feat(cloudfunctions): update the api

#### cloudfunctions:v2

The following keys were added:
- schemas.Function.properties.kmsKeyName.type (Total Keys: 1)

#### cloudfunctions:v2alpha

The following keys were added:
- schemas.Function.properties.kmsKeyName.type (Total Keys: 1)

#### cloudfunctions:v2beta

The following keys were added:
- schemas.Function.properties.kmsKeyName.type (Total Keys: 1)

Author: yoshi-automation

docs/dyn/cloudfunctions_v2.projects.locations.functions.html

@@ -188,6 +188,7 @@ <h3>Method Details</h3>
     &quot;trigger&quot;: &quot;A String&quot;, # Output only. The resource name of the Eventarc trigger. The format of this field is `projects/{project}/locations/{region}/triggers/{trigger}`.
     &quot;triggerRegion&quot;: &quot;A String&quot;, # The region that the trigger will be in. The trigger will only receive events originating in this region. It can be the same region as the function, a different region or multi-region, or the global region. If not provided, defaults to the same region as the function.
   },
+  &quot;kmsKeyName&quot;: &quot;A String&quot;, # Resource name of a KMS crypto key (managed by the user) used to encrypt/decrypt function resources. It must match the pattern `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`.
   &quot;labels&quot;: { # Labels associated with this Cloud Function.
     &quot;a_key&quot;: &quot;A String&quot;,
   },
@@ -344,6 +345,7 @@ <h3>Method Details</h3>
     The object takes the form of:
 
 { # Request of `GenerateSourceUploadUrl` method.
+  &quot;kmsKeyName&quot;: &quot;A String&quot;, # Resource name of a KMS crypto key (managed by the user) used to encrypt/decrypt function source code objects in intermediate Cloud Storage buckets. When you generate an upload url and upload your source code, it gets copied to an intermediate Cloud Storage bucket. The source code is then copied to a versioned directory in the sources bucket in the consumer project during the function deployment. It must match the pattern `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`. The Google Cloud Functions service account (service-{project_number}@gcf-admin-robot.iam.gserviceaccount.com) must be granted the role &#x27;Cloud KMS CryptoKey Encrypter/Decrypter (roles/cloudkms.cryptoKeyEncrypterDecrypter)&#x27; on the Key/KeyRing/Project/Organization (least access preferred).
 }
 
   x__xgafv: string, V1 error format.
@@ -441,6 +443,7 @@ <h3>Method Details</h3>
     &quot;trigger&quot;: &quot;A String&quot;, # Output only. The resource name of the Eventarc trigger. The format of this field is `projects/{project}/locations/{region}/triggers/{trigger}`.
     &quot;triggerRegion&quot;: &quot;A String&quot;, # The region that the trigger will be in. The trigger will only receive events originating in this region. It can be the same region as the function, a different region or multi-region, or the global region. If not provided, defaults to the same region as the function.
   },
+  &quot;kmsKeyName&quot;: &quot;A String&quot;, # Resource name of a KMS crypto key (managed by the user) used to encrypt/decrypt function resources. It must match the pattern `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`.
   &quot;labels&quot;: { # Labels associated with this Cloud Function.
     &quot;a_key&quot;: &quot;A String&quot;,
   },
@@ -629,6 +632,7 @@ <h3>Method Details</h3>
         &quot;trigger&quot;: &quot;A String&quot;, # Output only. The resource name of the Eventarc trigger. The format of this field is `projects/{project}/locations/{region}/triggers/{trigger}`.
         &quot;triggerRegion&quot;: &quot;A String&quot;, # The region that the trigger will be in. The trigger will only receive events originating in this region. It can be the same region as the function, a different region or multi-region, or the global region. If not provided, defaults to the same region as the function.
       },
+      &quot;kmsKeyName&quot;: &quot;A String&quot;, # Resource name of a KMS crypto key (managed by the user) used to encrypt/decrypt function resources. It must match the pattern `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`.
       &quot;labels&quot;: { # Labels associated with this Cloud Function.
         &quot;a_key&quot;: &quot;A String&quot;,
       },
@@ -778,6 +782,7 @@ <h3>Method Details</h3>
     &quot;trigger&quot;: &quot;A String&quot;, # Output only. The resource name of the Eventarc trigger. The format of this field is `projects/{project}/locations/{region}/triggers/{trigger}`.
     &quot;triggerRegion&quot;: &quot;A String&quot;, # The region that the trigger will be in. The trigger will only receive events originating in this region. It can be the same region as the function, a different region or multi-region, or the global region. If not provided, defaults to the same region as the function.
   },
+  &quot;kmsKeyName&quot;: &quot;A String&quot;, # Resource name of a KMS crypto key (managed by the user) used to encrypt/decrypt function resources. It must match the pattern `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`.
   &quot;labels&quot;: { # Labels associated with this Cloud Function.
     &quot;a_key&quot;: &quot;A String&quot;,
   },

