diff --git a/java-batch/proto-google-cloud-batch-v1/src/main/java/com/google/cloud/batch/v1/Runnable.java b/java-batch/proto-google-cloud-batch-v1/src/main/java/com/google/cloud/batch/v1/Runnable.java
index bea83c7a7f37..58556372d6b1 100644
--- a/java-batch/proto-google-cloud-batch-v1/src/main/java/com/google/cloud/batch/v1/Runnable.java
+++ b/java-batch/proto-google-cloud-batch-v1/src/main/java/com/google/cloud/batch/v1/Runnable.java
@@ -328,9 +328,22 @@ public interface ContainerOrBuilder
*
*
*
- * Optional username for logging in to a docker registry. If username
- * matches `projects/*/secrets/*/versions/*` then Batch will read the
- * username from the Secret Manager.
+ * Required if the container image is from a private Docker registry. The
+ * username to login to the Docker registry that contains the image.
+ *
+ * You can either specify the username directly by using plain text or
+ * specify an encrypted username by using a Secret Manager secret:
+ * `projects/*/secrets/*/versions/*`. However, using a secret is
+ * recommended for enhanced security.
+ *
+ * Caution: If you specify the username using plain text, you risk the
+ * username being exposed to any users who can view the job or its logs.
+ * To avoid this risk, specify a secret that contains the username instead.
+ *
+ * Learn more about [Secret
+ * Manager](https://cloud.google.com/secret-manager/docs/) and [using
+ * Secret Manager with
+ * Batch](https://cloud.google.com/batch/docs/create-run-job-secret-manager).
*
*
* string username = 10;
@@ -342,9 +355,22 @@ public interface ContainerOrBuilder
*
*
*
- * Optional username for logging in to a docker registry. If username
- * matches `projects/*/secrets/*/versions/*` then Batch will read the
- * username from the Secret Manager.
+ * Required if the container image is from a private Docker registry. The
+ * username to login to the Docker registry that contains the image.
+ *
+ * You can either specify the username directly by using plain text or
+ * specify an encrypted username by using a Secret Manager secret:
+ * `projects/*/secrets/*/versions/*`. However, using a secret is
+ * recommended for enhanced security.
+ *
+ * Caution: If you specify the username using plain text, you risk the
+ * username being exposed to any users who can view the job or its logs.
+ * To avoid this risk, specify a secret that contains the username instead.
+ *
+ * Learn more about [Secret
+ * Manager](https://cloud.google.com/secret-manager/docs/) and [using
+ * Secret Manager with
+ * Batch](https://cloud.google.com/batch/docs/create-run-job-secret-manager).
*
*
* string username = 10;
@@ -357,9 +383,21 @@ public interface ContainerOrBuilder
*
*
*
- * Optional password for logging in to a docker registry. If password
- * matches `projects/*/secrets/*/versions/*` then Batch will read the
- * password from the Secret Manager;
+ * Required if the container image is from a private Docker registry. The
+ * password to login to the Docker registry that contains the image.
+ *
+ * For security, it is strongly recommended to specify an
+ * encrypted password by using a Secret Manager secret:
+ * `projects/*/secrets/*/versions/*`.
+ *
+ * Warning: If you specify the password using plain text, you risk the
+ * password being exposed to any users who can view the job or its logs.
+ * To avoid this risk, specify a secret that contains the password instead.
+ *
+ * Learn more about [Secret
+ * Manager](https://cloud.google.com/secret-manager/docs/) and [using
+ * Secret Manager with
+ * Batch](https://cloud.google.com/batch/docs/create-run-job-secret-manager).
*
*
* string password = 11;
@@ -371,9 +409,21 @@ public interface ContainerOrBuilder
*
*
*
- * Optional password for logging in to a docker registry. If password
- * matches `projects/*/secrets/*/versions/*` then Batch will read the
- * password from the Secret Manager;
+ * Required if the container image is from a private Docker registry. The
+ * password to login to the Docker registry that contains the image.
+ *
+ * For security, it is strongly recommended to specify an
+ * encrypted password by using a Secret Manager secret:
+ * `projects/*/secrets/*/versions/*`.
+ *
+ * Warning: If you specify the password using plain text, you risk the
+ * password being exposed to any users who can view the job or its logs.
+ * To avoid this risk, specify a secret that contains the password instead.
+ *
+ * Learn more about [Secret
+ * Manager](https://cloud.google.com/secret-manager/docs/) and [using
+ * Secret Manager with
+ * Batch](https://cloud.google.com/batch/docs/create-run-job-secret-manager).
*
*
* string password = 11;
@@ -821,9 +871,22 @@ public boolean getBlockExternalNetwork() {
*
*
*
- * Optional username for logging in to a docker registry. If username
- * matches `projects/*/secrets/*/versions/*` then Batch will read the
- * username from the Secret Manager.
+ * Required if the container image is from a private Docker registry. The
+ * username to login to the Docker registry that contains the image.
+ *
+ * You can either specify the username directly by using plain text or
+ * specify an encrypted username by using a Secret Manager secret:
+ * `projects/*/secrets/*/versions/*`. However, using a secret is
+ * recommended for enhanced security.
