chore: Update discovery artifacts (#1195)
* chore(accesscontextmanager): update the api
* chore(adexchangebuyer2): update the api
* chore(admin): update the api
* chore(alertcenter): update the api
* chore(analyticsadmin): update the api
* chore(analyticsdata): update the api
* chore(androidmanagement): update the api
* chore(apigateway): update the api
* chore(apigee): update the api
* chore(appengine): update the api
* chore(area120tables): update the api
* chore(artifactregistry): update the api
* chore(bigquery): update the api
* chore(bigqueryconnection): update the api
* chore(bigqueryreservation): update the api
* chore(billingbudgets): update the api
* chore(binaryauthorization): update the api
* chore(blogger): update the api
* chore(calendar): update the api
* chore(chat): update the api
* chore(cloudasset): update the api
* chore(cloudbuild): update the api
* chore(cloudfunctions): update the api
* chore(cloudidentity): update the api
* chore(cloudkms): update the api
* chore(cloudresourcemanager): update the api
* chore(cloudscheduler): update the api
* chore(cloudtasks): update the api
* chore(composer): update the api
* chore(compute): update the api
* chore(container): update the api
* chore(containeranalysis): update the api
* chore(content): update the api
* chore(datacatalog): update the api
* chore(dataflow): update the api
* chore(datafusion): update the api
* chore(datamigration): update the api
* chore(dataproc): update the api
* chore(deploymentmanager): update the api
* chore(dialogflow): update the api
* chore(displayvideo): update the api
* chore(dlp): update the api
* chore(dns): update the api
* chore(documentai): update the api
* chore(eventarc): update the api
* chore(file): update the api
* chore(firebaseml): update the api
* chore(games): update the api
* chore(gameservices): update the api
* chore(genomics): update the api
* chore(healthcare): update the api
* chore(homegraph): update the api
* chore(iam): update the api
* chore(iap): update the api
* chore(jobs): update the api
* chore(lifesciences): update the api
* chore(localservices): update the api
* chore(managedidentities): update the api
* chore(manufacturers): update the api
* chore(memcache): update the api
* chore(ml): update the api
* chore(monitoring): update the api
* chore(notebooks): update the api
* chore(osconfig): update the api
* chore(pagespeedonline): update the api
* chore(people): update the api
* chore(privateca): update the api
* chore(prod_tt_sasportal): update the api
* chore(pubsub): update the api
* chore(pubsublite): update the api
* chore(recommender): update the api
* chore(remotebuildexecution): update the api
* chore(reseller): update the api
* chore(run): update the api
* chore(safebrowsing): update the api
* chore(sasportal): update the api
* chore(searchconsole): update the api
* chore(secretmanager): update the api
* chore(securitycenter): update the api
* chore(serviceconsumermanagement): update the api
* chore(servicecontrol): update the api
* chore(servicenetworking): update the api
* chore(serviceusage): update the api
* chore(sheets): update the api
* chore(slides): update the api
* chore(spanner): update the api
* chore(speech): update the api
* chore(sqladmin): update the api
* chore(storage): update the api
* chore(storagetransfer): update the api
* chore(sts): update the api
* chore(tagmanager): update the api
* chore(testing): update the api
* chore(toolresults): update the api
* chore(transcoder): update the api
* chore(vectortile): update the api
* chore(videointelligence): update the api
* chore(vision): update the api
* chore(webmasters): update the api
* chore(workflowexecutions): update the api
* chore(youtube): update the api
diff --git a/docs/dyn/cloudbuild_v1.projects.triggers.html b/docs/dyn/cloudbuild_v1.projects.triggers.html
index d910459..5d7f247 100644
--- a/docs/dyn/cloudbuild_v1.projects.triggers.html
+++ b/docs/dyn/cloudbuild_v1.projects.triggers.html
@@ -98,6 +98,9 @@
<p class="toc_element">
<code><a href="#run">run(projectId, triggerId, body=None, x__xgafv=None)</a></code></p>
<p class="firstline">Runs a `BuildTrigger` at a particular source revision.</p>
+<p class="toc_element">
+ <code><a href="#webhook">webhook(projectId, trigger, body=None, secret=None, x__xgafv=None)</a></code></p>
+<p class="firstline">ReceiveTriggerWebhook [Experimental] is called when the API receives a webhook request targeted at a specific trigger.</p>
<h3>Method Details</h3>
<div class="method">
<code class="details" id="close">close()</code>
@@ -114,7 +117,7 @@
The object takes the form of:
{ # Configuration for an automated build in response to source repository changes.
- "build": { # A build resource in the Cloud Build API. At a high level, a `Build` describes where to find source code, how to build it (for example, the builder image to run on the source), and where to store the built artifacts. Fields can include the following variables, which will be expanded when the build is created: - $PROJECT_ID: the project ID of the build. - $BUILD_ID: the autogenerated ID of the build. - $REPO_NAME: the source repository name specified by RepoSource. - $BRANCH_NAME: the branch name specified by RepoSource. - $TAG_NAME: the tag name specified by RepoSource. - $REVISION_ID or $COMMIT_SHA: the commit SHA specified by RepoSource or resolved from the specified branch or tag. - $SHORT_SHA: first 7 characters of $REVISION_ID or $COMMIT_SHA. # Contents of the build template.
+ "build": { # A build resource in the Cloud Build API. At a high level, a `Build` describes where to find source code, how to build it (for example, the builder image to run on the source), and where to store the built artifacts. Fields can include the following variables, which will be expanded when the build is created: - $PROJECT_ID: the project ID of the build. - $PROJECT_NUMBER: the project number of the build. - $BUILD_ID: the autogenerated ID of the build. - $REPO_NAME: the source repository name specified by RepoSource. - $BRANCH_NAME: the branch name specified by RepoSource. - $TAG_NAME: the tag name specified by RepoSource. - $REVISION_ID or $COMMIT_SHA: the commit SHA specified by RepoSource or resolved from the specified branch or tag. - $SHORT_SHA: first 7 characters of $REVISION_ID or $COMMIT_SHA. # Contents of the build template.
"artifacts": { # Artifacts produced by a build that should be uploaded upon successful completion of all build steps. # Artifacts produced by the build that should be uploaded upon successful completion of all build steps.
"images": [ # A list of images to be pushed upon the successful completion of all build steps. The images will be pushed using the builder service account's credentials. The digests of the pushed images will be stored in the Build resource's results field. If any of the images fail to be pushed, the build is marked FAILURE.
"A String",
@@ -130,6 +133,22 @@
},
},
},
+ "availableSecrets": { # Secrets and secret environment variables. # Secrets and secret environment variables.
+ "inline": [ # Secrets encrypted with KMS key and the associated secret environment variable.
+ { # Pairs a set of secret environment variables mapped to encrypted values with the Cloud KMS key to use to decrypt the value.
+ "envMap": { # Map of environment variable name to its encrypted value. Secret environment variables must be unique across all of a build's secrets, and must be used by at least one build step. Values can be at most 64 KB in size. There can be at most 100 secret values across all of a build's secrets.
+ "a_key": "A String",
+ },
+ "kmsKeyName": "A String", # Resource name of Cloud KMS crypto key to decrypt the encrypted value. In format: projects/*/locations/*/keyRings/*/cryptoKeys/*
+ },
+ ],
+ "secretManager": [ # Secrets in Secret Manager and associated secret environment variable.
+ { # Pairs a secret environment variable with a SecretVersion in Secret Manager.
+ "env": "A String", # Environment variable name to associate with the secret. Secret environment variables must be unique across all of a build's secrets, and must be used by at least one build step.
+ "versionName": "A String", # Resource name of the SecretVersion. In format: projects/*/secrets/*/versions/*
+ },
+ ],
+ },
"buildTriggerId": "A String", # Output only. The ID of the `BuildTrigger` that triggered this build, if it was triggered automatically.
"createTime": "A String", # Output only. Time at which the request to create the build was received.
"finishTime": "A String", # Output only. Time at which execution of the build was finished. The difference between finish_time and start_time is the duration of the build's execution.
