E SrSSKJr SSKJr SSKJr SSKJr Sr "SS\R5r "S S \R5r "S S \R5r "S S\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS \R5r"S!S"\R5r"S#S$\R5r"S%S&\R5r"S'S(\R5r"S)S*\R5r"S+S,\R5r"S-S.\R5r"S/S0\R5r"S1S2\R5r "S3S4\R5r!"S5S6\R5r""S7S8\R5r#"S9S:\R5r$"S;S<\R5r%"S=S>\R5r&"S?S@\R5r'"SASB\R5r("SCSD\R5r)"SESF\R5r*"SGSH\R5r+"SISJ\R5r,"SKSL\R5r-"SMSN\R5r."SOSP\R5r/"SQSR\R5r0"SSST\R5r1"SUSV\R5r2"SWSX\R5r3"SYSZ\R5r4"S[S\\R5r5"S]S^\R5r6"S_S`\R5r7"SaSb\R5r8"ScSd\R5r9"SeSf\R5r:"SgSh\R5r;"SiSj\R5r<"SkSl\R5r="SmSn\R5r>"SoSp\R5r?"SqSr\R5r@"SsSt\R5rA"SuSv\R5rB"SwSx\R5rC"SySz\R5rD"S{S|\R5rE"S}S~\R5rF"SS\R5rG"SS\R5rH"SS\R5rI"SS\R5rJ"SS\R5rK"SS\R5rL"SS\R5rM"SS\R5rN"SS\R5rO"SS\R5rP"SS\R5rQ"SS\R5rR"SS\R5rS"SS\R5rT\R"\NSS5 \R"\NRSS5 \R"\NRSS5 g)z>Generated message classes for certificatemanager version v1. )absolute_import)messages)encoding) extra_typescertificatemanagerc<\rSrSrSr\R "S5rSrg)AllowlistedCertificatezDefines an allowlisted certificate. Fields: pemCertificate: Required. PEM certificate that is allowlisted. The certificate can be up to 5k bytes, and must be a parseable X.509 certificate. N __name__ __module__ __qualname____firstlineno____doc__ _messages StringFieldpemCertificate__static_attributes__r alib/googlecloudsdk/generated_clients/apis/certificatemanager/v1/certificatemanager_v1_messages.pyr r ((+.rr cJ\rSrSrSr"SS\R 5r"SS\R 5r\R"S5r \R"S5r \R"S 5r \R"SS 5r\R"SS 5r\R "S S 5rSrg)AuthorizationAttemptInfoaState of the latest attempt to authorize a domain for certificate issuance. Enums: FailureReasonValueValuesEnum: Output only. Reason for failure of the authorization attempt for the domain. StateValueValuesEnum: Output only. State of the domain for managed certificate issuance. Fields: attemptTime: Output only. The timestamp, when the authorization attempt was made. details: Output only. Human readable explanation for reaching the state. Provided to help address the configuration issues. Not guaranteed to be stable. For programmatic access use FailureReason enum. domain: Output only. Domain name of the authorization attempt. failureReason: Output only. Reason for failure of the authorization attempt for the domain. state: Output only. State of the domain for managed certificate issuance. troubleshooting: Output only. Troubleshooting information for the authorization attempt. This field is only populated if the authorization attempt failed. c(\rSrSrSrSrSrSrSrSr g) 5AuthorizationAttemptInfo.FailureReasonValueValuesEnum5aOutput only. Reason for failure of the authorization attempt for the domain. Values: FAILURE_REASON_UNSPECIFIED: FailureReason is unspecified. CONFIG: There was a problem with the user's DNS or load balancer configuration for this domain. CAA: Certificate issuance forbidden by an explicit CAA record for the domain or a failure to check CAA records for the domain. RATE_LIMITED: Reached a CA or internal rate-limit for the domain, e.g. for certificates per top-level private domain. rr r N) rrrrrFAILURE_REASON_UNSPECIFIEDCONFIGCAA RATE_LIMITEDrr rrFailureReasonValueValuesEnumr5s "# F CLrr&c(\rSrSrSrSrSrSrSrSr g) -AuthorizationAttemptInfo.StateValueValuesEnumGaOutput only. State of the domain for managed certificate issuance. Values: STATE_UNSPECIFIED: State is unspecified. AUTHORIZING: Certificate provisioning for this domain is under way. Google Cloud will attempt to authorize the domain. AUTHORIZED: A managed certificate can be provisioned, no issues for this domain. FAILED: Attempt to authorize the domain failed. This prevents the Managed Certificate from being issued. See `failure_reason` and `details` fields for more information. rr r r!r N) rrrrrSTATE_UNSPECIFIED AUTHORIZING AUTHORIZEDFAILEDrr rrStateValueValuesEnumr(Gs KJ Frr.r r r!Troubleshootingr N)rrrrrrEnumr&r.r attemptTimedetailsdomain EnumField failureReasonstate MessageFieldtroubleshootingrr rrrrs0Y^^$Y^^$%%a(+  ! !! $'   #&%%&DaH-   4a 8%**+&rrIc>\rSrSrSr\R "SS5rSrg)CertificateAuthorityConfigzThe CA that issues the workload certificate. It includes CA address, type, authentication to CA service, etc. Fields: certificateAuthorityServiceConfig: Defines a CertificateAuthorityServiceConfig. !CertificateAuthorityServiceConfigr r N) rrrrrrr:!certificateAuthorityServiceConfigrr rrrrs'0&<&<=`bc&d#rrc<\rSrSrSr\R "S5rSrg)ria Contains information required to contact CA service. Fields: caPool: Required. A CA pool resource used to issue a certificate. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}". r r N) rrrrrrrcaPoolrr rrrrs   #&rrc\rSrSrSr"SS\R 5r\R"S5"SS\R55r \R"S5"SS \R55r \R"S S 5r\R"S 5r\R"S 5r\R$"SS5r\R"SS5r\R"S5r\R"S5r\R."S\R0R2S9r\R"S S5r\R"S5rSrg)CertificateIssuanceConfigiaCertificateIssuanceConfig specifies how to issue and manage a certificate. Enums: KeyAlgorithmValueValuesEnum: Required. The key algorithm to use when generating the private key. Messages: LabelsValue: Optional. Set of labels associated with a CertificateIssuanceConfig. TagsValue: Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example: "123/environment": "production", "123/costCenter": "marketing" Fields: certificateAuthorityConfig: Required. The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc. createTime: Output only. The creation timestamp of a CertificateIssuanceConfig. description: Optional. One or more paragraphs of text description of a CertificateIssuanceConfig. keyAlgorithm: Required. The key algorithm to use when generating the private key. labels: Optional. Set of labels associated with a CertificateIssuanceConfig. lifetime: Required. Workload certificate lifetime requested. name: Identifier. A user-defined name of the certificate issuance config. CertificateIssuanceConfig names must be unique globally and match pattern `projects/*/locations/*/certificateIssuanceConfigs/*`. rotationWindowPercentage: Required. Specifies the percentage of elapsed time of the certificate lifetime to wait before renewing the certificate. Must be a number between 1-99, inclusive. tags: Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example: "123/environment": "production", "123/costCenter": "marketing" updateTime: Output only. The last update timestamp of a CertificateIssuanceConfig. c$\rSrSrSrSrSrSrSrg)5CertificateIssuanceConfig.KeyAlgorithmValueValuesEnumi7zRequired. The key algorithm to use when generating the private key. Values: KEY_ALGORITHM_UNSPECIFIED: Unspecified key algorithm. RSA_2048: Specifies RSA with a 2048-bit modulus. ECDSA_P256: Specifies ECDSA with curve P256. rr r r N) rrrrrKEY_ALGORITHM_UNSPECIFIEDRSA_2048 ECDSA_P256rr rrKeyAlgorithmValueValuesEnumr7s!"HJrrrScf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) %CertificateIssuanceConfig.LabelsValueiCzOptional. Set of labels associated with a CertificateIssuanceConfig. Messages: AdditionalProperty: An additional property for a LabelsValue object. Fields: additionalProperties: Additional properties of type LabelsValue c`\rSrSrSr\R "S5r\R "S5rSr g)8CertificateIssuanceConfig.LabelsValue.AdditionalPropertyiNrZr r r Nr[r rrr^rNr_rr^r Tr?r Nr`r rrrbrCrcrrbcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) #CertificateIssuanceConfig.TagsValuei[rgc`\rSrSrSr\R "S5r\R "S5rSr g)6CertificateIssuanceConfig.TagsValue.AdditionalPropertyihrkr r r Nr[r rrr^rhr_rr^r Tr?r Nr`r rrrlr[rmrrlrr r r!r/r0r2rorpvariantrqrsr N)rrrrrrr3rrrxrarbrlr:certificateAuthorityConfigrryrzr7 keyAlgorithmr|lifetimerB IntegerFieldVariantINT32rotationWindowPercentagerrrr rrrrs5&P INN  !!"89ZI%%Z:Z. !!"89Z)##Z:Z2 )556RTUV$$Q'*%%a(+$$%BAF,  ! !- 3&  " "1 %(   q !$&33Ay?P?P?V?VW    Q /$$$R(*rrc\rSrSrSr\R "S5"SS\R55r \R "S5"SS\R55r \R"S5r \R"S 5r \R"S S S S 9r\R"SS5r\R"S5r\R"SS5r\R"S5rSrg)CertificateMapiaDefines a collection of certificate configurations. Messages: LabelsValue: Optional. Set of labels associated with a Certificate Map. TagsValue: Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example: "123/environment": "production", "123/costCenter": "marketing" Fields: createTime: Output only. The creation timestamp of a Certificate Map. description: Optional. One or more paragraphs of text description of a certificate map. gclbTargets: Output only. A list of GCLB targets that use this Certificate Map. A Target Proxy is only present on this list if it's attached to a Forwarding Rule. labels: Optional. Set of labels associated with a Certificate Map. name: Identifier. A user-defined name of the Certificate Map. Certificate Map names must be unique globally and match pattern `projects/*/locations/*/certificateMaps/*`. tags: Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example: "123/environment": "production", "123/costCenter": "marketing" updateTime: Output only. The update timestamp of a Certificate Map. rScf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) CertificateMap.LabelsValueizOptional. Set of labels associated with a Certificate Map. Messages: AdditionalProperty: An additional property for a LabelsValue object. Fields: additionalProperties: Additional properties of type LabelsValue c`\rSrSrSr\R "S5r\R "S5rSr g)-CertificateMap.LabelsValue.AdditionalPropertyirZr r r Nr[r rrr^rr_rr^r Tr?r Nr`r rrrbrrcrrbcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) CertificateMap.TagsValueirgc`\rSrSrSr\R "S5r\R "S5rSr g)+CertificateMap.TagsValue.AdditionalPropertyirkr r r Nr[r rrr^rr_rr^r Tr?r Nr`r rrrlrrmrrlr r GclbTargetr!Tr?r/r0r2ror N)rrrrrrrxrrarbrlrryrzr: gclbTargetsr|rBrrrr rrrrs2 !!"89ZI%%Z:Z. !!"89Z)##Z:Z2$$Q'*%%a(+&&|QF+  ! !- 3&   q !$    Q /$$$Q'*rrc\rSrSrSr"SS\R 5r"SS\R 5r\ R"S5"SS \R55r \R"S S S 9r\R"S 5r\R"S5r\R"S5r\R$"S S5r\R("SS5r\R"S5r\R("SS5r\R"S5rSrg)CertificateMapEntryiaDefines a certificate map entry. Enums: MatcherValueValuesEnum: A predefined matcher for particular cases, other than SNI selection. StateValueValuesEnum: Output only. A serving state of this Certificate Map Entry. Messages: LabelsValue: Optional. Set of labels associated with a Certificate Map Entry. Fields: certificates: Optional. A set of Certificates defines for the given `hostname`. There can be defined up to four certificates in each Certificate Map Entry. Each certificate must match pattern `projects/*/locations/*/certificates/*`. createTime: Output only. The creation timestamp of a Certificate Map Entry. description: Optional. One or more paragraphs of