docs/dyn/cloudfunctions_v2alpha.projects.locations.functions.html

@@ -188,6 +188,7 @@ <h3>Method Details</h3>
     &quot;trigger&quot;: &quot;A String&quot;, # Output only. The resource name of the Eventarc trigger. The format of this field is `projects/{project}/locations/{region}/triggers/{trigger}`.
     &quot;triggerRegion&quot;: &quot;A String&quot;, # The region that the trigger will be in. The trigger will only receive events originating in this region. It can be the same region as the function, a different region or multi-region, or the global region. If not provided, defaults to the same region as the function.
   },
+  &quot;kmsKeyName&quot;: &quot;A String&quot;, # Resource name of a KMS crypto key (managed by the user) used to encrypt/decrypt function resources. It must match the pattern `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`.
   &quot;labels&quot;: { # Labels associated with this Cloud Function.
     &quot;a_key&quot;: &quot;A String&quot;,
   },
@@ -344,6 +345,7 @@ <h3>Method Details</h3>
     The object takes the form of:
 
 { # Request of `GenerateSourceUploadUrl` method.
+  &quot;kmsKeyName&quot;: &quot;A String&quot;, # Resource name of a KMS crypto key (managed by the user) used to encrypt/decrypt function source code objects in intermediate Cloud Storage buckets. When you generate an upload url and upload your source code, it gets copied to an intermediate Cloud Storage bucket. The source code is then copied to a versioned directory in the sources bucket in the consumer project during the function deployment. It must match the pattern `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`. The Google Cloud Functions service account (service-{project_number}@gcf-admin-robot.iam.gserviceaccount.com) must be granted the role &#x27;Cloud KMS CryptoKey Encrypter/Decrypter (roles/cloudkms.cryptoKeyEncrypterDecrypter)&#x27; on the Key/KeyRing/Project/Organization (least access preferred).
 }
 
   x__xgafv: string, V1 error format.
@@ -441,6 +443,7 @@ <h3>Method Details</h3>
     &quot;trigger&quot;: &quot;A String&quot;, # Output only. The resource name of the Eventarc trigger. The format of this field is `projects/{project}/locations/{region}/triggers/{trigger}`.
     &quot;triggerRegion&quot;: &quot;A String&quot;, # The region that the trigger will be in. The trigger will only receive events originating in this region. It can be the same region as the function, a different region or multi-region, or the global region. If not provided, defaults to the same region as the function.
   },
+  &quot;kmsKeyName&quot;: &quot;A String&quot;, # Resource name of a KMS crypto key (managed by the user) used to encrypt/decrypt function resources. It must match the pattern `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`.
   &quot;labels&quot;: { # Labels associated with this Cloud Function.
     &quot;a_key&quot;: &quot;A String&quot;,
   },
@@ -629,6 +632,7 @@ <h3>Method Details</h3>
         &quot;trigger&quot;: &quot;A String&quot;, # Output only. The resource name of the Eventarc trigger. The format of this field is `projects/{project}/locations/{region}/triggers/{trigger}`.
         &quot;triggerRegion&quot;: &quot;A String&quot;, # The region that the trigger will be in. The trigger will only receive events originating in this region. It can be the same region as the function, a different region or multi-region, or the global region. If not provided, defaults to the same region as the function.
       },
+      &quot;kmsKeyName&quot;: &quot;A String&quot;, # Resource name of a KMS crypto key (managed by the user) used to encrypt/decrypt function resources. It must match the pattern `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`.
       &quot;labels&quot;: { # Labels associated with this Cloud Function.
         &quot;a_key&quot;: &quot;A String&quot;,
       },
@@ -778,6 +782,7 @@ <h3>Method Details</h3>
     &quot;trigger&quot;: &quot;A String&quot;, # Output only. The resource name of the Eventarc trigger. The format of this field is `projects/{project}/locations/{region}/triggers/{trigger}`.
     &quot;triggerRegion&quot;: &quot;A String&quot;, # The region that the trigger will be in. The trigger will only receive events originating in this region. It can be the same region as the function, a different region or multi-region, or the global region. If not provided, defaults to the same region as the function.
   },
+  &quot;kmsKeyName&quot;: &quot;A String&quot;, # Resource name of a KMS crypto key (managed by the user) used to encrypt/decrypt function resources. It must match the pattern `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`.
   &quot;labels&quot;: { # Labels associated with this Cloud Function.
     &quot;a_key&quot;: &quot;A String&quot;,
   },

