feat: AuditConfig for IAM v1 (#356)

- [ ] Regenerate this pull request now.

PiperOrigin-RevId: 439356405

Source-Link: googleapis/googleapis@afa2ba1

Source-Link: googleapis/googleapis-gen@3e40c17
Copy-Tag: eyJwIjoiLmdpdGh1Yi8uT3dsQm90LnlhbWwiLCJoIjoiM2U0MGMxN2UxNTEwYzk1ZmFiNThmYzIxNDNjY2I2MWNjZWNhNTk4OSJ9

feat: Added support for accessing secret versions by alias
Clients can now associate custom strings with specified secret versions for later access.

PiperOrigin-RevId: 439320490

Source-Link: googleapis/googleapis@bbe5618

Source-Link: googleapis/googleapis-gen@6bdfcfd
Copy-Tag: eyJwIjoiLmdpdGh1Yi8uT3dsQm90LnlhbWwiLCJoIjoiNmJkZmNmZDg3OTc0MGM2MmJiZTExYjJlYmM2YjgzNzFmMGQ0MjBhZiJ9

Author: gcf-owl-bot[bot]

packages/google-cloud-secretmanager/protos/google/cloud/secretmanager/v1/resources.proto

@@ -97,6 +97,19 @@ message Secret {
   // Optional. Rotation policy attached to the [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is no
   // rotation policy.
   Rotation rotation = 9 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. Mapping from version alias to version name.
+  //
+  // A version alias is a string with a maximum length of 63 characters and can
+  // contain uppercase and lowercase letters, numerals, and the hyphen (`-`)
+  // and underscore ('_') characters. An alias string must start with a
+  // letter and cannot be the string 'latest' or 'NEW'.
+  // No more than 50 aliases can be assigned to a given secret.
+  //
+  // Version-Alias pairs will be viewable via GetSecret and modifiable via
+  // UpdateSecret. At launch access by alias will only be supported on
+  // GetSecretVersion and AccessSecretVersion.
+  map<string, int64> version_aliases = 11 [(google.api.field_behavior) = OPTIONAL];
 }
 
 // A secret version resource in the Secret Manager API.

packages/google-cloud-secretmanager/protos/protos.d.ts

@@ -32,7 +32,7 @@ function main(resource) {
   // const resource = 'abc123'
   /**
    *  OPTIONAL: A `GetPolicyOptions` object for specifying options to
-   *  `GetIamPolicy`. This field is only used by Cloud IAM.
+   *  `GetIamPolicy`.
    */
   // const options = {}
 

packages/google-cloud-secretmanager/protos/protos.js

@@ -37,6 +37,13 @@ function main(resource, policy) {
    *  might reject them.
    */
   // const policy = {}
+  /**
+   *  OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
+   *  the fields in the mask will be modified. If no mask is provided, the
+   *  following default mask is used:
+   *  `paths: "bindings, etag"`
+   */
+  // const updateMask = {}
 
   // Imports the Secretmanager library
   const {SecretManagerServiceClient} = require('@google-cloud/secret-manager').v1;

packages/google-cloud-secretmanager/protos/protos.json

@@ -558,7 +558,7 @@
       "segments": [
         {
           "start": 25,
-          "end": 59,
+          "end": 66,
           "type": "FULL"
         }
       ],
@@ -574,6 +574,10 @@
           {
             "name": "policy",
             "type": ".google.iam.v1.Policy"
+          },
+          {
+            "name": "update_mask",
+            "type": ".google.protobuf.FieldMask"
           }
         ],
         "resultType": ".google.iam.v1.Policy",

packages/google-cloud-secretmanager/samples/generated/v1/secret_manager_service.get_iam_policy.js

@@ -1352,6 +1352,12 @@ export class SecretManagerServiceClient {
    *   the policy is limited to a few 10s of KB. An empty policy is a
    *   valid policy but certain Cloud Platform services (such as Projects)
    *   might reject them.
+   * @param {google.protobuf.FieldMask} request.updateMask
+   *   OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
+   *   the fields in the mask will be modified. If no mask is provided, the
+   *   following default mask is used:
+   *
+   *   `paths: "bindings, etag"`
    * @param {object} [options]
    *   Call options. See {@link https://googleapis.dev/nodejs/google-gax/latest/interfaces/CallOptions.html|CallOptions} for more details.
    * @returns {Promise} - The promise which resolves to an array.
@@ -1439,7 +1445,7 @@ export class SecretManagerServiceClient {
    *   See the operation documentation for the appropriate value for this field.
    * @param {google.iam.v1.GetPolicyOptions} request.options
    *   OPTIONAL: A `GetPolicyOptions` object for specifying options to
-   *   `GetIamPolicy`. This field is only used by Cloud IAM.
+   *   `GetIamPolicy`.
    * @param {object} [options]
    *   Call options. See {@link https://googleapis.dev/nodejs/google-gax/latest/interfaces/CallOptions.html|CallOptions} for more details.
    * @returns {Promise} - The promise which resolves to an array.