feat(cloudfunctions): update the api

#### cloudfunctions:v1 The following keys were added: - schemas.CloudFunction.properties.secretEnvironmentVariables (Total Keys: 2) - schemas.CloudFunction.properties.secretVolumes (Total Keys: 2) - schemas.SecretEnvVar (Total Keys: 6) - schemas.SecretVersion (Total Keys: 4) - schemas.SecretVolume (Total Keys: 7)
googleapis · Jul 20, 2021 · 06332af · 06332af
1 parent 08ace15
commit 06332af
Show file tree

Hide file tree

Showing 2 changed files with 163 additions and 1 deletion.
diff --git a/docs/dyn/cloudfunctions_v1.projects.locations.functions.html b/docs/dyn/cloudfunctions_v1.projects.locations.functions.html
@@ -189,6 +189,27 @@ <h3>Method Details</h3>
   &quot;name&quot;: &quot;A String&quot;, # A user-defined name of the function. Function names must be unique globally and match pattern `projects/*/locations/*/functions/*`
   &quot;network&quot;: &quot;A String&quot;, # The VPC Network that this cloud function can connect to. It can be either the fully-qualified URI, or the short name of the network resource. If the short network name is used, the network must belong to the same project. Otherwise, it must belong to a project within the same organization. The format of this field is either `projects/{project}/global/networks/{network}` or `{network}`, where {project} is a project id where the network is defined, and {network} is the short name of the network. This field is mutually exclusive with `vpc_connector` and will be replaced by it. See [the VPC documentation](https://cloud.google.com/compute/docs/vpc) for more information on connecting Cloud projects.
   &quot;runtime&quot;: &quot;A String&quot;, # The runtime in which to run the function. Required when deploying a new function, optional when updating an existing function. For a complete list of possible choices, see the [`gcloud` command reference](/sdk/gcloud/reference/functions/deploy#--runtime).
+  &quot;secretEnvironmentVariables&quot;: [ # Secret environment variables configuration.
+    { # Configuration for a secret environment variable. It has the information necessary to fetch the secret value from secret manager and expose it as an environment variable. Secret value is not a part of the configuration. Secret values are only fetched when a new clone starts.
+      &quot;key&quot;: &quot;A String&quot;, # Name of the environment variable.
+      &quot;projectId&quot;: &quot;A String&quot;, # Project whose secret manager data is being referenced. Cross project secrets are not supported.
+      &quot;secret&quot;: &quot;A String&quot;, # Name of the secret in secret manager (not the full resource name).
+      &quot;version&quot;: &quot;A String&quot;, # Version of the secret (version number or the string &#x27;latest&#x27;). It is recommended to use a numeric version for secret environment variables as any updates to the secret value is not reflected until new clones start.
+    },
+  ],
+  &quot;secretVolumes&quot;: [ # Secret volumes configuration.
+    { # Configuration for a secret volume. It has the information necessary to fetch the secret value from secret manager and make it available as files mounted at the requested paths within the application container. Secret value is not a part of the configuration. Every filesystem read operation performs a lookup in secret manager to retrieve the secret value.
+      &quot;mountPath&quot;: &quot;A String&quot;, # The path within the container to mount the secret volume. For example, setting the mount_path as `/etc/secrets` would mount the secret value files under the `/etc/secrets` directory. This directory will also be completely shadowed and unavailable to mount any other secrets. Recommended mount paths: /etc/secrets Restricted mount paths: /cloudsql, /dev/log, /pod, /proc, /var/log
+      &quot;projectId&quot;: &quot;A String&quot;, # Project whose secret manager data is being referenced. Cross project secrets are not supported.
+      &quot;secret&quot;: &quot;A String&quot;, # Name of the secret in secret manager (not the full resource name).
+      &quot;versions&quot;: [ # List of secret versions to mount for this secret. If empty, the `latest` version of the secret will be made available in a file named after the secret under the mount point.
+        { # Configuration for a single version.
+          &quot;path&quot;: &quot;A String&quot;, # Relative path of the file under the mount path where the secret value for this version will be fetched and made available. For example, setting the mount_path as &#x27;/etc/secrets&#x27; and path as `/secret_foo` would mount the secret value file at `/etc/secrets/secret_foo`.
+          &quot;version&quot;: &quot;A String&quot;, # Version of the secret (version number or the string &#x27;latest&#x27;). It is preferrable to use `latest` version with secret volumes as secret value changes are reflected immediately.
