feat: add a variable to SingleTenantHsmInstanceCreate to control whether future key portability features will be usable on the instance

Google APIs · copybara-github · commit bc600b8b7291 · 2026-04-10T07:15:45.000-07:00
PiperOrigin-RevId: 897676455
diff --git a/google/cloud/kms/v1/hsm_management.proto b/google/cloud/kms/v1/hsm_management.proto
@@ -307,6 +307,15 @@ message SingleTenantHsmInstance {
   // become disabled.
   google.protobuf.Timestamp disable_time = 7
       [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Optional. Immutable. Indicates whether key portability is enabled for the
+  // [SingleTenantHsmInstance][google.cloud.kms.v1.SingleTenantHsmInstance].
+  // This can only be set at creation time. Key portability features are
+  // disabled by default and not yet available in GA.
+  bool key_portability_enabled = 8 [
+    (google.api.field_behavior) = OPTIONAL,
+    (google.api.field_behavior) = IMMUTABLE
+  ];
 }
 
 // A