text description of a certificate map entry. hostname: A Hostname (FQDN, e.g. `example.com`) or a wildcard hostname expression (`*.example.com`) for a set of hostnames with common suffix. Used as Server Name Indication (SNI) for selecting a proper certificate. labels: Optional. Set of labels associated with a Certificate Map Entry. matcher: A predefined matcher for particular cases, other than SNI selection. name: Identifier. A user-defined name of the Certificate Map Entry. Certificate Map Entry names must be unique globally and match pattern `projects/*/locations/*/certificateMaps/*/certificateMapEntries/*`. state: Output only. A serving state of this Certificate Map Entry. updateTime: Output only. The update timestamp of a Certificate Map Entry. c \rSrSrSrSrSrSrg)*CertificateMapEntry.MatcherValueValuesEnumiaA predefined matcher for particular cases, other than SNI selection. Values: MATCHER_UNSPECIFIED: A matcher has't been recognized. PRIMARY: A primary certificate that is served when SNI wasn't specified in the request or SNI couldn't be found in the map. rr r N)rrrrrMATCHER_UNSPECIFIEDPRIMARYrr rrMatcherValueValuesEnumrsGrrc$\rSrSrSrSrSrSrSrg)(CertificateMapEntry.StateValueValuesEnumizOutput only. A serving state of this Certificate Map Entry. Values: SERVING_STATE_UNSPECIFIED: The status is undefined. ACTIVE: The configuration is serving. PENDING: Update is in progress. Some frontends may serve this configuration. rr r r N) rrrrrSERVING_STATE_UNSPECIFIEDACTIVEPENDINGrr rrr.rs!" FGrr.rScf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) CertificateMapEntry.LabelsValueizOptional. Set of labels associated with a Certificate Map Entry. Messages: AdditionalProperty: An additional property for a LabelsValue object. Fields: additionalProperties: Additional properties of type LabelsValue c`\rSrSrSr\R "S5r\R "S5rSr g)2CertificateMapEntry.LabelsValue.AdditionalPropertyirZr r r Nr[r rrr^rr_rr^r Tr?r Nr`r rrrbrrcrrbr Tr?r r!r/r0r2rorprqr N)rrrrrrr3rr.rrxrarbr certificatesryrzhostnamer:r|r7matcherrBr9rrr rrrrs D y~~  Y^^  !!"89ZI%%Z:Z.&&q48,$$Q'*%%a(+  " "1 %(  ! !- 3&    8! <'   q !$   4a 8%$$Q'*rrc\rSrSrSr\R "SS5r\R"S5r \R"SSS9r S r g ) JCertificatemanagerProjectsLocationsCertificateIssuanceConfigsCreateRequesti4aA CertificatemanagerProjectsLocationsCertificateIssuanceConfigsCreateRequest object. Fields: certificateIssuanceConfig: A CertificateIssuanceConfig resource to be passed as the request body. certificateIssuanceConfigId: Required. A user-provided name of the certificate config. parent: Required. The parent resource of the certificate issuance config. Must be in the format `projects/*/locations/*`. rr r r!Trequiredr N) rrrrrrr:certificateIssuanceConfigrcertificateIssuanceConfigIdparentrr rrrr4sA (445PRST ) 5 5a 8  T 2&rrc:\rSrSrSr\R "SSS9rSrg)JCertificatemanagerProjectsLocationsCertificateIssuanceConfigsDeleteRequestiGzA CertificatemanagerProjectsLocationsCertificateIssuanceConfigsDeleteRequest object. Fields: name: Required. A name of the certificate issuance config to delete. Must be in the format `projects/*/locations/*/certificateIssuanceConfigs/*`. r Trr N rrrrrrrrBrr rrrrG   q4 0$rrc:\rSrSrSr\R "SSS9rSrg)GCertificatemanagerProjectsLocationsCertificateIssuanceConfigsGetRequestiTzA CertificatemanagerProjectsLocationsCertificateIssuanceConfigsGetRequest object. Fields: name: Required. A name of the certificate issuance config to describe. Must be in the format `projects/*/locations/*/certificateIssuanceConfigs/*`. r Trr Nrr rrrrTs   q4 0$rrc\rSrSrSr\R "S5r\R "S5r\R"S\RRS9r \R "S5r \R "SS S 9rS rg ) HCertificatemanagerProjectsLocationsCertificateIssuanceConfigsListRequestiba|A CertificatemanagerProjectsLocationsCertificateIssuanceConfigsListRequest object. Fields: filter: Optional. Filter expression to restrict the Certificates Configs returned. orderBy: Optional. A list of Certificate Config field names used to specify the order of the returned results. The default sorting order is ascending. To specify descending order for a field, add a suffix `" desc"`. pageSize: Optional. Maximum number of certificate configs to return per call. pageToken: Optional. The value returned by the last `ListCertificateIssuanceConfigsResponse`. Indicates that this is a continuation of a prior `ListCertificateIssuanceConfigs` call, and that the system should return the next page of data. parent: Required. The project and location from which the certificate should be listed, specified in the format `projects/*/locations/*`. r r r!rr/r0Trr NrrrrrrrfilterorderByrrrpageSize pageTokenrrr rrrrbi*   #&  ! !! $'  # #Ay/@/@/F/F G(##A&)  T 2&rrc\rSrSrSr\R "SS5r\R"SSS9r \R"S5r S r g ) ICertificatemanagerProjectsLocationsCertificateIssuanceConfigsPatchRequestiaaA CertificatemanagerProjectsLocationsCertificateIssuanceConfigsPatchRequest object. Fields: certificateIssuanceConfig: A CertificateIssuanceConfig resource to be passed as the request body. name: Identifier. A user-defined name of the certificate issuance config. CertificateIssuanceConfig names must be unique globally and match pattern `projects/*/locations/*/certificateIssuanceConfigs/*`. updateMask: Required. The update mask applies to the resource. For the `FieldMask` definition, see https://developers.google.com/protocol- buffers/docs/reference/google.protobuf#fieldmask. rr r Trr!r N) rrrrrrr:rrrB updateMaskrr rrrrs@ (445PRST   q4 0$$$Q'*rrc\rSrSrSr\R "SS5r\R"S5r \R"SSS9r S r g ) TCertificatemanagerProjectsLocationsCertificateMapsCertificateMapEntriesCreateRequestiaA CertificatemanagerProjectsLocationsCertificateMapsCertificateMapEntrie sCreateRequest object. Fields: certificateMapEntry: A CertificateMapEntry resource to be passed as the request body. certificateMapEntryId: Required. A user-provided name of the certificate map entry. parent: Required. The parent resource of the certificate map entry. Must be in the format `projects/*/locations/*/certificateMaps/*`. rr r r!Trr N) rrrrrrr:certificateMapEntryrcertificateMapEntryIdrrr rrrrs@ "../DaH#//2  T 2&rrc:\rSrSrSr\R "SSS9rSrg)TCertificatemanagerProjectsLocationsCertificateMapsCertificateMapEntriesDeleteRequestia A CertificatemanagerProjectsLocationsCertificateMapsCertificateMapEntrie sDeleteRequest object. Fields: name: Required. A name of the certificate map entry to delete. Must be in the format `projects/*/locations/*/certificateMaps/*/certificateMapEntries/*`. r Trr Nrr rrrrrrrc:\rSrSrSr\R "SSS9rSrg)QCertificatemanagerProjectsLocationsCertificateMapsCertificateMapEntriesGetRequestia A CertificatemanagerProjectsLocationsCertificateMapsCertificateMapEntrie sGetRequest object. Fields: name: Required. A name of the certificate map entry to describe. Must be in the format `projects/*/locations/*/certificateMaps/*/certificateMapEntries/*`. r Trr Nrr rrrrrrrc\rSrSrSr\R "S5r\R "S5r\R"S\RRS9r \R "S5r \R "SS S 9rS rg ) RCertificatemanagerProjectsLocationsCertificateMapsCertificateMapEntriesListRequestiarA CertificatemanagerProjectsLocationsCertificateMapsCertificateMapEntrie sListRequest object. Fields: filter: Optional. Filter expression to restrict the returned Certificate Map Entries. orderBy: Optional. A list of Certificate Map Entry field names used to specify the order of the returned results. The default sorting order is ascending. To specify descending order for a field, add a suffix `" desc"`. pageSize: Optional. Maximum number of certificate map entries to return. The service may return fewer than this value. If unspecified, at most 50 certificate map entries will be returned. The maximum value is 1000; values above 1000 will be coerced to 1000. pageToken: Optional. The value returned by the last `ListCertificateMapEntriesResponse`. Indicates that this is a continuation of a prior `ListCertificateMapEntries` call, and that the system should return the next page of data. parent: Required. The project, location and certificate map from which the certificate map entries should be listed, specified in the format `projects/*/locations/*/certificateMaps/*`. r r r!rr/r0Trr Nrr rrrrsi.   #&  ! !! $'  # #Ay/@/@/F/F G(##A&)  T 2&rrc\rSrSrSr\R "SS5r\R"SSS9r \R"S5r S r g ) SCertificatemanagerProjectsLocationsCertificateMapsCertificateMapEntriesPatchRequestiacA CertificatemanagerProjectsLocationsCertificateMapsCertificateMapEntrie sPatchRequest object. Fields: certificateMapEntry: A CertificateMapEntry resource to be passed as the request body. name: Identifier. A user-defined name of the Certificate Map Entry. Certificate Map Entry names must be unique globally and match pattern `projects/*/locations/*/certificateMaps/*/certificateMapEntries/*`. updateMask: Required. The update mask applies to the resource. For the `FieldMask` definition, see https://developers.google.com/protocol- buffers/docs/reference/google.protobuf#fieldmask. rr r Trr!r N) rrrrrrr:rrrBrrr rrrrs? "../DaH   q4 0$$$Q'*rrc\rSrSrSr\R "SS5r\R"S5r \R"SSS9r S r g ) ?CertificatemanagerProjectsLocationsCertificateMapsCreateRequestiadA CertificatemanagerProjectsLocationsCertificateMapsCreateRequest object. Fields: certificateMap: A CertificateMap resource to be passed as the request body. certificateMapId: Required. A user-provided name of the certificate map. parent: Required. The parent resource of the certificate map. Must be in the format `projects/*/locations/*`. rr r r!Trr N) rrrrrrr:certificateMaprcertificateMapIdrrr rrrrs? ))*:A>.**1-  T 2&rrc:\rSrSrSr\R "SSS9rSrg)?CertificatemanagerProjectsLocationsCertificateMapsDeleteRequestizA CertificatemanagerProjectsLocationsCertificateMapsDeleteRequest object. Fields: name: Required. A name of the certificate map to delete. Must be in the format `projects/*/locations/*/certificateMaps/*`. r Trr Nrr rrrr   q4 0$rrc:\rSrSrSr\R "SSS9rSrg)CertificatemanagerProjectsLocationsCertificateMapsPatchRequesti5aA CertificatemanagerProjectsLocationsCertificateMapsPatchRequest object. Fields: certificateMap: A CertificateMap resource to be passed as the request body. name: Identifier. A user-defined name of the Certificate Map. Certificate Map names must be unique globally and match pattern `projects/*/locations/*/certificateMaps/*`. updateMask: Required. The update mask applies to the resource. For the `FieldMask` definition, see https://developers.google.com/protocol- buffers/docs/reference/google.protobuf#fieldmask. rr r Trr!r N) rrrrrrr:rrrBrrr rrrr5s> ))*:A>.   