+ *
+ * Caution: If you specify the username using plain text, you risk the
+ * username being exposed to any users who can view the job or its logs.
+ * To avoid this risk, specify a secret that contains the username instead.
+ *
+ * Learn more about [Secret
+ * Manager](https://cloud.google.com/secret-manager/docs/) and [using
+ * Secret Manager with
+ * Batch](https://cloud.google.com/batch/docs/create-run-job-secret-manager).
*
*
* string username = 10;
@@ -846,9 +909,22 @@ public java.lang.String getUsername() {
*
*
*
- * Optional username for logging in to a docker registry. If username
- * matches `projects/*/secrets/*/versions/*` then Batch will read the
- * username from the Secret Manager.
+ * Required if the container image is from a private Docker registry. The
+ * username to login to the Docker registry that contains the image.
+ *
+ * You can either specify the username directly by using plain text or
+ * specify an encrypted username by using a Secret Manager secret:
+ * `projects/*/secrets/*/versions/*`. However, using a secret is
+ * recommended for enhanced security.
+ *
+ * Caution: If you specify the username using plain text, you risk the
+ * username being exposed to any users who can view the job or its logs.
+ * To avoid this risk, specify a secret that contains the username instead.
+ *
+ * Learn more about [Secret
+ * Manager](https://cloud.google.com/secret-manager/docs/) and [using
+ * Secret Manager with
+ * Batch](https://cloud.google.com/batch/docs/create-run-job-secret-manager).
*
*
* string username = 10;
@@ -876,9 +952,21 @@ public com.google.protobuf.ByteString getUsernameBytes() {
*
*
*
- * Optional password for logging in to a docker registry. If password
- * matches `projects/*/secrets/*/versions/*` then Batch will read the
- * password from the Secret Manager;
+ * Required if the container image is from a private Docker registry. The
+ * password to login to the Docker registry that contains the image.
+ *
+ * For security, it is strongly recommended to specify an
+ * encrypted password by using a Secret Manager secret:
+ * `projects/*/secrets/*/versions/*`.
+ *
+ * Warning: If you specify the password using plain text, you risk the
+ * password being exposed to any users who can view the job or its logs.
+ * To avoid this risk, specify a secret that contains the password instead.
+ *
+ * Learn more about [Secret
+ * Manager](https://cloud.google.com/secret-manager/docs/) and [using
+ * Secret Manager with
+ * Batch](https://cloud.google.com/batch/docs/create-run-job-secret-manager).
*
*
* string password = 11;
@@ -901,9 +989,21 @@ public java.lang.String getPassword() {
*
*
*
- * Optional password for logging in to a docker registry. If password
- * matches `projects/*/secrets/*/versions/*` then Batch will read the
- * password from the Secret Manager;
+ * Required if the container image is from a private Docker registry. The
+ * password to login to the Docker registry that contains the image.
+ *
+ * For security, it is strongly recommended to specify an
+ * encrypted password by using a Secret Manager secret:
+ * `projects/*/secrets/*/versions/*`.
+ *
+ * Warning: If you specify the password using plain text, you risk the
+ * password being exposed to any users who can view the job or its logs.
+ * To avoid this risk, specify a secret that contains the password instead.
+ *
+ * Learn more about [Secret
+ * Manager](https://cloud.google.com/secret-manager/docs/) and [using
+ * Secret Manager with
+ * Batch](https://cloud.google.com/batch/docs/create-run-job-secret-manager).
*
*
* string password = 11;
@@ -2364,9 +2464,22 @@ public Builder clearBlockExternalNetwork() {
*
*
*
- * Optional username for logging in to a docker registry. If username
- * matches `projects/*/secrets/*/versions/*` then Batch will read the
- * username from the Secret Manager.
+ * Required if the container image is from a private Docker registry. The
+ * username to login to the Docker registry that contains the image.
+ *
+ * You can either specify the username directly by using plain text or
+ * specify an encrypted username by using a Secret Manager secret:
+ * `projects/*/secrets/*/versions/*`. However, using a secret is
+ * recommended for enhanced security.
+ *
+ * Caution: If you specify the username using plain text, you risk the
+ * username being exposed to any users who can view the job or its logs.
+ * To avoid this risk, specify a secret that contains the username instead.
+ *
+ * Learn more about [Secret
+ * Manager](https://cloud.google.com/secret-manager/docs/) and [using
+ * Secret Manager with
+ * Batch](https://cloud.google.com/batch/docs/create-run-job-secret-manager).
*
*
* string username = 10;
@@ -2388,9 +2501,22 @@ public java.lang.String getUsername() {
*
*
*
- * Optional username for logging in to a docker registry. If username
- * matches `projects/*/secrets/*/versions/*` then Batch will read the
- * username from the Secret Manager.
+ * Required if the container image is from a private Docker registry. The
+ * username to login to the Docker registry that contains the image.
+ *
+ * You can either specify the username directly by using plain text or
+ * specify an encrypted username by using a Secret Manager secret:
+ * `projects/*/secrets/*/versions/*`. However, using a secret is
+ * recommended for enhanced security.
