From 8f7e7cd55d04e260c6f665907e07979295a1e809 Mon Sep 17 00:00:00 2001 From: Yoshi Automation Date: Tue, 17 Dec 2024 07:10:21 +0000 Subject: [PATCH] feat(privateca): update the api #### privateca:v1 The following keys were deleted: - schemas.CaPool.properties.name.readOnly (Total Keys: 1) - schemas.Certificate.properties.name.readOnly (Total Keys: 1) - schemas.CertificateAuthority.properties.name.readOnly (Total Keys: 1) - schemas.CertificateRevocationList.properties.name.readOnly (Total Keys: 1) - schemas.CertificateTemplate.properties.name.readOnly (Total Keys: 1) --- ...uthorities.certificateRevocationLists.html | 8 ++--- ...ations.caPools.certificateAuthorities.html | 10 +++---- ...ojects.locations.caPools.certificates.html | 16 +++++----- ...ivateca_v1.projects.locations.caPools.html | 10 +++---- ...ojects.locations.certificateTemplates.html | 10 +++---- ...teca_v1.projects.locations.operations.html | 4 +-- ...v1beta1.projects.locations.operations.html | 4 +-- .../documents/privateca.v1.json | 29 ++++++++----------- .../documents/privateca.v1beta1.json | 4 +-- 9 files changed, 45 insertions(+), 50 deletions(-) diff --git a/docs/dyn/privateca_v1.projects.locations.caPools.certificateAuthorities.certificateRevocationLists.html b/docs/dyn/privateca_v1.projects.locations.caPools.certificateAuthorities.certificateRevocationLists.html index b965645897b..040ffe49dd7 100644 --- a/docs/dyn/privateca_v1.projects.locations.caPools.certificateAuthorities.certificateRevocationLists.html +++ b/docs/dyn/privateca_v1.projects.locations.caPools.certificateAuthorities.certificateRevocationLists.html @@ -124,7 +124,7 @@

Method Details

"labels": { # Optional. Labels with user-defined metadata. "a_key": "A String", }, - "name": "A String", # Output only. The resource name for this CertificateRevocationList in the format `projects/*/locations/*/caPools/*certificateAuthorities/*/ certificateRevocationLists/*`. + "name": "A String", # Identifier. The resource name for this CertificateRevocationList in the format `projects/*/locations/*/caPools/*certificateAuthorities/*/ certificateRevocationLists/*`. "pemCrl": "A String", # Output only. The PEM-encoded X.509 CRL. "revisionId": "A String", # Output only. The revision ID of this CertificateRevocationList. A new revision is committed whenever a new CRL is published. The format is an 8-character hexadecimal string. "revokedCertificates": [ # Output only. The revoked serial numbers that appear in pem_crl. @@ -214,7 +214,7 @@

Method Details

"labels": { # Optional. Labels with user-defined metadata. "a_key": "A String", }, - "name": "A String", # Output only. The resource name for this CertificateRevocationList in the format `projects/*/locations/*/caPools/*certificateAuthorities/*/ certificateRevocationLists/*`. + "name": "A String", # Identifier. The resource name for this CertificateRevocationList in the format `projects/*/locations/*/caPools/*certificateAuthorities/*/ certificateRevocationLists/*`. "pemCrl": "A String", # Output only. The PEM-encoded X.509 CRL. "revisionId": "A String", # Output only. The revision ID of this CertificateRevocationList. A new revision is committed whenever a new CRL is published. The format is an 8-character hexadecimal string. "revokedCertificates": [ # Output only. The revoked serial numbers that appear in pem_crl. @@ -255,7 +255,7 @@

Method Details

Update a CertificateRevocationList.
 
 Args:
-  name: string, Output only. The resource name for this CertificateRevocationList in the format `projects/*/locations/*/caPools/*certificateAuthorities/*/ certificateRevocationLists/*`. (required)
+  name: string, Identifier. The resource name for this CertificateRevocationList in the format `projects/*/locations/*/caPools/*certificateAuthorities/*/ certificateRevocationLists/*`. (required)
   body: object, The request body.
     The object takes the form of:
 
