kms

package
v0.0.0-...-0e82294 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Sep 25, 2018 License: Apache-2.0 Imports: 11 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

View Source 
var CryptoKeyVersion_CryptoKeyVersionAlgorithm_name = map[int32]string{
	0:  "CRYPTO_KEY_VERSION_ALGORITHM_UNSPECIFIED",
	1:  "GOOGLE_SYMMETRIC_ENCRYPTION",
	2:  "RSA_SIGN_PSS_2048_SHA256",
	3:  "RSA_SIGN_PSS_3072_SHA256",
	4:  "RSA_SIGN_PSS_4096_SHA256",
	5:  "RSA_SIGN_PKCS1_2048_SHA256",
	6:  "RSA_SIGN_PKCS1_3072_SHA256",
	7:  "RSA_SIGN_PKCS1_4096_SHA256",
	8:  "RSA_DECRYPT_OAEP_2048_SHA256",
	9:  "RSA_DECRYPT_OAEP_3072_SHA256",
	10: "RSA_DECRYPT_OAEP_4096_SHA256",
	12: "EC_SIGN_P256_SHA256",
	13: "EC_SIGN_P384_SHA384",
}
View Source 
var CryptoKeyVersion_CryptoKeyVersionAlgorithm_value = map[string]int32{
	"CRYPTO_KEY_VERSION_ALGORITHM_UNSPECIFIED": 0,
	"GOOGLE_SYMMETRIC_ENCRYPTION":              1,
	"RSA_SIGN_PSS_2048_SHA256":                 2,
	"RSA_SIGN_PSS_3072_SHA256":                 3,
	"RSA_SIGN_PSS_4096_SHA256":                 4,
	"RSA_SIGN_PKCS1_2048_SHA256":               5,
	"RSA_SIGN_PKCS1_3072_SHA256":               6,
	"RSA_SIGN_PKCS1_4096_SHA256":               7,
	"RSA_DECRYPT_OAEP_2048_SHA256":             8,
	"RSA_DECRYPT_OAEP_3072_SHA256":             9,
	"RSA_DECRYPT_OAEP_4096_SHA256":             10,
	"EC_SIGN_P256_SHA256":                      12,
	"EC_SIGN_P384_SHA384":                      13,
}
View Source 
var CryptoKeyVersion_CryptoKeyVersionState_name = map[int32]string{
	0: "CRYPTO_KEY_VERSION_STATE_UNSPECIFIED",
	5: "PENDING_GENERATION",
	1: "ENABLED",
	2: "DISABLED",
	3: "DESTROYED",
	4: "DESTROY_SCHEDULED",
}
View Source 
var CryptoKeyVersion_CryptoKeyVersionState_value = map[string]int32{
	"CRYPTO_KEY_VERSION_STATE_UNSPECIFIED": 0,
	"PENDING_GENERATION":                   5,
	"ENABLED":                              1,
	"DISABLED":                             2,
	"DESTROYED":                            3,
	"DESTROY_SCHEDULED":                    4,
}
View Source 
var CryptoKeyVersion_CryptoKeyVersionView_name = map[int32]string{
	0: "CRYPTO_KEY_VERSION_VIEW_UNSPECIFIED",
	1: "FULL",
}
View Source 
var CryptoKeyVersion_CryptoKeyVersionView_value = map[string]int32{
	"CRYPTO_KEY_VERSION_VIEW_UNSPECIFIED": 0,
	"FULL":                                1,
}
View Source 
var CryptoKey_CryptoKeyPurpose_name = map[int32]string{
	0: "CRYPTO_KEY_PURPOSE_UNSPECIFIED",
	1: "ENCRYPT_DECRYPT",
	5: "ASYMMETRIC_SIGN",
	6: "ASYMMETRIC_DECRYPT",
}
View Source 
var CryptoKey_CryptoKeyPurpose_value = map[string]int32{
	"CRYPTO_KEY_PURPOSE_UNSPECIFIED": 0,
	"ENCRYPT_DECRYPT":                1,
	"ASYMMETRIC_SIGN":                5,
	"ASYMMETRIC_DECRYPT":             6,
}
View Source 
var KeyOperationAttestation_AttestationFormat_name = map[int32]string{
	0: "ATTESTATION_FORMAT_UNSPECIFIED",
	3: "CAVIUM_V1_COMPRESSED",
}
View Source 
var KeyOperationAttestation_AttestationFormat_value = map[string]int32{
	"ATTESTATION_FORMAT_UNSPECIFIED": 0,
	"CAVIUM_V1_COMPRESSED":           3,
}
View Source 
var ProtectionLevel_name = map[int32]string{
	0: "PROTECTION_LEVEL_UNSPECIFIED",
	1: "SOFTWARE",
	2: "HSM",
}
View Source 
var ProtectionLevel_value = map[string]int32{
	"PROTECTION_LEVEL_UNSPECIFIED": 0,
	"SOFTWARE":                     1,
	"HSM":                          2,
}

Functions

func RegisterKeyManagementServiceServer 

func RegisterKeyManagementServiceServer(s *grpc.Server, srv KeyManagementServiceServer)

Types

type AsymmetricDecryptRequest 

type AsymmetricDecryptRequest struct {
	// Required. The resource name of the [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to use for
	// decryption.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Required. The data encrypted with the named [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]'s public
	// key using OAEP.
	Ciphertext           []byte   `protobuf:"bytes,3,opt,name=ciphertext,proto3" json:"ciphertext,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

Request message for [KeyManagementService.AsymmetricDecrypt][google.cloud.kms.v1.KeyManagementService.AsymmetricDecrypt].

func (*AsymmetricDecryptRequest) Descriptor 

func (*AsymmetricDecryptRequest) Descriptor() ([]byte, []int)

func (*AsymmetricDecryptRequest) GetCiphertext 

func (m *AsymmetricDecryptRequest) GetCiphertext() []byte

func (*AsymmetricDecryptRequest) GetName 

func (m *AsymmetricDecryptRequest) GetName() string

func (*AsymmetricDecryptRequest) ProtoMessage 

func (*AsymmetricDecryptRequest) ProtoMessage()

func (*AsymmetricDecryptRequest) Reset 

func (m *AsymmetricDecryptRequest) Reset()

func (*AsymmetricDecryptRequest) String 

func (m *AsymmetricDecryptRequest) String() string

func (*AsymmetricDecryptRequest) XXX_DiscardUnknown 

func (m *AsymmetricDecryptRequest) XXX_DiscardUnknown()

func (*AsymmetricDecryptRequest) XXX_Marshal 

func (m *AsymmetricDecryptRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*AsymmetricDecryptRequest) XXX_Merge 

func (m *AsymmetricDecryptRequest) XXX_Merge(src proto.Message)

func (*AsymmetricDecryptRequest) XXX_Size 

func (m *AsymmetricDecryptRequest) XXX_Size() int

func (*AsymmetricDecryptRequest) XXX_Unmarshal 

func (m *AsymmetricDecryptRequest) XXX_Unmarshal(b []byte) error

type AsymmetricDecryptResponse 

type AsymmetricDecryptResponse struct {
	// The decrypted data originally encrypted with the matching public key.
	Plaintext            []byte   `protobuf:"bytes,1,opt,name=plaintext,proto3" json:"plaintext,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

Response message for [KeyManagementService.AsymmetricDecrypt][google.cloud.kms.v1.KeyManagementService.AsymmetricDecrypt].

func (*AsymmetricDecryptResponse) Descriptor 

func (*AsymmetricDecryptResponse) Descriptor() ([]byte, []int)

func (*AsymmetricDecryptResponse) GetPlaintext 

func (m *AsymmetricDecryptResponse) GetPlaintext() []byte

func (*AsymmetricDecryptResponse) ProtoMessage 

func (*AsymmetricDecryptResponse) ProtoMessage()

func (*AsymmetricDecryptResponse) Reset 

func (m *AsymmetricDecryptResponse) Reset()

func (*AsymmetricDecryptResponse) String 

func (m *AsymmetricDecryptResponse) String() string

func (*AsymmetricDecryptResponse) XXX_DiscardUnknown 

func (m *AsymmetricDecryptResponse) XXX_DiscardUnknown()

func (*AsymmetricDecryptResponse) XXX_Marshal 

func (m *AsymmetricDecryptResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*AsymmetricDecryptResponse) XXX_Merge 

func (m *AsymmetricDecryptResponse) XXX_Merge(src proto.Message)

func (*AsymmetricDecryptResponse) XXX_Size 

func (m *AsymmetricDecryptResponse) XXX_Size() int

func (*AsymmetricDecryptResponse) XXX_Unmarshal 

func (m *AsymmetricDecryptResponse) XXX_Unmarshal(b []byte) error

type AsymmetricSignRequest 

type AsymmetricSignRequest struct {
	// Required. The resource name of the [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to use for signing.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Required. The digest of the data to sign. The digest must be produced with
	// the same digest algorithm as specified by the key version's
	// [algorithm][google.cloud.kms.v1.CryptoKeyVersion.algorithm].
	Digest               *Digest  `protobuf:"bytes,3,opt,name=digest,proto3" json:"digest,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

Request message for [KeyManagementService.AsymmetricSign][google.cloud.kms.v1.KeyManagementService.AsymmetricSign].

func (*AsymmetricSignRequest) Descriptor 

func (*AsymmetricSignRequest) Descriptor() ([]byte, []int)

func (*AsymmetricSignRequest) GetDigest 

func (m *AsymmetricSignRequest) GetDigest() *Digest

func (*AsymmetricSignRequest) GetName 

func (m *AsymmetricSignRequest) GetName() string

func (*AsymmetricSignRequest) ProtoMessage 

func (*AsymmetricSignRequest) ProtoMessage()

func (*AsymmetricSignRequest) Reset 

func (m *AsymmetricSignRequest) Reset()

func (*AsymmetricSignRequest) String 

func (m *AsymmetricSignRequest) String() string

func (*AsymmetricSignRequest) XXX_DiscardUnknown 

func (m *AsymmetricSignRequest) XXX_DiscardUnknown()

func (*AsymmetricSignRequest) XXX_Marshal 

func (m *AsymmetricSignRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*AsymmetricSignRequest) XXX_Merge 

func (m *AsymmetricSignRequest) XXX_Merge(src proto.Message)

func (*AsymmetricSignRequest) XXX_Size 

func (m *AsymmetricSignRequest) XXX_Size() int

func (*AsymmetricSignRequest) XXX_Unmarshal 

func (m *AsymmetricSignRequest) XXX_Unmarshal(b []byte) error

type AsymmetricSignResponse 

type AsymmetricSignResponse struct {
	// The created signature.
	Signature            []byte   `protobuf:"bytes,1,opt,name=signature,proto3" json:"signature,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

Response message for [KeyManagementService.AsymmetricSign][google.cloud.kms.v1.KeyManagementService.AsymmetricSign].

func (*AsymmetricSignResponse) Descriptor 

func (*AsymmetricSignResponse) Descriptor() ([]byte, []int)

func (*AsymmetricSignResponse) GetSignature 

func (m *AsymmetricSignResponse) GetSignature() []byte

func (*AsymmetricSignResponse) ProtoMessage 

func (*AsymmetricSignResponse) ProtoMessage()

func (*AsymmetricSignResponse) Reset 

func (m *AsymmetricSignResponse) Reset()

func (*AsymmetricSignResponse) String 

func (m *AsymmetricSignResponse) String() string

func (*AsymmetricSignResponse) XXX_DiscardUnknown 

func (m *AsymmetricSignResponse) XXX_DiscardUnknown()

func (*AsymmetricSignResponse) XXX_Marshal 

func (m *AsymmetricSignResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*AsymmetricSignResponse) XXX_Merge 

func (m *AsymmetricSignResponse) XXX_Merge(src proto.Message)

func (*AsymmetricSignResponse) XXX_Size 

func (m *AsymmetricSignResponse) XXX_Size() int

func (*AsymmetricSignResponse) XXX_Unmarshal 

func (m *AsymmetricSignResponse) XXX_Unmarshal(b []byte) error

type CreateCryptoKeyRequest 

type CreateCryptoKeyRequest struct {
	// Required. The [name][google.cloud.kms.v1.KeyRing.name] of the KeyRing associated with the
	// [CryptoKeys][google.cloud.kms.v1.CryptoKey].
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required. It must be unique within a KeyRing and match the regular
	// expression `[a-zA-Z0-9_-]{1,63}`
	CryptoKeyId string `protobuf:"bytes,2,opt,name=crypto_key_id,json=cryptoKeyId,proto3" json:"crypto_key_id,omitempty"`
	// A [CryptoKey][google.cloud.kms.v1.CryptoKey] with initial field values.
	CryptoKey            *CryptoKey `protobuf:"bytes,3,opt,name=crypto_key,json=cryptoKey,proto3" json:"crypto_key,omitempty"`
	XXX_NoUnkeyedLiteral struct{}   `json:"-"`
	XXX_unrecognized     []byte     `json:"-"`
	XXX_sizecache        int32      `json:"-"`
}

Request message for [KeyManagementService.CreateCryptoKey][google.cloud.kms.v1.KeyManagementService.CreateCryptoKey].