+ *
+ * Caution: If you specify the username using plain text, you risk the
+ * username being exposed to any users who can view the job or its logs.
+ * To avoid this risk, specify a secret that contains the username instead.
+ *
+ * Learn more about [Secret
+ * Manager](https://cloud.google.com/secret-manager/docs/) and [using
+ * Secret Manager with
+ * Batch](https://cloud.google.com/batch/docs/create-run-job-secret-manager).
*
*
* string username = 10;
@@ -2412,9 +2538,22 @@ public com.google.protobuf.ByteString getUsernameBytes() {
*
*
*
- * Optional username for logging in to a docker registry. If username
- * matches `projects/*/secrets/*/versions/*` then Batch will read the
- * username from the Secret Manager.
+ * Required if the container image is from a private Docker registry. The
+ * username to login to the Docker registry that contains the image.
+ *
+ * You can either specify the username directly by using plain text or
+ * specify an encrypted username by using a Secret Manager secret:
+ * `projects/*/secrets/*/versions/*`. However, using a secret is
+ * recommended for enhanced security.
+ *
+ * Caution: If you specify the username using plain text, you risk the
+ * username being exposed to any users who can view the job or its logs.
+ * To avoid this risk, specify a secret that contains the username instead.
+ *
+ * Learn more about [Secret
+ * Manager](https://cloud.google.com/secret-manager/docs/) and [using
+ * Secret Manager with
+ * Batch](https://cloud.google.com/batch/docs/create-run-job-secret-manager).
*
*
* string username = 10;
@@ -2435,9 +2574,22 @@ public Builder setUsername(java.lang.String value) {
*
*
*
- * Optional username for logging in to a docker registry. If username
- * matches `projects/*/secrets/*/versions/*` then Batch will read the
- * username from the Secret Manager.
+ * Required if the container image is from a private Docker registry. The
+ * username to login to the Docker registry that contains the image.
+ *
+ * You can either specify the username directly by using plain text or
+ * specify an encrypted username by using a Secret Manager secret:
+ * `projects/*/secrets/*/versions/*`. However, using a secret is
+ * recommended for enhanced security.
+ *
+ * Caution: If you specify the username using plain text, you risk the
+ * username being exposed to any users who can view the job or its logs.
+ * To avoid this risk, specify a secret that contains the username instead.
+ *
+ * Learn more about [Secret
+ * Manager](https://cloud.google.com/secret-manager/docs/) and [using
+ * Secret Manager with
+ * Batch](https://cloud.google.com/batch/docs/create-run-job-secret-manager).
*
*
* string username = 10;
@@ -2454,9 +2606,22 @@ public Builder clearUsername() {
*
*
*
- * Optional username for logging in to a docker registry. If username
- * matches `projects/*/secrets/*/versions/*` then Batch will read the
- * username from the Secret Manager.
+ * Required if the container image is from a private Docker registry. The
+ * username to login to the Docker registry that contains the image.
+ *
+ * You can either specify the username directly by using plain text or
+ * specify an encrypted username by using a Secret Manager secret:
+ * `projects/*/secrets/*/versions/*`. However, using a secret is
+ * recommended for enhanced security.
+ *
+ * Caution: If you specify the username using plain text, you risk the
+ * username being exposed to any users who can view the job or its logs.
+ * To avoid this risk, specify a secret that contains the username instead.
+ *
+ * Learn more about [Secret
+ * Manager](https://cloud.google.com/secret-manager/docs/) and [using
+ * Secret Manager with
+ * Batch](https://cloud.google.com/batch/docs/create-run-job-secret-manager).
*
*
* string username = 10;
@@ -2480,9 +2645,21 @@ public Builder setUsernameBytes(com.google.protobuf.ByteString value) {
*
*
*
- * Optional password for logging in to a docker registry. If password
- * matches `projects/*/secrets/*/versions/*` then Batch will read the
- * password from the Secret Manager;
+ * Required if the container image is from a private Docker registry. The
+ * password to login to the Docker registry that contains the image.
+ *
+ * For security, it is strongly recommended to specify an
+ * encrypted password by using a Secret Manager secret:
+ * `projects/*/secrets/*/versions/*`.
+ *
+ * Warning: If you specify the password using plain text, you risk the
+ * password being exposed to any users who can view the job or its logs.
+ * To avoid this risk, specify a secret that contains the password instead.
+ *
+ * Learn more about [Secret
+ * Manager](https://cloud.google.com/secret-manager/docs/) and [using
+ * Secret Manager with
+ * Batch](https://cloud.google.com/batch/docs/create-run-job-secret-manager).
*
*
* string password = 11;
@@ -2504,9 +2681,21 @@ public java.lang.String getPassword() {
*
*
*
- * Optional password for logging in to a docker registry. If password
- * matches `projects/*/secrets/*/versions/*` then Batch will read the
- * password from the Secret Manager;
+ * Required if the container image is from a private Docker registry. The
+ * password to login to the Docker registry that contains the image.
+ *
+ * For security, it is strongly recommended to specify an
+ * encrypted password by using a Secret Manager secret:
+ * `projects/*/secrets/*/versions/*`.
+ *
+ * Warning: If you specify the password using plain text, you risk the
+ * password being exposed to any users who can view the job or its logs.