@@ -265,7 +265,7 @@ 
Method Details

   "labels": { # Optional. Labels with user-defined metadata.
     "a_key": "A String",
   },
-  "name": "A String", # Output only. The resource name for this CertificateRevocationList in the format `projects/*/locations/*/caPools/*certificateAuthorities/*/ certificateRevocationLists/*`.
+  "name": "A String", # Identifier. The resource name for this CertificateRevocationList in the format `projects/*/locations/*/caPools/*certificateAuthorities/*/ certificateRevocationLists/*`.
   "pemCrl": "A String", # Output only. The PEM-encoded X.509 CRL.
   "revisionId": "A String", # Output only. The revision ID of this CertificateRevocationList. A new revision is committed whenever a new CRL is published. The format is an 8-character hexadecimal string.
   "revokedCertificates": [ # Output only. The revoked serial numbers that appear in pem_crl.
diff --git a/docs/dyn/privateca_v1.projects.locations.caPools.certificateAuthorities.html b/docs/dyn/privateca_v1.projects.locations.caPools.certificateAuthorities.html
index edcda97d558..49866a39da0 100644
--- a/docs/dyn/privateca_v1.projects.locations.caPools.certificateAuthorities.html
+++ b/docs/dyn/privateca_v1.projects.locations.caPools.certificateAuthorities.html
@@ -475,7 +475,7 @@ 
Method Details

     "a_key": "A String",
   },
   "lifetime": "A String", # Required. Immutable. The desired lifetime of the CA certificate. Used to create the "not_before_time" and "not_after_time" fields inside an X.509 certificate.
-  "name": "A String", # Output only. Identifier. The resource name for this CertificateAuthority in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`.
+  "name": "A String", # Identifier. The resource name for this CertificateAuthority in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`.
   "pemCaCertificates": [ # Output only. This CertificateAuthority's certificate chain, including the current CertificateAuthority's certificate. Ordered such that the root issuer is the final element (consistent with RFC 5246). For a self-signed CA, this will only list the current CertificateAuthority's certificate.
     "A String",
   ],
@@ -977,7 +977,7 @@ 
Method Details

     "a_key": "A String",
   },
   "lifetime": "A String", # Required. Immutable. The desired lifetime of the CA certificate. Used to create the "not_before_time" and "not_after_time" fields inside an X.509 certificate.
-  "name": "A String", # Output only. Identifier. The resource name for this CertificateAuthority in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`.
+  "name": "A String", # Identifier. The resource name for this CertificateAuthority in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`.
   "pemCaCertificates": [ # Output only. This CertificateAuthority's certificate chain, including the current CertificateAuthority's certificate. Ordered such that the root issuer is the final element (consistent with RFC 5246). For a self-signed CA, this will only list the current CertificateAuthority's certificate.
     "A String",
   ],
@@ -1312,7 +1312,7 @@ 
Method Details

         "a_key": "A String",
       },
       "lifetime": "A String", # Required. Immutable. The desired lifetime of the CA certificate. Used to create the "not_before_time" and "not_after_time" fields inside an X.509 certificate.
-      "name": "A String", # Output only. Identifier. The resource name for this CertificateAuthority in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`.
+      "name": "A String", # Identifier. The resource name for this CertificateAuthority in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`.
       "pemCaCertificates": [ # Output only. This CertificateAuthority's certificate chain, including the current CertificateAuthority's certificate. Ordered such that the root issuer is the final element (consistent with RFC 5246). For a self-signed CA, this will only list the current CertificateAuthority's certificate.
         "A String",
       ],
@@ -1358,7 +1358,7 @@ 
Method Details

   
Update a CertificateAuthority.
 
 Args:
-  name: string, Output only. Identifier. The resource name for this CertificateAuthority in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`. (required)
+  name: string, Identifier. The resource name for this CertificateAuthority in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`. (required)
   body: object, The request body.
     The object takes the form of:
 
@@ -1656,7 +1656,7 @@ 
Method Details

     "a_key": "A String",
   },
   "lifetime": "A String", # Required. Immutable. The desired lifetime of the CA certificate. Used to create the "not_before_time" and "not_after_time" fields inside an X.509 certificate.
-  "name": "A String", # Output only. Identifier. The resource name for this CertificateAuthority in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`.
+  "name": "A String", # Identifier. The resource name for this CertificateAuthority in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`.
   "pemCaCertificates": [ # Output only. This CertificateAuthority's certificate chain, including the current CertificateAuthority's certificate. Ordered such that the root issuer is the final element (consistent with RFC 5246). For a self-signed CA, this will only list the current CertificateAuthority's certificate.
     "A String",
   ],
diff --git a/docs/dyn/privateca_v1.projects.locations.caPools.certificates.html b/docs/dyn/privateca_v1.projects.locations.caPools.certificates.html
index 7a35b3462ee..b9f183d8158 100644
--- a/docs/dyn/privateca_v1.projects.locations.caPools.certificates.html
+++ b/docs/dyn/privateca_v1.projects.locations.caPools.certificates.html
@@ -391,7 +391,7 @@ 
Method Details