docs/dyn/cloudfunctions_v2beta.projects.locations.functions.html

@@ -188,6 +188,7 @@ <h3>Method Details</h3>
     &quot;trigger&quot;: &quot;A String&quot;, # Output only. The resource name of the Eventarc trigger. The format of this field is `projects/{project}/locations/{region}/triggers/{trigger}`.
     &quot;triggerRegion&quot;: &quot;A String&quot;, # The region that the trigger will be in. The trigger will only receive events originating in this region. It can be the same region as the function, a different region or multi-region, or the global region. If not provided, defaults to the same region as the function.
   },
+  &quot;kmsKeyName&quot;: &quot;A String&quot;, # Resource name of a KMS crypto key (managed by the user) used to encrypt/decrypt function resources. It must match the pattern `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`.
   &quot;labels&quot;: { # Labels associated with this Cloud Function.
     &quot;a_key&quot;: &quot;A String&quot;,
   },
@@ -344,6 +345,7 @@ <h3>Method Details</h3>
     The object takes the form of:
 
 { # Request of `GenerateSourceUploadUrl` method.
+  &quot;kmsKeyName&quot;: &quot;A String&quot;, # Resource name of a KMS crypto key (managed by the user) used to encrypt/decrypt function source code objects in intermediate Cloud Storage buckets. When you generate an upload url and upload your source code, it gets copied to an intermediate Cloud Storage bucket. The source code is then copied to a versioned directory in the sources bucket in the consumer project during the function deployment. It must match the pattern `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`. The Google Cloud Functions service account (service-{project_number}@gcf-admin-robot.iam.gserviceaccount.com) must be granted the role &#x27;Cloud KMS CryptoKey Encrypter/Decrypter (roles/cloudkms.cryptoKeyEncrypterDecrypter)&#x27; on the Key/KeyRing/Project/Organization (least access preferred).
 }
 
   x__xgafv: string, V1 error format.
@@ -441,6 +443,7 @@ <h3>Method Details</h3>
     &quot;trigger&quot;: &quot;A String&quot;, # Output only. The resource name of the Eventarc trigger. The format of this field is `projects/{project}/locations/{region}/triggers/{trigger}`.
     &quot;triggerRegion&quot;: &quot;A String&quot;, # The region that the trigger will be in. The trigger will only receive events originating in this region. It can be the same region as the function, a different region or multi-region, or the global region. If not provided, defaults to the same region as the function.
   },
+  &quot;kmsKeyName&quot;: &quot;A String&quot;, # Resource name of a KMS crypto key (managed by the user) used to encrypt/decrypt function resources. It must match the pattern `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`.
   &quot;labels&quot;: { # Labels associated with this Cloud Function.
     &quot;a_key&quot;: &quot;A String&quot;,
   },
@@ -629,6 +632,7 @@ <h3>Method Details</h3>
         &quot;trigger&quot;: &quot;A String&quot;, # Output only. The resource name of the Eventarc trigger. The format of this field is `projects/{project}/locations/{region}/triggers/{trigger}`.
         &quot;triggerRegion&quot;: &quot;A String&quot;, # The region that the trigger will be in. The trigger will only receive events originating in this region. It can be the same region as the function, a different region or multi-region, or the global region. If not provided, defaults to the same region as the function.
       },
+      &quot;kmsKeyName&quot;: &quot;A String&quot;, # Resource name of a KMS crypto key (managed by the user) used to encrypt/decrypt function resources. It must match the pattern `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`.
       &quot;labels&quot;: { # Labels associated with this Cloud Function.
         &quot;a_key&quot;: &quot;A String&quot;,
       },
@@ -778,6 +782,7 @@ <h3>Method Details</h3>
     &quot;trigger&quot;: &quot;A String&quot;, # Output only. The resource name of the Eventarc trigger. The format of this field is `projects/{project}/locations/{region}/triggers/{trigger}`.
     &quot;triggerRegion&quot;: &quot;A String&quot;, # The region that the trigger will be in. The trigger will only receive events originating in this region. It can be the same region as the function, a different region or multi-region, or the global region. If not provided, defaults to the same region as the function.
   },
+  &quot;kmsKeyName&quot;: &quot;A String&quot;, # Resource name of a KMS crypto key (managed by the user) used to encrypt/decrypt function resources. It must match the pattern `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`.
   &quot;labels&quot;: { # Labels associated with this Cloud Function.
     &quot;a_key&quot;: &quot;A String&quot;,
   },