@@ -163,7 +182,7 @@
"path": "A String", # Path at which to mount the volume. Paths must be absolute and cannot conflict with other volume paths on the same build step or with certain reserved volume paths.
},
],
- "workerPool": "A String", # Option to specify a `WorkerPool` for the build. Format: projects/{project}/locations/{location}/workerPools/{workerPool} This field is experimental.
+ "workerPool": "A String", # Option to specify a `WorkerPool` for the build. Format: projects/{project}/locations/{location}/workerPools/{workerPool} This field is in beta and is available only to restricted users.
},
"projectId": "A String", # Output only. ID of the project.
"queueTtl": "A String", # TTL in queue for this build. If provided and the build is enqueued longer than this value, the build will expire and the build status will be `EXPIRED`. The TTL starts ticking from create_time.
@@ -191,15 +210,15 @@
],
"numArtifacts": "A String", # Number of artifacts uploaded. Only populated when artifacts are uploaded.
},
- "secrets": [ # Secrets to decrypt using Cloud Key Management Service.
- { # Pairs a set of secret environment variables containing encrypted values with the Cloud KMS key to use to decrypt the value.
+ "secrets": [ # Secrets to decrypt using Cloud Key Management Service. Note: Secret Manager is the recommended technique for managing sensitive data with Cloud Build. Use `available_secrets` to configure builds to access secrets from Secret Manager. For instructions, see: https://cloud.google.com/cloud-build/docs/securing-builds/use-secrets
+ { # Pairs a set of secret environment variables containing encrypted values with the Cloud KMS key to use to decrypt the value. Note: Use `kmsKeyName` with `available_secrets` instead of using `kmsKeyName` with `secret`. For instructions see: https://cloud.google.com/cloud-build/docs/securing-builds/use-encrypted-credentials.
"kmsKeyName": "A String", # Cloud KMS key name to use to decrypt these envs.
"secretEnv": { # Map of environment variable name to its encrypted value. Secret environment variables must be unique across all of a build's secrets, and must be used by at least one build step. Values can be at most 64 KB in size. There can be at most 100 secret values across all of a build's secrets.
"a_key": "A String",
},
},
],
- "serviceAccount": "A String", # IAM service account whose credentials will be used at build runtime. Must be of the format `projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}`. ACCOUNT can be email address or uniqueId of the service account. This field is in alpha and is not publicly available.
+ "serviceAccount": "A String", # IAM service account whose credentials will be used at build runtime. Must be of the format `projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}`. ACCOUNT can be email address or uniqueId of the service account. This field is in beta.
"source": { # Location of the source in a supported storage service. # The location of the source files to build.
"repoSource": { # Location of the source in a Google Cloud Source Repository. # If provided, get the source from this location in a Cloud Source Repository.
"branchName": "A String", # Regex matching branches to build. The syntax of the regular expressions accepted is the syntax accepted by RE2 and described at https://github.com/google/re2/wiki/Syntax
@@ -207,7 +226,7 @@
"dir": "A String", # Directory, relative to the source root, in which to run the build. This must be a relative path. If a step's `dir` is specified and is an absolute path, this value is ignored for that step's execution.
"invertRegex": True or False, # Only trigger a build if the revision regex does NOT match the revision regex.
"projectId": "A String", # ID of the project that owns the Cloud Source Repository. If omitted, the project ID requesting the build is assumed.
- "repoName": "A String", # Required. Name of the Cloud Source Repository.
+ "repoName": "A String", # Name of the Cloud Source Repository.
"substitutions": { # Substitutions to use in a triggered build. Should only be used with RunBuildTrigger
"a_key": "A String",
},
@@ -236,7 +255,7 @@
"dir": "A String", # Directory, relative to the source root, in which to run the build. This must be a relative path. If a step's `dir` is specified and is an absolute path, this value is ignored for that step's execution.
"invertRegex": True or False, # Only trigger a build if the revision regex does NOT match the revision regex.
"projectId": "A String", # ID of the project that owns the Cloud Source Repository. If omitted, the project ID requesting the build is assumed.
- "repoName": "A String", # Required. Name of the Cloud Source Repository.
+ "repoName": "A String", # Name of the Cloud Source Repository.
"substitutions": { # Substitutions to use in a triggered build. Should only be used with RunBuildTrigger
"a_key": "A String",
},
@@ -304,7 +323,7 @@
"createTime": "A String", # Output only. Time when the trigger was created.
"description": "A String", # Human-readable description of this trigger.
"disabled": True or False, # If true, the trigger will never automatically execute a build.
- "filename": "A String", # Path, from the source root, to a file whose contents is used for the template.
+ "filename": "A String", # Path, from the source root, to the build configuration file (i.e. cloudbuild.yaml).
"github": { # GitHubEventsConfig describes the configuration of a trigger that creates a build whenever a GitHub event is received. This message is experimental. # GitHubEventsConfig describes the configuration of a trigger that creates a build whenever a GitHub event is received. Mutually exclusive with `trigger_template`.
"installationId": "A String", # The installationID that emits the GitHub event.
"name": "A String", # Name of the repository. For example: The name for https://github.com/googlecloudplatform/cloud-builders is "cloud-builders".
@@ -340,7 +359,7 @@
"dir": "A String", # Directory, relative to the source root, in which to run the build. This must be a relative path. If a step's `dir` is specified and is an absolute path, this value is ignored for that step's execution.
"invertRegex": True or False, # Only trigger a build if the revision regex does NOT match the revision regex.
"projectId": "A String", # ID of the project that owns the Cloud Source Repository. If omitted, the project ID requesting the build is assumed.
- "repoName": "A String", # Required. Name of the Cloud Source Repository.
+ "repoName": "A String", # Name of the Cloud Source Repository.
"substitutions": { # Substitutions to use in a triggered build. Should only be used with RunBuildTrigger
"a_key": "A String",
},
@@ -357,7 +376,7 @@
An object of the form:
{ # Configuration for an automated build in response to source repository changes.
- "build": { # A build resource in the Cloud Build API. At a high level, a `Build` describes where to find source code, how to build it (for example, the builder image to run on the source), and where to store the built artifacts. Fields can include the following variables, which will be expanded when the build is created: - $PROJECT_ID: the project ID of the build. - $BUILD_ID: the autogenerated ID of the build. - $REPO_NAME: the source repository name specified by RepoSource. - $BRANCH_NAME: the branch name specified by RepoSource. - $TAG_NAME: the tag name specified by RepoSource. - $REVISION_ID or $COMMIT_SHA: the commit SHA specified by RepoSource or resolved from the specified branch or tag. - $SHORT_SHA: first 7 characters of $REVISION_ID or $COMMIT_SHA. # Contents of the build template.
+ "build": { # A build resource in the Cloud Build API. At a high level, a `Build` describes where to find source code, how to build it (for example, the builder image to run on the source), and where to store the built artifacts. Fields can include the following variables, which will be expanded when the build is created: - $PROJECT_ID: the project ID of the build. - $PROJECT_NUMBER: the project number of the build. - $BUILD_ID: the autogenerated ID of the build. - $REPO_NAME: the source repository name specified by RepoSource. - $BRANCH_NAME: the branch name specified by RepoSource. - $TAG_NAME: the tag name specified by RepoSource. - $REVISION_ID or $COMMIT_SHA: the commit SHA specified by RepoSource or resolved from the specified branch or tag. - $SHORT_SHA: first 7 characters of $REVISION_ID or $COMMIT_SHA. # Contents of the build template.
"artifacts": { # Artifacts produced by a build that should be uploaded upon successful completion of all build steps. # Artifacts produced by the build that should be uploaded upon successful completion of all build steps.
"images": [ # A list of images to be pushed upon the successful completion of all build steps. The images will be pushed using the builder service account's credentials. The digests of the pushed images will be stored in the Build resource's results field. If any of the images fail to be pushed, the build is marked FAILURE.
"A String",
@@ -373,6 +392,22 @@
},
},
},
+ "availableSecrets": { # Secrets and secret environment variables. # Secrets and secret environment variables.
+ "inline": [ # Secrets encrypted with KMS key and the associated secret environment variable.
