feat: publish boot_disk_config to support CHD with KMS

Google APIs · copybara-github · commit ae2f5157bf6d · 2023-08-30T17:30:53.000-07:00
PiperOrigin-RevId: 561495678
diff --git a/google/cloud/tpu/v2alpha1/cloud_tpu.proto b/google/cloud/tpu/v2alpha1/cloud_tpu.proto
@@ -542,6 +542,9 @@ message Node {
 
   // Output only. Whether the Node belongs to a Multislice group.
   bool multislice_node = 47 [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Optional. Boot disk configuration.
+  BootDiskConfig boot_disk_config = 49 [(google.api.field_behavior) = OPTIONAL];
 }
 
 // A QueuedResource represents a request for resources that will be placed
@@ -1282,3 +1285,35 @@ message ShieldedInstanceConfig {
   // Defines whether the instance has Secure Boot enabled.
   bool enable_secure_boot = 1;
 }
+
+// Boot disk configurations.
+message BootDiskConfig {
+  // Optional. Customer encryption key for boot disk.
+  CustomerEncryptionKey customer_encryption_key = 1
+      [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. Whether the boot disk will be created with confidential compute
+  // mode.
+  bool enable_confidential_compute = 2 [(google.api.field_behavior) = OPTIONAL];
+}
+
+// Customer's encryption key.
+message CustomerEncryptionKey {
+  oneof key {
+    // The name of the encryption key that is stored in Google Cloud KMS.
+    // For example:
+    // <pre class="lang-html">"kmsKeyName": "projects/
+    // <var class="apiparam">kms_project_id</var>/locations/
+    // <var class="apiparam">region</var>/keyRings/<var class="apiparam">
+    // key_region</var>/cryptoKeys/<var class="apiparam">key</var>
+    // </pre>
+    // The fully-qualifed key name may be returned for resource GET requests.
+    // For example:
+    // <pre class="lang-html">"kmsKeyName": "projects/
+    // <var class="apiparam">kms_project_id</var>/locations/
+    // <var class="apiparam">region</var>/keyRings/<var class="apiparam">
+    // key_region</var>/cryptoKeys/<var class="apiparam">key</var>
+    // /cryptoKeyVersions/1</pre>
+    string kms_key_name = 7;
+  }
+}