+        },
+      ],
+    },
+  ],
   &quot;serviceAccountEmail&quot;: &quot;A String&quot;, # The email of the function&#x27;s service account. If empty, defaults to `{project_id}@appspot.gserviceaccount.com`.
   &quot;sourceArchiveUrl&quot;: &quot;A String&quot;, # The Google Cloud Storage URL, starting with gs://, pointing to the zip archive which contains the function.
   &quot;sourceRepository&quot;: { # Describes SourceRepository, used to represent parameters related to source repository where a function is hosted. # **Beta Feature** The source repository where a function is hosted.
@@ -367,6 +388,27 @@ <h3>Method Details</h3>
   &quot;name&quot;: &quot;A String&quot;, # A user-defined name of the function. Function names must be unique globally and match pattern `projects/*/locations/*/functions/*`
   &quot;network&quot;: &quot;A String&quot;, # The VPC Network that this cloud function can connect to. It can be either the fully-qualified URI, or the short name of the network resource. If the short network name is used, the network must belong to the same project. Otherwise, it must belong to a project within the same organization. The format of this field is either `projects/{project}/global/networks/{network}` or `{network}`, where {project} is a project id where the network is defined, and {network} is the short name of the network. This field is mutually exclusive with `vpc_connector` and will be replaced by it. See [the VPC documentation](https://cloud.google.com/compute/docs/vpc) for more information on connecting Cloud projects.
   &quot;runtime&quot;: &quot;A String&quot;, # The runtime in which to run the function. Required when deploying a new function, optional when updating an existing function. For a complete list of possible choices, see the [`gcloud` command reference](/sdk/gcloud/reference/functions/deploy#--runtime).
+  &quot;secretEnvironmentVariables&quot;: [ # Secret environment variables configuration.
+    { # Configuration for a secret environment variable. It has the information necessary to fetch the secret value from secret manager and expose it as an environment variable. Secret value is not a part of the configuration. Secret values are only fetched when a new clone starts.
+      &quot;key&quot;: &quot;A String&quot;, # Name of the environment variable.
+      &quot;projectId&quot;: &quot;A String&quot;, # Project whose secret manager data is being referenced. Cross project secrets are not supported.
+      &quot;secret&quot;: &quot;A String&quot;, # Name of the secret in secret manager (not the full resource name).
+      &quot;version&quot;: &quot;A String&quot;, # Version of the secret (version number or the string &#x27;latest&#x27;). It is recommended to use a numeric version for secret environment variables as any updates to the secret value is not reflected until new clones start.
+    },
+  ],
+  &quot;secretVolumes&quot;: [ # Secret volumes configuration.
+    { # Configuration for a secret volume. It has the information necessary to fetch the secret value from secret manager and make it available as files mounted at the requested paths within the application container. Secret value is not a part of the configuration. Every filesystem read operation performs a lookup in secret manager to retrieve the secret value.
+      &quot;mountPath&quot;: &quot;A String&quot;, # The path within the container to mount the secret volume. For example, setting the mount_path as `/etc/secrets` would mount the secret value files under the `/etc/secrets` directory. This directory will also be completely shadowed and unavailable to mount any other secrets. Recommended mount paths: /etc/secrets Restricted mount paths: /cloudsql, /dev/log, /pod, /proc, /var/log
+      &quot;projectId&quot;: &quot;A String&quot;, # Project whose secret manager data is being referenced. Cross project secrets are not supported.
+      &quot;secret&quot;: &quot;A String&quot;, # Name of the secret in secret manager (not the full resource name).
+      &quot;versions&quot;: [ # List of secret versions to mount for this secret. If empty, the `latest` version of the secret will be made available in a file named after the secret under the mount point.
+        { # Configuration for a single version.
+          &quot;path&quot;: &quot;A String&quot;, # Relative path of the file under the mount path where the secret value for this version will be fetched and made available. For example, setting the mount_path as &#x27;/etc/secrets&#x27; and path as `/secret_foo` would mount the secret value file at `/etc/secrets/secret_foo`.
+          &quot;version&quot;: &quot;A String&quot;, # Version of the secret (version number or the string &#x27;latest&#x27;). It is preferrable to use `latest` version with secret volumes as secret value changes are reflected immediately.
+        },
+      ],
+    },
+  ],
   &quot;serviceAccountEmail&quot;: &quot;A String&quot;, # The email of the function&#x27;s service account. If empty, defaults to `{project_id}@appspot.gserviceaccount.com`.
