feat(cloudkms): update the api

#### cloudkms:v1

The following keys were added:
- resources.projects.resources.locations.methods.getEkmConfig (Total Keys: 11)
- resources.projects.resources.locations.methods.updateEkmConfig (Total Keys: 15)
- schemas.CryptoKeyVersion.properties.externalDestructionFailureReason (Total Keys: 2)
- schemas.CryptoKeyVersion.properties.generationFailureReason (Total Keys: 2)
- schemas.EkmConfig (Total Keys: 5)
- schemas.EkmConnection.properties.cryptoSpacePath.type (Total Keys: 1)
- schemas.EkmConnection.properties.keyManagementMode.type (Total Keys: 1)

Author: yoshi-automation

docs/dyn/cloudkms_v1.projects.locations.ekmConnections.html

@@ -118,7 +118,9 @@ <h3>Method Details</h3>
 
 { # An EkmConnection represents an individual EKM connection. It can be used for creating CryptoKeys and CryptoKeyVersions with a ProtectionLevel of EXTERNAL_VPC, as well as performing cryptographic operations using keys created within the EkmConnection.
   &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time at which the EkmConnection was created.
+  &quot;cryptoSpacePath&quot;: &quot;A String&quot;, # Optional. Identifies the EKM Crypto Space that this EkmConnection maps to. Note: This field is required if KeyManagementMode is CLOUD_KMS.
   &quot;etag&quot;: &quot;A String&quot;, # Optional. Etag of the currently stored EkmConnection.
+  &quot;keyManagementMode&quot;: &quot;A String&quot;, # Optional. Describes who can perform control plane operations on the EKM. If unset, this defaults to MANUAL.
   &quot;name&quot;: &quot;A String&quot;, # Output only. The resource name for the EkmConnection in the format `projects/*/locations/*/ekmConnections/*`.
   &quot;serviceResolvers&quot;: [ # A list of ServiceResolvers where the EKM can be reached. There should be one ServiceResolver per EKM replica. Currently, only a single ServiceResolver is supported.
     { # A ServiceResolver represents an EKM replica that can be reached within an EkmConnection.
@@ -155,7 +157,9 @@ <h3>Method Details</h3>
 
     { # An EkmConnection represents an individual EKM connection. It can be used for creating CryptoKeys and CryptoKeyVersions with a ProtectionLevel of EXTERNAL_VPC, as well as performing cryptographic operations using keys created within the EkmConnection.
   &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time at which the EkmConnection was created.
+  &quot;cryptoSpacePath&quot;: &quot;A String&quot;, # Optional. Identifies the EKM Crypto Space that this EkmConnection maps to. Note: This field is required if KeyManagementMode is CLOUD_KMS.
   &quot;etag&quot;: &quot;A String&quot;, # Optional. Etag of the currently stored EkmConnection.
+  &quot;keyManagementMode&quot;: &quot;A String&quot;, # Optional. Describes who can perform control plane operations on the EKM. If unset, this defaults to MANUAL.
   &quot;name&quot;: &quot;A String&quot;, # Output only. The resource name for the EkmConnection in the format `projects/*/locations/*/ekmConnections/*`.
   &quot;serviceResolvers&quot;: [ # A list of ServiceResolvers where the EKM can be reached. There should be one ServiceResolver per EKM replica. Currently, only a single ServiceResolver is supported.
     { # A ServiceResolver represents an EKM replica that can be reached within an EkmConnection.
@@ -198,7 +202,9 @@ <h3>Method Details</h3>
 
