feat: Add CustomHostConfig to configure custom hostnames for private instances

Google APIs · copybara-github · commit 10ac207779ca · 2026-03-26T12:40:54.000-07:00
feat: Add option to require code owner approval in branch rules
feat: Add force option to DeleteInstance request
docs: Improve documentation for labels, pagination, and ListLocations

PiperOrigin-RevId: 889991858
diff --git a/google/cloud/securesourcemanager/v1/BUILD.bazel b/google/cloud/securesourcemanager/v1/BUILD.bazel
@@ -30,6 +30,7 @@ proto_library(
         "//google/api:annotations_proto",
         "//google/api:client_proto",
         "//google/api:field_behavior_proto",
+        "//google/api:field_info_proto",
         "//google/api:resource_proto",
         "//google/iam/v1:iam_policy_proto",
         "//google/iam/v1:policy_proto",
diff --git a/google/cloud/securesourcemanager/v1/secure_source_manager.proto b/google/cloud/securesourcemanager/v1/secure_source_manager.proto
@@ -1,4 +1,4 @@
-// Copyright 2025 Google LLC
+// Copyright 2026 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -19,6 +19,7 @@ package google.cloud.securesourcemanager.v1;
 import "google/api/annotations.proto";
 import "google/api/client.proto";
 import "google/api/field_behavior.proto";
+import "google/api/field_info.proto";
 import "google/api/resource.proto";
 import "google/iam/v1/iam_policy.proto";
 import "google/iam/v1/policy.proto";
@@ -560,7 +561,7 @@ service SecureSourceManager {
   // Batch creates pull request comments. This function is used to create
   // multiple PullRequestComments for code review. There needs to be exactly one
   // PullRequestComment of type Review, and at most 100 PullRequestComments of
-  // type Code per request. The Postition of the code comments must be unique
+  // type Code per request. The Position of the code comments must be unique
   // within the request.
   rpc BatchCreatePullRequestComments(BatchCreatePullRequestCommentsRequest)
       returns (google.longrunning.Operation) {
@@ -727,6 +728,25 @@ message Instance {
 
   // PrivateConfig includes settings for private instance.
   message PrivateConfig {
+    // Custom host config for the instance.
+    message CustomHostConfig {
+      // Required. The custom UI hostname for the instance, e.g.,
+      // "git.source.internal.mycompany.com"
+      string html = 1 [(google.api.field_behavior) = REQUIRED];
+
+      // Required. The custom API hostname for the instance, e.g.,
+      // "api.source.internal.mycompany.com"
+      string api = 2 [(google.api.field_behavior) = REQUIRED];
+
+      // Required. The custom git ssh hostname for the instance, e.g.,
+      // "ssh.source.internal.mycompany.com"
+      string git_ssh = 3 [(google.api.field_behavior) = REQUIRED];
+
+      // Required. The custom git http hostname for the instance, e.g.,
+      // "git.source.internal.mycompany.com"
+      string git_http = 4 [(google.api.field_behavior) = REQUIRED];
+    }
+
     // Required. Immutable. Indicate if it's private instance.
     bool is_private = 1 [
       (google.api.field_behavior) = IMMUTABLE,
@@ -766,6 +786,10 @@ message Instance {
     // included in this list.
     repeated string psc_allowed_projects = 6
         [(google.api.field_behavior) = OPTIONAL];
+
+    // Optional. Custom host config for the instance.
+    CustomHostConfig custom_host_config = 7
+        [(google.api.field_behavior) = OPTIONAL];
   }
 
   // WorkforceIdentityFederationConfig allows this instance to support users
@@ -778,7 +802,7 @@ message Instance {
     ];
   }
 
-  // Optional. A unique identifier for an instance. The name should be of the
+  // Identifier. A unique identifier for an instance. The name should be of the
   // format:
   // `projects/{project_number}/locations/{location_id}/instances/{instance_id}`
   //
@@ -790,7 +814,7 @@ message Instance {
   //
   // `instance_id`: User provided name for the instance, must be unique for a
   // project_number and location_id combination.
-  string name = 1 [(google.api.field_behavior) = OPTIONAL];
+  string name = 1 [(google.api.field_behavior) = IDENTIFIER];
 
   // Output only. Create timestamp.
   google.protobuf.Timestamp create_time = 2
@@ -801,6 +825,10 @@ message Instance {
       [(google.api.field_behavior) = OUTPUT_ONLY];
 