q4 0$$$Q'*rrc\rSrSrSr\R "SS5r\R"S5r \R"SSS9r S r g ) B ,,Q/  T 2&rrc:\rSrSrSr\R "SSS9rSrg)ACertificatemanagerProjectsLocationsDnsAuthorizationsDeleteRequestizA CertificatemanagerProjectsLocationsDnsAuthorizationsDeleteRequest object. Fields: name: Required. A name of the dns authorization to delete. Must be in the format `projects/*/locations/*/dnsAuthorizations/*`. r Trr Nrr rrrrrrrc:\rSrSrSr\R "SSS9rSrg)>CertificatemanagerProjectsLocationsDnsAuthorizationsGetRequestizA CertificatemanagerProjectsLocationsDnsAuthorizationsGetRequest object. Fields: name: Required. A name of the dns authorization to describe. Must be in the format `projects/*/locations/*/dnsAuthorizations/*`. r Trr Nrr rrr r rrr c\rSrSrSr\R "S5r\R "S5r\R"S\RRS9r \R "S5r \R "SS S 9rS rg ) ?CertificatemanagerProjectsLocationsDnsAuthorizationsListRequestiahA CertificatemanagerProjectsLocationsDnsAuthorizationsListRequest object. Fields: filter: Optional. Filter expression to restrict the Dns Authorizations returned. orderBy: Optional. A list of Dns Authorization field names used to specify the order of the returned results. The default sorting order is ascending. To specify descending order for a field, add a suffix `" desc"`. pageSize: Optional. Maximum number of dns authorizations to return per call. pageToken: Optional. The value returned by the last `ListDnsAuthorizationsResponse`. Indicates that this is a continuation of a prior `ListDnsAuthorizations` call, and that the system should return the next page of data. parent: Required. The project and location from which the dns authorizations should be listed, specified in the format `projects/*/locations/*`. r r r!rr/r0Trr Nrr rrr r rrr c\rSrSrSr\R "SS5r\R"SSS9r \R"S5r S r g ) @CertificatemanagerProjectsLocationsDnsAuthorizationsPatchRequestia*A CertificatemanagerProjectsLocationsDnsAuthorizationsPatchRequest object. Fields: dnsAuthorization: A DnsAuthorization resource to be passed as the request body. name: Identifier. A user-defined name of the dns authorization. DnsAuthorization names must be unique globally and match pattern `projects/*/locations/*/dnsAuthorizations/*`. updateMask: Required. The update mask applies to the resource. For the `FieldMask` definition, see https://developers.google.com/protocol- buffers/docs/reference/google.protobuf#fieldmask. rr r Trr!r N) rrrrrrr:rrrBrrr rrrrs? ++,>B   q4 0$$$Q'*rrc:\rSrSrSr\R "SSS9rSrg)-CertificatemanagerProjectsLocationsGetRequestiziA CertificatemanagerProjectsLocationsGetRequest object. Fields: name: Resource name for the location. r Trr Nrr rrrr   q4 0$rrc\rSrSrSr\R "SSS9r\R "S5r\R "SSS9r \R"S \RRS 9r \R "S 5rS rg ).CertificatemanagerProjectsLocationsListRequestiaA CertificatemanagerProjectsLocationsListRequest object. Fields: extraLocationTypes: Optional. Do not use this field. It is unsupported and is ignored unless explicitly documented otherwise. This is primarily for internal usage. filter: A filter to narrow down results to a preferred subset. The filtering language accepts strings like `"displayName=tokyo"`, and is documented in more detail in [AIP-160](https://google.aip.dev/160). name: The resource that owns the locations collection, if applicable. pageSize: The maximum number of results to return. If not set, the service selects a default. pageToken: A page token received from the `next_page_token` field in the response. Send that page token to receive the subsequent page. r Tr?r r!rr/rr0r N)rrrrrrrextraLocationTypesrrBrrrrrrr rrrrsl !,,Q>   #&   q4 0$  # #Ay/@/@/F/F G(##A&)rrc`\rSrSrSr\R "SS5r\R"SSS9r Sr g ) :CertificatemanagerProjectsLocationsOperationsCancelRequestizA CertificatemanagerProjectsLocationsOperationsCancelRequest object. Fields: cancelOperationRequest: A CancelOperationRequest resource to be passed as the request body. name: The name of the operation resource to be cancelled. rEr r Trr N) rrrrrrr:cancelOperationRequestrrBrr rrrrs/%112JAN   q4 0$rrc:\rSrSrSr\R "SSS9rSrg):CertificatemanagerProjectsLocationsOperationsDeleteRequesti zA CertificatemanagerProjectsLocationsOperationsDeleteRequest object. Fields: name: The name of the operation resource to be deleted. r Trr Nrr rrrr rrrc:\rSrSrSr\R "SSS9rSrg)7CertificatemanagerProjectsLocationsOperationsGetRequesti*zwA CertificatemanagerProjectsLocationsOperationsGetRequest object. Fields: name: The name of the operation resource. r Trr Nrr rrrr*rrrc\rSrSrSr\R "S5r\R "SSS9r\R"S\RRS9r \R "S 5r \R"S 5rS rg ) 8CertificatemanagerProjectsLocationsOperationsListRequesti4aA CertificatemanagerProjectsLocationsOperationsListRequest object. Fields: filter: The standard list filter. name: The name of the operation's parent resource. pageSize: The standard list page size. pageToken: The standard list page token. returnPartialSuccess: When set to `true`, operations that are reachable are returned as normal, and those that are unreachable are returned in the [ListOperationsResponse.unreachable] field. This can only be `true` when reading across collections e.g. when `parent` is set to `"projects/example/locations/-"`. This field is not by default supported and will result in an `UNIMPLEMENTED` error if set unless explicitly documented otherwise in service or product specific documentation. r r Trr!rr/r0r N)rrrrrrrrrBrrrrr BooleanFieldreturnPartialSuccessrr rrrr4sj   #&   q4 0$  # #Ay/@/@/F/F G(##A&)"//2rrc\rSrSrSr\R "SSS9r\R"SS5r \R "S5r S r g )  $$ZTB)**1-((+.rrc~\rSrSrSr\R "SSS9r\R "SSS9r\R "SSS9r Sr g ) IPsiBaIPs troubleshooting information. Fields: resolved: Output only. The list of IP addresses resolved from the domain's A/AAAA records. Can contain both ipv4 and ipv6 addresses. serving: Output only. The list of IP addresses, where the certificate is attached and port 443 is open. servingOnAltPorts: Output only. The list of IP addresses, where the certificate is attached, but port 443 is not open. r Tr?r r!r N) rrrrrrrresolvedservingservingOnAltPortsrr rrrJrJBs@  " "1t 4(  ! !!d 3'++A=rrJc<\rSrSrSr\R "S5rSrg)IntermediateCAiSzDefines an intermediate CA. Fields: pemCertificate: PEM intermediate certificate used for building up paths for validation. Each certificate provided in PEM format may occupy up to 5kB. r r Nr r rrrOrOSrrrOc\rSrSrSr\R "S5r\R"SS\RRS9r Sr g) rEi_zDefines IP configuration where this Certificate Map is serving. Fields: ipAddress: Output only. An external IP address. ports: Output only. Ports. r r T)r@rr N) rrrrrrr ipAddressrrUINT32portsrr rrrErE_s9##A&)  T9;L;L;S;S T%rrEc\rSrSrSr\R "SSSS9r\R"S5r \R"SSS9r S r g ) &ListCertificateIssuanceConfigsResponseikaResponse for the `ListCertificateIssuanceConfigs` method. Fields: certificateIssuanceConfigs: A list of certificate configs for the parent resource. nextPageToken: If there might be more results than those appearing in this response, then `next_page_token` is included. To get the next set of results, call this method again using the value of `next_page_token` as `page_token`. unreachable: Locations that could not be reached. rr Tr?r r!r N) rrrrrrr:certificateIssuanceConfigsr nextPageToken unreachablerr rrrUrUksC  )556QST_cd''*-%%a$7+rrUc\rSrSrSr\R "SSSS9r\R"S5r \R"SSS9r S r g ) !ListCertificateMapEntriesResponsei}aResponse for the `ListCertificateMapEntries` method. Fields: certificateMapEntries: A list of certificate map entries for the parent resource. nextPageToken: If there might be more results than those appearing in this response, then `next_page_token` is included. To get the next set of results, call this method again using the value of `next_page_token` as `page_token`. unreachable: Locations that could not be reached. rr Tr?r r!r N) rrrrrrr:certificateMapEntriesrrWrXrr rrrZrZ}sB $001FTXY''*-%%a$7+rrZc\rSrSrSr\R "SSSS9r\R"S5r \R"SSS9r S r g ) ListCertificateMapsResponseiaResponse for the `ListCertificateMaps` method. Fields: certificateMaps: A list of certificate maps for the parent resource. nextPageToken: If there might be more results than those appearing in this response, then `next_page_token` is included. To get the next set of results, call this method again using the value of `next_page_token` as `page_token`. unreachable: Locations that could not be reached. rr Tr?r r!r N) rrrrrrr:certificateMapsrrWrXrr rrr]r]s@ **+;QN/''*-%%a$7+rr]c\rSrSrSr\R "SSSS9r\R"S5r \R"SSS9r S r g ) ListCertificatesResponseiaResponse for the `ListCertificates` method. Fields: certificates: A list of certificates for the parent resource. nextPageToken: If there might be more results than those appearing in this response, then `next_page_token` is included. To get the next set of results, call this method again using the value of `next_page_token` as `page_token`. unreachable: A list of locations that could not be reached. rIr Tr?r r!r N) rrrrrrr:rrrWrXrr rrr`r`s? '' q4H,''*-%%a$7+rr`c\rSrSrSr\R "SSSS9r\R"S5r \R"SSS9r S r g ) ListDnsAuthorizationsResponseiaResponse for the `ListDnsAuthorizations` method. Fields: dnsAuthorizations: A list of dns authorizations for the parent resource. nextPageToken: If there might be more results than those appearing in this response, then `next_page_token` is included. To get the next set of results, call this method again using the value of `next_page_token` as `page_token`. unreachable: Locations that could not be reached. rr Tr?r r!r N) rrrrrrr:dnsAuthorizationsrrWrXrr rrrbrbsA  ,,-?TR''*-%%a$7+rrbc`\rSrSrSr\R "SSSS9r\R"S5r Sr g ) ListLocationsResponseizThe response message for Locations.ListLocations. Fields: locations: A list of locations that matches the specified filter in the request. nextPageToken: The standard List next-page token. Locationr Tr?r r N) rrrrrrr: locationsrrWrr rrreres-$$ZTB)''*-rrec\rSrSrSr\R "S5r\R"SSSS9r \R "SSS9r S r g ) ListOperationsResponseiaThe response message for Operations.ListOperations. Fields: nextPageToken: The standard List next-page token. operations: A list of operations that matches the specified filter in the request. unreachable: Unordered list. Unreachable resources. Populated when the request sets `ListOperationsRequest.return_partial_success` and reads across collections e.g. when attempting to list all resources across all supported locations. r Operationr Tr?r!r