func (*CreateCryptoKeyRequest) Descriptor 

func (*CreateCryptoKeyRequest) Descriptor() ([]byte, []int)

func (*CreateCryptoKeyRequest) GetCryptoKey 

func (m *CreateCryptoKeyRequest) GetCryptoKey() *CryptoKey

func (*CreateCryptoKeyRequest) GetCryptoKeyId 

func (m *CreateCryptoKeyRequest) GetCryptoKeyId() string

func (*CreateCryptoKeyRequest) GetParent 

func (m *CreateCryptoKeyRequest) GetParent() string

func (*CreateCryptoKeyRequest) ProtoMessage 

func (*CreateCryptoKeyRequest) ProtoMessage()

func (*CreateCryptoKeyRequest) Reset 

func (m *CreateCryptoKeyRequest) Reset()

func (*CreateCryptoKeyRequest) String 

func (m *CreateCryptoKeyRequest) String() string

func (*CreateCryptoKeyRequest) XXX_DiscardUnknown 

func (m *CreateCryptoKeyRequest) XXX_DiscardUnknown()

func (*CreateCryptoKeyRequest) XXX_Marshal 

func (m *CreateCryptoKeyRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*CreateCryptoKeyRequest) XXX_Merge 

func (m *CreateCryptoKeyRequest) XXX_Merge(src proto.Message)

func (*CreateCryptoKeyRequest) XXX_Size 

func (m *CreateCryptoKeyRequest) XXX_Size() int

func (*CreateCryptoKeyRequest) XXX_Unmarshal 

func (m *CreateCryptoKeyRequest) XXX_Unmarshal(b []byte) error

type CreateCryptoKeyVersionRequest 

type CreateCryptoKeyVersionRequest struct {
	// Required. The [name][google.cloud.kms.v1.CryptoKey.name] of the [CryptoKey][google.cloud.kms.v1.CryptoKey] associated with
	// the [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion].
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// A [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with initial field values.
	CryptoKeyVersion     *CryptoKeyVersion `protobuf:"bytes,2,opt,name=crypto_key_version,json=cryptoKeyVersion,proto3" json:"crypto_key_version,omitempty"`
	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
	XXX_unrecognized     []byte            `json:"-"`
	XXX_sizecache        int32             `json:"-"`
}

Request message for [KeyManagementService.CreateCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.CreateCryptoKeyVersion].

func (*CreateCryptoKeyVersionRequest) Descriptor 

func (*CreateCryptoKeyVersionRequest) Descriptor() ([]byte, []int)

func (*CreateCryptoKeyVersionRequest) GetCryptoKeyVersion 

func (m *CreateCryptoKeyVersionRequest) GetCryptoKeyVersion() *CryptoKeyVersion

func (*CreateCryptoKeyVersionRequest) GetParent 

func (m *CreateCryptoKeyVersionRequest) GetParent() string

func (*CreateCryptoKeyVersionRequest) ProtoMessage 

func (*CreateCryptoKeyVersionRequest) ProtoMessage()

func (*CreateCryptoKeyVersionRequest) Reset 

func (m *CreateCryptoKeyVersionRequest) Reset()

func (*CreateCryptoKeyVersionRequest) String 

func (m *CreateCryptoKeyVersionRequest) String() string

func (*CreateCryptoKeyVersionRequest) XXX_DiscardUnknown 

func (m *CreateCryptoKeyVersionRequest) XXX_DiscardUnknown()

func (*CreateCryptoKeyVersionRequest) XXX_Marshal 

func (m *CreateCryptoKeyVersionRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*CreateCryptoKeyVersionRequest) XXX_Merge 

func (m *CreateCryptoKeyVersionRequest) XXX_Merge(src proto.Message)

func (*CreateCryptoKeyVersionRequest) XXX_Size 

func (m *CreateCryptoKeyVersionRequest) XXX_Size() int

func (*CreateCryptoKeyVersionRequest) XXX_Unmarshal 

func (m *CreateCryptoKeyVersionRequest) XXX_Unmarshal(b []byte) error

type CreateKeyRingRequest 

type CreateKeyRingRequest struct {
	// Required. The resource name of the location associated with the
	// [KeyRings][google.cloud.kms.v1.KeyRing], in the format `projects/*/locations/*`.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required. It must be unique within a location and match the regular
	// expression `[a-zA-Z0-9_-]{1,63}`
	KeyRingId string `protobuf:"bytes,2,opt,name=key_ring_id,json=keyRingId,proto3" json:"key_ring_id,omitempty"`
	// A [KeyRing][google.cloud.kms.v1.KeyRing] with initial field values.
	KeyRing              *KeyRing `protobuf:"bytes,3,opt,name=key_ring,json=keyRing,proto3" json:"key_ring,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

Request message for [KeyManagementService.CreateKeyRing][google.cloud.kms.v1.KeyManagementService.CreateKeyRing].

func (*CreateKeyRingRequest) Descriptor 

func (*CreateKeyRingRequest) Descriptor() ([]byte, []int)

func (*CreateKeyRingRequest) GetKeyRing 

func (m *CreateKeyRingRequest) GetKeyRing() *KeyRing

func (*CreateKeyRingRequest) GetKeyRingId 

func (m *CreateKeyRingRequest) GetKeyRingId() string

func (*CreateKeyRingRequest) GetParent 

func (m *CreateKeyRingRequest) GetParent() string

func (*CreateKeyRingRequest) ProtoMessage 

func (*CreateKeyRingRequest) ProtoMessage()

func (*CreateKeyRingRequest) Reset 

func (m *CreateKeyRingRequest) Reset()

func (*CreateKeyRingRequest) String 

func (m *CreateKeyRingRequest) String() string

func (*CreateKeyRingRequest) XXX_DiscardUnknown 

func (m *CreateKeyRingRequest) XXX_DiscardUnknown()

func (*CreateKeyRingRequest) XXX_Marshal 

func (m *CreateKeyRingRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*CreateKeyRingRequest) XXX_Merge 

func (m *CreateKeyRingRequest) XXX_Merge(src proto.Message)

func (*CreateKeyRingRequest) XXX_Size 

func (m *CreateKeyRingRequest) XXX_Size() int

func (*CreateKeyRingRequest) XXX_Unmarshal 

func (m *CreateKeyRingRequest) XXX_Unmarshal(b []byte) error

type CryptoKey 

type CryptoKey struct {
	// Output only. The resource name for this [CryptoKey][google.cloud.kms.v1.CryptoKey] in the format
	// `projects/*/locations/*/keyRings/*/cryptoKeys/*`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Output only. A copy of the "primary" [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] that will be used
	// by [Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt] when this [CryptoKey][google.cloud.kms.v1.CryptoKey] is given
	// in [EncryptRequest.name][google.cloud.kms.v1.EncryptRequest.name].
	//
	// The [CryptoKey][google.cloud.kms.v1.CryptoKey]'s primary version can be updated via
	// [UpdateCryptoKeyPrimaryVersion][google.cloud.kms.v1.KeyManagementService.UpdateCryptoKeyPrimaryVersion].
	//
	// All keys with [purpose][google.cloud.kms.v1.CryptoKey.purpose]
	// [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT] have a
	// primary. For other keys, this field will be omitted.
	Primary *CryptoKeyVersion `protobuf:"bytes,2,opt,name=primary,proto3" json:"primary,omitempty"`
	// The immutable purpose of this [CryptoKey][google.cloud.kms.v1.CryptoKey].
	Purpose CryptoKey_CryptoKeyPurpose `protobuf:"varint,3,opt,name=purpose,proto3,enum=google.cloud.kms.v1.CryptoKey_CryptoKeyPurpose" json:"purpose,omitempty"`
	// Output only. The time at which this [CryptoKey][google.cloud.kms.v1.CryptoKey] was created.
	CreateTime *timestamp.Timestamp `protobuf:"bytes,5,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// At [next_rotation_time][google.cloud.kms.v1.CryptoKey.next_rotation_time], the Key Management Service will automatically:
	//
	// 1. Create a new version of this [CryptoKey][google.cloud.kms.v1.CryptoKey].
	// 2. Mark the new version as primary.
	//
	// Key rotations performed manually via
	// [CreateCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.CreateCryptoKeyVersion] and
	// [UpdateCryptoKeyPrimaryVersion][google.cloud.kms.v1.KeyManagementService.UpdateCryptoKeyPrimaryVersion]
	// do not affect [next_rotation_time][google.cloud.kms.v1.CryptoKey.next_rotation_time].
	//
	// Keys with [purpose][google.cloud.kms.v1.CryptoKey.purpose]
	// [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT] support
	// automatic rotation. For other keys, this field must be omitted.
	NextRotationTime *timestamp.Timestamp `protobuf:"bytes,7,opt,name=next_rotation_time,json=nextRotationTime,proto3" json:"next_rotation_time,omitempty"`
	// Controls the rate of automatic rotation.
	//
	// Types that are valid to be assigned to RotationSchedule:
	//	*CryptoKey_RotationPeriod
	RotationSchedule isCryptoKey_RotationSchedule `protobuf_oneof:"rotation_schedule"`
	// A template describing settings for new [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] instances.
	// The properties of new [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] instances created by either
	// [CreateCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.CreateCryptoKeyVersion] or
	// auto-rotation are controlled by this template.
	VersionTemplate *CryptoKeyVersionTemplate `protobuf:"bytes,11,opt,name=version_template,json=versionTemplate,proto3" json:"version_template,omitempty"`
	// Labels with user-defined metadata. For more information, see
	// [Labeling Keys](/kms/docs/labeling-keys).
	Labels               map[string]string `` /* 154-byte string literal not displayed */
	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
	XXX_unrecognized     []byte            `json:"-"`
	XXX_sizecache        int32             `json:"-"`
}

A CryptoKey[google.cloud.kms.v1.CryptoKey] represents a logical key that can be used for cryptographic operations.

A CryptoKey[google.cloud.kms.v1.CryptoKey] is made up of one or more [versions][google.cloud.kms.v1.CryptoKeyVersion], which represent the actual key material used in cryptographic operations.

func (*CryptoKey) Descriptor 

func (*CryptoKey) Descriptor() ([]byte, []int)

func (*CryptoKey) GetCreateTime 

func (m *CryptoKey) GetCreateTime() *timestamp.Timestamp

func (*CryptoKey) GetLabels 

func (m *CryptoKey) GetLabels() map[string]string

func (*CryptoKey) GetName 

func (m *CryptoKey) GetName() string

func (*CryptoKey) GetNextRotationTime 

func (m *CryptoKey) GetNextRotationTime() *timestamp.Timestamp

func (*CryptoKey) GetPrimary 

func (m *CryptoKey) GetPrimary() *CryptoKeyVersion

func (*CryptoKey) GetPurpose 

func (m *CryptoKey) GetPurpose() CryptoKey_CryptoKeyPurpose

func (*CryptoKey) GetRotationPeriod 

func (m *CryptoKey) GetRotationPeriod() *duration.Duration

func (*CryptoKey) GetRotationSchedule 

func (m *CryptoKey) GetRotationSchedule() isCryptoKey_RotationSchedule

func (*CryptoKey) GetVersionTemplate 

func (m *CryptoKey) GetVersionTemplate() *CryptoKeyVersionTemplate

func (*CryptoKey) ProtoMessage 

func (*CryptoKey) ProtoMessage()

func (*CryptoKey) Reset 

func (m *CryptoKey) Reset()

func (*CryptoKey) String 

func (m *CryptoKey) String() string

func (*CryptoKey) XXX_DiscardUnknown 

func (m *CryptoKey) XXX_DiscardUnknown()

func (*CryptoKey) XXX_Marshal 

func (m *CryptoKey) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*CryptoKey) XXX_Merge 

func (m *CryptoKey) XXX_Merge(src proto.Message)

func (*CryptoKey) XXX_OneofFuncs 

func (*CryptoKey) XXX_OneofFuncs() (func(msg proto.Message, b *proto.Buffer) error, func(msg proto.Message, tag, wire int, b *proto.Buffer) (bool, error), func(msg proto.Message) (n int), []interface{})

XXX_OneofFuncs is for the internal use of the proto package.

func (*CryptoKey) XXX_Size 

func (m *CryptoKey) XXX_Size() int

func (*CryptoKey) XXX_Unmarshal 

func (m *CryptoKey) XXX_Unmarshal(b []byte) error

type CryptoKeyVersion 

type CryptoKeyVersion struct {
	// Output only. The resource name for this [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] in the format
	// `projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The current state of the [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
	State CryptoKeyVersion_CryptoKeyVersionState `` /* 128-byte string literal not displayed */
	// Output only. The [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel] describing how crypto operations are
	// performed with this [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
	ProtectionLevel ProtectionLevel `` /* 148-byte string literal not displayed */
	// Output only. The [CryptoKeyVersionAlgorithm][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionAlgorithm] that this
	// [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] supports.
	Algorithm CryptoKeyVersion_CryptoKeyVersionAlgorithm `` /* 141-byte string literal not displayed */
	// Output only. Statement that was generated and signed by the HSM at key
	// creation time. Use this statement to verify attributes of the key as stored
	// on the HSM, independently of Google. Only provided for key versions with
	// [protection_level][google.cloud.kms.v1.CryptoKeyVersion.protection_level] [HSM][google.cloud.kms.v1.ProtectionLevel.HSM].
	Attestation *KeyOperationAttestation `protobuf:"bytes,8,opt,name=attestation,proto3" json:"attestation,omitempty"`
	// Output only. The time at which this [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] was created.
	CreateTime *timestamp.Timestamp `protobuf:"bytes,4,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// Output only. The time this [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]'s key material was
	// generated.
	GenerateTime *timestamp.Timestamp `protobuf:"bytes,11,opt,name=generate_time,json=generateTime,proto3" json:"generate_time,omitempty"`
	// Output only. The time this [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]'s key material is scheduled
	// for destruction. Only present if [state][google.cloud.kms.v1.CryptoKeyVersion.state] is
	// [DESTROY_SCHEDULED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROY_SCHEDULED].
	DestroyTime *timestamp.Timestamp `protobuf:"bytes,5,opt,name=destroy_time,json=destroyTime,proto3" json:"destroy_time,omitempty"`
	// Output only. The time this CryptoKeyVersion's key material was
	// destroyed. Only present if [state][google.cloud.kms.v1.CryptoKeyVersion.state] is
	// [DESTROYED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROYED].
	DestroyEventTime     *timestamp.Timestamp `protobuf:"bytes,6,opt,name=destroy_event_time,json=destroyEventTime,proto3" json:"destroy_event_time,omitempty"`
	XXX_NoUnkeyedLiteral struct{}             `json:"-"`
	XXX_unrecognized     []byte               `json:"-"`
	XXX_sizecache        int32                `json:"-"`
}

A CryptoKeyVersion[google.cloud.kms.v1.CryptoKeyVersion] represents an individual cryptographic key, and the associated key material.

