingleTenantHsmInstanceProposals that matched // the query. This field is not populated if // ListSingleTenantHsmInstanceProposalsRequest.filter is applied. TotalSize int64 `json:"totalSize,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "NextPageToken") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "NextPageToken") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s ListSingleTenantHsmInstanceProposalsResponse) MarshalJSON() ([]byte, error) { type NoMethod ListSingleTenantHsmInstanceProposalsResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // ListSingleTenantHsmInstancesResponse: Response message for // HsmManagement.ListSingleTenantHsmInstances. type ListSingleTenantHsmInstancesResponse struct { // NextPageToken: A token to retrieve next page of results. Pass this value in // ListSingleTenantHsmInstancesRequest.page_token to retrieve the next page of // results. NextPageToken string `json:"nextPageToken,omitempty"` // SingleTenantHsmInstances: The list of SingleTenantHsmInstances. SingleTenantHsmInstances []*SingleTenantHsmInstance `json:"singleTenantHsmInstances,omitempty"` // TotalSize: The total number of SingleTenantHsmInstances that matched the // query. This field is not populated if // ListSingleTenantHsmInstancesRequest.filter is applied. TotalSize int64 `json:"totalSize,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "NextPageToken") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "NextPageToken") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s ListSingleTenantHsmInstancesResponse) MarshalJSON() ([]byte, error) { type NoMethod ListSingleTenantHsmInstancesResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // Location: A resource that represents a Google Cloud location. type Location struct { // DisplayName: The friendly name for this location, typically a nearby city // name. For example, "Tokyo". DisplayName string `json:"displayName,omitempty"` // Labels: Cross-service attributes for the location. For example // {"cloud.googleapis.com/region": "us-east1"} Labels map[string]string `json:"labels,omitempty"` // LocationId: The canonical id for this location. For example: "us-east1". LocationId string `json:"locationId,omitempty"` // Metadata: Service-specific metadata. For example the available capacity at // the given location. Metadata googleapi.RawMessage `json:"metadata,omitempty"` // Name: Resource name for the location, which may vary between // implementations. For example: // "projects/example-project/locations/us-east1" Name string `json:"name,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "DisplayName") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "DisplayName") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s Location) MarshalJSON() ([]byte, error) { type NoMethod Location return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // LocationMetadata: Cloud KMS metadata for the given // google.cloud.location.Location. type LocationMetadata struct { // EkmAvailable: Indicates whether CryptoKeys with protection_level EXTERNAL // can be created in this location. EkmAvailable bool `json:"ekmAvailable,omitempty"` // HsmAvailable: Indicates whether CryptoKeys with protection_level HSM can be // created in this location. HsmAvailable bool `json:"hsmAvailable,omitempty"` // HsmSingleTenantAvailable: Indicates whether CryptoKeys with protection_level // HSM_SINGLE_TENANT can be created in this location. HsmSingleTenantAvailable bool `json:"hsmSingleTenantAvailable,omitempty"` // ForceSendFields is a list of field names (e.g. "EkmAvailable") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "EkmAvailable") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s LocationMetadata) MarshalJSON() ([]byte, error) { type NoMethod LocationMetadata return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // MacSignRequest: Request message for KeyManagementService.MacSign. type MacSignRequest struct { // Data: Required. The data to sign. The MAC tag is computed over this data // field based on the specific algorithm. Data string `json:"data,omitempty"` // DataCrc32c: Optional. An optional CRC32C checksum of the // MacSignRequest.data. If specified, KeyManagementService will verify the // integrity of the received MacSignRequest.data using this checksum. // KeyManagementService will report an error if the checksum verification // fails. If you receive a checksum error, your client should verify that // CRC32C(MacSignRequest.data) is equal to MacSignRequest.data_crc32c, and if // so, perform a limited number of retries. A persistent mismatch may indicate // an issue in your computation of the CRC32C checksum. Note: This field is // defined as int64 for reasons of compatibility across different languages. // However, it is a non-negative integer, which will never exceed 2^32-1, and // can be safely downconverted to uint32 in languages that support this type. DataCrc32c int64 `json:"dataCrc32c,omitempty,string"` // ForceSendFields is a list of field names (e.g. "Data") to unconditionally // include in API requests. By default, fields with empty or default values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Data") to include in API requests // with the JSON null value. By default, fields with empty values are omitted // from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s MacSignRequest) MarshalJSON() ([]byte, error) { type NoMethod MacSignRequest return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // MacSignResponse: Response message for KeyManagementService.MacSign. type MacSignResponse struct { // Mac: The created signature. Mac string `json:"mac,omitempty"` // MacCrc32c: Integrity verification field. A CRC32C checksum of the returned // MacSignResponse.mac. An integrity check of MacSignResponse.mac can be // performed by computing the CRC32C checksum of MacSignResponse.mac and // comparing your results to this field. Discard the response in case of // non-matching checksum values, and perform a limited number of retries. A // persistent mismatch may indicate an issue in your computation of the CRC32C // checksum. Note: This field is defined as int64 for reasons of compatibility // across different languages. However, it is a non-negative integer, which // will never exceed 2^32-1, and can be safely downconverted to uint32 in // languages that support this type. MacCrc32c int64 `json:"macCrc32c,omitempty,string"` // Name: The resource name of the CryptoKeyVersion used for signing. Check this // field to verify that the intended resource was used for signing. Name string `json:"name,omitempty"` // ProtectionLevel: The ProtectionLevel of the CryptoKeyVersion used for // signing. // // Possible values: // "PROTECTION_LEVEL_UNSPECIFIED" - Not specified. // "SOFTWARE" - Crypto operations are performed in software. // "HSM" - Crypto operations are performed in a Hardware Security Module. // "EXTERNAL" - Crypto operations are performed by an external key manager. // "EXTERNAL_VPC" - Crypto operations are performed in an EKM-over-VPC // backend. // "HSM_SINGLE_TENANT" - Crypto operations are performed in a single-tenant // HSM. ProtectionLevel string `json:"protectionLevel,omitempty"` // VerifiedDataCrc32c: Integrity verification field. A flag indicating whether // MacSignRequest.data_crc32c was received by KeyManagementService and used for // the integrity verification of the data. A false value of this field // indicates either that MacSignRequest.data_crc32c was left unset or that it // was not delivered to KeyManagementService. If you've set // MacSignRequest.data_crc32c but this field is still false, discard the // response and perform a limited number of retries. VerifiedDataCrc32c bool `json:"verifiedDataCrc32c,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "Mac") to unconditionally // include in API requests. By default, fields with empty or default values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Mac") to include in API requests // with the JSON null value. By default, fields with empty values are omitted // from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s MacSignResponse) MarshalJSON() ([]byte, error) { type NoMethod MacSignResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // MacVerifyRequest: Request message for KeyManagementService.MacVerify. type MacVerifyRequest struct { // Data: Required. The data used previously as a MacSignRequest.data to // generate the MAC tag. Data string `json:"data,omitempty"` // DataCrc32c: Optional. An optional CRC32C checksum of the // MacVerifyRequest.data. If specified, KeyManagementService will verify the // integrity of the received MacVerifyRequest.data using this checksum. // KeyManagementService will report an error if the checksum verification // fails. If you receive a checksum error, your client should verify that // CRC32C(MacVerifyRequest.data) is equal to MacVerifyRequest.data_crc32c, and // if so, perform a limited number of retries. A persistent mismatch may // indicate an issue in your computation of the CRC32C checksum. Note: This // field is defined as int64 for reasons of compatibility across different // languages. However, it is a non-negative integer, which will never exceed // 2^32-1, and can be safely downconverted to uint32 in languages that support // this type. DataCrc32c int64 `json:"dataCrc32c,omitempty,string"` // Mac: Required. The signature to verify. Mac string `json:"mac,omitempty"` // MacCrc32c: Optional. An optional CRC32C checksum of the // MacVerifyRequest.mac. If specified, KeyManagementService will verify the // integrity of the received MacVerifyRequest.mac using this checksum. // KeyManagementService will report an error if the checksum verification // fails. If you receive a checksum error, your client should verify that // CRC32C(MacVerifyRequest.mac) is equal to MacVerifyRequest.mac_crc32c, and if // so, perform a limited number of retries. A persistent mismatch may indicate // an issue in your computation of the CRC32C checksum. Note: This field is // defined as int64 for reasons of compatibility across different languages. // However, it is a non-negative integer, which will never exceed 2^32-1, and // can be safely downconverted to uint32 in languages that support this type. MacCrc32c int64 `json:"macCrc32c,omitempty,string"` // ForceSendFields is a list of field names (e.g. "Data") to unconditionally // include in API requests. By default, fields with empty or default values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Data") to include in API requests // with the JSON null value. By default, fields with empty values are omitted // from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s MacVerifyRequest) MarshalJSON() ([]byte, error) { type NoMethod MacVerifyRequest return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // MacVerifyResponse: Response message for KeyManagementService.MacVerify. type MacVerifyResponse struct { // Name: The resource name of the CryptoKeyVersion used for verification. Check // this field to verify that the intended resource was used for verification. Name string `json:"name,omitempty"` // ProtectionLevel: The ProtectionLevel of the CryptoKeyVersion used for // verification. // // Possible values: // "PROTECTION_LEVEL_UNSPECIFIED" - Not specified. // "SOFTWARE" - Crypto operations are performed in software. // "HSM" - Crypto operations are performed in a Hardware Security Module. // "EXTERNAL" - Crypto operations are performed by an external key manager. // "EXTERNAL_VPC" - Crypto operations are performed in an EKM-over-VPC // backend. // "HSM_SINGLE_TENANT" - Crypto operations are performed in a single-tenant // HSM. ProtectionLevel string `json:"protectionLevel,omitempty"` // Success: This field indicates whether or not the verification operation for // MacVerifyRequest.mac over MacVerifyRequest.data was successful. Success bool `json:"success,omitempty"` // VerifiedDataCrc32c: Integrity verification field. A flag indicating whether // MacVerifyRequest.data_crc32c was received by KeyManagementService and used // for the integrity verification of the data. A false value of this field // indicates either that MacVerifyRequest.data_crc32c was left unset or that it // was not delivered to KeyManagementService. If you've set // MacVerifyRequest.data_crc32c but this field is still false, discard the // response and perform a limited number of retries. VerifiedDataCrc32c bool `json:"verifiedDataCrc32c,omitempty"` // VerifiedMacCrc32c: Integrity verification field. A flag indicating whether // MacVerifyRequest.mac_crc32c was received by KeyManagementService and used // for the integrity verification of the data. A false value of this field // indicates either that MacVerifyRequest.mac_crc32c was left unset or that it // was not delivered to KeyManagementService. If you've set // MacVerifyRequest.mac_crc32c but this field is still false, discard the // response and perform a limited number of retries. VerifiedMacCrc32c bool `json:"verifiedMacCrc32c,omitempty"` // VerifiedSuccessIntegrity: Integrity verification field. This value is used // for the integrity verification of [MacVerifyResponse.success]. If the value // of this field contradicts the value of [MacVerifyResponse.success], discard // the response and perform a limited number of retries. VerifiedSuccessIntegrity bool `json:"verifiedSuccessIntegrity,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "Name") to unconditionally // include in API requests. By default, fields with empty or default values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Name") to include in API requests // with the JSON null value. By default, fields with empty values are omitted // from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s MacVerifyResponse) MarshalJSON() ([]byte, error) { type NoMethod MacVerifyResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // Operation: This resource represents a long-running operation that is the // result of a network API call. type Operation struct { // Done: If the value is `false`, it means the operation is still in progress. // If `true`, the operation is completed, and either `error` or `response` is // available. Done bool `json:"done,omitempty"` // Error: The error result of the operation in case of failure or cancellation. Error *Status `json:"error,omitempty"` // Metadata: Service-specific metadata associated with the operation. It // typically contains progress information and common metadata such as create // time. Some services might not provide such metadata. Any method that returns // a long-running operation should document the metadata type, if any. Metadata googleapi.RawMessage `json:"metadata,omitempty"` // Name: The server-assigned name, which is only unique within the same service // that originally returns it. If you use the default HTTP mapping, the `name` // should be a resource name ending with `operations/{unique_id}`. Name string `json:"name,omitempty"` // Response: The normal, successful response of the operation. If the original // method returns no data on success, such as `Delete`, the response is // `google.protobuf.Empty`. If the original method is standard // `Get`/`Create`/`Update`, the response should be the resource. For other // methods, the response should have the type `XxxResponse`, where `Xxx` is the // original method name. For example, if the original method name is // `TakeSnapshot()`, the inferred response type is `TakeSnapshotResponse`. Response googleapi.RawMessage `json:"response,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "Done") to unconditionally // include in API requests. By default, fields with empty or default values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Done") to include in API requests // with the JSON null value. By default, fields with empty values are omitted // from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s Operation) MarshalJSON() ([]byte, error) { type NoMethod Operation return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // Policy: An Identity and Access Management (IAM) policy, which specifies // access controls for Google Cloud resources. A `Policy` is a collection of // `bindings`. A `binding` binds one or more `members`, or principals, to a // single `role`. Principals can be user accounts, service accounts, Google // groups, and domains (such as G Suite). A `role` is a named list of // permissions; each `role` can be an IAM predefined role or a user-created // custom role. For some types of Google Cloud resources, a `binding` can also // specify a `condition`, which is a logical expression that allows access to a // resource only if the expression evaluates to `true`. A condition can add // constraints based on attributes of the request, the resource, or both. To // learn which resources support conditions in their IAM policies, see the IAM // documentation // (https://cloud.google.com/iam/help/conditions/resource-policies). **JSON // example:** ``` { "bindings": [ { "role": // "roles/resourcemanager.organizationAdmin", "members": [ // "user:mike@example.com", "group:admins@example.com", "domain:google.com", // "serviceAccount:my-project-id@appspot.gserviceaccount.com" ] }, { "role": // "roles/resourcemanager.organizationViewer", "members": [ // "user:eve@example.com" ], "condition": { "title": "expirable access", // "description": "Does not grant access after Sep 2020", "expression": // "request.time < timestamp('2020-10-01T00:00:00.000Z')", } } ], "etag": // "BwWWja0YfJA=", "version": 3 } ``` **YAML example:** ``` bindings: - // members: - user:mike@example.com - group:admins@example.com - // domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com // role: roles/resourcemanager.organizationAdmin - members: - // user:eve@example.com role: roles/resourcemanager.organizationViewer // condition: title: expirable access description: Does not grant access after // Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') // etag: BwWWja0YfJA= version: 3 ``` For a description of IAM and its features, // see the IAM documentation (https://cloud.google.com/iam/docs/). type Policy struct { // AuditConfigs: Specifies cloud audit logging configuration for this policy. AuditConfigs []*AuditConfig `json:"auditConfigs,omitempty"` // Bindings: Associates a list of `members`, or principals, with a `role`. // Optionally, may specify a `condition` that determines how and when the // `bindings` are applied. Each of the `bindings` must contain at least one // principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; // up to 250 of these principals can be Google groups. Each occurrence of a // principal counts towards these limits. For example, if the `bindings` grant // 50 different roles to `user:alice@example.com`, and not to any other // principal, then you can add another 1,450 principals to the `bindings` in // the `Policy`. Bindings []*Binding `json:"bindings,omitempty"` // Etag: `etag` is used for optimistic concurrency control as a way to help // prevent simultaneous updates of a policy from overwriting each other. It is // strongly suggested that systems make use of the `etag` in the // read-modify-write cycle to perform policy updates in order to avoid race // conditions: An `etag` is returned in the response to `getIamPolicy`, and // systems are expected to put that etag in the request to `setIamPolicy` to // ensure that their change will be applied to the same version of the policy. // **Important:** If you use IAM Conditions, you must include the `etag` field // whenever you call `setIamPolicy`. If you omit this field, then IAM allows // you to overwrite a version `3` policy with a version `1` policy, and all of // the conditions in the version `3` policy are lost. Etag string `json:"etag,omitempty"` // Version: Specifies the format of the policy. Valid values are `0`, `1`, and // `3`. Requests that specify an invalid value are rejected. Any operation that // affects conditional role bindings must specify version `3`. This requirement // applies to the following operations: * Getting a policy that includes a // conditional role binding * Adding a conditional role binding to a policy * // Changing a conditional role binding in a policy * Removing any role binding, // with or without a condition, from a policy that includes conditions // **Important:** If you use IAM Conditions, you must include the `etag` field // whenever you call `setIamPolicy`. If you omit this field, then IAM allows // you to overwrite a version `3` policy with a version `1` policy, and all of // the conditions in the version `3` policy are lost. If a policy does not // include any conditions, operations on that policy may specify any valid // version or leave the field unset. To learn which resources support // conditions in their IAM policies, see the IAM documentation // (https://cloud.google.com/iam/help/conditions/resource-policies). Version int64 `json:"version,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "AuditConfigs") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "AuditConfigs") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s Policy) MarshalJSON() ([]byte, error) { type NoMethod Policy return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // PublicKey: The public keys for a given CryptoKeyVersion. Obtained via // GetPublicKey. type PublicKey struct { // Algorithm: The Algorithm associated with this key. // // Possible values: // "CRYPTO_KEY_VERSION_ALGORITHM_UNSPECIFIED" - Not specified. // "GOOGLE_SYMMETRIC_ENCRYPTION" - Creates symmetric encryption keys. // "AES_128_GCM" - AES-GCM (Galois Counter Mode) using 128-bit keys. // "AES_256_GCM" - AES-GCM (Galois Counter Mode) using 256-bit keys. // "AES_128_CBC" - AES-CBC (Cipher Block Chaining Mode) using 128-bit keys. // "AES_256_CBC" - AES-CBC (Cipher Block Chaining Mode) using 256-bit keys. // "AES_128_CTR" - AES-CTR (Counter Mode) using 128-bit keys. // "AES_256_CTR" - AES-CTR (Counter Mode) using 256-bit keys. // "RSA_SIGN_PSS_2048_SHA256" - RSASSA-PSS 2048 bit key with a SHA256 digest. // "RSA_SIGN_PSS_3072_SHA256" - RSASSA-PSS 3072 bit key with a SHA256 digest. // "RSA_SIGN_PSS_4096_SHA256" - RSASSA-PSS 4096 bit key with a SHA256 digest. // "RSA_SIGN_PSS_4096_SHA512" - RSASSA-PSS 4096 bit key with a SHA512 digest. // "RSA_SIGN_PKCS1_2048_SHA256" - RSASSA-PKCS1-v1_5 with a 2048 bit key and a // SHA256 digest. // "RSA_SIGN_PKCS1_3072_SHA256" - RSASSA-PKCS1-v1_5 with a 3072 bit key and a // SHA256 digest. // "RSA_SIGN_PKCS1_4096_SHA256" - RSASSA-PKCS1-v1_5 with a 4096 bit key and a // SHA256 digest. // "RSA_SIGN_PKCS1_4096_SHA512" - RSASSA-PKCS1-v1_5 with a 4096 bit key and a // SHA512 digest. // "RSA_SIGN_RAW_PKCS1_2048" - RSASSA-PKCS1-v1_5 signing without encoding, // with a 2048 bit key. // "RSA_SIGN_RAW_PKCS1_3072" - RSASSA-PKCS1-v1_5 signing without encoding, // with a 3072 bit key. // "RSA_SIGN_RAW_PKCS1_4096" - RSASSA-PKCS1-v1_5 signing without encoding, // with a 4096 bit key. // "RSA_DECRYPT_OAEP_2048_SHA256" - RSAES-OAEP 2048 bit key with a SHA256 // digest. // "RSA_DECRYPT_OAEP_3072_SHA256" - RSAES-OAEP 3072 bit key with a SHA256 // digest. // "RSA_DECRYPT_OAEP_4096_SHA256" - RSAES-OAEP 4096 bit key with a SHA256 // digest. // "RSA_DECRYPT_OAEP_4096_SHA512" - RSAES-OAEP 4096 bit key with a SHA512 // digest. // "RSA_DECRYPT_OAEP_2048_SHA1" - RSAES-OAEP 2048 bit key with a SHA1 digest. // "RSA_DECRYPT_OAEP_3072_SHA1" - RSAES-OAEP 3072 bit key with a SHA1 digest. // "RSA_DECRYPT_OAEP_4096_SHA1" - RSAES-OAEP 4096 bit key with a SHA1 digest. // "EC_SIGN_P256_SHA256" - ECDSA on the NIST P-256 curve with a SHA256 // digest. Other hash functions can also be used: // https://cloud.google.com/kms/docs/create-validate-signatures#ecdsa_support_for_other_hash_algorithms // "EC_SIGN_P384_SHA384" - ECDSA on the NIST P-384 curve with a SHA384 // digest. Other hash functions can also be used: // https://cloud.google.com/kms/docs/create-validate-signatures#ecdsa_support_for_other_hash_algorithms // "EC_SIGN_SECP256K1_SHA256" - ECDSA on the non-NIST secp256k1 curve. This // curve is only supported for HSM protection level. Other hash functions can // also be used: // https://cloud.google.com/kms/docs/create-validate-signatures#ecdsa_support_for_other_hash_algorithms // "EC_SIGN_ED25519" - EdDSA on the Curve25519 in pure mode (taking data as // input). // "HMAC_SHA256" - HMAC-SHA256 signing with a 256 bit key. // "HMAC_SHA1" - HMAC-SHA1 signing with a 160 bit key. // "HMAC_SHA384" - HMAC-SHA384 signing with a 384 bit key. // "HMAC_SHA512" - HMAC-SHA512 signing with a 512 bit key. // "HMAC_SHA224" - HMAC-SHA224 signing with a 224 bit key. // "EXTERNAL_SYMMETRIC_ENCRYPTION" - Algorithm representing symmetric // encryption by an external key manager. // "ML_KEM_768" - ML-KEM-768 (FIPS 203) // "ML_KEM_1024" - ML-KEM-1024 (FIPS 203) // "KEM_XWING" - X-Wing hybrid KEM combining ML-KEM-768 with X25519 following // datatracker.ietf.org/doc/draft-connolly-cfrg-xwing-kem/. // "PQ_SIGN_ML_DSA_44" - The post-quantum Module-Lattice-Based Digital // Signature Algorithm, at security level 1. Randomized version. // "PQ_SIGN_ML_DSA_65" - The post-quantum Module-Lattice-Based Digital // Signature Algorithm, at security level 3. Randomized version. // "PQ_SIGN_ML_DSA_87" - The post-quantum Module-Lattice-Based Digital // Signature Algorithm, at security level 5. Randomized version. // "PQ_SIGN_SLH_DSA_SHA2_128S" - The post-quantum stateless hash-based // digital signature algorithm, at security level 1. Randomized version. // "PQ_SIGN_HASH_SLH_DSA_SHA2_128S_SHA256" - The post-quantum stateless // hash-based digital signature algorithm, at security level 1. Randomized // pre-hash version supporting SHA256 digests. // "PQ_SIGN_ML_DSA_44_EXTERNAL_MU" - The post-quantum Module-Lattice-Based // Digital Signature Algorithm, at security level 1. Randomized version // supporting externally-computed message representatives. // "PQ_SIGN_ML_DSA_65_EXTERNAL_MU" - The post-quantum Module-Lattice-Based // Digital Signature Algorithm, at security level 3. Randomized version // supporting externally-computed message representatives. // "PQ_SIGN_ML_DSA_87_EXTERNAL_MU" - The post-quantum Module-Lattice-Based // Digital Signature Algorithm, at security level 5. Randomized version // supporting externally-computed message representatives. Algorithm string `json:"algorithm,omitempty"` // Name: The name of the CryptoKeyVersion public key. Provided here for // verification. NOTE: This field is in Beta. Name string `json:"name,omitempty"` // Pem: The public key, encoded in PEM format. For more information, see the // RFC 7468 (https://tools.ietf.org/html/rfc7468) sections for General // Considerations (https://tools.ietf.org/html/rfc7468#section-2) and [Textual // Encoding of Subject Public Key Info] // (https://tools.ietf.org/html/rfc7468#section-13). Pem string `json:"pem,omitempty"` // PemCrc32c: Integrity verification field. A CRC32C checksum of the returned // PublicKey.pem. An integrity check of PublicKey.pem can be performed by // computing the CRC32C checksum of PublicKey.pem and comparing your results to // this field. Discard the response in case of non-matching checksum values, // and perform a limited number of retries. A persistent mismatch may indicate // an issue in your computation of the CRC32C checksum. Note: This field is // defined as int64 for reasons of compatibility across different languages. // However, it is a non-negative integer, which will never exceed `2^32-1`, and // can be safely downconverted to uint32 in languages that support this type. // NOTE: This field is in Beta. PemCrc32c int64 `json:"pemCrc32c,omitempty,string"` // ProtectionLevel: The ProtectionLevel of the CryptoKeyVersion public key. // // Possible values: // "PROTECTION_LEVEL_UNSPECIFIED" - Not specified. // "SOFTWARE" - Crypto operations are performed in software. // "HSM" - Crypto operations are performed in a Hardware Security Module. // "EXTERNAL" - Crypto operations are performed by an external key manager. // "EXTERNAL_VPC" - Crypto operations are performed in an EKM-over-VPC // backend. // "HSM_SINGLE_TENANT" - Crypto operations are performed in a single-tenant // HSM. ProtectionLevel string `json:"protectionLevel,omitempty"` // PublicKey: This field contains the public key (with integrity verification), // formatted according to the public_key_format field. PublicKey *ChecksummedData `json:"publicKey,omitempty"` // PublicKeyFormat: The PublicKey format specified by the customer through the // public_key_format field. // // Possible values: // "PUBLIC_KEY_FORMAT_UNSPECIFIED" - If the public_key_format field is not // specified: - For PQC algorithms, an error will be returned. - For non-PQC // algorithms, the default format is PEM, and the field pem will be populated. // Otherwise, the public key will be exported through the public_key field in // the requested format. // "PEM" - The returned public key will be encoded in PEM format. See the // [RFC7468](https://tools.ietf.org/html/rfc7468) sections for [General // Considerations](https://tools.ietf.org/html/rfc7468#section-2) and [Textual // Encoding of Subject Public Key Info] // (https://tools.ietf.org/html/rfc7468#section-13) for more information. // "DER" - The returned public key will be encoded in DER format (the // PrivateKeyInfo structure from RFC 5208). // "NIST_PQC" - This is supported only for PQC algorithms. The key material // is returned in the format defined by NIST PQC standards (FIPS 203, FIPS 204, // and FIPS 205). // "XWING_RAW_BYTES" - The returned public key is in raw bytes format defined // in its standard // https://datatracker.ietf.org/doc/draft-connolly-cfrg-xwing-kem. PublicKeyFormat string `json:"publicKeyFormat,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "Algorithm") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Algorithm") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s PublicKey) MarshalJSON() ([]byte, error) { type NoMethod PublicKey return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // QuorumAuth: Configuration for M of N quorum auth. type QuorumAuth struct { // RequiredApproverCount: Output only. The required numbers of approvers. The M // value used for M of N quorum auth. Must be greater than or equal to 2 and // less than or equal to total_approver_count - 1. RequiredApproverCount int64 `json:"requiredApproverCount,omitempty"` // TotalApproverCount: Required. The total number of approvers. This is the N // value used for M of N quorum auth. Must be greater than or equal to 3 and // less than or equal to 16. TotalApproverCount int64 `json:"totalApproverCount,omitempty"` // TwoFactorPublicKeyPems: Output only. The public keys associated with the 2FA // keys for M of N quorum auth. TwoFactorPublicKeyPems []string `json:"twoFactorPublicKeyPems,omitempty"` // ForceSendFields is a list of field names (e.g. "RequiredApproverCount") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "RequiredApproverCount") to // include in API requests with the JSON null value. By default, fields with // empty values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s QuorumAuth) MarshalJSON() ([]byte, error) { type NoMethod QuorumAuth return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // QuorumParameters: Parameters of quorum approval for the // SingleTenantHsmInstanceProposal. type QuorumParameters struct { // ApprovedTwoFactorPublicKeyPems: Output only. The public keys associated with // the 2FA keys that have already approved the SingleTenantHsmInstanceProposal // by signing the challenge. ApprovedTwoFactorPublicKeyPems []string `json:"approvedTwoFactorPublicKeyPems,omitempty"` // Challenges: Output only. The challenges to be signed by 2FA keys for quorum // auth. M of N of these challenges are required to be signed to approve the // operation. Challenges []*Challenge `json:"challenges,omitempty"` // RequiredApproverCount: Output only. The required numbers of approvers. This // is the M value used for M of N quorum auth. It is less than the number of // public keys. RequiredApproverCount int64 `json:"requiredApproverCount,omitempty"` // ForceSendFields is a list of field names (e.g. // "ApprovedTwoFactorPublicKeyPems") to unconditionally include in API // requests. By default, fields with empty or default values are omitted from // API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "ApprovedTwoFactorPublicKeyPems") // to include in API requests with the JSON null value. By default, fields with // empty values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s QuorumParameters) MarshalJSON() ([]byte, error) { type NoMethod QuorumParameters return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // QuorumReply: The reply to QuorumParameters for approving the proposal. type QuorumReply struct { // ChallengeReplies: Required. The challenge replies to approve the proposal. // Challenge replies can be sent across multiple requests. The proposal will be // approved when required_approver_count challenge replies are provided. ChallengeReplies []*ChallengeReply `json:"challengeReplies,omitempty"` // ForceSendFields is a list of field names (e.g. "ChallengeReplies") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "ChallengeReplies") to include in // API requests with the JSON null value. By default, fields with empty values // are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s QuorumReply) MarshalJSON() ([]byte, error) { type NoMethod QuorumReply return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // RawDecryptRequest: Request message for KeyManagementService.RawDecrypt. type RawDecryptRequest struct { // AdditionalAuthenticatedData: Optional. Optional data that must match the // data originally supplied in RawEncryptRequest.additional_authenticated_data. AdditionalAuthenticatedData string `json:"additionalAuthenticatedData,omitempty"` // AdditionalAuthenticatedDataCrc32c: Optional. An optional CRC32C checksum of // the RawDecryptRequest.additional_authenticated_data. If specified, // KeyManagementService will verify the integrity of the received // additional_authenticated_data using this checksum. KeyManagementService will // report an error if the checksum verification fails. If you receive a // checksum error, your client should verify that // CRC32C(additional_authenticated_data) is equal to // additional_authenticated_data_crc32c, and if so, perform a limited number of // retries. A persistent mismatch may indicate an issue in your computation of // the CRC32C checksum. Note: This field is defined as int64 for reasons of // compatibility across different languages. However, it is a non-negative // integer, which will never exceed 2^32-1, and can be safely downconverted to // uint32 in languages that support this type. AdditionalAuthenticatedDataCrc32c int64 `json:"additionalAuthenticatedDataCrc32c,omitempty,string"` // Ciphertext: Required. The encrypted data originally returned in // RawEncryptResponse.ciphertext. Ciphertext string `json:"ciphertext,omitempty"` // CiphertextCrc32c: Optional. An optional CRC32C checksum of the // RawDecryptRequest.ciphertext. If specified, KeyManagementService will verify // the integrity of the received ciphertext using this checksum. // KeyManagementService will report an error if the checksum verification // fails. If you receive a checksum error, your client should verify that // CRC32C(ciphertext) is equal to ciphertext_crc32c, and if so, perform a // limited number of retries. A persistent mismatch may indicate an issue in // your computation of the CRC32C checksum. Note: This field is defined as // int64 for reasons of compatibility across different languages. However, it // is a non-negative integer, which will never exceed 2^32-1, and can be safely // downconverted to uint32 in languages that support this type. CiphertextCrc32c int64 `json:"ciphertextCrc32c,omitempty,string"` // InitializationVector: Required. The initialization vector (IV) used during // encryption, which must match the data originally provided in // RawEncryptResponse.initialization_vector. InitializationVector string `json:"initializationVector,omitempty"` // InitializationVectorCrc32c: Optional. An optional CRC32C checksum of the // RawDecryptRequest.initialization_vector. If specified, KeyManagementService // will verify the integrity of the received initialization_vector using this // checksum. KeyManagementService will report an error if the checksum // verification fails. If you receive a checksum error, your client should // verify that CRC32C(initialization_vector) is equal to // initialization_vector_crc32c, and if so, perform a limited number of // retries. A persistent mismatch may indicate an issue in your computation of // the CRC32C checksum. Note: This field is defined as int64 for reasons of // compatibility across different languages. However, it is a non-negative // integer, which will never exceed 2^32-1, and can be safely downconverted to // uint32 in languages that support this type. InitializationVectorCrc32c int64 `json:"initializationVectorCrc32c,omitempty,string"` // TagLength: The length of the authentication tag that is appended to the end // of the ciphertext. If unspecified (0), the default value for the key's // algorithm will be used (for AES-GCM, the default value is 16). TagLength int64 `json:"tagLength,omitempty"` // ForceSendFields is a list of field names (e.g. // "AdditionalAuthenticatedData") to unconditionally include in API requests. // By default, fields with empty or default values are omitted from API // requests. See https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields // for more details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "AdditionalAuthenticatedData") to // include in API requests with the JSON null value. By default, fields with // empty values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s RawDecryptRequest) MarshalJSON() ([]byte, error) { type NoMethod RawDecryptRequest return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // RawDecryptResponse: Response message for KeyManagementService.RawDecrypt. type RawDecryptResponse struct { // Plaintext: The decrypted data. Plaintext string `json:"plaintext,omitempty"` // PlaintextCrc32c: Integrity verification field. A CRC32C checksum of the // returned RawDecryptResponse.plaintext. An integrity check of plaintext can // be performed by computing the CRC32C checksum of plaintext and comparing // your results to this field. Discard the response in case of non-matching // checksum values, and perform a limited number of retries. A persistent // mismatch may indicate an issue in your computation of the CRC32C checksum. // Note: receiving this response message indicates that KeyManagementService is // able to successfully decrypt the ciphertext. Note: This field is defined as // int64 for reasons of compatibility across different languages. However, it // is a non-negative integer, which will never exceed 2^32-1, and can be safely // downconverted to uint32 in languages that support this type. PlaintextCrc32c int64 `json:"plaintextCrc32c,omitempty,string"` // ProtectionLevel: The ProtectionLevel of the CryptoKeyVersion used in // decryption. // // Possible values: // "PROTECTION_LEVEL_UNSPECIFIED" - Not specified. // "SOFTWARE" - Crypto operations are performed in software. // "HSM" - Crypto operations are performed in a Hardware Security Module. // "EXTERNAL" - Crypto operations are performed by an external key manager. // "EXTERNAL_VPC" - Crypto operations are performed in an EKM-over-VPC // backend. // "HSM_SINGLE_TENANT" - Crypto operations are performed in a single-tenant // HSM. ProtectionLevel string `json:"protectionLevel,omitempty"` // VerifiedAdditionalAuthenticatedDataCrc32c: Integrity verification field. A // flag indicating whether // RawDecryptRequest.additional_authenticated_data_crc32c was received by // KeyManagementService and used for the integrity verification of // additional_authenticated_data. A false value of this field indicates either // that // RawDecryptRequest.additional_authenticated_data_crc32c was left // unset or that it was not delivered to KeyManagementService. If you've set // RawDecryptRequest.additional_authenticated_data_crc32c but this field is // still false, discard the response and perform a limited number of retries. VerifiedAdditionalAuthenticatedDataCrc32c bool `json:"verifiedAdditionalAuthenticatedDataCrc32c,omitempty"` // VerifiedCiphertextCrc32c: Integrity verification field. A flag indicating // whether RawDecryptRequest.ciphertext_crc32c was received by // KeyManagementService and used for the integrity verification of the // ciphertext. A false value of this field indicates either that // RawDecryptRequest.ciphertext_crc32c was left unset or that it was not // delivered to KeyManagementService. If you've set // RawDecryptRequest.ciphertext_crc32c but this field is still false, discard // the response and perform a limited number of retries. VerifiedCiphertextCrc32c bool `json:"verifiedCiphertextCrc32c,omitempty"` // VerifiedInitializationVectorCrc32c: Integrity verification field. A flag // indicating whether RawDecryptRequest.initialization_vector_crc32c was // received by KeyManagementService and used for the integrity verification of // initialization_vector. A false value of this field indicates either that // RawDecryptRequest.initialization_vector_crc32c was left unset or that it was // not delivered to KeyManagementService. If you've set // RawDecryptRequest.initialization_vector_crc32c but this field is still // false, discard the response and perform a limited number of retries. VerifiedInitializationVectorCrc32c bool `json:"verifiedInitializationVectorCrc32c,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "Plaintext") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Plaintext") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s RawDecryptResponse) MarshalJSON() ([]byte, error) { type NoMethod RawDecryptResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // RawEncryptRequest: Request message for KeyManagementService.RawEncrypt. type RawEncryptRequest struct { // AdditionalAuthenticatedData: Optional. Optional data that, if specified, // must also be provided during decryption through // RawDecryptRequest.additional_authenticated_data. This field may only be used // in conjunction with an algorithm that accepts additional authenticated data // (for example, AES-GCM). The maximum size depends on the key version's // protection_level. For SOFTWARE keys, the plaintext must be no larger than // 64KiB. For HSM keys, the combined length of the plaintext and // additional_authenticated_data fields must be no larger than 8KiB. AdditionalAuthenticatedData string `json:"additionalAuthenticatedData,omitempty"` // AdditionalAuthenticatedDataCrc32c: Optional. An optional CRC32C checksum of // the RawEncryptRequest.additional_authenticated_data. If specified, // KeyManagementService will verify the integrity of the received // additional_authenticated_data using this checksum. KeyManagementService will // report an error if the checksum verification fails. If you receive a // checksum error, your client should verify that // CRC32C(additional_authenticated_data) is equal to // additional_authenticated_data_crc32c, and if so, perform a limited number of // retries. A persistent mismatch may indicate an issue in your computation of // the CRC32C checksum. Note: This field is defined as int64 for reasons of // compatibility across different languages. However, it is a non-negative // integer, which will never exceed 2^32-1, and can be safely downconverted to // uint32 in languages that support this type. AdditionalAuthenticatedDataCrc32c int64 `json:"additionalAuthenticatedDataCrc32c,omitempty,string"` // InitializationVector: Optional. A customer-supplied initialization vector // that will be used for encryption. If it is not provided for AES-CBC and // AES-CTR, one will be generated. It will be returned in // RawEncryptResponse.initialization_vector. InitializationVector string `json:"initializationVector,omitempty"` // InitializationVectorCrc32c: Optional. An optional CRC32C checksum of the // RawEncryptRequest.initialization_vector. If specified, KeyManagementService // will verify the integrity of the received initialization_vector using this // checksum. KeyManagementService will report an error if the checksum // verification fails. If you receive a checksum error, your client should // verify that CRC32C(initialization_vector) is equal to // initialization_vector_crc32c, and if so, perform a limited number of // retries. A persistent mismatch may indicate an issue in your computation of // the CRC32C checksum. Note: This field is defined as int64 for reasons of // compatibility across different languages. However, it is a non-negative // integer, which will never exceed 2^32-1, and can be safely downconverted to // uint32 in languages that support this type. InitializationVectorCrc32c int64 `json:"initializationVectorCrc32c,omitempty,string"` // Plaintext: Required. The data to encrypt. Must be no larger than 64KiB. The // maximum size depends on the key version's protection_level. For SOFTWARE // keys, the plaintext must be no larger than 64KiB. For HSM keys, the combined // length of the plaintext and additional_authenticated_data fields must be no // larger than 8KiB. Plaintext string `json:"plaintext,omitempty"` // PlaintextCrc32c: Optional. An optional CRC32C checksum of the // RawEncryptRequest.plaintext. If specified, KeyManagementService will verify // the integrity of the received plaintext using this checksum. // KeyManagementService will report an error if the checksum verification // fails. If you receive a checksum error, your client should verify that // CRC32C(plaintext) is equal to plaintext_crc32c, and if so, perform a limited // number of retries. A persistent mismatch may indicate an issue in your // computation of the CRC32C checksum. Note: This field is defined as int64 for // reasons of compatibility across different languages. However, it is a // non-negative integer, which will never exceed 2^32-1, and can be safely // downconverted to uint32 in languages that support this type. PlaintextCrc32c int64 `json:"plaintextCrc32c,omitempty,string"` // ForceSendFields is a list of field names (e.g. // "AdditionalAuthenticatedData") to unconditionally include in API requests. // By default, fields with empty or default values are omitted from API // requests. See https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields // for more details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "AdditionalAuthenticatedData") to // include in API requests with the JSON null value. By default, fields with // empty values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s RawEncryptRequest) MarshalJSON() ([]byte, error) { type NoMethod RawEncryptRequest return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // RawEncryptResponse: Response message for KeyManagementService.RawEncrypt. type RawEncryptResponse struct { // Ciphertext: The encrypted data. In the case of AES-GCM, the authentication // tag is the tag_length bytes at the end of this field. Ciphertext string `json:"ciphertext,omitempty"` // CiphertextCrc32c: Integrity verification field. A CRC32C checksum of the // returned RawEncryptResponse.ciphertext. An integrity check of ciphertext can // be performed by computing the CRC32C checksum of ciphertext and comparing // your results to this field. Discard the response in case of non-matching // checksum values, and perform a limited number of retries. A persistent // mismatch may indicate an issue in your computation of the CRC32C checksum. // Note: This field is defined as int64 for reasons of compatibility across // different languages. However, it is a non-negative integer, which will never // exceed 2^32-1, and can be safely downconverted to uint32 in languages that // support this type. CiphertextCrc32c int64 `json:"ciphertextCrc32c,omitempty,string"` // InitializationVector: The initialization vector (IV) generated by the // service during encryption. This value must be stored and provided in // RawDecryptRequest.initialization_vector at decryption time. InitializationVector string `json:"initializationVector,omitempty"` // InitializationVectorCrc32c: Integrity verification field. A CRC32C checksum // of the returned RawEncryptResponse.initialization_vector. An integrity check // of initialization_vector can be performed by computing the CRC32C checksum // of initialization_vector and comparing your results to this field. Discard // the response in case of non-matching checksum values, and perform a limited // number of retries. A persistent mismatch may indicate an issue in your // computation of the CRC32C checksum. Note: This field is defined as int64 for // reasons of compatibility across different languages. However, it is a // non-negative integer, which will never exceed 2^32-1, and can be safely // downconverted to uint32 in languages that support this type. InitializationVectorCrc32c int64 `json:"initializationVectorCrc32c,omitempty,string"` // Name: The resource name of the CryptoKeyVersion used in encryption. Check // this field to verify that the intended resource was used for encryption. Name string `json:"name,omitempty"` // ProtectionLevel: The ProtectionLevel of the CryptoKeyVersion used in // encryption. // // Possible values: // "PROTECTION_LEVEL_UNSPECIFIED" - Not specified. // "SOFTWARE" - Crypto operations are performed in software. // "HSM" - Crypto operations are performed in a Hardware Security Module. // "EXTERNAL" - Crypto operations are performed by an external key manager. // "EXTERNAL_VPC" - Crypto operations are performed in an EKM-over-VPC // backend. // "HSM_SINGLE_TENANT" - Crypto operations are performed in a single-tenant // HSM. ProtectionLevel string `json:"protectionLevel,omitempty"` // TagLength: The length of the authentication tag that is appended to the end // of the ciphertext. TagLength int64 `json:"tagLength,omitempty"` // VerifiedAdditionalAuthenticatedDataCrc32c: Integrity verification field. A // flag indicating whether // RawEncryptRequest.additional_authenticated_data_crc32c was received by // KeyManagementService and used for the integrity verification of // additional_authenticated_data. A false value of this field indicates either // that // RawEncryptRequest.additional_authenticated_data_crc32c was left // unset or that it was not delivered to KeyManagementService. If you've set // RawEncryptRequest.additional_authenticated_data_crc32c but this field is // still false, discard the response and perform a limited number of retries. VerifiedAdditionalAuthenticatedDataCrc32c bool `json:"verifiedAdditionalAuthenticatedDataCrc32c,omitempty"` // VerifiedInitializationVectorCrc32c: Integrity verification field. A flag // indicating whether RawEncryptRequest.initialization_vector_crc32c was // received by KeyManagementService and used for the integrity verification of // initialization_vector. A false value of this field indicates either that // RawEncryptRequest.initialization_vector_crc32c was left unset or that it was // not delivered to KeyManagementService. If you've set // RawEncryptRequest.initialization_vector_crc32c but this field is still // false, discard the response and perform a limited number of retries. VerifiedInitializationVectorCrc32c bool `json:"verifiedInitializationVectorCrc32c,omitempty"` // VerifiedPlaintextCrc32c: Integrity verification field. A flag indicating // whether RawEncryptRequest.plaintext_crc32c was received by // KeyManagementService and used for the integrity verification of the // plaintext. A false value of this field indicates either that // RawEncryptRequest.plaintext_crc32c was left unset or that it was not // delivered to KeyManagementService. If you've set // RawEncryptRequest.plaintext_crc32c but this field is still false, discard // the response and perform a limited number of retries. VerifiedPlaintextCrc32c bool `json:"verifiedPlaintextCrc32c,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "Ciphertext") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Ciphertext") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s RawEncryptResponse) MarshalJSON() ([]byte, error) { type NoMethod RawEncryptResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // RefreshSingleTenantHsmInstance: Refreshes the SingleTenantHsmInstance. This // operation must be performed periodically to keep the SingleTenantHsmInstance // active. This operation must be performed before // unrefreshed_duration_until_disable has passed. The SingleTenantHsmInstance // must be in the ACTIVE state to perform this operation. type RefreshSingleTenantHsmInstance struct { } // RegisterTwoFactorAuthKeys: Register 2FA keys for the // SingleTenantHsmInstance. This operation requires all Challenges to be signed // by 2FA keys. The SingleTenantHsmInstance must be in the // PENDING_TWO_FACTOR_AUTH_REGISTRATION state to perform this operation. type RegisterTwoFactorAuthKeys struct { // RequiredApproverCount: Required. The required numbers of approvers to set // for the SingleTenantHsmInstance. This is the M value used for M of N quorum // auth. Must be greater than or equal to 2 and less than or equal to // total_approver_count - 1. RequiredApproverCount int64 `json:"requiredApproverCount,omitempty"` // TwoFactorPublicKeyPems: Required. The public keys associated with the 2FA // keys for M of N quorum auth. Public keys must be associated with RSA 2048 // keys. TwoFactorPublicKeyPems []string `json:"twoFactorPublicKeyPems,omitempty"` // ForceSendFields is a list of field names (e.g. "RequiredApproverCount") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "RequiredApproverCount") to // include in API requests with the JSON null value. By default, fields with // empty values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s RegisterTwoFactorAuthKeys) MarshalJSON() ([]byte, error) { type NoMethod RegisterTwoFactorAuthKeys return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // RemoveQuorumMember: Remove a quorum member from the SingleTenantHsmInstance. // This will reduce total_approver_count by 1. The SingleTenantHsmInstance must // be in the ACTIVE state to perform this operation. type RemoveQuorumMember struct { // TwoFactorPublicKeyPem: Required. The public key associated with the 2FA key // for the quorum member to remove. Public keys must be associated with RSA // 2048 keys. TwoFactorPublicKeyPem string `json:"twoFactorPublicKeyPem,omitempty"` // ForceSendFields is a list of field names (e.g. "TwoFactorPublicKeyPem") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "TwoFactorPublicKeyPem") to // include in API requests with the JSON null value. By default, fields with // empty values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s RemoveQuorumMember) MarshalJSON() ([]byte, error) { type NoMethod RemoveQuorumMember return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // RequiredActionQuorumParameters: Parameters for an approval that has both // required challenges and a quorum. type RequiredActionQuorumParameters struct { // ApprovedTwoFactorPublicKeyPems: Output only. The public keys associated with // the 2FA keys that have already approved the SingleTenantHsmInstanceProposal // by signing the challenge. ApprovedTwoFactorPublicKeyPems []string `json:"approvedTwoFactorPublicKeyPems,omitempty"` // QuorumChallenges: Output only. The challenges to be signed by 2FA keys for // quorum auth. M of N of these challenges are required to be signed to approve // the operation. QuorumChallenges []*Challenge `json:"quorumChallenges,omitempty"` // RequiredApproverCount: Output only. The required number of quorum approvers. // This is the M value used for M of N quorum auth. It is less than the number // of public keys. RequiredApproverCount int64 `json:"requiredApproverCount,omitempty"` // RequiredChallenges: Output only. A list of specific challenges that must be // signed. For some operations, this will contain a single challenge. RequiredChallenges []*Challenge `json:"requiredChallenges,omitempty"` // ForceSendFields is a list of field names (e.g. // "ApprovedTwoFactorPublicKeyPems") to unconditionally include in API // requests. By default, fields with empty or default values are omitted from // API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "ApprovedTwoFactorPublicKeyPems") // to include in API requests with the JSON null value. By default, fields with // empty values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s RequiredActionQuorumParameters) MarshalJSON() ([]byte, error) { type NoMethod RequiredActionQuorumParameters return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // RequiredActionQuorumReply: The reply to RequiredActionQuorumParameters for // approving the proposal. type RequiredActionQuorumReply struct { // QuorumChallengeReplies: Required. Quorum members' signed challenge replies. // These can be provided across multiple requests. The proposal will be // approved when required_approver_count quorum_challenge_replies are provided // and when all required_challenge_replies are provided. QuorumChallengeReplies []*ChallengeReply `json:"quorumChallengeReplies,omitempty"` // RequiredChallengeReplies: Required. All required challenges must be signed // for the proposal to be approved. These can be sent across multiple requests. RequiredChallengeReplies []*ChallengeReply `json:"requiredChallengeReplies,omitempty"` // ForceSendFields is a list of field names (e.g. "QuorumChallengeReplies") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "QuorumChallengeReplies") to // include in API requests with the JSON null value. By default, fields with // empty values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s RequiredActionQuorumReply) MarshalJSON() ([]byte, error) { type NoMethod RequiredActionQuorumReply return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // RestoreCryptoKeyVersionRequest: Request message for // KeyManagementService.RestoreCryptoKeyVersion. type RestoreCryptoKeyVersionRequest struct { } // RetiredResource: A RetiredResource resource represents the record of a // deleted CryptoKey. Its purpose is to provide visibility into retained user // data and to prevent reuse of these names for new CryptoKeys. type RetiredResource struct { // DeleteTime: Output only. The time at which the original resource was deleted // and this RetiredResource record was created. DeleteTime string `json:"deleteTime,omitempty"` // Name: Output only. Identifier. The resource name for this RetiredResource in // the format `projects/*/locations/*/retiredResources/*`. Name string `json:"name,omitempty"` // OriginalResource: Output only. The full resource name of the original // CryptoKey that was deleted in the format // `projects/*/locations/*/keyRings/*/cryptoKeys/*`. OriginalResource string `json:"originalResource,omitempty"` // ResourceType: Output only. The resource type of the original deleted // resource. ResourceType string `json:"resourceType,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "DeleteTime") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "DeleteTime") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s RetiredResource) MarshalJSON() ([]byte, error) { type NoMethod RetiredResource return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // ServiceResolver: A ServiceResolver represents an EKM replica that can be // reached within an EkmConnection. type ServiceResolver struct { // EndpointFilter: Optional. The filter applied to the endpoints of the // resolved service. If no filter is specified, all endpoints will be // considered. An endpoint will be chosen arbitrarily from the filtered list // for each request. For endpoint filter syntax and examples, see // https://cloud.google.com/service-directory/docs/reference/rpc/google.cloud.servicedirectory.v1#resolveservicerequest. EndpointFilter string `json:"endpointFilter,omitempty"` // Hostname: Required. The hostname of the EKM replica used at TLS and HTTP // layers. Hostname string `json:"hostname,omitempty"` // ServerCertificates: Required. A list of leaf server certificates used to // authenticate HTTPS connections to the EKM replica. Currently, a maximum of // 10 Certificate is supported. ServerCertificates []*Certificate `json:"serverCertificates,omitempty"` // ServiceDirectoryService: Required. The resource name of the Service // Directory service pointing to an EKM replica, in the format // `projects/*/locations/*/namespaces/*/services/*`. ServiceDirectoryService string `json:"serviceDirectoryService,omitempty"` // ForceSendFields is a list of field names (e.g. "EndpointFilter") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "EndpointFilter") to include in // API requests with the JSON null value. By default, fields with empty values // are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s ServiceResolver) MarshalJSON() ([]byte, error) { type NoMethod ServiceResolver return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // SetIamPolicyRequest: Request message for `SetIamPolicy` method. type SetIamPolicyRequest struct { // Policy: REQUIRED: The complete policy to be applied to the `resource`. The // size of the policy is limited to a few 10s of KB. An empty policy is a valid // policy but certain Google Cloud services (such as Projects) might reject // them. Policy *Policy `json:"policy,omitempty"` // UpdateMask: OPTIONAL: A FieldMask specifying which fields of the policy to // modify. Only the fields in the mask will be modified. If no mask is // provided, the following default mask is used: `paths: "bindings, etag" UpdateMask string `json:"updateMask,omitempty"` // ForceSendFields is a list of field names (e.g. "Policy") to unconditionally // include in API requests. By default, fields with empty or default values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Policy") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s SetIamPolicyRequest) MarshalJSON() ([]byte, error) { type NoMethod SetIamPolicyRequest return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // ShowEffectiveAutokeyConfigResponse: Response message for // ShowEffectiveAutokeyConfig. type ShowEffectiveAutokeyConfigResponse struct { // KeyProject: Name of the key project configured in the resource project's // folder ancestry. KeyProject string `json:"keyProject,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "KeyProject") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "KeyProject") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s ShowEffectiveAutokeyConfigResponse) MarshalJSON() ([]byte, error) { type NoMethod ShowEffectiveAutokeyConfigResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse: Represents a // response message for // KeyAccessJustificationsConfig.ShowEffectiveKeyAccessJustificationsEnrollmentC // onfig type ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse struct { // ExternalConfig: Contains the effective // KeyAccessJustificationsEnrollmentConfig for external keys. ExternalConfig *KeyAccessJustificationsEnrollmentConfig `json:"externalConfig,omitempty"` // HardwareConfig: Contains the effective // KeyAccessJustificationsEnrollmentConfig for hardware keys. HardwareConfig *KeyAccessJustificationsEnrollmentConfig `json:"hardwareConfig,omitempty"` // SoftwareConfig: Contains the effective // KeyAccessJustificationsEnrollmentConfig for software keys. SoftwareConfig *KeyAccessJustificationsEnrollmentConfig `json:"softwareConfig,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "ExternalConfig") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "ExternalConfig") to include in // API requests with the JSON null value. By default, fields with empty values // are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse) MarshalJSON() ([]byte, error) { type NoMethod ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // ShowEffectiveKeyAccessJustificationsPolicyConfigResponse: Represents a // response message for // KeyAccessJustificationsConfig.ShowEffectiveKeyAccessJustificationsPolicyConfi // g. type ShowEffectiveKeyAccessJustificationsPolicyConfigResponse struct { // EffectiveKajPolicy: Contains the effective // KeyAccessJustificationsPolicyConfig. EffectiveKajPolicy *KeyAccessJustificationsPolicyConfig `json:"effectiveKajPolicy,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "EffectiveKajPolicy") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "EffectiveKajPolicy") to include // in API requests with the JSON null value. By default, fields with empty // values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s ShowEffectiveKeyAccessJustificationsPolicyConfigResponse) MarshalJSON() ([]byte, error) { type NoMethod ShowEffectiveKeyAccessJustificationsPolicyConfigResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // SingleTenantHsmInstance: A SingleTenantHsmInstance represents a // single-tenant HSM instance. It can be used for creating CryptoKeys with a // ProtectionLevel of HSM_SINGLE_TENANT, as well as performing cryptographic // operations using keys created within the SingleTenantHsmInstance. type SingleTenantHsmInstance struct { // CreateTime: Output only. The time at which the SingleTenantHsmInstance was // created. CreateTime string `json:"createTime,omitempty"` // DeleteTime: Output only. The time at which the SingleTenantHsmInstance was // deleted. DeleteTime string `json:"deleteTime,omitempty"` // DisableTime: Output only. The time at which the instance will be // automatically disabled if not refreshed. This field is updated upon creation // and after each successful refresh operation and enable. A // RefreshSingleTenantHsmInstance operation must be made via a // SingleTenantHsmInstanceProposal before this time otherwise the // SingleTenantHsmInstance will become disabled. DisableTime string `json:"disableTime,omitempty"` // KeyPortabilityEnabled: Optional. Immutable. Indicates whether key // portability is enabled for the SingleTenantHsmInstance. This can only be set // at creation time. Key portability features are disabled by default and not // yet available in GA. KeyPortabilityEnabled bool `json:"keyPortabilityEnabled,omitempty"` // Name: Identifier. The resource name for this SingleTenantHsmInstance in the // format `projects/*/locations/*/singleTenantHsmInstances/*`. Name string `json:"name,omitempty"` // QuorumAuth: Required. The quorum auth configuration for the // SingleTenantHsmInstance. QuorumAuth *QuorumAuth `json:"quorumAuth,omitempty"` // State: Output only. The state of the SingleTenantHsmInstance. // // Possible values: // "STATE_UNSPECIFIED" - Not specified. // "CREATING" - The SingleTenantHsmInstance is being created. // "PENDING_TWO_FACTOR_AUTH_REGISTRATION" - The SingleTenantHsmInstance is // waiting for 2FA keys to be registered. This can be done by calling // CreateSingleTenantHsmInstanceProposal with the RegisterTwoFactorAuthKeys // operation. // "ACTIVE" - The SingleTenantHsmInstance is ready to use. A // SingleTenantHsmInstance must be in the ACTIVE state for all CryptoKeys // created within the SingleTenantHsmInstance to be usable. // "DISABLING" - The SingleTenantHsmInstance is being disabled. // "DISABLED" - The SingleTenantHsmInstance is disabled. // "DELETING" - The SingleTenantHsmInstance is being deleted. Requests to the // instance will be rejected in this state. // "DELETED" - The SingleTenantHsmInstance has been deleted. // "FAILED" - The SingleTenantHsmInstance has failed and can not be recovered // or used. State string `json:"state,omitempty"` // UnrefreshedDurationUntilDisable: Output only. The system-defined duration // that an instance can remain unrefreshed until it is automatically disabled. // This will have a value of 120 days. UnrefreshedDurationUntilDisable string `json:"unrefreshedDurationUntilDisable,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "CreateTime") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "CreateTime") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s SingleTenantHsmInstance) MarshalJSON() ([]byte, error) { type NoMethod SingleTenantHsmInstance return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // SingleTenantHsmInstanceProposal: A SingleTenantHsmInstanceProposal // represents a proposal to perform an operation on a SingleTenantHsmInstance. type SingleTenantHsmInstanceProposal struct { // AddQuorumMember: Add a quorum member to the SingleTenantHsmInstance. This // will increase the total_approver_count by 1. The SingleTenantHsmInstance // must be in the ACTIVE state to perform this operation. AddQuorumMember *AddQuorumMember `json:"addQuorumMember,omitempty"` // CreateTime: Output only. The time at which the // SingleTenantHsmInstanceProposal was created. CreateTime string `json:"createTime,omitempty"` // DeleteSingleTenantHsmInstance: Delete the SingleTenantHsmInstance. Deleting // a SingleTenantHsmInstance will make all CryptoKeys attached to the // SingleTenantHsmInstance unusable. The SingleTenantHsmInstance must be in the // DISABLED or PENDING_TWO_FACTOR_AUTH_REGISTRATION state to perform this // operation. DeleteSingleTenantHsmInstance *DeleteSingleTenantHsmInstance `json:"deleteSingleTenantHsmInstance,omitempty"` // DeleteTime: Output only. The time at which the // SingleTenantHsmInstanceProposal was deleted. DeleteTime string `json:"deleteTime,omitempty"` // DisableSingleTenantHsmInstance: Disable the SingleTenantHsmInstance. The // SingleTenantHsmInstance must be in the ACTIVE state to perform this // operation. DisableSingleTenantHsmInstance *DisableSingleTenantHsmInstance `json:"disableSingleTenantHsmInstance,omitempty"` // EnableSingleTenantHsmInstance: Enable the SingleTenantHsmInstance. The // SingleTenantHsmInstance must be in the DISABLED state to perform this // operation. EnableSingleTenantHsmInstance *EnableSingleTenantHsmInstance `json:"enableSingleTenantHsmInstance,omitempty"` // ExpireTime: The time at which the SingleTenantHsmInstanceProposal will // expire if not approved and executed. ExpireTime string `json:"expireTime,omitempty"` // FailureReason: Output only. The root cause of the most recent failure. Only // present if state is FAILED. FailureReason string `json:"failureReason,omitempty"` // Name: Identifier. The resource name for this SingleTenantHsmInstance in the // format `projects/*/locations/*/singleTenantHsmInstances/*/proposals/*`. Name string `json:"name,omitempty"` // PurgeTime: Output only. The time at which the soft-deleted // SingleTenantHsmInstanceProposal will be permanently purged. This field is // only populated when the state is DELETED and will be set a time after // expiration of the proposal, i.e. >= expire_time or (create_time + ttl). PurgeTime string `json:"purgeTime,omitempty"` // QuorumParameters: Output only. The quorum approval parameters for the // SingleTenantHsmInstanceProposal. QuorumParameters *QuorumParameters `json:"quorumParameters,omitempty"` // RefreshSingleTenantHsmInstance: Refreshes the SingleTenantHsmInstance. This // operation must be performed periodically to keep the SingleTenantHsmInstance // active. This operation must be performed before // unrefreshed_duration_until_disable has passed. The SingleTenantHsmInstance // must be in the ACTIVE state to perform this operation. RefreshSingleTenantHsmInstance *RefreshSingleTenantHsmInstance `json:"refreshSingleTenantHsmInstance,omitempty"` // RegisterTwoFactorAuthKeys: Register 2FA keys for the // SingleTenantHsmInstance. This operation requires all N Challenges to be // signed by 2FA keys. The SingleTenantHsmInstance must be in the // PENDING_TWO_FACTOR_AUTH_REGISTRATION state to perform this operation. RegisterTwoFactorAuthKeys *RegisterTwoFactorAuthKeys `json:"registerTwoFactorAuthKeys,omitempty"` // RemoveQuorumMember: Remove a quorum member from the SingleTenantHsmInstance. // This will reduce total_approver_count by 1. The SingleTenantHsmInstance must // be in the ACTIVE state to perform this operation. RemoveQuorumMember *RemoveQuorumMember `json:"removeQuorumMember,omitempty"` // RequiredActionQuorumParameters: Output only. Parameters for an approval of a // SingleTenantHsmInstanceProposal that has both required challenges and a // quorum. RequiredActionQuorumParameters *RequiredActionQuorumParameters `json:"requiredActionQuorumParameters,omitempty"` // State: Output only. The state of the SingleTenantHsmInstanceProposal. // // Possible values: // "STATE_UNSPECIFIED" - Not specified. // "CREATING" - The SingleTenantHsmInstanceProposal is being created. // "PENDING" - The SingleTenantHsmInstanceProposal is pending approval. // "APPROVED" - The SingleTenantHsmInstanceProposal has been approved. // "RUNNING" - The SingleTenantHsmInstanceProposal is being executed. // "SUCCEEDED" - The SingleTenantHsmInstanceProposal has been executed // successfully. // "FAILED" - The SingleTenantHsmInstanceProposal has failed. // "DELETED" - The SingleTenantHsmInstanceProposal has been deleted and will // be purged after the purge_time. State string `json:"state,omitempty"` // Ttl: Input only. The TTL for the SingleTenantHsmInstanceProposal. Proposals // will expire after this duration. Ttl string `json:"ttl,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "AddQuorumMember") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "AddQuorumMember") to include in // API requests with the JSON null value. By default, fields with empty values // are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s SingleTenantHsmInstanceProposal) MarshalJSON() ([]byte, error) { type NoMethod SingleTenantHsmInstanceProposal return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // Status: The `Status` type defines a logical error model that is suitable for // different programming environments, including REST APIs and RPC APIs. It is // used by gRPC (https://github.com/grpc). Each `Status` message contains three // pieces of data: error code, error message, and error details. You can find // out more about this error model and how to work with it in the API Design // Guide (https://cloud.google.com/apis/design/errors). type Status struct { // Code: The status code, which should be an enum value of google.rpc.Code. Code int64 `json:"code,omitempty"` // Details: A list of messages that carry the error details. There is a common // set of message types for APIs to use. Details []googleapi.RawMessage `json:"details,omitempty"` // Message: A developer-facing error message, which should be in English. Any // user-facing error message should be localized and sent in the // google.rpc.Status.details field, or localized by the client. Message string `json:"message,omitempty"` // ForceSendFields is a list of field names (e.g. "Code") to unconditionally // include in API requests. By default, fields with empty or default values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Code") to include in API requests // with the JSON null value. By default, fields with empty values are omitted // from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s Status) MarshalJSON() ([]byte, error) { type NoMethod Status return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // TestIamPermissionsRequest: Request message for `TestIamPermissions` method. type TestIamPermissionsRequest struct { // Permissions: The set of permissions to check for the `resource`. Permissions // with wildcards (such as `*` or `storage.