     "a_key": "A String",
   },
   "lifetime": "A String", # Required. Immutable. The desired lifetime of a certificate. Used to create the "not_before_time" and "not_after_time" fields inside an X.509 certificate. Note that the lifetime may be truncated if it would extend past the life of any certificate authority in the issuing chain.
-  "name": "A String", # Output only. The resource name for this Certificate in the format `projects/*/locations/*/caPools/*/certificates/*`.
+  "name": "A String", # Identifier. The resource name for this Certificate in the format `projects/*/locations/*/caPools/*/certificates/*`.
   "pemCertificate": "A String", # Output only. The pem-encoded, signed X.509 certificate.
   "pemCertificateChain": [ # Output only. The chain that may be used to verify the X.509 certificate. Expected to be in issuer-to-root order according to RFC 5246.
     "A String",
@@ -698,7 +698,7 @@ 
Method Details

     "a_key": "A String",
   },
   "lifetime": "A String", # Required. Immutable. The desired lifetime of a certificate. Used to create the "not_before_time" and "not_after_time" fields inside an X.509 certificate. Note that the lifetime may be truncated if it would extend past the life of any certificate authority in the issuing chain.
-  "name": "A String", # Output only. The resource name for this Certificate in the format `projects/*/locations/*/caPools/*/certificates/*`.
+  "name": "A String", # Identifier. The resource name for this Certificate in the format `projects/*/locations/*/caPools/*/certificates/*`.
   "pemCertificate": "A String", # Output only. The pem-encoded, signed X.509 certificate.
   "pemCertificateChain": [ # Output only. The chain that may be used to verify the X.509 certificate. Expected to be in issuer-to-root order according to RFC 5246.
     "A String",
@@ -1008,7 +1008,7 @@ 
Method Details

     "a_key": "A String",
   },
   "lifetime": "A String", # Required. Immutable. The desired lifetime of a certificate. Used to create the "not_before_time" and "not_after_time" fields inside an X.509 certificate. Note that the lifetime may be truncated if it would extend past the life of any certificate authority in the issuing chain.
-  "name": "A String", # Output only. The resource name for this Certificate in the format `projects/*/locations/*/caPools/*/certificates/*`.
+  "name": "A String", # Identifier. The resource name for this Certificate in the format `projects/*/locations/*/caPools/*/certificates/*`.
   "pemCertificate": "A String", # Output only. The pem-encoded, signed X.509 certificate.
   "pemCertificateChain": [ # Output only. The chain that may be used to verify the X.509 certificate. Expected to be in issuer-to-root order according to RFC 5246.
     "A String",
@@ -1324,7 +1324,7 @@ 
Method Details

         "a_key": "A String",
       },
       "lifetime": "A String", # Required. Immutable. The desired lifetime of a certificate. Used to create the "not_before_time" and "not_after_time" fields inside an X.509 certificate. Note that the lifetime may be truncated if it would extend past the life of any certificate authority in the issuing chain.
-      "name": "A String", # Output only. The resource name for this Certificate in the format `projects/*/locations/*/caPools/*/certificates/*`.
+      "name": "A String", # Identifier. The resource name for this Certificate in the format `projects/*/locations/*/caPools/*/certificates/*`.
       "pemCertificate": "A String", # Output only. The pem-encoded, signed X.509 certificate.
       "pemCertificateChain": [ # Output only. The chain that may be used to verify the X.509 certificate. Expected to be in issuer-to-root order according to RFC 5246.
         "A String",
@@ -1364,7 +1364,7 @@ 
Method Details

   
Update a Certificate. Currently, the only field you can update is the labels field.
 
