diff --git a/packages/google-cloud-batch/.jsdoc.js b/packages/google-cloud-batch/.jsdoc.js
index b3e5d7c63ae..bbbfb44aa99 100644
--- a/packages/google-cloud-batch/.jsdoc.js
+++ b/packages/google-cloud-batch/.jsdoc.js
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -40,7 +40,7 @@ module.exports = {
     includePattern: '\\.js$'
   },
   templates: {
-    copyright: 'Copyright 2022 Google LLC',
+    copyright: 'Copyright 2023 Google LLC',
     includeDate: false,
     sourceFiles: false,
     systemName: '@google-cloud/batch',
diff --git a/packages/google-cloud-batch/.mocharc.js b/packages/google-cloud-batch/.mocharc.js
index cdb7b752160..49e7e228701 100644
--- a/packages/google-cloud-batch/.mocharc.js
+++ b/packages/google-cloud-batch/.mocharc.js
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
diff --git a/packages/google-cloud-batch/.prettierrc.js b/packages/google-cloud-batch/.prettierrc.js
index d546a4ad546..1e6cec783e4 100644
--- a/packages/google-cloud-batch/.prettierrc.js
+++ b/packages/google-cloud-batch/.prettierrc.js
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
diff --git a/packages/google-cloud-batch/protos/google/cloud/batch/v1/task.proto b/packages/google-cloud-batch/protos/google/cloud/batch/v1/task.proto
index 3c6251b94ed..1085bfcb083 100644
--- a/packages/google-cloud-batch/protos/google/cloud/batch/v1/task.proto
+++ b/packages/google-cloud-batch/protos/google/cloud/batch/v1/task.proto
@@ -291,6 +291,23 @@ message Task {
 // An Environment describes a collection of environment variables to set when
 // executing Tasks.
 message Environment {
+  message KMSEnvMap {
+    // The name of the KMS key that will be used to decrypt the cipher text.
+    string key_name = 1;
+
+    // The value of the cipherText response from the `encrypt` method.
+    string cipher_text = 2;
+  }
+
   // A map of environment variable names to values.
   map<string, string> variables = 1;
+
+  // A map of environment variable names to Secret Manager secret names.
+  // The VM will access the named secrets to set the value of each environment
+  // variable.
+  map<string, string> secret_variables = 2;
+
+  // An encrypted JSON dictionary where the key/value pairs correspond to
+  // environment variable names and their values.
+  KMSEnvMap encrypted_variables = 3;
 }
diff --git a/packages/google-cloud-batch/protos/protos.d.ts b/packages/google-cloud-batch/protos/protos.d.ts
index fb3a014beed..161f4005520 100644
--- a/packages/google-cloud-batch/protos/protos.d.ts
+++ b/packages/google-cloud-batch/protos/protos.d.ts
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -4638,6 +4638,12 @@ export namespace google {
 
                     /** Environment variables */
                     variables?: ({ [k: string]: string }|null);
+
+                    /** Environment secretVariables */
+                    secretVariables?: ({ [k: string]: string }|null);
+
+                    /** Environment encryptedVariables */
+                    encryptedVariables?: (google.cloud.batch.v1.Environment.IKMSEnvMap|null);
                 }
 
                 /** Represents an Environment. */
@@ -4652,6 +4658,12 @@ export namespace google {
                     /** Environment variables. */
                     public variables: { [k: string]: string };
 
+                    /** Environment secretVariables. */
+                    public secretVariables: { [k: string]: string };
+
+                    /** Environment encryptedVariables. */
+                    public encryptedVariables?: (google.cloud.batch.v1.Environment.IKMSEnvMap|null);
+
                     /**
                      * Creates a new Environment instance using the specified properties.
                      * @param [properties] Properties to set
@@ -4730,6 +4742,112 @@ export namespace google {
                     public static getTypeUrl(typeUrlPrefix?: string): string;
                 }
 
+                namespace Environment {
+
+                    /** Properties of a KMSEnvMap. */
+                    interface IKMSEnvMap {
+
+                        /** KMSEnvMap keyName */
+                        keyName?: (string|null);
+
+                        /** KMSEnvMap cipherText */
+                        cipherText?: (string|null);
+                    }
+
+                    /** Represents a KMSEnvMap. */
+                    class KMSEnvMap implements IKMSEnvMap {
+
+                        /**
+                         * Constructs a new KMSEnvMap.