+ * To avoid this risk, specify a secret that contains the password instead.
+ *
+ * Learn more about [Secret
+ * Manager](https://cloud.google.com/secret-manager/docs/) and [using
+ * Secret Manager with
+ * Batch](https://cloud.google.com/batch/docs/create-run-job-secret-manager).
*
*
* string password = 11;
@@ -2528,9 +2717,21 @@ public com.google.protobuf.ByteString getPasswordBytes() {
*
*
*
- * Optional password for logging in to a docker registry. If password
- * matches `projects/*/secrets/*/versions/*` then Batch will read the
- * password from the Secret Manager;
+ * Required if the container image is from a private Docker registry. The
+ * password to login to the Docker registry that contains the image.
+ *
+ * For security, it is strongly recommended to specify an
+ * encrypted password by using a Secret Manager secret:
+ * `projects/*/secrets/*/versions/*`.
+ *
+ * Warning: If you specify the password using plain text, you risk the
+ * password being exposed to any users who can view the job or its logs.
+ * To avoid this risk, specify a secret that contains the password instead.
+ *
+ * Learn more about [Secret
+ * Manager](https://cloud.google.com/secret-manager/docs/) and [using
+ * Secret Manager with
+ * Batch](https://cloud.google.com/batch/docs/create-run-job-secret-manager).
*
*
* string password = 11;
@@ -2551,9 +2752,21 @@ public Builder setPassword(java.lang.String value) {
*
*
*
- * Optional password for logging in to a docker registry. If password
- * matches `projects/*/secrets/*/versions/*` then Batch will read the
- * password from the Secret Manager;
+ * Required if the container image is from a private Docker registry. The
+ * password to login to the Docker registry that contains the image.
+ *
+ * For security, it is strongly recommended to specify an
+ * encrypted password by using a Secret Manager secret:
+ * `projects/*/secrets/*/versions/*`.
+ *
+ * Warning: If you specify the password using plain text, you risk the
+ * password being exposed to any users who can view the job or its logs.
+ * To avoid this risk, specify a secret that contains the password instead.
+ *
+ * Learn more about [Secret
+ * Manager](https://cloud.google.com/secret-manager/docs/) and [using
+ * Secret Manager with
+ * Batch](https://cloud.google.com/batch/docs/create-run-job-secret-manager).
*
*
* string password = 11;
@@ -2570,9 +2783,21 @@ public Builder clearPassword() {
*
*
*
- * Optional password for logging in to a docker registry. If password
- * matches `projects/*/secrets/*/versions/*` then Batch will read the
- * password from the Secret Manager;
+ * Required if the container image is from a private Docker registry. The
+ * password to login to the Docker registry that contains the image.
+ *
+ * For security, it is strongly recommended to specify an
+ * encrypted password by using a Secret Manager secret:
+ * `projects/*/secrets/*/versions/*`.
+ *
+ * Warning: If you specify the password using plain text, you risk the
+ * password being exposed to any users who can view the job or its logs.
+ * To avoid this risk, specify a secret that contains the password instead.
+ *
+ * Learn more about [Secret
+ * Manager](https://cloud.google.com/secret-manager/docs/) and [using
+ * Secret Manager with
+ * Batch](https://cloud.google.com/batch/docs/create-run-job-secret-manager).
*
*
* string password = 11;
@@ -2772,7 +2997,7 @@ public interface ScriptOrBuilder
* first line of the file.(For example, to execute the script using bash,
* `#!/bin/bash` should be the first line of the file. To execute the
* script using`Python3`, `#!/usr/bin/env python3` should be the first
- * line of the file.) Otherwise, the file will by default be excuted by
+ * line of the file.) Otherwise, the file will by default be executed by
* `/bin/sh`.
*
*
@@ -2792,7 +3017,7 @@ public interface ScriptOrBuilder
* first line of the file.(For example, to execute the script using bash,
* `#!/bin/bash` should be the first line of the file. To execute the
* script using`Python3`, `#!/usr/bin/env python3` should be the first
- * line of the file.) Otherwise, the file will by default be excuted by
+ * line of the file.) Otherwise, the file will by default be executed by
* `/bin/sh`.
*
*
@@ -2812,7 +3037,7 @@ public interface ScriptOrBuilder
* first line of the file.(For example, to execute the script using bash,
* `#!/bin/bash` should be the first line of the file. To execute the
* script using`Python3`, `#!/usr/bin/env python3` should be the first
- * line of the file.) Otherwise, the file will by default be excuted by
+ * line of the file.) Otherwise, the file will by default be executed by
* `/bin/sh`.
*
*
@@ -2832,7 +3057,7 @@ public interface ScriptOrBuilder
* beginning of the text.(For example, to execute the script using bash,
* `#!/bin/bash\n` should be added. To execute the script using`Python3`,
* `#!/usr/bin/env python3\n` should be added.) Otherwise, the script will
- * by default be excuted by `/bin/sh`.
+ * by default be executed by `/bin/sh`.