An [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED] version can be used for cryptographic operations.

For security reasons, the raw cryptographic key material represented by a CryptoKeyVersion[google.cloud.kms.v1.CryptoKeyVersion] can never be viewed or exported. It can only be used to encrypt, decrypt, or sign data when an authorized user or application invokes Cloud KMS.

func (*CryptoKeyVersion) Descriptor 

func (*CryptoKeyVersion) Descriptor() ([]byte, []int)

func (*CryptoKeyVersion) GetAlgorithm 

func (m *CryptoKeyVersion) GetAlgorithm() CryptoKeyVersion_CryptoKeyVersionAlgorithm

func (*CryptoKeyVersion) GetAttestation 

func (m *CryptoKeyVersion) GetAttestation() *KeyOperationAttestation

func (*CryptoKeyVersion) GetCreateTime 

func (m *CryptoKeyVersion) GetCreateTime() *timestamp.Timestamp

func (*CryptoKeyVersion) GetDestroyEventTime 

func (m *CryptoKeyVersion) GetDestroyEventTime() *timestamp.Timestamp

func (*CryptoKeyVersion) GetDestroyTime 

func (m *CryptoKeyVersion) GetDestroyTime() *timestamp.Timestamp

func (*CryptoKeyVersion) GetGenerateTime 

func (m *CryptoKeyVersion) GetGenerateTime() *timestamp.Timestamp

func (*CryptoKeyVersion) GetName 

func (m *CryptoKeyVersion) GetName() string

func (*CryptoKeyVersion) GetProtectionLevel 

func (m *CryptoKeyVersion) GetProtectionLevel() ProtectionLevel

func (*CryptoKeyVersion) GetState 

func (m *CryptoKeyVersion) GetState() CryptoKeyVersion_CryptoKeyVersionState

func (*CryptoKeyVersion) ProtoMessage 

func (*CryptoKeyVersion) ProtoMessage()

func (*CryptoKeyVersion) Reset 

func (m *CryptoKeyVersion) Reset()

func (*CryptoKeyVersion) String 

func (m *CryptoKeyVersion) String() string

func (*CryptoKeyVersion) XXX_DiscardUnknown 

func (m *CryptoKeyVersion) XXX_DiscardUnknown()

func (*CryptoKeyVersion) XXX_Marshal 

func (m *CryptoKeyVersion) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*CryptoKeyVersion) XXX_Merge 

func (m *CryptoKeyVersion) XXX_Merge(src proto.Message)

func (*CryptoKeyVersion) XXX_Size 

func (m *CryptoKeyVersion) XXX_Size() int

func (*CryptoKeyVersion) XXX_Unmarshal 

func (m *CryptoKeyVersion) XXX_Unmarshal(b []byte) error

type CryptoKeyVersionTemplate 

type CryptoKeyVersionTemplate struct {
	// [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel] to use when creating a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] based on
	// this template. Immutable. Defaults to [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE].
	ProtectionLevel ProtectionLevel `` /* 148-byte string literal not displayed */
	// Required. [Algorithm][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionAlgorithm] to use
	// when creating a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] based on this template.
	//
	// For backwards compatibility, GOOGLE_SYMMETRIC_ENCRYPTION is implied if both
	// this field is omitted and [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] is
	// [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].
	Algorithm            CryptoKeyVersion_CryptoKeyVersionAlgorithm `` /* 140-byte string literal not displayed */
	XXX_NoUnkeyedLiteral struct{}                                   `json:"-"`
	XXX_unrecognized     []byte                                     `json:"-"`
	XXX_sizecache        int32                                      `json:"-"`
}

A CryptoKeyVersionTemplate[google.cloud.kms.v1.CryptoKeyVersionTemplate] specifies the properties to use when creating a new CryptoKeyVersion[google.cloud.kms.v1.CryptoKeyVersion], either manually with [CreateCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.CreateCryptoKeyVersion] or automatically as a result of auto-rotation.

func (*CryptoKeyVersionTemplate) Descriptor 

func (*CryptoKeyVersionTemplate) Descriptor() ([]byte, []int)

func (*CryptoKeyVersionTemplate) GetAlgorithm 

func (m *CryptoKeyVersionTemplate) GetAlgorithm() CryptoKeyVersion_CryptoKeyVersionAlgorithm

func (*CryptoKeyVersionTemplate) GetProtectionLevel 

func (m *CryptoKeyVersionTemplate) GetProtectionLevel() ProtectionLevel

func (*CryptoKeyVersionTemplate) ProtoMessage 

func (*CryptoKeyVersionTemplate) ProtoMessage()

func (*CryptoKeyVersionTemplate) Reset 

func (m *CryptoKeyVersionTemplate) Reset()

func (*CryptoKeyVersionTemplate) String 

func (m *CryptoKeyVersionTemplate) String() string

func (*CryptoKeyVersionTemplate) XXX_DiscardUnknown 

func (m *CryptoKeyVersionTemplate) XXX_DiscardUnknown()

func (*CryptoKeyVersionTemplate) XXX_Marshal 

func (m *CryptoKeyVersionTemplate) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*CryptoKeyVersionTemplate) XXX_Merge 

func (m *CryptoKeyVersionTemplate) XXX_Merge(src proto.Message)

func (*CryptoKeyVersionTemplate) XXX_Size 

func (m *CryptoKeyVersionTemplate) XXX_Size() int

func (*CryptoKeyVersionTemplate) XXX_Unmarshal 

func (m *CryptoKeyVersionTemplate) XXX_Unmarshal(b []byte) error

type CryptoKeyVersion_CryptoKeyVersionAlgorithm 

type CryptoKeyVersion_CryptoKeyVersionAlgorithm int32

The algorithm of the CryptoKeyVersion[google.cloud.kms.v1.CryptoKeyVersion], indicating what parameters must be used for each cryptographic operation.

The [GOOGLE_SYMMETRIC_ENCRYPTION][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionAlgorithm.GOOGLE_SYMMETRIC_ENCRYPTION] algorithm is usable with [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].

Algorithms beginning with "RSA_SIGN_" are usable with [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] [ASYMMETRIC_SIGN][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ASYMMETRIC_SIGN].

The fields in the name after "RSA_SIGN_" correspond to the following parameters: padding algorithm, modulus bit length, and digest algorithm.

For PSS, the salt length used is equal to the length of digest algorithm. For example, [RSA_SIGN_PSS_2048_SHA256][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionAlgorithm.RSA_SIGN_PSS_2048_SHA256] will use PSS with a salt length of 256 bits or 32 bytes.

Algorithms beginning with "RSA_DECRYPT_" are usable with [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] [ASYMMETRIC_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ASYMMETRIC_DECRYPT].

The fields in the name after "RSA_DECRYPT_" correspond to the following parameters: padding algorithm, modulus bit length, and digest algorithm.

Algorithms beginning with "EC_SIGN_" are usable with [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] [ASYMMETRIC_SIGN][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ASYMMETRIC_SIGN].

The fields in the name after "EC_SIGN_" correspond to the following parameters: elliptic curve, digest algorithm. 

const (
	// Not specified.
	CryptoKeyVersion_CRYPTO_KEY_VERSION_ALGORITHM_UNSPECIFIED CryptoKeyVersion_CryptoKeyVersionAlgorithm = 0
	// Creates symmetric encryption keys.
	CryptoKeyVersion_GOOGLE_SYMMETRIC_ENCRYPTION CryptoKeyVersion_CryptoKeyVersionAlgorithm = 1
	// RSASSA-PSS 2048 bit key with a SHA256 digest.
	CryptoKeyVersion_RSA_SIGN_PSS_2048_SHA256 CryptoKeyVersion_CryptoKeyVersionAlgorithm = 2
	// RSASSA-PSS 3072 bit key with a SHA256 digest.
	CryptoKeyVersion_RSA_SIGN_PSS_3072_SHA256 CryptoKeyVersion_CryptoKeyVersionAlgorithm = 3
	// RSASSA-PSS 4096 bit key with a SHA256 digest.
	CryptoKeyVersion_RSA_SIGN_PSS_4096_SHA256 CryptoKeyVersion_CryptoKeyVersionAlgorithm = 4
	// RSASSA-PKCS1-v1_5 with a 2048 bit key and a SHA256 digest.
	CryptoKeyVersion_RSA_SIGN_PKCS1_2048_SHA256 CryptoKeyVersion_CryptoKeyVersionAlgorithm = 5
	// RSASSA-PKCS1-v1_5 with a 3072 bit key and a SHA256 digest.
	CryptoKeyVersion_RSA_SIGN_PKCS1_3072_SHA256 CryptoKeyVersion_CryptoKeyVersionAlgorithm = 6
	// RSASSA-PKCS1-v1_5 with a 4096 bit key and a SHA256 digest.
	CryptoKeyVersion_RSA_SIGN_PKCS1_4096_SHA256 CryptoKeyVersion_CryptoKeyVersionAlgorithm = 7
	// RSAES-OAEP 2048 bit key with a SHA256 digest.
	CryptoKeyVersion_RSA_DECRYPT_OAEP_2048_SHA256 CryptoKeyVersion_CryptoKeyVersionAlgorithm = 8
	// RSAES-OAEP 3072 bit key with a SHA256 digest.
	CryptoKeyVersion_RSA_DECRYPT_OAEP_3072_SHA256 CryptoKeyVersion_CryptoKeyVersionAlgorithm = 9
	// RSAES-OAEP 4096 bit key with a SHA256 digest.
	CryptoKeyVersion_RSA_DECRYPT_OAEP_4096_SHA256 CryptoKeyVersion_CryptoKeyVersionAlgorithm = 10
	// ECDSA on the NIST P-256 curve with a SHA256 digest.
	CryptoKeyVersion_EC_SIGN_P256_SHA256 CryptoKeyVersion_CryptoKeyVersionAlgorithm = 12
	// ECDSA on the NIST P-384 curve with a SHA384 digest.
	CryptoKeyVersion_EC_SIGN_P384_SHA384 CryptoKeyVersion_CryptoKeyVersionAlgorithm = 13
)

func (CryptoKeyVersion_CryptoKeyVersionAlgorithm) EnumDescriptor 

func (CryptoKeyVersion_CryptoKeyVersionAlgorithm) EnumDescriptor() ([]byte, []int)

func (CryptoKeyVersion_CryptoKeyVersionAlgorithm) String 

func (x CryptoKeyVersion_CryptoKeyVersionAlgorithm) String() string

type CryptoKeyVersion_CryptoKeyVersionState 

type CryptoKeyVersion_CryptoKeyVersionState int32

The state of a CryptoKeyVersion[google.cloud.kms.v1.CryptoKeyVersion], indicating if it can be used. 

const (
	// Not specified.
	CryptoKeyVersion_CRYPTO_KEY_VERSION_STATE_UNSPECIFIED CryptoKeyVersion_CryptoKeyVersionState = 0
	// This version is still being generated. It may not be used, enabled,
	// disabled, or destroyed yet. Cloud KMS will automatically mark this
	// version [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED] as soon as the version is ready.
	CryptoKeyVersion_PENDING_GENERATION CryptoKeyVersion_CryptoKeyVersionState = 5
	// This version may be used for cryptographic operations.
	CryptoKeyVersion_ENABLED CryptoKeyVersion_CryptoKeyVersionState = 1
	// This version may not be used, but the key material is still available,
	// and the version can be placed back into the [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED] state.
	CryptoKeyVersion_DISABLED CryptoKeyVersion_CryptoKeyVersionState = 2
	// This version is destroyed, and the key material is no longer stored.
	// A version may not leave this state once entered.
	CryptoKeyVersion_DESTROYED CryptoKeyVersion_CryptoKeyVersionState = 3
	// This version is scheduled for destruction, and will be destroyed soon.
	// Call
	// [RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion]
	// to put it back into the [DISABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DISABLED] state.
	CryptoKeyVersion_DESTROY_SCHEDULED CryptoKeyVersion_CryptoKeyVersionState = 4
)

func (CryptoKeyVersion_CryptoKeyVersionState) EnumDescriptor 

func (CryptoKeyVersion_CryptoKeyVersionState) EnumDescriptor() ([]byte, []int)

func (CryptoKeyVersion_CryptoKeyVersionState) String 

func (x CryptoKeyVersion_CryptoKeyVersionState) String() string

type CryptoKeyVersion_CryptoKeyVersionView 

type CryptoKeyVersion_CryptoKeyVersionView int32

A view for CryptoKeyVersion[google.cloud.kms.v1.CryptoKeyVersion]s. Controls the level of detail returned for [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion] in [KeyManagementService.ListCryptoKeyVersions][google.cloud.kms.v1.KeyManagementService.ListCryptoKeyVersions] and [KeyManagementService.ListCryptoKeys][google.cloud.kms.v1.KeyManagementService.ListCryptoKeys]. 