*`) are not allowed. For more // information see IAM Overview // (https://cloud.google.com/iam/docs/overview#permissions). Permissions []string `json:"permissions,omitempty"` // ForceSendFields is a list of field names (e.g. "Permissions") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Permissions") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s TestIamPermissionsRequest) MarshalJSON() ([]byte, error) { type NoMethod TestIamPermissionsRequest return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // TestIamPermissionsResponse: Response message for `TestIamPermissions` // method. type TestIamPermissionsResponse struct { // Permissions: A subset of `TestPermissionsRequest.permissions` that the // caller is allowed. Permissions []string `json:"permissions,omitempty"` // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` // ForceSendFields is a list of field names (e.g. "Permissions") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Permissions") to include in API // requests with the JSON null value. By default, fields with empty values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s TestIamPermissionsResponse) MarshalJSON() ([]byte, error) { type NoMethod TestIamPermissionsResponse return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // UpdateCryptoKeyPrimaryVersionRequest: Request message for // KeyManagementService.UpdateCryptoKeyPrimaryVersion. type UpdateCryptoKeyPrimaryVersionRequest struct { // CryptoKeyVersionId: Required. The id of the child CryptoKeyVersion to use as // primary. CryptoKeyVersionId string `json:"cryptoKeyVersionId,omitempty"` // ForceSendFields is a list of field names (e.g. "CryptoKeyVersionId") to // unconditionally include in API requests. By default, fields with empty or // default values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "CryptoKeyVersionId") to include // in API requests with the JSON null value. By default, fields with empty // values are omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s UpdateCryptoKeyPrimaryVersionRequest) MarshalJSON() ([]byte, error) { type NoMethod UpdateCryptoKeyPrimaryVersionRequest return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } // VerifyConnectivityResponse: Response message for // EkmService.VerifyConnectivity. type VerifyConnectivityResponse struct { // ServerResponse contains the HTTP response code and headers from the server. googleapi.ServerResponse `json:"-"` } // WrappingPublicKey: The public key component of the wrapping key. For details // of the type of key this public key corresponds to, see the ImportMethod. type WrappingPublicKey struct { // Pem: The public key, encoded in PEM format. For more information, see the // RFC 7468 (https://tools.ietf.org/html/rfc7468) sections for General // Considerations (https://tools.ietf.org/html/rfc7468#section-2) and [Textual // Encoding of Subject Public Key Info] // (https://tools.ietf.org/html/rfc7468#section-13). Pem string `json:"pem,omitempty"` // ForceSendFields is a list of field names (e.g. "Pem") to unconditionally // include in API requests. By default, fields with empty or default values are // omitted from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-ForceSendFields for more // details. ForceSendFields []string `json:"-"` // NullFields is a list of field names (e.g. "Pem") to include in API requests // with the JSON null value. By default, fields with empty values are omitted // from API requests. See // https://pkg.go.dev/google.golang.org/api#hdr-NullFields for more details. NullFields []string `json:"-"` } func (s WrappingPublicKey) MarshalJSON() ([]byte, error) { type NoMethod WrappingPublicKey return gensupport.MarshalJSON(NoMethod(s), s.ForceSendFields, s.NullFields) } type FoldersGetAutokeyConfigCall struct { s *Service name string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // GetAutokeyConfig: Returns the AutokeyConfig for a folder or project. // // - name: Name of the AutokeyConfig resource, e.g. // `folders/{FOLDER_NUMBER}/autokeyConfig` or // `projects/{PROJECT_NUMBER}/autokeyConfig`. func (r *FoldersService) GetAutokeyConfig(name string) *FoldersGetAutokeyConfigCall { c := &FoldersGetAutokeyConfigCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *FoldersGetAutokeyConfigCall) Fields(s ...googleapi.Field) *FoldersGetAutokeyConfigCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *FoldersGetAutokeyConfigCall) IfNoneMatch(entityTag string) *FoldersGetAutokeyConfigCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *FoldersGetAutokeyConfigCall) Context(ctx context.Context) *FoldersGetAutokeyConfigCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *FoldersGetAutokeyConfigCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *FoldersGetAutokeyConfigCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.folders.getAutokeyConfig", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.folders.getAutokeyConfig" call. // Any non-2xx status code is an error. Response headers are in either // *AutokeyConfig.ServerResponse.Header or (if a response was returned at all) // in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *FoldersGetAutokeyConfigCall) Do(opts ...googleapi.CallOption) (*AutokeyConfig, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &AutokeyConfig{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.folders.getAutokeyConfig", "response", internallog.HTTPResponse(res, b)) return ret, nil } type FoldersGetKajPolicyConfigCall struct { s *Service name string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // GetKajPolicyConfig: Gets the KeyAccessJustificationsPolicyConfig for a given // organization, folder, or project. // // - name: Specifies the name of the KeyAccessJustificationsPolicyConfig to // get. func (r *FoldersService) GetKajPolicyConfig(name string) *FoldersGetKajPolicyConfigCall { c := &FoldersGetKajPolicyConfigCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *FoldersGetKajPolicyConfigCall) Fields(s ...googleapi.Field) *FoldersGetKajPolicyConfigCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *FoldersGetKajPolicyConfigCall) IfNoneMatch(entityTag string) *FoldersGetKajPolicyConfigCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *FoldersGetKajPolicyConfigCall) Context(ctx context.Context) *FoldersGetKajPolicyConfigCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *FoldersGetKajPolicyConfigCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *FoldersGetKajPolicyConfigCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.folders.getKajPolicyConfig", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.folders.getKajPolicyConfig" call. // Any non-2xx status code is an error. Response headers are in either // *KeyAccessJustificationsPolicyConfig.ServerResponse.Header or (if a response // was returned at all) in error.(*googleapi.Error).Header. Use // googleapi.IsNotModified to check whether the returned error was because // http.StatusNotModified was returned. func (c *FoldersGetKajPolicyConfigCall) Do(opts ...googleapi.CallOption) (*KeyAccessJustificationsPolicyConfig, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &KeyAccessJustificationsPolicyConfig{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.folders.getKajPolicyConfig", "response", internallog.HTTPResponse(res, b)) return ret, nil } type FoldersUpdateAutokeyConfigCall struct { s *Service name string autokeyconfig *AutokeyConfig urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // UpdateAutokeyConfig: Updates the AutokeyConfig for a folder or a project. // The caller must have both `cloudkms.autokeyConfigs.update` permission on the // parent folder and `cloudkms.cryptoKeys.setIamPolicy` permission on the // provided key project. A KeyHandle creation in the folder's descendant // projects will use this configuration to determine where to create the // resulting CryptoKey. // // - name: Identifier. Name of the AutokeyConfig resource, e.g. // `folders/{FOLDER_NUMBER}/autokeyConfig` or // `projects/{PROJECT_NUMBER}/autokeyConfig`. func (r *FoldersService) UpdateAutokeyConfig(name string, autokeyconfig *AutokeyConfig) *FoldersUpdateAutokeyConfigCall { c := &FoldersUpdateAutokeyConfigCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name c.autokeyconfig = autokeyconfig return c } // UpdateMask sets the optional parameter "updateMask": Required. Masks which // fields of the AutokeyConfig to update, e.g. `keyProject`. func (c *FoldersUpdateAutokeyConfigCall) UpdateMask(updateMask string) *FoldersUpdateAutokeyConfigCall { c.urlParams_.Set("updateMask", updateMask) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *FoldersUpdateAutokeyConfigCall) Fields(s ...googleapi.Field) *FoldersUpdateAutokeyConfigCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *FoldersUpdateAutokeyConfigCall) Context(ctx context.Context) *FoldersUpdateAutokeyConfigCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *FoldersUpdateAutokeyConfigCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *FoldersUpdateAutokeyConfigCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.autokeyconfig) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("PATCH", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.folders.updateAutokeyConfig", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.folders.updateAutokeyConfig" call. // Any non-2xx status code is an error. Response headers are in either // *AutokeyConfig.ServerResponse.Header or (if a response was returned at all) // in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *FoldersUpdateAutokeyConfigCall) Do(opts ...googleapi.CallOption) (*AutokeyConfig, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &AutokeyConfig{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.folders.updateAutokeyConfig", "response", internallog.HTTPResponse(res, b)) return ret, nil } type FoldersUpdateKajPolicyConfigCall struct { s *Service name string keyaccessjustificationspolicyconfig *KeyAccessJustificationsPolicyConfig urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // UpdateKajPolicyConfig: Updates the KeyAccessJustificationsPolicyConfig for a // given organization, folder, or project. // // - name: Identifier. Represents the resource name for this // KeyAccessJustificationsPolicyConfig in the format of // "{organizations|folders|projects}/*/kajPolicyConfig". func (r *FoldersService) UpdateKajPolicyConfig(name string, keyaccessjustificationspolicyconfig *KeyAccessJustificationsPolicyConfig) *FoldersUpdateKajPolicyConfigCall { c := &FoldersUpdateKajPolicyConfigCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name c.keyaccessjustificationspolicyconfig = keyaccessjustificationspolicyconfig return c } // UpdateMask sets the optional parameter "updateMask": Specifies the list of // fields to update. func (c *FoldersUpdateKajPolicyConfigCall) UpdateMask(updateMask string) *FoldersUpdateKajPolicyConfigCall { c.urlParams_.Set("updateMask", updateMask) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *FoldersUpdateKajPolicyConfigCall) Fields(s ...googleapi.Field) *FoldersUpdateKajPolicyConfigCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *FoldersUpdateKajPolicyConfigCall) Context(ctx context.Context) *FoldersUpdateKajPolicyConfigCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *FoldersUpdateKajPolicyConfigCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *FoldersUpdateKajPolicyConfigCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.keyaccessjustificationspolicyconfig) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("PATCH", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.folders.updateKajPolicyConfig", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.folders.updateKajPolicyConfig" call. // Any non-2xx status code is an error. Response headers are in either // *KeyAccessJustificationsPolicyConfig.ServerResponse.Header or (if a response // was returned at all) in error.(*googleapi.Error).Header. Use // googleapi.IsNotModified to check whether the returned error was because // http.StatusNotModified was returned. func (c *FoldersUpdateKajPolicyConfigCall) Do(opts ...googleapi.CallOption) (*KeyAccessJustificationsPolicyConfig, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &KeyAccessJustificationsPolicyConfig{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.folders.updateKajPolicyConfig", "response", internallog.HTTPResponse(res, b)) return ret, nil } type OrganizationsGetKajPolicyConfigCall struct { s *Service name string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // GetKajPolicyConfig: Gets the KeyAccessJustificationsPolicyConfig for a given // organization, folder, or project. // // - name: Specifies the name of the KeyAccessJustificationsPolicyConfig to // get. func (r *OrganizationsService) GetKajPolicyConfig(name string) *OrganizationsGetKajPolicyConfigCall { c := &OrganizationsGetKajPolicyConfigCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *OrganizationsGetKajPolicyConfigCall) Fields(s ...googleapi.Field) *OrganizationsGetKajPolicyConfigCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *OrganizationsGetKajPolicyConfigCall) IfNoneMatch(entityTag string) *OrganizationsGetKajPolicyConfigCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *OrganizationsGetKajPolicyConfigCall) Context(ctx context.Context) *OrganizationsGetKajPolicyConfigCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *OrganizationsGetKajPolicyConfigCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *OrganizationsGetKajPolicyConfigCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.organizations.getKajPolicyConfig", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.organizations.getKajPolicyConfig" call. // Any non-2xx status code is an error. Response headers are in either // *KeyAccessJustificationsPolicyConfig.ServerResponse.Header or (if a response // was returned at all) in error.(*googleapi.Error).Header. Use // googleapi.IsNotModified to check whether the returned error was because // http.StatusNotModified was returned. func (c *OrganizationsGetKajPolicyConfigCall) Do(opts ...googleapi.CallOption) (*KeyAccessJustificationsPolicyConfig, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &KeyAccessJustificationsPolicyConfig{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.organizations.getKajPolicyConfig", "response", internallog.HTTPResponse(res, b)) return ret, nil } type OrganizationsUpdateKajPolicyConfigCall struct { s *Service name string keyaccessjustificationspolicyconfig *KeyAccessJustificationsPolicyConfig urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // UpdateKajPolicyConfig: Updates the KeyAccessJustificationsPolicyConfig for a // given organization, folder, or project. // // - name: Identifier. Represents the resource name for this // KeyAccessJustificationsPolicyConfig in the format of // "{organizations|folders|projects}/*/kajPolicyConfig". func (r *OrganizationsService) UpdateKajPolicyConfig(name string, keyaccessjustificationspolicyconfig *KeyAccessJustificationsPolicyConfig) *OrganizationsUpdateKajPolicyConfigCall { c := &OrganizationsUpdateKajPolicyConfigCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name c.keyaccessjustificationspolicyconfig = keyaccessjustificationspolicyconfig return c } // UpdateMask sets the optional parameter "updateMask": Specifies the list of // fields to update. func (c *OrganizationsUpdateKajPolicyConfigCall) UpdateMask(updateMask string) *OrganizationsUpdateKajPolicyConfigCall { c.urlParams_.Set("updateMask", updateMask) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *OrganizationsUpdateKajPolicyConfigCall) Fields(s ...googleapi.Field) *OrganizationsUpdateKajPolicyConfigCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *OrganizationsUpdateKajPolicyConfigCall) Context(ctx context.Context) *OrganizationsUpdateKajPolicyConfigCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *OrganizationsUpdateKajPolicyConfigCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *OrganizationsUpdateKajPolicyConfigCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.keyaccessjustificationspolicyconfig) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("PATCH", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.organizations.updateKajPolicyConfig", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.organizations.updateKajPolicyConfig" call. // Any non-2xx status code is an error. Response headers are in either // *KeyAccessJustificationsPolicyConfig.ServerResponse.Header or (if a response // was returned at all) in error.(*googleapi.Error).Header. Use // googleapi.IsNotModified to check whether the returned error was because // http.StatusNotModified was returned. func (c *OrganizationsUpdateKajPolicyConfigCall) Do(opts ...googleapi.CallOption) (*KeyAccessJustificationsPolicyConfig, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &KeyAccessJustificationsPolicyConfig{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.organizations.updateKajPolicyConfig", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsGetAutokeyConfigCall struct { s *Service name string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // GetAutokeyConfig: Returns the AutokeyConfig for a folder or project. // // - name: Name of the AutokeyConfig resource, e.g. // `folders/{FOLDER_NUMBER}/autokeyConfig` or // `projects/{PROJECT_NUMBER}/autokeyConfig`. func (r *ProjectsService) GetAutokeyConfig(name string) *ProjectsGetAutokeyConfigCall { c := &ProjectsGetAutokeyConfigCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsGetAutokeyConfigCall) Fields(s ...googleapi.Field) *ProjectsGetAutokeyConfigCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsGetAutokeyConfigCall) IfNoneMatch(entityTag string) *ProjectsGetAutokeyConfigCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsGetAutokeyConfigCall) Context(ctx context.Context) *ProjectsGetAutokeyConfigCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsGetAutokeyConfigCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsGetAutokeyConfigCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.getAutokeyConfig", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.getAutokeyConfig" call. // Any non-2xx status code is an error. Response headers are in either // *AutokeyConfig.ServerResponse.Header or (if a response was returned at all) // in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsGetAutokeyConfigCall) Do(opts ...googleapi.CallOption) (*AutokeyConfig, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &AutokeyConfig{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.getAutokeyConfig", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsGetKajPolicyConfigCall struct { s *Service name string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // GetKajPolicyConfig: Gets the KeyAccessJustificationsPolicyConfig for a given // organization, folder, or project. // // - name: Specifies the name of the KeyAccessJustificationsPolicyConfig to // get. func (r *ProjectsService) GetKajPolicyConfig(name string) *ProjectsGetKajPolicyConfigCall { c := &ProjectsGetKajPolicyConfigCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsGetKajPolicyConfigCall) Fields(s ...googleapi.Field) *ProjectsGetKajPolicyConfigCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsGetKajPolicyConfigCall) IfNoneMatch(entityTag string) *ProjectsGetKajPolicyConfigCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsGetKajPolicyConfigCall) Context(ctx context.Context) *ProjectsGetKajPolicyConfigCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsGetKajPolicyConfigCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsGetKajPolicyConfigCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.getKajPolicyConfig", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.getKajPolicyConfig" call. // Any non-2xx status code is an error. Response headers are in either // *KeyAccessJustificationsPolicyConfig.ServerResponse.Header or (if a response // was returned at all) in error.(*googleapi.Error).Header. Use // googleapi.IsNotModified to check whether the returned error was because // http.StatusNotModified was returned. func (c *ProjectsGetKajPolicyConfigCall) Do(opts ...googleapi.CallOption) (*KeyAccessJustificationsPolicyConfig, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &KeyAccessJustificationsPolicyConfig{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.getKajPolicyConfig", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsShowEffectiveAutokeyConfigCall struct { s *Service parent string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // ShowEffectiveAutokeyConfig: Returns the effective Cloud KMS Autokey // configuration for a given project. // // - parent: Name of the resource project to the show effective Cloud KMS // Autokey configuration for. This may be helpful for interrogating the // effect of nested folder configurations on a given resource project. func (r *ProjectsService) ShowEffectiveAutokeyConfig(parent string) *ProjectsShowEffectiveAutokeyConfigCall { c := &ProjectsShowEffectiveAutokeyConfigCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.parent = parent return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsShowEffectiveAutokeyConfigCall) Fields(s ...googleapi.Field) *ProjectsShowEffectiveAutokeyConfigCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsShowEffectiveAutokeyConfigCall) IfNoneMatch(entityTag string) *ProjectsShowEffectiveAutokeyConfigCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsShowEffectiveAutokeyConfigCall) Context(ctx context.Context) *ProjectsShowEffectiveAutokeyConfigCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsShowEffectiveAutokeyConfigCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsShowEffectiveAutokeyConfigCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+parent}:showEffectiveAutokeyConfig") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "parent": c.parent, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.showEffectiveAutokeyConfig", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.showEffectiveAutokeyConfig" call. // Any non-2xx status code is an error. Response headers are in either // *ShowEffectiveAutokeyConfigResponse.ServerResponse.Header or (if a response // was returned at all) in error.(*googleapi.Error).Header. Use // googleapi.IsNotModified to check whether the returned error was because // http.StatusNotModified was returned. func (c *ProjectsShowEffectiveAutokeyConfigCall) Do(opts ...googleapi.CallOption) (*ShowEffectiveAutokeyConfigResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &ShowEffectiveAutokeyConfigResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.showEffectiveAutokeyConfig", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsShowEffectiveKeyAccessJustificationsEnrollmentConfigCall struct { s *Service project string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // ShowEffectiveKeyAccessJustificationsEnrollmentConfig: Returns the // KeyAccessJustificationsEnrollmentConfig of the resource closest to the given // project in hierarchy. // // - project: Specifies the number or id of the project to get the effective // KeyAccessJustificationsEnrollmentConfig for. func (r *ProjectsService) ShowEffectiveKeyAccessJustificationsEnrollmentConfig(project string) *ProjectsShowEffectiveKeyAccessJustificationsEnrollmentConfigCall { c := &ProjectsShowEffectiveKeyAccessJustificationsEnrollmentConfigCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.project = project return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsShowEffectiveKeyAccessJustificationsEnrollmentConfigCall) Fields(s ...googleapi.Field) *ProjectsShowEffectiveKeyAccessJustificationsEnrollmentConfigCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsShowEffectiveKeyAccessJustificationsEnrollmentConfigCall) IfNoneMatch(entityTag string) *ProjectsShowEffectiveKeyAccessJustificationsEnrollmentConfigCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsShowEffectiveKeyAccessJustificationsEnrollmentConfigCall) Context(ctx context.Context) *ProjectsShowEffectiveKeyAccessJustificationsEnrollmentConfigCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsShowEffectiveKeyAccessJustificationsEnrollmentConfigCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsShowEffectiveKeyAccessJustificationsEnrollmentConfigCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+project}:showEffectiveKeyAccessJustificationsEnrollmentConfig") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "project": c.project, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.showEffectiveKeyAccessJustificationsEnrollmentConfig", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.showEffectiveKeyAccessJustificationsEnrollmentConfig" call. // Any non-2xx status code is an error. Response headers are in either // *ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse.ServerResponse. // Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsShowEffectiveKeyAccessJustificationsEnrollmentConfigCall) Do(opts ...googleapi.CallOption) (*ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &ShowEffectiveKeyAccessJustificationsEnrollmentConfigResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.showEffectiveKeyAccessJustificationsEnrollmentConfig", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsShowEffectiveKeyAccessJustificationsPolicyConfigCall struct { s *Service project string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // ShowEffectiveKeyAccessJustificationsPolicyConfig: Returns the // KeyAccessJustificationsPolicyConfig of the resource closest to the given // project in hierarchy. // // - project: Specifies the number or id of the project to get the effective // KeyAccessJustificationsPolicyConfig. In the format of "projects/{|}". func (r *ProjectsService) ShowEffectiveKeyAccessJustificationsPolicyConfig(project string) *ProjectsShowEffectiveKeyAccessJustificationsPolicyConfigCall { c := &ProjectsShowEffectiveKeyAccessJustificationsPolicyConfigCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.project = project return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsShowEffectiveKeyAccessJustificationsPolicyConfigCall) Fields(s ...googleapi.Field) *ProjectsShowEffectiveKeyAccessJustificationsPolicyConfigCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsShowEffectiveKeyAccessJustificationsPolicyConfigCall) IfNoneMatch(entityTag string) *ProjectsShowEffectiveKeyAccessJustificationsPolicyConfigCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsShowEffectiveKeyAccessJustificationsPolicyConfigCall) Context(ctx context.Context) *ProjectsShowEffectiveKeyAccessJustificationsPolicyConfigCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsShowEffectiveKeyAccessJustificationsPolicyConfigCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsShowEffectiveKeyAccessJustificationsPolicyConfigCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+project}:showEffectiveKeyAccessJustificationsPolicyConfig") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "project": c.project, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.showEffectiveKeyAccessJustificationsPolicyConfig", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.showEffectiveKeyAccessJustificationsPolicyConfig" call. // Any non-2xx status code is an error. Response headers are in either // *ShowEffectiveKeyAccessJustificationsPolicyConfigResponse.ServerResponse.Head // er or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsShowEffectiveKeyAccessJustificationsPolicyConfigCall) Do(opts ...googleapi.CallOption) (*ShowEffectiveKeyAccessJustificationsPolicyConfigResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &ShowEffectiveKeyAccessJustificationsPolicyConfigResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.showEffectiveKeyAccessJustificationsPolicyConfig", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsUpdateAutokeyConfigCall struct { s *Service name string autokeyconfig *AutokeyConfig urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // UpdateAutokeyConfig: Updates the AutokeyConfig for a folder or a project. // The caller must have both `cloudkms.autokeyConfigs.update` permission on the // parent folder and `cloudkms.cryptoKeys.setIamPolicy` permission on the // provided key project. A KeyHandle creation in the folder's descendant // projects will use this configuration to determine where to create the // resulting CryptoKey. // // - name: Identifier. Name of the AutokeyConfig resource, e.g. // `folders/{FOLDER_NUMBER}/autokeyConfig` or // `projects/{PROJECT_NUMBER}/autokeyConfig`. func (r *ProjectsService) UpdateAutokeyConfig(name string, autokeyconfig *AutokeyConfig) *ProjectsUpdateAutokeyConfigCall { c := &ProjectsUpdateAutokeyConfigCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name c.autokeyconfig = autokeyconfig return c } // UpdateMask sets the optional parameter "updateMask": Required. Masks which // fields of the AutokeyConfig to update, e.g. `keyProject`. func (c *ProjectsUpdateAutokeyConfigCall) UpdateMask(updateMask string) *ProjectsUpdateAutokeyConfigCall { c.urlParams_.Set("updateMask", updateMask) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsUpdateAutokeyConfigCall) Fields(s ...googleapi.Field) *ProjectsUpdateAutokeyConfigCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsUpdateAutokeyConfigCall) Context(ctx context.Context) *ProjectsUpdateAutokeyConfigCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsUpdateAutokeyConfigCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsUpdateAutokeyConfigCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.autokeyconfig) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("PATCH", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.updateAutokeyConfig", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.updateAutokeyConfig" call. // Any non-2xx status code is an error. Response headers are in either // *AutokeyConfig.ServerResponse.Header or (if a response was returned at all) // in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsUpdateAutokeyConfigCall) Do(opts ...googleapi.CallOption) (*AutokeyConfig, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &AutokeyConfig{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.updateAutokeyConfig", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsUpdateKajPolicyConfigCall struct { s *Service name string keyaccessjustificationspolicyconfig *KeyAccessJustificationsPolicyConfig urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // UpdateKajPolicyConfig: Updates the KeyAccessJustificationsPolicyConfig for a // given organization, folder, or project. // // - name: Identifier. Represents the resource name for this // KeyAccessJustificationsPolicyConfig in the format of // "{organizations|folders|projects}/*/kajPolicyConfig". func (r *ProjectsService) UpdateKajPolicyConfig(name string, keyaccessjustificationspolicyconfig *KeyAccessJustificationsPolicyConfig) *ProjectsUpdateKajPolicyConfigCall { c := &ProjectsUpdateKajPolicyConfigCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name c.keyaccessjustificationspolicyconfig = keyaccessjustificationspolicyconfig return c } // UpdateMask sets the optional parameter "updateMask": Specifies the list of // fields to update. func (c *ProjectsUpdateKajPolicyConfigCall) UpdateMask(updateMask string) *ProjectsUpdateKajPolicyConfigCall { c.urlParams_.Set("updateMask", updateMask) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsUpdateKajPolicyConfigCall) Fields(s ...googleapi.Field) *ProjectsUpdateKajPolicyConfigCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsUpdateKajPolicyConfigCall) Context(ctx context.Context) *ProjectsUpdateKajPolicyConfigCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsUpdateKajPolicyConfigCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsUpdateKajPolicyConfigCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.keyaccessjustificationspolicyconfig) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("PATCH", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.updateKajPolicyConfig", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.updateKajPolicyConfig" call. // Any non-2xx status code is an error. Response headers are in either // *KeyAccessJustificationsPolicyConfig.ServerResponse.Header or (if a response // was returned at all) in error.