feat: [google-cloud-secret-manager] update secret manager protos for tags (#13976)

Clients can use use tags on secret manager to manage access to the resources(secret) PiperOrigin-RevId: 767419371 Source-Link: googleapis/googleapis@02838cf Source-Link: googleapis/googleapis-gen@9c43ac6 Copy-Tag: eyJwIjoicGFja2FnZXMvZ29vZ2xlLWNsb3VkLXNlY3JldC1tYW5hZ2VyLy5Pd2xCb3QueWFtbCIsImgiOiI5YzQzYWM2NjU3ZDlmZjMzMWE2MjQ3OTlhYWZmNjQ5ZGJiYmUzY2VlIn0= --------- Co-authored-by: Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com>

Author: gcf-owl-bot[bot]

packages/google-cloud-secret-manager/google/cloud/secretmanager_v1/types/resources.py

@@ -155,6 +155,18 @@ class Secret(proto.Message):
  added afterwards. They do not apply retroactively to
  existing
  [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+ tags (MutableMapping[str, str]):
+ Optional. Input only. Immutable. Mapping of
+ Tag keys/values directly bound to this resource.
+ For example:
+
+ "123/environment": "production",
+ "123/costCenter": "marketing"
+
+ Tags are used to organize and group resources.
+
+ Tags can be used to control policy evaluation
+ for the resource.
  """
 
  name: str = proto.Field(
@@ -222,6 +234,11 @@ class Secret(proto.Message):
  number=15,
  message="CustomerManagedEncryption",
  )
+ tags: MutableMapping[str, str] = proto.MapField(
+ proto.STRING,
+ proto.STRING,
+ number=16,
+ )
 
 
 class SecretVersion(proto.Message):

packages/google-cloud-secret-manager/tests/unit/gapic/secretmanager_v1/test_secret_manager_service.py

@@ -10302,6 +10302,7 @@ def test_create_secret_rest_call_success(request_type):
  "annotations": {},
  "version_destroy_ttl": {},
  "customer_managed_encryption": {},
+ "tags": {},
  }
  # The version of a generated dependency at test runtime may differ from the version used during generation.
  # Delete any fields which are not present in the current runtime dependency
@@ -10778,6 +10779,7 @@ def test_update_secret_rest_call_success(request_type):
  "annotations": {},
  "version_destroy_ttl": {},
  "customer_managed_encryption": {},
+ "tags": {},
  }
  # The version of a generated dependency at test runtime may differ from the version used during generation.
  # Delete any fields which are not present in the current runtime dependency