const (
	// Default view for each [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]. Does not include
	// the [attestation][google.cloud.kms.v1.CryptoKeyVersion.attestation] field.
	CryptoKeyVersion_CRYPTO_KEY_VERSION_VIEW_UNSPECIFIED CryptoKeyVersion_CryptoKeyVersionView = 0
	// Provides all fields in each [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion], including the
	// [attestation][google.cloud.kms.v1.CryptoKeyVersion.attestation].
	CryptoKeyVersion_FULL CryptoKeyVersion_CryptoKeyVersionView = 1
)

func (CryptoKeyVersion_CryptoKeyVersionView) EnumDescriptor 

func (CryptoKeyVersion_CryptoKeyVersionView) EnumDescriptor() ([]byte, []int)

func (CryptoKeyVersion_CryptoKeyVersionView) String 

func (x CryptoKeyVersion_CryptoKeyVersionView) String() string

type CryptoKey_CryptoKeyPurpose 

type CryptoKey_CryptoKeyPurpose int32

[CryptoKeyPurpose][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose] describes the cryptographic capabilities of a CryptoKey[google.cloud.kms.v1.CryptoKey]. A given key can only be used for the operations allowed by its purpose. 

const (
	// Not specified.
	CryptoKey_CRYPTO_KEY_PURPOSE_UNSPECIFIED CryptoKey_CryptoKeyPurpose = 0
	// [CryptoKeys][google.cloud.kms.v1.CryptoKey] with this purpose may be used with
	// [Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt] and
	// [Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt].
	CryptoKey_ENCRYPT_DECRYPT CryptoKey_CryptoKeyPurpose = 1
	// [CryptoKeys][google.cloud.kms.v1.CryptoKey] with this purpose may be used with
	// [AsymmetricSign][google.cloud.kms.v1.KeyManagementService.AsymmetricSign] and
	// [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].
	CryptoKey_ASYMMETRIC_SIGN CryptoKey_CryptoKeyPurpose = 5
	// [CryptoKeys][google.cloud.kms.v1.CryptoKey] with this purpose may be used with
	// [AsymmetricDecrypt][google.cloud.kms.v1.KeyManagementService.AsymmetricDecrypt] and
	// [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].
	CryptoKey_ASYMMETRIC_DECRYPT CryptoKey_CryptoKeyPurpose = 6
)

func (CryptoKey_CryptoKeyPurpose) EnumDescriptor 

func (CryptoKey_CryptoKeyPurpose) EnumDescriptor() ([]byte, []int)

func (CryptoKey_CryptoKeyPurpose) String 

func (x CryptoKey_CryptoKeyPurpose) String() string

type CryptoKey_RotationPeriod 

type CryptoKey_RotationPeriod struct {
	RotationPeriod *duration.Duration `protobuf:"bytes,8,opt,name=rotation_period,json=rotationPeriod,proto3,oneof"`
}

type DecryptRequest 

type DecryptRequest struct {
	// Required. The resource name of the [CryptoKey][google.cloud.kms.v1.CryptoKey] to use for decryption.
	// The server will choose the appropriate version.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Required. The encrypted data originally returned in
	// [EncryptResponse.ciphertext][google.cloud.kms.v1.EncryptResponse.ciphertext].
	Ciphertext []byte `protobuf:"bytes,2,opt,name=ciphertext,proto3" json:"ciphertext,omitempty"`
	// Optional data that must match the data originally supplied in
	// [EncryptRequest.additional_authenticated_data][google.cloud.kms.v1.EncryptRequest.additional_authenticated_data].
	AdditionalAuthenticatedData []byte   `` /* 144-byte string literal not displayed */
	XXX_NoUnkeyedLiteral        struct{} `json:"-"`
	XXX_unrecognized            []byte   `json:"-"`
	XXX_sizecache               int32    `json:"-"`
}

Request message for [KeyManagementService.Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt].

func (*DecryptRequest) Descriptor 

func (*DecryptRequest) Descriptor() ([]byte, []int)

func (*DecryptRequest) GetAdditionalAuthenticatedData 

func (m *DecryptRequest) GetAdditionalAuthenticatedData() []byte

func (*DecryptRequest) GetCiphertext 

func (m *DecryptRequest) GetCiphertext() []byte

func (*DecryptRequest) GetName 

func (m *DecryptRequest) GetName() string

func (*DecryptRequest) ProtoMessage 

func (*DecryptRequest) ProtoMessage()

func (*DecryptRequest) Reset 

func (m *DecryptRequest) Reset()

func (*DecryptRequest) String 

func (m *DecryptRequest) String() string

func (*DecryptRequest) XXX_DiscardUnknown 

func (m *DecryptRequest) XXX_DiscardUnknown()

func (*DecryptRequest) XXX_Marshal 

func (m *DecryptRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*DecryptRequest) XXX_Merge 

func (m *DecryptRequest) XXX_Merge(src proto.Message)

func (*DecryptRequest) XXX_Size 

func (m *DecryptRequest) XXX_Size() int

func (*DecryptRequest) XXX_Unmarshal 

func (m *DecryptRequest) XXX_Unmarshal(b []byte) error

type DecryptResponse 

type DecryptResponse struct {
	// The decrypted data originally supplied in [EncryptRequest.plaintext][google.cloud.kms.v1.EncryptRequest.plaintext].
	Plaintext            []byte   `protobuf:"bytes,1,opt,name=plaintext,proto3" json:"plaintext,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

Response message for [KeyManagementService.Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt].

func (*DecryptResponse) Descriptor 

func (*DecryptResponse) Descriptor() ([]byte, []int)

func (*DecryptResponse) GetPlaintext 

func (m *DecryptResponse) GetPlaintext() []byte

func (*DecryptResponse) ProtoMessage 

func (*DecryptResponse) ProtoMessage()

func (*DecryptResponse) Reset 

func (m *DecryptResponse) Reset()

func (*DecryptResponse) String 

func (m *DecryptResponse) String() string

func (*DecryptResponse) XXX_DiscardUnknown 

func (m *DecryptResponse) XXX_DiscardUnknown()

func (*DecryptResponse) XXX_Marshal 

func (m *DecryptResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*DecryptResponse) XXX_Merge 

func (m *DecryptResponse) XXX_Merge(src proto.Message)

func (*DecryptResponse) XXX_Size 

func (m *DecryptResponse) XXX_Size() int

func (*DecryptResponse) XXX_Unmarshal 

func (m *DecryptResponse) XXX_Unmarshal(b []byte) error

type DestroyCryptoKeyVersionRequest 

type DestroyCryptoKeyVersionRequest struct {
	// The resource name of the [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to destroy.
	Name                 string   `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

Request message for [KeyManagementService.DestroyCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.DestroyCryptoKeyVersion].

func (*DestroyCryptoKeyVersionRequest) Descriptor 

func (*DestroyCryptoKeyVersionRequest) Descriptor() ([]byte, []int)

func (*DestroyCryptoKeyVersionRequest) GetName 

func (m *DestroyCryptoKeyVersionRequest) GetName() string

func (*DestroyCryptoKeyVersionRequest) ProtoMessage 

func (*DestroyCryptoKeyVersionRequest) ProtoMessage()

func (*DestroyCryptoKeyVersionRequest) Reset 

func (m *DestroyCryptoKeyVersionRequest) Reset()

func (*DestroyCryptoKeyVersionRequest) String 

func (m *DestroyCryptoKeyVersionRequest) String() string

func (*DestroyCryptoKeyVersionRequest) XXX_DiscardUnknown 

func (m *DestroyCryptoKeyVersionRequest) XXX_DiscardUnknown()

func (*DestroyCryptoKeyVersionRequest) XXX_Marshal 

func (m *DestroyCryptoKeyVersionRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*DestroyCryptoKeyVersionRequest) XXX_Merge 

func (m *DestroyCryptoKeyVersionRequest) XXX_Merge(src proto.Message)

func (*DestroyCryptoKeyVersionRequest) XXX_Size 

func (m *DestroyCryptoKeyVersionRequest) XXX_Size() int

func (*DestroyCryptoKeyVersionRequest) XXX_Unmarshal 

func (m *DestroyCryptoKeyVersionRequest) XXX_Unmarshal(b []byte) error

type Digest 

type Digest struct {
	// Required. The message digest.
	//
	// Types that are valid to be assigned to Digest:
	//	*Digest_Sha256
	//	*Digest_Sha384
	//	*Digest_Sha512
	Digest               isDigest_Digest `protobuf_oneof:"digest"`
	XXX_NoUnkeyedLiteral struct{}        `json:"-"`
	XXX_unrecognized     []byte          `json:"-"`
	XXX_sizecache        int32           `json:"-"`
}

A Digest[google.cloud.kms.v1.Digest] holds a cryptographic message digest.

func (*Digest) Descriptor 

func (*Digest) Descriptor() ([]byte, []int)

func (*Digest) GetDigest 

func (m *Digest) GetDigest() isDigest_Digest

func (*Digest) GetSha256 

func (m *Digest) GetSha256() []byte

func (*Digest) GetSha384 

func (m *Digest) GetSha384() []byte

func (*Digest) GetSha512 

func (m *Digest) GetSha512() []byte

func (*Digest) ProtoMessage 

func (*Digest) ProtoMessage()

func (*Digest) Reset 

func (m *Digest) Reset()

func (*Digest) String 

func (m *Digest) String() string

func (*Digest) XXX_DiscardUnknown 

func (m *Digest) XXX_DiscardUnknown()

func (*Digest) XXX_Marshal 

func (m *Digest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*Digest) XXX_Merge 

func (m *Digest) XXX_Merge(src proto.Message)

func (*Digest) XXX_OneofFuncs 

func (*Digest) XXX_OneofFuncs() (func(msg proto.Message, b *proto.Buffer) error, func(msg proto.Message, tag, wire int, b *proto.Buffer) (bool, error), func(msg proto.Message) (n int), []interface{})

XXX_OneofFuncs is for the internal use of the proto package.

func (*Digest) XXX_Size 

func (m *Digest) XXX_Size() int

func (*Digest) XXX_Unmarshal 

func (m *Digest) XXX_Unmarshal(b []byte) error

type Digest_Sha256 

type Digest_Sha256 struct {
	Sha256 []byte `protobuf:"bytes,1,opt,name=sha256,proto3,oneof"`
}

type Digest_Sha384 

type Digest_Sha384 struct {
	Sha384 []byte `protobuf:"bytes,2,opt,name=sha384,proto3,oneof"`
}

type Digest_Sha512 

type Digest_Sha512 struct {
	Sha512 []byte `protobuf:"bytes,3,opt,name=sha512,proto3,oneof"`
}

type EncryptRequest 

type EncryptRequest struct {
	// Required. The resource name of the [CryptoKey][google.cloud.kms.v1.CryptoKey] or [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]
	// to use for encryption.
	//
	// If a [CryptoKey][google.cloud.kms.v1.CryptoKey] is specified, the server will use its
	// [primary version][google.cloud.kms.v1.CryptoKey.primary].
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Required. The data to encrypt. Must be no larger than 64KiB.
	//
	// The maximum size depends on the key version's
	// [protection_level][google.cloud.kms.v1.CryptoKeyVersionTemplate.protection_level]. For
	// [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE] keys, the plaintext must be no larger
	// than 64KiB. For [HSM][google.cloud.kms.v1.ProtectionLevel.HSM] keys, the combined length of the
	// plaintext and additional_authenticated_data fields must be no larger than
	// 8KiB.
	Plaintext []byte `protobuf:"bytes,2,opt,name=plaintext,proto3" json:"plaintext,omitempty"`
	// Optional data that, if specified, must also be provided during decryption
	// through [DecryptRequest.additional_authenticated_data][google.cloud.kms.v1.DecryptRequest.additional_authenticated_data].
	//
	// The maximum size depends on the key version's
	// [protection_level][google.cloud.kms.v1.CryptoKeyVersionTemplate.protection_level]. For
	// [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE] keys, the AAD must be no larger than
	// 64KiB. For [HSM][google.cloud.kms.v1.ProtectionLevel.HSM] keys, the combined length of the
	// plaintext and additional_authenticated_data fields must be no larger than
	// 8KiB.
	AdditionalAuthenticatedData []byte   `` /* 144-byte string literal not displayed */
	XXX_NoUnkeyedLiteral        struct{} `json:"-"`
	XXX_unrecognized            []byte   `json:"-"`
	XXX_sizecache               int32    `json:"-"`
}

Request message for [KeyManagementService.Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].

func (*EncryptRequest) Descriptor 

func (*EncryptRequest) Descriptor() ([]byte, []int)

func (*EncryptRequest) GetAdditionalAuthenticatedData 

func (m *EncryptRequest) GetAdditionalAuthenticatedData() []byte

func (*EncryptRequest) GetName 

func (m *EncryptRequest) GetName() string

func (*EncryptRequest) GetPlaintext 

func (m *EncryptRequest) GetPlaintext() []byte

func (*EncryptRequest) ProtoMessage 

func (*EncryptRequest) ProtoMessage()

func (*EncryptRequest) Reset 

func (m *EncryptRequest) Reset()

func (*EncryptRequest) String 

func (m *EncryptRequest) String() string

func (*EncryptRequest) XXX_DiscardUnknown 

func (m *EncryptRequest) XXX_DiscardUnknown()

func (*EncryptRequest) XXX_Marshal 

func (m *EncryptRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*EncryptRequest) XXX_Merge 

func (m *EncryptRequest) XXX_Merge(src proto.Message)

func (*EncryptRequest) XXX_Size 

func (m *EncryptRequest) XXX_Size() int

func (*EncryptRequest) XXX_Unmarshal 

func (m *EncryptRequest) XXX_Unmarshal(b []byte) error

type EncryptResponse 

type EncryptResponse struct {
	// The resource name of the [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] used in encryption.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The encrypted data.
	Ciphertext           []byte   `protobuf:"bytes,2,opt,name=ciphertext,proto3" json:"ciphertext,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