+                         * @param [properties] Properties to set
+                         */
+                        constructor(properties?: google.cloud.batch.v1.Environment.IKMSEnvMap);
+
+                        /** KMSEnvMap keyName. */
+                        public keyName: string;
+
+                        /** KMSEnvMap cipherText. */
+                        public cipherText: string;
+
+                        /**
+                         * Creates a new KMSEnvMap instance using the specified properties.
+                         * @param [properties] Properties to set
+                         * @returns KMSEnvMap instance
+                         */
+                        public static create(properties?: google.cloud.batch.v1.Environment.IKMSEnvMap): google.cloud.batch.v1.Environment.KMSEnvMap;
+
+                        /**
+                         * Encodes the specified KMSEnvMap message. Does not implicitly {@link google.cloud.batch.v1.Environment.KMSEnvMap.verify|verify} messages.
+                         * @param message KMSEnvMap message or plain object to encode
+                         * @param [writer] Writer to encode to
+                         * @returns Writer
+                         */
+                        public static encode(message: google.cloud.batch.v1.Environment.IKMSEnvMap, writer?: $protobuf.Writer): $protobuf.Writer;
+
+                        /**
+                         * Encodes the specified KMSEnvMap message, length delimited. Does not implicitly {@link google.cloud.batch.v1.Environment.KMSEnvMap.verify|verify} messages.
+                         * @param message KMSEnvMap message or plain object to encode
+                         * @param [writer] Writer to encode to
+                         * @returns Writer
+                         */
+                        public static encodeDelimited(message: google.cloud.batch.v1.Environment.IKMSEnvMap, writer?: $protobuf.Writer): $protobuf.Writer;
+
+                        /**
+                         * Decodes a KMSEnvMap message from the specified reader or buffer.
+                         * @param reader Reader or buffer to decode from
+                         * @param [length] Message length if known beforehand
+                         * @returns KMSEnvMap
+                         * @throws {Error} If the payload is not a reader or valid buffer
+                         * @throws {$protobuf.util.ProtocolError} If required fields are missing
+                         */
+                        public static decode(reader: ($protobuf.Reader|Uint8Array), length?: number): google.cloud.batch.v1.Environment.KMSEnvMap;
+
+                        /**
+                         * Decodes a KMSEnvMap message from the specified reader or buffer, length delimited.
+                         * @param reader Reader or buffer to decode from
+                         * @returns KMSEnvMap
+                         * @throws {Error} If the payload is not a reader or valid buffer
+                         * @throws {$protobuf.util.ProtocolError} If required fields are missing
+                         */
+                        public static decodeDelimited(reader: ($protobuf.Reader|Uint8Array)): google.cloud.batch.v1.Environment.KMSEnvMap;
+
+                        /**
+                         * Verifies a KMSEnvMap message.
+                         * @param message Plain object to verify
+                         * @returns `null` if valid, otherwise the reason why it is not
+                         */
+                        public static verify(message: { [k: string]: any }): (string|null);
+
+                        /**
+                         * Creates a KMSEnvMap message from a plain object. Also converts values to their respective internal types.
+                         * @param object Plain object
+                         * @returns KMSEnvMap
+                         */
+                        public static fromObject(object: { [k: string]: any }): google.cloud.batch.v1.Environment.KMSEnvMap;
+
+                        /**
+                         * Creates a plain object from a KMSEnvMap message. Also converts values to other types if specified.
+                         * @param message KMSEnvMap
+                         * @param [options] Conversion options
+                         * @returns Plain object
+                         */
+                        public static toObject(message: google.cloud.batch.v1.Environment.KMSEnvMap, options?: $protobuf.IConversionOptions): { [k: string]: any };
+
+                        /**
+                         * Converts this KMSEnvMap to JSON.
