feat: [Google.Cloud.Kms.V1] add SHA-2 import methods (#9353)

- [ ] Regenerate this pull request now. PiperOrigin-RevId: 490250391 Source-Link: https://togithub.com/googleapis/googleapis/commit/4713c109a984e88155c7b0f6ba47739a05234d69 Source-Link: https://togithub.com/googleapis/googleapis-gen/commit/23c40fd800946befcc760f472e998db6b3b65d64 Copy-Tag: eyJwIjoiYXBpcy9Hb29nbGUuQ2xvdWQuS21zLlYxLy5Pd2xCb3QueWFtbCIsImgiOiIyM2M0MGZkODAwOTQ2YmVmY2M3NjBmNDcyZTk5OGRiNmIzYjY1ZDY0In0=
googleapis · Nov 22, 2022 · df7a29e · df7a29e
1 parent 2e15dd1
commit df7a29e
Show file tree

Hide file tree

Showing 11 changed files with 436 additions and 314 deletions.
diff --git a/...dSnippets/KeyManagementServiceClient.ImportCryptoKeyVersionRequestObjectAsyncSnippet.g.cs b/...dSnippets/KeyManagementServiceClient.ImportCryptoKeyVersionRequestObjectAsyncSnippet.g.cs
@@ -43,6 +43,7 @@ public async Task ImportCryptoKeyVersionRequestObjectAsync()
                 ImportJob = "",
                 RsaAesWrappedKey = ByteString.Empty,
                 CryptoKeyVersionAsCryptoKeyVersionName = CryptoKeyVersionName.FromProjectLocationKeyRingCryptoKeyCryptoKeyVersion("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]", "[CRYPTO_KEY_VERSION]"),
+                WrappedKey = ByteString.Empty,
             };
             // Make the request
             CryptoKeyVersion response = await keyManagementServiceClient.ImportCryptoKeyVersionAsync(request);

diff --git a/...eratedSnippets/KeyManagementServiceClient.ImportCryptoKeyVersionRequestObjectSnippet.g.cs b/...eratedSnippets/KeyManagementServiceClient.ImportCryptoKeyVersionRequestObjectSnippet.g.cs
@@ -42,6 +42,7 @@ public void ImportCryptoKeyVersionRequestObject()
                 ImportJob = "",
                 RsaAesWrappedKey = ByteString.Empty,
                 CryptoKeyVersionAsCryptoKeyVersionName = CryptoKeyVersionName.FromProjectLocationKeyRingCryptoKeyCryptoKeyVersion("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]", "[CRYPTO_KEY_VERSION]"),
+                WrappedKey = ByteString.Empty,
             };
             // Make the request
             CryptoKeyVersion response = keyManagementServiceClient.ImportCryptoKeyVersion(request);

diff --git a/...ud.Kms.V1/Google.Cloud.Kms.V1.GeneratedSnippets/snippet_metadata_google.cloud.kms.v1.json b/...ud.Kms.V1/Google.Cloud.Kms.V1.GeneratedSnippets/snippet_metadata_google.cloud.kms.v1.json
@@ -3595,12 +3595,12 @@
       "segments": [
         {
           "start": 20,
-          "end": 49,
+          "end": 50,
           "type": "FULL"
         },
         {
           "start": 35,
-          "end": 47,
+          "end": 48,
           "type": "SHORT"
         }
       ]
@@ -3634,12 +3634,12 @@
       "segments": [
         {
           "start": 20,
-          "end": 50,
+          "end": 51,
           "type": "FULL"
         },
         {
           "start": 36,
-          "end": 48,
+          "end": 49,
           "type": "SHORT"
         }
       ]