Response message for [KeyManagementService.Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].

func (*EncryptResponse) Descriptor 

func (*EncryptResponse) Descriptor() ([]byte, []int)

func (*EncryptResponse) GetCiphertext 

func (m *EncryptResponse) GetCiphertext() []byte

func (*EncryptResponse) GetName 

func (m *EncryptResponse) GetName() string

func (*EncryptResponse) ProtoMessage 

func (*EncryptResponse) ProtoMessage()

func (*EncryptResponse) Reset 

func (m *EncryptResponse) Reset()

func (*EncryptResponse) String 

func (m *EncryptResponse) String() string

func (*EncryptResponse) XXX_DiscardUnknown 

func (m *EncryptResponse) XXX_DiscardUnknown()

func (*EncryptResponse) XXX_Marshal 

func (m *EncryptResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*EncryptResponse) XXX_Merge 

func (m *EncryptResponse) XXX_Merge(src proto.Message)

func (*EncryptResponse) XXX_Size 

func (m *EncryptResponse) XXX_Size() int

func (*EncryptResponse) XXX_Unmarshal 

func (m *EncryptResponse) XXX_Unmarshal(b []byte) error

type GetCryptoKeyRequest 

type GetCryptoKeyRequest struct {
	// The [name][google.cloud.kms.v1.CryptoKey.name] of the [CryptoKey][google.cloud.kms.v1.CryptoKey] to get.
	Name                 string   `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

Request message for [KeyManagementService.GetCryptoKey][google.cloud.kms.v1.KeyManagementService.GetCryptoKey].

func (*GetCryptoKeyRequest) Descriptor 

func (*GetCryptoKeyRequest) Descriptor() ([]byte, []int)

func (*GetCryptoKeyRequest) GetName 

func (m *GetCryptoKeyRequest) GetName() string

func (*GetCryptoKeyRequest) ProtoMessage 

func (*GetCryptoKeyRequest) ProtoMessage()

func (*GetCryptoKeyRequest) Reset 

func (m *GetCryptoKeyRequest) Reset()

func (*GetCryptoKeyRequest) String 

func (m *GetCryptoKeyRequest) String() string

func (*GetCryptoKeyRequest) XXX_DiscardUnknown 

func (m *GetCryptoKeyRequest) XXX_DiscardUnknown()

func (*GetCryptoKeyRequest) XXX_Marshal 

func (m *GetCryptoKeyRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*GetCryptoKeyRequest) XXX_Merge 

func (m *GetCryptoKeyRequest) XXX_Merge(src proto.Message)

func (*GetCryptoKeyRequest) XXX_Size 

func (m *GetCryptoKeyRequest) XXX_Size() int

func (*GetCryptoKeyRequest) XXX_Unmarshal 

func (m *GetCryptoKeyRequest) XXX_Unmarshal(b []byte) error

type GetCryptoKeyVersionRequest 

type GetCryptoKeyVersionRequest struct {
	// The [name][google.cloud.kms.v1.CryptoKeyVersion.name] of the [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to get.
	Name                 string   `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

Request message for [KeyManagementService.GetCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.GetCryptoKeyVersion].

func (*GetCryptoKeyVersionRequest) Descriptor 

func (*GetCryptoKeyVersionRequest) Descriptor() ([]byte, []int)

func (*GetCryptoKeyVersionRequest) GetName 

func (m *GetCryptoKeyVersionRequest) GetName() string

func (*GetCryptoKeyVersionRequest) ProtoMessage 

func (*GetCryptoKeyVersionRequest) ProtoMessage()

func (*GetCryptoKeyVersionRequest) Reset 

func (m *GetCryptoKeyVersionRequest) Reset()

func (*GetCryptoKeyVersionRequest) String 

func (m *GetCryptoKeyVersionRequest) String() string

func (*GetCryptoKeyVersionRequest) XXX_DiscardUnknown 

func (m *GetCryptoKeyVersionRequest) XXX_DiscardUnknown()

func (*GetCryptoKeyVersionRequest) XXX_Marshal 

func (m *GetCryptoKeyVersionRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*GetCryptoKeyVersionRequest) XXX_Merge 

func (m *GetCryptoKeyVersionRequest) XXX_Merge(src proto.Message)

func (*GetCryptoKeyVersionRequest) XXX_Size 

func (m *GetCryptoKeyVersionRequest) XXX_Size() int

func (*GetCryptoKeyVersionRequest) XXX_Unmarshal 

func (m *GetCryptoKeyVersionRequest) XXX_Unmarshal(b []byte) error

type GetKeyRingRequest 

type GetKeyRingRequest struct {
	// The [name][google.cloud.kms.v1.KeyRing.name] of the [KeyRing][google.cloud.kms.v1.KeyRing] to get.
	Name                 string   `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

Request message for [KeyManagementService.GetKeyRing][google.cloud.kms.v1.KeyManagementService.GetKeyRing].

func (*GetKeyRingRequest) Descriptor 

func (*GetKeyRingRequest) Descriptor() ([]byte, []int)

func (*GetKeyRingRequest) GetName 

func (m *GetKeyRingRequest) GetName() string

func (*GetKeyRingRequest) ProtoMessage 

func (*GetKeyRingRequest) ProtoMessage()

func (*GetKeyRingRequest) Reset 

func (m *GetKeyRingRequest) Reset()

func (*GetKeyRingRequest) String 

func (m *GetKeyRingRequest) String() string

func (*GetKeyRingRequest) XXX_DiscardUnknown 

func (m *GetKeyRingRequest) XXX_DiscardUnknown()

func (*GetKeyRingRequest) XXX_Marshal 

func (m *GetKeyRingRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*GetKeyRingRequest) XXX_Merge 

func (m *GetKeyRingRequest) XXX_Merge(src proto.Message)

func (*GetKeyRingRequest) XXX_Size 

func (m *GetKeyRingRequest) XXX_Size() int

func (*GetKeyRingRequest) XXX_Unmarshal 

func (m *GetKeyRingRequest) XXX_Unmarshal(b []byte) error

type GetPublicKeyRequest 

type GetPublicKeyRequest struct {
	// The [name][google.cloud.kms.v1.CryptoKeyVersion.name] of the [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] public key to
	// get.
	Name                 string   `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

Request message for [KeyManagementService.GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].

func (*GetPublicKeyRequest) Descriptor 

func (*GetPublicKeyRequest) Descriptor() ([]byte, []int)

func (*GetPublicKeyRequest) GetName 

func (m *GetPublicKeyRequest) GetName() string

func (*GetPublicKeyRequest) ProtoMessage 

func (*GetPublicKeyRequest) ProtoMessage()

func (*GetPublicKeyRequest) Reset 

func (m *GetPublicKeyRequest) Reset()

func (*GetPublicKeyRequest) String 

func (m *GetPublicKeyRequest) String() string

func (*GetPublicKeyRequest) XXX_DiscardUnknown 

func (m *GetPublicKeyRequest) XXX_DiscardUnknown()

func (*GetPublicKeyRequest) XXX_Marshal 

func (m *GetPublicKeyRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*GetPublicKeyRequest) XXX_Merge 

func (m *GetPublicKeyRequest) XXX_Merge(src proto.Message)

func (*GetPublicKeyRequest) XXX_Size 

func (m *GetPublicKeyRequest) XXX_Size() int

func (*GetPublicKeyRequest) XXX_Unmarshal 

func (m *GetPublicKeyRequest) XXX_Unmarshal(b []byte) error

type KeyManagementServiceClient 

type KeyManagementServiceClient interface {
	// Lists [KeyRings][google.cloud.kms.v1.KeyRing].
	ListKeyRings(ctx context.Context, in *ListKeyRingsRequest, opts ...grpc.CallOption) (*ListKeyRingsResponse, error)
	// Lists [CryptoKeys][google.cloud.kms.v1.CryptoKey].
	ListCryptoKeys(ctx context.Context, in *ListCryptoKeysRequest, opts ...grpc.CallOption) (*ListCryptoKeysResponse, error)
	// Lists [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion].
	ListCryptoKeyVersions(ctx context.Context, in *ListCryptoKeyVersionsRequest, opts ...grpc.CallOption) (*ListCryptoKeyVersionsResponse, error)
	// Returns metadata for a given [KeyRing][google.cloud.kms.v1.KeyRing].
	GetKeyRing(ctx context.Context, in *GetKeyRingRequest, opts ...grpc.CallOption) (*KeyRing, error)
	// Returns metadata for a given [CryptoKey][google.cloud.kms.v1.CryptoKey], as well as its
	// [primary][google.cloud.kms.v1.CryptoKey.primary] [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
	GetCryptoKey(ctx context.Context, in *GetCryptoKeyRequest, opts ...grpc.CallOption) (*CryptoKey, error)
	// Returns metadata for a given [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
	GetCryptoKeyVersion(ctx context.Context, in *GetCryptoKeyVersionRequest, opts ...grpc.CallOption) (*CryptoKeyVersion, error)
	// Returns the public key for the given [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]. The
	// [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must be
	// [ASYMMETRIC_SIGN][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ASYMMETRIC_SIGN] or
	// [ASYMMETRIC_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ASYMMETRIC_DECRYPT].
	GetPublicKey(ctx context.Context, in *GetPublicKeyRequest, opts ...grpc.CallOption) (*PublicKey, error)
	// Create a new [KeyRing][google.cloud.kms.v1.KeyRing] in a given Project and Location.
	CreateKeyRing(ctx context.Context, in *CreateKeyRingRequest, opts ...grpc.CallOption) (*KeyRing, error)
	// Create a new [CryptoKey][google.cloud.kms.v1.CryptoKey] within a [KeyRing][google.cloud.kms.v1.KeyRing].
	//
	// [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] and
	// [CryptoKey.version_template.algorithm][google.cloud.kms.v1.CryptoKeyVersionTemplate.algorithm]
	// are required.
	CreateCryptoKey(ctx context.Context, in *CreateCryptoKeyRequest, opts ...grpc.CallOption) (*CryptoKey, error)
	// Create a new [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] in a [CryptoKey][google.cloud.kms.v1.CryptoKey].
	//
	// The server will assign the next sequential id. If unset,
	// [state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set to
	// [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED].
	CreateCryptoKeyVersion(ctx context.Context, in *CreateCryptoKeyVersionRequest, opts ...grpc.CallOption) (*CryptoKeyVersion, error)
	// Update a [CryptoKey][google.cloud.kms.v1.CryptoKey].
	UpdateCryptoKey(ctx context.Context, in *UpdateCryptoKeyRequest, opts ...grpc.CallOption) (*CryptoKey, error)
	// Update a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]'s metadata.
	//
	// [state][google.cloud.kms.v1.CryptoKeyVersion.state] may be changed between
	// [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED] and
	// [DISABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DISABLED] using this
	// method. See [DestroyCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.DestroyCryptoKeyVersion] and [RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion] to
	// move between other states.
	UpdateCryptoKeyVersion(ctx context.Context, in *UpdateCryptoKeyVersionRequest, opts ...grpc.CallOption) (*CryptoKeyVersion, error)
	// Encrypts data, so that it can only be recovered by a call to [Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt].
	// The [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must be
	// [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].
	Encrypt(ctx context.Context, in *EncryptRequest, opts ...grpc.CallOption) (*EncryptResponse, error)
	// Decrypts data that was protected by [Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt]. The [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose]
	// must be [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].
	Decrypt(ctx context.Context, in *DecryptRequest, opts ...grpc.CallOption) (*DecryptResponse, error)
	// Signs data using a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose]
	// ASYMMETRIC_SIGN, producing a signature that can be verified with the public
	// key retrieved from [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].
	AsymmetricSign(ctx context.Context, in *AsymmetricSignRequest, opts ...grpc.CallOption) (*AsymmetricSignResponse, error)
	// Decrypts data that was encrypted with a public key retrieved from
	// [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey] corresponding to a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
	// [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] ASYMMETRIC_DECRYPT.
	AsymmetricDecrypt(ctx context.Context, in *AsymmetricDecryptRequest, opts ...grpc.CallOption) (*AsymmetricDecryptResponse, error)
	// Update the version of a [CryptoKey][google.cloud.kms.v1.CryptoKey] that will be used in [Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].
	//
	// Returns an error if called on an asymmetric key.
	UpdateCryptoKeyPrimaryVersion(ctx context.Context, in *UpdateCryptoKeyPrimaryVersionRequest, opts ...grpc.CallOption) (*CryptoKey, error)
	// Schedule a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] for destruction.
	//
	// Upon calling this method, [CryptoKeyVersion.state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set to
	// [DESTROY_SCHEDULED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROY_SCHEDULED]
	// and [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time] will be set to a time 24
	// hours in the future, at which point the [state][google.cloud.kms.v1.CryptoKeyVersion.state]
	// will be changed to
	// [DESTROYED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROYED], and the key
	// material will be irrevocably destroyed.
	//
	// Before the [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time] is reached,
	// [RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion] may be called to reverse the process.
	DestroyCryptoKeyVersion(ctx context.Context, in *DestroyCryptoKeyVersionRequest, opts ...grpc.CallOption) (*CryptoKeyVersion, error)
	// Restore a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] in the
	// [DESTROY_SCHEDULED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROY_SCHEDULED]
	// state.
	//
	// Upon restoration of the CryptoKeyVersion, [state][google.cloud.kms.v1.CryptoKeyVersion.state]
	// will be set to [DISABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DISABLED],
	// and [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time] will be cleared.
	RestoreCryptoKeyVersion(ctx context.Context, in *RestoreCryptoKeyVersionRequest, opts ...grpc.CallOption) (*CryptoKeyVersion, error)
}

KeyManagementServiceClient is the client API for KeyManagementService service.