+                         * @returns JSON object
+                         */
+                        public toJSON(): { [k: string]: any };
+
+                        /**
+                         * Gets the default type url for KMSEnvMap
+                         * @param [typeUrlPrefix] your custom typeUrlPrefix(default "type.googleapis.com")
+                         * @returns The default type url
+                         */
+                        public static getTypeUrl(typeUrlPrefix?: string): string;
+                    }
+                }
+
                 /** Properties of a Volume. */
                 interface IVolume {
 
diff --git a/packages/google-cloud-batch/protos/protos.js b/packages/google-cloud-batch/protos/protos.js
index c76914c6e78..fd3fecdc0b7 100644
--- a/packages/google-cloud-batch/protos/protos.js
+++ b/packages/google-cloud-batch/protos/protos.js
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -11956,6 +11956,8 @@
                          * @memberof google.cloud.batch.v1
                          * @interface IEnvironment
                          * @property {Object.<string,string>|null} [variables] Environment variables
+                         * @property {Object.<string,string>|null} [secretVariables] Environment secretVariables
+                         * @property {google.cloud.batch.v1.Environment.IKMSEnvMap|null} [encryptedVariables] Environment encryptedVariables
                          */
     
                         /**
@@ -11968,6 +11970,7 @@
                          */
                         function Environment(properties) {
                             this.variables = {};
+                            this.secretVariables = {};
                             if (properties)
                                 for (var keys = Object.keys(properties), i = 0; i < keys.length; ++i)
                                     if (properties[keys[i]] != null)
@@ -11982,6 +11985,22 @@
                          */
                         Environment.prototype.variables = $util.emptyObject;
     
+                        /**
+                         * Environment secretVariables.
+                         * @member {Object.<string,string>} secretVariables
+                         * @memberof google.cloud.batch.v1.Environment
+                         * @instance
+                         */
+                        Environment.prototype.secretVariables = $util.emptyObject;
+    
+                        /**
+                         * Environment encryptedVariables.
+                         * @member {google.cloud.batch.v1.Environment.IKMSEnvMap|null|undefined} encryptedVariables
+                         * @memberof google.cloud.batch.v1.Environment
+                         * @instance
+                         */
+                        Environment.prototype.encryptedVariables = null;
+    
                         /**
                          * Creates a new Environment instance using the specified properties.
                          * @function create
@@ -12009,6 +12028,11 @@
                             if (message.variables != null && Object.hasOwnProperty.call(message, "variables"))
                                 for (var keys = Object.keys(message.variables), i = 0; i < keys.length; ++i)
                                     writer.uint32(/* id 1, wireType 2 =*/10).fork().uint32(/* id 1, wireType 2 =*/10).string(keys[i]).uint32(/* id 2, wireType 2 =*/18).string(message.variables[keys[i]]).ldelim();
+                            if (message.secretVariables != null && Object.hasOwnProperty.call(message, "secretVariables"))
+                                for (var keys = Object.keys(message.secretVariables), i = 0; i < keys.length; ++i)
+                                    writer.uint32(/* id 2, wireType 2 =*/18).fork().uint32(/* id 1, wireType 2 =*/10).string(keys[i]).uint32(/* id 2, wireType 2 =*/18).string(message.secretVariables[keys[i]]).ldelim();
+                            if (message.encryptedVariables != null && Object.hasOwnProperty.call(message, "encryptedVariables"))
+                                $root.google.cloud.batch.v1.Environment.KMSEnvMap.encode(message.encryptedVariables, writer.uint32(/* id 3, wireType 2 =*/26).fork()).ldelim();
                             return writer;
                         };
     
@@ -12066,6 +12090,33 @@
                                         message.variables[key] = value;
                                         break;
                                     }
+                                case 2: {
+                                        if (message.secretVariables === $util.emptyObject)
+                                            message.secretVariables = {};
+                                        var end2 = reader.uint32() + reader.pos;
+                                        key = "";
+                                        value = "";
+                                        while (reader.pos < end2) {
+                                            var tag2 = reader.uint32();
+                                            switch (tag2 >>> 3) {
+                                            case 1:
+                                                key = reader.string();
+                                                break;
+                                            case 2:
+                                                value = reader.string();
+                                                break;
+                                            default:
