feat: add Pipeline.secret_environment, Action.secret_environment, VirtualMachine.reservation

packages/google-cloud-lifesciences/protos/google/cloud/lifesciences/v2beta/workflows.proto

@@ -1,4 +1,4 @@
-// Copyright 2021 Google LLC
+// Copyright 2022 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -17,12 +17,12 @@ syntax = "proto3";
 package google.cloud.lifesciences.v2beta;
 
 import "google/api/annotations.proto";
+import "google/api/client.proto";
 import "google/api/field_behavior.proto";
 import "google/longrunning/operations.proto";
 import "google/protobuf/duration.proto";
 import "google/protobuf/timestamp.proto";
 import "google/rpc/code.proto";
-import "google/api/client.proto";
 
 option csharp_namespace = "Google.Cloud.LifeSciences.V2Beta";
 option go_package = "google.golang.org/genproto/googleapis/cloud/lifesciences/v2beta;lifesciences";
@@ -112,6 +112,15 @@ message Pipeline {
   // (though they can overwrite it with a different value).
   map<string, string> environment = 3;
 
+  // The encrypted environment to pass into every action. Each action can also
+  // specify its own encrypted environment.
+  //
+  // The secret must decrypt to a JSON-encoded dictionary where key-value pairs
+  // serve as environment variable names and their values. The decoded
+  // environment variables can overwrite the values specified by the
+  // `environment` field.
+  Secret encrypted_environment = 5;
+
   // The maximum amount of time to give the pipeline to complete.  This includes
   // the time spent waiting for a worker to be allocated.  If the pipeline fails
   // to complete before the timeout, it will be cancelled and the error code
@@ -172,6 +181,17 @@ message Action {
   // authors to determine whether an individual action has succeeded or failed.
   map<string, string> environment = 5;
 
+  // The encrypted environment to pass into the container. This environment is
+  // merged with values specified in the
+  // [google.cloud.lifesciences.v2beta.Pipeline][google.cloud.lifesciences.v2beta.Pipeline] message, overwriting any
+  // duplicate values.
+  //
+  // The secret must decrypt to a JSON-encoded dictionary where key-value pairs
+  // serve as environment variable names and their values. The decoded
+  // environment variables can overwrite the values specified by the
+  // `environment` field.
+  Secret encrypted_environment = 21;
+
   // An optional identifier for a PID namespace to run the action inside.
   // Multiple actions should use the same string to share a namespace.  If
   // unspecified, a separate isolated namespace is used.
@@ -408,6 +428,10 @@ message VirtualMachine {
   //
   // Specify either the `volumes[]` field or the `disks[]` field, but not both.
   repeated Volume volumes = 14;
+
+  // If specified, the VM will only be allocated inside the matching
+  // reservation. It will fail if the VM parameters don't match the reservation.
+  string reservation = 15;
 }
 
 // Carries information about a Google Cloud service account.