For semantics around ctx use and closing/ending streaming RPCs, please refer to https://godoc.org/google.golang.org/grpc#ClientConn.NewStream.

func NewKeyManagementServiceClient 

func NewKeyManagementServiceClient(cc *grpc.ClientConn) KeyManagementServiceClient

type KeyManagementServiceServer 

type KeyManagementServiceServer interface {
	// Lists [KeyRings][google.cloud.kms.v1.KeyRing].
	ListKeyRings(context.Context, *ListKeyRingsRequest) (*ListKeyRingsResponse, error)
	// Lists [CryptoKeys][google.cloud.kms.v1.CryptoKey].
	ListCryptoKeys(context.Context, *ListCryptoKeysRequest) (*ListCryptoKeysResponse, error)
	// Lists [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion].
	ListCryptoKeyVersions(context.Context, *ListCryptoKeyVersionsRequest) (*ListCryptoKeyVersionsResponse, error)
	// Returns metadata for a given [KeyRing][google.cloud.kms.v1.KeyRing].
	GetKeyRing(context.Context, *GetKeyRingRequest) (*KeyRing, error)
	// Returns metadata for a given [CryptoKey][google.cloud.kms.v1.CryptoKey], as well as its
	// [primary][google.cloud.kms.v1.CryptoKey.primary] [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
	GetCryptoKey(context.Context, *GetCryptoKeyRequest) (*CryptoKey, error)
	// Returns metadata for a given [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion].
	GetCryptoKeyVersion(context.Context, *GetCryptoKeyVersionRequest) (*CryptoKeyVersion, error)
	// Returns the public key for the given [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]. The
	// [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must be
	// [ASYMMETRIC_SIGN][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ASYMMETRIC_SIGN] or
	// [ASYMMETRIC_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ASYMMETRIC_DECRYPT].
	GetPublicKey(context.Context, *GetPublicKeyRequest) (*PublicKey, error)
	// Create a new [KeyRing][google.cloud.kms.v1.KeyRing] in a given Project and Location.
	CreateKeyRing(context.Context, *CreateKeyRingRequest) (*KeyRing, error)
	// Create a new [CryptoKey][google.cloud.kms.v1.CryptoKey] within a [KeyRing][google.cloud.kms.v1.KeyRing].
	//
	// [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] and
	// [CryptoKey.version_template.algorithm][google.cloud.kms.v1.CryptoKeyVersionTemplate.algorithm]
	// are required.
	CreateCryptoKey(context.Context, *CreateCryptoKeyRequest) (*CryptoKey, error)
	// Create a new [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] in a [CryptoKey][google.cloud.kms.v1.CryptoKey].
	//
	// The server will assign the next sequential id. If unset,
	// [state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set to
	// [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED].
	CreateCryptoKeyVersion(context.Context, *CreateCryptoKeyVersionRequest) (*CryptoKeyVersion, error)
	// Update a [CryptoKey][google.cloud.kms.v1.CryptoKey].
	UpdateCryptoKey(context.Context, *UpdateCryptoKeyRequest) (*CryptoKey, error)
	// Update a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion]'s metadata.
	//
	// [state][google.cloud.kms.v1.CryptoKeyVersion.state] may be changed between
	// [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED] and
	// [DISABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DISABLED] using this
	// method. See [DestroyCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.DestroyCryptoKeyVersion] and [RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion] to
	// move between other states.
	UpdateCryptoKeyVersion(context.Context, *UpdateCryptoKeyVersionRequest) (*CryptoKeyVersion, error)
	// Encrypts data, so that it can only be recovered by a call to [Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt].
	// The [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] must be
	// [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].
	Encrypt(context.Context, *EncryptRequest) (*EncryptResponse, error)
	// Decrypts data that was protected by [Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt]. The [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose]
	// must be [ENCRYPT_DECRYPT][google.cloud.kms.v1.CryptoKey.CryptoKeyPurpose.ENCRYPT_DECRYPT].
	Decrypt(context.Context, *DecryptRequest) (*DecryptResponse, error)
	// Signs data using a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose]
	// ASYMMETRIC_SIGN, producing a signature that can be verified with the public
	// key retrieved from [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].
	AsymmetricSign(context.Context, *AsymmetricSignRequest) (*AsymmetricSignResponse, error)
	// Decrypts data that was encrypted with a public key retrieved from
	// [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey] corresponding to a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with
	// [CryptoKey.purpose][google.cloud.kms.v1.CryptoKey.purpose] ASYMMETRIC_DECRYPT.
	AsymmetricDecrypt(context.Context, *AsymmetricDecryptRequest) (*AsymmetricDecryptResponse, error)
	// Update the version of a [CryptoKey][google.cloud.kms.v1.CryptoKey] that will be used in [Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt].
	//
	// Returns an error if called on an asymmetric key.
	UpdateCryptoKeyPrimaryVersion(context.Context, *UpdateCryptoKeyPrimaryVersionRequest) (*CryptoKey, error)
	// Schedule a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] for destruction.
	//
	// Upon calling this method, [CryptoKeyVersion.state][google.cloud.kms.v1.CryptoKeyVersion.state] will be set to
	// [DESTROY_SCHEDULED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROY_SCHEDULED]
	// and [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time] will be set to a time 24
	// hours in the future, at which point the [state][google.cloud.kms.v1.CryptoKeyVersion.state]
	// will be changed to
	// [DESTROYED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROYED], and the key
	// material will be irrevocably destroyed.
	//
	// Before the [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time] is reached,
	// [RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion] may be called to reverse the process.
	DestroyCryptoKeyVersion(context.Context, *DestroyCryptoKeyVersionRequest) (*CryptoKeyVersion, error)
	// Restore a [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] in the
	// [DESTROY_SCHEDULED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DESTROY_SCHEDULED]
	// state.
	//
	// Upon restoration of the CryptoKeyVersion, [state][google.cloud.kms.v1.CryptoKeyVersion.state]
	// will be set to [DISABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DISABLED],
	// and [destroy_time][google.cloud.kms.v1.CryptoKeyVersion.destroy_time] will be cleared.
	RestoreCryptoKeyVersion(context.Context, *RestoreCryptoKeyVersionRequest) (*CryptoKeyVersion, error)
}

KeyManagementServiceServer is the server API for KeyManagementService service.

type KeyOperationAttestation 

type KeyOperationAttestation struct {
	// Output only. The format of the attestation data.
	Format KeyOperationAttestation_AttestationFormat `` /* 133-byte string literal not displayed */
	// Output only. The attestation data provided by the HSM when the key
	// operation was performed.
	Content              []byte   `protobuf:"bytes,5,opt,name=content,proto3" json:"content,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

Contains an HSM-generated attestation about a key operation.

func (*KeyOperationAttestation) Descriptor 

func (*KeyOperationAttestation) Descriptor() ([]byte, []int)

func (*KeyOperationAttestation) GetContent 

func (m *KeyOperationAttestation) GetContent() []byte

func (*KeyOperationAttestation) GetFormat 

func (m *KeyOperationAttestation) GetFormat() KeyOperationAttestation_AttestationFormat

func (*KeyOperationAttestation) ProtoMessage 

func (*KeyOperationAttestation) ProtoMessage()

func (*KeyOperationAttestation) Reset 

func (m *KeyOperationAttestation) Reset()

func (*KeyOperationAttestation) String 

func (m *KeyOperationAttestation) String() string

func (*KeyOperationAttestation) XXX_DiscardUnknown 

func (m *KeyOperationAttestation) XXX_DiscardUnknown()

func (*KeyOperationAttestation) XXX_Marshal 

func (m *KeyOperationAttestation) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*KeyOperationAttestation) XXX_Merge 

func (m *KeyOperationAttestation) XXX_Merge(src proto.Message)

func (*KeyOperationAttestation) XXX_Size 

func (m *KeyOperationAttestation) XXX_Size() int

func (*KeyOperationAttestation) XXX_Unmarshal 

func (m *KeyOperationAttestation) XXX_Unmarshal(b []byte) error

type KeyOperationAttestation_AttestationFormat 

type KeyOperationAttestation_AttestationFormat int32

Attestion formats provided by the HSM. 

const (
	KeyOperationAttestation_ATTESTATION_FORMAT_UNSPECIFIED KeyOperationAttestation_AttestationFormat = 0
	// Cavium HSM attestation compressed with gzip. Note that this format is
	// defined by Cavium and subject to change at any time.
	KeyOperationAttestation_CAVIUM_V1_COMPRESSED KeyOperationAttestation_AttestationFormat = 3
)

func (KeyOperationAttestation_AttestationFormat) EnumDescriptor 

func (KeyOperationAttestation_AttestationFormat) EnumDescriptor() ([]byte, []int)

func (KeyOperationAttestation_AttestationFormat) String 

func (x KeyOperationAttestation_AttestationFormat) String() string

type KeyRing 

type KeyRing struct {
	// Output only. The resource name for the [KeyRing][google.cloud.kms.v1.KeyRing] in the format
	// `projects/*/locations/*/keyRings/*`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Output only. The time at which this [KeyRing][google.cloud.kms.v1.KeyRing] was created.
	CreateTime           *timestamp.Timestamp `protobuf:"bytes,2,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	XXX_NoUnkeyedLiteral struct{}             `json:"-"`
	XXX_unrecognized     []byte               `json:"-"`
	XXX_sizecache        int32                `json:"-"`
}

A KeyRing[google.cloud.kms.v1.KeyRing] is a toplevel logical grouping of [CryptoKeys][google.cloud.kms.v1.CryptoKey].

func (*KeyRing) Descriptor 

func (*KeyRing) Descriptor() ([]byte, []int)

func (*KeyRing) GetCreateTime 

func (m *KeyRing) GetCreateTime() *timestamp.Timestamp

func (*KeyRing) GetName 

func (m *KeyRing) GetName() string

func (*KeyRing) ProtoMessage 

func (*KeyRing) ProtoMessage()

func (*KeyRing) Reset 

func (m *KeyRing) Reset()

func (*KeyRing) String 

func (m *KeyRing) String() string

func (*KeyRing) XXX_DiscardUnknown 

func (m *KeyRing) XXX_DiscardUnknown()

func (*KeyRing) XXX_Marshal 

func (m *KeyRing) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*KeyRing) XXX_Merge 

func (m *KeyRing) XXX_Merge(src proto.Message)

func (*KeyRing) XXX_Size 

func (m *KeyRing) XXX_Size() int

func (*KeyRing) XXX_Unmarshal 

func (m *KeyRing) XXX_Unmarshal(b []byte) error

type ListCryptoKeyVersionsRequest 

type ListCryptoKeyVersionsRequest struct {
	// Required. The resource name of the [CryptoKey][google.cloud.kms.v1.CryptoKey] to list, in the format
	// `projects/*/locations/*/keyRings/*/cryptoKeys/*`.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Optional limit on the number of [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion] to
	// include in the response. Further [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion] can
	// subsequently be obtained by including the
	// [ListCryptoKeyVersionsResponse.next_page_token][google.cloud.kms.v1.ListCryptoKeyVersionsResponse.next_page_token] in a subsequent request.
	// If unspecified, the server will pick an appropriate default.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Optional pagination token, returned earlier via
	// [ListCryptoKeyVersionsResponse.next_page_token][google.cloud.kms.v1.ListCryptoKeyVersionsResponse.next_page_token].
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// The fields to include in the response.
	View                 CryptoKeyVersion_CryptoKeyVersionView `protobuf:"varint,4,opt,name=view,proto3,enum=google.cloud.kms.v1.CryptoKeyVersion_CryptoKeyVersionView" json:"view,omitempty"`
	XXX_NoUnkeyedLiteral struct{}                              `json:"-"`
	XXX_unrecognized     []byte                                `json:"-"`
	XXX_sizecache        int32                                 `json:"-"`
}

Request message for [KeyManagementService.ListCryptoKeyVersions][google.cloud.kms.v1.KeyManagementService.ListCryptoKeyVersions].