   // Optional. Labels as key value pairs.
+  // Keys and values can contain only lowercase letters, numeric characters,
+  // underscores, and dashes.
+  // For more information, see [Requirements for
+  // labels](https://cloud.google.com/resource-manager/docs/best-practices-labels#label_encoding).
   map<string, string> labels = 4 [(google.api.field_behavior) = OPTIONAL];
 
   // Optional. Private settings for private instance.
@@ -990,10 +1018,10 @@ message Repository {
     string readme = 4;
   }
 
-  // Optional. A unique identifier for a repository. The name should be of the
+  // Identifier. A unique identifier for a repository. The name should be of the
   // format:
   // `projects/{project}/locations/{location_id}/repositories/{repository_id}`
-  string name = 1 [(google.api.field_behavior) = OPTIONAL];
+  string name = 1 [(google.api.field_behavior) = IDENTIFIER];
 
   // Optional. Description of the repository, which cannot exceed 500
   // characters.
@@ -1013,7 +1041,10 @@ message Repository {
   ];
 
   // Output only. Unique identifier of the repository.
-  string uid = 4 [(google.api.field_behavior) = OUTPUT_ONLY];
+  string uid = 4 [
+    (google.api.field_info).format = UUID4,
+    (google.api.field_behavior) = OUTPUT_ONLY
+  ];
 
   // Output only. Create timestamp.
   google.protobuf.Timestamp create_time = 5
@@ -1086,7 +1117,10 @@ message Hook {
       [(google.api.field_behavior) = OUTPUT_ONLY];
 
   // Output only. Unique identifier of the hook.
-  string uid = 7 [(google.api.field_behavior) = OUTPUT_ONLY];
+  string uid = 7 [
+    (google.api.field_info).format = UUID4,
+    (google.api.field_behavior) = OUTPUT_ONLY
+  ];
 
   // Optional. The trigger option for push events.
   PushOption push_option = 9 [(google.api.field_behavior) = OPTIONAL];
@@ -1109,13 +1143,16 @@ message BranchRule {
     string context = 1 [(google.api.field_behavior) = REQUIRED];
   }
 
-  // Optional. A unique identifier for a BranchRule. The name should be of the
+  // Identifier. A unique identifier for a BranchRule. The name should be of the
   // format:
   // `projects/{project}/locations/{location}/repositories/{repository}/branchRules/{branch_rule}`
-  string name = 1 [(google.api.field_behavior) = OPTIONAL];
+  string name = 1 [(google.api.field_behavior) = IDENTIFIER];
 
   // Output only. Unique identifier of the repository.
-  string uid = 2 [(google.api.field_behavior) = OUTPUT_ONLY];
+  string uid = 2 [
+    (google.api.field_info).format = UUID4,
+    (google.api.field_behavior) = OUTPUT_ONLY
+  ];
 
   // Output only. Create timestamp.
   google.protobuf.Timestamp create_time = 3
@@ -1155,6 +1192,11 @@ message BranchRule {
   // be matched.
   int32 minimum_approvals_count = 11 [(google.api.field_behavior) = OPTIONAL];
 
+  // Optional. Determines if code owners must approve before merging to the
+  // branch.
+  bool require_code_owner_approval = 16
+      [(google.api.field_behavior) = OPTIONAL];
+
   // Optional. Determines if require comments resolved before merging to the
   // branch.
   bool require_comments_resolved = 12 [(google.api.field_behavior) = OPTIONAL];
@@ -1204,10 +1246,13 @@ message PullRequest {
     MERGED = 3;
   }
 
-  // Output only. A unique identifier for a PullRequest. The number appended at
-  // the end is generated by the server. Format:
+  // Output only. Identifier. A unique identifier for a PullRequest. The number
+  // appended at the end is generated by the server. Format:
   // `projects/{project}/locations/{location}/repositories/{repository}/pullRequests/{pull_request_id}`
-  string name = 1 [(google.api.field_behavior) = OUTPUT_ONLY];
+  string name = 1 [
+    (google.api.field_behavior) = IDENTIFIER,
+    (google.api.field_behavior) = OUTPUT_ONLY
+  ];
 
   // Required. The pull request title.
   string title = 2 [(google.api.field_behavior) = REQUIRED];
@@ -1459,18 +1504,18 @@ message ListInstancesRequest {
     }
   ];
 
-  // Requested page size. Server may return fewer items than requested.
-  // If unspecified, server will pick an appropriate default.
-  int32 page_size = 2;
+  // Optional. Requested page size. Server may return fewer items than
+  // requested. If unspecified, server will pick an appropriate default.
+  int32 page_size = 2 [(google.api.field_behavior) = OPTIONAL];
 