   &quot;sourceArchiveUrl&quot;: &quot;A String&quot;, # The Google Cloud Storage URL, starting with gs://, pointing to the zip archive which contains the function.
   &quot;sourceRepository&quot;: { # Describes SourceRepository, used to represent parameters related to source repository where a function is hosted. # **Beta Feature** The source repository where a function is hosted.
@@ -483,6 +525,27 @@ <h3>Method Details</h3>
       &quot;name&quot;: &quot;A String&quot;, # A user-defined name of the function. Function names must be unique globally and match pattern `projects/*/locations/*/functions/*`
       &quot;network&quot;: &quot;A String&quot;, # The VPC Network that this cloud function can connect to. It can be either the fully-qualified URI, or the short name of the network resource. If the short network name is used, the network must belong to the same project. Otherwise, it must belong to a project within the same organization. The format of this field is either `projects/{project}/global/networks/{network}` or `{network}`, where {project} is a project id where the network is defined, and {network} is the short name of the network. This field is mutually exclusive with `vpc_connector` and will be replaced by it. See [the VPC documentation](https://cloud.google.com/compute/docs/vpc) for more information on connecting Cloud projects.
       &quot;runtime&quot;: &quot;A String&quot;, # The runtime in which to run the function. Required when deploying a new function, optional when updating an existing function. For a complete list of possible choices, see the [`gcloud` command reference](/sdk/gcloud/reference/functions/deploy#--runtime).
+      &quot;secretEnvironmentVariables&quot;: [ # Secret environment variables configuration.
+        { # Configuration for a secret environment variable. It has the information necessary to fetch the secret value from secret manager and expose it as an environment variable. Secret value is not a part of the configuration. Secret values are only fetched when a new clone starts.
+          &quot;key&quot;: &quot;A String&quot;, # Name of the environment variable.
+          &quot;projectId&quot;: &quot;A String&quot;, # Project whose secret manager data is being referenced. Cross project secrets are not supported.
+          &quot;secret&quot;: &quot;A String&quot;, # Name of the secret in secret manager (not the full resource name).
+          &quot;version&quot;: &quot;A String&quot;, # Version of the secret (version number or the string &#x27;latest&#x27;). It is recommended to use a numeric version for secret environment variables as any updates to the secret value is not reflected until new clones start.
+        },
+      ],
+      &quot;secretVolumes&quot;: [ # Secret volumes configuration.
+        { # Configuration for a secret volume. It has the information necessary to fetch the secret value from secret manager and make it available as files mounted at the requested paths within the application container. Secret value is not a part of the configuration. Every filesystem read operation performs a lookup in secret manager to retrieve the secret value.
+          &quot;mountPath&quot;: &quot;A String&quot;, # The path within the container to mount the secret volume. For example, setting the mount_path as `/etc/secrets` would mount the secret value files under the `/etc/secrets` directory. This directory will also be completely shadowed and unavailable to mount any other secrets. Recommended mount paths: /etc/secrets Restricted mount paths: /cloudsql, /dev/log, /pod, /proc, /var/log
+          &quot;projectId&quot;: &quot;A String&quot;, # Project whose secret manager data is being referenced. Cross project secrets are not supported.
+          &quot;secret&quot;: &quot;A String&quot;, # Name of the secret in secret manager (not the full resource name).
+          &quot;versions&quot;: [ # List of secret versions to mount for this secret. If empty, the `latest` version of the secret will be made available in a file named after the secret under the mount point.
+            { # Configuration for a single version.
+              &quot;path&quot;: &quot;A String&quot;, # Relative path of the file under the mount path where the secret value for this version will be fetched and made available. For example, setting the mount_path as &#x27;/etc/secrets&#x27; and path as `/secret_foo` would mount the secret value file at `/etc/secrets/secret_foo`.
+              &quot;version&quot;: &quot;A String&quot;, # Version of the secret (version number or the string &#x27;latest&#x27;). It is preferrable to use `latest` version with secret volumes as secret value changes are reflected immediately.
+            },
+          ],
+        },
+      ],
       &quot;serviceAccountEmail&quot;: &quot;A String&quot;, # The email of the function&#x27;s service account. If empty, defaults to `{project_id}@appspot.gserviceaccount.com`.
       &quot;sourceArchiveUrl&quot;: &quot;A String&quot;, # The Google Cloud Storage URL, starting with gs://, pointing to the zip archive which contains the function.