diff --git a/.../Google.Cloud.Kms.V1/Google.Cloud.Kms.V1.Snippets/KeyManagementServiceClientSnippets.g.cs b/.../Google.Cloud.Kms.V1/Google.Cloud.Kms.V1.Snippets/KeyManagementServiceClientSnippets.g.cs
@@ -1893,6 +1893,7 @@ public void ImportCryptoKeyVersionRequestObject()
                 ImportJob = "",
                 RsaAesWrappedKey = ByteString.Empty,
                 CryptoKeyVersionAsCryptoKeyVersionName = CryptoKeyVersionName.FromProjectLocationKeyRingCryptoKeyCryptoKeyVersion("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]", "[CRYPTO_KEY_VERSION]"),
+                WrappedKey = ByteString.Empty,
             };
             // Make the request
             CryptoKeyVersion response = keyManagementServiceClient.ImportCryptoKeyVersion(request);
@@ -1914,6 +1915,7 @@ public async Task ImportCryptoKeyVersionRequestObjectAsync()
                 ImportJob = "",
                 RsaAesWrappedKey = ByteString.Empty,
                 CryptoKeyVersionAsCryptoKeyVersionName = CryptoKeyVersionName.FromProjectLocationKeyRingCryptoKeyCryptoKeyVersion("[PROJECT]", "[LOCATION]", "[KEY_RING]", "[CRYPTO_KEY]", "[CRYPTO_KEY_VERSION]"),
+                WrappedKey = ByteString.Empty,
             };
             // Make the request
             CryptoKeyVersion response = await keyManagementServiceClient.ImportCryptoKeyVersionAsync(request);