func (*ListCryptoKeyVersionsRequest) Descriptor 

func (*ListCryptoKeyVersionsRequest) Descriptor() ([]byte, []int)

func (*ListCryptoKeyVersionsRequest) GetPageSize 

func (m *ListCryptoKeyVersionsRequest) GetPageSize() int32

func (*ListCryptoKeyVersionsRequest) GetPageToken 

func (m *ListCryptoKeyVersionsRequest) GetPageToken() string

func (*ListCryptoKeyVersionsRequest) GetParent 

func (m *ListCryptoKeyVersionsRequest) GetParent() string

func (*ListCryptoKeyVersionsRequest) GetView 

func (m *ListCryptoKeyVersionsRequest) GetView() CryptoKeyVersion_CryptoKeyVersionView

func (*ListCryptoKeyVersionsRequest) ProtoMessage 

func (*ListCryptoKeyVersionsRequest) ProtoMessage()

func (*ListCryptoKeyVersionsRequest) Reset 

func (m *ListCryptoKeyVersionsRequest) Reset()

func (*ListCryptoKeyVersionsRequest) String 

func (m *ListCryptoKeyVersionsRequest) String() string

func (*ListCryptoKeyVersionsRequest) XXX_DiscardUnknown 

func (m *ListCryptoKeyVersionsRequest) XXX_DiscardUnknown()

func (*ListCryptoKeyVersionsRequest) XXX_Marshal 

func (m *ListCryptoKeyVersionsRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ListCryptoKeyVersionsRequest) XXX_Merge 

func (m *ListCryptoKeyVersionsRequest) XXX_Merge(src proto.Message)

func (*ListCryptoKeyVersionsRequest) XXX_Size 

func (m *ListCryptoKeyVersionsRequest) XXX_Size() int

func (*ListCryptoKeyVersionsRequest) XXX_Unmarshal 

func (m *ListCryptoKeyVersionsRequest) XXX_Unmarshal(b []byte) error

type ListCryptoKeyVersionsResponse 

type ListCryptoKeyVersionsResponse struct {
	// The list of [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion].
	CryptoKeyVersions []*CryptoKeyVersion `protobuf:"bytes,1,rep,name=crypto_key_versions,json=cryptoKeyVersions,proto3" json:"crypto_key_versions,omitempty"`
	// A token to retrieve next page of results. Pass this value in
	// [ListCryptoKeyVersionsRequest.page_token][google.cloud.kms.v1.ListCryptoKeyVersionsRequest.page_token] to retrieve the next page of
	// results.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// The total number of [CryptoKeyVersions][google.cloud.kms.v1.CryptoKeyVersion] that matched the
	// query.
	TotalSize            int32    `protobuf:"varint,3,opt,name=total_size,json=totalSize,proto3" json:"total_size,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

Response message for [KeyManagementService.ListCryptoKeyVersions][google.cloud.kms.v1.KeyManagementService.ListCryptoKeyVersions].

func (*ListCryptoKeyVersionsResponse) Descriptor 

func (*ListCryptoKeyVersionsResponse) Descriptor() ([]byte, []int)

func (*ListCryptoKeyVersionsResponse) GetCryptoKeyVersions 

func (m *ListCryptoKeyVersionsResponse) GetCryptoKeyVersions() []*CryptoKeyVersion

func (*ListCryptoKeyVersionsResponse) GetNextPageToken 

func (m *ListCryptoKeyVersionsResponse) GetNextPageToken() string

func (*ListCryptoKeyVersionsResponse) GetTotalSize 

func (m *ListCryptoKeyVersionsResponse) GetTotalSize() int32

func (*ListCryptoKeyVersionsResponse) ProtoMessage 

func (*ListCryptoKeyVersionsResponse) ProtoMessage()

func (*ListCryptoKeyVersionsResponse) Reset 

func (m *ListCryptoKeyVersionsResponse) Reset()

func (*ListCryptoKeyVersionsResponse) String 

func (m *ListCryptoKeyVersionsResponse) String() string

func (*ListCryptoKeyVersionsResponse) XXX_DiscardUnknown 

func (m *ListCryptoKeyVersionsResponse) XXX_DiscardUnknown()

func (*ListCryptoKeyVersionsResponse) XXX_Marshal 

func (m *ListCryptoKeyVersionsResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ListCryptoKeyVersionsResponse) XXX_Merge 

func (m *ListCryptoKeyVersionsResponse) XXX_Merge(src proto.Message)

func (*ListCryptoKeyVersionsResponse) XXX_Size 

func (m *ListCryptoKeyVersionsResponse) XXX_Size() int

func (*ListCryptoKeyVersionsResponse) XXX_Unmarshal 

func (m *ListCryptoKeyVersionsResponse) XXX_Unmarshal(b []byte) error

type ListCryptoKeysRequest 

type ListCryptoKeysRequest struct {
	// Required. The resource name of the [KeyRing][google.cloud.kms.v1.KeyRing] to list, in the format
	// `projects/*/locations/*/keyRings/*`.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Optional limit on the number of [CryptoKeys][google.cloud.kms.v1.CryptoKey] to include in the
	// response.  Further [CryptoKeys][google.cloud.kms.v1.CryptoKey] can subsequently be obtained by
	// including the [ListCryptoKeysResponse.next_page_token][google.cloud.kms.v1.ListCryptoKeysResponse.next_page_token] in a subsequent
	// request.  If unspecified, the server will pick an appropriate default.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Optional pagination token, returned earlier via
	// [ListCryptoKeysResponse.next_page_token][google.cloud.kms.v1.ListCryptoKeysResponse.next_page_token].
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// The fields of the primary version to include in the response.
	VersionView          CryptoKeyVersion_CryptoKeyVersionView `` /* 158-byte string literal not displayed */
	XXX_NoUnkeyedLiteral struct{}                              `json:"-"`
	XXX_unrecognized     []byte                                `json:"-"`
	XXX_sizecache        int32                                 `json:"-"`
}

Request message for [KeyManagementService.ListCryptoKeys][google.cloud.kms.v1.KeyManagementService.ListCryptoKeys].

func (*ListCryptoKeysRequest) Descriptor 

func (*ListCryptoKeysRequest) Descriptor() ([]byte, []int)

func (*ListCryptoKeysRequest) GetPageSize 

func (m *ListCryptoKeysRequest) GetPageSize() int32

func (*ListCryptoKeysRequest) GetPageToken 

func (m *ListCryptoKeysRequest) GetPageToken() string

func (*ListCryptoKeysRequest) GetParent 

func (m *ListCryptoKeysRequest) GetParent() string

func (*ListCryptoKeysRequest) GetVersionView 

func (m *ListCryptoKeysRequest) GetVersionView() CryptoKeyVersion_CryptoKeyVersionView

func (*ListCryptoKeysRequest) ProtoMessage 

func (*ListCryptoKeysRequest) ProtoMessage()

func (*ListCryptoKeysRequest) Reset 

func (m *ListCryptoKeysRequest) Reset()

func (*ListCryptoKeysRequest) String 

func (m *ListCryptoKeysRequest) String() string

func (*ListCryptoKeysRequest) XXX_DiscardUnknown 

func (m *ListCryptoKeysRequest) XXX_DiscardUnknown()

func (*ListCryptoKeysRequest) XXX_Marshal 

func (m *ListCryptoKeysRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ListCryptoKeysRequest) XXX_Merge 

func (m *ListCryptoKeysRequest) XXX_Merge(src proto.Message)

func (*ListCryptoKeysRequest) XXX_Size 

func (m *ListCryptoKeysRequest) XXX_Size() int

func (*ListCryptoKeysRequest) XXX_Unmarshal 

func (m *ListCryptoKeysRequest) XXX_Unmarshal(b []byte) error

type ListCryptoKeysResponse 

type ListCryptoKeysResponse struct {
	// The list of [CryptoKeys][google.cloud.kms.v1.CryptoKey].
	CryptoKeys []*CryptoKey `protobuf:"bytes,1,rep,name=crypto_keys,json=cryptoKeys,proto3" json:"crypto_keys,omitempty"`
	// A token to retrieve next page of results. Pass this value in
	// [ListCryptoKeysRequest.page_token][google.cloud.kms.v1.ListCryptoKeysRequest.page_token] to retrieve the next page of results.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// The total number of [CryptoKeys][google.cloud.kms.v1.CryptoKey] that matched the query.
	TotalSize            int32    `protobuf:"varint,3,opt,name=total_size,json=totalSize,proto3" json:"total_size,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

Response message for [KeyManagementService.ListCryptoKeys][google.cloud.kms.v1.KeyManagementService.ListCryptoKeys].

func (*ListCryptoKeysResponse) Descriptor 

func (*ListCryptoKeysResponse) Descriptor() ([]byte, []int)

func (*ListCryptoKeysResponse) GetCryptoKeys 

func (m *ListCryptoKeysResponse) GetCryptoKeys() []*CryptoKey

func (*ListCryptoKeysResponse) GetNextPageToken 

func (m *ListCryptoKeysResponse) GetNextPageToken() string

func (*ListCryptoKeysResponse) GetTotalSize 

func (m *ListCryptoKeysResponse) GetTotalSize() int32

func (*ListCryptoKeysResponse) ProtoMessage 

func (*ListCryptoKeysResponse) ProtoMessage()

func (*ListCryptoKeysResponse) Reset 

func (m *ListCryptoKeysResponse) Reset()

func (*ListCryptoKeysResponse) String 

func (m *ListCryptoKeysResponse) String() string

func (*ListCryptoKeysResponse) XXX_DiscardUnknown 

func (m *ListCryptoKeysResponse) XXX_DiscardUnknown()

func (*ListCryptoKeysResponse) XXX_Marshal 

func (m *ListCryptoKeysResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ListCryptoKeysResponse) XXX_Merge 

func (m *ListCryptoKeysResponse) XXX_Merge(src proto.Message)

func (*ListCryptoKeysResponse) XXX_Size 

func (m *ListCryptoKeysResponse) XXX_Size() int

func (*ListCryptoKeysResponse) XXX_Unmarshal 

func (m *ListCryptoKeysResponse) XXX_Unmarshal(b []byte) error

type ListKeyRingsRequest 

type ListKeyRingsRequest struct {
	// Required. The resource name of the location associated with the
	// [KeyRings][google.cloud.kms.v1.KeyRing], in the format `projects/*/locations/*`.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Optional limit on the number of [KeyRings][google.cloud.kms.v1.KeyRing] to include in the
	// response.  Further [KeyRings][google.cloud.kms.v1.KeyRing] can subsequently be obtained by
	// including the [ListKeyRingsResponse.next_page_token][google.cloud.kms.v1.ListKeyRingsResponse.next_page_token] in a subsequent
	// request.  If unspecified, the server will pick an appropriate default.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Optional pagination token, returned earlier via
	// [ListKeyRingsResponse.next_page_token][google.cloud.kms.v1.ListKeyRingsResponse.next_page_token].
	PageToken            string   `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

Request message for [KeyManagementService.ListKeyRings][google.cloud.kms.v1.KeyManagementService.ListKeyRings].

func (*ListKeyRingsRequest) Descriptor 

func (*ListKeyRingsRequest) Descriptor() ([]byte, []int)

func (*ListKeyRingsRequest) GetPageSize 

func (m *ListKeyRingsRequest) GetPageSize() int32

func (*ListKeyRingsRequest) GetPageToken 

func (m *ListKeyRingsRequest) GetPageToken() string

func (*ListKeyRingsRequest) GetParent 

func (m *ListKeyRingsRequest) GetParent() string

func (*ListKeyRingsRequest) ProtoMessage 

func (*ListKeyRingsRequest) ProtoMessage()

func (*ListKeyRingsRequest) Reset 

func (m *ListKeyRingsRequest) Reset()

func (*ListKeyRingsRequest) String 

func (m *ListKeyRingsRequest) String() string

func (*ListKeyRingsRequest) XXX_DiscardUnknown 

func (m *ListKeyRingsRequest) XXX_DiscardUnknown()

func (*ListKeyRingsRequest) XXX_Marshal 

func (m *ListKeyRingsRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ListKeyRingsRequest) XXX_Merge 

func (m *ListKeyRingsRequest) XXX_Merge(src proto.Message)

func (*ListKeyRingsRequest) XXX_Size 

func (m *ListKeyRingsRequest) XXX_Size() int

func (*ListKeyRingsRequest) XXX_Unmarshal 

func (m *ListKeyRingsRequest) XXX_Unmarshal(b []byte) error

type ListKeyRingsResponse 

type ListKeyRingsResponse struct {
	// The list of [KeyRings][google.cloud.kms.v1.KeyRing].
	KeyRings []*KeyRing `protobuf:"bytes,1,rep,name=key_rings,json=keyRings,proto3" json:"key_rings,omitempty"`
	// A token to retrieve next page of results. Pass this value in
	// [ListKeyRingsRequest.page_token][google.cloud.kms.v1.ListKeyRingsRequest.page_token] to retrieve the next page of results.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// The total number of [KeyRings][google.cloud.kms.v1.KeyRing] that matched the query.
	TotalSize            int32    `protobuf:"varint,3,opt,name=total_size,json=totalSize,proto3" json:"total_size,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

Response message for [KeyManagementService.ListKeyRings][google.cloud.kms.v1.KeyManagementService.ListKeyRings].

func (*ListKeyRingsResponse) Descriptor 

func (*ListKeyRingsResponse) Descriptor() ([]byte, []int)

func (*ListKeyRingsResponse) GetKeyRings 

func (m *ListKeyRingsResponse) GetKeyRings() []*KeyRing

func (*ListKeyRingsResponse) GetNextPageToken 

func (m *ListKeyRingsResponse) GetNextPageToken() string

func (*ListKeyRingsResponse) GetTotalSize 

func (m *ListKeyRingsResponse) GetTotalSize() int32

func (*ListKeyRingsResponse) ProtoMessage 

func (*ListKeyRingsResponse) ProtoMessage()

func (*ListKeyRingsResponse) Reset 

func (m *ListKeyRingsResponse) Reset()

func (*ListKeyRingsResponse) String 

func (m *ListKeyRingsResponse) String() string

func (*ListKeyRingsResponse) XXX_DiscardUnknown 

func (m *ListKeyRingsResponse) XXX_DiscardUnknown()

func (*ListKeyRingsResponse) XXX_Marshal 

func (m *ListKeyRingsResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ListKeyRingsResponse) XXX_Merge 

func (m *ListKeyRingsResponse) XXX_Merge(src proto.Message)

func (*ListKeyRingsResponse) XXX_Size 

func (m *ListKeyRingsResponse) XXX_Size() int

func (*ListKeyRingsResponse) XXX_Unmarshal 

func (m *ListKeyRingsResponse) XXX_Unmarshal(b []byte) error

type LocationMetadata 

type LocationMetadata struct {
	// Indicates whether [CryptoKeys][google.cloud.kms.v1.CryptoKey] with
	// [protection_level][google.cloud.kms.v1.CryptoKeyVersionTemplate.protection_level]
	// [HSM][google.cloud.kms.v1.ProtectionLevel.HSM] can be created in this location.
	HsmAvailable         bool     `protobuf:"varint,1,opt,name=hsm_available,json=hsmAvailable,proto3" json:"hsm_available,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