*
*
* string text = 2;
@@ -2850,7 +3075,7 @@ public interface ScriptOrBuilder
* beginning of the text.(For example, to execute the script using bash,
* `#!/bin/bash\n` should be added. To execute the script using`Python3`,
* `#!/usr/bin/env python3\n` should be added.) Otherwise, the script will
- * by default be excuted by `/bin/sh`.
+ * by default be executed by `/bin/sh`.
*
*
* string text = 2;
@@ -2868,7 +3093,7 @@ public interface ScriptOrBuilder
* beginning of the text.(For example, to execute the script using bash,
* `#!/bin/bash\n` should be added. To execute the script using`Python3`,
* `#!/usr/bin/env python3\n` should be added.) Otherwise, the script will
- * by default be excuted by `/bin/sh`.
+ * by default be executed by `/bin/sh`.
*
*
* string text = 2;
@@ -2982,7 +3207,7 @@ public CommandCase getCommandCase() {
* first line of the file.(For example, to execute the script using bash,
* `#!/bin/bash` should be the first line of the file. To execute the
* script using`Python3`, `#!/usr/bin/env python3` should be the first
- * line of the file.) Otherwise, the file will by default be excuted by
+ * line of the file.) Otherwise, the file will by default be executed by
* `/bin/sh`.
*
*
@@ -3004,7 +3229,7 @@ public boolean hasPath() {
* first line of the file.(For example, to execute the script using bash,
* `#!/bin/bash` should be the first line of the file. To execute the
* script using`Python3`, `#!/usr/bin/env python3` should be the first
- * line of the file.) Otherwise, the file will by default be excuted by
+ * line of the file.) Otherwise, the file will by default be executed by
* `/bin/sh`.
*
*
@@ -3039,7 +3264,7 @@ public java.lang.String getPath() {
* first line of the file.(For example, to execute the script using bash,
* `#!/bin/bash` should be the first line of the file. To execute the
* script using`Python3`, `#!/usr/bin/env python3` should be the first
- * line of the file.) Otherwise, the file will by default be excuted by
+ * line of the file.) Otherwise, the file will by default be executed by
* `/bin/sh`.
*
*
@@ -3075,7 +3300,7 @@ public com.google.protobuf.ByteString getPathBytes() {
* beginning of the text.(For example, to execute the script using bash,
* `#!/bin/bash\n` should be added. To execute the script using`Python3`,
* `#!/usr/bin/env python3\n` should be added.) Otherwise, the script will
- * by default be excuted by `/bin/sh`.
+ * by default be executed by `/bin/sh`.
*
*
* string text = 2;
@@ -3095,7 +3320,7 @@ public boolean hasText() {
* beginning of the text.(For example, to execute the script using bash,
* `#!/bin/bash\n` should be added. To execute the script using`Python3`,
* `#!/usr/bin/env python3\n` should be added.) Otherwise, the script will
- * by default be excuted by `/bin/sh`.
+ * by default be executed by `/bin/sh`.
*
*
* string text = 2;
@@ -3128,7 +3353,7 @@ public java.lang.String getText() {
* beginning of the text.(For example, to execute the script using bash,
* `#!/bin/bash\n` should be added. To execute the script using`Python3`,
* `#!/usr/bin/env python3\n` should be added.) Otherwise, the script will
- * by default be excuted by `/bin/sh`.
+ * by default be executed by `/bin/sh`.
*
*
* string text = 2;
@@ -3575,7 +3800,7 @@ public Builder clearCommand() {
* first line of the file.(For example, to execute the script using bash,
* `#!/bin/bash` should be the first line of the file. To execute the
* script using`Python3`, `#!/usr/bin/env python3` should be the first
- * line of the file.) Otherwise, the file will by default be excuted by
+ * line of the file.) Otherwise, the file will by default be executed by
* `/bin/sh`.
*
*
@@ -3598,7 +3823,7 @@ public boolean hasPath() {
* first line of the file.(For example, to execute the script using bash,
* `#!/bin/bash` should be the first line of the file. To execute the
* script using`Python3`, `#!/usr/bin/env python3` should be the first
- * line of the file.) Otherwise, the file will by default be excuted by
+ * line of the file.) Otherwise, the file will by default be executed by
* `/bin/sh`.
*
*
@@ -3634,7 +3859,7 @@ public java.lang.String getPath() {
* first line of the file.(For example, to execute the script using bash,
* `#!/bin/bash` should be the first line of the file. To execute the
* script using`Python3`, `#!/usr/bin/env python3` should be the first
- * line of the file.) Otherwise, the file will by default be excuted by
+ * line of the file.) Otherwise, the file will by default be executed by
* `/bin/sh`.
*
*
@@ -3670,7 +3895,7 @@ public com.google.protobuf.ByteString getPathBytes() {
* first line of the file.(For example, to execute the script using bash,
* `#!/bin/bash` should be the first line of the file. To execute the
* script using`Python3`, `#!/usr/bin/env python3` should be the first
- * line of the file.) Otherwise, the file will by default be excuted by
+ * line of the file.) Otherwise, the file will by default be executed by
* `/bin/sh`.
