feat: A new field max_chargeable_bytes is added to message `.google…

….cloud.sql.v1.BackupRun`

feat: A new enum `CaMode` is added
feat: A new field `server_ca_mode` is added to message `.google.cloud.sql.v1.ConnectSettings`
feat: A new field `satisfies_pzi` is added to message `.google.cloud.sql.v1.DatabaseInstance`
feat: A new field `switch_transaction_logs_to_cloud_storage_enabled` is added to message `.google.cloud.sql.v1.DatabaseInstance`
feat: A new value `UNSUPPORTED_COLUMNS` is added to enum `SqlExternalSyncSettingErrorType`
feat: A new enum `CaMode` is added
feat: A new field `server_ca_mode` is added to message `.google.cloud.sql.v1.IpConfiguration`
feat: A new value `MAJOR_VERSION_UPGRADE` is added to enum `SqlOperationType`
docs: A comment for method `AddServerCa` in service `SqlInstancesService` is changed
docs: A comment for method `RotateServerCa` in service `SqlInstancesService` is changed

PiperOrigin-RevId: 665459194

google/cloud/sql/v1/cloud_sql_backup_runs.proto

@@ -187,6 +187,10 @@ message BackupRun {
   // Backup time zone to prevent restores to an instance with
   // a different time zone. Now relevant only for SQL Server.
   string time_zone = 23;
+
+  // Output only. The maximum chargeable bytes for the backup.
+  optional int64 max_chargeable_bytes = 24
+      [(google.api.field_behavior) = OUTPUT_ONLY];
 }
 
 // Backup run list results.

google/cloud/sql/v1/cloud_sql_connect.proto

@@ -73,6 +73,19 @@ message GetConnectSettingsRequest {
 
 // Connect settings retrieval response.
 message ConnectSettings {
+  // Various Certificate Authority (CA) modes for certificate signing.
+  enum CaMode {
+    // CA mode is unknown.
+    CA_MODE_UNSPECIFIED = 0;
+
+    // Google-managed self-signed internal CA.
+    GOOGLE_MANAGED_INTERNAL_CA = 1;
+
+    // Google-managed regional CA part of root CA hierarchy hosted on Google
+    // Cloud's Certificate Authority Service (CAS).
+    GOOGLE_MANAGED_CAS_CA = 2;
+  }
+
   // This is always `sql#connectSettings`.
   string kind = 1;
 
@@ -110,6 +123,9 @@ message ConnectSettings {
 
   // The dns name of the instance.
   string dns_name = 34;
+
+  // Specify what type of CA is used for the server certificate.
+  CaMode server_ca_mode = 35;
 }
 
 // Ephemeral certificate creation request.

google/cloud/sql/v1/cloud_sql_instances.proto

@@ -40,7 +40,9 @@ service SqlInstancesService {
   // instance. Required to prepare for a certificate rotation. If a CA version
   // was previously added but never used in a certificate rotation, this
   // operation replaces that version. There cannot be more than one CA version
-  // waiting to be rotated in.
+  // waiting to be rotated in. For instances that have enabled Certificate
+  // Authority Service (CAS) based server CA, please use AddServerCertificate to
+  // add a new server certificate.
   rpc AddServerCa(SqlInstancesAddServerCaRequest) returns (Operation) {
     option (google.api.http) = {
       post: "/v1/projects/{project}/instances/{instance}/addServerCa"
@@ -207,7 +209,9 @@ service SqlInstancesService {
   }
 
   // Rotates the server certificate to one signed by the Certificate Authority
-  // (CA) version previously added with the addServerCA method.
+  // (CA) version previously added with the addServerCA method. For instances
+  // that have enabled Certificate Authority Service (CAS) based server CA,
+  // please use RotateServerCertificate to rotate the server certificate.
   rpc RotateServerCa(SqlInstancesRotateServerCaRequest) returns (Operation) {
     option (google.api.http) = {
       post: "/v1/projects/{project}/instances/{instance}/rotateServerCa"
@@ -1269,6 +1273,18 @@ message DatabaseInstance {
 
   // Gemini instance configuration.
   optional GeminiInstanceConfig gemini_config = 55;
+
+  // Output only. This status indicates whether the instance satisfies PZI.
+  //
+  // The status is reserved for future use.
+  google.protobuf.BoolValue satisfies_pzi = 56
+      [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Input only. Whether Cloud SQL is enabled to switch storing point-in-time
+  // recovery log files from a data disk to Cloud Storage.
+  optional google.protobuf.BoolValue
+      switch_transaction_logs_to_cloud_storage_enabled = 57
+      [(google.api.field_behavior) = INPUT_ONLY];
 }
 
 // Gemini instance configuration.
@@ -1617,6 +1633,10 @@ message SqlExternalSyncSettingError {
     // data to the destination instance, you must enable the PGAudit extension
     // on the instance.
     EXTENSIONS_NOT_ENABLED_IN_REPLICA = 48;
+
+    // The source database has generated columns that can't be migrated. Please
+    // change them to regular columns before migration.
+    UNSUPPORTED_COLUMNS = 49;
   }
 
   // Can be `sql#externalSyncSettingError` or

google/cloud/sql/v1/cloud_sql_resources.proto

@@ -636,6 +636,19 @@ message IpConfiguration {
     TRUSTED_CLIENT_CERTIFICATE_REQUIRED = 3;
   }
 
+  // Various Certificate Authority (CA) modes for certificate signing.
+  enum CaMode {
+    // CA mode is unknown.
+    CA_MODE_UNSPECIFIED = 0;
+
+    // Google-managed self-signed internal CA.
+    GOOGLE_MANAGED_INTERNAL_CA = 1;
+
+    // Google-managed regional CA part of root CA hierarchy hosted on Google
+    // Cloud's Certificate Authority Service (CAS).
+    GOOGLE_MANAGED_CAS_CA = 2;
+  }
+
   // Whether the instance is assigned a public IP address or not.
   google.protobuf.BoolValue ipv4_enabled = 1;
 
@@ -699,6 +712,9 @@ message IpConfiguration {
 
   // PSC settings for this instance.
   optional PscConfig psc_config = 9;
+
+  // Specify what type of CA is used for the server certificate.
+  optional CaMode server_ca_mode = 10;
 }
 
 // PSC settings for a Cloud SQL instance.
@@ -1035,6 +1051,9 @@ message Operation {
     // Switches a primary instance to a replica. This operation runs as part of
     // a switchover operation to the original primary instance.
     SWITCHOVER_TO_REPLICA = 47;
+
+    // Updates the major version of a Cloud SQL instance.
+    MAJOR_VERSION_UPGRADE = 48;
   }
 
   // The status of an operation.