+ { # Pairs a set of secret environment variables mapped to encrypted values with the Cloud KMS key to use to decrypt the value.
+ "envMap": { # Map of environment variable name to its encrypted value. Secret environment variables must be unique across all of a build's secrets, and must be used by at least one build step. Values can be at most 64 KB in size. There can be at most 100 secret values across all of a build's secrets.
+ "a_key": "A String",
+ },
+ "kmsKeyName": "A String", # Resource name of Cloud KMS crypto key to decrypt the encrypted value. In format: projects/*/locations/*/keyRings/*/cryptoKeys/*
+ },
+ ],
+ "secretManager": [ # Secrets in Secret Manager and associated secret environment variable.
+ { # Pairs a secret environment variable with a SecretVersion in Secret Manager.
+ "env": "A String", # Environment variable name to associate with the secret. Secret environment variables must be unique across all of a build's secrets, and must be used by at least one build step.
+ "versionName": "A String", # Resource name of the SecretVersion. In format: projects/*/secrets/*/versions/*
+ },
+ ],
+ },
"buildTriggerId": "A String", # Output only. The ID of the `BuildTrigger` that triggered this build, if it was triggered automatically.
"createTime": "A String", # Output only. Time at which the request to create the build was received.
"finishTime": "A String", # Output only. Time at which execution of the build was finished. The difference between finish_time and start_time is the duration of the build's execution.
@@ -406,7 +441,7 @@
"path": "A String", # Path at which to mount the volume. Paths must be absolute and cannot conflict with other volume paths on the same build step or with certain reserved volume paths.
},
],
- "workerPool": "A String", # Option to specify a `WorkerPool` for the build. Format: projects/{project}/locations/{location}/workerPools/{workerPool} This field is experimental.
+ "workerPool": "A String", # Option to specify a `WorkerPool` for the build. Format: projects/{project}/locations/{location}/workerPools/{workerPool} This field is in beta and is available only to restricted users.
},
"projectId": "A String", # Output only. ID of the project.
"queueTtl": "A String", # TTL in queue for this build. If provided and the build is enqueued longer than this value, the build will expire and the build status will be `EXPIRED`. The TTL starts ticking from create_time.
@@ -434,15 +469,15 @@
],
"numArtifacts": "A String", # Number of artifacts uploaded. Only populated when artifacts are uploaded.
},
- "secrets": [ # Secrets to decrypt using Cloud Key Management Service.
- { # Pairs a set of secret environment variables containing encrypted values with the Cloud KMS key to use to decrypt the value.
+ "secrets": [ # Secrets to decrypt using Cloud Key Management Service. Note: Secret Manager is the recommended technique for managing sensitive data with Cloud Build. Use `available_secrets` to configure builds to access secrets from Secret Manager. For instructions, see: https://cloud.google.com/cloud-build/docs/securing-builds/use-secrets
+ { # Pairs a set of secret environment variables containing encrypted values with the Cloud KMS key to use to decrypt the value. Note: Use `kmsKeyName` with `available_secrets` instead of using `kmsKeyName` with `secret`. For instructions see: https://cloud.google.com/cloud-build/docs/securing-builds/use-encrypted-credentials.
"kmsKeyName": "A String", # Cloud KMS key name to use to decrypt these envs.
"secretEnv": { # Map of environment variable name to its encrypted value. Secret environment variables must be unique across all of a build's secrets, and must be used by at least one build step. Values can be at most 64 KB in size. There can be at most 100 secret values across all of a build's secrets.
"a_key": "A String",
},
},
],
- "serviceAccount": "A String", # IAM service account whose credentials will be used at build runtime. Must be of the format `projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}`. ACCOUNT can be email address or uniqueId of the service account. This field is in alpha and is not publicly available.
+ "serviceAccount": "A String", # IAM service account whose credentials will be used at build runtime. Must be of the format `projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}`. ACCOUNT can be email address or uniqueId of the service account. This field is in beta.
"source": { # Location of the source in a supported storage service. # The location of the source files to build.
"repoSource": { # Location of the source in a Google Cloud Source Repository. # If provided, get the source from this location in a Cloud Source Repository.
"branchName": "A String", # Regex matching branches to build. The syntax of the regular expressions accepted is the syntax accepted by RE2 and described at https://github.com/google/re2/wiki/Syntax
@@ -450,7 +485,7 @@
"dir": "A String", # Directory, relative to the source root, in which to run the build. This must be a relative path. If a step's `dir` is specified and is an absolute path, this value is ignored for that step's execution.
"invertRegex": True or False, # Only trigger a build if the revision regex does NOT match the revision regex.
"projectId": "A String", # ID of the project that owns the Cloud Source Repository. If omitted, the project ID requesting the build is assumed.
- "repoName": "A String", # Required. Name of the Cloud Source Repository.
+ "repoName": "A String", # Name of the Cloud Source Repository.
"substitutions": { # Substitutions to use in a triggered build. Should only be used with RunBuildTrigger
"a_key": "A String",
},
@@ -479,7 +514,7 @@
"dir": "A String", # Directory, relative to the source root, in which to run the build. This must be a relative path. If a step's `dir` is specified and is an absolute path, this value is ignored for that step's execution.
"invertRegex": True or False, # Only trigger a build if the revision regex does NOT match the revision regex.
"projectId": "A String", # ID of the project that owns the Cloud Source Repository. If omitted, the project ID requesting the build is assumed.
- "repoName": "A String", # Required. Name of the Cloud Source Repository.
+ "repoName": "A String", # Name of the Cloud Source Repository.
"substitutions": { # Substitutions to use in a triggered build. Should only be used with RunBuildTrigger
"a_key": "A String",
},
@@ -547,7 +582,7 @@
"createTime": "A String", # Output only. Time when the trigger was created.
"description": "A String", # Human-readable description of this trigger.
"disabled": True or False, # If true, the trigger will never automatically execute a build.
- "filename": "A String", # Path, from the source root, to a file whose contents is used for the template.
+ "filename": "A String", # Path, from the source root, to the build configuration file (i.e. cloudbuild.yaml).
"github": { # GitHubEventsConfig describes the configuration of a trigger that creates a build whenever a GitHub event is received. This message is experimental. # GitHubEventsConfig describes the configuration of a trigger that creates a build whenever a GitHub event is received. Mutually exclusive with `trigger_template`.
"installationId": "A String", # The installationID that emits the GitHub event.
"name": "A String", # Name of the repository. For example: The name for https://github.com/googlecloudplatform/cloud-builders is "cloud-builders".
@@ -583,7 +618,7 @@
"dir": "A String", # Directory, relative to the source root, in which to run the build. This must be a relative path. If a step's `dir` is specified and is an absolute path, this value is ignored for that step's execution.
"invertRegex": True or False, # Only trigger a build if the revision regex does NOT match the revision regex.
"projectId": "A String", # ID of the project that owns the Cloud Source Repository. If omitted, the project ID requesting the build is assumed.
- "repoName": "A String", # Required. Name of the Cloud Source Repository.
+ "repoName": "A String", # Name of the Cloud Source Repository.
"substitutions": { # Substitutions to use in a triggered build. Should only be used with RunBuildTrigger
"a_key": "A String",
},
@@ -627,7 +662,7 @@
An object of the form:
{ # Configuration for an automated build in response to source repository changes.
- "build": { # A build resource in the Cloud Build API. At a high level, a `Build` describes where to find source code, how to build it (for example, the builder image to run on the source), and where to store the built artifacts. Fields can include the following variables, which will be expanded when the build is created: - $PROJECT_ID: the project ID of the build. - $BUILD_ID: the autogenerated ID of the build. - $REPO_NAME: the source repository name specified by RepoSource. - $BRANCH_NAME: the branch name specified by RepoSource. - $TAG_NAME: the tag name specified by RepoSource. - $REVISION_ID or $COMMIT_SHA: the commit SHA specified by RepoSource or resolved from the specified branch or tag. - $SHORT_SHA: first 7 characters of $REVISION_ID or $COMMIT_SHA. # Contents of the build template.