diff --git a/apis/Google.Cloud.Kms.V1/Google.Cloud.Kms.V1/EkmService.g.cs b/apis/Google.Cloud.Kms.V1/Google.Cloud.Kms.V1/EkmService.g.cs
@@ -53,46 +53,46 @@ public static partial class EkmServiceReflection {
             "dG9idWYuVGltZXN0YW1wQgPgQQMSNwoObm90X2FmdGVyX3RpbWUYByABKAsy",
             "Gi5nb29nbGUucHJvdG9idWYuVGltZXN0YW1wQgPgQQMSGgoNc2VyaWFsX251",
             "bWJlchgIIAEoCUID4EEDEh8KEnNoYTI1Nl9maW5nZXJwcmludBgJIAEoCUID",
-            "4EEDIosECg1Fa21Db25uZWN0aW9uEhEKBG5hbWUYASABKAlCA+BBAxI0Cgtj",
+            "4EEDIpAECg1Fa21Db25uZWN0aW9uEhEKBG5hbWUYASABKAlCA+BBAxI0Cgtj",
             "cmVhdGVfdGltZRgCIAEoCzIaLmdvb2dsZS5wcm90b2J1Zi5UaW1lc3RhbXBC",
             "A+BBAxJNChFzZXJ2aWNlX3Jlc29sdmVycxgDIAMoCzIyLmdvb2dsZS5jbG91",
-            "ZC5rbXMudjEuRWttQ29ubmVjdGlvbi5TZXJ2aWNlUmVzb2x2ZXISDAoEZXRh",
-            "ZxgFIAEoCRreAQoPU2VydmljZVJlc29sdmVyElIKGXNlcnZpY2VfZGlyZWN0",
-            "b3J5X3NlcnZpY2UYASABKAlCL+BBAvpBKQonc2VydmljZWRpcmVjdG9yeS5n",
-            "b29nbGVhcGlzLmNvbS9TZXJ2aWNlEhwKD2VuZHBvaW50X2ZpbHRlchgCIAEo",
-            "CUID4EEBEhUKCGhvc3RuYW1lGAMgASgJQgPgQQISQgoTc2VydmVyX2NlcnRp",
-            "ZmljYXRlcxgEIAMoCzIgLmdvb2dsZS5jbG91ZC5rbXMudjEuQ2VydGlmaWNh",
-            "dGVCA+BBAjpz6kFwCiVjbG91ZGttcy5nb29nbGVhcGlzLmNvbS9Fa21Db25u",
-            "ZWN0aW9uEkdwcm9qZWN0cy97cHJvamVjdH0vbG9jYXRpb25zL3tsb2NhdGlv",
-            "bn0vZWttQ29ubmVjdGlvbnMve2VrbV9jb25uZWN0aW9ufTKxBwoKRWttU2Vy",
-            "dmljZRK6AQoSTGlzdEVrbUNvbm5lY3Rpb25zEi4uZ29vZ2xlLmNsb3VkLmtt",
-            "cy52MS5MaXN0RWttQ29ubmVjdGlvbnNSZXF1ZXN0Gi8uZ29vZ2xlLmNsb3Vk",
-            "Lmttcy52MS5MaXN0RWttQ29ubmVjdGlvbnNSZXNwb25zZSJDgtPkkwI0EjIv",
-            "djEve3BhcmVudD1wcm9qZWN0cy8qL2xvY2F0aW9ucy8qfS9la21Db25uZWN0",
-            "aW9uc9pBBnBhcmVudBKnAQoQR2V0RWttQ29ubmVjdGlvbhIsLmdvb2dsZS5j",
-            "bG91ZC5rbXMudjEuR2V0RWttQ29ubmVjdGlvblJlcXVlc3QaIi5nb29nbGUu",
-            "Y2xvdWQua21zLnYxLkVrbUNvbm5lY3Rpb24iQYLT5JMCNBIyL3YxL3tuYW1l",
-            "PXByb2plY3RzLyovbG9jYXRpb25zLyovZWttQ29ubmVjdGlvbnMvKn3aQQRu",
-            "YW1lEuABChNDcmVhdGVFa21Db25uZWN0aW9uEi8uZ29vZ2xlLmNsb3VkLmtt",
-            "cy52MS5DcmVhdGVFa21Db25uZWN0aW9uUmVxdWVzdBoiLmdvb2dsZS5jbG91",
-            "ZC5rbXMudjEuRWttQ29ubmVjdGlvbiJ0gtPkkwJEIjIvdjEve3BhcmVudD1w",
-            "cm9qZWN0cy8qL2xvY2F0aW9ucy8qfS9la21Db25uZWN0aW9uczoOZWttX2Nv",
-            "bm5lY3Rpb27aQSdwYXJlbnQsZWttX2Nvbm5lY3Rpb25faWQsZWttX2Nvbm5l",
-            "Y3Rpb24S4gEKE1VwZGF0ZUVrbUNvbm5lY3Rpb24SLy5nb29nbGUuY2xvdWQu",