       &quot;sourceRepository&quot;: { # Describes SourceRepository, used to represent parameters related to source repository where a function is hosted. # **Beta Feature** The source repository where a function is hosted.
@@ -562,6 +625,27 @@ <h3>Method Details</h3>
   &quot;name&quot;: &quot;A String&quot;, # A user-defined name of the function. Function names must be unique globally and match pattern `projects/*/locations/*/functions/*`
   &quot;network&quot;: &quot;A String&quot;, # The VPC Network that this cloud function can connect to. It can be either the fully-qualified URI, or the short name of the network resource. If the short network name is used, the network must belong to the same project. Otherwise, it must belong to a project within the same organization. The format of this field is either `projects/{project}/global/networks/{network}` or `{network}`, where {project} is a project id where the network is defined, and {network} is the short name of the network. This field is mutually exclusive with `vpc_connector` and will be replaced by it. See [the VPC documentation](https://cloud.google.com/compute/docs/vpc) for more information on connecting Cloud projects.
   &quot;runtime&quot;: &quot;A String&quot;, # The runtime in which to run the function. Required when deploying a new function, optional when updating an existing function. For a complete list of possible choices, see the [`gcloud` command reference](/sdk/gcloud/reference/functions/deploy#--runtime).
+  &quot;secretEnvironmentVariables&quot;: [ # Secret environment variables configuration.
+    { # Configuration for a secret environment variable. It has the information necessary to fetch the secret value from secret manager and expose it as an environment variable. Secret value is not a part of the configuration. Secret values are only fetched when a new clone starts.
+      &quot;key&quot;: &quot;A String&quot;, # Name of the environment variable.
+      &quot;projectId&quot;: &quot;A String&quot;, # Project whose secret manager data is being referenced. Cross project secrets are not supported.
+      &quot;secret&quot;: &quot;A String&quot;, # Name of the secret in secret manager (not the full resource name).
+      &quot;version&quot;: &quot;A String&quot;, # Version of the secret (version number or the string &#x27;latest&#x27;). It is recommended to use a numeric version for secret environment variables as any updates to the secret value is not reflected until new clones start.
+    },
+  ],
+  &quot;secretVolumes&quot;: [ # Secret volumes configuration.
+    { # Configuration for a secret volume. It has the information necessary to fetch the secret value from secret manager and make it available as files mounted at the requested paths within the application container. Secret value is not a part of the configuration. Every filesystem read operation performs a lookup in secret manager to retrieve the secret value.
+      &quot;mountPath&quot;: &quot;A String&quot;, # The path within the container to mount the secret volume. For example, setting the mount_path as `/etc/secrets` would mount the secret value files under the `/etc/secrets` directory. This directory will also be completely shadowed and unavailable to mount any other secrets. Recommended mount paths: /etc/secrets Restricted mount paths: /cloudsql, /dev/log, /pod, /proc, /var/log
+      &quot;projectId&quot;: &quot;A String&quot;, # Project whose secret manager data is being referenced. Cross project secrets are not supported.
+      &quot;secret&quot;: &quot;A String&quot;, # Name of the secret in secret manager (not the full resource name).
+      &quot;versions&quot;: [ # List of secret versions to mount for this secret. If empty, the `latest` version of the secret will be made available in a file named after the secret under the mount point.
+        { # Configuration for a single version.
+          &quot;path&quot;: &quot;A String&quot;, # Relative path of the file under the mount path where the secret value for this version will be fetched and made available. For example, setting the mount_path as &#x27;/etc/secrets&#x27; and path as `/secret_foo` would mount the secret value file at `/etc/secrets/secret_foo`.
+          &quot;version&quot;: &quot;A String&quot;, # Version of the secret (version number or the string &#x27;latest&#x27;). It is preferrable to use `latest` version with secret volumes as secret value changes are reflected immediately.
+        },
+      ],
+    },
+  ],
   &quot;serviceAccountEmail&quot;: &quot;A String&quot;, # The email of the function&#x27;s service account. If empty, defaults to `{project_id}@appspot.gserviceaccount.com`.
   &quot;sourceArchiveUrl&quot;: &quot;A String&quot;, # The Google Cloud Storage URL, starting with gs://, pointing to the zip archive which contains the function.
   &quot;sourceRepository&quot;: { # Describes SourceRepository, used to represent parameters related to source repository where a function is hosted. # **Beta Feature** The source repository where a function is hosted.