feat: update secret manager protos for tags

Google APIs · copybara-github · commit 02838cfff3c0 · 2025-06-04T21:35:27.000-07:00
Clients can use use tags on secret manager to manage access to the resources(secret)

PiperOrigin-RevId: 767419371
diff --git a/google/cloud/secretmanager/v1/resources.proto b/google/cloud/secretmanager/v1/resources.proto
@@ -161,6 +161,20 @@ message Secret {
   // [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
   CustomerManagedEncryption customer_managed_encryption = 15
       [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. Input only. Immutable. Mapping of Tag keys/values directly bound
+  // to this resource. For example:
+  //   "123/environment": "production",
+  //   "123/costCenter": "marketing"
+  //
+  // Tags are used to organize and group resources.
+  //
+  // Tags can be used to control policy evaluation for the resource.
+  map<string, string> tags = 16 [
+    (google.api.field_behavior) = INPUT_ONLY,
+    (google.api.field_behavior) = IMMUTABLE,
+    (google.api.field_behavior) = OPTIONAL
+  ];
 }
 
 // A secret version resource in the Secret Manager API.