-            "a21zLnYxLlVwZGF0ZUVrbUNvbm5lY3Rpb25SZXF1ZXN0GiIuZ29vZ2xlLmNs",
-            "b3VkLmttcy52MS5Fa21Db25uZWN0aW9uInaC0+STAlMyQS92MS97ZWttX2Nv",
-            "bm5lY3Rpb24ubmFtZT1wcm9qZWN0cy8qL2xvY2F0aW9ucy8qL2VrbUNvbm5l",
-            "Y3Rpb25zLyp9Og5la21fY29ubmVjdGlvbtpBGmVrbV9jb25uZWN0aW9uLHVw",
-            "ZGF0ZV9tYXNrGnTKQRdjbG91ZGttcy5nb29nbGVhcGlzLmNvbdJBV2h0dHBz",
-            "Oi8vd3d3Lmdvb2dsZWFwaXMuY29tL2F1dGgvY2xvdWQtcGxhdGZvcm0saHR0",
-            "cHM6Ly93d3cuZ29vZ2xlYXBpcy5jb20vYXV0aC9jbG91ZGttc0KSAgoXY29t",
-            "Lmdvb2dsZS5jbG91ZC5rbXMudjFCD0VrbVNlcnZpY2VQcm90b1ABWjZnb29n",
-            "bGUuZ29sYW5nLm9yZy9nZW5wcm90by9nb29nbGVhcGlzL2Nsb3VkL2ttcy92",
-            "MTtrbXP4AQGqAhNHb29nbGUuQ2xvdWQuS21zLlYxygITR29vZ2xlXENsb3Vk",
-            "XEttc1xWMepBfAonc2VydmljZWRpcmVjdG9yeS5nb29nbGVhcGlzLmNvbS9T",
-            "ZXJ2aWNlElFwcm9qZWN0cy97cHJvamVjdH0vbG9jYXRpb25zL3tsb2NhdGlv",
-            "bn0vbmFtZXNwYWNlcy97bmFtZXNwYWNlfS9zZXJ2aWNlcy97c2VydmljZX1i",
-            "BnByb3RvMw=="));
+            "ZC5rbXMudjEuRWttQ29ubmVjdGlvbi5TZXJ2aWNlUmVzb2x2ZXISEQoEZXRh",
+            "ZxgFIAEoCUID4EEBGt4BCg9TZXJ2aWNlUmVzb2x2ZXISUgoZc2VydmljZV9k",
+            "aXJlY3Rvcnlfc2VydmljZRgBIAEoCUIv4EEC+kEpCidzZXJ2aWNlZGlyZWN0",
+            "b3J5Lmdvb2dsZWFwaXMuY29tL1NlcnZpY2USHAoPZW5kcG9pbnRfZmlsdGVy",
+            "GAIgASgJQgPgQQESFQoIaG9zdG5hbWUYAyABKAlCA+BBAhJCChNzZXJ2ZXJf",
+            "Y2VydGlmaWNhdGVzGAQgAygLMiAuZ29vZ2xlLmNsb3VkLmttcy52MS5DZXJ0",
+            "aWZpY2F0ZUID4EECOnPqQXAKJWNsb3Vka21zLmdvb2dsZWFwaXMuY29tL0Vr",
+            "bUNvbm5lY3Rpb24SR3Byb2plY3RzL3twcm9qZWN0fS9sb2NhdGlvbnMve2xv",
+            "Y2F0aW9ufS9la21Db25uZWN0aW9ucy97ZWttX2Nvbm5lY3Rpb259MrEHCgpF",
+            "a21TZXJ2aWNlEroBChJMaXN0RWttQ29ubmVjdGlvbnMSLi5nb29nbGUuY2xv",
+            "dWQua21zLnYxLkxpc3RFa21Db25uZWN0aW9uc1JlcXVlc3QaLy5nb29nbGUu",
+            "Y2xvdWQua21zLnYxLkxpc3RFa21Db25uZWN0aW9uc1Jlc3BvbnNlIkOC0+ST",
+            "AjQSMi92MS97cGFyZW50PXByb2plY3RzLyovbG9jYXRpb25zLyp9L2VrbUNv",
+            "bm5lY3Rpb25z2kEGcGFyZW50EqcBChBHZXRFa21Db25uZWN0aW9uEiwuZ29v",
+            "Z2xlLmNsb3VkLmttcy52MS5HZXRFa21Db25uZWN0aW9uUmVxdWVzdBoiLmdv",
+            "b2dsZS5jbG91ZC5rbXMudjEuRWttQ29ubmVjdGlvbiJBgtPkkwI0EjIvdjEv",
+            "e25hbWU9cHJvamVjdHMvKi9sb2NhdGlvbnMvKi9la21Db25uZWN0aW9ucy8q",
+            "fdpBBG5hbWUS4AEKE0NyZWF0ZUVrbUNvbm5lY3Rpb24SLy5nb29nbGUuY2xv",
+            "dWQua21zLnYxLkNyZWF0ZUVrbUNvbm5lY3Rpb25SZXF1ZXN0GiIuZ29vZ2xl",
