feat: update libraries and clients for Managed Kafka

Google APIs · copybara-github · commit e5e971d3d2f7 · 2025-07-07T07:18:13.000-07:00
PiperOrigin-RevId: 780098649
diff --git a/google/cloud/managedkafka/v1/BUILD.bazel b/google/cloud/managedkafka/v1/BUILD.bazel
@@ -342,7 +342,6 @@ load(
 
 csharp_proto_library(
     name = "managedkafka_csharp_proto",
-    extra_opts = [],
     deps = [":managedkafka_proto"],
 )
 
diff --git a/google/cloud/managedkafka/v1/managedkafka_v1_grpc_service_config.json b/google/cloud/managedkafka/v1/managedkafka_v1_grpc_service_config.json
@@ -41,78 +41,6 @@
         {
           "service": "google.cloud.managedkafka.v1.ManagedKafkaConnect",
           "method": "GetConnector"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "ListSchemaRegistries"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "GetSchemaRegistry"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "ListContexts"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "GetContext"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "GetSchema"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "GetRawSchema"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "ListSchemaVersions"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "ListSchemaTypes"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "ListSubjects"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "ListSubjectsBySchemaId"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "LookUpVersion"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "GetVersion"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "GetRawSchemaVersion"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "ListVersions"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "ListReferencedSchemas"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "CheckCompatibility"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "GetSchemaConfig"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "GetSchemaMode"
         }
       ],
       "timeout": "60s",
@@ -201,42 +129,6 @@
         {
           "service": "google.cloud.managedkafka.v1.ManagedKafkaConnect",
           "method": "StopConnector"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "CreateSchemaRegistry"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "DeleteSchemaRegistry"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "CreateContext"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "DeleteSubject"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "CreateVersion"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "DeleteVersion"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "UpdateSchemaConfig"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "DeleteSchemaConfig"
-        },
-        {
-          "service": "google.cloud.managedkafka.v1.ManagedSchemaRegistry",
-          "method": "UpdateSchemaMode"
         }
       ],
       "timeout": "60s"
diff --git a/google/cloud/managedkafka/v1/resources.proto b/google/cloud/managedkafka/v1/resources.proto
@@ -101,6 +101,9 @@ message Cluster {
 
   // Output only. Reserved for future use.
   optional bool satisfies_pzs = 12 [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Optional. TLS configuration for the Kafka cluster.
+  TlsConfig tls_config = 13 [(google.api.field_behavior) = OPTIONAL];
 }
 
 // A capacity configuration of a Kafka cluster.
@@ -175,6 +178,48 @@ message GcpConfig {
   ];
 }
 
+// The TLS configuration for the Kafka cluster.
+message TlsConfig {
+  // Optional. The configuration of the broker truststore. If specified, clients
+  // can use mTLS for authentication.
+  TrustConfig trust_config = 1 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. A list of rules for mapping from SSL principal names to
+  // short names. These are applied in order by Kafka.
+  // Refer to the Apache Kafka documentation for `ssl.principal.mapping.rules`
+  // for the precise formatting details and syntax.
+  // Example: "RULE:^CN=(.*?),OU=ServiceUsers.*$/$1@example.com/,DEFAULT"
+  //
+  // This is a static Kafka broker configuration. Setting or modifying this
+  // field will trigger a rolling restart of the Kafka brokers to apply
+  // the change. An empty string means no rules are applied (Kafka default).
+  string ssl_principal_mapping_rules = 2
+      [(google.api.field_behavior) = OPTIONAL];
+}
+
+// Sources of CA certificates to install in the broker's truststore.
+message TrustConfig {
+  // A configuration for the Google Certificate Authority Service.
+  message CertificateAuthorityServiceConfig {
+    // Required. The name of the CA pool to pull CA certificates from.
+    // Structured like:
+    // projects/{project}/locations/{location}/caPools/{ca_pool}.
+    // The CA pool does not need to be in the same project or location as the
+    // Kafka cluster.
+    string ca_pool = 1 [
+      (google.api.field_behavior) = REQUIRED,
+      (google.api.resource_reference) = {
+        type: "privateca.googleapis.com/CaPool"
+      }
+    ];
+  }
+
+  // Optional. Configuration for the Google Certificate Authority Service.
+  // Maximum 10.
+  repeated CertificateAuthorityServiceConfig cas_configs = 1
+      [(google.api.field_behavior) = OPTIONAL];
+}
+
 // A Kafka topic in a given cluster.
 message Topic {
   option (google.api.resource) = {

Original file line number	Diff line number	Diff line change
`@@ -342,7 +342,6 @@ load(`
`342`	`342`
`343`	`343`	`csharp_proto_library(`
`344`	`344`	`name = "managedkafka_csharp_proto",`
`345`		`- extra_opts = [],`
`346`	`345`	`deps = [":managedkafka_proto"],`
`347`	`346`	`)`
`348`	`347`