diff --git a/clients/google-api-services-certificatemanager/v1/2.0.0/README.md b/clients/google-api-services-certificatemanager/v1/2.0.0/README.md
index f73ca00ff4f..5c9db9f0ba7 100644
--- a/clients/google-api-services-certificatemanager/v1/2.0.0/README.md
+++ b/clients/google-api-services-certificatemanager/v1/2.0.0/README.md
@@ -22,7 +22,7 @@ Add the following lines to your `pom.xml` file:
     <dependency>
       <groupId>com.google.apis</groupId>
       <artifactId>google-api-services-certificatemanager</artifactId>
-      <version>v1-rev20260427-2.0.0</version>
+      <version>v1-rev20260629-2.0.0</version>
     </dependency>
   </dependencies>
 </project>
@@ -35,7 +35,7 @@ repositories {
   mavenCentral()
 }
 dependencies {
-  implementation 'com.google.apis:google-api-services-certificatemanager:v1-rev20260427-2.0.0'
+  implementation 'com.google.apis:google-api-services-certificatemanager:v1-rev20260629-2.0.0'
 }
 ```
 
diff --git a/clients/google-api-services-certificatemanager/v1/2.0.0/com/google/api/services/certificatemanager/v1/model/Certificate.java b/clients/google-api-services-certificatemanager/v1/2.0.0/com/google/api/services/certificatemanager/v1/model/Certificate.java
index af3e74a5522..1f9f19705dc 100644
--- a/clients/google-api-services-certificatemanager/v1/2.0.0/com/google/api/services/certificatemanager/v1/model/Certificate.java
+++ b/clients/google-api-services-certificatemanager/v1/2.0.0/com/google/api/services/certificatemanager/v1/model/Certificate.java
@@ -110,6 +110,14 @@ public final class Certificate extends com.google.api.client.json.GenericJson {
   @com.google.api.client.util.Key
   private SelfManagedCertificate selfManaged;
 
+  /**
+   * Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example:
+   * "123/environment": "production", "123/costCenter": "marketing"
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.util.Map<String, java.lang.String> tags;
+
   /**
    * Output only. The last update timestamp of a Certificate.
    * The value may be {@code null}.
@@ -317,6 +325,25 @@ public Certificate setSelfManaged(SelfManagedCertificate selfManaged) {
     return this;
   }
 
+  /**
+   * Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example:
+   * "123/environment": "production", "123/costCenter": "marketing"
+   * @return value or {@code null} for none
+   */
+  public java.util.Map<String, java.lang.String> getTags() {
+    return tags;
+  }
+
+  /**
+   * Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example:
+   * "123/environment": "production", "123/costCenter": "marketing"
+   * @param tags tags or {@code null} for none
+   */
+  public Certificate setTags(java.util.Map<String, java.lang.String> tags) {
+    this.tags = tags;
+    return this;
+  }
+
   /**
    * Output only. The last update timestamp of a Certificate.
    * @return value or {@code null} for none
diff --git a/clients/google-api-services-certificatemanager/v1/2.0.0/com/google/api/services/certificatemanager/v1/model/CertificateIssuanceConfig.java b/clients/google-api-services-certificatemanager/v1/2.0.0/com/google/api/services/certificatemanager/v1/model/CertificateIssuanceConfig.java
index 828b364aa38..9019a15da43 100644
--- a/clients/google-api-services-certificatemanager/v1/2.0.0/com/google/api/services/certificatemanager/v1/model/CertificateIssuanceConfig.java
+++ b/clients/google-api-services-certificatemanager/v1/2.0.0/com/google/api/services/certificatemanager/v1/model/CertificateIssuanceConfig.java
@@ -90,6 +90,14 @@ public final class CertificateIssuanceConfig extends com.google.api.client.json.
   @com.google.api.client.util.Key
   private java.lang.Integer rotationWindowPercentage;
 
+  /**
+   * Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example:
+   * "123/environment": "production", "123/costCenter": "marketing"
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.util.Map<String, java.lang.String> tags;
+
   /**
    * Output only. The last update timestamp of a CertificateIssuanceConfig.
    * The value may be {@code null}.