+                                                reader.skipType(tag2 & 7);
+                                                break;
+                                            }
+                                        }
+                                        message.secretVariables[key] = value;
+                                        break;
+                                    }
+                                case 3: {
+                                        message.encryptedVariables = $root.google.cloud.batch.v1.Environment.KMSEnvMap.decode(reader, reader.uint32());
+                                        break;
+                                    }
                                 default:
                                     reader.skipType(tag & 7);
                                     break;
@@ -12109,6 +12160,19 @@
                                     if (!$util.isString(message.variables[key[i]]))
                                         return "variables: string{k:string} expected";
                             }
+                            if (message.secretVariables != null && message.hasOwnProperty("secretVariables")) {
+                                if (!$util.isObject(message.secretVariables))
+                                    return "secretVariables: object expected";
+                                var key = Object.keys(message.secretVariables);
+                                for (var i = 0; i < key.length; ++i)
+                                    if (!$util.isString(message.secretVariables[key[i]]))
+                                        return "secretVariables: string{k:string} expected";
+                            }
+                            if (message.encryptedVariables != null && message.hasOwnProperty("encryptedVariables")) {
+                                var error = $root.google.cloud.batch.v1.Environment.KMSEnvMap.verify(message.encryptedVariables);
+                                if (error)
+                                    return "encryptedVariables." + error;
+                            }
                             return null;
                         };
     
@@ -12131,6 +12195,18 @@
                                 for (var keys = Object.keys(object.variables), i = 0; i < keys.length; ++i)
                                     message.variables[keys[i]] = String(object.variables[keys[i]]);
                             }
+                            if (object.secretVariables) {
+                                if (typeof object.secretVariables !== "object")
+                                    throw TypeError(".google.cloud.batch.v1.Environment.secretVariables: object expected");
+                                message.secretVariables = {};
+                                for (var keys = Object.keys(object.secretVariables), i = 0; i < keys.length; ++i)
+                                    message.secretVariables[keys[i]] = String(object.secretVariables[keys[i]]);
+                            }
+                            if (object.encryptedVariables != null) {
+                                if (typeof object.encryptedVariables !== "object")
+                                    throw TypeError(".google.cloud.batch.v1.Environment.encryptedVariables: object expected");
+                                message.encryptedVariables = $root.google.cloud.batch.v1.Environment.KMSEnvMap.fromObject(object.encryptedVariables);
+                            }
                             return message;
                         };
     
@@ -12147,14 +12223,25 @@
                             if (!options)
                                 options = {};
                             var object = {};
-                            if (options.objects || options.defaults)
+                            if (options.objects || options.defaults) {
                                 object.variables = {};
+                                object.secretVariables = {};
+                            }
+                            if (options.defaults)
+                                object.encryptedVariables = null;
                             var keys2;
                             if (message.variables && (keys2 = Object.keys(message.variables)).length) {
                                 object.variables = {};
                                 for (var j = 0; j < keys2.length; ++j)
                                     object.variables[keys2[j]] = message.variables[keys2[j]];
                             }
+                            if (message.secretVariables && (keys2 = Object.keys(message.secretVariables)).length) {
+                                object.secretVariables = {};
+                                for (var j = 0; j < keys2.length; ++j)
+                                    object.secretVariables[keys2[j]] = message.secretVariables[keys2[j]];
+                            }
+                            if (message.encryptedVariables != null && message.hasOwnProperty("encryptedVariables"))
+                                object.encryptedVariables = $root.google.cloud.batch.v1.Environment.KMSEnvMap.toObject(message.encryptedVariables, options);
                             return object;
                         };
     
@@ -12184,6 +12271,233 @@
                             return typeUrlPrefix + "/google.cloud.batch.v1.Environment";
                         };
     
+                        Environment.KMSEnvMap = (function() {
+    
+                            /**
+                             * Properties of a KMSEnvMap.