 Args:
-  name: string, Output only. The resource name for this Certificate in the format `projects/*/locations/*/caPools/*/certificates/*`. (required)
+  name: string, Identifier. The resource name for this Certificate in the format `projects/*/locations/*/caPools/*/certificates/*`. (required)
   body: object, The request body.
     The object takes the form of:
 
@@ -1649,7 +1649,7 @@ 
Method Details

     "a_key": "A String",
   },
   "lifetime": "A String", # Required. Immutable. The desired lifetime of a certificate. Used to create the "not_before_time" and "not_after_time" fields inside an X.509 certificate. Note that the lifetime may be truncated if it would extend past the life of any certificate authority in the issuing chain.
-  "name": "A String", # Output only. The resource name for this Certificate in the format `projects/*/locations/*/caPools/*/certificates/*`.
+  "name": "A String", # Identifier. The resource name for this Certificate in the format `projects/*/locations/*/caPools/*/certificates/*`.
   "pemCertificate": "A String", # Output only. The pem-encoded, signed X.509 certificate.
   "pemCertificateChain": [ # Output only. The chain that may be used to verify the X.509 certificate. Expected to be in issuer-to-root order according to RFC 5246.
     "A String",
@@ -1954,7 +1954,7 @@ 
Method Details

     "a_key": "A String",
   },
   "lifetime": "A String", # Required. Immutable. The desired lifetime of a certificate. Used to create the "not_before_time" and "not_after_time" fields inside an X.509 certificate. Note that the lifetime may be truncated if it would extend past the life of any certificate authority in the issuing chain.
-  "name": "A String", # Output only. The resource name for this Certificate in the format `projects/*/locations/*/caPools/*/certificates/*`.
+  "name": "A String", # Identifier. The resource name for this Certificate in the format `projects/*/locations/*/caPools/*/certificates/*`.
   "pemCertificate": "A String", # Output only. The pem-encoded, signed X.509 certificate.
   "pemCertificateChain": [ # Output only. The chain that may be used to verify the X.509 certificate. Expected to be in issuer-to-root order according to RFC 5246.
     "A String",
@@ -2272,7 +2272,7 @@ 
Method Details

     "a_key": "A String",
   },
   "lifetime": "A String", # Required. Immutable. The desired lifetime of a certificate. Used to create the "not_before_time" and "not_after_time" fields inside an X.509 certificate. Note that the lifetime may be truncated if it would extend past the life of any certificate authority in the issuing chain.
-  "name": "A String", # Output only. The resource name for this Certificate in the format `projects/*/locations/*/caPools/*/certificates/*`.
+  "name": "A String", # Identifier. The resource name for this Certificate in the format `projects/*/locations/*/caPools/*/certificates/*`.
   "pemCertificate": "A String", # Output only. The pem-encoded, signed X.509 certificate.
   "pemCertificateChain": [ # Output only. The chain that may be used to verify the X.509 certificate. Expected to be in issuer-to-root order according to RFC 5246.
     "A String",
diff --git a/docs/dyn/privateca_v1.projects.locations.caPools.html b/docs/dyn/privateca_v1.projects.locations.caPools.html
index 0a00e2742d8..9ea31883ab6 100644
--- a/docs/dyn/privateca_v1.projects.locations.caPools.html
+++ b/docs/dyn/privateca_v1.projects.locations.caPools.html
@@ -258,7 +258,7 @@ 
Method Details

   "labels": { # Optional. Labels with user-defined metadata.
     "a_key": "A String",
   },
-  "name": "A String", # Output only. Identifier. The resource name for this CaPool in the format `projects/*/locations/*/caPools/*`.
+  "name": "A String", # Identifier. The resource name for this CaPool in the format `projects/*/locations/*/caPools/*`.
   "publishingOptions": { # Options relating to the publication of each CertificateAuthority's CA certificate and CRLs and their inclusion as extensions in issued Certificates. The options set here apply to certificates issued by any CertificateAuthority in the CaPool. # Optional. The PublishingOptions to follow when issuing Certificates from any CertificateAuthority in this CaPool.
     "encodingFormat": "A String", # Optional. Specifies the encoding format of each CertificateAuthority resource's CA certificate and CRLs. If this is omitted, CA certificates and CRLs will be published in PEM.
     "publishCaCert": True or False, # Optional. When true, publishes each CertificateAuthority's CA certificate and includes its URL in the "Authority Information Access" X.509 extension in all issued Certificates. If this is false, the CA certificate will not be published and the corresponding X.509 extension will not be written in issued certificates.
@@ -507,7 +507,7 @@ 
Method Details