(*googleapi.Error).Header. Use // googleapi.IsNotModified to check whether the returned error was because // http.StatusNotModified was returned. func (c *ProjectsUpdateKajPolicyConfigCall) Do(opts ...googleapi.CallOption) (*KeyAccessJustificationsPolicyConfig, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &KeyAccessJustificationsPolicyConfig{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.updateKajPolicyConfig", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsGenerateRandomBytesCall struct { s *Service location string generaterandombytesrequest *GenerateRandomBytesRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // GenerateRandomBytes: Generate random bytes using the Cloud KMS randomness // source in the provided location. // // - location: The project-specific location in which to generate random bytes. // For example, "projects/my-project/locations/us-central1". func (r *ProjectsLocationsService) GenerateRandomBytes(location string, generaterandombytesrequest *GenerateRandomBytesRequest) *ProjectsLocationsGenerateRandomBytesCall { c := &ProjectsLocationsGenerateRandomBytesCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.location = location c.generaterandombytesrequest = generaterandombytesrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsGenerateRandomBytesCall) Fields(s ...googleapi.Field) *ProjectsLocationsGenerateRandomBytesCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsGenerateRandomBytesCall) Context(ctx context.Context) *ProjectsLocationsGenerateRandomBytesCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsGenerateRandomBytesCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsGenerateRandomBytesCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.generaterandombytesrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+location}:generateRandomBytes") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "location": c.location, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.generateRandomBytes", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.generateRandomBytes" call. // Any non-2xx status code is an error. Response headers are in either // *GenerateRandomBytesResponse.ServerResponse.Header or (if a response was // returned at all) in error.(*googleapi.Error).Header. Use // googleapi.IsNotModified to check whether the returned error was because // http.StatusNotModified was returned. func (c *ProjectsLocationsGenerateRandomBytesCall) Do(opts ...googleapi.CallOption) (*GenerateRandomBytesResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &GenerateRandomBytesResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.generateRandomBytes", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsGetCall struct { s *Service name string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // Get: Gets information about a location. // // - name: Resource name for the location. func (r *ProjectsLocationsService) Get(name string) *ProjectsLocationsGetCall { c := &ProjectsLocationsGetCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsGetCall) Fields(s ...googleapi.Field) *ProjectsLocationsGetCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsGetCall) IfNoneMatch(entityTag string) *ProjectsLocationsGetCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsGetCall) Context(ctx context.Context) *ProjectsLocationsGetCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsGetCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsGetCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.get", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.get" call. // Any non-2xx status code is an error. Response headers are in either // *Location.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsGetCall) Do(opts ...googleapi.CallOption) (*Location, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &Location{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.get", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsGetEkmConfigCall struct { s *Service name string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // GetEkmConfig: Returns the EkmConfig singleton resource for a given project // and location. // // - name: The name of the EkmConfig to get. func (r *ProjectsLocationsService) GetEkmConfig(name string) *ProjectsLocationsGetEkmConfigCall { c := &ProjectsLocationsGetEkmConfigCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsGetEkmConfigCall) Fields(s ...googleapi.Field) *ProjectsLocationsGetEkmConfigCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsGetEkmConfigCall) IfNoneMatch(entityTag string) *ProjectsLocationsGetEkmConfigCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsGetEkmConfigCall) Context(ctx context.Context) *ProjectsLocationsGetEkmConfigCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsGetEkmConfigCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsGetEkmConfigCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.getEkmConfig", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.getEkmConfig" call. // Any non-2xx status code is an error. Response headers are in either // *EkmConfig.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsGetEkmConfigCall) Do(opts ...googleapi.CallOption) (*EkmConfig, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &EkmConfig{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.getEkmConfig", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsListCall struct { s *Service name string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // List: Lists information about the supported locations for this service. This // method lists locations based on the resource scope provided in the // [ListLocationsRequest.name] field: * **Global locations**: If `name` is // empty, the method lists the public locations available to all projects. * // **Project-specific locations**: If `name` follows the format // `projects/{project}`, the method lists locations visible to that specific // project. This includes public, private, or other project-specific locations // enabled for the project. For gRPC and client library implementations, the // resource name is passed as the `name` field. For direct service calls, the // resource name is incorporated into the request path based on the specific // service implementation and version. // // - name: The resource that owns the locations collection, if applicable. func (r *ProjectsLocationsService) List(name string) *ProjectsLocationsListCall { c := &ProjectsLocationsListCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name return c } // ExtraLocationTypes sets the optional parameter "extraLocationTypes": Do not // use this field. It is unsupported and is ignored unless explicitly // documented otherwise. This is primarily for internal usage. func (c *ProjectsLocationsListCall) ExtraLocationTypes(extraLocationTypes ...string) *ProjectsLocationsListCall { c.urlParams_.SetMulti("extraLocationTypes", append([]string{}, extraLocationTypes...)) return c } // Filter sets the optional parameter "filter": A filter to narrow down results // to a preferred subset. The filtering language accepts strings like // "displayName=tokyo", and is documented in more detail in AIP-160 // (https://google.aip.dev/160). func (c *ProjectsLocationsListCall) Filter(filter string) *ProjectsLocationsListCall { c.urlParams_.Set("filter", filter) return c } // PageSize sets the optional parameter "pageSize": The maximum number of // results to return. If not set, the service selects a default. func (c *ProjectsLocationsListCall) PageSize(pageSize int64) *ProjectsLocationsListCall { c.urlParams_.Set("pageSize", fmt.Sprint(pageSize)) return c } // PageToken sets the optional parameter "pageToken": A page token received // from the `next_page_token` field in the response. Send that page token to // receive the subsequent page. func (c *ProjectsLocationsListCall) PageToken(pageToken string) *ProjectsLocationsListCall { c.urlParams_.Set("pageToken", pageToken) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsListCall) Fields(s ...googleapi.Field) *ProjectsLocationsListCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsListCall) IfNoneMatch(entityTag string) *ProjectsLocationsListCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsListCall) Context(ctx context.Context) *ProjectsLocationsListCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsListCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsListCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}/locations") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.list", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.list" call. // Any non-2xx status code is an error. Response headers are in either // *ListLocationsResponse.ServerResponse.Header or (if a response was returned // at all) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to // check whether the returned error was because http.StatusNotModified was // returned. func (c *ProjectsLocationsListCall) Do(opts ...googleapi.CallOption) (*ListLocationsResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &ListLocationsResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.list", "response", internallog.HTTPResponse(res, b)) return ret, nil } // Pages invokes f for each page of results. // A non-nil error returned from f will halt the iteration. // The provided context supersedes any context provided to the Context method. func (c *ProjectsLocationsListCall) Pages(ctx context.Context, f func(*ListLocationsResponse) error) error { c.ctx_ = ctx defer c.PageToken(c.urlParams_.Get("pageToken")) for { x, err := c.Do() if err != nil { return err } if err := f(x); err != nil { return err } if x.NextPageToken == "" { return nil } c.PageToken(x.NextPageToken) } } type ProjectsLocationsUpdateEkmConfigCall struct { s *Service name string ekmconfig *EkmConfig urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // UpdateEkmConfig: Updates the EkmConfig singleton resource for a given // project and location. // // - name: Output only. The resource name for the EkmConfig in the format // `projects/*/locations/*/ekmConfig`. func (r *ProjectsLocationsService) UpdateEkmConfig(name string, ekmconfig *EkmConfig) *ProjectsLocationsUpdateEkmConfigCall { c := &ProjectsLocationsUpdateEkmConfigCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name c.ekmconfig = ekmconfig return c } // UpdateMask sets the optional parameter "updateMask": Required. List of // fields to be updated in this request. func (c *ProjectsLocationsUpdateEkmConfigCall) UpdateMask(updateMask string) *ProjectsLocationsUpdateEkmConfigCall { c.urlParams_.Set("updateMask", updateMask) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsUpdateEkmConfigCall) Fields(s ...googleapi.Field) *ProjectsLocationsUpdateEkmConfigCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsUpdateEkmConfigCall) Context(ctx context.Context) *ProjectsLocationsUpdateEkmConfigCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsUpdateEkmConfigCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsUpdateEkmConfigCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.ekmconfig) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("PATCH", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.updateEkmConfig", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.updateEkmConfig" call. // Any non-2xx status code is an error. Response headers are in either // *EkmConfig.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsUpdateEkmConfigCall) Do(opts ...googleapi.CallOption) (*EkmConfig, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &EkmConfig{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.updateEkmConfig", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsEkmConfigGetIamPolicyCall struct { s *Service resource string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // GetIamPolicy: Gets the access control policy for a resource. Returns an // empty policy if the resource exists and does not have a policy set. // // - resource: REQUIRED: The resource for which the policy is being requested. // See Resource names (https://cloud.google.com/apis/design/resource_names) // for the appropriate value for this field. func (r *ProjectsLocationsEkmConfigService) GetIamPolicy(resource string) *ProjectsLocationsEkmConfigGetIamPolicyCall { c := &ProjectsLocationsEkmConfigGetIamPolicyCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.resource = resource return c } // OptionsRequestedPolicyVersion sets the optional parameter // "options.requestedPolicyVersion": The maximum policy version that will be // used to format the policy. Valid values are 0, 1, and 3. Requests specifying // an invalid value will be rejected. Requests for policies with any // conditional role bindings must specify version 3. Policies with no // conditional role bindings may specify any valid value or leave the field // unset. The policy in the response might use the policy version that you // specified, or it might use a lower policy version. For example, if you // specify version 3, but the policy has no conditional role bindings, the // response uses version 1. To learn which resources support conditions in // their IAM policies, see the IAM documentation // (https://cloud.google.com/iam/help/conditions/resource-policies). func (c *ProjectsLocationsEkmConfigGetIamPolicyCall) OptionsRequestedPolicyVersion(optionsRequestedPolicyVersion int64) *ProjectsLocationsEkmConfigGetIamPolicyCall { c.urlParams_.Set("options.requestedPolicyVersion", fmt.Sprint(optionsRequestedPolicyVersion)) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsEkmConfigGetIamPolicyCall) Fields(s ...googleapi.Field) *ProjectsLocationsEkmConfigGetIamPolicyCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsEkmConfigGetIamPolicyCall) IfNoneMatch(entityTag string) *ProjectsLocationsEkmConfigGetIamPolicyCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsEkmConfigGetIamPolicyCall) Context(ctx context.Context) *ProjectsLocationsEkmConfigGetIamPolicyCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsEkmConfigGetIamPolicyCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsEkmConfigGetIamPolicyCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+resource}:getIamPolicy") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "resource": c.resource, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.ekmConfig.getIamPolicy", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.ekmConfig.getIamPolicy" call. // Any non-2xx status code is an error. Response headers are in either // *Policy.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsEkmConfigGetIamPolicyCall) Do(opts ...googleapi.CallOption) (*Policy, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &Policy{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.ekmConfig.getIamPolicy", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsEkmConfigSetIamPolicyCall struct { s *Service resource string setiampolicyrequest *SetIamPolicyRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // SetIamPolicy: Sets the access control policy on the specified resource. // Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, // and `PERMISSION_DENIED` errors. // // - resource: REQUIRED: The resource for which the policy is being specified. // See Resource names (https://cloud.google.com/apis/design/resource_names) // for the appropriate value for this field. func (r *ProjectsLocationsEkmConfigService) SetIamPolicy(resource string, setiampolicyrequest *SetIamPolicyRequest) *ProjectsLocationsEkmConfigSetIamPolicyCall { c := &ProjectsLocationsEkmConfigSetIamPolicyCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.resource = resource c.setiampolicyrequest = setiampolicyrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsEkmConfigSetIamPolicyCall) Fields(s ...googleapi.Field) *ProjectsLocationsEkmConfigSetIamPolicyCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsEkmConfigSetIamPolicyCall) Context(ctx context.Context) *ProjectsLocationsEkmConfigSetIamPolicyCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsEkmConfigSetIamPolicyCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsEkmConfigSetIamPolicyCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.setiampolicyrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+resource}:setIamPolicy") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "resource": c.resource, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.ekmConfig.setIamPolicy", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.ekmConfig.setIamPolicy" call. // Any non-2xx status code is an error. Response headers are in either // *Policy.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsEkmConfigSetIamPolicyCall) Do(opts ...googleapi.CallOption) (*Policy, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &Policy{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.ekmConfig.setIamPolicy", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsEkmConfigTestIamPermissionsCall struct { s *Service resource string testiampermissionsrequest *TestIamPermissionsRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // TestIamPermissions: Returns permissions that a caller has on the specified // resource. If the resource does not exist, this will return an empty set of // permissions, not a `NOT_FOUND` error. Note: This operation is designed to be // used for building permission-aware UIs and command-line tools, not for // authorization checking. This operation may "fail open" without warning. // // - resource: REQUIRED: The resource for which the policy detail is being // requested. See Resource names // (https://cloud.google.com/apis/design/resource_names) for the appropriate // value for this field. func (r *ProjectsLocationsEkmConfigService) TestIamPermissions(resource string, testiampermissionsrequest *TestIamPermissionsRequest) *ProjectsLocationsEkmConfigTestIamPermissionsCall { c := &ProjectsLocationsEkmConfigTestIamPermissionsCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.resource = resource c.testiampermissionsrequest = testiampermissionsrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsEkmConfigTestIamPermissionsCall) Fields(s ...googleapi.Field) *ProjectsLocationsEkmConfigTestIamPermissionsCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsEkmConfigTestIamPermissionsCall) Context(ctx context.Context) *ProjectsLocationsEkmConfigTestIamPermissionsCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsEkmConfigTestIamPermissionsCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsEkmConfigTestIamPermissionsCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.testiampermissionsrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+resource}:testIamPermissions") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "resource": c.resource, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.ekmConfig.testIamPermissions", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.ekmConfig.testIamPermissions" call. // Any non-2xx status code is an error. Response headers are in either // *TestIamPermissionsResponse.ServerResponse.Header or (if a response was // returned at all) in error.(*googleapi.Error).Header. Use // googleapi.IsNotModified to check whether the returned error was because // http.StatusNotModified was returned. func (c *ProjectsLocationsEkmConfigTestIamPermissionsCall) Do(opts ...googleapi.CallOption) (*TestIamPermissionsResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &TestIamPermissionsResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.ekmConfig.testIamPermissions", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsEkmConnectionsCreateCall struct { s *Service parent string ekmconnection *EkmConnection urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // Create: Creates a new EkmConnection in a given Project and Location. // // - parent: The resource name of the location associated with the // EkmConnection, in the format `projects/*/locations/*`. func (r *ProjectsLocationsEkmConnectionsService) Create(parent string, ekmconnection *EkmConnection) *ProjectsLocationsEkmConnectionsCreateCall { c := &ProjectsLocationsEkmConnectionsCreateCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.parent = parent c.ekmconnection = ekmconnection return c } // EkmConnectionId sets the optional parameter "ekmConnectionId": Required. It // must be unique within a location and match the regular expression // `[a-zA-Z0-9_-]{1,63}`. func (c *ProjectsLocationsEkmConnectionsCreateCall) EkmConnectionId(ekmConnectionId string) *ProjectsLocationsEkmConnectionsCreateCall { c.urlParams_.Set("ekmConnectionId", ekmConnectionId) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsEkmConnectionsCreateCall) Fields(s ...googleapi.Field) *ProjectsLocationsEkmConnectionsCreateCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsEkmConnectionsCreateCall) Context(ctx context.Context) *ProjectsLocationsEkmConnectionsCreateCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsEkmConnectionsCreateCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsEkmConnectionsCreateCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.ekmconnection) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+parent}/ekmConnections") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "parent": c.parent, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.ekmConnections.create", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.ekmConnections.create" call. // Any non-2xx status code is an error. Response headers are in either // *EkmConnection.ServerResponse.Header or (if a response was returned at all) // in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsEkmConnectionsCreateCall) Do(opts ...googleapi.CallOption) (*EkmConnection, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &EkmConnection{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.ekmConnections.create", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsEkmConnectionsGetCall struct { s *Service name string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // Get: Returns metadata for a given EkmConnection. // // - name: The name of the EkmConnection to get. func (r *ProjectsLocationsEkmConnectionsService) Get(name string) *ProjectsLocationsEkmConnectionsGetCall { c := &ProjectsLocationsEkmConnectionsGetCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsEkmConnectionsGetCall) Fields(s ...googleapi.Field) *ProjectsLocationsEkmConnectionsGetCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsEkmConnectionsGetCall) IfNoneMatch(entityTag string) *ProjectsLocationsEkmConnectionsGetCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsEkmConnectionsGetCall) Context(ctx context.Context) *ProjectsLocationsEkmConnectionsGetCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsEkmConnectionsGetCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsEkmConnectionsGetCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.ekmConnections.get", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.ekmConnections.get" call. // Any non-2xx status code is an error. Response headers are in either // *EkmConnection.ServerResponse.Header or (if a response was returned at all) // in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsEkmConnectionsGetCall) Do(opts ...googleapi.CallOption) (*EkmConnection, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &EkmConnection{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.ekmConnections.get", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsEkmConnectionsGetIamPolicyCall struct { s *Service resource string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // GetIamPolicy: Gets the access control policy for a resource. Returns an // empty policy if the resource exists and does not have a policy set. // // - resource: REQUIRED: The resource for which the policy is being requested. // See Resource names (https://cloud.google.com/apis/design/resource_names) // for the appropriate value for this field. func (r *ProjectsLocationsEkmConnectionsService) GetIamPolicy(resource string) *ProjectsLocationsEkmConnectionsGetIamPolicyCall { c := &ProjectsLocationsEkmConnectionsGetIamPolicyCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.resource = resource return c } // OptionsRequestedPolicyVersion sets the optional parameter // "options.requestedPolicyVersion": The maximum policy version that will be // used to format the policy. Valid values are 0, 1, and 3. Requests specifying // an invalid value will be rejected. Requests for policies with any // conditional role bindings must specify version 3. Policies with no // conditional role bindings may specify any valid value or leave the field // unset. The policy in the response might use the policy version that you // specified, or it might use a lower policy version. For example, if you // specify version 3, but the policy has no conditional role bindings, the // response uses version 1. To learn which resources support conditions in // their IAM policies, see the IAM documentation // (https://cloud.google.com/iam/help/conditions/resource-policies). func (c *ProjectsLocationsEkmConnectionsGetIamPolicyCall) OptionsRequestedPolicyVersion(optionsRequestedPolicyVersion int64) *ProjectsLocationsEkmConnectionsGetIamPolicyCall { c.urlParams_.Set("options.requestedPolicyVersion", fmt.Sprint(optionsRequestedPolicyVersion)) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsEkmConnectionsGetIamPolicyCall) Fields(s ...googleapi.Field) *ProjectsLocationsEkmConnectionsGetIamPolicyCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsEkmConnectionsGetIamPolicyCall) IfNoneMatch(entityTag string) *ProjectsLocationsEkmConnectionsGetIamPolicyCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsEkmConnectionsGetIamPolicyCall) Context(ctx context.Context) *ProjectsLocationsEkmConnectionsGetIamPolicyCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsEkmConnectionsGetIamPolicyCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsEkmConnectionsGetIamPolicyCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+resource}:getIamPolicy") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "resource": c.resource, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.ekmConnections.getIamPolicy", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.ekmConnections.getIamPolicy" call. // Any non-2xx status code is an error. Response headers are in either // *Policy.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsEkmConnectionsGetIamPolicyCall) Do(opts ...googleapi.CallOption) (*Policy, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &Policy{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.ekmConnections.getIamPolicy", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsEkmConnectionsListCall struct { s *Service parent string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // List: Lists EkmConnections. // // - parent: The resource name of the location associated with the // EkmConnections to list, in the format `projects/*/locations/*`. func (r *ProjectsLocationsEkmConnectionsService) List(parent string) *ProjectsLocationsEkmConnectionsListCall { c := &ProjectsLocationsEkmConnectionsListCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.parent = parent return c } // Filter sets the optional parameter "filter": Only include resources that // match the filter in the response. For more information, see Sorting and // filtering list results // (https://cloud.google.com/kms/docs/sorting-and-filtering). func (c *ProjectsLocationsEkmConnectionsListCall) Filter(filter string) *ProjectsLocationsEkmConnectionsListCall { c.urlParams_.Set("filter", filter) return c } // OrderBy sets the optional parameter "orderBy": Specify how the results // should be sorted. If not specified, the results will be sorted in the // default order. For more information, see Sorting and filtering list results // (https://cloud.google.com/kms/docs/sorting-and-filtering). func (c *ProjectsLocationsEkmConnectionsListCall) OrderBy(orderBy string) *ProjectsLocationsEkmConnectionsListCall { c.urlParams_.Set("orderBy", orderBy) return c } // PageSize sets the optional parameter "pageSize": Optional limit on the // number of EkmConnections to include in the response. Further EkmConnections // can subsequently be obtained by including the // ListEkmConnectionsResponse.next_page_token in a subsequent request. If // unspecified, the server will pick an appropriate default. func (c *ProjectsLocationsEkmConnectionsListCall) PageSize(pageSize int64) *ProjectsLocationsEkmConnectionsListCall { c.urlParams_.Set("pageSize", fmt.Sprint(pageSize)) return c } // PageToken sets the optional parameter "pageToken": Optional pagination // token, returned earlier via ListEkmConnectionsResponse.next_page_token. func (c *ProjectsLocationsEkmConnectionsListCall) PageToken(pageToken string) *ProjectsLocationsEkmConnectionsListCall { c.urlParams_.Set("pageToken", pageToken) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsEkmConnectionsListCall) Fields(s ...googleapi.Field) *ProjectsLocationsEkmConnectionsListCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsEkmConnectionsListCall) IfNoneMatch(entityTag string) *ProjectsLocationsEkmConnectionsListCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsEkmConnectionsListCall) Context(ctx context.Context) *ProjectsLocationsEkmConnectionsListCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsEkmConnectionsListCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsEkmConnectionsListCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+parent}/ekmConnections") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "parent": c.parent, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.ekmConnections.list", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.ekmConnections.list" call. // Any non-2xx status code is an error. Response headers are in either // *ListEkmConnectionsResponse.ServerResponse.Header or (if a response was // returned at all) in error.(*googleapi.Error).Header. Use // googleapi.IsNotModified to check whether the returned error was because // http.StatusNotModified was returned. func (c *ProjectsLocationsEkmConnectionsListCall) Do(opts ...googleapi.CallOption) (*ListEkmConnectionsResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &ListEkmConnectionsResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.ekmConnections.list", "response", internallog.HTTPResponse(res, b)) return ret, nil } // Pages invokes f for each page of results. // A non-nil error returned from f will halt the iteration. // The provided context supersedes any context provided to the Context method. func (c *ProjectsLocationsEkmConnectionsListCall) Pages(ctx context.Context, f func(*ListEkmConnectionsResponse) error) error { c.ctx_ = ctx defer c.PageToken(c.urlParams_.Get("pageToken")) for { x, err := c.Do() if err != nil { return err } if err := f(x); err != nil { return err } if x.NextPageToken == "" { return nil } c.PageToken(x.NextPageToken) } } type ProjectsLocationsEkmConnectionsPatchCall struct { s *Service name string ekmconnection *EkmConnection urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // Patch: Updates an EkmConnection's metadata. // // - name: Output only. The resource name for the EkmConnection in the format // `projects/*/locations/*/ekmConnections/*`. func (r *ProjectsLocationsEkmConnectionsService) Patch(name string, ekmconnection *EkmConnection) *ProjectsLocationsEkmConnectionsPatchCall { c := &ProjectsLocationsEkmConnectionsPatchCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name c.ekmconnection = ekmconnection return c } // UpdateMask sets the optional parameter "updateMask": Required. List of // fields to be updated in this request. func (c *ProjectsLocationsEkmConnectionsPatchCall) UpdateMask(updateMask string) *ProjectsLocationsEkmConnectionsPatchCall { c.urlParams_.Set("updateMask", updateMask) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsEkmConnectionsPatchCall) Fields(s ...googleapi.Field) *ProjectsLocationsEkmConnectionsPatchCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsEkmConnectionsPatchCall) Context(ctx context.Context) *ProjectsLocationsEkmConnectionsPatchCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsEkmConnectionsPatchCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsEkmConnectionsPatchCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.ekmconnection) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("PATCH", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.ekmConnections.patch", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.ekmConnections.patch" call. // Any non-2xx status code is an error. Response headers are in either // *EkmConnection.ServerResponse.Header or (if a response was returned at all) // in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsEkmConnectionsPatchCall) Do(opts ...googleapi.CallOption) (*EkmConnection, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &EkmConnection{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.ekmConnections.patch", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsEkmConnectionsSetIamPolicyCall struct { s *Service resource string setiampolicyrequest *SetIamPolicyRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // SetIamPolicy: Sets the access control policy on the specified resource. // Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, // and `PERMISSION_DENIED` errors. // // - resource: REQUIRED: The resource for which the policy is being specified. // See Resource names (https://cloud.google.com/apis/design/resource_names) // for the appropriate value for this field. func (r *ProjectsLocationsEkmConnectionsService) SetIamPolicy(resource string, setiampolicyrequest *SetIamPolicyRequest) *ProjectsLocationsEkmConnectionsSetIamPolicyCall { c := &ProjectsLocationsEkmConnectionsSetIamPolicyCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.resource = resource c.setiampolicyrequest = setiampolicyrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsEkmConnectionsSetIamPolicyCall) Fields(s ...googleapi.Field) *ProjectsLocationsEkmConnectionsSetIamPolicyCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsEkmConnectionsSetIamPolicyCall) Context(ctx context.Context) *ProjectsLocationsEkmConnectionsSetIamPolicyCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsEkmConnectionsSetIamPolicyCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsEkmConnectionsSetIamPolicyCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.setiampolicyrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+resource}:setIamPolicy") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "resource": c.resource, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.ekmConnections.setIamPolicy", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.ekmConnections.setIamPolicy" call. // Any non-2xx status code is an error. Response headers are in either // *Policy.