+                             * @memberof google.cloud.batch.v1.Environment
+                             * @interface IKMSEnvMap
+                             * @property {string|null} [keyName] KMSEnvMap keyName
+                             * @property {string|null} [cipherText] KMSEnvMap cipherText
+                             */
+    
+                            /**
+                             * Constructs a new KMSEnvMap.
+                             * @memberof google.cloud.batch.v1.Environment
+                             * @classdesc Represents a KMSEnvMap.
+                             * @implements IKMSEnvMap
+                             * @constructor
+                             * @param {google.cloud.batch.v1.Environment.IKMSEnvMap=} [properties] Properties to set
+                             */
+                            function KMSEnvMap(properties) {
+                                if (properties)
+                                    for (var keys = Object.keys(properties), i = 0; i < keys.length; ++i)
+                                        if (properties[keys[i]] != null)
+                                            this[keys[i]] = properties[keys[i]];
+                            }
+    
+                            /**
+                             * KMSEnvMap keyName.
+                             * @member {string} keyName
+                             * @memberof google.cloud.batch.v1.Environment.KMSEnvMap
+                             * @instance
+                             */
+                            KMSEnvMap.prototype.keyName = "";
+    
+                            /**
+                             * KMSEnvMap cipherText.
+                             * @member {string} cipherText
+                             * @memberof google.cloud.batch.v1.Environment.KMSEnvMap
+                             * @instance
+                             */
+                            KMSEnvMap.prototype.cipherText = "";
+    
+                            /**
+                             * Creates a new KMSEnvMap instance using the specified properties.
+                             * @function create
+                             * @memberof google.cloud.batch.v1.Environment.KMSEnvMap
+                             * @static
+                             * @param {google.cloud.batch.v1.Environment.IKMSEnvMap=} [properties] Properties to set
+                             * @returns {google.cloud.batch.v1.Environment.KMSEnvMap} KMSEnvMap instance
+                             */
+                            KMSEnvMap.create = function create(properties) {
+                                return new KMSEnvMap(properties);
+                            };
+    
+                            /**
+                             * Encodes the specified KMSEnvMap message. Does not implicitly {@link google.cloud.batch.v1.Environment.KMSEnvMap.verify|verify} messages.
+                             * @function encode
+                             * @memberof google.cloud.batch.v1.Environment.KMSEnvMap
+                             * @static
+                             * @param {google.cloud.batch.v1.Environment.IKMSEnvMap} message KMSEnvMap message or plain object to encode
+                             * @param {$protobuf.Writer} [writer] Writer to encode to
+                             * @returns {$protobuf.Writer} Writer
+                             */
+                            KMSEnvMap.encode = function encode(message, writer) {
+                                if (!writer)
+                                    writer = $Writer.create();
+                                if (message.keyName != null && Object.hasOwnProperty.call(message, "keyName"))
+                                    writer.uint32(/* id 1, wireType 2 =*/10).string(message.keyName);
+                                if (message.cipherText != null && Object.hasOwnProperty.call(message, "cipherText"))
+                                    writer.uint32(/* id 2, wireType 2 =*/18).string(message.cipherText);
+                                return writer;
+                            };
+    
+                            /**
+                             * Encodes the specified KMSEnvMap message, length delimited. Does not implicitly {@link google.cloud.batch.v1.Environment.KMSEnvMap.verify|verify} messages.
+                             * @function encodeDelimited
+                             * @memberof google.cloud.batch.v1.Environment.KMSEnvMap
+                             * @static
+                             * @param {google.cloud.batch.v1.Environment.IKMSEnvMap} message KMSEnvMap message or plain object to encode
+                             * @param {$protobuf.Writer} [writer] Writer to encode to
+                             * @returns {$protobuf.Writer} Writer
+                             */
+                            KMSEnvMap.encodeDelimited = function encodeDelimited(message, writer) {
+                                return this.encode(message, writer).ldelim();
+                            };
+    
+                            /**
+                             * Decodes a KMSEnvMap message from the specified reader or buffer.