   "labels": { # Optional. Labels with user-defined metadata.
     "a_key": "A String",
   },
-  "name": "A String", # Output only. Identifier. The resource name for this CaPool in the format `projects/*/locations/*/caPools/*`.
+  "name": "A String", # Identifier. The resource name for this CaPool in the format `projects/*/locations/*/caPools/*`.
   "publishingOptions": { # Options relating to the publication of each CertificateAuthority's CA certificate and CRLs and their inclusion as extensions in issued Certificates. The options set here apply to certificates issued by any CertificateAuthority in the CaPool. # Optional. The PublishingOptions to follow when issuing Certificates from any CertificateAuthority in this CaPool.
     "encodingFormat": "A String", # Optional. Specifies the encoding format of each CertificateAuthority resource's CA certificate and CRLs. If this is omitted, CA certificates and CRLs will be published in PEM.
     "publishCaCert": True or False, # Optional. When true, publishes each CertificateAuthority's CA certificate and includes its URL in the "Authority Information Access" X.509 extension in all issued Certificates. If this is false, the CA certificate will not be published and the corresponding X.509 extension will not be written in issued certificates.
@@ -711,7 +711,7 @@ 
Method Details

       "labels": { # Optional. Labels with user-defined metadata.
         "a_key": "A String",
       },
-      "name": "A String", # Output only. Identifier. The resource name for this CaPool in the format `projects/*/locations/*/caPools/*`.
+      "name": "A String", # Identifier. The resource name for this CaPool in the format `projects/*/locations/*/caPools/*`.
       "publishingOptions": { # Options relating to the publication of each CertificateAuthority's CA certificate and CRLs and their inclusion as extensions in issued Certificates. The options set here apply to certificates issued by any CertificateAuthority in the CaPool. # Optional. The PublishingOptions to follow when issuing Certificates from any CertificateAuthority in this CaPool.
         "encodingFormat": "A String", # Optional. Specifies the encoding format of each CertificateAuthority resource's CA certificate and CRLs. If this is omitted, CA certificates and CRLs will be published in PEM.
         "publishCaCert": True or False, # Optional. When true, publishes each CertificateAuthority's CA certificate and includes its URL in the "Authority Information Access" X.509 extension in all issued Certificates. If this is false, the CA certificate will not be published and the corresponding X.509 extension will not be written in issued certificates.
@@ -746,7 +746,7 @@ 
Method Details

   
Update a CaPool.
 
 Args:
-  name: string, Output only. Identifier. The resource name for this CaPool in the format `projects/*/locations/*/caPools/*`. (required)
+  name: string, Identifier. The resource name for this CaPool in the format `projects/*/locations/*/caPools/*`. (required)
   body: object, The request body.
     The object takes the form of:
 
@@ -876,7 +876,7 @@ 
Method Details

   "labels": { # Optional. Labels with user-defined metadata.
     "a_key": "A String",
   },
-  "name": "A String", # Output only. Identifier. The resource name for this CaPool in the format `projects/*/locations/*/caPools/*`.
+  "name": "A String", # Identifier. The resource name for this CaPool in the format `projects/*/locations/*/caPools/*`.
   "publishingOptions": { # Options relating to the publication of each CertificateAuthority's CA certificate and CRLs and their inclusion as extensions in issued Certificates. The options set here apply to certificates issued by any CertificateAuthority in the CaPool. # Optional. The PublishingOptions to follow when issuing Certificates from any CertificateAuthority in this CaPool.
     "encodingFormat": "A String", # Optional. Specifies the encoding format of each CertificateAuthority resource's CA certificate and CRLs. If this is omitted, CA certificates and CRLs will be published in PEM.
     "publishCaCert": True or False, # Optional. When true, publishes each CertificateAuthority's CA certificate and includes its URL in the "Authority Information Access" X.509 extension in all issued Certificates. If this is false, the CA certificate will not be published and the corresponding X.509 extension will not be written in issued certificates.
diff --git a/docs/dyn/privateca_v1.projects.locations.certificateTemplates.html b/docs/dyn/privateca_v1.projects.locations.certificateTemplates.html
index e62f0221c56..11cba54c9c0 100644
--- a/docs/dyn/privateca_v1.projects.locations.certificateTemplates.html
+++ b/docs/dyn/privateca_v1.projects.locations.certificateTemplates.html
@@ -136,7 +136,7 @@ 
Method Details