+ "build": { # A build resource in the Cloud Build API. At a high level, a `Build` describes where to find source code, how to build it (for example, the builder image to run on the source), and where to store the built artifacts. Fields can include the following variables, which will be expanded when the build is created: - $PROJECT_ID: the project ID of the build. - $PROJECT_NUMBER: the project number of the build. - $BUILD_ID: the autogenerated ID of the build. - $REPO_NAME: the source repository name specified by RepoSource. - $BRANCH_NAME: the branch name specified by RepoSource. - $TAG_NAME: the tag name specified by RepoSource. - $REVISION_ID or $COMMIT_SHA: the commit SHA specified by RepoSource or resolved from the specified branch or tag. - $SHORT_SHA: first 7 characters of $REVISION_ID or $COMMIT_SHA. # Contents of the build template.
"artifacts": { # Artifacts produced by a build that should be uploaded upon successful completion of all build steps. # Artifacts produced by the build that should be uploaded upon successful completion of all build steps.
"images": [ # A list of images to be pushed upon the successful completion of all build steps. The images will be pushed using the builder service account's credentials. The digests of the pushed images will be stored in the Build resource's results field. If any of the images fail to be pushed, the build is marked FAILURE.
"A String",
@@ -643,6 +678,22 @@
},
},
},
+ "availableSecrets": { # Secrets and secret environment variables. # Secrets and secret environment variables.
+ "inline": [ # Secrets encrypted with KMS key and the associated secret environment variable.
+ { # Pairs a set of secret environment variables mapped to encrypted values with the Cloud KMS key to use to decrypt the value.
+ "envMap": { # Map of environment variable name to its encrypted value. Secret environment variables must be unique across all of a build's secrets, and must be used by at least one build step. Values can be at most 64 KB in size. There can be at most 100 secret values across all of a build's secrets.
+ "a_key": "A String",
+ },
+ "kmsKeyName": "A String", # Resource name of Cloud KMS crypto key to decrypt the encrypted value. In format: projects/*/locations/*/keyRings/*/cryptoKeys/*
+ },
+ ],
+ "secretManager": [ # Secrets in Secret Manager and associated secret environment variable.
+ { # Pairs a secret environment variable with a SecretVersion in Secret Manager.
+ "env": "A String", # Environment variable name to associate with the secret. Secret environment variables must be unique across all of a build's secrets, and must be used by at least one build step.
+ "versionName": "A String", # Resource name of the SecretVersion. In format: projects/*/secrets/*/versions/*
+ },
+ ],
+ },
"buildTriggerId": "A String", # Output only. The ID of the `BuildTrigger` that triggered this build, if it was triggered automatically.
"createTime": "A String", # Output only. Time at which the request to create the build was received.
"finishTime": "A String", # Output only. Time at which execution of the build was finished. The difference between finish_time and start_time is the duration of the build's execution.
@@ -676,7 +727,7 @@
"path": "A String", # Path at which to mount the volume. Paths must be absolute and cannot conflict with other volume paths on the same build step or with certain reserved volume paths.
},
],
- "workerPool": "A String", # Option to specify a `WorkerPool` for the build. Format: projects/{project}/locations/{location}/workerPools/{workerPool} This field is experimental.
+ "workerPool": "A String", # Option to specify a `WorkerPool` for the build. Format: projects/{project}/locations/{location}/workerPools/{workerPool} This field is in beta and is available only to restricted users.
},
"projectId": "A String", # Output only. ID of the project.
"queueTtl": "A String", # TTL in queue for this build. If provided and the build is enqueued longer than this value, the build will expire and the build status will be `EXPIRED`. The TTL starts ticking from create_time.
@@ -704,15 +755,15 @@
],
"numArtifacts": "A String", # Number of artifacts uploaded. Only populated when artifacts are uploaded.
},
- "secrets": [ # Secrets to decrypt using Cloud Key Management Service.
- { # Pairs a set of secret environment variables containing encrypted values with the Cloud KMS key to use to decrypt the value.
+ "secrets": [ # Secrets to decrypt using Cloud Key Management Service. Note: Secret Manager is the recommended technique for managing sensitive data with Cloud Build. Use `available_secrets` to configure builds to access secrets from Secret Manager. For instructions, see: https://cloud.google.com/cloud-build/docs/securing-builds/use-secrets
+ { # Pairs a set of secret environment variables containing encrypted values with the Cloud KMS key to use to decrypt the value. Note: Use `kmsKeyName` with `available_secrets` instead of using `kmsKeyName` with `secret`. For instructions see: https://cloud.google.com/cloud-build/docs/securing-builds/use-encrypted-credentials.
"kmsKeyName": "A String", # Cloud KMS key name to use to decrypt these envs.
"secretEnv": { # Map of environment variable name to its encrypted value. Secret environment variables must be unique across all of a build's secrets, and must be used by at least one build step. Values can be at most 64 KB in size. There can be at most 100 secret values across all of a build's secrets.
"a_key": "A String",
},
},
],
- "serviceAccount": "A String", # IAM service account whose credentials will be used at build runtime. Must be of the format `projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}`. ACCOUNT can be email address or uniqueId of the service account. This field is in alpha and is not publicly available.
+ "serviceAccount": "A String", # IAM service account whose credentials will be used at build runtime. Must be of the format `projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}`. ACCOUNT can be email address or uniqueId of the service account. This field is in beta.
"source": { # Location of the source in a supported storage service. # The location of the source files to build.
"repoSource": { # Location of the source in a Google Cloud Source Repository. # If provided, get the source from this location in a Cloud Source Repository.
"branchName": "A String", # Regex matching branches to build. The syntax of the regular expressions accepted is the syntax accepted by RE2 and described at https://github.com/google/re2/wiki/Syntax
@@ -720,7 +771,7 @@
"dir": "A String", # Directory, relative to the source root, in which to run the build. This must be a relative path. If a step's `dir` is specified and is an absolute path, this value is ignored for that step's execution.
"invertRegex": True or False, # Only trigger a build if the revision regex does NOT match the revision regex.
"projectId": "A String", # ID of the project that owns the Cloud Source Repository. If omitted, the project ID requesting the build is assumed.
- "repoName": "A String", # Required. Name of the Cloud Source Repository.
+ "repoName": "A String", # Name of the Cloud Source Repository.
"substitutions": { # Substitutions to use in a triggered build. Should only be used with RunBuildTrigger
"a_key": "A String",
},
@@ -749,7 +800,7 @@
"dir": "A String", # Directory, relative to the source root, in which to run the build. This must be a relative path. If a step's `dir` is specified and is an absolute path, this value is ignored for that step's execution.
"invertRegex": True or False, # Only trigger a build if the revision regex does NOT match the revision regex.
"projectId": "A String", # ID of the project that owns the Cloud Source Repository. If omitted, the project ID requesting the build is assumed.
- "repoName": "A String", # Required. Name of the Cloud Source Repository.
+ "repoName": "A String", # Name of the Cloud Source Repository.
"substitutions": { # Substitutions to use in a triggered build. Should only be used with RunBuildTrigger
"a_key": "A String",
},
@@ -817,7 +868,7 @@
"createTime": "A String", # Output only. Time when the trigger was created.
"description": "A String", # Human-readable description of this trigger.
"disabled": True or False, # If true, the trigger will never automatically execute a build.
- "filename": "A String", # Path, from the source root, to a file whose contents is used for the template.
+ "filename": "A String", # Path, from the source root, to the build configuration file (i.e. cloudbuild.yaml).
"github": { # GitHubEventsConfig describes the configuration of a trigger that creates a build whenever a GitHub event is received. This message is experimental. # GitHubEventsConfig describes the configuration of a trigger that creates a build whenever a GitHub event is received. Mutually exclusive with `trigger_template`.
"installationId": "A String", # The installationID that emits the GitHub event.
"name": "A String", # Name of the repository. For example: The name for https://github.com/googlecloudplatform/cloud-builders is "cloud-builders".
@@ -853,7 +904,7 @@
"dir": "A String", # Directory, relative to the source root, in which to run the build. This must be a relative path. If a step's `dir` is specified and is an absolute path, this value is ignored for that step's execution.