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsEkmConnectionsSetIamPolicyCall) Do(opts ...googleapi.CallOption) (*Policy, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &Policy{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.ekmConnections.setIamPolicy", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsEkmConnectionsTestIamPermissionsCall struct { s *Service resource string testiampermissionsrequest *TestIamPermissionsRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // TestIamPermissions: Returns permissions that a caller has on the specified // resource. If the resource does not exist, this will return an empty set of // permissions, not a `NOT_FOUND` error. Note: This operation is designed to be // used for building permission-aware UIs and command-line tools, not for // authorization checking. This operation may "fail open" without warning. // // - resource: REQUIRED: The resource for which the policy detail is being // requested. See Resource names // (https://cloud.google.com/apis/design/resource_names) for the appropriate // value for this field. func (r *ProjectsLocationsEkmConnectionsService) TestIamPermissions(resource string, testiampermissionsrequest *TestIamPermissionsRequest) *ProjectsLocationsEkmConnectionsTestIamPermissionsCall { c := &ProjectsLocationsEkmConnectionsTestIamPermissionsCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.resource = resource c.testiampermissionsrequest = testiampermissionsrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsEkmConnectionsTestIamPermissionsCall) Fields(s ...googleapi.Field) *ProjectsLocationsEkmConnectionsTestIamPermissionsCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsEkmConnectionsTestIamPermissionsCall) Context(ctx context.Context) *ProjectsLocationsEkmConnectionsTestIamPermissionsCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsEkmConnectionsTestIamPermissionsCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsEkmConnectionsTestIamPermissionsCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.testiampermissionsrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+resource}:testIamPermissions") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "resource": c.resource, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.ekmConnections.testIamPermissions", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.ekmConnections.testIamPermissions" call. // Any non-2xx status code is an error. Response headers are in either // *TestIamPermissionsResponse.ServerResponse.Header or (if a response was // returned at all) in error.(*googleapi.Error).Header. Use // googleapi.IsNotModified to check whether the returned error was because // http.StatusNotModified was returned. func (c *ProjectsLocationsEkmConnectionsTestIamPermissionsCall) Do(opts ...googleapi.CallOption) (*TestIamPermissionsResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &TestIamPermissionsResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.ekmConnections.testIamPermissions", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsEkmConnectionsVerifyConnectivityCall struct { s *Service name string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // VerifyConnectivity: Verifies that Cloud KMS can successfully connect to the // external key manager specified by an EkmConnection. If there is an error // connecting to the EKM, this method returns a FAILED_PRECONDITION status // containing structured information as described at // https://cloud.google.com/kms/docs/reference/ekm_errors. // // - name: The name of the EkmConnection to verify. func (r *ProjectsLocationsEkmConnectionsService) VerifyConnectivity(name string) *ProjectsLocationsEkmConnectionsVerifyConnectivityCall { c := &ProjectsLocationsEkmConnectionsVerifyConnectivityCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsEkmConnectionsVerifyConnectivityCall) Fields(s ...googleapi.Field) *ProjectsLocationsEkmConnectionsVerifyConnectivityCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsEkmConnectionsVerifyConnectivityCall) IfNoneMatch(entityTag string) *ProjectsLocationsEkmConnectionsVerifyConnectivityCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsEkmConnectionsVerifyConnectivityCall) Context(ctx context.Context) *ProjectsLocationsEkmConnectionsVerifyConnectivityCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsEkmConnectionsVerifyConnectivityCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsEkmConnectionsVerifyConnectivityCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}:verifyConnectivity") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.ekmConnections.verifyConnectivity", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.ekmConnections.verifyConnectivity" call. // Any non-2xx status code is an error. Response headers are in either // *VerifyConnectivityResponse.ServerResponse.Header or (if a response was // returned at all) in error.(*googleapi.Error).Header. Use // googleapi.IsNotModified to check whether the returned error was because // http.StatusNotModified was returned. func (c *ProjectsLocationsEkmConnectionsVerifyConnectivityCall) Do(opts ...googleapi.CallOption) (*VerifyConnectivityResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &VerifyConnectivityResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.ekmConnections.verifyConnectivity", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyHandlesCreateCall struct { s *Service parent string keyhandle *KeyHandle urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // Create: Creates a new KeyHandle, triggering the provisioning of a new // CryptoKey for CMEK use with the given resource type in the configured key // project and the same location. GetOperation should be used to resolve the // resulting long-running operation and get the resulting KeyHandle and // CryptoKey. // // - parent: Name of the resource project and location to create the KeyHandle // in, e.g. `projects/{PROJECT_ID}/locations/{LOCATION}`. func (r *ProjectsLocationsKeyHandlesService) Create(parent string, keyhandle *KeyHandle) *ProjectsLocationsKeyHandlesCreateCall { c := &ProjectsLocationsKeyHandlesCreateCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.parent = parent c.keyhandle = keyhandle return c } // KeyHandleId sets the optional parameter "keyHandleId": Id of the KeyHandle. // Must be unique to the resource project and location. If not provided by the // caller, a new UUID is used. func (c *ProjectsLocationsKeyHandlesCreateCall) KeyHandleId(keyHandleId string) *ProjectsLocationsKeyHandlesCreateCall { c.urlParams_.Set("keyHandleId", keyHandleId) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyHandlesCreateCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyHandlesCreateCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyHandlesCreateCall) Context(ctx context.Context) *ProjectsLocationsKeyHandlesCreateCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyHandlesCreateCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyHandlesCreateCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.keyhandle) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+parent}/keyHandles") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "parent": c.parent, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyHandles.create", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyHandles.create" call. // Any non-2xx status code is an error. Response headers are in either // *Operation.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsKeyHandlesCreateCall) Do(opts ...googleapi.CallOption) (*Operation, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &Operation{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyHandles.create", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyHandlesGetCall struct { s *Service name string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // Get: Returns the KeyHandle. // // - name: Name of the KeyHandle resource, e.g. // `projects/{PROJECT_ID}/locations/{LOCATION}/keyHandles/{KEY_HANDLE_ID}`. func (r *ProjectsLocationsKeyHandlesService) Get(name string) *ProjectsLocationsKeyHandlesGetCall { c := &ProjectsLocationsKeyHandlesGetCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyHandlesGetCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyHandlesGetCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsKeyHandlesGetCall) IfNoneMatch(entityTag string) *ProjectsLocationsKeyHandlesGetCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyHandlesGetCall) Context(ctx context.Context) *ProjectsLocationsKeyHandlesGetCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyHandlesGetCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyHandlesGetCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyHandles.get", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyHandles.get" call. // Any non-2xx status code is an error. Response headers are in either // *KeyHandle.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsKeyHandlesGetCall) Do(opts ...googleapi.CallOption) (*KeyHandle, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &KeyHandle{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyHandles.get", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyHandlesListCall struct { s *Service parent string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // List: Lists KeyHandles. // // - parent: Name of the resource project and location from which to list // KeyHandles, e.g. `projects/{PROJECT_ID}/locations/{LOCATION}`. func (r *ProjectsLocationsKeyHandlesService) List(parent string) *ProjectsLocationsKeyHandlesListCall { c := &ProjectsLocationsKeyHandlesListCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.parent = parent return c } // Filter sets the optional parameter "filter": Filter to apply when listing // KeyHandles, e.g. `resource_type_selector="{SERVICE}.googleapis.com/{TYPE}". func (c *ProjectsLocationsKeyHandlesListCall) Filter(filter string) *ProjectsLocationsKeyHandlesListCall { c.urlParams_.Set("filter", filter) return c } // PageSize sets the optional parameter "pageSize": Optional limit on the // number of KeyHandles to include in the response. The service may return // fewer than this value. Further KeyHandles can subsequently be obtained by // including the ListKeyHandlesResponse.next_page_token in a subsequent // request. If unspecified, at most 100 KeyHandles will be returned. func (c *ProjectsLocationsKeyHandlesListCall) PageSize(pageSize int64) *ProjectsLocationsKeyHandlesListCall { c.urlParams_.Set("pageSize", fmt.Sprint(pageSize)) return c } // PageToken sets the optional parameter "pageToken": Optional pagination // token, returned earlier via ListKeyHandlesResponse.next_page_token. func (c *ProjectsLocationsKeyHandlesListCall) PageToken(pageToken string) *ProjectsLocationsKeyHandlesListCall { c.urlParams_.Set("pageToken", pageToken) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyHandlesListCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyHandlesListCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsKeyHandlesListCall) IfNoneMatch(entityTag string) *ProjectsLocationsKeyHandlesListCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyHandlesListCall) Context(ctx context.Context) *ProjectsLocationsKeyHandlesListCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyHandlesListCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyHandlesListCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+parent}/keyHandles") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "parent": c.parent, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyHandles.list", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyHandles.list" call. // Any non-2xx status code is an error. Response headers are in either // *ListKeyHandlesResponse.ServerResponse.Header or (if a response was returned // at all) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to // check whether the returned error was because http.StatusNotModified was // returned. func (c *ProjectsLocationsKeyHandlesListCall) Do(opts ...googleapi.CallOption) (*ListKeyHandlesResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &ListKeyHandlesResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyHandles.list", "response", internallog.HTTPResponse(res, b)) return ret, nil } // Pages invokes f for each page of results. // A non-nil error returned from f will halt the iteration. // The provided context supersedes any context provided to the Context method. func (c *ProjectsLocationsKeyHandlesListCall) Pages(ctx context.Context, f func(*ListKeyHandlesResponse) error) error { c.ctx_ = ctx defer c.PageToken(c.urlParams_.Get("pageToken")) for { x, err := c.Do() if err != nil { return err } if err := f(x); err != nil { return err } if x.NextPageToken == "" { return nil } c.PageToken(x.NextPageToken) } } type ProjectsLocationsKeyRingsCreateCall struct { s *Service parent string keyring *KeyRing urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // Create: Create a new KeyRing in a given Project and Location. // // - parent: The resource name of the location associated with the KeyRings, in // the format `projects/*/locations/*`. func (r *ProjectsLocationsKeyRingsService) Create(parent string, keyring *KeyRing) *ProjectsLocationsKeyRingsCreateCall { c := &ProjectsLocationsKeyRingsCreateCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.parent = parent c.keyring = keyring return c } // KeyRingId sets the optional parameter "keyRingId": Required. It must be // unique within a location and match the regular expression // `[a-zA-Z0-9_-]{1,63}` func (c *ProjectsLocationsKeyRingsCreateCall) KeyRingId(keyRingId string) *ProjectsLocationsKeyRingsCreateCall { c.urlParams_.Set("keyRingId", keyRingId) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCreateCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCreateCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCreateCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCreateCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCreateCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCreateCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.keyring) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+parent}/keyRings") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "parent": c.parent, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.create", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.create" call. // Any non-2xx status code is an error. Response headers are in either // *KeyRing.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsKeyRingsCreateCall) Do(opts ...googleapi.CallOption) (*KeyRing, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &KeyRing{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.create", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsGetCall struct { s *Service name string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // Get: Returns metadata for a given KeyRing. // // - name: The name of the KeyRing to get. func (r *ProjectsLocationsKeyRingsService) Get(name string) *ProjectsLocationsKeyRingsGetCall { c := &ProjectsLocationsKeyRingsGetCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsGetCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsGetCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsKeyRingsGetCall) IfNoneMatch(entityTag string) *ProjectsLocationsKeyRingsGetCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsGetCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsGetCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsGetCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsGetCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.get", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.get" call. // Any non-2xx status code is an error. Response headers are in either // *KeyRing.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsKeyRingsGetCall) Do(opts ...googleapi.CallOption) (*KeyRing, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &KeyRing{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.get", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsGetIamPolicyCall struct { s *Service resource string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // GetIamPolicy: Gets the access control policy for a resource. Returns an // empty policy if the resource exists and does not have a policy set. // // - resource: REQUIRED: The resource for which the policy is being requested. // See Resource names (https://cloud.google.com/apis/design/resource_names) // for the appropriate value for this field. func (r *ProjectsLocationsKeyRingsService) GetIamPolicy(resource string) *ProjectsLocationsKeyRingsGetIamPolicyCall { c := &ProjectsLocationsKeyRingsGetIamPolicyCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.resource = resource return c } // OptionsRequestedPolicyVersion sets the optional parameter // "options.requestedPolicyVersion": The maximum policy version that will be // used to format the policy. Valid values are 0, 1, and 3. Requests specifying // an invalid value will be rejected. Requests for policies with any // conditional role bindings must specify version 3. Policies with no // conditional role bindings may specify any valid value or leave the field // unset. The policy in the response might use the policy version that you // specified, or it might use a lower policy version. For example, if you // specify version 3, but the policy has no conditional role bindings, the // response uses version 1. To learn which resources support conditions in // their IAM policies, see the IAM documentation // (https://cloud.google.com/iam/help/conditions/resource-policies). func (c *ProjectsLocationsKeyRingsGetIamPolicyCall) OptionsRequestedPolicyVersion(optionsRequestedPolicyVersion int64) *ProjectsLocationsKeyRingsGetIamPolicyCall { c.urlParams_.Set("options.requestedPolicyVersion", fmt.Sprint(optionsRequestedPolicyVersion)) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsGetIamPolicyCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsGetIamPolicyCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsKeyRingsGetIamPolicyCall) IfNoneMatch(entityTag string) *ProjectsLocationsKeyRingsGetIamPolicyCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsGetIamPolicyCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsGetIamPolicyCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsGetIamPolicyCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsGetIamPolicyCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+resource}:getIamPolicy") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "resource": c.resource, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.getIamPolicy", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.getIamPolicy" call. // Any non-2xx status code is an error. Response headers are in either // *Policy.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsKeyRingsGetIamPolicyCall) Do(opts ...googleapi.CallOption) (*Policy, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &Policy{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.getIamPolicy", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsListCall struct { s *Service parent string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // List: Lists KeyRings. // // - parent: The resource name of the location associated with the KeyRings, in // the format `projects/*/locations/*`. func (r *ProjectsLocationsKeyRingsService) List(parent string) *ProjectsLocationsKeyRingsListCall { c := &ProjectsLocationsKeyRingsListCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.parent = parent return c } // Filter sets the optional parameter "filter": Only include resources that // match the filter in the response. For more information, see Sorting and // filtering list results // (https://cloud.google.com/kms/docs/sorting-and-filtering). func (c *ProjectsLocationsKeyRingsListCall) Filter(filter string) *ProjectsLocationsKeyRingsListCall { c.urlParams_.Set("filter", filter) return c } // OrderBy sets the optional parameter "orderBy": Specify how the results // should be sorted. If not specified, the results will be sorted in the // default order. For more information, see Sorting and filtering list results // (https://cloud.google.com/kms/docs/sorting-and-filtering). func (c *ProjectsLocationsKeyRingsListCall) OrderBy(orderBy string) *ProjectsLocationsKeyRingsListCall { c.urlParams_.Set("orderBy", orderBy) return c } // PageSize sets the optional parameter "pageSize": Optional limit on the // number of KeyRings to include in the response. Further KeyRings can // subsequently be obtained by including the // ListKeyRingsResponse.next_page_token in a subsequent request. If // unspecified, the server will pick an appropriate default. func (c *ProjectsLocationsKeyRingsListCall) PageSize(pageSize int64) *ProjectsLocationsKeyRingsListCall { c.urlParams_.Set("pageSize", fmt.Sprint(pageSize)) return c } // PageToken sets the optional parameter "pageToken": Optional pagination // token, returned earlier via ListKeyRingsResponse.next_page_token. func (c *ProjectsLocationsKeyRingsListCall) PageToken(pageToken string) *ProjectsLocationsKeyRingsListCall { c.urlParams_.Set("pageToken", pageToken) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsListCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsListCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsKeyRingsListCall) IfNoneMatch(entityTag string) *ProjectsLocationsKeyRingsListCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsListCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsListCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsListCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsListCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+parent}/keyRings") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "parent": c.parent, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.list", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.list" call. // Any non-2xx status code is an error. Response headers are in either // *ListKeyRingsResponse.ServerResponse.Header or (if a response was returned // at all) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to // check whether the returned error was because http.StatusNotModified was // returned. func (c *ProjectsLocationsKeyRingsListCall) Do(opts ...googleapi.CallOption) (*ListKeyRingsResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &ListKeyRingsResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.list", "response", internallog.HTTPResponse(res, b)) return ret, nil } // Pages invokes f for each page of results. // A non-nil error returned from f will halt the iteration. // The provided context supersedes any context provided to the Context method. func (c *ProjectsLocationsKeyRingsListCall) Pages(ctx context.Context, f func(*ListKeyRingsResponse) error) error { c.ctx_ = ctx defer c.PageToken(c.urlParams_.Get("pageToken")) for { x, err := c.Do() if err != nil { return err } if err := f(x); err != nil { return err } if x.NextPageToken == "" { return nil } c.PageToken(x.NextPageToken) } } type ProjectsLocationsKeyRingsSetIamPolicyCall struct { s *Service resource string setiampolicyrequest *SetIamPolicyRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // SetIamPolicy: Sets the access control policy on the specified resource. // Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, // and `PERMISSION_DENIED` errors. // // - resource: REQUIRED: The resource for which the policy is being specified. // See Resource names (https://cloud.google.com/apis/design/resource_names) // for the appropriate value for this field. func (r *ProjectsLocationsKeyRingsService) SetIamPolicy(resource string, setiampolicyrequest *SetIamPolicyRequest) *ProjectsLocationsKeyRingsSetIamPolicyCall { c := &ProjectsLocationsKeyRingsSetIamPolicyCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.resource = resource c.setiampolicyrequest = setiampolicyrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsSetIamPolicyCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsSetIamPolicyCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsSetIamPolicyCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsSetIamPolicyCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsSetIamPolicyCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsSetIamPolicyCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.setiampolicyrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+resource}:setIamPolicy") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "resource": c.resource, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.setIamPolicy", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.setIamPolicy" call. // Any non-2xx status code is an error. Response headers are in either // *Policy.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsKeyRingsSetIamPolicyCall) Do(opts ...googleapi.CallOption) (*Policy, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &Policy{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.setIamPolicy", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsTestIamPermissionsCall struct { s *Service resource string testiampermissionsrequest *TestIamPermissionsRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // TestIamPermissions: Returns permissions that a caller has on the specified // resource. If the resource does not exist, this will return an empty set of // permissions, not a `NOT_FOUND` error. Note: This operation is designed to be // used for building permission-aware UIs and command-line tools, not for // authorization checking. This operation may "fail open" without warning. // // - resource: REQUIRED: The resource for which the policy detail is being // requested. See Resource names // (https://cloud.google.com/apis/design/resource_names) for the appropriate // value for this field. func (r *ProjectsLocationsKeyRingsService) TestIamPermissions(resource string, testiampermissionsrequest *TestIamPermissionsRequest) *ProjectsLocationsKeyRingsTestIamPermissionsCall { c := &ProjectsLocationsKeyRingsTestIamPermissionsCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.resource = resource c.testiampermissionsrequest = testiampermissionsrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsTestIamPermissionsCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsTestIamPermissionsCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsTestIamPermissionsCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsTestIamPermissionsCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsTestIamPermissionsCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsTestIamPermissionsCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.testiampermissionsrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+resource}:testIamPermissions") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "resource": c.resource, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.testIamPermissions", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.testIamPermissions" call. // Any non-2xx status code is an error. Response headers are in either // *TestIamPermissionsResponse.ServerResponse.Header or (if a response was // returned at all) in error.(*googleapi.Error).Header. Use // googleapi.IsNotModified to check whether the returned error was because // http.StatusNotModified was returned. func (c *ProjectsLocationsKeyRingsTestIamPermissionsCall) Do(opts ...googleapi.CallOption) (*TestIamPermissionsResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &TestIamPermissionsResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.testIamPermissions", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysCreateCall struct { s *Service parent string cryptokey *CryptoKey urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // Create: Create a new CryptoKey within a KeyRing. CryptoKey.purpose and // CryptoKey.version_template.algorithm are required. // // - parent: The name of the KeyRing associated with the CryptoKeys. func (r *ProjectsLocationsKeyRingsCryptoKeysService) Create(parent string, cryptokey *CryptoKey) *ProjectsLocationsKeyRingsCryptoKeysCreateCall { c := &ProjectsLocationsKeyRingsCryptoKeysCreateCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.parent = parent c.cryptokey = cryptokey return c } // CryptoKeyId sets the optional parameter "cryptoKeyId": Required. It must be // unique within a KeyRing and match the regular expression // `[a-zA-Z0-9_-]{1,63}` func (c *ProjectsLocationsKeyRingsCryptoKeysCreateCall) CryptoKeyId(cryptoKeyId string) *ProjectsLocationsKeyRingsCryptoKeysCreateCall { c.urlParams_.Set("cryptoKeyId", cryptoKeyId) return c } // SkipInitialVersionCreation sets the optional parameter // "skipInitialVersionCreation": If set to true, the request will create a // CryptoKey without any CryptoKeyVersions. You must manually call // CreateCryptoKeyVersion or ImportCryptoKeyVersion before you can use this // CryptoKey. func (c *ProjectsLocationsKeyRingsCryptoKeysCreateCall) SkipInitialVersionCreation(skipInitialVersionCreation bool) *ProjectsLocationsKeyRingsCryptoKeysCreateCall { c.urlParams_.Set("skipInitialVersionCreation", fmt.Sprint(skipInitialVersionCreation)) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysCreateCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysCreateCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysCreateCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysCreateCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysCreateCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysCreateCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.cryptokey) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+parent}/cryptoKeys") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "parent": c.parent, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.create", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.create" call. // Any non-2xx status code is an error. Response headers are in either // *CryptoKey.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsKeyRingsCryptoKeysCreateCall) Do(opts ...googleapi.CallOption) (*CryptoKey, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &CryptoKey{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.create", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysDecryptCall struct { s *Service name string decryptrequest *DecryptRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // Decrypt: Decrypts data that was protected by Encrypt. The CryptoKey.purpose // must be ENCRYPT_DECRYPT. // // - name: The resource name of the CryptoKey to use for decryption. The server // will choose the appropriate version. func (r *ProjectsLocationsKeyRingsCryptoKeysService) Decrypt(name string, decryptrequest *DecryptRequest) *ProjectsLocationsKeyRingsCryptoKeysDecryptCall { c := &ProjectsLocationsKeyRingsCryptoKeysDecryptCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name c.decryptrequest = decryptrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysDecryptCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysDecryptCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysDecryptCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysDecryptCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysDecryptCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysDecryptCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.decryptrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}:decrypt") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.decrypt", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.decrypt" call. // Any non-2xx status code is an error. Response headers are in either // *DecryptResponse.ServerResponse.Header or (if a response was returned at // all) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to // check whether the returned error was because http.StatusNotModified was // returned. func (c *ProjectsLocationsKeyRingsCryptoKeysDecryptCall) Do(opts ...googleapi.CallOption) (*DecryptResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &DecryptResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.decrypt", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysDeleteCall struct { s *Service name string urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // Delete: Permanently deletes the given CryptoKey. All child CryptoKeyVersions // must have been previously deleted using // KeyManagementService.DeleteCryptoKeyVersion. The specified crypto key will // be immediately and permanently deleted upon calling this method. This action // cannot be undone. // // - name: The name of the CryptoKey to delete. func (r *ProjectsLocationsKeyRingsCryptoKeysService) Delete(name string) *ProjectsLocationsKeyRingsCryptoKeysDeleteCall { c := &ProjectsLocationsKeyRingsCryptoKeysDeleteCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysDeleteCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysDeleteCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysDeleteCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysDeleteCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysDeleteCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysDeleteCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("DELETE", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.delete", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.delete" call. // Any non-2xx status code is an error. Response headers are in either // *Operation.