     "a_key": "A String",
   },
   "maximumLifetime": "A String", # Optional. The maximum lifetime allowed for issued Certificates that use this template. If the issuing CaPool resource's IssuancePolicy specifies a maximum_lifetime the minimum of the two durations will be the maximum lifetime for issued Certificates. Note that if the issuing CertificateAuthority expires before a Certificate's requested maximum_lifetime, the effective lifetime will be explicitly truncated to match it.
-  "name": "A String", # Output only. The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`.
+  "name": "A String", # Identifier. The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`.
   "passthroughExtensions": { # Describes a set of X.509 extensions that may be part of some certificate issuance controls. # Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate. If a certificate request sets extensions that don't appear in the passthrough_extensions, those extensions will be dropped. If the issuing CaPool's IssuancePolicy defines baseline_values that don't appear here, the certificate issuance request will fail. If this is omitted, then this template will not add restrictions on a certificate's X.509 extensions. These constraints do not apply to X.509 extensions set in this CertificateTemplate's predefined_values.
     "additionalExtensions": [ # Optional. A set of ObjectIds identifying custom X.509 extensions. Will be combined with known_extensions to determine the full set of X.509 extensions.
       { # An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
@@ -332,7 +332,7 @@ 
Method Details

     "a_key": "A String",
   },
   "maximumLifetime": "A String", # Optional. The maximum lifetime allowed for issued Certificates that use this template. If the issuing CaPool resource's IssuancePolicy specifies a maximum_lifetime the minimum of the two durations will be the maximum lifetime for issued Certificates. Note that if the issuing CertificateAuthority expires before a Certificate's requested maximum_lifetime, the effective lifetime will be explicitly truncated to match it.
-  "name": "A String", # Output only. The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`.
+  "name": "A String", # Identifier. The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`.
   "passthroughExtensions": { # Describes a set of X.509 extensions that may be part of some certificate issuance controls. # Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate. If a certificate request sets extensions that don't appear in the passthrough_extensions, those extensions will be dropped. If the issuing CaPool's IssuancePolicy defines baseline_values that don't appear here, the certificate issuance request will fail. If this is omitted, then this template will not add restrictions on a certificate's X.509 extensions. These constraints do not apply to X.509 extensions set in this CertificateTemplate's predefined_values.
     "additionalExtensions": [ # Optional. A set of ObjectIds identifying custom X.509 extensions. Will be combined with known_extensions to determine the full set of X.509 extensions.
       { # An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
@@ -516,7 +516,7 @@ 
Method Details

         "a_key": "A String",
       },
       "maximumLifetime": "A String", # Optional. The maximum lifetime allowed for issued Certificates that use this template. If the issuing CaPool resource's IssuancePolicy specifies a maximum_lifetime the minimum of the two durations will be the maximum lifetime for issued Certificates. Note that if the issuing CertificateAuthority expires before a Certificate's requested maximum_lifetime, the effective lifetime will be explicitly truncated to match it.
-      "name": "A String", # Output only. The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`.
+      "name": "A String", # Identifier. The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`.
       "passthroughExtensions": { # Describes a set of X.509 extensions that may be part of some certificate issuance controls. # Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate. If a certificate request sets extensions that don't appear in the passthrough_extensions, those extensions will be dropped. If the issuing CaPool's IssuancePolicy defines baseline_values that don't appear here, the certificate issuance request will fail. If this is omitted, then this template will not add restrictions on a certificate's X.509 extensions. These constraints do not apply to X.509 extensions set in this CertificateTemplate's predefined_values.
         "additionalExtensions": [ # Optional. A set of ObjectIds identifying custom X.509 extensions. Will be combined with known_extensions to determine the full set of X.509 extensions.
           { # An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
@@ -640,7 +640,7 @@ 
Method Details

   
Update a CertificateTemplate.
 
