feat: Add new gcloud commands, API clients, and third-party libraries across various services.

gcloud auth application-default login/google-cloud-sdk/lib/surface/dataplex/encryption_config/__init__.py

@@ -0,0 +1,29 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Command group for Dataplex Encryption Config services."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.calliope import base
+
+
+@base.ReleaseTracks(base.ReleaseTrack.ALPHA, base.ReleaseTrack.GA)
+@base.DefaultUniverseOnly
+class EncryptionConfig(base.Group):
+  """Manage Dataplex encryption configs."""
+
+  category = base.DATA_ANALYTICS_CATEGORY

gcloud auth application-default login/google-cloud-sdk/lib/surface/dataplex/encryption_config/create.py

@@ -0,0 +1,73 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google Inc. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""`gcloud dataplex encryption-config create` command."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.api_lib.dataplex import encryption_config
+from googlecloudsdk.api_lib.dataplex import util as dataplex_util
+from googlecloudsdk.api_lib.util import exceptions as gcloud_exception
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.dataplex import resource_args
+from googlecloudsdk.core import log
+
+
+@base.ReleaseTracks(base.ReleaseTrack.ALPHA, base.ReleaseTrack.GA)
+@base.DefaultUniverseOnly
+class Create(base.Command):
+  """Create a Dataplex encryption config resource.
+
+  An EncryptionConfig is created only for CMEK opted in organizations.
+  """
+
+  detailed_help = {
+      'EXAMPLES': """\
+            To create an EncryptionConfig `default` in organization `test-org-id` at location `us-central1` with key `test-key`, run:
+            $ {command} default --location=us-central1 --organization=test-org-id --key='test-key'
+            """,
+  }
+
+  @staticmethod
+  def Args(parser):
+    resource_args.AddEncryptionConfigResourceArg(parser, 'to create.')
+    parser.add_argument(
+        '--key',
+        required=False,
+        help='The KMS key to use for encryption.',
+    )
+
+  @gcloud_exception.CatchHTTPErrorRaiseHTTPException(
+      'Status code: {status_code}. {status_message}.'
+  )
+  def Run(self, args):
+    encryption_config_ref = args.CONCEPTS.encryption_config.Parse()
+    dataplex_client = dataplex_util.GetClientInstance()
+    dataplex_client.organizations_locations_encryptionConfigs.Create(
+        dataplex_util.GetMessageModule().DataplexOrganizationsLocationsEncryptionConfigsCreateRequest(
+            encryptionConfigId=encryption_config_ref.Name(),
+            parent=encryption_config_ref.Parent().RelativeName(),
+            googleCloudDataplexV1EncryptionConfig=encryption_config.GenerateEncryptionConfigForCreateRequest(
+                args
+            ),
+        )
+    )
+    # TODO(b/388204419): Add support for waiting for operation to complete.
+    log.status.Print(
+        'Encryption Config is saved successfully. Please use gcloud describe'
+        ' command to check the data encryption status after sometime.'
+    )
+    return

gcloud auth application-default login/google-cloud-sdk/lib/surface/dataplex/encryption_config/describe.yaml

@@ -0,0 +1,20 @@
+- release_tracks: [ALPHA, GA]
+  help_text:
+    brief: |
+      Describe an EncryptionConfig.
+    description: |
+      Describe an EncryptionConfig.
+      Displays all the details of an EncryptionConfig used for CMEK with valid organization and location.
+    examples: |
+      To describe an EncryptionConfig:
+      $ {command} default --location=us-central1 --organization=test-org
+  request:
+    ALPHA:
+      api_version: v1
+    collection: dataplex.organizations.locations.encryptionConfigs
+    method: get
+  arguments:
+    resource:
+      help_text: |
+        encryption_config you want to Describe
+      spec: !REF googlecloudsdk.command_lib.dataplex.resources:encryption_config

gcloud auth application-default login/google-cloud-sdk/lib/surface/dataplex/encryption_config/update.py

@@ -0,0 +1,75 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google Inc. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""`gcloud dataplex encryption-config update` command."""
+
+from googlecloudsdk.api_lib.dataplex import encryption_config
+from googlecloudsdk.api_lib.dataplex import util as dataplex_api_util
+from googlecloudsdk.api_lib.util import exceptions as gcloud_exception
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.dataplex import resource_args
+from googlecloudsdk.core import log
+
+
+@base.ReleaseTracks(base.ReleaseTrack.ALPHA, base.ReleaseTrack.GA)
+@base.DefaultUniverseOnly
+class Update(base.UpdateCommand):
+  """Update an Encryption Config."""
+
+  detailed_help = {
+      'EXAMPLES': """\
+          To update EncryptionConfig in organization `123` and location `us-central1`, run:
+
+            $ {command} organizations/123/locations/us-central1/encryptionConfigs/default --enable-metastore-encryption
+          """,
+  }
+
+  @staticmethod
+  def Args(parser):
+    resource_args.AddEncryptionConfigResourceArg(parser, 'to update.')
+    parser.add_argument(
+        '--enable-metastore-encryption',
+        default=False,
+        action='store_true',
+        help=(
+            'Helps user to explicitly enable cmek encryption for dataplex'
+            ' metadata storage.'
+        ),
+    )
+
+  @gcloud_exception.CatchHTTPErrorRaiseHTTPException(
+      'Status code: {status_code}. {status_message}.'
+  )
+  def Run(self, args):
+    if not args.enable_metastore_encryption:
+      log.status.Print(
+          'There is no update for the EncryptionConfig.'
+      )
+      return
+    update_mask = encryption_config.GenerateUpdateMask(args)
+    encryption_config_ref = args.CONCEPTS.encryption_config.Parse()
+    dataplex_client = dataplex_api_util.GetClientInstance()
+    dataplex_client.organizations_locations_encryptionConfigs.Patch(
+        dataplex_api_util.GetMessageModule().DataplexOrganizationsLocationsEncryptionConfigsPatchRequest(
+            name=encryption_config_ref.RelativeName(),
+            updateMask=','.join(update_mask),
+            googleCloudDataplexV1EncryptionConfig=encryption_config.GenerateEncryptionConfigForUpdateRequest(
+                args
+            ),
+        ))
+    log.status.Print(
+        'Successfully updated the Encryption Config. Please use the gcloud '
+        'describe to check the latest update of data encryption'
+    )
+    return