N) rrrrrrrrWr: operationsrXrr rrriris? ''*-%%k1tD*%%a$7+rric\rSrSrSr\R "S5r\R"SSSS9r \R "SSS9r S r g ) ListTrustConfigsResponseiaResponse for the `ListTrustConfigs` method. Fields: nextPageToken: If there might be more results than those appearing in this response, then `next_page_token` is included. To get the next set of results, call this method again using the value of `next_page_token` as `page_token`. trustConfigs: A list of TrustConfigs for the parent resource. unreachable: Locations that could not be reached. r r"r Tr?r!r N) rrrrrrrrWr: trustConfigsrXrr rrrmrms? ''*-'' q4H,%%a$7+rrmcx\rSrSrSr\R "S5"SS\R55r \R "S5"SS\R55r \R"S5r \R"SS 5r\R"S 5r\R"SS 5r\R"S 5rS rg)rfiaMA resource that represents a Google Cloud location. Messages: LabelsValue: Cross-service attributes for the location. For example {"cloud.googleapis.com/region": "us-east1"} MetadataValue: Service-specific metadata. For example the available capacity at the given location. Fields: displayName: The friendly name for this location, typically a nearby city name. For example, "Tokyo". labels: Cross-service attributes for the location. For example {"cloud.googleapis.com/region": "us-east1"} locationId: The canonical id for this location. For example: `"us-east1"`. metadata: Service-specific metadata. For example the available capacity at the given location. name: Resource name for the location, which may vary between implementations. For example: `"projects/example-project/locations/us- east1"` rScf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) Location.LabelsValueiaCross-service attributes for the location. For example {"cloud.googleapis.com/region": "us-east1"} Messages: AdditionalProperty: An additional property for a LabelsValue object. Fields: additionalProperties: Additional properties of type LabelsValue c`\rSrSrSr\R "S5r\R "S5rSr g)'Location.LabelsValue.AdditionalPropertyirZr r r Nr[r rrr^rsr_rr^r Tr?r Nr`r rrrbrqs2 'Y.. '%112FTXYrrbcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) Location.MetadataValuei!a Service-specific metadata. For example the available capacity at the given location. Messages: AdditionalProperty: An additional property for a MetadataValue object. Fields: additionalProperties: Properties of the object. Contains field @type with type URL. cb\rSrSrSr\R "S5r\R"SS5r Sr g))Location.MetadataValue.AdditionalPropertyi.An additional property for a MetadataValue object. Fields: key: Name of the additional property. value: A extra_types.JsonValue attribute. r extra_types.JsonValuer r N rrrrrrrr\r:r]rr rrr^rw.,   ! !! $c$$%" to include in api requests. uploadType: Legacy upload protocol for media (e.g. "media", "multipart"). upload_protocol: Upload protocol for media (e.g. "raw", "multipart"). c$\rSrSrSrSrSrSrSrg)*StandardQueryParameters.AltValueValuesEnumiKzData format for response. Values: json: Responses with Content-Type of application/json media: Media download with context-dependent Content-Type proto: Responses with Content-Type of application/x-protobuf rr r r N) rrrrrjsonmediaprotorr rrAltValueValuesEnumrKs D E Errc \rSrSrSrSrSrSrg)-StandardQueryParameters.FXgafvValueValuesEnumiWzFV1 error format. Values: _1: v1 error format _2: v2 error format rr r N)rrrrr_1_2rr rrFXgafvValueValuesEnumrWs B Brrr r r!r)defaultr/r0r2rorpTrqrsrtrur N)rrrrrrr3rrr7f__xgafvr access_tokenaltcallbackfieldsr\ oauth_tokenr prettyPrint quotaUsertrace uploadTypeupload_protocolrr rrrr0s4 9>>  inn  !8! <(&&q),0!VD#  " "1 %(   #&a #%%a(+&&q$7+##A&)    #%$$R(*))"-/rrc\rSrSrSr\R "S5"SS\R55r \R"S\RRS9r \R"SSS S 9r\R "S 5rS rg )rioaThe `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors). Messages: DetailsValueListEntry: A DetailsValueListEntry object. Fields: code: The status code, which should be an enum value of google.rpc.Code. details: A list of messages that carry the error details. There is a common set of message types for APIs to use. message: A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client. rScf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) Status.DetailsValueListEntryizA DetailsValueListEntry object. Messages: AdditionalProperty: An additional property for a DetailsValueListEntry object. Fields: additionalProperties: Properties of the object. Contains field @type with type URL. cb\rSrSrSr\R "S5r\R"SS5r Sr g)/Status.DetailsValueListEntry.AdditionalPropertyizAn additional property for a DetailsValueListEntry object. Fields: key: Name of the additional property. value: A extra_types.JsonValue attribute. r ryr r Nrzr rrr^rr{rr^r Tr?r Nr`r rrDetailsValueListEntryrr}rrr rr Tr?r!r N)rrrrrrrxrrarrrrcoder:r5rmessagerr rrrros|& !!"89Zi//Z:Z2   9+<+<+B+B C$  " "#:A M'  ! !! $'rrc\rSrSrSr"SS\R 5r\R"SS5r \R"SS5r \R"SS S S 9r S r g )r1ia7Troubleshooting information for the authorization attempt. Enums: IssuesValueListEntryValuesEnum: Fields: cname: Output only. CNAME troubleshooting information. ips: Output only. IPs troubleshooting information. issues: Output only. The list of issues discovered during the authorization attempt. c0\rSrSrSrSrSrSrSrSr Sr S r g ) .Troubleshooting.IssuesValueListEntryValuesEnumiaIssuesValueListEntryValuesEnum