*
*
@@ -3699,7 +3924,7 @@ public Builder setPath(java.lang.String value) {
* first line of the file.(For example, to execute the script using bash,
* `#!/bin/bash` should be the first line of the file. To execute the
* script using`Python3`, `#!/usr/bin/env python3` should be the first
- * line of the file.) Otherwise, the file will by default be excuted by
+ * line of the file.) Otherwise, the file will by default be executed by
* `/bin/sh`.
*
*
@@ -3726,7 +3951,7 @@ public Builder clearPath() {
* first line of the file.(For example, to execute the script using bash,
* `#!/bin/bash` should be the first line of the file. To execute the
* script using`Python3`, `#!/usr/bin/env python3` should be the first
- * line of the file.) Otherwise, the file will by default be excuted by
+ * line of the file.) Otherwise, the file will by default be executed by
* `/bin/sh`.
*
*
@@ -3756,7 +3981,7 @@ public Builder setPathBytes(com.google.protobuf.ByteString value) {
* beginning of the text.(For example, to execute the script using bash,
* `#!/bin/bash\n` should be added. To execute the script using`Python3`,
* `#!/usr/bin/env python3\n` should be added.) Otherwise, the script will
- * by default be excuted by `/bin/sh`.
+ * by default be executed by `/bin/sh`.
*
*
* string text = 2;
@@ -3777,7 +4002,7 @@ public boolean hasText() {
* beginning of the text.(For example, to execute the script using bash,
* `#!/bin/bash\n` should be added. To execute the script using`Python3`,
* `#!/usr/bin/env python3\n` should be added.) Otherwise, the script will
- * by default be excuted by `/bin/sh`.
+ * by default be executed by `/bin/sh`.
*
*
* string text = 2;
@@ -3811,7 +4036,7 @@ public java.lang.String getText() {
* beginning of the text.(For example, to execute the script using bash,
* `#!/bin/bash\n` should be added. To execute the script using`Python3`,
* `#!/usr/bin/env python3\n` should be added.) Otherwise, the script will
- * by default be excuted by `/bin/sh`.
+ * by default be executed by `/bin/sh`.
*
*
* string text = 2;
@@ -3845,7 +4070,7 @@ public com.google.protobuf.ByteString getTextBytes() {
* beginning of the text.(For example, to execute the script using bash,
* `#!/bin/bash\n` should be added. To execute the script using`Python3`,
* `#!/usr/bin/env python3\n` should be added.) Otherwise, the script will
- * by default be excuted by `/bin/sh`.
+ * by default be executed by `/bin/sh`.
*
*
* string text = 2;
@@ -3872,7 +4097,7 @@ public Builder setText(java.lang.String value) {
* beginning of the text.(For example, to execute the script using bash,
* `#!/bin/bash\n` should be added. To execute the script using`Python3`,
* `#!/usr/bin/env python3\n` should be added.) Otherwise, the script will
- * by default be excuted by `/bin/sh`.
+ * by default be executed by `/bin/sh`.
*
*
* string text = 2;
@@ -3897,7 +4122,7 @@ public Builder clearText() {
* beginning of the text.(For example, to execute the script using bash,
* `#!/bin/bash\n` should be added. To execute the script using`Python3`,
* `#!/usr/bin/env python3\n` should be added.) Otherwise, the script will
- * by default be excuted by `/bin/sh`.
+ * by default be executed by `/bin/sh`.
*
*
* string text = 2;
diff --git a/java-batch/proto-google-cloud-batch-v1/src/main/java/com/google/cloud/batch/v1/TaskGroup.java b/java-batch/proto-google-cloud-batch-v1/src/main/java/com/google/cloud/batch/v1/TaskGroup.java
index e4c5e055f697..faa234eefda2 100644
--- a/java-batch/proto-google-cloud-batch-v1/src/main/java/com/google/cloud/batch/v1/TaskGroup.java
+++ b/java-batch/proto-google-cloud-batch-v1/src/main/java/com/google/cloud/batch/v1/TaskGroup.java
@@ -555,7 +555,7 @@ public long getTaskCountPerNode() {
*
* When true, Batch will populate a file with a list of all VMs assigned to
* the TaskGroup and set the BATCH_HOSTS_FILE environment variable to the path
- * of that file. Defaults to false.
+ * of that file. Defaults to false. The host file supports up to 1000 VMs.
*
*
* bool require_hosts_file = 11;
@@ -592,10 +592,11 @@ public boolean getPermissiveSsh() {
*
*
*
- * Optional. If not set or set to false, Batch will use root user to execute
- * runnables. If set to true, Batch will make sure to run the runnables using
- * non-root user. Currently, the non-root user Batch used is generated by OS
- * login. Reference: https://cloud.google.com/compute/docs/oslogin
+ * Optional. If not set or set to false, Batch uses the root user to execute
+ * runnables. If set to true, Batch runs the runnables using a non-root user.
+ * Currently, the non-root user Batch used is generated by OS Login. For more
+ * information, see [About OS
+ * Login](https://cloud.google.com/compute/docs/oslogin).
*
*
* bool run_as_non_root = 14 [(.google.api.field_behavior) = OPTIONAL];
@@ -2321,7 +2322,7 @@ public Builder clearTaskCountPerNode() {
*
* When true, Batch will populate a file with a list of all VMs assigned to
* the TaskGroup and set the BATCH_HOSTS_FILE environment variable to the path
- * of that file. Defaults to false.