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsKeyRingsCryptoKeysDeleteCall) Do(opts ...googleapi.CallOption) (*Operation, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &Operation{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.delete", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysEncryptCall struct { s *Service name string encryptrequest *EncryptRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // Encrypt: Encrypts data, so that it can only be recovered by a call to // Decrypt. The CryptoKey.purpose must be ENCRYPT_DECRYPT. // // - name: The resource name of the CryptoKey or CryptoKeyVersion to use for // encryption. If a CryptoKey is specified, the server will use its primary // version. func (r *ProjectsLocationsKeyRingsCryptoKeysService) Encrypt(name string, encryptrequest *EncryptRequest) *ProjectsLocationsKeyRingsCryptoKeysEncryptCall { c := &ProjectsLocationsKeyRingsCryptoKeysEncryptCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name c.encryptrequest = encryptrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysEncryptCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysEncryptCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysEncryptCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysEncryptCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysEncryptCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysEncryptCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.encryptrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}:encrypt") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.encrypt", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.encrypt" call. // Any non-2xx status code is an error. Response headers are in either // *EncryptResponse.ServerResponse.Header or (if a response was returned at // all) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to // check whether the returned error was because http.StatusNotModified was // returned. func (c *ProjectsLocationsKeyRingsCryptoKeysEncryptCall) Do(opts ...googleapi.CallOption) (*EncryptResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &EncryptResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.encrypt", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysGetCall struct { s *Service name string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // Get: Returns metadata for a given CryptoKey, as well as its primary // CryptoKeyVersion. // // - name: The name of the CryptoKey to get. func (r *ProjectsLocationsKeyRingsCryptoKeysService) Get(name string) *ProjectsLocationsKeyRingsCryptoKeysGetCall { c := &ProjectsLocationsKeyRingsCryptoKeysGetCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysGetCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysGetCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsKeyRingsCryptoKeysGetCall) IfNoneMatch(entityTag string) *ProjectsLocationsKeyRingsCryptoKeysGetCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysGetCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysGetCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysGetCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysGetCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.get", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.get" call. // Any non-2xx status code is an error. Response headers are in either // *CryptoKey.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsKeyRingsCryptoKeysGetCall) Do(opts ...googleapi.CallOption) (*CryptoKey, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &CryptoKey{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.get", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysGetIamPolicyCall struct { s *Service resource string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // GetIamPolicy: Gets the access control policy for a resource. Returns an // empty policy if the resource exists and does not have a policy set. // // - resource: REQUIRED: The resource for which the policy is being requested. // See Resource names (https://cloud.google.com/apis/design/resource_names) // for the appropriate value for this field. func (r *ProjectsLocationsKeyRingsCryptoKeysService) GetIamPolicy(resource string) *ProjectsLocationsKeyRingsCryptoKeysGetIamPolicyCall { c := &ProjectsLocationsKeyRingsCryptoKeysGetIamPolicyCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.resource = resource return c } // OptionsRequestedPolicyVersion sets the optional parameter // "options.requestedPolicyVersion": The maximum policy version that will be // used to format the policy. Valid values are 0, 1, and 3. Requests specifying // an invalid value will be rejected. Requests for policies with any // conditional role bindings must specify version 3. Policies with no // conditional role bindings may specify any valid value or leave the field // unset. The policy in the response might use the policy version that you // specified, or it might use a lower policy version. For example, if you // specify version 3, but the policy has no conditional role bindings, the // response uses version 1. To learn which resources support conditions in // their IAM policies, see the IAM documentation // (https://cloud.google.com/iam/help/conditions/resource-policies). func (c *ProjectsLocationsKeyRingsCryptoKeysGetIamPolicyCall) OptionsRequestedPolicyVersion(optionsRequestedPolicyVersion int64) *ProjectsLocationsKeyRingsCryptoKeysGetIamPolicyCall { c.urlParams_.Set("options.requestedPolicyVersion", fmt.Sprint(optionsRequestedPolicyVersion)) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysGetIamPolicyCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysGetIamPolicyCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsKeyRingsCryptoKeysGetIamPolicyCall) IfNoneMatch(entityTag string) *ProjectsLocationsKeyRingsCryptoKeysGetIamPolicyCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysGetIamPolicyCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysGetIamPolicyCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysGetIamPolicyCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysGetIamPolicyCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+resource}:getIamPolicy") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "resource": c.resource, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.getIamPolicy", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.getIamPolicy" call. // Any non-2xx status code is an error. Response headers are in either // *Policy.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsKeyRingsCryptoKeysGetIamPolicyCall) Do(opts ...googleapi.CallOption) (*Policy, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &Policy{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.getIamPolicy", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysListCall struct { s *Service parent string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // List: Lists CryptoKeys. // // - parent: The resource name of the KeyRing to list, in the format // `projects/*/locations/*/keyRings/*`. func (r *ProjectsLocationsKeyRingsCryptoKeysService) List(parent string) *ProjectsLocationsKeyRingsCryptoKeysListCall { c := &ProjectsLocationsKeyRingsCryptoKeysListCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.parent = parent return c } // Filter sets the optional parameter "filter": Only include resources that // match the filter in the response. For more information, see Sorting and // filtering list results // (https://cloud.google.com/kms/docs/sorting-and-filtering). func (c *ProjectsLocationsKeyRingsCryptoKeysListCall) Filter(filter string) *ProjectsLocationsKeyRingsCryptoKeysListCall { c.urlParams_.Set("filter", filter) return c } // OrderBy sets the optional parameter "orderBy": Specify how the results // should be sorted. If not specified, the results will be sorted in the // default order. For more information, see Sorting and filtering list results // (https://cloud.google.com/kms/docs/sorting-and-filtering). func (c *ProjectsLocationsKeyRingsCryptoKeysListCall) OrderBy(orderBy string) *ProjectsLocationsKeyRingsCryptoKeysListCall { c.urlParams_.Set("orderBy", orderBy) return c } // PageSize sets the optional parameter "pageSize": Optional limit on the // number of CryptoKeys to include in the response. Further CryptoKeys can // subsequently be obtained by including the // ListCryptoKeysResponse.next_page_token in a subsequent request. If // unspecified, the server will pick an appropriate default. func (c *ProjectsLocationsKeyRingsCryptoKeysListCall) PageSize(pageSize int64) *ProjectsLocationsKeyRingsCryptoKeysListCall { c.urlParams_.Set("pageSize", fmt.Sprint(pageSize)) return c } // PageToken sets the optional parameter "pageToken": Optional pagination // token, returned earlier via ListCryptoKeysResponse.next_page_token. func (c *ProjectsLocationsKeyRingsCryptoKeysListCall) PageToken(pageToken string) *ProjectsLocationsKeyRingsCryptoKeysListCall { c.urlParams_.Set("pageToken", pageToken) return c } // VersionView sets the optional parameter "versionView": The fields of the // primary version to include in the response. // // Possible values: // // "CRYPTO_KEY_VERSION_VIEW_UNSPECIFIED" - Default view for each // // CryptoKeyVersion. Does not include the attestation field. // // "FULL" - Provides all fields in each CryptoKeyVersion, including the // // attestation. func (c *ProjectsLocationsKeyRingsCryptoKeysListCall) VersionView(versionView string) *ProjectsLocationsKeyRingsCryptoKeysListCall { c.urlParams_.Set("versionView", versionView) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysListCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysListCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsKeyRingsCryptoKeysListCall) IfNoneMatch(entityTag string) *ProjectsLocationsKeyRingsCryptoKeysListCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysListCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysListCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysListCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysListCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+parent}/cryptoKeys") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "parent": c.parent, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.list", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.list" call. // Any non-2xx status code is an error. Response headers are in either // *ListCryptoKeysResponse.ServerResponse.Header or (if a response was returned // at all) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to // check whether the returned error was because http.StatusNotModified was // returned. func (c *ProjectsLocationsKeyRingsCryptoKeysListCall) Do(opts ...googleapi.CallOption) (*ListCryptoKeysResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &ListCryptoKeysResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.list", "response", internallog.HTTPResponse(res, b)) return ret, nil } // Pages invokes f for each page of results. // A non-nil error returned from f will halt the iteration. // The provided context supersedes any context provided to the Context method. func (c *ProjectsLocationsKeyRingsCryptoKeysListCall) Pages(ctx context.Context, f func(*ListCryptoKeysResponse) error) error { c.ctx_ = ctx defer c.PageToken(c.urlParams_.Get("pageToken")) for { x, err := c.Do() if err != nil { return err } if err := f(x); err != nil { return err } if x.NextPageToken == "" { return nil } c.PageToken(x.NextPageToken) } } type ProjectsLocationsKeyRingsCryptoKeysPatchCall struct { s *Service name string cryptokey *CryptoKey urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // Patch: Update a CryptoKey. // // - name: Output only. The resource name for this CryptoKey in the format // `projects/*/locations/*/keyRings/*/cryptoKeys/*`. func (r *ProjectsLocationsKeyRingsCryptoKeysService) Patch(name string, cryptokey *CryptoKey) *ProjectsLocationsKeyRingsCryptoKeysPatchCall { c := &ProjectsLocationsKeyRingsCryptoKeysPatchCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name c.cryptokey = cryptokey return c } // UpdateMask sets the optional parameter "updateMask": Required. List of // fields to be updated in this request. func (c *ProjectsLocationsKeyRingsCryptoKeysPatchCall) UpdateMask(updateMask string) *ProjectsLocationsKeyRingsCryptoKeysPatchCall { c.urlParams_.Set("updateMask", updateMask) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysPatchCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysPatchCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysPatchCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysPatchCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysPatchCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysPatchCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.cryptokey) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("PATCH", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.patch", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.patch" call. // Any non-2xx status code is an error. Response headers are in either // *CryptoKey.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsKeyRingsCryptoKeysPatchCall) Do(opts ...googleapi.CallOption) (*CryptoKey, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &CryptoKey{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.patch", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysSetIamPolicyCall struct { s *Service resource string setiampolicyrequest *SetIamPolicyRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // SetIamPolicy: Sets the access control policy on the specified resource. // Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, // and `PERMISSION_DENIED` errors. // // - resource: REQUIRED: The resource for which the policy is being specified. // See Resource names (https://cloud.google.com/apis/design/resource_names) // for the appropriate value for this field. func (r *ProjectsLocationsKeyRingsCryptoKeysService) SetIamPolicy(resource string, setiampolicyrequest *SetIamPolicyRequest) *ProjectsLocationsKeyRingsCryptoKeysSetIamPolicyCall { c := &ProjectsLocationsKeyRingsCryptoKeysSetIamPolicyCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.resource = resource c.setiampolicyrequest = setiampolicyrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysSetIamPolicyCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysSetIamPolicyCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysSetIamPolicyCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysSetIamPolicyCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysSetIamPolicyCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysSetIamPolicyCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.setiampolicyrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+resource}:setIamPolicy") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "resource": c.resource, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.setIamPolicy", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.setIamPolicy" call. // Any non-2xx status code is an error. Response headers are in either // *Policy.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsKeyRingsCryptoKeysSetIamPolicyCall) Do(opts ...googleapi.CallOption) (*Policy, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &Policy{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.setIamPolicy", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysTestIamPermissionsCall struct { s *Service resource string testiampermissionsrequest *TestIamPermissionsRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // TestIamPermissions: Returns permissions that a caller has on the specified // resource. If the resource does not exist, this will return an empty set of // permissions, not a `NOT_FOUND` error. Note: This operation is designed to be // used for building permission-aware UIs and command-line tools, not for // authorization checking. This operation may "fail open" without warning. // // - resource: REQUIRED: The resource for which the policy detail is being // requested. See Resource names // (https://cloud.google.com/apis/design/resource_names) for the appropriate // value for this field. func (r *ProjectsLocationsKeyRingsCryptoKeysService) TestIamPermissions(resource string, testiampermissionsrequest *TestIamPermissionsRequest) *ProjectsLocationsKeyRingsCryptoKeysTestIamPermissionsCall { c := &ProjectsLocationsKeyRingsCryptoKeysTestIamPermissionsCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.resource = resource c.testiampermissionsrequest = testiampermissionsrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysTestIamPermissionsCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysTestIamPermissionsCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysTestIamPermissionsCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysTestIamPermissionsCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysTestIamPermissionsCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysTestIamPermissionsCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.testiampermissionsrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+resource}:testIamPermissions") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "resource": c.resource, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.testIamPermissions", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.testIamPermissions" call. // Any non-2xx status code is an error. Response headers are in either // *TestIamPermissionsResponse.ServerResponse.Header or (if a response was // returned at all) in error.(*googleapi.Error).Header. Use // googleapi.IsNotModified to check whether the returned error was because // http.StatusNotModified was returned. func (c *ProjectsLocationsKeyRingsCryptoKeysTestIamPermissionsCall) Do(opts ...googleapi.CallOption) (*TestIamPermissionsResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &TestIamPermissionsResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.testIamPermissions", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysUpdatePrimaryVersionCall struct { s *Service name string updatecryptokeyprimaryversionrequest *UpdateCryptoKeyPrimaryVersionRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // UpdatePrimaryVersion: Update the version of a CryptoKey that will be used in // Encrypt. Returns an error if called on a key whose purpose is not // ENCRYPT_DECRYPT. // // - name: The resource name of the CryptoKey to update. func (r *ProjectsLocationsKeyRingsCryptoKeysService) UpdatePrimaryVersion(name string, updatecryptokeyprimaryversionrequest *UpdateCryptoKeyPrimaryVersionRequest) *ProjectsLocationsKeyRingsCryptoKeysUpdatePrimaryVersionCall { c := &ProjectsLocationsKeyRingsCryptoKeysUpdatePrimaryVersionCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name c.updatecryptokeyprimaryversionrequest = updatecryptokeyprimaryversionrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysUpdatePrimaryVersionCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysUpdatePrimaryVersionCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysUpdatePrimaryVersionCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysUpdatePrimaryVersionCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysUpdatePrimaryVersionCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysUpdatePrimaryVersionCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.updatecryptokeyprimaryversionrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}:updatePrimaryVersion") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.updatePrimaryVersion", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.updatePrimaryVersion" call. // Any non-2xx status code is an error. Response headers are in either // *CryptoKey.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsKeyRingsCryptoKeysUpdatePrimaryVersionCall) Do(opts ...googleapi.CallOption) (*CryptoKey, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &CryptoKey{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.updatePrimaryVersion", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsAsymmetricDecryptCall struct { s *Service name string asymmetricdecryptrequest *AsymmetricDecryptRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // AsymmetricDecrypt: Decrypts data that was encrypted with a public key // retrieved from GetPublicKey corresponding to a CryptoKeyVersion with // CryptoKey.purpose ASYMMETRIC_DECRYPT. // // - name: The resource name of the CryptoKeyVersion to use for decryption. func (r *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsService) AsymmetricDecrypt(name string, asymmetricdecryptrequest *AsymmetricDecryptRequest) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsAsymmetricDecryptCall { c := &ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsAsymmetricDecryptCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name c.asymmetricdecryptrequest = asymmetricdecryptrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsAsymmetricDecryptCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsAsymmetricDecryptCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsAsymmetricDecryptCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsAsymmetricDecryptCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsAsymmetricDecryptCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsAsymmetricDecryptCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.asymmetricdecryptrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}:asymmetricDecrypt") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.asymmetricDecrypt", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.asymmetricDecrypt" call. // Any non-2xx status code is an error. Response headers are in either // *AsymmetricDecryptResponse.ServerResponse.Header or (if a response was // returned at all) in error.(*googleapi.Error).Header. Use // googleapi.IsNotModified to check whether the returned error was because // http.StatusNotModified was returned. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsAsymmetricDecryptCall) Do(opts ...googleapi.CallOption) (*AsymmetricDecryptResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &AsymmetricDecryptResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.asymmetricDecrypt", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsAsymmetricSignCall struct { s *Service name string asymmetricsignrequest *AsymmetricSignRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // AsymmetricSign: Signs data using a CryptoKeyVersion with CryptoKey.purpose // ASYMMETRIC_SIGN, producing a signature that can be verified with the public // key retrieved from GetPublicKey. // // - name: The resource name of the CryptoKeyVersion to use for signing. func (r *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsService) AsymmetricSign(name string, asymmetricsignrequest *AsymmetricSignRequest) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsAsymmetricSignCall { c := &ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsAsymmetricSignCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name c.asymmetricsignrequest = asymmetricsignrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsAsymmetricSignCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsAsymmetricSignCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsAsymmetricSignCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsAsymmetricSignCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsAsymmetricSignCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsAsymmetricSignCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.asymmetricsignrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}:asymmetricSign") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.asymmetricSign", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.asymmetricSign" call. // Any non-2xx status code is an error. Response headers are in either // *AsymmetricSignResponse.ServerResponse.Header or (if a response was returned // at all) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to // check whether the returned error was because http.StatusNotModified was // returned. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsAsymmetricSignCall) Do(opts ...googleapi.CallOption) (*AsymmetricSignResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &AsymmetricSignResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.asymmetricSign", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsCreateCall struct { s *Service parent string cryptokeyversion *CryptoKeyVersion urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // Create: Create a new CryptoKeyVersion in a CryptoKey. The server will assign // the next sequential id. If unset, state will be set to ENABLED. // // - parent: The name of the CryptoKey associated with the CryptoKeyVersions. func (r *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsService) Create(parent string, cryptokeyversion *CryptoKeyVersion) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsCreateCall { c := &ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsCreateCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.parent = parent c.cryptokeyversion = cryptokeyversion return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsCreateCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsCreateCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsCreateCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsCreateCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsCreateCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsCreateCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.cryptokeyversion) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+parent}/cryptoKeyVersions") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "parent": c.parent, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.create", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.create" call. // Any non-2xx status code is an error. Response headers are in either // *CryptoKeyVersion.ServerResponse.Header or (if a response was returned at // all) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to // check whether the returned error was because http.StatusNotModified was // returned. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsCreateCall) Do(opts ...googleapi.CallOption) (*CryptoKeyVersion, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &CryptoKeyVersion{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.create", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDecapsulateCall struct { s *Service name string decapsulaterequest *DecapsulateRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // Decapsulate: Decapsulates data that was encapsulated with a public key // retrieved from GetPublicKey corresponding to a CryptoKeyVersion with // CryptoKey.purpose KEY_ENCAPSULATION. // // - name: The resource name of the CryptoKeyVersion to use for decapsulation. func (r *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsService) Decapsulate(name string, decapsulaterequest *DecapsulateRequest) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDecapsulateCall { c := &ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDecapsulateCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name c.decapsulaterequest = decapsulaterequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDecapsulateCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDecapsulateCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDecapsulateCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDecapsulateCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDecapsulateCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDecapsulateCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.decapsulaterequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}:decapsulate") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.decapsulate", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.decapsulate" call. // Any non-2xx status code is an error. Response headers are in either // *DecapsulateResponse.ServerResponse.Header or (if a response was returned at // all) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to // check whether the returned error was because http.StatusNotModified was // returned. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDecapsulateCall) Do(opts ...googleapi.CallOption) (*DecapsulateResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &DecapsulateResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.decapsulate", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDeleteCall struct { s *Service name string urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // Delete: Permanently deletes the given CryptoKeyVersion. Only possible if the // version has not been previously imported and if its state is one of // DESTROYED, IMPORT_FAILED, or GENERATION_FAILED. Successfully imported // CryptoKeyVersions cannot be deleted at this time. The specified version will // be immediately and permanently deleted upon calling this method. This action // cannot be undone. // // - name: The name of the CryptoKeyVersion to delete. func (r *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsService) Delete(name string) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDeleteCall { c := &ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDeleteCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDeleteCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDeleteCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDeleteCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDeleteCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDeleteCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDeleteCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("DELETE", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.delete", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.delete" call. // Any non-2xx status code is an error. Response headers are in either // *Operation.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDeleteCall) Do(opts ...googleapi.CallOption) (*Operation, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &Operation{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.delete", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDestroyCall struct { s *Service name string destroycryptokeyversionrequest *DestroyCryptoKeyVersionRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // Destroy: Schedule a CryptoKeyVersion for destruction. Upon calling this // method, CryptoKeyVersion.state will be set to DESTROY_SCHEDULED, and // destroy_time will be set to the time destroy_scheduled_duration in the // future. At that time, the state will automatically change to DESTROYED, and // the key material will be irrevocably destroyed. Before the destroy_time is // reached, RestoreCryptoKeyVersion may be called to reverse the process. // // - name: The resource name of the CryptoKeyVersion to destroy. func (r *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsService) Destroy(name string, destroycryptokeyversionrequest *DestroyCryptoKeyVersionRequest) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDestroyCall { c := &ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDestroyCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name c.destroycryptokeyversionrequest = destroycryptokeyversionrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDestroyCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDestroyCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDestroyCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDestroyCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDestroyCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDestroyCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.destroycryptokeyversionrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}:destroy") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.destroy", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.destroy" call. // Any non-2xx status code is an error. Response headers are in either // *CryptoKeyVersion.ServerResponse.Header or (if a response was returned at // all) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to // check whether the returned error was because http.StatusNotModified was // returned. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsDestroyCall) Do(opts ...googleapi.CallOption) (*CryptoKeyVersion, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &CryptoKeyVersion{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.destroy", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetCall struct { s *Service name string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // Get: Returns metadata for a given CryptoKeyVersion. // // - name: The name of the CryptoKeyVersion to get. func (r *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsService) Get(name string) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetCall { c := &ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetCall) IfNoneMatch(entityTag string) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.get", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.get" call. // Any non-2xx status code is an error. Response headers are in either // *CryptoKeyVersion.ServerResponse.Header or (if a response was returned at // all) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to // check whether the returned error was because http.StatusNotModified was // returned. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetCall) Do(opts ...googleapi.CallOption) (*CryptoKeyVersion, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &CryptoKeyVersion{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.get", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetPublicKeyCall struct { s *Service name string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // GetPublicKey: Returns the public key for the given CryptoKeyVersion. The // CryptoKey.purpose must be ASYMMETRIC_SIGN or ASYMMETRIC_DECRYPT. // // - name: The name of the CryptoKeyVersion public key to get. func (r *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsService) GetPublicKey(name string) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetPublicKeyCall { c := &ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetPublicKeyCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name return c } // PublicKeyFormat sets the optional parameter "publicKeyFormat": The PublicKey // format specified by the user. This field is required for PQC algorithms. If // specified, the public key will be exported through the public_key field in // the requested format. Otherwise, the pem field will be populated for non-PQC // algorithms, and an error will be returned for PQC algorithms. // // Possible values: // // "PUBLIC_KEY_FORMAT_UNSPECIFIED" - If the public_key_format field is not // // specified: - For PQC algorithms, an error will be returned. - For non-PQC // algorithms, the default format is PEM, and the field pem will be populated. // Otherwise, the public key will be exported through the public_key field in // the requested format. // // "PEM" - The returned public key will be encoded in PEM format. See the // // [RFC7468](https://tools.ietf.org/html/rfc7468) sections for [General // Considerations](https://tools.ietf.org/html/rfc7468#section-2) and [Textual // Encoding of Subject Public Key Info] // (https://tools.ietf.org/html/rfc7468#section-13) for more information. // // "DER" - The returned public key will be encoded in DER format (the // // PrivateKeyInfo structure from RFC 5208). // // "NIST_PQC" - This is supported only for PQC algorithms. The key material // // is returned in the format defined by NIST PQC standards (FIPS 203, FIPS 204, // and FIPS 205). // // "XWING_RAW_BYTES" - The returned public key is in raw bytes format defined // // in its standard // https://datatracker.ietf.org/doc/draft-connolly-cfrg-xwing-kem. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetPublicKeyCall) PublicKeyFormat(publicKeyFormat string) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetPublicKeyCall { c.urlParams_.Set("publicKeyFormat", publicKeyFormat) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetPublicKeyCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetPublicKeyCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetPublicKeyCall) IfNoneMatch(entityTag string) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetPublicKeyCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetPublicKeyCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetPublicKeyCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetPublicKeyCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetPublicKeyCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}/publicKey") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.getPublicKey", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.getPublicKey" call. // Any non-2xx status code is an error. Response headers are in either // *PublicKey.