feat: AuditConfig for IAM v1 (#356)

- [ ] Regenerate this pull request now.

PiperOrigin-RevId: 439356405

Source-Link: googleapis/googleapis@afa2ba1

Source-Link: googleapis/googleapis-gen@3e40c17
Copy-Tag: eyJwIjoiLmdpdGh1Yi8uT3dsQm90LnlhbWwiLCJoIjoiM2U0MGMxN2UxNTEwYzk1ZmFiNThmYzIxNDNjY2I2MWNjZWNhNTk4OSJ9

feat: Added support for accessing secret versions by alias
Clients can now associate custom strings with specified secret versions for later access.

PiperOrigin-RevId: 439320490

Source-Link: googleapis/googleapis@bbe5618

Source-Link: googleapis/googleapis-gen@6bdfcfd
Copy-Tag: eyJwIjoiLmdpdGh1Yi8uT3dsQm90LnlhbWwiLCJoIjoiNmJkZmNmZDg3OTc0MGM2MmJiZTExYjJlYmM2YjgzNzFmMGQ0MjBhZiJ9

packages/google-cloud-secretmanager/protos/google/cloud/secretmanager/v1/resources.proto

@@ -97,6 +97,19 @@ message Secret {
  // Optional. Rotation policy attached to the [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is no
  // rotation policy.
  Rotation rotation = 9 [(google.api.field_behavior) = OPTIONAL];
+
+ // Optional. Mapping from version alias to version name.
+ //
+ // A version alias is a string with a maximum length of 63 characters and can
+ // contain uppercase and lowercase letters, numerals, and the hyphen (`-`)
+ // and underscore ('_') characters. An alias string must start with a
+ // letter and cannot be the string 'latest' or 'NEW'.
+ // No more than 50 aliases can be assigned to a given secret.
+ //
+ // Version-Alias pairs will be viewable via GetSecret and modifiable via
+ // UpdateSecret. At launch access by alias will only be supported on
+ // GetSecretVersion and AccessSecretVersion.
+ map<string, int64> version_aliases = 11 [(google.api.field_behavior) = OPTIONAL];
 }
 
 // A secret version resource in the Secret Manager API.

packages/google-cloud-secretmanager/samples/generated/v1/secret_manager_service.get_iam_policy.js

@@ -32,7 +32,7 @@ function main(resource) {
  // const resource = 'abc123'
  /**
  * OPTIONAL: A `GetPolicyOptions` object for specifying options to
- * `GetIamPolicy`. This field is only used by Cloud IAM.
+ * `GetIamPolicy`.
  */
  // const options = {}
 

packages/google-cloud-secretmanager/samples/generated/v1/secret_manager_service.set_iam_policy.js

@@ -37,6 +37,13 @@ function main(resource, policy) {
  * might reject them.
  */
  // const policy = {}
+ /**
+ * OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
+ * the fields in the mask will be modified. If no mask is provided, the
+ * following default mask is used:
+ * `paths: "bindings, etag"`
+ */
+ // const updateMask = {}
 
  // Imports the Secretmanager library
  const {SecretManagerServiceClient} = require('@google-cloud/secret-manager').v1;

packages/google-cloud-secretmanager/samples/generated/v1/snippet_metadata.google.cloud.secretmanager.v1.json

@@ -558,7 +558,7 @@
  "segments": [
  {
  "start": 25,
- "end": 59,
+ "end": 66,
  "type": "FULL"
  }
  ],
@@ -574,6 +574,10 @@
  {
  "name": "policy",
  "type": ".google.iam.v1.Policy"
+ },
+ {
+ "name": "update_mask",
+ "type": ".google.protobuf.FieldMask"
  }
  ],
  "resultType": ".google.iam.v1.Policy",

packages/google-cloud-secretmanager/src/v1/secret_manager_service_client.ts

@@ -1352,6 +1352,12 @@ export class SecretManagerServiceClient {
  * the policy is limited to a few 10s of KB. An empty policy is a
  * valid policy but certain Cloud Platform services (such as Projects)
  * might reject them.
+ * @param {google.protobuf.FieldMask} request.updateMask
+ * OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
+ * the fields in the mask will be modified. If no mask is provided, the
+ * following default mask is used:
+ *
+ * `paths: "bindings, etag"`
  * @param {object} [options]
  * Call options. See {@link https://googleapis.dev/nodejs/google-gax/latest/interfaces/CallOptions.html|CallOptions} for more details.
  * @returns {Promise} - The promise which resolves to an array.
@@ -1439,7 +1445,7 @@ export class SecretManagerServiceClient {
  * See the operation documentation for the appropriate value for this field.
  * @param {google.iam.v1.GetPolicyOptions} request.options
  * OPTIONAL: A `GetPolicyOptions` object for specifying options to
- * `GetIamPolicy`. This field is only used by Cloud IAM.
+ * `GetIamPolicy`.
  * @param {object} [options]
  * Call options. See {@link https://googleapis.dev/nodejs/google-gax/latest/interfaces/CallOptions.html|CallOptions} for more details.
  * @returns {Promise} - The promise which resolves to an array.