@@ -241,6 +249,25 @@ public CertificateIssuanceConfig setRotationWindowPercentage(java.lang.Integer r
     return this;
   }
 
+  /**
+   * Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example:
+   * "123/environment": "production", "123/costCenter": "marketing"
+   * @return value or {@code null} for none
+   */
+  public java.util.Map<String, java.lang.String> getTags() {
+    return tags;
+  }
+
+  /**
+   * Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example:
+   * "123/environment": "production", "123/costCenter": "marketing"
+   * @param tags tags or {@code null} for none
+   */
+  public CertificateIssuanceConfig setTags(java.util.Map<String, java.lang.String> tags) {
+    this.tags = tags;
+    return this;
+  }
+
   /**
    * Output only. The last update timestamp of a CertificateIssuanceConfig.
    * @return value or {@code null} for none
diff --git a/clients/google-api-services-certificatemanager/v1/2.0.0/com/google/api/services/certificatemanager/v1/model/CertificateMap.java b/clients/google-api-services-certificatemanager/v1/2.0.0/com/google/api/services/certificatemanager/v1/model/CertificateMap.java
index 6b280676786..46872888482 100644
--- a/clients/google-api-services-certificatemanager/v1/2.0.0/com/google/api/services/certificatemanager/v1/model/CertificateMap.java
+++ b/clients/google-api-services-certificatemanager/v1/2.0.0/com/google/api/services/certificatemanager/v1/model/CertificateMap.java
@@ -67,6 +67,14 @@ public final class CertificateMap extends com.google.api.client.json.GenericJson
   @com.google.api.client.util.Key
   private java.lang.String name;
 
+  /**
+   * Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example:
+   * "123/environment": "production", "123/costCenter": "marketing"
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.util.Map<String, java.lang.String> tags;
+
   /**
    * Output only. The update timestamp of a Certificate Map.
    * The value may be {@code null}.
@@ -163,6 +171,25 @@ public CertificateMap setName(java.lang.String name) {
     return this;
   }
 
+  /**
+   * Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example:
+   * "123/environment": "production", "123/costCenter": "marketing"
+   * @return value or {@code null} for none
+   */
+  public java.util.Map<String, java.lang.String> getTags() {
+    return tags;
+  }
+
+  /**
+   * Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example:
+   * "123/environment": "production", "123/costCenter": "marketing"
+   * @param tags tags or {@code null} for none
+   */
+  public CertificateMap setTags(java.util.Map<String, java.lang.String> tags) {
+    this.tags = tags;
+    return this;
+  }
+
   /**
    * Output only. The update timestamp of a Certificate Map.
    * @return value or {@code null} for none
diff --git a/clients/google-api-services-certificatemanager/v1/2.0.0/com/google/api/services/certificatemanager/v1/model/DnsAuthorization.java b/clients/google-api-services-certificatemanager/v1/2.0.0/com/google/api/services/certificatemanager/v1/model/DnsAuthorization.java
index 2851ef2804e..ea62906bd1d 100644
--- a/clients/google-api-services-certificatemanager/v1/2.0.0/com/google/api/services/certificatemanager/v1/model/DnsAuthorization.java
+++ b/clients/google-api-services-certificatemanager/v1/2.0.0/com/google/api/services/certificatemanager/v1/model/DnsAuthorization.java
@@ -76,6 +76,14 @@ public final class DnsAuthorization extends com.google.api.client.json.GenericJs
   @com.google.api.client.util.Key
   private java.lang.String name;
 
+  /**
+   * Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example:
+   * "123/environment": "production", "123/costCenter": "marketing"
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.util.Map<String, java.lang.String> tags;
+
   /**
    * Optional. Immutable. Type of DnsAuthorization. If unset during resource creation the following
    * default will be used: - in location `global`: FIXED_RECORD, - in other locations:
@@ -200,6 +208,25 @@ public DnsAuthorization setName(java.lang.String name) {
     return this;
   }
 
+  /**
+   * Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example:
+   * "123/environment": "production", "123/costCenter": "marketing"
+   * @return value or {@code null} for none
+   */
+  public java.util.Map<String, java.lang.String> getTags() {