     { # An EkmConnection represents an individual EKM connection. It can be used for creating CryptoKeys and CryptoKeyVersions with a ProtectionLevel of EXTERNAL_VPC, as well as performing cryptographic operations using keys created within the EkmConnection.
   &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time at which the EkmConnection was created.
+  &quot;cryptoSpacePath&quot;: &quot;A String&quot;, # Optional. Identifies the EKM Crypto Space that this EkmConnection maps to. Note: This field is required if KeyManagementMode is CLOUD_KMS.
   &quot;etag&quot;: &quot;A String&quot;, # Optional. Etag of the currently stored EkmConnection.
+  &quot;keyManagementMode&quot;: &quot;A String&quot;, # Optional. Describes who can perform control plane operations on the EKM. If unset, this defaults to MANUAL.
   &quot;name&quot;: &quot;A String&quot;, # Output only. The resource name for the EkmConnection in the format `projects/*/locations/*/ekmConnections/*`.
   &quot;serviceResolvers&quot;: [ # A list of ServiceResolvers where the EKM can be reached. There should be one ServiceResolver per EKM replica. Currently, only a single ServiceResolver is supported.
     { # A ServiceResolver represents an EKM replica that can be reached within an EkmConnection.
@@ -295,7 +301,9 @@ <h3>Method Details</h3>
   &quot;ekmConnections&quot;: [ # The list of EkmConnections.
     { # An EkmConnection represents an individual EKM connection. It can be used for creating CryptoKeys and CryptoKeyVersions with a ProtectionLevel of EXTERNAL_VPC, as well as performing cryptographic operations using keys created within the EkmConnection.
       &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time at which the EkmConnection was created.
+      &quot;cryptoSpacePath&quot;: &quot;A String&quot;, # Optional. Identifies the EKM Crypto Space that this EkmConnection maps to. Note: This field is required if KeyManagementMode is CLOUD_KMS.
       &quot;etag&quot;: &quot;A String&quot;, # Optional. Etag of the currently stored EkmConnection.
+      &quot;keyManagementMode&quot;: &quot;A String&quot;, # Optional. Describes who can perform control plane operations on the EKM. If unset, this defaults to MANUAL.
       &quot;name&quot;: &quot;A String&quot;, # Output only. The resource name for the EkmConnection in the format `projects/*/locations/*/ekmConnections/*`.
       &quot;serviceResolvers&quot;: [ # A list of ServiceResolvers where the EKM can be reached. There should be one ServiceResolver per EKM replica. Currently, only a single ServiceResolver is supported.
         { # A ServiceResolver represents an EKM replica that can be reached within an EkmConnection.
@@ -351,7 +359,9 @@ <h3>Method Details</h3>
 
 { # An EkmConnection represents an individual EKM connection. It can be used for creating CryptoKeys and CryptoKeyVersions with a ProtectionLevel of EXTERNAL_VPC, as well as performing cryptographic operations using keys created within the EkmConnection.
   &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time at which the EkmConnection was created.
+  &quot;cryptoSpacePath&quot;: &quot;A String&quot;, # Optional. Identifies the EKM Crypto Space that this EkmConnection maps to. Note: This field is required if KeyManagementMode is CLOUD_KMS.
   &quot;etag&quot;: &quot;A String&quot;, # Optional. Etag of the currently stored EkmConnection.
+  &quot;keyManagementMode&quot;: &quot;A String&quot;, # Optional. Describes who can perform control plane operations on the EKM. If unset, this defaults to MANUAL.
   &quot;name&quot;: &quot;A String&quot;, # Output only. The resource name for the EkmConnection in the format `projects/*/locations/*/ekmConnections/*`.
   &quot;serviceResolvers&quot;: [ # A list of ServiceResolvers where the EKM can be reached. There should be one ServiceResolver per EKM replica. Currently, only a single ServiceResolver is supported.
     { # A ServiceResolver represents an EKM replica that can be reached within an EkmConnection.
@@ -388,7 +398,9 @@ <h3>Method Details</h3>
 
     { # An EkmConnection represents an individual EKM connection. It can be used for creating CryptoKeys and CryptoKeyVersions with a ProtectionLevel of EXTERNAL_VPC, as well as performing cryptographic operations using keys created within the EkmConnection.
   &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time at which the EkmConnection was created.
+  &quot;cryptoSpacePath&quot;: &quot;A String&quot;, # Optional. Identifies the EKM Crypto Space that this EkmConnection maps to. Note: This field is required if KeyManagementMode is CLOUD_KMS.
   &quot;etag&quot;: &quot;A String&quot;, # Optional. Etag of the currently stored EkmConnection.
+  &quot;keyManagementMode&quot;: &quot;A String&quot;, # Optional. Describes who can perform control plane operations on the EKM. If unset, this defaults to MANUAL.
   &quot;name&quot;: &quot;A String&quot;, # Output only. The resource name for the EkmConnection in the format `projects/*/locations/*/ekmConnections/*`.
   &quot;serviceResolvers&quot;: [ # A list of ServiceResolvers where the EKM can be reached. There should be one ServiceResolver per EKM replica. Currently, only a single ServiceResolver is supported.
     { # A ServiceResolver represents an EKM replica that can be reached within an EkmConnection.