"invertRegex": True or False, # Only trigger a build if the revision regex does NOT match the revision regex.
"projectId": "A String", # ID of the project that owns the Cloud Source Repository. If omitted, the project ID requesting the build is assumed.
- "repoName": "A String", # Required. Name of the Cloud Source Repository.
+ "repoName": "A String", # Name of the Cloud Source Repository.
"substitutions": { # Substitutions to use in a triggered build. Should only be used with RunBuildTrigger
"a_key": "A String",
},
@@ -882,7 +933,7 @@
"nextPageToken": "A String", # Token to receive the next page of results.
"triggers": [ # `BuildTriggers` for the project, sorted by `create_time` descending.
{ # Configuration for an automated build in response to source repository changes.
- "build": { # A build resource in the Cloud Build API. At a high level, a `Build` describes where to find source code, how to build it (for example, the builder image to run on the source), and where to store the built artifacts. Fields can include the following variables, which will be expanded when the build is created: - $PROJECT_ID: the project ID of the build. - $BUILD_ID: the autogenerated ID of the build. - $REPO_NAME: the source repository name specified by RepoSource. - $BRANCH_NAME: the branch name specified by RepoSource. - $TAG_NAME: the tag name specified by RepoSource. - $REVISION_ID or $COMMIT_SHA: the commit SHA specified by RepoSource or resolved from the specified branch or tag. - $SHORT_SHA: first 7 characters of $REVISION_ID or $COMMIT_SHA. # Contents of the build template.
+ "build": { # A build resource in the Cloud Build API. At a high level, a `Build` describes where to find source code, how to build it (for example, the builder image to run on the source), and where to store the built artifacts. Fields can include the following variables, which will be expanded when the build is created: - $PROJECT_ID: the project ID of the build. - $PROJECT_NUMBER: the project number of the build. - $BUILD_ID: the autogenerated ID of the build. - $REPO_NAME: the source repository name specified by RepoSource. - $BRANCH_NAME: the branch name specified by RepoSource. - $TAG_NAME: the tag name specified by RepoSource. - $REVISION_ID or $COMMIT_SHA: the commit SHA specified by RepoSource or resolved from the specified branch or tag. - $SHORT_SHA: first 7 characters of $REVISION_ID or $COMMIT_SHA. # Contents of the build template.
"artifacts": { # Artifacts produced by a build that should be uploaded upon successful completion of all build steps. # Artifacts produced by the build that should be uploaded upon successful completion of all build steps.
"images": [ # A list of images to be pushed upon the successful completion of all build steps. The images will be pushed using the builder service account's credentials. The digests of the pushed images will be stored in the Build resource's results field. If any of the images fail to be pushed, the build is marked FAILURE.
"A String",
@@ -898,6 +949,22 @@
},
},
},
+ "availableSecrets": { # Secrets and secret environment variables. # Secrets and secret environment variables.
+ "inline": [ # Secrets encrypted with KMS key and the associated secret environment variable.
+ { # Pairs a set of secret environment variables mapped to encrypted values with the Cloud KMS key to use to decrypt the value.
+ "envMap": { # Map of environment variable name to its encrypted value. Secret environment variables must be unique across all of a build's secrets, and must be used by at least one build step. Values can be at most 64 KB in size. There can be at most 100 secret values across all of a build's secrets.
+ "a_key": "A String",
+ },
+ "kmsKeyName": "A String", # Resource name of Cloud KMS crypto key to decrypt the encrypted value. In format: projects/*/locations/*/keyRings/*/cryptoKeys/*
+ },
+ ],
+ "secretManager": [ # Secrets in Secret Manager and associated secret environment variable.
+ { # Pairs a secret environment variable with a SecretVersion in Secret Manager.
+ "env": "A String", # Environment variable name to associate with the secret. Secret environment variables must be unique across all of a build's secrets, and must be used by at least one build step.
+ "versionName": "A String", # Resource name of the SecretVersion. In format: projects/*/secrets/*/versions/*
+ },
+ ],
+ },
"buildTriggerId": "A String", # Output only. The ID of the `BuildTrigger` that triggered this build, if it was triggered automatically.
"createTime": "A String", # Output only. Time at which the request to create the build was received.
"finishTime": "A String", # Output only. Time at which execution of the build was finished. The difference between finish_time and start_time is the duration of the build's execution.
@@ -931,7 +998,7 @@
"path": "A String", # Path at which to mount the volume. Paths must be absolute and cannot conflict with other volume paths on the same build step or with certain reserved volume paths.
},
],
- "workerPool": "A String", # Option to specify a `WorkerPool` for the build. Format: projects/{project}/locations/{location}/workerPools/{workerPool} This field is experimental.
+ "workerPool": "A String", # Option to specify a `WorkerPool` for the build. Format: projects/{project}/locations/{location}/workerPools/{workerPool} This field is in beta and is available only to restricted users.
},
"projectId": "A String", # Output only. ID of the project.
"queueTtl": "A String", # TTL in queue for this build. If provided and the build is enqueued longer than this value, the build will expire and the build status will be `EXPIRED`. The TTL starts ticking from create_time.
@@ -959,15 +1026,15 @@
],
"numArtifacts": "A String", # Number of artifacts uploaded. Only populated when artifacts are uploaded.
},
- "secrets": [ # Secrets to decrypt using Cloud Key Management Service.
- { # Pairs a set of secret environment variables containing encrypted values with the Cloud KMS key to use to decrypt the value.
+ "secrets": [ # Secrets to decrypt using Cloud Key Management Service. Note: Secret Manager is the recommended technique for managing sensitive data with Cloud Build. Use `available_secrets` to configure builds to access secrets from Secret Manager. For instructions, see: https://cloud.google.com/cloud-build/docs/securing-builds/use-secrets
+ { # Pairs a set of secret environment variables containing encrypted values with the Cloud KMS key to use to decrypt the value. Note: Use `kmsKeyName` with `available_secrets` instead of using `kmsKeyName` with `secret`. For instructions see: https://cloud.google.com/cloud-build/docs/securing-builds/use-encrypted-credentials.
"kmsKeyName": "A String", # Cloud KMS key name to use to decrypt these envs.
"secretEnv": { # Map of environment variable name to its encrypted value. Secret environment variables must be unique across all of a build's secrets, and must be used by at least one build step. Values can be at most 64 KB in size. There can be at most 100 secret values across all of a build's secrets.
"a_key": "A String",
},
},
],
- "serviceAccount": "A String", # IAM service account whose credentials will be used at build runtime. Must be of the format `projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}`. ACCOUNT can be email address or uniqueId of the service account. This field is in alpha and is not publicly available.
+ "serviceAccount": "A String", # IAM service account whose credentials will be used at build runtime. Must be of the format `projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}`. ACCOUNT can be email address or uniqueId of the service account. This field is in beta.
"source": { # Location of the source in a supported storage service. # The location of the source files to build.
"repoSource": { # Location of the source in a Google Cloud Source Repository. # If provided, get the source from this location in a Cloud Source Repository.
"branchName": "A String", # Regex matching branches to build. The syntax of the regular expressions accepted is the syntax accepted by RE2 and described at https://github.com/google/re2/wiki/Syntax
@@ -975,7 +1042,7 @@
"dir": "A String", # Directory, relative to the source root, in which to run the build. This must be a relative path. If a step's `dir` is specified and is an absolute path, this value is ignored for that step's execution.
"invertRegex": True or False, # Only trigger a build if the revision regex does NOT match the revision regex.
"projectId": "A String", # ID of the project that owns the Cloud Source Repository. If omitted, the project ID requesting the build is assumed.
- "repoName": "A String", # Required. Name of the Cloud Source Repository.
+ "repoName": "A String", # Name of the Cloud Source Repository.
"substitutions": { # Substitutions to use in a triggered build. Should only be used with RunBuildTrigger
"a_key": "A String",
},
@@ -1004,7 +1071,7 @@
"dir": "A String", # Directory, relative to the source root, in which to run the build. This must be a relative path. If a step's `dir` is specified and is an absolute path, this value is ignored for that step's execution.