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsGetPublicKeyCall) Do(opts ...googleapi.CallOption) (*PublicKey, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &PublicKey{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.getPublicKey", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsImportCall struct { s *Service parent string importcryptokeyversionrequest *ImportCryptoKeyVersionRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // Import: Import wrapped key material into a CryptoKeyVersion. All requests // must specify a CryptoKey. If a CryptoKeyVersion is additionally specified in // the request, key material will be reimported into that version. Otherwise, a // new version will be created, and will be assigned the next sequential id // within the CryptoKey. // // - parent: The name of the CryptoKey to be imported into. The create // permission is only required on this key when creating a new // CryptoKeyVersion. func (r *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsService) Import(parent string, importcryptokeyversionrequest *ImportCryptoKeyVersionRequest) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsImportCall { c := &ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsImportCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.parent = parent c.importcryptokeyversionrequest = importcryptokeyversionrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsImportCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsImportCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsImportCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsImportCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsImportCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsImportCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.importcryptokeyversionrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+parent}/cryptoKeyVersions:import") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "parent": c.parent, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.import", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.import" call. // Any non-2xx status code is an error. Response headers are in either // *CryptoKeyVersion.ServerResponse.Header or (if a response was returned at // all) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to // check whether the returned error was because http.StatusNotModified was // returned. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsImportCall) Do(opts ...googleapi.CallOption) (*CryptoKeyVersion, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &CryptoKeyVersion{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.import", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsListCall struct { s *Service parent string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // List: Lists CryptoKeyVersions. // // - parent: The resource name of the CryptoKey to list, in the format // `projects/*/locations/*/keyRings/*/cryptoKeys/*`. func (r *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsService) List(parent string) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsListCall { c := &ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsListCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.parent = parent return c } // Filter sets the optional parameter "filter": Only include resources that // match the filter in the response. For more information, see Sorting and // filtering list results // (https://cloud.google.com/kms/docs/sorting-and-filtering). func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsListCall) Filter(filter string) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsListCall { c.urlParams_.Set("filter", filter) return c } // OrderBy sets the optional parameter "orderBy": Specify how the results // should be sorted. If not specified, the results will be sorted in the // default order. For more information, see Sorting and filtering list results // (https://cloud.google.com/kms/docs/sorting-and-filtering). func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsListCall) OrderBy(orderBy string) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsListCall { c.urlParams_.Set("orderBy", orderBy) return c } // PageSize sets the optional parameter "pageSize": Optional limit on the // number of CryptoKeyVersions to include in the response. Further // CryptoKeyVersions can subsequently be obtained by including the // ListCryptoKeyVersionsResponse.next_page_token in a subsequent request. If // unspecified, the server will pick an appropriate default. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsListCall) PageSize(pageSize int64) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsListCall { c.urlParams_.Set("pageSize", fmt.Sprint(pageSize)) return c } // PageToken sets the optional parameter "pageToken": Optional pagination // token, returned earlier via ListCryptoKeyVersionsResponse.next_page_token. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsListCall) PageToken(pageToken string) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsListCall { c.urlParams_.Set("pageToken", pageToken) return c } // View sets the optional parameter "view": The fields to include in the // response. // // Possible values: // // "CRYPTO_KEY_VERSION_VIEW_UNSPECIFIED" - Default view for each // // CryptoKeyVersion. Does not include the attestation field. // // "FULL" - Provides all fields in each CryptoKeyVersion, including the // // attestation. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsListCall) View(view string) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsListCall { c.urlParams_.Set("view", view) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsListCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsListCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsListCall) IfNoneMatch(entityTag string) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsListCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsListCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsListCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsListCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsListCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+parent}/cryptoKeyVersions") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "parent": c.parent, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.list", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.list" call. // Any non-2xx status code is an error. Response headers are in either // *ListCryptoKeyVersionsResponse.ServerResponse.Header or (if a response was // returned at all) in error.(*googleapi.Error).Header. Use // googleapi.IsNotModified to check whether the returned error was because // http.StatusNotModified was returned. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsListCall) Do(opts ...googleapi.CallOption) (*ListCryptoKeyVersionsResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &ListCryptoKeyVersionsResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.list", "response", internallog.HTTPResponse(res, b)) return ret, nil } // Pages invokes f for each page of results. // A non-nil error returned from f will halt the iteration. // The provided context supersedes any context provided to the Context method. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsListCall) Pages(ctx context.Context, f func(*ListCryptoKeyVersionsResponse) error) error { c.ctx_ = ctx defer c.PageToken(c.urlParams_.Get("pageToken")) for { x, err := c.Do() if err != nil { return err } if err := f(x); err != nil { return err } if x.NextPageToken == "" { return nil } c.PageToken(x.NextPageToken) } } type ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsMacSignCall struct { s *Service name string macsignrequest *MacSignRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // MacSign: Signs data using a CryptoKeyVersion with CryptoKey.purpose MAC, // producing a tag that can be verified by another source with the same key. // // - name: The resource name of the CryptoKeyVersion to use for signing. func (r *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsService) MacSign(name string, macsignrequest *MacSignRequest) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsMacSignCall { c := &ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsMacSignCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name c.macsignrequest = macsignrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsMacSignCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsMacSignCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsMacSignCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsMacSignCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsMacSignCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsMacSignCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.macsignrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}:macSign") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.macSign", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.macSign" call. // Any non-2xx status code is an error. Response headers are in either // *MacSignResponse.ServerResponse.Header or (if a response was returned at // all) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to // check whether the returned error was because http.StatusNotModified was // returned. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsMacSignCall) Do(opts ...googleapi.CallOption) (*MacSignResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &MacSignResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.macSign", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsMacVerifyCall struct { s *Service name string macverifyrequest *MacVerifyRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // MacVerify: Verifies MAC tag using a CryptoKeyVersion with CryptoKey.purpose // MAC, and returns a response that indicates whether or not the verification // was successful. // // - name: The resource name of the CryptoKeyVersion to use for verification. func (r *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsService) MacVerify(name string, macverifyrequest *MacVerifyRequest) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsMacVerifyCall { c := &ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsMacVerifyCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name c.macverifyrequest = macverifyrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsMacVerifyCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsMacVerifyCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsMacVerifyCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsMacVerifyCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsMacVerifyCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsMacVerifyCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.macverifyrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}:macVerify") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.macVerify", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.macVerify" call. // Any non-2xx status code is an error. Response headers are in either // *MacVerifyResponse.ServerResponse.Header or (if a response was returned at // all) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to // check whether the returned error was because http.StatusNotModified was // returned. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsMacVerifyCall) Do(opts ...googleapi.CallOption) (*MacVerifyResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &MacVerifyResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.macVerify", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsPatchCall struct { s *Service name string cryptokeyversion *CryptoKeyVersion urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // Patch: Update a CryptoKeyVersion's metadata. state may be changed between // ENABLED and DISABLED using this method. See DestroyCryptoKeyVersion and // RestoreCryptoKeyVersion to move between other states. // // - name: Output only. The resource name for this CryptoKeyVersion in the // format // `projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*`. func (r *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsService) Patch(name string, cryptokeyversion *CryptoKeyVersion) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsPatchCall { c := &ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsPatchCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name c.cryptokeyversion = cryptokeyversion return c } // UpdateMask sets the optional parameter "updateMask": Required. List of // fields to be updated in this request. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsPatchCall) UpdateMask(updateMask string) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsPatchCall { c.urlParams_.Set("updateMask", updateMask) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsPatchCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsPatchCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsPatchCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsPatchCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsPatchCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsPatchCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.cryptokeyversion) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("PATCH", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.patch", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.patch" call. // Any non-2xx status code is an error. Response headers are in either // *CryptoKeyVersion.ServerResponse.Header or (if a response was returned at // all) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to // check whether the returned error was because http.StatusNotModified was // returned. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsPatchCall) Do(opts ...googleapi.CallOption) (*CryptoKeyVersion, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &CryptoKeyVersion{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.patch", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRawDecryptCall struct { s *Service name string rawdecryptrequest *RawDecryptRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // RawDecrypt: Decrypts data that was originally encrypted using a raw // cryptographic mechanism. The CryptoKey.purpose must be RAW_ENCRYPT_DECRYPT. // // - name: The resource name of the CryptoKeyVersion to use for decryption. func (r *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsService) RawDecrypt(name string, rawdecryptrequest *RawDecryptRequest) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRawDecryptCall { c := &ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRawDecryptCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name c.rawdecryptrequest = rawdecryptrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRawDecryptCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRawDecryptCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRawDecryptCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRawDecryptCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRawDecryptCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRawDecryptCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.rawdecryptrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}:rawDecrypt") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.rawDecrypt", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.rawDecrypt" call. // Any non-2xx status code is an error. Response headers are in either // *RawDecryptResponse.ServerResponse.Header or (if a response was returned at // all) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to // check whether the returned error was because http.StatusNotModified was // returned. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRawDecryptCall) Do(opts ...googleapi.CallOption) (*RawDecryptResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &RawDecryptResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.rawDecrypt", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRawEncryptCall struct { s *Service name string rawencryptrequest *RawEncryptRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // RawEncrypt: Encrypts data using portable cryptographic primitives. Most // users should choose Encrypt and Decrypt rather than their raw counterparts. // The CryptoKey.purpose must be RAW_ENCRYPT_DECRYPT. // // - name: The resource name of the CryptoKeyVersion to use for encryption. func (r *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsService) RawEncrypt(name string, rawencryptrequest *RawEncryptRequest) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRawEncryptCall { c := &ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRawEncryptCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name c.rawencryptrequest = rawencryptrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRawEncryptCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRawEncryptCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRawEncryptCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRawEncryptCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRawEncryptCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRawEncryptCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.rawencryptrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}:rawEncrypt") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.rawEncrypt", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.rawEncrypt" call. // Any non-2xx status code is an error. Response headers are in either // *RawEncryptResponse.ServerResponse.Header or (if a response was returned at // all) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to // check whether the returned error was because http.StatusNotModified was // returned. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRawEncryptCall) Do(opts ...googleapi.CallOption) (*RawEncryptResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &RawEncryptResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.rawEncrypt", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRestoreCall struct { s *Service name string restorecryptokeyversionrequest *RestoreCryptoKeyVersionRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // Restore: Restore a CryptoKeyVersion in the DESTROY_SCHEDULED state. Upon // restoration of the CryptoKeyVersion, state will be set to DISABLED, and // destroy_time will be cleared. // // - name: The resource name of the CryptoKeyVersion to restore. func (r *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsService) Restore(name string, restorecryptokeyversionrequest *RestoreCryptoKeyVersionRequest) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRestoreCall { c := &ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRestoreCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name c.restorecryptokeyversionrequest = restorecryptokeyversionrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRestoreCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRestoreCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRestoreCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRestoreCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRestoreCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRestoreCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.restorecryptokeyversionrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}:restore") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.restore", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.restore" call. // Any non-2xx status code is an error. Response headers are in either // *CryptoKeyVersion.ServerResponse.Header or (if a response was returned at // all) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to // check whether the returned error was because http.StatusNotModified was // returned. func (c *ProjectsLocationsKeyRingsCryptoKeysCryptoKeyVersionsRestoreCall) Do(opts ...googleapi.CallOption) (*CryptoKeyVersion, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &CryptoKeyVersion{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.restore", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsImportJobsCreateCall struct { s *Service parent string importjob *ImportJob urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // Create: Create a new ImportJob within a KeyRing. ImportJob.import_method is // required. // // - parent: The name of the KeyRing associated with the ImportJobs. func (r *ProjectsLocationsKeyRingsImportJobsService) Create(parent string, importjob *ImportJob) *ProjectsLocationsKeyRingsImportJobsCreateCall { c := &ProjectsLocationsKeyRingsImportJobsCreateCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.parent = parent c.importjob = importjob return c } // ImportJobId sets the optional parameter "importJobId": Required. It must be // unique within a KeyRing and match the regular expression // `[a-zA-Z0-9_-]{1,63}` func (c *ProjectsLocationsKeyRingsImportJobsCreateCall) ImportJobId(importJobId string) *ProjectsLocationsKeyRingsImportJobsCreateCall { c.urlParams_.Set("importJobId", importJobId) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsImportJobsCreateCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsImportJobsCreateCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsImportJobsCreateCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsImportJobsCreateCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsImportJobsCreateCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsImportJobsCreateCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.importjob) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+parent}/importJobs") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "parent": c.parent, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.importJobs.create", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.importJobs.create" call. // Any non-2xx status code is an error. Response headers are in either // *ImportJob.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsKeyRingsImportJobsCreateCall) Do(opts ...googleapi.CallOption) (*ImportJob, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &ImportJob{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.importJobs.create", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsImportJobsGetCall struct { s *Service name string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // Get: Returns metadata for a given ImportJob. // // - name: The name of the ImportJob to get. func (r *ProjectsLocationsKeyRingsImportJobsService) Get(name string) *ProjectsLocationsKeyRingsImportJobsGetCall { c := &ProjectsLocationsKeyRingsImportJobsGetCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsImportJobsGetCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsImportJobsGetCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsKeyRingsImportJobsGetCall) IfNoneMatch(entityTag string) *ProjectsLocationsKeyRingsImportJobsGetCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsImportJobsGetCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsImportJobsGetCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsImportJobsGetCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsImportJobsGetCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.importJobs.get", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.importJobs.get" call. // Any non-2xx status code is an error. Response headers are in either // *ImportJob.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsKeyRingsImportJobsGetCall) Do(opts ...googleapi.CallOption) (*ImportJob, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &ImportJob{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.importJobs.get", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsImportJobsGetIamPolicyCall struct { s *Service resource string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // GetIamPolicy: Gets the access control policy for a resource. Returns an // empty policy if the resource exists and does not have a policy set. // // - resource: REQUIRED: The resource for which the policy is being requested. // See Resource names (https://cloud.google.com/apis/design/resource_names) // for the appropriate value for this field. func (r *ProjectsLocationsKeyRingsImportJobsService) GetIamPolicy(resource string) *ProjectsLocationsKeyRingsImportJobsGetIamPolicyCall { c := &ProjectsLocationsKeyRingsImportJobsGetIamPolicyCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.resource = resource return c } // OptionsRequestedPolicyVersion sets the optional parameter // "options.requestedPolicyVersion": The maximum policy version that will be // used to format the policy. Valid values are 0, 1, and 3. Requests specifying // an invalid value will be rejected. Requests for policies with any // conditional role bindings must specify version 3. Policies with no // conditional role bindings may specify any valid value or leave the field // unset. The policy in the response might use the policy version that you // specified, or it might use a lower policy version. For example, if you // specify version 3, but the policy has no conditional role bindings, the // response uses version 1. To learn which resources support conditions in // their IAM policies, see the IAM documentation // (https://cloud.google.com/iam/help/conditions/resource-policies). func (c *ProjectsLocationsKeyRingsImportJobsGetIamPolicyCall) OptionsRequestedPolicyVersion(optionsRequestedPolicyVersion int64) *ProjectsLocationsKeyRingsImportJobsGetIamPolicyCall { c.urlParams_.Set("options.requestedPolicyVersion", fmt.Sprint(optionsRequestedPolicyVersion)) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsImportJobsGetIamPolicyCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsImportJobsGetIamPolicyCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsKeyRingsImportJobsGetIamPolicyCall) IfNoneMatch(entityTag string) *ProjectsLocationsKeyRingsImportJobsGetIamPolicyCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsImportJobsGetIamPolicyCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsImportJobsGetIamPolicyCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsImportJobsGetIamPolicyCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsImportJobsGetIamPolicyCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+resource}:getIamPolicy") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "resource": c.resource, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.importJobs.getIamPolicy", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.importJobs.getIamPolicy" call. // Any non-2xx status code is an error. Response headers are in either // *Policy.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsKeyRingsImportJobsGetIamPolicyCall) Do(opts ...googleapi.CallOption) (*Policy, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &Policy{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.importJobs.getIamPolicy", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsImportJobsListCall struct { s *Service parent string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // List: Lists ImportJobs. // // - parent: The resource name of the KeyRing to list, in the format // `projects/*/locations/*/keyRings/*`. func (r *ProjectsLocationsKeyRingsImportJobsService) List(parent string) *ProjectsLocationsKeyRingsImportJobsListCall { c := &ProjectsLocationsKeyRingsImportJobsListCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.parent = parent return c } // Filter sets the optional parameter "filter": Only include resources that // match the filter in the response. For more information, see Sorting and // filtering list results // (https://cloud.google.com/kms/docs/sorting-and-filtering). func (c *ProjectsLocationsKeyRingsImportJobsListCall) Filter(filter string) *ProjectsLocationsKeyRingsImportJobsListCall { c.urlParams_.Set("filter", filter) return c } // OrderBy sets the optional parameter "orderBy": Specify how the results // should be sorted. If not specified, the results will be sorted in the // default order. For more information, see Sorting and filtering list results // (https://cloud.google.com/kms/docs/sorting-and-filtering). func (c *ProjectsLocationsKeyRingsImportJobsListCall) OrderBy(orderBy string) *ProjectsLocationsKeyRingsImportJobsListCall { c.urlParams_.Set("orderBy", orderBy) return c } // PageSize sets the optional parameter "pageSize": Optional limit on the // number of ImportJobs to include in the response. Further ImportJobs can // subsequently be obtained by including the // ListImportJobsResponse.next_page_token in a subsequent request. If // unspecified, the server will pick an appropriate default. func (c *ProjectsLocationsKeyRingsImportJobsListCall) PageSize(pageSize int64) *ProjectsLocationsKeyRingsImportJobsListCall { c.urlParams_.Set("pageSize", fmt.Sprint(pageSize)) return c } // PageToken sets the optional parameter "pageToken": Optional pagination // token, returned earlier via ListImportJobsResponse.next_page_token. func (c *ProjectsLocationsKeyRingsImportJobsListCall) PageToken(pageToken string) *ProjectsLocationsKeyRingsImportJobsListCall { c.urlParams_.Set("pageToken", pageToken) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsImportJobsListCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsImportJobsListCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsKeyRingsImportJobsListCall) IfNoneMatch(entityTag string) *ProjectsLocationsKeyRingsImportJobsListCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsImportJobsListCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsImportJobsListCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsImportJobsListCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsImportJobsListCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+parent}/importJobs") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "parent": c.parent, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.importJobs.list", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.importJobs.list" call. // Any non-2xx status code is an error. Response headers are in either // *ListImportJobsResponse.ServerResponse.Header or (if a response was returned // at all) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to // check whether the returned error was because http.StatusNotModified was // returned. func (c *ProjectsLocationsKeyRingsImportJobsListCall) Do(opts ...googleapi.CallOption) (*ListImportJobsResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &ListImportJobsResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.importJobs.list", "response", internallog.HTTPResponse(res, b)) return ret, nil } // Pages invokes f for each page of results. // A non-nil error returned from f will halt the iteration. // The provided context supersedes any context provided to the Context method. func (c *ProjectsLocationsKeyRingsImportJobsListCall) Pages(ctx context.Context, f func(*ListImportJobsResponse) error) error { c.ctx_ = ctx defer c.PageToken(c.urlParams_.Get("pageToken")) for { x, err := c.Do() if err != nil { return err } if err := f(x); err != nil { return err } if x.NextPageToken == "" { return nil } c.PageToken(x.NextPageToken) } } type ProjectsLocationsKeyRingsImportJobsSetIamPolicyCall struct { s *Service resource string setiampolicyrequest *SetIamPolicyRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // SetIamPolicy: Sets the access control policy on the specified resource. // Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, // and `PERMISSION_DENIED` errors. // // - resource: REQUIRED: The resource for which the policy is being specified. // See Resource names (https://cloud.google.com/apis/design/resource_names) // for the appropriate value for this field. func (r *ProjectsLocationsKeyRingsImportJobsService) SetIamPolicy(resource string, setiampolicyrequest *SetIamPolicyRequest) *ProjectsLocationsKeyRingsImportJobsSetIamPolicyCall { c := &ProjectsLocationsKeyRingsImportJobsSetIamPolicyCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.resource = resource c.setiampolicyrequest = setiampolicyrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsImportJobsSetIamPolicyCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsImportJobsSetIamPolicyCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsImportJobsSetIamPolicyCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsImportJobsSetIamPolicyCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsImportJobsSetIamPolicyCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsImportJobsSetIamPolicyCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.setiampolicyrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+resource}:setIamPolicy") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "resource": c.resource, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.importJobs.setIamPolicy", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.importJobs.setIamPolicy" call. // Any non-2xx status code is an error. Response headers are in either // *Policy.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsKeyRingsImportJobsSetIamPolicyCall) Do(opts ...googleapi.CallOption) (*Policy, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &Policy{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.importJobs.setIamPolicy", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsKeyRingsImportJobsTestIamPermissionsCall struct { s *Service resource string testiampermissionsrequest *TestIamPermissionsRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // TestIamPermissions: Returns permissions that a caller has on the specified // resource. If the resource does not exist, this will return an empty set of // permissions, not a `NOT_FOUND` error. Note: This operation is designed to be // used for building permission-aware UIs and command-line tools, not for // authorization checking. This operation may "fail open" without warning. // // - resource: REQUIRED: The resource for which the policy detail is being // requested. See Resource names // (https://cloud.google.com/apis/design/resource_names) for the appropriate // value for this field. func (r *ProjectsLocationsKeyRingsImportJobsService) TestIamPermissions(resource string, testiampermissionsrequest *TestIamPermissionsRequest) *ProjectsLocationsKeyRingsImportJobsTestIamPermissionsCall { c := &ProjectsLocationsKeyRingsImportJobsTestIamPermissionsCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.resource = resource c.testiampermissionsrequest = testiampermissionsrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsKeyRingsImportJobsTestIamPermissionsCall) Fields(s ...googleapi.Field) *ProjectsLocationsKeyRingsImportJobsTestIamPermissionsCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsKeyRingsImportJobsTestIamPermissionsCall) Context(ctx context.Context) *ProjectsLocationsKeyRingsImportJobsTestIamPermissionsCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsKeyRingsImportJobsTestIamPermissionsCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsKeyRingsImportJobsTestIamPermissionsCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.testiampermissionsrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+resource}:testIamPermissions") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "resource": c.resource, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.importJobs.testIamPermissions", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.keyRings.importJobs.testIamPermissions" call. // Any non-2xx status code is an error. Response headers are in either // *TestIamPermissionsResponse.ServerResponse.Header or (if a response was // returned at all) in error.