+ * of that file. Defaults to false. The host file supports up to 1000 VMs.
*
*
* bool require_hosts_file = 11;
@@ -2338,7 +2339,7 @@ public boolean getRequireHostsFile() {
*
* When true, Batch will populate a file with a list of all VMs assigned to
* the TaskGroup and set the BATCH_HOSTS_FILE environment variable to the path
- * of that file. Defaults to false.
+ * of that file. Defaults to false. The host file supports up to 1000 VMs.
*
*
* bool require_hosts_file = 11;
@@ -2359,7 +2360,7 @@ public Builder setRequireHostsFile(boolean value) {
*
* When true, Batch will populate a file with a list of all VMs assigned to
* the TaskGroup and set the BATCH_HOSTS_FILE environment variable to the path
- * of that file. Defaults to false.
+ * of that file. Defaults to false. The host file supports up to 1000 VMs.
*
*
* bool require_hosts_file = 11;
@@ -2434,10 +2435,11 @@ public Builder clearPermissiveSsh() {
*
*
*
- * Optional. If not set or set to false, Batch will use root user to execute
- * runnables. If set to true, Batch will make sure to run the runnables using
- * non-root user. Currently, the non-root user Batch used is generated by OS
- * login. Reference: https://cloud.google.com/compute/docs/oslogin
+ * Optional. If not set or set to false, Batch uses the root user to execute
+ * runnables. If set to true, Batch runs the runnables using a non-root user.
+ * Currently, the non-root user Batch used is generated by OS Login. For more
+ * information, see [About OS
+ * Login](https://cloud.google.com/compute/docs/oslogin).
*
*
* bool run_as_non_root = 14 [(.google.api.field_behavior) = OPTIONAL];
@@ -2452,10 +2454,11 @@ public boolean getRunAsNonRoot() {
*
*
*
- * Optional. If not set or set to false, Batch will use root user to execute
- * runnables. If set to true, Batch will make sure to run the runnables using
- * non-root user. Currently, the non-root user Batch used is generated by OS
- * login. Reference: https://cloud.google.com/compute/docs/oslogin
+ * Optional. If not set or set to false, Batch uses the root user to execute
+ * runnables. If set to true, Batch runs the runnables using a non-root user.
+ * Currently, the non-root user Batch used is generated by OS Login. For more
+ * information, see [About OS
+ * Login](https://cloud.google.com/compute/docs/oslogin).
*
*
* bool run_as_non_root = 14 [(.google.api.field_behavior) = OPTIONAL];
@@ -2474,10 +2477,11 @@ public Builder setRunAsNonRoot(boolean value) {
*
*
*
- * Optional. If not set or set to false, Batch will use root user to execute
- * runnables. If set to true, Batch will make sure to run the runnables using
- * non-root user. Currently, the non-root user Batch used is generated by OS
- * login. Reference: https://cloud.google.com/compute/docs/oslogin
+ * Optional. If not set or set to false, Batch uses the root user to execute
+ * runnables. If set to true, Batch runs the runnables using a non-root user.
+ * Currently, the non-root user Batch used is generated by OS Login. For more
+ * information, see [About OS
+ * Login](https://cloud.google.com/compute/docs/oslogin).
*
*
* bool run_as_non_root = 14 [(.google.api.field_behavior) = OPTIONAL];
diff --git a/java-batch/proto-google-cloud-batch-v1/src/main/java/com/google/cloud/batch/v1/TaskGroupOrBuilder.java b/java-batch/proto-google-cloud-batch-v1/src/main/java/com/google/cloud/batch/v1/TaskGroupOrBuilder.java
index 11f1f1765b70..ac61de8a623c 100644
--- a/java-batch/proto-google-cloud-batch-v1/src/main/java/com/google/cloud/batch/v1/TaskGroupOrBuilder.java
+++ b/java-batch/proto-google-cloud-batch-v1/src/main/java/com/google/cloud/batch/v1/TaskGroupOrBuilder.java
@@ -263,7 +263,7 @@ public interface TaskGroupOrBuilder
*
* When true, Batch will populate a file with a list of all VMs assigned to
* the TaskGroup and set the BATCH_HOSTS_FILE environment variable to the path
- * of that file. Defaults to false.
+ * of that file. Defaults to false. The host file supports up to 1000 VMs.
*
*
* bool require_hosts_file = 11;
@@ -290,10 +290,11 @@ public interface TaskGroupOrBuilder
*
*
*
- * Optional. If not set or set to false, Batch will use root user to execute
- * runnables. If set to true, Batch will make sure to run the runnables using
- * non-root user. Currently, the non-root user Batch used is generated by OS
- * login. Reference: https://cloud.google.com/compute/docs/oslogin
+ * Optional. If not set or set to false, Batch uses the root user to execute
+ * runnables. If set to true, Batch runs the runnables using a non-root user.
+ * Currently, the non-root user Batch used is generated by OS Login. For more
+ * information, see [About OS
+ * Login](https://cloud.google.com/compute/docs/oslogin).