"invertRegex": True or False, # Only trigger a build if the revision regex does NOT match the revision regex.
"projectId": "A String", # ID of the project that owns the Cloud Source Repository. If omitted, the project ID requesting the build is assumed.
- "repoName": "A String", # Required. Name of the Cloud Source Repository.
+ "repoName": "A String", # Name of the Cloud Source Repository.
"substitutions": { # Substitutions to use in a triggered build. Should only be used with RunBuildTrigger
"a_key": "A String",
},
@@ -1072,7 +1139,7 @@
"createTime": "A String", # Output only. Time when the trigger was created.
"description": "A String", # Human-readable description of this trigger.
"disabled": True or False, # If true, the trigger will never automatically execute a build.
- "filename": "A String", # Path, from the source root, to a file whose contents is used for the template.
+ "filename": "A String", # Path, from the source root, to the build configuration file (i.e. cloudbuild.yaml).
"github": { # GitHubEventsConfig describes the configuration of a trigger that creates a build whenever a GitHub event is received. This message is experimental. # GitHubEventsConfig describes the configuration of a trigger that creates a build whenever a GitHub event is received. Mutually exclusive with `trigger_template`.
"installationId": "A String", # The installationID that emits the GitHub event.
"name": "A String", # Name of the repository. For example: The name for https://github.com/googlecloudplatform/cloud-builders is "cloud-builders".
@@ -1108,7 +1175,7 @@
"dir": "A String", # Directory, relative to the source root, in which to run the build. This must be a relative path. If a step's `dir` is specified and is an absolute path, this value is ignored for that step's execution.
"invertRegex": True or False, # Only trigger a build if the revision regex does NOT match the revision regex.
"projectId": "A String", # ID of the project that owns the Cloud Source Repository. If omitted, the project ID requesting the build is assumed.
- "repoName": "A String", # Required. Name of the Cloud Source Repository.
+ "repoName": "A String", # Name of the Cloud Source Repository.
"substitutions": { # Substitutions to use in a triggered build. Should only be used with RunBuildTrigger
"a_key": "A String",
},
@@ -1144,7 +1211,7 @@
The object takes the form of:
{ # Configuration for an automated build in response to source repository changes.
- "build": { # A build resource in the Cloud Build API. At a high level, a `Build` describes where to find source code, how to build it (for example, the builder image to run on the source), and where to store the built artifacts. Fields can include the following variables, which will be expanded when the build is created: - $PROJECT_ID: the project ID of the build. - $BUILD_ID: the autogenerated ID of the build. - $REPO_NAME: the source repository name specified by RepoSource. - $BRANCH_NAME: the branch name specified by RepoSource. - $TAG_NAME: the tag name specified by RepoSource. - $REVISION_ID or $COMMIT_SHA: the commit SHA specified by RepoSource or resolved from the specified branch or tag. - $SHORT_SHA: first 7 characters of $REVISION_ID or $COMMIT_SHA. # Contents of the build template.
+ "build": { # A build resource in the Cloud Build API. At a high level, a `Build` describes where to find source code, how to build it (for example, the builder image to run on the source), and where to store the built artifacts. Fields can include the following variables, which will be expanded when the build is created: - $PROJECT_ID: the project ID of the build. - $PROJECT_NUMBER: the project number of the build. - $BUILD_ID: the autogenerated ID of the build. - $REPO_NAME: the source repository name specified by RepoSource. - $BRANCH_NAME: the branch name specified by RepoSource. - $TAG_NAME: the tag name specified by RepoSource. - $REVISION_ID or $COMMIT_SHA: the commit SHA specified by RepoSource or resolved from the specified branch or tag. - $SHORT_SHA: first 7 characters of $REVISION_ID or $COMMIT_SHA. # Contents of the build template.
"artifacts": { # Artifacts produced by a build that should be uploaded upon successful completion of all build steps. # Artifacts produced by the build that should be uploaded upon successful completion of all build steps.
"images": [ # A list of images to be pushed upon the successful completion of all build steps. The images will be pushed using the builder service account's credentials. The digests of the pushed images will be stored in the Build resource's results field. If any of the images fail to be pushed, the build is marked FAILURE.
"A String",
@@ -1160,6 +1227,22 @@
},
},
},
+ "availableSecrets": { # Secrets and secret environment variables. # Secrets and secret environment variables.
+ "inline": [ # Secrets encrypted with KMS key and the associated secret environment variable.
+ { # Pairs a set of secret environment variables mapped to encrypted values with the Cloud KMS key to use to decrypt the value.
+ "envMap": { # Map of environment variable name to its encrypted value. Secret environment variables must be unique across all of a build's secrets, and must be used by at least one build step. Values can be at most 64 KB in size. There can be at most 100 secret values across all of a build's secrets.
+ "a_key": "A String",
+ },
+ "kmsKeyName": "A String", # Resource name of Cloud KMS crypto key to decrypt the encrypted value. In format: projects/*/locations/*/keyRings/*/cryptoKeys/*
+ },
+ ],
+ "secretManager": [ # Secrets in Secret Manager and associated secret environment variable.
+ { # Pairs a secret environment variable with a SecretVersion in Secret Manager.
+ "env": "A String", # Environment variable name to associate with the secret. Secret environment variables must be unique across all of a build's secrets, and must be used by at least one build step.
+ "versionName": "A String", # Resource name of the SecretVersion. In format: projects/*/secrets/*/versions/*
+ },
+ ],
+ },
"buildTriggerId": "A String", # Output only. The ID of the `BuildTrigger` that triggered this build, if it was triggered automatically.
"createTime": "A String", # Output only. Time at which the request to create the build was received.
"finishTime": "A String", # Output only. Time at which execution of the build was finished. The difference between finish_time and start_time is the duration of the build's execution.
@@ -1193,7 +1276,7 @@
"path": "A String", # Path at which to mount the volume. Paths must be absolute and cannot conflict with other volume paths on the same build step or with certain reserved volume paths.
},
],
- "workerPool": "A String", # Option to specify a `WorkerPool` for the build. Format: projects/{project}/locations/{location}/workerPools/{workerPool} This field is experimental.
+ "workerPool": "A String", # Option to specify a `WorkerPool` for the build. Format: projects/{project}/locations/{location}/workerPools/{workerPool} This field is in beta and is available only to restricted users.
},
"projectId": "A String", # Output only. ID of the project.
"queueTtl": "A String", # TTL in queue for this build. If provided and the build is enqueued longer than this value, the build will expire and the build status will be `EXPIRED`. The TTL starts ticking from create_time.
@@ -1221,15 +1304,15 @@
],
"numArtifacts": "A String", # Number of artifacts uploaded. Only populated when artifacts are uploaded.
},
- "secrets": [ # Secrets to decrypt using Cloud Key Management Service.
- { # Pairs a set of secret environment variables containing encrypted values with the Cloud KMS key to use to decrypt the value.
+ "secrets": [ # Secrets to decrypt using Cloud Key Management Service. Note: Secret Manager is the recommended technique for managing sensitive data with Cloud Build. Use `available_secrets` to configure builds to access secrets from Secret Manager. For instructions, see: https://cloud.google.com/cloud-build/docs/securing-builds/use-secrets
+ { # Pairs a set of secret environment variables containing encrypted values with the Cloud KMS key to use to decrypt the value. Note: Use `kmsKeyName` with `available_secrets` instead of using `kmsKeyName` with `secret`. For instructions see: https://cloud.google.com/cloud-build/docs/securing-builds/use-encrypted-credentials.
"kmsKeyName": "A String", # Cloud KMS key name to use to decrypt these envs.
"secretEnv": { # Map of environment variable name to its encrypted value. Secret environment variables must be unique across all of a build's secrets, and must be used by at least one build step. Values can be at most 64 KB in size. There can be at most 100 secret values across all of a build's secrets.
"a_key": "A String",
},
},
],
- "serviceAccount": "A String", # IAM service account whose credentials will be used at build runtime. Must be of the format `projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}`. ACCOUNT can be email address or uniqueId of the service account. This field is in alpha and is not publicly available.