(*googleapi.Error).Header. Use // googleapi.IsNotModified to check whether the returned error was because // http.StatusNotModified was returned. func (c *ProjectsLocationsKeyRingsImportJobsTestIamPermissionsCall) Do(opts ...googleapi.CallOption) (*TestIamPermissionsResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &TestIamPermissionsResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.keyRings.importJobs.testIamPermissions", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsOperationsGetCall struct { s *Service name string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // Get: Gets the latest state of a long-running operation. Clients can use this // method to poll the operation result at intervals as recommended by the API // service. // // - name: The name of the operation resource. func (r *ProjectsLocationsOperationsService) Get(name string) *ProjectsLocationsOperationsGetCall { c := &ProjectsLocationsOperationsGetCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsOperationsGetCall) Fields(s ...googleapi.Field) *ProjectsLocationsOperationsGetCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsOperationsGetCall) IfNoneMatch(entityTag string) *ProjectsLocationsOperationsGetCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsOperationsGetCall) Context(ctx context.Context) *ProjectsLocationsOperationsGetCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsOperationsGetCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsOperationsGetCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.operations.get", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.operations.get" call. // Any non-2xx status code is an error. Response headers are in either // *Operation.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsOperationsGetCall) Do(opts ...googleapi.CallOption) (*Operation, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &Operation{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.operations.get", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsRetiredResourcesGetCall struct { s *Service name string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // Get: Retrieves a specific RetiredResource resource, which represents the // record of a deleted CryptoKey. // // - name: The name of the RetiredResource to get. func (r *ProjectsLocationsRetiredResourcesService) Get(name string) *ProjectsLocationsRetiredResourcesGetCall { c := &ProjectsLocationsRetiredResourcesGetCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsRetiredResourcesGetCall) Fields(s ...googleapi.Field) *ProjectsLocationsRetiredResourcesGetCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsRetiredResourcesGetCall) IfNoneMatch(entityTag string) *ProjectsLocationsRetiredResourcesGetCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsRetiredResourcesGetCall) Context(ctx context.Context) *ProjectsLocationsRetiredResourcesGetCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsRetiredResourcesGetCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsRetiredResourcesGetCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.retiredResources.get", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.retiredResources.get" call. // Any non-2xx status code is an error. Response headers are in either // *RetiredResource.ServerResponse.Header or (if a response was returned at // all) in error.(*googleapi.Error).Header. Use googleapi.IsNotModified to // check whether the returned error was because http.StatusNotModified was // returned. func (c *ProjectsLocationsRetiredResourcesGetCall) Do(opts ...googleapi.CallOption) (*RetiredResource, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &RetiredResource{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.retiredResources.get", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsRetiredResourcesListCall struct { s *Service parent string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // List: Lists the RetiredResources which are the records of deleted // CryptoKeys. RetiredResources prevent the reuse of these resource names after // deletion. // // - parent: The project-specific location holding the RetiredResources, in the // format `projects/*/locations/*`. func (r *ProjectsLocationsRetiredResourcesService) List(parent string) *ProjectsLocationsRetiredResourcesListCall { c := &ProjectsLocationsRetiredResourcesListCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.parent = parent return c } // PageSize sets the optional parameter "pageSize": Optional limit on the // number of RetiredResources to be included in the response. Further // RetiredResources can subsequently be obtained by including the // ListRetiredResourcesResponse.next_page_token in a subsequent request. If // unspecified, the server will pick an appropriate default. func (c *ProjectsLocationsRetiredResourcesListCall) PageSize(pageSize int64) *ProjectsLocationsRetiredResourcesListCall { c.urlParams_.Set("pageSize", fmt.Sprint(pageSize)) return c } // PageToken sets the optional parameter "pageToken": Optional pagination // token, returned earlier via ListRetiredResourcesResponse.next_page_token. func (c *ProjectsLocationsRetiredResourcesListCall) PageToken(pageToken string) *ProjectsLocationsRetiredResourcesListCall { c.urlParams_.Set("pageToken", pageToken) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsRetiredResourcesListCall) Fields(s ...googleapi.Field) *ProjectsLocationsRetiredResourcesListCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsRetiredResourcesListCall) IfNoneMatch(entityTag string) *ProjectsLocationsRetiredResourcesListCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsRetiredResourcesListCall) Context(ctx context.Context) *ProjectsLocationsRetiredResourcesListCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsRetiredResourcesListCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsRetiredResourcesListCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+parent}/retiredResources") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "parent": c.parent, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.retiredResources.list", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.retiredResources.list" call. // Any non-2xx status code is an error. Response headers are in either // *ListRetiredResourcesResponse.ServerResponse.Header or (if a response was // returned at all) in error.(*googleapi.Error).Header. Use // googleapi.IsNotModified to check whether the returned error was because // http.StatusNotModified was returned. func (c *ProjectsLocationsRetiredResourcesListCall) Do(opts ...googleapi.CallOption) (*ListRetiredResourcesResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &ListRetiredResourcesResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.retiredResources.list", "response", internallog.HTTPResponse(res, b)) return ret, nil } // Pages invokes f for each page of results. // A non-nil error returned from f will halt the iteration. // The provided context supersedes any context provided to the Context method. func (c *ProjectsLocationsRetiredResourcesListCall) Pages(ctx context.Context, f func(*ListRetiredResourcesResponse) error) error { c.ctx_ = ctx defer c.PageToken(c.urlParams_.Get("pageToken")) for { x, err := c.Do() if err != nil { return err } if err := f(x); err != nil { return err } if x.NextPageToken == "" { return nil } c.PageToken(x.NextPageToken) } } type ProjectsLocationsSingleTenantHsmInstancesCreateCall struct { s *Service parent string singletenanthsminstance *SingleTenantHsmInstance urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // Create: Creates a new SingleTenantHsmInstance in a given Project and // Location. User must create a RegisterTwoFactorAuthKeys proposal with this // single-tenant HSM instance to finish setup of the instance. // // - parent: The resource name of the location associated with the // SingleTenantHsmInstance, in the format `projects/*/locations/*`. func (r *ProjectsLocationsSingleTenantHsmInstancesService) Create(parent string, singletenanthsminstance *SingleTenantHsmInstance) *ProjectsLocationsSingleTenantHsmInstancesCreateCall { c := &ProjectsLocationsSingleTenantHsmInstancesCreateCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.parent = parent c.singletenanthsminstance = singletenanthsminstance return c } // SingleTenantHsmInstanceId sets the optional parameter // "singleTenantHsmInstanceId": It must be unique within a location and match // the regular expression `[a-zA-Z0-9_-]{1,63}`. func (c *ProjectsLocationsSingleTenantHsmInstancesCreateCall) SingleTenantHsmInstanceId(singleTenantHsmInstanceId string) *ProjectsLocationsSingleTenantHsmInstancesCreateCall { c.urlParams_.Set("singleTenantHsmInstanceId", singleTenantHsmInstanceId) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsSingleTenantHsmInstancesCreateCall) Fields(s ...googleapi.Field) *ProjectsLocationsSingleTenantHsmInstancesCreateCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsSingleTenantHsmInstancesCreateCall) Context(ctx context.Context) *ProjectsLocationsSingleTenantHsmInstancesCreateCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsSingleTenantHsmInstancesCreateCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsSingleTenantHsmInstancesCreateCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.singletenanthsminstance) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+parent}/singleTenantHsmInstances") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "parent": c.parent, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.singleTenantHsmInstances.create", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.singleTenantHsmInstances.create" call. // Any non-2xx status code is an error. Response headers are in either // *Operation.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsSingleTenantHsmInstancesCreateCall) Do(opts ...googleapi.CallOption) (*Operation, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &Operation{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.singleTenantHsmInstances.create", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsSingleTenantHsmInstancesGetCall struct { s *Service name string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // Get: Returns metadata for a given SingleTenantHsmInstance. // // - name: The name of the SingleTenantHsmInstance to get. func (r *ProjectsLocationsSingleTenantHsmInstancesService) Get(name string) *ProjectsLocationsSingleTenantHsmInstancesGetCall { c := &ProjectsLocationsSingleTenantHsmInstancesGetCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsSingleTenantHsmInstancesGetCall) Fields(s ...googleapi.Field) *ProjectsLocationsSingleTenantHsmInstancesGetCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsSingleTenantHsmInstancesGetCall) IfNoneMatch(entityTag string) *ProjectsLocationsSingleTenantHsmInstancesGetCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsSingleTenantHsmInstancesGetCall) Context(ctx context.Context) *ProjectsLocationsSingleTenantHsmInstancesGetCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsSingleTenantHsmInstancesGetCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsSingleTenantHsmInstancesGetCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.singleTenantHsmInstances.get", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.singleTenantHsmInstances.get" call. // Any non-2xx status code is an error. Response headers are in either // *SingleTenantHsmInstance.ServerResponse.Header or (if a response was // returned at all) in error.(*googleapi.Error).Header. Use // googleapi.IsNotModified to check whether the returned error was because // http.StatusNotModified was returned. func (c *ProjectsLocationsSingleTenantHsmInstancesGetCall) Do(opts ...googleapi.CallOption) (*SingleTenantHsmInstance, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &SingleTenantHsmInstance{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.singleTenantHsmInstances.get", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsSingleTenantHsmInstancesListCall struct { s *Service parent string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // List: Lists SingleTenantHsmInstances. // // - parent: The resource name of the location associated with the // SingleTenantHsmInstances to list, in the format `projects/*/locations/*`. func (r *ProjectsLocationsSingleTenantHsmInstancesService) List(parent string) *ProjectsLocationsSingleTenantHsmInstancesListCall { c := &ProjectsLocationsSingleTenantHsmInstancesListCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.parent = parent return c } // Filter sets the optional parameter "filter": Only include resources that // match the filter in the response. For more information, see Sorting and // filtering list results // (https://cloud.google.com/kms/docs/sorting-and-filtering). func (c *ProjectsLocationsSingleTenantHsmInstancesListCall) Filter(filter string) *ProjectsLocationsSingleTenantHsmInstancesListCall { c.urlParams_.Set("filter", filter) return c } // OrderBy sets the optional parameter "orderBy": Specify how the results // should be sorted. If not specified, the results will be sorted in the // default order. For more information, see Sorting and filtering list results // (https://cloud.google.com/kms/docs/sorting-and-filtering). func (c *ProjectsLocationsSingleTenantHsmInstancesListCall) OrderBy(orderBy string) *ProjectsLocationsSingleTenantHsmInstancesListCall { c.urlParams_.Set("orderBy", orderBy) return c } // PageSize sets the optional parameter "pageSize": Optional limit on the // number of SingleTenantHsmInstances to include in the response. Further // SingleTenantHsmInstances can subsequently be obtained by including the // ListSingleTenantHsmInstancesResponse.next_page_token in a subsequent // request. If unspecified, the server will pick an appropriate default. func (c *ProjectsLocationsSingleTenantHsmInstancesListCall) PageSize(pageSize int64) *ProjectsLocationsSingleTenantHsmInstancesListCall { c.urlParams_.Set("pageSize", fmt.Sprint(pageSize)) return c } // PageToken sets the optional parameter "pageToken": Optional pagination // token, returned earlier via // ListSingleTenantHsmInstancesResponse.next_page_token. func (c *ProjectsLocationsSingleTenantHsmInstancesListCall) PageToken(pageToken string) *ProjectsLocationsSingleTenantHsmInstancesListCall { c.urlParams_.Set("pageToken", pageToken) return c } // ShowDeleted sets the optional parameter "showDeleted": If set to true, // HsmManagement.ListSingleTenantHsmInstances will also return // SingleTenantHsmInstances in DELETED state. func (c *ProjectsLocationsSingleTenantHsmInstancesListCall) ShowDeleted(showDeleted bool) *ProjectsLocationsSingleTenantHsmInstancesListCall { c.urlParams_.Set("showDeleted", fmt.Sprint(showDeleted)) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsSingleTenantHsmInstancesListCall) Fields(s ...googleapi.Field) *ProjectsLocationsSingleTenantHsmInstancesListCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsSingleTenantHsmInstancesListCall) IfNoneMatch(entityTag string) *ProjectsLocationsSingleTenantHsmInstancesListCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsSingleTenantHsmInstancesListCall) Context(ctx context.Context) *ProjectsLocationsSingleTenantHsmInstancesListCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsSingleTenantHsmInstancesListCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsSingleTenantHsmInstancesListCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+parent}/singleTenantHsmInstances") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "parent": c.parent, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.singleTenantHsmInstances.list", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.singleTenantHsmInstances.list" call. // Any non-2xx status code is an error. Response headers are in either // *ListSingleTenantHsmInstancesResponse.ServerResponse.Header or (if a // response was returned at all) in error.(*googleapi.Error).Header. Use // googleapi.IsNotModified to check whether the returned error was because // http.StatusNotModified was returned. func (c *ProjectsLocationsSingleTenantHsmInstancesListCall) Do(opts ...googleapi.CallOption) (*ListSingleTenantHsmInstancesResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &ListSingleTenantHsmInstancesResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.singleTenantHsmInstances.list", "response", internallog.HTTPResponse(res, b)) return ret, nil } // Pages invokes f for each page of results. // A non-nil error returned from f will halt the iteration. // The provided context supersedes any context provided to the Context method. func (c *ProjectsLocationsSingleTenantHsmInstancesListCall) Pages(ctx context.Context, f func(*ListSingleTenantHsmInstancesResponse) error) error { c.ctx_ = ctx defer c.PageToken(c.urlParams_.Get("pageToken")) for { x, err := c.Do() if err != nil { return err } if err := f(x); err != nil { return err } if x.NextPageToken == "" { return nil } c.PageToken(x.NextPageToken) } } type ProjectsLocationsSingleTenantHsmInstancesProposalsApproveCall struct { s *Service name string approvesingletenanthsminstanceproposalrequest *ApproveSingleTenantHsmInstanceProposalRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // Approve: Approves a SingleTenantHsmInstanceProposal for a given // SingleTenantHsmInstance. The proposal must be in the PENDING state. // // - name: The name of the SingleTenantHsmInstanceProposal to approve. func (r *ProjectsLocationsSingleTenantHsmInstancesProposalsService) Approve(name string, approvesingletenanthsminstanceproposalrequest *ApproveSingleTenantHsmInstanceProposalRequest) *ProjectsLocationsSingleTenantHsmInstancesProposalsApproveCall { c := &ProjectsLocationsSingleTenantHsmInstancesProposalsApproveCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name c.approvesingletenanthsminstanceproposalrequest = approvesingletenanthsminstanceproposalrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsApproveCall) Fields(s ...googleapi.Field) *ProjectsLocationsSingleTenantHsmInstancesProposalsApproveCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsApproveCall) Context(ctx context.Context) *ProjectsLocationsSingleTenantHsmInstancesProposalsApproveCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsApproveCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsApproveCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.approvesingletenanthsminstanceproposalrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}:approve") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.singleTenantHsmInstances.proposals.approve", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.singleTenantHsmInstances.proposals.approve" call. // Any non-2xx status code is an error. Response headers are in either // *ApproveSingleTenantHsmInstanceProposalResponse.ServerResponse.Header or (if // a response was returned at all) in error.(*googleapi.Error).Header. Use // googleapi.IsNotModified to check whether the returned error was because // http.StatusNotModified was returned. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsApproveCall) Do(opts ...googleapi.CallOption) (*ApproveSingleTenantHsmInstanceProposalResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &ApproveSingleTenantHsmInstanceProposalResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.singleTenantHsmInstances.proposals.approve", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsSingleTenantHsmInstancesProposalsCreateCall struct { s *Service parent string singletenanthsminstanceproposal *SingleTenantHsmInstanceProposal urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // Create: Creates a new SingleTenantHsmInstanceProposal for a given // SingleTenantHsmInstance. // // - parent: The name of the SingleTenantHsmInstance associated with the // SingleTenantHsmInstanceProposals. func (r *ProjectsLocationsSingleTenantHsmInstancesProposalsService) Create(parent string, singletenanthsminstanceproposal *SingleTenantHsmInstanceProposal) *ProjectsLocationsSingleTenantHsmInstancesProposalsCreateCall { c := &ProjectsLocationsSingleTenantHsmInstancesProposalsCreateCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.parent = parent c.singletenanthsminstanceproposal = singletenanthsminstanceproposal return c } // SingleTenantHsmInstanceProposalId sets the optional parameter // "singleTenantHsmInstanceProposalId": It must be unique within a location and // match the regular expression `[a-zA-Z0-9_-]{1,63}`. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsCreateCall) SingleTenantHsmInstanceProposalId(singleTenantHsmInstanceProposalId string) *ProjectsLocationsSingleTenantHsmInstancesProposalsCreateCall { c.urlParams_.Set("singleTenantHsmInstanceProposalId", singleTenantHsmInstanceProposalId) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsCreateCall) Fields(s ...googleapi.Field) *ProjectsLocationsSingleTenantHsmInstancesProposalsCreateCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsCreateCall) Context(ctx context.Context) *ProjectsLocationsSingleTenantHsmInstancesProposalsCreateCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsCreateCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsCreateCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.singletenanthsminstanceproposal) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+parent}/proposals") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "parent": c.parent, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.singleTenantHsmInstances.proposals.create", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.singleTenantHsmInstances.proposals.create" call. // Any non-2xx status code is an error. Response headers are in either // *Operation.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsCreateCall) Do(opts ...googleapi.CallOption) (*Operation, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &Operation{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.singleTenantHsmInstances.proposals.create", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsSingleTenantHsmInstancesProposalsDeleteCall struct { s *Service name string urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // Delete: Deletes a SingleTenantHsmInstanceProposal. // // - name: The name of the SingleTenantHsmInstanceProposal to delete. func (r *ProjectsLocationsSingleTenantHsmInstancesProposalsService) Delete(name string) *ProjectsLocationsSingleTenantHsmInstancesProposalsDeleteCall { c := &ProjectsLocationsSingleTenantHsmInstancesProposalsDeleteCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsDeleteCall) Fields(s ...googleapi.Field) *ProjectsLocationsSingleTenantHsmInstancesProposalsDeleteCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsDeleteCall) Context(ctx context.Context) *ProjectsLocationsSingleTenantHsmInstancesProposalsDeleteCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsDeleteCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsDeleteCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("DELETE", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.singleTenantHsmInstances.proposals.delete", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.singleTenantHsmInstances.proposals.delete" call. // Any non-2xx status code is an error. Response headers are in either // *Empty.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsDeleteCall) Do(opts ...googleapi.CallOption) (*Empty, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &Empty{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.singleTenantHsmInstances.proposals.delete", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsSingleTenantHsmInstancesProposalsExecuteCall struct { s *Service name string executesingletenanthsminstanceproposalrequest *ExecuteSingleTenantHsmInstanceProposalRequest urlParams_ gensupport.URLParams ctx_ context.Context header_ http.Header } // Execute: Executes a SingleTenantHsmInstanceProposal for a given // SingleTenantHsmInstance. The proposal must be in the APPROVED state. // // - name: The name of the SingleTenantHsmInstanceProposal to execute. func (r *ProjectsLocationsSingleTenantHsmInstancesProposalsService) Execute(name string, executesingletenanthsminstanceproposalrequest *ExecuteSingleTenantHsmInstanceProposalRequest) *ProjectsLocationsSingleTenantHsmInstancesProposalsExecuteCall { c := &ProjectsLocationsSingleTenantHsmInstancesProposalsExecuteCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name c.executesingletenanthsminstanceproposalrequest = executesingletenanthsminstanceproposalrequest return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsExecuteCall) Fields(s ...googleapi.Field) *ProjectsLocationsSingleTenantHsmInstancesProposalsExecuteCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsExecuteCall) Context(ctx context.Context) *ProjectsLocationsSingleTenantHsmInstancesProposalsExecuteCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsExecuteCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsExecuteCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "application/json", c.header_) body, err := googleapi.WithoutDataWrapper.JSONBuffer(c.executesingletenanthsminstanceproposalrequest) if err != nil { return nil, err } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}:execute") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("POST", urls, body) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.singleTenantHsmInstances.proposals.execute", "request", internallog.HTTPRequest(req, body.Bytes())) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.singleTenantHsmInstances.proposals.execute" call. // Any non-2xx status code is an error. Response headers are in either // *Operation.ServerResponse.Header or (if a response was returned at all) in // error.(*googleapi.Error).Header. Use googleapi.IsNotModified to check // whether the returned error was because http.StatusNotModified was returned. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsExecuteCall) Do(opts ...googleapi.CallOption) (*Operation, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &Operation{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.singleTenantHsmInstances.proposals.execute", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsSingleTenantHsmInstancesProposalsGetCall struct { s *Service name string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // Get: Returns metadata for a given SingleTenantHsmInstanceProposal. // // - name: The name of the SingleTenantHsmInstanceProposal to get. func (r *ProjectsLocationsSingleTenantHsmInstancesProposalsService) Get(name string) *ProjectsLocationsSingleTenantHsmInstancesProposalsGetCall { c := &ProjectsLocationsSingleTenantHsmInstancesProposalsGetCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.name = name return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsGetCall) Fields(s ...googleapi.Field) *ProjectsLocationsSingleTenantHsmInstancesProposalsGetCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsGetCall) IfNoneMatch(entityTag string) *ProjectsLocationsSingleTenantHsmInstancesProposalsGetCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsGetCall) Context(ctx context.Context) *ProjectsLocationsSingleTenantHsmInstancesProposalsGetCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsGetCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsGetCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+name}") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "name": c.name, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.singleTenantHsmInstances.proposals.get", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.singleTenantHsmInstances.proposals.get" call. // Any non-2xx status code is an error. Response headers are in either // *SingleTenantHsmInstanceProposal.ServerResponse.Header or (if a response was // returned at all) in error.(*googleapi.Error).Header. Use // googleapi.IsNotModified to check whether the returned error was because // http.StatusNotModified was returned. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsGetCall) Do(opts ...googleapi.CallOption) (*SingleTenantHsmInstanceProposal, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &SingleTenantHsmInstanceProposal{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.singleTenantHsmInstances.proposals.get", "response", internallog.HTTPResponse(res, b)) return ret, nil } type ProjectsLocationsSingleTenantHsmInstancesProposalsListCall struct { s *Service parent string urlParams_ gensupport.URLParams ifNoneMatch_ string ctx_ context.Context header_ http.Header } // List: Lists SingleTenantHsmInstanceProposals. // // - parent: The resource name of the single tenant HSM instance associated // with the SingleTenantHsmInstanceProposals to list, in the format // `projects/*/locations/*/singleTenantHsmInstances/*`. func (r *ProjectsLocationsSingleTenantHsmInstancesProposalsService) List(parent string) *ProjectsLocationsSingleTenantHsmInstancesProposalsListCall { c := &ProjectsLocationsSingleTenantHsmInstancesProposalsListCall{s: r.s, urlParams_: make(gensupport.URLParams)} c.parent = parent return c } // Filter sets the optional parameter "filter": Only include resources that // match the filter in the response. For more information, see Sorting and // filtering list results // (https://cloud.google.com/kms/docs/sorting-and-filtering). func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsListCall) Filter(filter string) *ProjectsLocationsSingleTenantHsmInstancesProposalsListCall { c.urlParams_.Set("filter", filter) return c } // OrderBy sets the optional parameter "orderBy": Specify how the results // should be sorted. If not specified, the results will be sorted in the // default order. For more information, see Sorting and filtering list results // (https://cloud.google.com/kms/docs/sorting-and-filtering). func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsListCall) OrderBy(orderBy string) *ProjectsLocationsSingleTenantHsmInstancesProposalsListCall { c.urlParams_.Set("orderBy", orderBy) return c } // PageSize sets the optional parameter "pageSize": Optional limit on the // number of SingleTenantHsmInstanceProposals to include in the response. // Further SingleTenantHsmInstanceProposals can subsequently be obtained by // including the ListSingleTenantHsmInstanceProposalsResponse.next_page_token // in a subsequent request. If unspecified, the server will pick an appropriate // default. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsListCall) PageSize(pageSize int64) *ProjectsLocationsSingleTenantHsmInstancesProposalsListCall { c.urlParams_.Set("pageSize", fmt.Sprint(pageSize)) return c } // PageToken sets the optional parameter "pageToken": Optional pagination // token, returned earlier via // ListSingleTenantHsmInstanceProposalsResponse.next_page_token. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsListCall) PageToken(pageToken string) *ProjectsLocationsSingleTenantHsmInstancesProposalsListCall { c.urlParams_.Set("pageToken", pageToken) return c } // ShowDeleted sets the optional parameter "showDeleted": If set to true, // HsmManagement.ListSingleTenantHsmInstanceProposals will also return // SingleTenantHsmInstanceProposals in DELETED state. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsListCall) ShowDeleted(showDeleted bool) *ProjectsLocationsSingleTenantHsmInstancesProposalsListCall { c.urlParams_.Set("showDeleted", fmt.Sprint(showDeleted)) return c } // Fields allows partial responses to be retrieved. See // https://developers.google.com/gdata/docs/2.0/basics#PartialResponse for more // details. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsListCall) Fields(s ...googleapi.Field) *ProjectsLocationsSingleTenantHsmInstancesProposalsListCall { c.urlParams_.Set("fields", googleapi.CombineFields(s)) return c } // IfNoneMatch sets an optional parameter which makes the operation fail if the // object's ETag matches the given value. This is useful for getting updates // only after the object has changed since the last request. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsListCall) IfNoneMatch(entityTag string) *ProjectsLocationsSingleTenantHsmInstancesProposalsListCall { c.ifNoneMatch_ = entityTag return c } // Context sets the context to be used in this call's Do method. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsListCall) Context(ctx context.Context) *ProjectsLocationsSingleTenantHsmInstancesProposalsListCall { c.ctx_ = ctx return c } // Header returns a http.Header that can be modified by the caller to add // headers to the request. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsListCall) Header() http.Header { if c.header_ == nil { c.header_ = make(http.Header) } return c.header_ } func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsListCall) doRequest(alt string) (*http.Response, error) { reqHeaders := gensupport.SetHeaders(c.s.userAgent(), "", c.header_) if c.ifNoneMatch_ != "" { reqHeaders.Set("If-None-Match", c.ifNoneMatch_) } c.urlParams_.Set("alt", alt) c.urlParams_.Set("prettyPrint", "false") urls := googleapi.ResolveRelative(c.s.BasePath, "v1/{+parent}/proposals") urls += "?" + c.urlParams_.Encode() req, err := http.NewRequest("GET", urls, nil) if err != nil { return nil, err } req.Header = reqHeaders googleapi.Expand(req.URL, map[string]string{ "parent": c.parent, }) c.s.logger.DebugContext(c.ctx_, "api request", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.singleTenantHsmInstances.proposals.list", "request", internallog.HTTPRequest(req, nil)) return gensupport.SendRequest(c.ctx_, c.s.client, req) } // Do executes the "cloudkms.projects.locations.singleTenantHsmInstances.proposals.list" call. // Any non-2xx status code is an error. Response headers are in either // *ListSingleTenantHsmInstanceProposalsResponse.ServerResponse.Header or (if a // response was returned at all) in error.(*googleapi.Error).Header. Use // googleapi.IsNotModified to check whether the returned error was because // http.StatusNotModified was returned. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsListCall) Do(opts ...googleapi.CallOption) (*ListSingleTenantHsmInstanceProposalsResponse, error) { gensupport.SetOptions(c.urlParams_, opts...) res, err := c.doRequest("json") if res != nil && res.StatusCode == http.StatusNotModified { if res.Body != nil { res.Body.Close() } return nil, gensupport.WrapError(&googleapi.Error{ Code: res.StatusCode, Header: res.Header, }) } if err != nil { return nil, err } defer googleapi.CloseBody(res) if err := googleapi.CheckResponse(res); err != nil { return nil, gensupport.WrapError(err) } ret := &ListSingleTenantHsmInstanceProposalsResponse{ ServerResponse: googleapi.ServerResponse{ Header: res.Header, HTTPStatusCode: res.StatusCode, }, } target := &ret b, err := gensupport.DecodeResponseBytes(target, res) if err != nil { return nil, err } c.s.logger.DebugContext(c.ctx_, "api response", "serviceName", apiName, "rpcName", "cloudkms.projects.locations.singleTenantHsmInstances.proposals.list", "response", internallog.HTTPResponse(res, b)) return ret, nil } // Pages invokes f for each page of results. // A non-nil error returned from f will halt the iteration. // The provided context supersedes any context provided to the Context method. func (c *ProjectsLocationsSingleTenantHsmInstancesProposalsListCall) Pages(ctx context.Context, f func(*ListSingleTenantHsmInstanceProposalsResponse) error) error { c.ctx_ = ctx defer c.PageToken(c.urlParams_.Get("pageToken")) for { x, err := c.Do() if err != nil { return err } if err := f(x); err != nil { return err } if x.NextPageToken == "" { return nil } c.PageToken(x.NextPageToken) } }