feat: support secret and encrypted environment variables in v1 (#3828)

- [ ] Regenerate this pull request now.

PiperOrigin-RevId: 499338464

Source-Link: https://togithub.com/googleapis/googleapis/commit/af050dcf9b72d192ef20b79149a6655a9afee870

Source-Link: https://togithub.com/googleapis/googleapis-gen/commit/413df7a1d735359d333c56e19f6af9c7f95957e4
Copy-Tag: eyJwIjoicGFja2FnZXMvZ29vZ2xlLWNsb3VkLWJhdGNoLy5Pd2xCb3QueWFtbCIsImgiOiI0MTNkZjdhMWQ3MzUzNTlkMzMzYzU2ZTE5ZjZhZjljN2Y5NTk1N2U0In0=

Author: gcf-owl-bot[bot]

packages/google-cloud-batch/.jsdoc.js

@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -40,7 +40,7 @@ module.exports = {
     includePattern: '\\.js$'
   },
   templates: {
-    copyright: 'Copyright 2022 Google LLC',
+    copyright: 'Copyright 2023 Google LLC',
     includeDate: false,
     sourceFiles: false,
     systemName: '@google-cloud/batch',

packages/google-cloud-batch/.mocharc.js

@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.

packages/google-cloud-batch/.prettierrc.js

@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.

packages/google-cloud-batch/protos/google/cloud/batch/v1/task.proto

@@ -291,6 +291,23 @@ message Task {
 // An Environment describes a collection of environment variables to set when
 // executing Tasks.
 message Environment {
+  message KMSEnvMap {
+    // The name of the KMS key that will be used to decrypt the cipher text.
+    string key_name = 1;
+
+    // The value of the cipherText response from the `encrypt` method.
+    string cipher_text = 2;
+  }
+
   // A map of environment variable names to values.
   map<string, string> variables = 1;
+
+  // A map of environment variable names to Secret Manager secret names.
+  // The VM will access the named secrets to set the value of each environment
+  // variable.
+  map<string, string> secret_variables = 2;
+
+  // An encrypted JSON dictionary where the key/value pairs correspond to
+  // environment variable names and their values.
+  KMSEnvMap encrypted_variables = 3;
 }