+            "LmNsb3VkLmttcy52MS5Fa21Db25uZWN0aW9uInSC0+STAkQiMi92MS97cGFy",
+            "ZW50PXByb2plY3RzLyovbG9jYXRpb25zLyp9L2VrbUNvbm5lY3Rpb25zOg5l",
+            "a21fY29ubmVjdGlvbtpBJ3BhcmVudCxla21fY29ubmVjdGlvbl9pZCxla21f",
+            "Y29ubmVjdGlvbhLiAQoTVXBkYXRlRWttQ29ubmVjdGlvbhIvLmdvb2dsZS5j",
+            "bG91ZC5rbXMudjEuVXBkYXRlRWttQ29ubmVjdGlvblJlcXVlc3QaIi5nb29n",
+            "bGUuY2xvdWQua21zLnYxLkVrbUNvbm5lY3Rpb24idoLT5JMCUzJBL3YxL3tl",
+            "a21fY29ubmVjdGlvbi5uYW1lPXByb2plY3RzLyovbG9jYXRpb25zLyovZWtt",
+            "Q29ubmVjdGlvbnMvKn06DmVrbV9jb25uZWN0aW9u2kEaZWttX2Nvbm5lY3Rp",
+            "b24sdXBkYXRlX21hc2sadMpBF2Nsb3Vka21zLmdvb2dsZWFwaXMuY29t0kFX",
+            "aHR0cHM6Ly93d3cuZ29vZ2xlYXBpcy5jb20vYXV0aC9jbG91ZC1wbGF0Zm9y",
+            "bSxodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbS9hdXRoL2Nsb3Vka21zQpIC",
+            "Chdjb20uZ29vZ2xlLmNsb3VkLmttcy52MUIPRWttU2VydmljZVByb3RvUAFa",
+            "Nmdvb2dsZS5nb2xhbmcub3JnL2dlbnByb3RvL2dvb2dsZWFwaXMvY2xvdWQv",
+            "a21zL3YxO2ttc/gBAaoCE0dvb2dsZS5DbG91ZC5LbXMuVjHKAhNHb29nbGVc",
+            "Q2xvdWRcS21zXFYx6kF8CidzZXJ2aWNlZGlyZWN0b3J5Lmdvb2dsZWFwaXMu",
+            "Y29tL1NlcnZpY2USUXByb2plY3RzL3twcm9qZWN0fS9sb2NhdGlvbnMve2xv",
+            "Y2F0aW9ufS9uYW1lc3BhY2VzL3tuYW1lc3BhY2V9L3NlcnZpY2VzL3tzZXJ2",
+            "aWNlfWIGcHJvdG8z"));
       descriptor = pbr::FileDescriptor.FromGeneratedCode(descriptorData,
           new pbr::FileDescriptor[] { global::Google.Api.AnnotationsReflection.Descriptor, global::Google.Api.ClientReflection.Descriptor, global::Google.Api.FieldBehaviorReflection.Descriptor, global::Google.Api.ResourceReflection.Descriptor, global::Google.Protobuf.WellKnownTypes.FieldMaskReflection.Descriptor, global::Google.Protobuf.WellKnownTypes.TimestampReflection.Descriptor, },
           new pbr::GeneratedClrTypeInfo(null, null, new pbr::GeneratedClrTypeInfo[] {
@@ -110,7 +110,8 @@ public static partial class EkmServiceReflection {
   }
   #region Messages
   /// <summary>
-  /// Request message for [KeyManagementService.ListEkmConnections][].
+  /// Request message for
+  /// [EkmService.ListEkmConnections][google.cloud.kms.v1.EkmService.ListEkmConnections].
   /// </summary>
   public sealed partial class ListEkmConnectionsRequest : pb::IMessage<ListEkmConnectionsRequest>
   #if !GOOGLE_PROTOBUF_REFSTRUCT_COMPATIBILITY_MODE
@@ -480,7 +481,8 @@ public sealed partial class ListEkmConnectionsRequest : pb::IMessage<ListEkmConn
   }
 