+ "serviceAccount": "A String", # IAM service account whose credentials will be used at build runtime. Must be of the format `projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}`. ACCOUNT can be email address or uniqueId of the service account. This field is in beta.
"source": { # Location of the source in a supported storage service. # The location of the source files to build.
"repoSource": { # Location of the source in a Google Cloud Source Repository. # If provided, get the source from this location in a Cloud Source Repository.
"branchName": "A String", # Regex matching branches to build. The syntax of the regular expressions accepted is the syntax accepted by RE2 and described at https://github.com/google/re2/wiki/Syntax
@@ -1237,7 +1320,7 @@
"dir": "A String", # Directory, relative to the source root, in which to run the build. This must be a relative path. If a step's `dir` is specified and is an absolute path, this value is ignored for that step's execution.
"invertRegex": True or False, # Only trigger a build if the revision regex does NOT match the revision regex.
"projectId": "A String", # ID of the project that owns the Cloud Source Repository. If omitted, the project ID requesting the build is assumed.
- "repoName": "A String", # Required. Name of the Cloud Source Repository.
+ "repoName": "A String", # Name of the Cloud Source Repository.
"substitutions": { # Substitutions to use in a triggered build. Should only be used with RunBuildTrigger
"a_key": "A String",
},
@@ -1266,7 +1349,7 @@
"dir": "A String", # Directory, relative to the source root, in which to run the build. This must be a relative path. If a step's `dir` is specified and is an absolute path, this value is ignored for that step's execution.
"invertRegex": True or False, # Only trigger a build if the revision regex does NOT match the revision regex.
"projectId": "A String", # ID of the project that owns the Cloud Source Repository. If omitted, the project ID requesting the build is assumed.
- "repoName": "A String", # Required. Name of the Cloud Source Repository.
+ "repoName": "A String", # Name of the Cloud Source Repository.
"substitutions": { # Substitutions to use in a triggered build. Should only be used with RunBuildTrigger
"a_key": "A String",
},
@@ -1334,7 +1417,7 @@
"createTime": "A String", # Output only. Time when the trigger was created.
"description": "A String", # Human-readable description of this trigger.
"disabled": True or False, # If true, the trigger will never automatically execute a build.
- "filename": "A String", # Path, from the source root, to a file whose contents is used for the template.
+ "filename": "A String", # Path, from the source root, to the build configuration file (i.e. cloudbuild.yaml).
"github": { # GitHubEventsConfig describes the configuration of a trigger that creates a build whenever a GitHub event is received. This message is experimental. # GitHubEventsConfig describes the configuration of a trigger that creates a build whenever a GitHub event is received. Mutually exclusive with `trigger_template`.
"installationId": "A String", # The installationID that emits the GitHub event.
"name": "A String", # Name of the repository. For example: The name for https://github.com/googlecloudplatform/cloud-builders is "cloud-builders".
@@ -1370,7 +1453,7 @@
"dir": "A String", # Directory, relative to the source root, in which to run the build. This must be a relative path. If a step's `dir` is specified and is an absolute path, this value is ignored for that step's execution.
"invertRegex": True or False, # Only trigger a build if the revision regex does NOT match the revision regex.
"projectId": "A String", # ID of the project that owns the Cloud Source Repository. If omitted, the project ID requesting the build is assumed.
- "repoName": "A String", # Required. Name of the Cloud Source Repository.
+ "repoName": "A String", # Name of the Cloud Source Repository.
"substitutions": { # Substitutions to use in a triggered build. Should only be used with RunBuildTrigger
"a_key": "A String",
},
@@ -1387,7 +1470,7 @@
An object of the form:
{ # Configuration for an automated build in response to source repository changes.
- "build": { # A build resource in the Cloud Build API. At a high level, a `Build` describes where to find source code, how to build it (for example, the builder image to run on the source), and where to store the built artifacts. Fields can include the following variables, which will be expanded when the build is created: - $PROJECT_ID: the project ID of the build. - $BUILD_ID: the autogenerated ID of the build. - $REPO_NAME: the source repository name specified by RepoSource. - $BRANCH_NAME: the branch name specified by RepoSource. - $TAG_NAME: the tag name specified by RepoSource. - $REVISION_ID or $COMMIT_SHA: the commit SHA specified by RepoSource or resolved from the specified branch or tag. - $SHORT_SHA: first 7 characters of $REVISION_ID or $COMMIT_SHA. # Contents of the build template.
+ "build": { # A build resource in the Cloud Build API. At a high level, a `Build` describes where to find source code, how to build it (for example, the builder image to run on the source), and where to store the built artifacts. Fields can include the following variables, which will be expanded when the build is created: - $PROJECT_ID: the project ID of the build. - $PROJECT_NUMBER: the project number of the build. - $BUILD_ID: the autogenerated ID of the build. - $REPO_NAME: the source repository name specified by RepoSource. - $BRANCH_NAME: the branch name specified by RepoSource. - $TAG_NAME: the tag name specified by RepoSource. - $REVISION_ID or $COMMIT_SHA: the commit SHA specified by RepoSource or resolved from the specified branch or tag. - $SHORT_SHA: first 7 characters of $REVISION_ID or $COMMIT_SHA. # Contents of the build template.
"artifacts": { # Artifacts produced by a build that should be uploaded upon successful completion of all build steps. # Artifacts produced by the build that should be uploaded upon successful completion of all build steps.
"images": [ # A list of images to be pushed upon the successful completion of all build steps. The images will be pushed using the builder service account's credentials. The digests of the pushed images will be stored in the Build resource's results field. If any of the images fail to be pushed, the build is marked FAILURE.
"A String",
@@ -1403,6 +1486,22 @@
},
},
},
+ "availableSecrets": { # Secrets and secret environment variables. # Secrets and secret environment variables.
+ "inline": [ # Secrets encrypted with KMS key and the associated secret environment variable.
+ { # Pairs a set of secret environment variables mapped to encrypted values with the Cloud KMS key to use to decrypt the value.
+ "envMap": { # Map of environment variable name to its encrypted value. Secret environment variables must be unique across all of a build's secrets, and must be used by at least one build step. Values can be at most 64 KB in size. There can be at most 100 secret values across all of a build's secrets.
+ "a_key": "A String",
+ },
+ "kmsKeyName": "A String", # Resource name of Cloud KMS crypto key to decrypt the encrypted value. In format: projects/*/locations/*/keyRings/*/cryptoKeys/*
+ },
+ ],
+ "secretManager": [ # Secrets in Secret Manager and associated secret environment variable.
+ { # Pairs a secret environment variable with a SecretVersion in Secret Manager.
+ "env": "A String", # Environment variable name to associate with the secret. Secret environment variables must be unique across all of a build's secrets, and must be used by at least one build step.
+ "versionName": "A String", # Resource name of the SecretVersion. In format: projects/*/secrets/*/versions/*
+ },
+ ],
+ },
"buildTriggerId": "A String", # Output only. The ID of the `BuildTrigger` that triggered this build, if it was triggered automatically.
"createTime": "A String", # Output only. Time at which the request to create the build was received.
"finishTime": "A String", # Output only. Time at which execution of the build was finished. The difference between finish_time and start_time is the duration of the build's execution.
@@ -1436,7 +1535,7 @@
"path": "A String", # Path at which to mount the volume. Paths must be absolute and cannot conflict with other volume paths on the same build step or with certain reserved volume paths.
},
],
- "workerPool": "A String", # Option to specify a `WorkerPool` for the build. Format: projects/{project}/locations/{location}/workerPools/{workerPool} This field is experimental.
+ "workerPool": "A String", # Option to specify a `WorkerPool` for the build. Format: projects/{project}/locations/{location}/workerPools/{workerPool} This field is in beta and is available only to restricted users.
},
"projectId": "A String", # Output only. ID of the project.
"queueTtl": "A String", # TTL in queue for this build. If provided and the build is enqueued longer than this value, the build will expire and the build status will be `EXPIRED`. The TTL starts ticking from create_time.