 Args:
-  name: string, Output only. The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`. (required)
+  name: string, Identifier. The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`. (required)
   body: object, The request body.
     The object takes the form of:
 
@@ -661,7 +661,7 @@ 
Method Details

     "a_key": "A String",
   },
   "maximumLifetime": "A String", # Optional. The maximum lifetime allowed for issued Certificates that use this template. If the issuing CaPool resource's IssuancePolicy specifies a maximum_lifetime the minimum of the two durations will be the maximum lifetime for issued Certificates. Note that if the issuing CertificateAuthority expires before a Certificate's requested maximum_lifetime, the effective lifetime will be explicitly truncated to match it.
-  "name": "A String", # Output only. The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`.
+  "name": "A String", # Identifier. The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`.
   "passthroughExtensions": { # Describes a set of X.509 extensions that may be part of some certificate issuance controls. # Optional. Describes the set of X.509 extensions that may appear in a Certificate issued using this CertificateTemplate. If a certificate request sets extensions that don't appear in the passthrough_extensions, those extensions will be dropped. If the issuing CaPool's IssuancePolicy defines baseline_values that don't appear here, the certificate issuance request will fail. If this is omitted, then this template will not add restrictions on a certificate's X.509 extensions. These constraints do not apply to X.509 extensions set in this CertificateTemplate's predefined_values.
     "additionalExtensions": [ # Optional. A set of ObjectIds identifying custom X.509 extensions. Will be combined with known_extensions to determine the full set of X.509 extensions.
       { # An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
diff --git a/docs/dyn/privateca_v1.projects.locations.operations.html b/docs/dyn/privateca_v1.projects.locations.operations.html
index f7cc91eaca4..8ec9174eb79 100644
--- a/docs/dyn/privateca_v1.projects.locations.operations.html
+++ b/docs/dyn/privateca_v1.projects.locations.operations.html
@@ -76,7 +76,7 @@ 
Certificate Authority API . 
   cancel(name, body=None, x__xgafv=None)

-
Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of 1, corresponding to `Code.CANCELLED`.

+
Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of `1`, corresponding to `Code.CANCELLED`.

 

   close()

 
Close httplib2 connections.

@@ -95,7 +95,7 @@ 
Instance Methods

 
Method Details

 

     cancel(name, body=None, x__xgafv=None)
-  
Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of 1, corresponding to `Code.CANCELLED`.
+  
Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of `1`, corresponding to `Code.CANCELLED`.
 
 Args:
   name: string, The name of the operation resource to be cancelled. (required)
diff --git a/docs/dyn/privateca_v1beta1.projects.locations.operations.html b/docs/dyn/privateca_v1beta1.projects.locations.operations.html
index 4e27b8f18a2..6e3c85c1cce 100644
--- a/docs/dyn/privateca_v1beta1.projects.locations.operations.html
+++ b/docs/dyn/privateca_v1beta1.projects.locations.operations.html
@@ -76,7 +76,7 @@ 
Certificate Authority API . 
   cancel(name, body=None, x__xgafv=None)

-
Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of 1, corresponding to `Code.CANCELLED`.

+
Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of `1`, corresponding to `Code.CANCELLED`.

 

   close()

 
Close httplib2 connections.

@@ -95,7 +95,7 @@ 
Instance Methods

 
Method Details

 

     cancel(name, body=None, x__xgafv=None)
-  
Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of 1, corresponding to `Code.CANCELLED`.
+  
Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of `1`, corresponding to `Code.CANCELLED`.
 