+                             * @function decode
+                             * @memberof google.cloud.batch.v1.Environment.KMSEnvMap
+                             * @static
+                             * @param {$protobuf.Reader|Uint8Array} reader Reader or buffer to decode from
+                             * @param {number} [length] Message length if known beforehand
+                             * @returns {google.cloud.batch.v1.Environment.KMSEnvMap} KMSEnvMap
+                             * @throws {Error} If the payload is not a reader or valid buffer
+                             * @throws {$protobuf.util.ProtocolError} If required fields are missing
+                             */
+                            KMSEnvMap.decode = function decode(reader, length) {
+                                if (!(reader instanceof $Reader))
+                                    reader = $Reader.create(reader);
+                                var end = length === undefined ? reader.len : reader.pos + length, message = new $root.google.cloud.batch.v1.Environment.KMSEnvMap();
+                                while (reader.pos < end) {
+                                    var tag = reader.uint32();
+                                    switch (tag >>> 3) {
+                                    case 1: {
+                                            message.keyName = reader.string();
+                                            break;
+                                        }
+                                    case 2: {
+                                            message.cipherText = reader.string();
+                                            break;
+                                        }
+                                    default:
+                                        reader.skipType(tag & 7);
+                                        break;
+                                    }
+                                }
+                                return message;
+                            };
+    
+                            /**
+                             * Decodes a KMSEnvMap message from the specified reader or buffer, length delimited.
+                             * @function decodeDelimited
+                             * @memberof google.cloud.batch.v1.Environment.KMSEnvMap
+                             * @static
+                             * @param {$protobuf.Reader|Uint8Array} reader Reader or buffer to decode from
+                             * @returns {google.cloud.batch.v1.Environment.KMSEnvMap} KMSEnvMap
+                             * @throws {Error} If the payload is not a reader or valid buffer
+                             * @throws {$protobuf.util.ProtocolError} If required fields are missing
+                             */
+                            KMSEnvMap.decodeDelimited = function decodeDelimited(reader) {
+                                if (!(reader instanceof $Reader))
+                                    reader = new $Reader(reader);
+                                return this.decode(reader, reader.uint32());
+                            };
+    
+                            /**
+                             * Verifies a KMSEnvMap message.
+                             * @function verify
+                             * @memberof google.cloud.batch.v1.Environment.KMSEnvMap
+                             * @static
+                             * @param {Object.<string,*>} message Plain object to verify
+                             * @returns {string|null} `null` if valid, otherwise the reason why it is not
+                             */
+                            KMSEnvMap.verify = function verify(message) {
+                                if (typeof message !== "object" || message === null)
+                                    return "object expected";
+                                if (message.keyName != null && message.hasOwnProperty("keyName"))
+                                    if (!$util.isString(message.keyName))
+                                        return "keyName: string expected";
+                                if (message.cipherText != null && message.hasOwnProperty("cipherText"))
+                                    if (!$util.isString(message.cipherText))
+                                        return "cipherText: string expected";
+                                return null;
+                            };
+    
+                            /**
+                             * Creates a KMSEnvMap message from a plain object. Also converts values to their respective internal types.
+                             * @function fromObject
+                             * @memberof google.cloud.batch.v1.Environment.KMSEnvMap
+                             * @static
+                             * @param {Object.<string,*>} object Plain object
+                             * @returns {google.cloud.batch.v1.Environment.KMSEnvMap} KMSEnvMap
+                             */
+                            KMSEnvMap.fromObject = function fromObject(object) {
+                                if (object instanceof $root.google.cloud.batch.v1.Environment.KMSEnvMap)
+                                    return object;
+                                var message = new $root.google.cloud.batch.v1.Environment.KMSEnvMap();
+                                if (object.keyName != null)
+                                    message.keyName = String(object.keyName);
+                                if (object.cipherText != null)
+                                    message.cipherText = String(object.cipherText);
+                                return message;
+                            };
+    
+                            /**
+                             * Creates a plain object from a KMSEnvMap message. Also converts values to other types if specified.