   /// <summary>
-  /// Response message for [KeyManagementService.ListEkmConnections][].
+  /// Response message for
+  /// [EkmService.ListEkmConnections][google.cloud.kms.v1.EkmService.ListEkmConnections].
   /// </summary>
   public sealed partial class ListEkmConnectionsResponse : pb::IMessage<ListEkmConnectionsResponse>
   #if !GOOGLE_PROTOBUF_REFSTRUCT_COMPATIBILITY_MODE
@@ -747,7 +749,8 @@ public sealed partial class ListEkmConnectionsResponse : pb::IMessage<ListEkmCon
   }
 
   /// <summary>
-  /// Request message for [KeyManagementService.GetEkmConnection][].
+  /// Request message for
+  /// [EkmService.GetEkmConnection][google.cloud.kms.v1.EkmService.GetEkmConnection].
   /// </summary>
   public sealed partial class GetEkmConnectionRequest : pb::IMessage<GetEkmConnectionRequest>
   #if !GOOGLE_PROTOBUF_REFSTRUCT_COMPATIBILITY_MODE
@@ -943,7 +946,8 @@ public sealed partial class GetEkmConnectionRequest : pb::IMessage<GetEkmConnect
   }
 
   /// <summary>
-  /// Request message for [KeyManagementService.CreateEkmConnection][].
+  /// Request message for
+  /// [EkmService.CreateEkmConnection][google.cloud.kms.v1.EkmService.CreateEkmConnection].
   /// </summary>
   public sealed partial class CreateEkmConnectionRequest : pb::IMessage<CreateEkmConnectionRequest>
   #if !GOOGLE_PROTOBUF_REFSTRUCT_COMPATIBILITY_MODE
@@ -1231,7 +1235,8 @@ public sealed partial class CreateEkmConnectionRequest : pb::IMessage<CreateEkmC
   }
 
   /// <summary>
-  /// Request message for [KeyManagementService.UpdateEkmConnection][].
+  /// Request message for
+  /// [EkmService.UpdateEkmConnection][google.cloud.kms.v1.EkmService.UpdateEkmConnection].
   /// </summary>
   public sealed partial class UpdateEkmConnectionRequest : pb::IMessage<UpdateEkmConnectionRequest>
   #if !GOOGLE_PROTOBUF_REFSTRUCT_COMPATIBILITY_MODE
@@ -2127,9 +2132,8 @@ public sealed partial class EkmConnection : pb::IMessage<EkmConnection>
     public const int EtagFieldNumber = 5;
     private string etag_ = "";
     /// <summary>
-    /// This checksum is computed by the server based on the value of other fields,
-    /// and may be sent on update requests to ensure the client has an up-to-date
-    /// value before proceeding.
+    /// Optional. Etag of the currently stored
+    /// [EkmConnection][google.cloud.kms.v1.EkmConnection].
     /// </summary>
     [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
     [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
@@ -2458,7 +2462,8 @@ public sealed partial class ServiceResolver : pb::IMessage<ServiceResolver>
         private readonly pbc::RepeatedField<global::Google.Cloud.Kms.V1.Certificate> serverCertificates_ = new pbc::RepeatedField<global::Google.Cloud.Kms.V1.Certificate>();
         /// <summary>
         /// Required. A list of leaf server certificates used to authenticate HTTPS
-        /// connections to the EKM replica.
+        /// connections to the EKM replica. Currently, a maximum of 10
+        /// [Certificate][google.cloud.kms.v1.Certificate] is supported.
         /// </summary>
         [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
         [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]

diff --git a/apis/Google.Cloud.Kms.V1/Google.Cloud.Kms.V1/EkmServiceGrpc.g.cs b/apis/Google.Cloud.Kms.V1/Google.Cloud.Kms.V1/EkmServiceGrpc.g.cs
@@ -3,7 +3,7 @@
 //     source: google/cloud/kms/v1/ekm_service.proto
 // </auto-generated>
 // Original file comments:
-// Copyright 2021 Google LLC
+// Copyright 2022 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.