@@ -1464,15 +1563,15 @@
],
"numArtifacts": "A String", # Number of artifacts uploaded. Only populated when artifacts are uploaded.
},
- "secrets": [ # Secrets to decrypt using Cloud Key Management Service.
- { # Pairs a set of secret environment variables containing encrypted values with the Cloud KMS key to use to decrypt the value.
+ "secrets": [ # Secrets to decrypt using Cloud Key Management Service. Note: Secret Manager is the recommended technique for managing sensitive data with Cloud Build. Use `available_secrets` to configure builds to access secrets from Secret Manager. For instructions, see: https://cloud.google.com/cloud-build/docs/securing-builds/use-secrets
+ { # Pairs a set of secret environment variables containing encrypted values with the Cloud KMS key to use to decrypt the value. Note: Use `kmsKeyName` with `available_secrets` instead of using `kmsKeyName` with `secret`. For instructions see: https://cloud.google.com/cloud-build/docs/securing-builds/use-encrypted-credentials.
"kmsKeyName": "A String", # Cloud KMS key name to use to decrypt these envs.
"secretEnv": { # Map of environment variable name to its encrypted value. Secret environment variables must be unique across all of a build's secrets, and must be used by at least one build step. Values can be at most 64 KB in size. There can be at most 100 secret values across all of a build's secrets.
"a_key": "A String",
},
},
],
- "serviceAccount": "A String", # IAM service account whose credentials will be used at build runtime. Must be of the format `projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}`. ACCOUNT can be email address or uniqueId of the service account. This field is in alpha and is not publicly available.
+ "serviceAccount": "A String", # IAM service account whose credentials will be used at build runtime. Must be of the format `projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}`. ACCOUNT can be email address or uniqueId of the service account. This field is in beta.
"source": { # Location of the source in a supported storage service. # The location of the source files to build.
"repoSource": { # Location of the source in a Google Cloud Source Repository. # If provided, get the source from this location in a Cloud Source Repository.
"branchName": "A String", # Regex matching branches to build. The syntax of the regular expressions accepted is the syntax accepted by RE2 and described at https://github.com/google/re2/wiki/Syntax
@@ -1480,7 +1579,7 @@
"dir": "A String", # Directory, relative to the source root, in which to run the build. This must be a relative path. If a step's `dir` is specified and is an absolute path, this value is ignored for that step's execution.
"invertRegex": True or False, # Only trigger a build if the revision regex does NOT match the revision regex.
"projectId": "A String", # ID of the project that owns the Cloud Source Repository. If omitted, the project ID requesting the build is assumed.
- "repoName": "A String", # Required. Name of the Cloud Source Repository.
+ "repoName": "A String", # Name of the Cloud Source Repository.
"substitutions": { # Substitutions to use in a triggered build. Should only be used with RunBuildTrigger
"a_key": "A String",
},
@@ -1509,7 +1608,7 @@
"dir": "A String", # Directory, relative to the source root, in which to run the build. This must be a relative path. If a step's `dir` is specified and is an absolute path, this value is ignored for that step's execution.
"invertRegex": True or False, # Only trigger a build if the revision regex does NOT match the revision regex.
"projectId": "A String", # ID of the project that owns the Cloud Source Repository. If omitted, the project ID requesting the build is assumed.
- "repoName": "A String", # Required. Name of the Cloud Source Repository.
+ "repoName": "A String", # Name of the Cloud Source Repository.
"substitutions": { # Substitutions to use in a triggered build. Should only be used with RunBuildTrigger
"a_key": "A String",
},
@@ -1577,7 +1676,7 @@
"createTime": "A String", # Output only. Time when the trigger was created.
"description": "A String", # Human-readable description of this trigger.
"disabled": True or False, # If true, the trigger will never automatically execute a build.
- "filename": "A String", # Path, from the source root, to a file whose contents is used for the template.
+ "filename": "A String", # Path, from the source root, to the build configuration file (i.e. cloudbuild.yaml).
"github": { # GitHubEventsConfig describes the configuration of a trigger that creates a build whenever a GitHub event is received. This message is experimental. # GitHubEventsConfig describes the configuration of a trigger that creates a build whenever a GitHub event is received. Mutually exclusive with `trigger_template`.
"installationId": "A String", # The installationID that emits the GitHub event.
"name": "A String", # Name of the repository. For example: The name for https://github.com/googlecloudplatform/cloud-builders is "cloud-builders".
@@ -1613,7 +1712,7 @@
"dir": "A String", # Directory, relative to the source root, in which to run the build. This must be a relative path. If a step's `dir` is specified and is an absolute path, this value is ignored for that step's execution.
"invertRegex": True or False, # Only trigger a build if the revision regex does NOT match the revision regex.
"projectId": "A String", # ID of the project that owns the Cloud Source Repository. If omitted, the project ID requesting the build is assumed.
- "repoName": "A String", # Required. Name of the Cloud Source Repository.
+ "repoName": "A String", # Name of the Cloud Source Repository.
"substitutions": { # Substitutions to use in a triggered build. Should only be used with RunBuildTrigger
"a_key": "A String",
},
@@ -1638,7 +1737,7 @@
"dir": "A String", # Directory, relative to the source root, in which to run the build. This must be a relative path. If a step's `dir` is specified and is an absolute path, this value is ignored for that step's execution.
"invertRegex": True or False, # Only trigger a build if the revision regex does NOT match the revision regex.
"projectId": "A String", # ID of the project that owns the Cloud Source Repository. If omitted, the project ID requesting the build is assumed.
- "repoName": "A String", # Required. Name of the Cloud Source Repository.
+ "repoName": "A String", # Name of the Cloud Source Repository.
"substitutions": { # Substitutions to use in a triggered build. Should only be used with RunBuildTrigger
"a_key": "A String",
},
@@ -1674,4 +1773,37 @@
}</pre>
</div>
+<div class="method">
+ <code class="details" id="webhook">webhook(projectId, trigger, body=None, secret=None, x__xgafv=None)</code>
+ <pre>ReceiveTriggerWebhook [Experimental] is called when the API receives a webhook request targeted at a specific trigger.
+
+Args:
+ projectId: string, Project in which the specified trigger lives (required)
+ trigger: string, Name of the trigger to run the payload against (required)
+ body: object, The request body.
+ The object takes the form of:
+
+{ # Message that represents an arbitrary HTTP body. It should only be used for payload formats that can't be represented as JSON, such as raw binary or an HTML page. This message can be used both in streaming and non-streaming API methods in the request as well as the response. It can be used as a top-level request field, which is convenient if one wants to extract parameters from either the URL or HTTP template into the request fields and also want access to the raw HTTP body. Example: message GetResourceRequest { // A unique request id. string request_id = 1; // The raw HTTP body is bound to this field. google.api.HttpBody http_body = 2; } service ResourceService { rpc GetResource(GetResourceRequest) returns (google.api.HttpBody); rpc UpdateResource(google.api.HttpBody) returns (google.protobuf.Empty); } Example with streaming methods: service CaldavService { rpc GetCalendar(stream google.api.HttpBody) returns (stream google.api.HttpBody); rpc UpdateCalendar(stream google.api.HttpBody) returns (stream google.api.HttpBody); } Use of this type only changes how the request and response bodies are handled, all other features will continue to work unchanged.
+ "contentType": "A String", # The HTTP Content-Type header value specifying the content type of the body.
+ "data": "A String", # The HTTP request/response body as raw binary.
+ "extensions": [ # Application specific response metadata. Must be set in the first response for streaming APIs.
+ {
+ "a_key": "", # Properties of the object. Contains field @type with type URL.
+ },
+ ],
+}
+
+ secret: string, Secret token used for authorization if an OAuth token isn't provided.
+ x__xgafv: string, V1 error format.
+ Allowed values
+ 1 - v1 error format
+ 2 - v2 error format
+
+Returns:
+ An object of the form:
+
+ { # ReceiveTriggerWebhookResponse [Experimental] is the response object for the ReceiveTriggerWebhook method.
+}</pre>
+</div>
+
</body></html>
\ No newline at end of file