enum type. Values: ISSUE_UNSPECIFIED: Issue is unspecified. CNAME_MISMATCH: The resolved CNAME value doesn't match the expected CNAME. RESOLVED_TO_NOT_SERVING: Domain has A/AAAA records that point to IPs, where the certificate is not attached. RESOLVED_TO_SERVING_ON_ALT_PORTS: Domain has A/AAAA records that point to IPs, where the certificate is attached, but port 443 is not open. NO_RESOLVED_IPS: Domain doesn't have any A/AAAA records. CERTIFICATE_NOT_ATTACHED: Certificate is not configured to be served from any IPs (e.g. Certificate is not attached to any load balancer). rr r r!r/r0r N) rrrrrISSUE_UNSPECIFIEDCNAME_MISMATCHRESOLVED_TO_NOT_SERVING RESOLVED_TO_SERVING_ON_ALT_PORTSNO_RESOLVED_IPSCERTIFICATE_NOT_ATTACHEDrr rrIssuesValueListEntryValuesEnumrs+ N'($O rrr=r rJr r!Tr?r N)rrrrrrr3rr:cnameipsr7issuesrr rrr1r1sR !y~~!,  ! ,%ua(#   ?T R&rr1c<\rSrSrSr\R "S5rSrg) TrustAnchorizDefines a trust anchor. Fields: pemCertificate: PEM root certificate of the PKI used for validation. Each certificate provided in PEM format may occupy up to 5kB. r r Nr r rrrrs((+.rrc\rSrSrSr\R "S5"SS\R55r \R "S5"SS\R55r \R"SS S S 9r \R"S 5r\R"S 5r\R"S5r\R"SS5r\R"S5r\R"SS5r\R"SSS S 9r\R"S5rSrg)r"iaDefines a trust config. Messages: LabelsValue: Optional. Set of labels associated with a TrustConfig. TagsValue: Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example: "123/environment": "production", "123/costCenter": "marketing" Fields: allowlistedCertificates: Optional. A certificate matching an allowlisted certificate is always considered valid as long as the certificate is parseable, proof of private key possession is established, and constraints on the certificate's SAN field are met. createTime: Output only. The creation timestamp of a TrustConfig. description: Optional. One or more paragraphs of text description of a TrustConfig. etag: This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding. labels: Optional. Set of labels associated with a TrustConfig. name: Identifier. A user-defined name of the trust config. TrustConfig names must be unique globally and match pattern `projects/*/locations/*/trustConfigs/*`. tags: Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example: "123/environment": "production", "123/costCenter": "marketing" trustStores: Optional. Set of trust stores to perform validation against. This field is supported when TrustConfig is configured with Load Balancers, currently not supported for SPIFFE certificate validation. Only one TrustStore specified is currently allowed. updateTime: Output only. The last update timestamp of a TrustConfig. rScf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) TrustConfig.LabelsValueizOptional. Set of labels associated with a TrustConfig. Messages: AdditionalProperty: An additional property for a LabelsValue object. Fields: additionalProperties: Additional properties of type LabelsValue c`\rSrSrSr\R "S5r\R "S5rSr g)*TrustConfig.LabelsValue.AdditionalPropertyirZr r r Nr[r rrr^rr_rr^r Tr?r Nr`r rrrbrrcrrbcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) TrustConfig.TagsValueirgc`\rSrSrSr\R "S5r\R "S5rSr g)(TrustConfig.TagsValue.AdditionalPropertyirkr r r Nr[r rrr^rr_rr^r Tr?r Nr`r rrrlrrmrrlr r Tr?r r!r/r0r2ro TrustStorerprqr N)rrrrrrrxrrarbrlr:allowlistedCertificatesrryrzr'r|rBr trustStoresrrr rrr"r"s B !!"89ZI%%Z:Z. !!"89Z)##Z:Z2&223KQY]^$$Q'*%%a(+   q !$  ! !- 3&   q !$    Q /$&&|QF+$$Q'*rr"c`\rSrSrSr\R "SSSS9r\R "SSSS9rS r g ) ri4axDefines a trust store. Fields: intermediateCas: Optional. Set of intermediate CA certificates used for the path building phase of chain validation. The field is currently not supported if TrustConfig is used for the workload certificate feature. trustAnchors: Optional. List of Trust Anchors to be used while performing validation against a given TrustStore. rOr Tr?rr r N) rrrrrrr:intermediateCas trustAnchorsrr rrrr4s2**+;QN/'' q4H,rrc<\rSrSrSr\R "S5rSrg)rviCa_Defines a resource that uses the certificate. Fields: name: Output only. Full name of the resource https://google.aip.dev/122#full-resource-names, e.g. `//certificatemanag er.googleapis.com/projects/*/locations/*/certificateMaps/*/certificateMa pEntries/*` or `//compute.googleapis.com/projects/*/locations/*/targetHttpsProxies/*`. r r Nrr rrrvrvCs   q !$rrvrz$.xgafvr1r2N)Xr __future__rapitools.base.protorpcliterrapitools.base.pyrrpackagerar rr=rErIrrrrrrrrrrrrrrrrrrrrrrrrrrrr r rrrrrrrr!r&r)r+r-rr=rCrrJrOrErUrZr]r`rbrerirmrfrnrjrrrrrrr1rr"rrvAddCustomJsonFieldMappingAddCustomJsonEnumMappingrr rrrs '<%(  ,Y.. ,BAy00BAJ9I  9*=Y..=y?)##y?x e!2!2 e $ (9(9 $p) 1 1p)fR(Y&&R(j[()++[(|3QZQbQb3& 1QZQbQb 1 1iN_N_ 13yO`O`3:(PYPaPa(*3[d[l[l3$ 1[d[l[l 1 1XaXiXi 13YbYjYj3>(ZcZkZk((3iFWFW3" 1iFWFW 119CTCT13IDUDU34(YEVEV(& 39CTCT 319CTCT11 @Q@Q13ARAR30()BSBS($3 HYHY3$ 1 HYHY 11YEVEV13iFWFW3:(yGXGX((1I4E4E1'Y5F5F'0 1ARAR 11ARAR11i>O>O13y?P?P30 +9CTCT + 19CTCT 11 @Q@Q13ARAR30()BSBS($r(y((r(j" ))""I  ,"",&>)  >" ,Y&& , Uy  U8Y->->8$8 (9(98$8)"3"38"8y008"8I$5$58" +I-- +8Y..8$8y008"M"y  M"`69**69ri8 !!i8X" ))"2; ));@ +Y.. + <.i//<.~0%Y  0%f%Si''%SP,)##,\()##\(~ I"" I "Y   " ""Z4!!114>!!114>r