 Args:
   name: string, The name of the operation resource to be cancelled. (required)
diff --git a/googleapiclient/discovery_cache/documents/privateca.v1.json b/googleapiclient/discovery_cache/documents/privateca.v1.json
index 411d95c7680..7f88ba15220 100644
--- a/googleapiclient/discovery_cache/documents/privateca.v1.json
+++ b/googleapiclient/discovery_cache/documents/privateca.v1.json
@@ -392,7 +392,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Output only. Identifier. The resource name for this CaPool in the format `projects/*/locations/*/caPools/*`.",
+"description": "Identifier. The resource name for this CaPool in the format `projects/*/locations/*/caPools/*`.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/caPools/[^/]+$",
 "required": true,
@@ -754,7 +754,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Output only. Identifier. The resource name for this CertificateAuthority in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`.",
+"description": "Identifier. The resource name for this CertificateAuthority in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/caPools/[^/]+/certificateAuthorities/[^/]+$",
 "required": true,
@@ -927,7 +927,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Output only. The resource name for this CertificateRevocationList in the format `projects/*/locations/*/caPools/*certificateAuthorities/*/ certificateRevocationLists/*`.",
+"description": "Identifier. The resource name for this CertificateRevocationList in the format `projects/*/locations/*/caPools/*certificateAuthorities/*/ certificateRevocationLists/*`.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/caPools/[^/]+/certificateAuthorities/[^/]+/certificateRevocationLists/[^/]+$",
 "required": true,
@@ -1147,7 +1147,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Output only. The resource name for this Certificate in the format `projects/*/locations/*/caPools/*/certificates/*`.",
+"description": "Identifier. The resource name for this Certificate in the format `projects/*/locations/*/caPools/*/certificates/*`.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/caPools/[^/]+/certificates/[^/]+$",
 "required": true,
@@ -1390,7 +1390,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Output only. The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`.",
+"description": "Identifier. The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/certificateTemplates/[^/]+$",
 "required": true,
@@ -1480,7 +1480,7 @@
 "operations": {
 "methods": {
 "cancel": {
-"description": "Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of 1, corresponding to `Code.CANCELLED`.",
+"description": "Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of `1`, corresponding to `Code.CANCELLED`.",
 "flatPath": "v1/projects/{projectsId}/locations/{locationsId}/operations/{operationsId}:cancel",
 "httpMethod": "POST",
 "id": "privateca.projects.locations.operations.cancel",
@@ -1605,7 +1605,7 @@
 }
 }
 },
-"revision": "20241106",
+"revision": "20241204",
 "rootUrl": "https://privateca.googleapis.com/",
 "schemas": {
 "AccessUrls": {
@@ -1762,8 +1762,7 @@
 "type": "object"
 },
 "name": {
-"description": "Output only. Identifier. The resource name for this CaPool in the format `projects/*/locations/*/caPools/*`.",
-"readOnly": true,
+"description": "Identifier. The resource name for this CaPool in the format `projects/*/locations/*/caPools/*`.",
 "type": "string"
 },
 "publishingOptions": {
@@ -1847,8 +1846,7 @@
 "type": "string"
 },
 "name": {
-"description": "Output only. The resource name for this Certificate in the format `projects/*/locations/*/caPools/*/certificates/*`.",
-"readOnly": true,
+"description": "Identifier. The resource name for this Certificate in the format `projects/*/locations/*/caPools/*/certificates/*`.",
 "type": "string"
 },
 "pemCertificate": {
@@ -1956,8 +1954,7 @@
 "type": "string"
 },
 "name": {
-"description": "Output only. Identifier. The resource name for this CertificateAuthority in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`.",
-"readOnly": true,
+"description": "Identifier. The resource name for this CertificateAuthority in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`.",
 "type": "string"
 },
 "pemCaCertificates": {
@@ -2216,8 +2213,7 @@
 "type": "object"
 },
 "name": {
-"description": "Output only. The resource name for this CertificateRevocationList in the format `projects/*/locations/*/caPools/*certificateAuthorities/*/ certificateRevocationLists/*`.",
-"readOnly": true,
+"description": "Identifier. The resource name for this CertificateRevocationList in the format `projects/*/locations/*/caPools/*certificateAuthorities/*/ certificateRevocationLists/*`.",
 "type": "string"
 },
 "pemCrl": {
@@ -2299,8 +2295,7 @@
 "type": "string"
 },
 "name": {
-"description": "Output only. The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`.",
-"readOnly": true,
+"description": "Identifier. The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`.",
 "type": "string"
 },
 "passthroughExtensions": {
diff --git a/googleapiclient/discovery_cache/documents/privateca.v1beta1.json b/googleapiclient/discovery_cache/documents/privateca.v1beta1.json
index de4176f4c6f..165adee010d 100644
--- a/googleapiclient/discovery_cache/documents/privateca.v1beta1.json
+++ b/googleapiclient/discovery_cache/documents/privateca.v1beta1.json
@@ -364,7 +364,7 @@
 "operations": {
 "methods": {
 "cancel": {
-"description": "Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of 1, corresponding to `Code.CANCELLED`.",
+"description": "Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of `1`, corresponding to `Code.CANCELLED`.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/operations/{operationsId}:cancel",
 "httpMethod": "POST",
 "id": "privateca.projects.locations.operations.cancel",
@@ -580,7 +580,7 @@
 }
 }
 },
-"revision": "20240626",
+"revision": "20241204",
 "rootUrl": "https://privateca.googleapis.com/",
 "schemas": {
 "AuditConfig": {