docs/dyn/cloudkms_v1.projects.locations.html

@@ -98,12 +98,18 @@ <h2>Instance Methods</h2>
 <p class="toc_element">
   <code><a href="#get">get(name, x__xgafv=None)</a></code></p>
 <p class="firstline">Gets information about a location.</p>
+<p class="toc_element">
+  <code><a href="#getEkmConfig">getEkmConfig(name, x__xgafv=None)</a></code></p>
+<p class="firstline">Returns the EkmConfig singleton resource for a given project and location.</p>
 <p class="toc_element">
   <code><a href="#list">list(name, filter=None, pageSize=None, pageToken=None, x__xgafv=None)</a></code></p>
 <p class="firstline">Lists information about the supported locations for this service.</p>
 <p class="toc_element">
   <code><a href="#list_next">list_next()</a></code></p>
 <p class="firstline">Retrieves the next page of results.</p>
+<p class="toc_element">
+  <code><a href="#updateEkmConfig">updateEkmConfig(name, body=None, updateMask=None, x__xgafv=None)</a></code></p>
+<p class="firstline">Updates the EkmConfig singleton resource for a given project and location.</p>
 <h3>Method Details</h3>
 <div class="method">
     <code class="details" id="close">close()</code>
@@ -165,6 +171,26 @@ <h3>Method Details</h3>
 }</pre>
 </div>
 
+<div class="method">
+    <code class="details" id="getEkmConfig">getEkmConfig(name, x__xgafv=None)</code>
+  <pre>Returns the EkmConfig singleton resource for a given project and location.
+
+Args:
+  name: string, Required. The name of the EkmConfig to get. (required)
+  x__xgafv: string, V1 error format.
+    Allowed values
+      1 - v1 error format
+      2 - v2 error format
+
+Returns:
+  An object of the form:
+
+    { # An EkmConfig is a singleton resource that represents configuration parameters that apply to all CryptoKeys and CryptoKeyVersions with a ProtectionLevel of EXTERNAL_VPC in a given project and location.
+  &quot;defaultEkmConnection&quot;: &quot;A String&quot;, # Optional. Resource name of the default EkmConnection. Setting this field to the empty string removes the default.
+  &quot;name&quot;: &quot;A String&quot;, # Output only. The resource name for the EkmConfig in the format `projects/*/locations/*/ekmConfig`.
+}</pre>
+</div>
+
 <div class="method">
     <code class="details" id="list">list(name, filter=None, pageSize=None, pageToken=None, x__xgafv=None)</code>
   <pre>Lists information about the supported locations for this service.
@@ -214,4 +240,33 @@ <h3>Method Details</h3>
         </pre>
 </div>
 
+<div class="method">
+    <code class="details" id="updateEkmConfig">updateEkmConfig(name, body=None, updateMask=None, x__xgafv=None)</code>
+  <pre>Updates the EkmConfig singleton resource for a given project and location.
+
+Args:
+  name: string, Output only. The resource name for the EkmConfig in the format `projects/*/locations/*/ekmConfig`. (required)
+  body: object, The request body.
+    The object takes the form of:
+
+{ # An EkmConfig is a singleton resource that represents configuration parameters that apply to all CryptoKeys and CryptoKeyVersions with a ProtectionLevel of EXTERNAL_VPC in a given project and location.
+  &quot;defaultEkmConnection&quot;: &quot;A String&quot;, # Optional. Resource name of the default EkmConnection. Setting this field to the empty string removes the default.
+  &quot;name&quot;: &quot;A String&quot;, # Output only. The resource name for the EkmConfig in the format `projects/*/locations/*/ekmConfig`.
+}
+
+  updateMask: string, Required. List of fields to be updated in this request.
+  x__xgafv: string, V1 error format.
+    Allowed values
+      1 - v1 error format
+      2 - v2 error format
+
+Returns:
+  An object of the form:
+
+    { # An EkmConfig is a singleton resource that represents configuration parameters that apply to all CryptoKeys and CryptoKeyVersions with a ProtectionLevel of EXTERNAL_VPC in a given project and location.
+  &quot;defaultEkmConnection&quot;: &quot;A String&quot;, # Optional. Resource name of the default EkmConnection. Setting this field to the empty string removes the default.
+  &quot;name&quot;: &quot;A String&quot;, # Output only. The resource name for the EkmConfig in the format `projects/*/locations/*/ekmConfig`.
+}</pre>
+</div>
+
 </body></html>