Cloud KMS metadata for the given [google.cloud.location.Location][google.cloud.location.Location].

func (*LocationMetadata) Descriptor 

func (*LocationMetadata) Descriptor() ([]byte, []int)

func (*LocationMetadata) GetHsmAvailable 

func (m *LocationMetadata) GetHsmAvailable() bool

func (*LocationMetadata) ProtoMessage 

func (*LocationMetadata) ProtoMessage()

func (*LocationMetadata) Reset 

func (m *LocationMetadata) Reset()

func (*LocationMetadata) String 

func (m *LocationMetadata) String() string

func (*LocationMetadata) XXX_DiscardUnknown 

func (m *LocationMetadata) XXX_DiscardUnknown()

func (*LocationMetadata) XXX_Marshal 

func (m *LocationMetadata) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*LocationMetadata) XXX_Merge 

func (m *LocationMetadata) XXX_Merge(src proto.Message)

func (*LocationMetadata) XXX_Size 

func (m *LocationMetadata) XXX_Size() int

func (*LocationMetadata) XXX_Unmarshal 

func (m *LocationMetadata) XXX_Unmarshal(b []byte) error

type ProtectionLevel 

type ProtectionLevel int32

ProtectionLevel[google.cloud.kms.v1.ProtectionLevel] specifies how cryptographic operations are performed. 

const (
	// Not specified.
	ProtectionLevel_PROTECTION_LEVEL_UNSPECIFIED ProtectionLevel = 0
	// Crypto operations are performed in software.
	ProtectionLevel_SOFTWARE ProtectionLevel = 1
	// Crypto operations are performed in a Hardware Security Module.
	ProtectionLevel_HSM ProtectionLevel = 2
)

func (ProtectionLevel) EnumDescriptor 

func (ProtectionLevel) EnumDescriptor() ([]byte, []int)

func (ProtectionLevel) String 

func (x ProtectionLevel) String() string

type PublicKey 

type PublicKey struct {
	// The public key, encoded in PEM format. For more information, see the
	// [RFC 7468](https://tools.ietf.org/html/rfc7468) sections for
	// [General Considerations](https://tools.ietf.org/html/rfc7468#section-2) and
	// [Textual Encoding of Subject Public Key Info]
	// (https://tools.ietf.org/html/rfc7468#section-13).
	Pem string `protobuf:"bytes,1,opt,name=pem,proto3" json:"pem,omitempty"`
	// The [Algorithm][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionAlgorithm] associated
	// with this key.
	Algorithm            CryptoKeyVersion_CryptoKeyVersionAlgorithm `` /* 140-byte string literal not displayed */
	XXX_NoUnkeyedLiteral struct{}                                   `json:"-"`
	XXX_unrecognized     []byte                                     `json:"-"`
	XXX_sizecache        int32                                      `json:"-"`
}

The public key for a given CryptoKeyVersion[google.cloud.kms.v1.CryptoKeyVersion]. Obtained via [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].

func (*PublicKey) Descriptor 

func (*PublicKey) Descriptor() ([]byte, []int)

func (*PublicKey) GetAlgorithm 

func (m *PublicKey) GetAlgorithm() CryptoKeyVersion_CryptoKeyVersionAlgorithm

func (*PublicKey) GetPem 

func (m *PublicKey) GetPem() string

func (*PublicKey) ProtoMessage 

func (*PublicKey) ProtoMessage()

func (*PublicKey) Reset 

func (m *PublicKey) Reset()

func (*PublicKey) String 

func (m *PublicKey) String() string

func (*PublicKey) XXX_DiscardUnknown 

func (m *PublicKey) XXX_DiscardUnknown()

func (*PublicKey) XXX_Marshal 

func (m *PublicKey) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*PublicKey) XXX_Merge 

func (m *PublicKey) XXX_Merge(src proto.Message)

func (*PublicKey) XXX_Size 

func (m *PublicKey) XXX_Size() int

func (*PublicKey) XXX_Unmarshal 

func (m *PublicKey) XXX_Unmarshal(b []byte) error

type RestoreCryptoKeyVersionRequest 

type RestoreCryptoKeyVersionRequest struct {
	// The resource name of the [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to restore.
	Name                 string   `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

Request message for [KeyManagementService.RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion].

func (*RestoreCryptoKeyVersionRequest) Descriptor 

func (*RestoreCryptoKeyVersionRequest) Descriptor() ([]byte, []int)

func (*RestoreCryptoKeyVersionRequest) GetName 

func (m *RestoreCryptoKeyVersionRequest) GetName() string

func (*RestoreCryptoKeyVersionRequest) ProtoMessage 

func (*RestoreCryptoKeyVersionRequest) ProtoMessage()

func (*RestoreCryptoKeyVersionRequest) Reset 

func (m *RestoreCryptoKeyVersionRequest) Reset()

func (*RestoreCryptoKeyVersionRequest) String 

func (m *RestoreCryptoKeyVersionRequest) String() string

func (*RestoreCryptoKeyVersionRequest) XXX_DiscardUnknown 

func (m *RestoreCryptoKeyVersionRequest) XXX_DiscardUnknown()

func (*RestoreCryptoKeyVersionRequest) XXX_Marshal 

func (m *RestoreCryptoKeyVersionRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*RestoreCryptoKeyVersionRequest) XXX_Merge 

func (m *RestoreCryptoKeyVersionRequest) XXX_Merge(src proto.Message)

func (*RestoreCryptoKeyVersionRequest) XXX_Size 

func (m *RestoreCryptoKeyVersionRequest) XXX_Size() int

func (*RestoreCryptoKeyVersionRequest) XXX_Unmarshal 

func (m *RestoreCryptoKeyVersionRequest) XXX_Unmarshal(b []byte) error

type UpdateCryptoKeyPrimaryVersionRequest 

type UpdateCryptoKeyPrimaryVersionRequest struct {
	// The resource name of the [CryptoKey][google.cloud.kms.v1.CryptoKey] to update.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The id of the child [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] to use as primary.
	CryptoKeyVersionId   string   `protobuf:"bytes,2,opt,name=crypto_key_version_id,json=cryptoKeyVersionId,proto3" json:"crypto_key_version_id,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

Request message for [KeyManagementService.UpdateCryptoKeyPrimaryVersion][google.cloud.kms.v1.KeyManagementService.UpdateCryptoKeyPrimaryVersion].

func (*UpdateCryptoKeyPrimaryVersionRequest) Descriptor 

func (*UpdateCryptoKeyPrimaryVersionRequest) Descriptor() ([]byte, []int)

func (*UpdateCryptoKeyPrimaryVersionRequest) GetCryptoKeyVersionId 

func (m *UpdateCryptoKeyPrimaryVersionRequest) GetCryptoKeyVersionId() string

func (*UpdateCryptoKeyPrimaryVersionRequest) GetName 

func (m *UpdateCryptoKeyPrimaryVersionRequest) GetName() string

func (*UpdateCryptoKeyPrimaryVersionRequest) ProtoMessage 

func (*UpdateCryptoKeyPrimaryVersionRequest) ProtoMessage()

func (*UpdateCryptoKeyPrimaryVersionRequest) Reset 

func (m *UpdateCryptoKeyPrimaryVersionRequest) Reset()

func (*UpdateCryptoKeyPrimaryVersionRequest) String 

func (m *UpdateCryptoKeyPrimaryVersionRequest) String() string

func (*UpdateCryptoKeyPrimaryVersionRequest) XXX_DiscardUnknown 

func (m *UpdateCryptoKeyPrimaryVersionRequest) XXX_DiscardUnknown()

func (*UpdateCryptoKeyPrimaryVersionRequest) XXX_Marshal 

func (m *UpdateCryptoKeyPrimaryVersionRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*UpdateCryptoKeyPrimaryVersionRequest) XXX_Merge 

func (m *UpdateCryptoKeyPrimaryVersionRequest) XXX_Merge(src proto.Message)

func (*UpdateCryptoKeyPrimaryVersionRequest) XXX_Size 

func (m *UpdateCryptoKeyPrimaryVersionRequest) XXX_Size() int

func (*UpdateCryptoKeyPrimaryVersionRequest) XXX_Unmarshal 

func (m *UpdateCryptoKeyPrimaryVersionRequest) XXX_Unmarshal(b []byte) error

type UpdateCryptoKeyRequest 

type UpdateCryptoKeyRequest struct {
	// [CryptoKey][google.cloud.kms.v1.CryptoKey] with updated values.
	CryptoKey *CryptoKey `protobuf:"bytes,1,opt,name=crypto_key,json=cryptoKey,proto3" json:"crypto_key,omitempty"`
	// Required list of fields to be updated in this request.
	UpdateMask           *field_mask.FieldMask `protobuf:"bytes,2,opt,name=update_mask,json=updateMask,proto3" json:"update_mask,omitempty"`
	XXX_NoUnkeyedLiteral struct{}              `json:"-"`
	XXX_unrecognized     []byte                `json:"-"`
	XXX_sizecache        int32                 `json:"-"`
}

Request message for [KeyManagementService.UpdateCryptoKey][google.cloud.kms.v1.KeyManagementService.UpdateCryptoKey].

func (*UpdateCryptoKeyRequest) Descriptor 

func (*UpdateCryptoKeyRequest) Descriptor() ([]byte, []int)

func (*UpdateCryptoKeyRequest) GetCryptoKey 

func (m *UpdateCryptoKeyRequest) GetCryptoKey() *CryptoKey

func (*UpdateCryptoKeyRequest) GetUpdateMask 

func (m *UpdateCryptoKeyRequest) GetUpdateMask() *field_mask.FieldMask

func (*UpdateCryptoKeyRequest) ProtoMessage 

func (*UpdateCryptoKeyRequest) ProtoMessage()

func (*UpdateCryptoKeyRequest) Reset 

func (m *UpdateCryptoKeyRequest) Reset()

func (*UpdateCryptoKeyRequest) String 

func (m *UpdateCryptoKeyRequest) String() string

func (*UpdateCryptoKeyRequest) XXX_DiscardUnknown 

func (m *UpdateCryptoKeyRequest) XXX_DiscardUnknown()

func (*UpdateCryptoKeyRequest) XXX_Marshal 

func (m *UpdateCryptoKeyRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*UpdateCryptoKeyRequest) XXX_Merge 

func (m *UpdateCryptoKeyRequest) XXX_Merge(src proto.Message)

func (*UpdateCryptoKeyRequest) XXX_Size 

func (m *UpdateCryptoKeyRequest) XXX_Size() int

func (*UpdateCryptoKeyRequest) XXX_Unmarshal 

func (m *UpdateCryptoKeyRequest) XXX_Unmarshal(b []byte) error

type UpdateCryptoKeyVersionRequest 

type UpdateCryptoKeyVersionRequest struct {
	// [CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] with updated values.
	CryptoKeyVersion *CryptoKeyVersion `protobuf:"bytes,1,opt,name=crypto_key_version,json=cryptoKeyVersion,proto3" json:"crypto_key_version,omitempty"`
	// Required list of fields to be updated in this request.
	UpdateMask           *field_mask.FieldMask `protobuf:"bytes,2,opt,name=update_mask,json=updateMask,proto3" json:"update_mask,omitempty"`
	XXX_NoUnkeyedLiteral struct{}              `json:"-"`
	XXX_unrecognized     []byte                `json:"-"`
	XXX_sizecache        int32                 `json:"-"`
}

Request message for [KeyManagementService.UpdateCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.UpdateCryptoKeyVersion].

func (*UpdateCryptoKeyVersionRequest) Descriptor 

func (*UpdateCryptoKeyVersionRequest) Descriptor() ([]byte, []int)

func (*UpdateCryptoKeyVersionRequest) GetCryptoKeyVersion 

func (m *UpdateCryptoKeyVersionRequest) GetCryptoKeyVersion() *CryptoKeyVersion

func (*UpdateCryptoKeyVersionRequest) GetUpdateMask 

func (m *UpdateCryptoKeyVersionRequest) GetUpdateMask() *field_mask.FieldMask

func (*UpdateCryptoKeyVersionRequest) ProtoMessage 

func (*UpdateCryptoKeyVersionRequest) ProtoMessage()

func (*UpdateCryptoKeyVersionRequest) Reset 

func (m *UpdateCryptoKeyVersionRequest) Reset()

func (*UpdateCryptoKeyVersionRequest) String 

func (m *UpdateCryptoKeyVersionRequest) String() string

func (*UpdateCryptoKeyVersionRequest) XXX_DiscardUnknown 

func (m *UpdateCryptoKeyVersionRequest) XXX_DiscardUnknown()

func (*UpdateCryptoKeyVersionRequest) XXX_Marshal 

func (m *UpdateCryptoKeyVersionRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*UpdateCryptoKeyVersionRequest) XXX_Merge 

func (m *UpdateCryptoKeyVersionRequest) XXX_Merge(src proto.Message)

func (*UpdateCryptoKeyVersionRequest) XXX_Size 

func (m *UpdateCryptoKeyVersionRequest) XXX_Size() int

func (*UpdateCryptoKeyVersionRequest) XXX_Unmarshal 

func (m *UpdateCryptoKeyVersionRequest) XXX_Unmarshal(b []byte) error

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.