-  // A token identifying a page of results the server should return.
-  string page_token = 3;
+  // Optional. A token identifying a page of results the server should return.
+  string page_token = 3 [(google.api.field_behavior) = OPTIONAL];
 
-  // Filter for filtering results.
-  string filter = 4;
+  // Optional. Filter for filtering results.
+  string filter = 4 [(google.api.field_behavior) = OPTIONAL];
 
-  // Hint for how to order the results.
-  string order_by = 5;
+  // Optional. Hint for how to order the results.
+  string order_by = 5 [(google.api.field_behavior) = OPTIONAL];
 }
 
 message ListInstancesResponse {
@@ -1524,7 +1569,10 @@ message CreateInstanceRequest {
   //
   // The request ID must be a valid UUID with the exception that zero UUID is
   // not supported (00000000-0000-0000-0000-000000000000).
-  string request_id = 4 [(google.api.field_behavior) = OPTIONAL];
+  string request_id = 4 [
+    (google.api.field_info).format = UUID4,
+    (google.api.field_behavior) = OPTIONAL
+  ];
 }
 
 // DeleteInstanceRequest is the request for deleting an instance.
@@ -1550,7 +1598,13 @@ message DeleteInstanceRequest {
   //
   // The request ID must be a valid UUID with the exception that zero UUID is
   // not supported (00000000-0000-0000-0000-000000000000).
-  string request_id = 2 [(google.api.field_behavior) = OPTIONAL];
+  string request_id = 2 [
+    (google.api.field_info).format = UUID4,
+    (google.api.field_behavior) = OPTIONAL
+  ];
+
+  // Optional. If set to true, will force the deletion of the instance.
+  bool force = 3 [(google.api.field_behavior) = OPTIONAL];
 }
 
 // Represents the metadata of the long-running operation.
@@ -1593,12 +1647,12 @@ message ListRepositoriesRequest {
     }
   ];
 
-  // Optional. Requested page size. Server may return fewer items than
-  // requested. If unspecified, server will pick an appropriate default.
+  // Optional. Requested page size. If unspecified, a default size of 30 will be
+  // used. The maximum value is 100; values above 100 will be coerced to 100.
   int32 page_size = 2 [(google.api.field_behavior) = OPTIONAL];
 
-  // A token identifying a page of results the server should return.
-  string page_token = 3;
+  // Optional. A token identifying a page of results the server should return.
+  string page_token = 3 [(google.api.field_behavior) = OPTIONAL];
 
   // Optional. Filter results.
   string filter = 4 [(google.api.field_behavior) = OPTIONAL];
@@ -1703,8 +1757,8 @@ message ListHooksRequest {
     }
   ];
 
-  // Optional. Requested page size. Server may return fewer items than
-  // requested. If unspecified, server will pick an appropriate default.
+  // Optional. Requested page size. If unspecified, a default size of 30 will be
+  // used. The maximum value is 100; values above 100 will be coerced to 100.
   int32 page_size = 2 [(google.api.field_behavior) = OPTIONAL];
 
   // Optional. A token identifying a page of results the server should return.
@@ -1757,13 +1811,13 @@ message CreateHookRequest {
 
 // UpdateHookRequest is the request to update a hook.
 message UpdateHookRequest {
-  // Required. Field mask is used to specify the fields to be overwritten in the
+  // Optional. Field mask is used to specify the fields to be overwritten in the
   // hook resource by the update.
   // The fields specified in the update_mask are relative to the resource, not
   // the full request. A field will be overwritten if it is in the mask.
   // The special value "*" means full replacement.
   google.protobuf.FieldMask update_mask = 1
-      [(google.api.field_behavior) = REQUIRED];
+      [(google.api.field_behavior) = OPTIONAL];
 
   // Required. The hook being updated.
   Hook hook = 2 [(google.api.field_behavior) = REQUIRED];
@@ -1818,8 +1872,11 @@ message ListBranchRulesRequest {
     }
   ];
 
+  // Optional. Requested page size. If unspecified, a default size of 30 will be
+  // used. The maximum value is 100; values above 100 will be coerced to 100.
   int32 page_size = 2 [(google.api.field_behavior) = OPTIONAL];
 
+  // Optional. A token identifying a page of results the server should return.
   string page_token = 3 [(google.api.field_behavior) = OPTIONAL];
 }
 