*
*
* bool run_as_non_root = 14 [(.google.api.field_behavior) = OPTIONAL];
diff --git a/java-batch/proto-google-cloud-batch-v1/src/main/proto/google/cloud/batch/v1/job.proto b/java-batch/proto-google-cloud-batch-v1/src/main/proto/google/cloud/batch/v1/job.proto
index 7d97e5cc0d76..71067eb13755 100644
--- a/java-batch/proto-google-cloud-batch-v1/src/main/proto/google/cloud/batch/v1/job.proto
+++ b/java-batch/proto-google-cloud-batch-v1/src/main/proto/google/cloud/batch/v1/job.proto
@@ -607,17 +607,18 @@ message TaskGroup {
// When true, Batch will populate a file with a list of all VMs assigned to
// the TaskGroup and set the BATCH_HOSTS_FILE environment variable to the path
- // of that file. Defaults to false.
+ // of that file. Defaults to false. The host file supports up to 1000 VMs.
bool require_hosts_file = 11;
// When true, Batch will configure SSH to allow passwordless login between
// VMs running the Batch tasks in the same TaskGroup.
bool permissive_ssh = 12;
- // Optional. If not set or set to false, Batch will use root user to execute
- // runnables. If set to true, Batch will make sure to run the runnables using
- // non-root user. Currently, the non-root user Batch used is generated by OS
- // login. Reference: https://cloud.google.com/compute/docs/oslogin
+ // Optional. If not set or set to false, Batch uses the root user to execute
+ // runnables. If set to true, Batch runs the runnables using a non-root user.
+ // Currently, the non-root user Batch used is generated by OS Login. For more
+ // information, see [About OS
+ // Login](https://cloud.google.com/compute/docs/oslogin).
bool run_as_non_root = 14 [(google.api.field_behavior) = OPTIONAL];
}
diff --git a/java-batch/proto-google-cloud-batch-v1/src/main/proto/google/cloud/batch/v1/task.proto b/java-batch/proto-google-cloud-batch-v1/src/main/proto/google/cloud/batch/v1/task.proto
index 1f97a00004f3..7037d20da0c6 100644
--- a/java-batch/proto-google-cloud-batch-v1/src/main/proto/google/cloud/batch/v1/task.proto
+++ b/java-batch/proto-google-cloud-batch-v1/src/main/proto/google/cloud/batch/v1/task.proto
@@ -179,14 +179,39 @@ message Runnable {
// `container.options` field.
bool block_external_network = 9;
- // Optional username for logging in to a docker registry. If username
- // matches `projects/*/secrets/*/versions/*` then Batch will read the
- // username from the Secret Manager.
+ // Required if the container image is from a private Docker registry. The
+ // username to login to the Docker registry that contains the image.
+ //
+ // You can either specify the username directly by using plain text or
+ // specify an encrypted username by using a Secret Manager secret:
+ // `projects/*/secrets/*/versions/*`. However, using a secret is
+ // recommended for enhanced security.
+ //
+ // Caution: If you specify the username using plain text, you risk the
+ // username being exposed to any users who can view the job or its logs.
+ // To avoid this risk, specify a secret that contains the username instead.
+ //
+ // Learn more about [Secret
+ // Manager](https://cloud.google.com/secret-manager/docs/) and [using
+ // Secret Manager with
+ // Batch](https://cloud.google.com/batch/docs/create-run-job-secret-manager).
string username = 10;
- // Optional password for logging in to a docker registry. If password
- // matches `projects/*/secrets/*/versions/*` then Batch will read the
- // password from the Secret Manager;
+ // Required if the container image is from a private Docker registry. The
+ // password to login to the Docker registry that contains the image.
+ //
+ // For security, it is strongly recommended to specify an
+ // encrypted password by using a Secret Manager secret:
+ // `projects/*/secrets/*/versions/*`.
+ //
+ // Warning: If you specify the password using plain text, you risk the
+ // password being exposed to any users who can view the job or its logs.
+ // To avoid this risk, specify a secret that contains the password instead.
+ //
+ // Learn more about [Secret
+ // Manager](https://cloud.google.com/secret-manager/docs/) and [using
+ // Secret Manager with
+ // Batch](https://cloud.google.com/batch/docs/create-run-job-secret-manager).
string password = 11;
// Optional. If set to true, this container runnable uses Image streaming.
@@ -219,7 +244,7 @@ message Runnable {
// first line of the file.(For example, to execute the script using bash,
// `#!/bin/bash` should be the first line of the file. To execute the
// script using`Python3`, `#!/usr/bin/env python3` should be the first
- // line of the file.) Otherwise, the file will by default be excuted by
+ // line of the file.) Otherwise, the file will by default be executed by
// `/bin/sh`.
string path = 1;
@@ -229,7 +254,7 @@ message Runnable {
// beginning of the text.(For example, to execute the script using bash,
// `#!/bin/bash\n` should be added. To execute the script using`Python3`,
// `#!/usr/bin/env python3\n` should be added.) Otherwise, the script will
- // by default be excuted by `/bin/sh`.
+ // by default be executed by `/bin/sh`.
string text = 2;
}
}