+    return tags;
+  }
+
+  /**
+   * Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example:
+   * "123/environment": "production", "123/costCenter": "marketing"
+   * @param tags tags or {@code null} for none
+   */
+  public DnsAuthorization setTags(java.util.Map<String, java.lang.String> tags) {
+    this.tags = tags;
+    return this;
+  }
+
   /**
    * Optional. Immutable. Type of DnsAuthorization. If unset during resource creation the following
    * default will be used: - in location `global`: FIXED_RECORD, - in other locations:
diff --git a/clients/google-api-services-certificatemanager/v1/2.0.0/com/google/api/services/certificatemanager/v1/model/TrustConfig.java b/clients/google-api-services-certificatemanager/v1/2.0.0/com/google/api/services/certificatemanager/v1/model/TrustConfig.java
index 87117e20a60..f6649368d5f 100644
--- a/clients/google-api-services-certificatemanager/v1/2.0.0/com/google/api/services/certificatemanager/v1/model/TrustConfig.java
+++ b/clients/google-api-services-certificatemanager/v1/2.0.0/com/google/api/services/certificatemanager/v1/model/TrustConfig.java
@@ -90,6 +90,14 @@ public final class TrustConfig extends com.google.api.client.json.GenericJson {
   @com.google.api.client.util.Key
   private java.util.Map<String, TrustStore> spiffeTrustStores;
 
+  /**
+   * Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example:
+   * "123/environment": "production", "123/costCenter": "marketing"
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.util.Map<String, java.lang.String> tags;
+
   /**
    * Optional. Set of trust stores to perform validation against. This field is supported when
    * TrustConfig is configured with Load Balancers, currently not supported for SPIFFE certificate
@@ -235,6 +243,25 @@ public TrustConfig setSpiffeTrustStores(java.util.Map<String, TrustStore> spiffe
     return this;
   }
 
+  /**
+   * Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example:
+   * "123/environment": "production", "123/costCenter": "marketing"
+   * @return value or {@code null} for none
+   */
+  public java.util.Map<String, java.lang.String> getTags() {
+    return tags;
+  }
+
+  /**
+   * Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example:
+   * "123/environment": "production", "123/costCenter": "marketing"
+   * @param tags tags or {@code null} for none
+   */
+  public TrustConfig setTags(java.util.Map<String, java.lang.String> tags) {
+    this.tags = tags;
+    return this;
+  }
+
   /**
    * Optional. Set of trust stores to perform validation against. This field is supported when
    * TrustConfig is configured with Load Balancers, currently not supported for SPIFFE certificate
diff --git a/clients/google-api-services-certificatemanager/v1/2.0.0/pom.xml b/clients/google-api-services-certificatemanager/v1/2.0.0/pom.xml
index e562877ac2c..0ec0179ff18 100644
--- a/clients/google-api-services-certificatemanager/v1/2.0.0/pom.xml
+++ b/clients/google-api-services-certificatemanager/v1/2.0.0/pom.xml
@@ -8,8 +8,8 @@
 
   <groupId>com.google.apis</groupId>
   <artifactId>google-api-services-certificatemanager</artifactId>
-  <version>v1-rev20260427-2.0.0</version>
-  <name>Certificate Manager API v1-rev20260427-2.0.0</name>
+  <version>v1-rev20260629-2.0.0</version>
+  <name>Certificate Manager API v1-rev20260629-2.0.0</name>
   <packaging>jar</packaging>
 
   <inceptionYear>2011</inceptionYear>
diff --git a/clients/google-api-services-certificatemanager/v1/README.md b/clients/google-api-services-certificatemanager/v1/README.md
index f73ca00ff4f..5c9db9f0ba7 100644
--- a/clients/google-api-services-certificatemanager/v1/README.md
+++ b/clients/google-api-services-certificatemanager/v1/README.md
@@ -22,7 +22,7 @@ Add the following lines to your `pom.xml` file:
     <dependency>
       <groupId>com.google.apis</groupId>
       <artifactId>google-api-services-certificatemanager</artifactId>
-      <version>v1-rev20260427-2.0.0</version>
+      <version>v1-rev20260629-2.0.0</version>
     </dependency>
   </dependencies>
 </project>
@@ -35,7 +35,7 @@ repositories {
   mavenCentral()
 }
 dependencies {
-  implementation 'com.google.apis:google-api-services-certificatemanager:v1-rev20260427-2.0.0'
+  implementation 'com.google.apis:google-api-services-certificatemanager:v1-rev20260629-2.0.0'
 }
 ```