@@ -1845,13 +1902,13 @@ message UpdateBranchRuleRequest {
   // actually post it.  (https://google.aip.dev/163, for declarative friendly)
   bool validate_only = 2 [(google.api.field_behavior) = OPTIONAL];
 
-  // Required. Field mask is used to specify the fields to be overwritten in the
+  // Optional. Field mask is used to specify the fields to be overwritten in the
   // branchRule resource by the update.
   // The fields specified in the update_mask are relative to the resource, not
   // the full request. A field will be overwritten if it is in the mask.
   // The special value "*" means full replacement.
   google.protobuf.FieldMask update_mask = 3
-      [(google.api.field_behavior) = REQUIRED];
+      [(google.api.field_behavior) = OPTIONAL];
 }
 
 // ListBranchRulesResponse is the response to listing branchRules.
@@ -1902,8 +1959,8 @@ message ListPullRequestsRequest {
     }
   ];
 
-  // Optional. Requested page size. Server may return fewer items than
-  // requested. If unspecified, server will pick an appropriate default.
+  // Optional. Requested page size. If unspecified, a default size of 30 will be
+  // used. The maximum value is 100; values above 100 will be coerced to 100.
   int32 page_size = 2 [(google.api.field_behavior) = OPTIONAL];
 
   // Optional. A token identifying a page of results the server should return.
@@ -1985,8 +2042,8 @@ message ListPullRequestFileDiffsRequest {
     }
   ];
 
-  // Optional. Requested page size. Server may return fewer items than
-  // requested. If unspecified, server will pick an appropriate default.
+  // Optional. Requested page size. If unspecified, a default size of 30 will be
+  // used. The maximum value is 100; values above 100 will be coerced to 100.
   int32 page_size = 2 [(google.api.field_behavior) = OPTIONAL];
 
   // Optional. A token identifying a page of results the server should return.
@@ -2042,8 +2099,8 @@ message ListIssuesRequest {
     }
   ];
 
-  // Optional. Requested page size. Server may return fewer items than
-  // requested. If unspecified, server will pick an appropriate default.
+  // Optional. Requested page size. If unspecified, a default size of 30 will be
+  // used. The maximum value is 100; values above 100 will be coerced to 100.
   int32 page_size = 2 [(google.api.field_behavior) = OPTIONAL];
 
   // Optional. A token identifying a page of results the server should return.
@@ -2238,9 +2295,8 @@ message ListPullRequestCommentsRequest {
     }
   ];
 
-  // Optional. Requested page size. If unspecified, at most 100 pull request
-  // comments will be returned. The maximum value is 100; values above 100 will
-  // be coerced to 100.
+  // Optional. Requested page size. If unspecified, a default size of 30 will be
+  // used. The maximum value is 100; values above 100 will be coerced to 100.
   int32 page_size = 2 [(google.api.field_behavior) = OPTIONAL];
 
   // Optional. A token identifying a page of results the server should return.
@@ -2447,8 +2503,8 @@ message ListIssueCommentsRequest {
     }
   ];
 
-  // Optional. Requested page size. Server may return fewer items than
-  // requested. If unspecified, server will pick an appropriate default.
+  // Optional. Requested page size. If unspecified, a default size of 30 will be
+  // used. The maximum value is 100; values above 100 will be coerced to 100.
   int32 page_size = 2 [(google.api.field_behavior) = OPTIONAL];
 
   // Optional. A token identifying a page of results the server should return.
diff --git a/google/cloud/securesourcemanager/v1/securesourcemanager_v1.yaml b/google/cloud/securesourcemanager/v1/securesourcemanager_v1.yaml
@@ -24,7 +24,24 @@ documentation:
     description: Gets information about a location.
 
   - selector: google.cloud.location.Locations.ListLocations
-    description: Lists information about the supported locations for this service.
+    description: |-
+      Lists information about the supported locations for this service.
+
+      This method lists locations based on the resource scope provided in
+      the [ListLocationsRequest.name] field:
+
+      * **Global locations**: If `name` is empty, the method lists the
+      public locations available to all projects. * **Project-specific
+      locations**: If `name` follows the format
+      `projects/{project}`, the method lists locations visible to that
+      specific project. This includes public, private, or other
+      project-specific locations enabled for the project.
+
+      For gRPC and client library implementations, the resource name is
+      passed as the `name` field. For direct service calls, the resource
+      name is
+      incorporated into the request path based on the specific service
+      implementation and version.
 
   - selector: google.iam.v1.IAMPolicy.GetIamPolicy
     description: |-