googleapiclient/discovery_cache/documents/cloudfunctions.v1.json

@@ -546,7 +546,7 @@
       }
     }
   },
-  "revision": "20230206",
+  "revision": "20230221",
   "rootUrl": "https://cloudfunctions.googleapis.com/",
   "schemas": {
     "AuditConfig": {

googleapiclient/discovery_cache/documents/cloudfunctions.v2.json

@@ -571,7 +571,7 @@
       }
     }
   },
-  "revision": "20230206",
+  "revision": "20230221",
   "rootUrl": "https://cloudfunctions.googleapis.com/",
   "schemas": {
     "AuditConfig": {
@@ -831,6 +831,10 @@
           "$ref": "EventTrigger",
           "description": "An Eventarc trigger managed by Google Cloud Functions that fires events in response to a condition in another service."
         },
+        "kmsKeyName": {
+          "description": "Resource name of a KMS crypto key (managed by the user) used to encrypt/decrypt function resources. It must match the pattern `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`.",
+          "type": "string"
+        },
         "labels": {
           "additionalProperties": {
             "type": "string"
@@ -904,7 +908,12 @@
     "GenerateUploadUrlRequest": {
       "description": "Request of `GenerateSourceUploadUrl` method.",
       "id": "GenerateUploadUrlRequest",
-      "properties": {},
+      "properties": {
+        "kmsKeyName": {
+          "description": "Resource name of a KMS crypto key (managed by the user) used to encrypt/decrypt function source code objects in intermediate Cloud Storage buckets. When you generate an upload url and upload your source code, it gets copied to an intermediate Cloud Storage bucket. The source code is then copied to a versioned directory in the sources bucket in the consumer project during the function deployment. It must match the pattern `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`. The Google Cloud Functions service account (service-{project_number}@gcf-admin-robot.iam.gserviceaccount.com) must be granted the role 'Cloud KMS CryptoKey Encrypter/Decrypter (roles/cloudkms.cryptoKeyEncrypterDecrypter)' on the Key/KeyRing/Project/Organization (least access preferred).",
+          "type": "string"
+        }
+      },
       "type": "object"
     },
     "GenerateUploadUrlResponse": {

googleapiclient/discovery_cache/documents/cloudfunctions.v2alpha.json

@@ -571,7 +571,7 @@
       }
     }
   },
-  "revision": "20230206",
+  "revision": "20230221",
   "rootUrl": "https://cloudfunctions.googleapis.com/",
   "schemas": {
     "AuditConfig": {
@@ -831,6 +831,10 @@
           "$ref": "EventTrigger",
           "description": "An Eventarc trigger managed by Google Cloud Functions that fires events in response to a condition in another service."
         },
+        "kmsKeyName": {
+          "description": "Resource name of a KMS crypto key (managed by the user) used to encrypt/decrypt function resources. It must match the pattern `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`.",
+          "type": "string"
+        },
         "labels": {
           "additionalProperties": {
             "type": "string"
@@ -904,7 +908,12 @@
     "GenerateUploadUrlRequest": {
       "description": "Request of `GenerateSourceUploadUrl` method.",
       "id": "GenerateUploadUrlRequest",
-      "properties": {},
+      "properties": {
+        "kmsKeyName": {
+          "description": "Resource name of a KMS crypto key (managed by the user) used to encrypt/decrypt function source code objects in intermediate Cloud Storage buckets. When you generate an upload url and upload your source code, it gets copied to an intermediate Cloud Storage bucket. The source code is then copied to a versioned directory in the sources bucket in the consumer project during the function deployment. It must match the pattern `projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}`. The Google Cloud Functions service account (service-{project_number}@gcf-admin-robot.iam.gserviceaccount.com) must be granted the role 'Cloud KMS CryptoKey Encrypter/Decrypter (roles/cloudkms.cryptoKeyEncrypterDecrypter)' on the Key/KeyRing/Project/Organization (least access preferred).",
+          "type": "string"
+        }
+      },
       "type": "object"
     },
     "GenerateUploadUrlResponse": {