diff --git a/apis/Google.Cloud.Kms.V1/Google.Cloud.Kms.V1/KeyManagementServiceClient.g.cs b/apis/Google.Cloud.Kms.V1/Google.Cloud.Kms.V1/KeyManagementServiceClient.g.cs
@@ -3681,7 +3681,9 @@ internal static KeyManagementServiceClient Create(grpccore::CallInvoker callInvo
         /// 
         /// The maximum size depends on the key version's
         /// [protection_level][google.cloud.kms.v1.CryptoKeyVersionTemplate.protection_level].
-        /// For [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE] keys, the
+        /// For [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE],
+        /// [EXTERNAL][google.cloud.kms.v1.ProtectionLevel.EXTERNAL], and
+        /// [EXTERNAL_VPC][google.cloud.kms.v1.ProtectionLevel.EXTERNAL_VPC] keys, the
         /// plaintext must be no larger than 64KiB. For
         /// [HSM][google.cloud.kms.v1.ProtectionLevel.HSM] keys, the combined length of
         /// the plaintext and additional_authenticated_data fields must be no larger
@@ -3716,7 +3718,9 @@ internal static KeyManagementServiceClient Create(grpccore::CallInvoker callInvo
         /// 
         /// The maximum size depends on the key version's
         /// [protection_level][google.cloud.kms.v1.CryptoKeyVersionTemplate.protection_level].
-        /// For [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE] keys, the
+        /// For [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE],
+        /// [EXTERNAL][google.cloud.kms.v1.ProtectionLevel.EXTERNAL], and
+        /// [EXTERNAL_VPC][google.cloud.kms.v1.ProtectionLevel.EXTERNAL_VPC] keys, the
         /// plaintext must be no larger than 64KiB. For
         /// [HSM][google.cloud.kms.v1.ProtectionLevel.HSM] keys, the combined length of
         /// the plaintext and additional_authenticated_data fields must be no larger
@@ -3751,7 +3755,9 @@ internal static KeyManagementServiceClient Create(grpccore::CallInvoker callInvo
         /// 
         /// The maximum size depends on the key version's
         /// [protection_level][google.cloud.kms.v1.CryptoKeyVersionTemplate.protection_level].
-        /// For [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE] keys, the
+        /// For [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE],
+        /// [EXTERNAL][google.cloud.kms.v1.ProtectionLevel.EXTERNAL], and
+        /// [EXTERNAL_VPC][google.cloud.kms.v1.ProtectionLevel.EXTERNAL_VPC] keys, the
         /// plaintext must be no larger than 64KiB. For
         /// [HSM][google.cloud.kms.v1.ProtectionLevel.HSM] keys, the combined length of
         /// the plaintext and additional_authenticated_data fields must be no larger
@@ -3782,7 +3788,9 @@ internal static KeyManagementServiceClient Create(grpccore::CallInvoker callInvo
         /// 
         /// The maximum size depends on the key version's
         /// [protection_level][google.cloud.kms.v1.CryptoKeyVersionTemplate.protection_level].
-        /// For [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE] keys, the
+        /// For [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE],
+        /// [EXTERNAL][google.cloud.kms.v1.ProtectionLevel.EXTERNAL], and
+        /// [EXTERNAL_VPC][google.cloud.kms.v1.ProtectionLevel.EXTERNAL_VPC] keys, the
         /// plaintext must be no larger than 64KiB. For
         /// [HSM][google.cloud.kms.v1.ProtectionLevel.HSM] keys, the combined length of
         /// the plaintext and additional_authenticated_data fields must be no larger
@@ -3817,7 +3825,9 @@ internal static KeyManagementServiceClient Create(grpccore::CallInvoker callInvo
         /// 
         /// The maximum size depends on the key version's
         /// [protection_level][google.cloud.kms.v1.CryptoKeyVersionTemplate.protection_level].
-        /// For [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE] keys, the
+        /// For [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE],
+        /// [EXTERNAL][google.cloud.kms.v1.ProtectionLevel.EXTERNAL], and
+        /// [EXTERNAL_VPC][google.cloud.kms.v1.ProtectionLevel.EXTERNAL_VPC] keys, the
         /// plaintext must be no larger than 64KiB. For
         /// [HSM][google.cloud.kms.v1.ProtectionLevel.HSM] keys, the combined length of
         /// the plaintext and additional_authenticated_data fields must be no larger
@@ -3852,7 +3862,9 @@ internal static KeyManagementServiceClient Create(grpccore::CallInvoker callInvo
         /// 
         /// The maximum size depends on the key version's
         /// [protection_level][google.cloud.kms.v1.CryptoKeyVersionTemplate.protection_level].
-        /// For [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE] keys, the
+        /// For [SOFTWARE][google.cloud.kms.v1.ProtectionLevel.SOFTWARE],
+        /// [EXTERNAL][google.cloud.kms.v1.ProtectionLevel.EXTERNAL], and
+        /// [EXTERNAL_VPC][google.cloud.kms.v1.ProtectionLevel.EXTERNAL_VPC] keys, the
         /// plaintext must be no larger than 64KiB. For
         /// [HSM][google.cloud.kms.v1.ProtectionLevel.HSM] keys, the combined length of
         /// the plaintext and additional_authenticated_data fields must be no larger