+                             * @function toObject
+                             * @memberof google.cloud.batch.v1.Environment.KMSEnvMap
+                             * @static
+                             * @param {google.cloud.batch.v1.Environment.KMSEnvMap} message KMSEnvMap
+                             * @param {$protobuf.IConversionOptions} [options] Conversion options
+                             * @returns {Object.<string,*>} Plain object
+                             */
+                            KMSEnvMap.toObject = function toObject(message, options) {
+                                if (!options)
+                                    options = {};
+                                var object = {};
+                                if (options.defaults) {
+                                    object.keyName = "";
+                                    object.cipherText = "";
+                                }
+                                if (message.keyName != null && message.hasOwnProperty("keyName"))
+                                    object.keyName = message.keyName;
+                                if (message.cipherText != null && message.hasOwnProperty("cipherText"))
+                                    object.cipherText = message.cipherText;
+                                return object;
+                            };
+    
+                            /**
+                             * Converts this KMSEnvMap to JSON.
+                             * @function toJSON
+                             * @memberof google.cloud.batch.v1.Environment.KMSEnvMap
+                             * @instance
+                             * @returns {Object.<string,*>} JSON object
+                             */
+                            KMSEnvMap.prototype.toJSON = function toJSON() {
+                                return this.constructor.toObject(this, $protobuf.util.toJSONOptions);
+                            };
+    
+                            /**
+                             * Gets the default type url for KMSEnvMap
+                             * @function getTypeUrl
+                             * @memberof google.cloud.batch.v1.Environment.KMSEnvMap
+                             * @static
+                             * @param {string} [typeUrlPrefix] your custom typeUrlPrefix(default "type.googleapis.com")
+                             * @returns {string} The default type url
+                             */
+                            KMSEnvMap.getTypeUrl = function getTypeUrl(typeUrlPrefix) {
+                                if (typeUrlPrefix === undefined) {
+                                    typeUrlPrefix = "type.googleapis.com";
+                                }
+                                return typeUrlPrefix + "/google.cloud.batch.v1.Environment.KMSEnvMap";
+                            };
+    
+                            return KMSEnvMap;
+                        })();
+    
                         return Environment;
                     })();
     
diff --git a/packages/google-cloud-batch/protos/protos.json b/packages/google-cloud-batch/protos/protos.json
index d3eb48b0b32..c0d282a92ee 100644
--- a/packages/google-cloud-batch/protos/protos.json
+++ b/packages/google-cloud-batch/protos/protos.json
@@ -1076,6 +1076,29 @@
                           "keyType": "string",
                           "type": "string",
                           "id": 1
+                        },
+                        "secretVariables": {
+                          "keyType": "string",
+                          "type": "string",
+                          "id": 2
+                        },
+                        "encryptedVariables": {
+                          "type": "KMSEnvMap",
+                          "id": 3
+                        }
+                      },
+                      "nested": {
+                        "KMSEnvMap": {
+                          "fields": {
+                            "keyName": {
+                              "type": "string",
+                              "id": 1
+                            },
+                            "cipherText": {
+                              "type": "string",
+                              "id": 2
+                            }
+                          }
                         }
                       }
                     },
diff --git a/packages/google-cloud-batch/samples/generated/v1/batch_service.create_job.js b/packages/google-cloud-batch/samples/generated/v1/batch_service.create_job.js
index 92cc56148bd..4de994b2f73 100644
--- a/packages/google-cloud-batch/samples/generated/v1/batch_service.create_job.js
