fix: Rename the 'seed' argument for setting an initial regional access boundary for clarity (#17186)

macastelaz · web-flow · commit e5c8cf92f4e7 · 2026-05-19T15:47:16.000-05:00
diff --git a/packages/google-auth/google/auth/_regional_access_boundary_utils.py b/packages/google-auth/google/auth/_regional_access_boundary_utils.py
@@ -134,7 +134,7 @@ def enable_blocking_lookup(self):
         self._use_blocking_regional_access_boundary_lookup = True
 
     def set_initial_regional_access_boundary(self, encoded_locations=None, expiry=None):
-        """Manually sets the regional access boundary to the client provided seed.
+        """Manually sets the regional access boundary to the client provided initial values.
 
         Args:
             encoded_locations (Optional[str]): The encoded locations string.
diff --git a/packages/google-auth/google/auth/credentials.py b/packages/google-auth/google/auth/credentials.py
@@ -371,11 +371,11 @@ def _copy_regional_access_boundary_manager(self, target):
         new_manager._data = self._rab_manager._data
         target._rab_manager = new_manager
 
-    def _set_regional_access_boundary(self, seed):
-        """Applies the regional_access_boundary provided via the seed on these
-        credentials. This is intended for internal use only as invalid
-        seeds would produce unexpected results until automatic recovery is supported.
-        Currently this is used by the gcloud CLI and therefore changes to the
+    def _set_regional_access_boundary(self, initial_boundary):
+        """Applies the regional_access_boundary provided via the initial_boundary on these
+        credentials. This is intended for internal use only as an invalid
+        initial_boundary would produce unexpected results until automatic recovery
+        is supported. Currently this is used by the gcloud CLI and therefore changes to the
         contract MUST be backwards compatible (e.g. the method signature must be
         unchanged and the credentials with the RAB set must be returned).
 
@@ -384,8 +384,8 @@ def _set_regional_access_boundary(self, seed):
             google.auth.credentials.Credentials: The credentials instance.
         """
         self._rab_manager.set_initial_regional_access_boundary(
-            encoded_locations=seed.get("encodedLocations", None),
-            expiry=seed.get("expiry", None),
+            encoded_locations=initial_boundary.get("encodedLocations", None),
+            expiry=initial_boundary.get("expiry", None),
         )
         return self
 
