feat: Add new gcloud commands, API clients, and third-party libraries across various services.

gcloud auth application-default login/google-cloud-sdk/lib/surface/kms/key_handles/__init__.py

@@ -0,0 +1,44 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2024 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""The command group for KeyHandle resources."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.api_lib.cloudkms import base as cloudkms_base
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.kms import flags
+from googlecloudsdk.core import resources
+
+
+@base.UniverseCompatible
+@base.ReleaseTracks(
+    base.ReleaseTrack.GA, base.ReleaseTrack.BETA, base.ReleaseTrack.ALPHA
+)
+class KeyHandles(base.Group):
+  """Create and manage KeyHandle resources.
+
+  A KeyHandle is a resource which contains a reference to a KMS CryptoKey
+  resource that can be used through existing CMEK channels
+  """
+
+  category = base.IDENTITY_AND_SECURITY_CATEGORY
+
+  @classmethod
+  def Args(cls, parser):
+    parser.display_info.AddUriFunc(
+        cloudkms_base.MakeGetUriFunc(flags.KEY_HANDLE_COLLECTION)
+    )

gcloud auth application-default login/google-cloud-sdk/lib/surface/kms/key_handles/create.py

@@ -0,0 +1,90 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2024 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Create a key handle."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.api_lib.cloudkms import base as cloudkms_base
+from googlecloudsdk.api_lib.util import waiter
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.kms import flags
+from googlecloudsdk.core import log
+from googlecloudsdk.core import resources
+
+
+@base.UniverseCompatible
+class Create(base.CreateCommand):
+  """Create a new KeyHandle.
+
+  Creates a new KeyHandle, triggering the provisioning of a new CryptoKey for
+  CMEK use with the given resource type in the configured key project and the
+  same location
+
+  ## EXAMPLES
+
+  The following command creates a KeyHandle named `my-key-handle` within the
+  location `global` for the resource type `compute.googleapis.com/Disk`:
+
+    $ {command} --key-handle-id=my-key-handle --my-key-handle --location=global
+    --resource-type=compute.googleapis.com/Disk
+
+  In case we want to generate a random KeyHandle id, we can use the
+  `--generate-key-handle-id` flag instead of the `--key-handle-id` flag.
+  """
+
+  @staticmethod
+  def Args(parser):
+
+    flags.AddCreateKeyHandleFlags(parser)
+    parser.display_info.AddCacheUpdater(flags.KeyHandleCompleter)
+
+  def Run(self, args):
+    client = cloudkms_base.GetClientInstance()
+    messages = cloudkms_base.GetMessagesModule()
+
+    location_ref = args.CONCEPTS.location.Parse()
+    if args.key_handle_id:
+      req = messages.CloudkmsProjectsLocationsKeyHandlesCreateRequest(
+          parent=location_ref.RelativeName(),
+          keyHandleId=args.key_handle_id,
+          keyHandle=messages.KeyHandle(resourceTypeSelector=args.resource_type),
+      )
+    else:
+      req = messages.CloudkmsProjectsLocationsKeyHandlesCreateRequest(
+          parent=location_ref.RelativeName(),
+          keyHandle=messages.KeyHandle(resourceTypeSelector=args.resource_type),
+      )
+
+    operation = client.projects_locations_keyHandles.Create(req)
+    operation_ref = resources.REGISTRY.ParseRelativeName(
+        operation.name, collection='cloudkms.projects.locations.operations'
+    )
+
+    created_key_handle = waiter.WaitFor(
+        waiter.CloudOperationPoller(
+            client.projects_locations_keyHandles,
+            client.projects_locations_operations,
+        ),
+        operation_ref,
+        'Waiting for KeyHandle to be created.',
+    )
+
+    log.CreatedResource(created_key_handle.name, kind='KeyHandle')
+    log.status.Print(
+        'The corresponding CryptoKey is: {0}'.format(created_key_handle.kmsKey)
+    )
+    return created_key_handle

gcloud auth application-default login/google-cloud-sdk/lib/surface/kms/key_handles/describe.yaml

@@ -0,0 +1,18 @@
+- release_tracks: [ALPHA, BETA, GA]
+
+  help_text:
+    brief: Get metadata for a KeyHandle.
+    description: Get metadata for a KeyHandle.
+    examples: |
+     The following command gets metadata for a KeyHandle named `my-key-handle` in the locations
+     `us-central1`.
+
+      $ {command} my-key-handle --location=us-central1
+
+  request:
+    collection: cloudkms.projects.locations.keyHandles
+
+  arguments:
+    resource:
+      help_text: The KeyHandle to get metadata for.
+      spec: !REF googlecloudsdk.command_lib.kms.resources:key_handle

gcloud auth application-default login/google-cloud-sdk/lib/surface/kms/key_handles/list.py

@@ -0,0 +1,73 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2024 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""List keyhandles within a project and location."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from apitools.base.py import list_pager
+from googlecloudsdk.api_lib.cloudkms import base as cloudkms_base
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.kms import flags
+from googlecloudsdk.command_lib.kms import resource_args
+
+
+@base.UniverseCompatible
+class List(base.ListCommand):
+  """List KeyHandle resources within a project and location.
+
+  Lists all KeyHandle resources within a given project and location.
+  Addtionally, can filter the list.
+
+  ## EXAMPLES
+
+  The following command lists a maximum of five KeyHandle resources in the
+  location `global`:
+
+    $ {command} --location=global --limit=5
+
+  The following command lists all KeyHandle resources in the location `global`
+  that have a resource type selector of `compute.googleapis.com/Instance`:
+
+    $ {command} --location=global
+    --resource-type=compute.googleapis.com/Instance
+  """
+
+  @staticmethod
+  def Args(parser):
+    resource_args.AddKmsLocationResourceArgForKMS(parser, True, '--location')
+    flags.AddResourceTypeSelectorFlag(parser, True)
+
+    parser.display_info.AddFormat('table(name, kmsKey, resourceTypeSelector)')
+
+  def Run(self, args):
+    client = cloudkms_base.GetClientInstance()
+    messages = cloudkms_base.GetMessagesModule()
+    location_ref = args.CONCEPTS.location.Parse()
+
+    filter_str = f'resource_type_selector="{args.resource_type}"'
+
+    request = messages.CloudkmsProjectsLocationsKeyHandlesListRequest(
+        parent=location_ref.RelativeName(), filter=filter_str
+    )
+
+    return list_pager.YieldFromList(
+        client.projects_locations_keyHandles,
+        request,
+        field='keyHandles',
+        limit=args.limit,
+        batch_size_attribute='pageSize',
+    )