+++ b/packages/google-cloud-batch/samples/generated/v1/batch_service.create_job.js
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
diff --git a/packages/google-cloud-batch/samples/generated/v1/batch_service.delete_job.js b/packages/google-cloud-batch/samples/generated/v1/batch_service.delete_job.js
index f5a679f29c2..e19a6808169 100644
--- a/packages/google-cloud-batch/samples/generated/v1/batch_service.delete_job.js
+++ b/packages/google-cloud-batch/samples/generated/v1/batch_service.delete_job.js
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
diff --git a/packages/google-cloud-batch/samples/generated/v1/batch_service.get_job.js b/packages/google-cloud-batch/samples/generated/v1/batch_service.get_job.js
index f00f7476d5f..c45a5b7f46d 100644
--- a/packages/google-cloud-batch/samples/generated/v1/batch_service.get_job.js
+++ b/packages/google-cloud-batch/samples/generated/v1/batch_service.get_job.js
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
diff --git a/packages/google-cloud-batch/samples/generated/v1/batch_service.get_task.js b/packages/google-cloud-batch/samples/generated/v1/batch_service.get_task.js
index f77cf86c93d..12a0c45a2a5 100644
--- a/packages/google-cloud-batch/samples/generated/v1/batch_service.get_task.js
+++ b/packages/google-cloud-batch/samples/generated/v1/batch_service.get_task.js
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
diff --git a/packages/google-cloud-batch/samples/generated/v1/batch_service.list_jobs.js b/packages/google-cloud-batch/samples/generated/v1/batch_service.list_jobs.js
index 87522e36db6..10807d04141 100644
--- a/packages/google-cloud-batch/samples/generated/v1/batch_service.list_jobs.js
+++ b/packages/google-cloud-batch/samples/generated/v1/batch_service.list_jobs.js
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
diff --git a/packages/google-cloud-batch/samples/generated/v1/batch_service.list_tasks.js b/packages/google-cloud-batch/samples/generated/v1/batch_service.list_tasks.js
index bafcb06548a..2c53d7f22ce 100644
--- a/packages/google-cloud-batch/samples/generated/v1/batch_service.list_tasks.js
+++ b/packages/google-cloud-batch/samples/generated/v1/batch_service.list_tasks.js
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
diff --git a/packages/google-cloud-batch/src/index.ts b/packages/google-cloud-batch/src/index.ts
index cabf816af03..b359fb00ae5 100644
--- a/packages/google-cloud-batch/src/index.ts
+++ b/packages/google-cloud-batch/src/index.ts
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
diff --git a/packages/google-cloud-batch/src/v1/batch_service_client.ts b/packages/google-cloud-batch/src/v1/batch_service_client.ts
index ad9412d0771..7011f4b7da8 100644
--- a/packages/google-cloud-batch/src/v1/batch_service_client.ts
+++ b/packages/google-cloud-batch/src/v1/batch_service_client.ts
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
diff --git a/packages/google-cloud-batch/src/v1/index.ts b/packages/google-cloud-batch/src/v1/index.ts
index 0f129526252..20125bdd61d 100644
--- a/packages/google-cloud-batch/src/v1/index.ts
+++ b/packages/google-cloud-batch/src/v1/index.ts
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
diff --git a/packages/google-cloud-batch/system-test/fixtures/sample/src/index.js b/packages/google-cloud-batch/system-test/fixtures/sample/src/index.js
index 2e35c26c93d..b29a8bdc32f 100644
--- a/packages/google-cloud-batch/system-test/fixtures/sample/src/index.js
+++ b/packages/google-cloud-batch/system-test/fixtures/sample/src/index.js
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
diff --git a/packages/google-cloud-batch/system-test/fixtures/sample/src/index.ts b/packages/google-cloud-batch/system-test/fixtures/sample/src/index.ts
index a09668ae84d..a704285f484 100644
--- a/packages/google-cloud-batch/system-test/fixtures/sample/src/index.ts
+++ b/packages/google-cloud-batch/system-test/fixtures/sample/src/index.ts
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
diff --git a/packages/google-cloud-batch/system-test/install.ts b/packages/google-cloud-batch/system-test/install.ts
index 6dd1eaadafa..f61fe236476 100644
--- a/packages/google-cloud-batch/system-test/install.ts
+++ b/packages/google-cloud-batch/system-test/install.ts
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
diff --git a/packages/google-cloud-batch/test/gapic_batch_service_v1.ts b/packages/google-cloud-batch/test/gapic_batch_service_v1.ts
index efe552ed992..288cfa0933d 100644
--- a/packages/google-cloud-batch/test/gapic_batch_service_v1.ts
+++ b/packages/google-cloud-batch/test/gapic_batch_service_v1.ts
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.