feat: support secret and encrypted environment variables in v1

Google APIs · copybara-github · commit af050dcf9b72 · 2023-01-03T16:10:31.000-08:00
PiperOrigin-RevId: 499338464
diff --git a/google/cloud/batch/v1/task.proto b/google/cloud/batch/v1/task.proto
@@ -291,6 +291,23 @@ message Task {
 // An Environment describes a collection of environment variables to set when
 // executing Tasks.
 message Environment {
+  message KMSEnvMap {
+    // The name of the KMS key that will be used to decrypt the cipher text.
+    string key_name = 1;
+
+    // The value of the cipherText response from the `encrypt` method.
+    string cipher_text = 2;
+  }
+
   // A map of environment variable names to values.
   map<string, string> variables = 1;
+
+  // A map of environment variable names to Secret Manager secret names.
+  // The VM will access the named secrets to set the value of each environment
+  // variable.
+  map<string, string> secret_variables = 2;
+
+  // An encrypted JSON dictionary where the key/value pairs correspond to
+  // environment variable names and their values.
+  KMSEnvMap encrypted_variables = 3;
 }
