feat: Add skip_grace_period flag to DeleteCertificateAuthority API

Google APIs · copybara-github · commit 6c2eceaaada5 · 2022-03-09T11:13:26.000-08:00
PiperOrigin-RevId: 433526535
diff --git a/google/cloud/security/privateca/v1/resources.proto b/google/cloud/security/privateca/v1/resources.proto
@@ -16,7 +16,6 @@ syntax = "proto3";
 
 package google.cloud.security.privateca.v1;
 
-import "google/api/annotations.proto";
 import "google/api/field_behavior.proto";
 import "google/api/resource.proto";
 import "google/protobuf/duration.proto";
diff --git a/google/cloud/security/privateca/v1/service.proto b/google/cloud/security/privateca/v1/service.proto
@@ -22,7 +22,6 @@ import "google/api/field_behavior.proto";
 import "google/api/resource.proto";
 import "google/cloud/security/privateca/v1/resources.proto";
 import "google/longrunning/operations.proto";
-import "google/protobuf/duration.proto";
 import "google/protobuf/field_mask.proto";
 import "google/protobuf/timestamp.proto";
 
@@ -796,6 +795,11 @@ message DeleteCertificateAuthorityRequest {
   // Optional. This field allows the CA to be deleted even if the CA has
   // active certs. Active certs include both unrevoked and unexpired certs.
   bool ignore_active_certificates = 4 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. If this flag is set, the Certificate Authority will be deleted as soon as
+  // possible without a 30-day grace period where undeletion would have been
+  // allowed. If you proceed, there will be no way to recover this CA.
+  bool skip_grace_period = 5 [(google.api.field_behavior) = OPTIONAL];
 }
 
 // Request message for
