google-api-client 0.25.0 → 0.26.0

data/generated/google/apis/compute_v1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://developers.google.com/compute/docs/reference/latest/
     module ComputeV1
       VERSION = 'V1'
-      REVISION = '20181017'
+      REVISION = '20181128'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/compute_v1/classes.rb

@@ -576,13 +576,33 @@ module Google
         # @return [String]
         attr_accessor :name
       
+        # The URL of the network in which to reserve the address. This field can only be
+        # used with INTERNAL type with VPC_PEERING purpose.
+        # Corresponds to the JSON property `network`
+        # @return [String]
+        attr_accessor :network
+      
         # This signifies the networking tier used for configuring this Address and can
-        # only take the following values: PREMIUM , STANDARD.
+        # only take the following values: PREMIUM, STANDARD. Global forwarding rules can
+        # only be Premium Tier. Regional forwarding rules can be either Premium or
+        # Standard Tier. Standard Tier addresses applied to regional forwarding rules
+        # can be used with any external load balancer. Regional forwarding rules in
+        # Premium Tier can only be used with a Network load balancer.
         # If this field is not specified, it is assumed to be PREMIUM.
         # Corresponds to the JSON property `networkTier`
         # @return [String]
         attr_accessor :network_tier
       
+        # The prefix length if the resource reprensents an IP range.
+        # Corresponds to the JSON property `prefixLength`
+        # @return [Fixnum]
+        attr_accessor :prefix_length
+      
+        # The purpose of resource, only used with INTERNAL type.
+        # Corresponds to the JSON property `purpose`
+        # @return [String]
+        attr_accessor :purpose
+      
         # [Output Only] URL of the region where the regional address resides. This field
         # is not applicable to global addresses. You must specify this field as part of
         # the HTTP request URL. You cannot set this field in the request body.
@@ -630,7 +650,10 @@ module Google
           @ip_version = args[:ip_version] if args.key?(:ip_version)
           @kind = args[:kind] if args.key?(:kind)
           @name = args[:name] if args.key?(:name)
+          @network = args[:network] if args.key?(:network)
           @network_tier = args[:network_tier] if args.key?(:network_tier)
+          @prefix_length = args[:prefix_length] if args.key?(:prefix_length)
+          @purpose = args[:purpose] if args.key?(:purpose)
           @region = args[:region] if args.key?(:region)
           @self_link = args[:self_link] if args.key?(:self_link)
           @status = args[:status] if args.key?(:status)
@@ -1207,6 +1230,104 @@ module Google
         end
       end
       
+      # Specifies the audit configuration for a service. The configuration determines
+      # which permission types are logged, and what identities, if any, are exempted
+      # from logging. An AuditConfig must have one or more AuditLogConfigs.
+      # If there are AuditConfigs for both `allServices` and a specific service, the
+      # union of the two AuditConfigs is used for that service: the log_types
+      # specified in each AuditConfig are enabled, and the exempted_members in each
+      # AuditLogConfig are exempted.
+      # Example Policy with multiple AuditConfigs:
+      # ` "audit_configs": [ ` "service": "allServices" "audit_log_configs": [ ` "
+      # log_type": "DATA_READ", "exempted_members": [ "user:foo@gmail.com" ] `, ` "
+      # log_type": "DATA_WRITE", `, ` "log_type": "ADMIN_READ", ` ] `, ` "service": "
+      # fooservice.googleapis.com" "audit_log_configs": [ ` "log_type": "DATA_READ", `,
+      # ` "log_type": "DATA_WRITE", "exempted_members": [ "user:bar@gmail.com" ] ` ] `
+      # ] `
+      # For fooservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
+      # logging. It also exempts foo@gmail.com from DATA_READ logging, and bar@gmail.
+      # com from DATA_WRITE logging.
+      class AuditConfig
+        include Google::Apis::Core::Hashable
+      
+        # The configuration for logging of each type of permission.
+        # Corresponds to the JSON property `auditLogConfigs`
+        # @return [Array<Google::Apis::ComputeV1::AuditLogConfig>]
+        attr_accessor :audit_log_configs
+      
+        # 
+        # Corresponds to the JSON property `exemptedMembers`
+        # @return [Array<String>]
+        attr_accessor :exempted_members
+      
+        # Specifies a service that will be enabled for audit logging. For example, `
+        # storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special
+        # value that covers all services.
+        # Corresponds to the JSON property `service`
+        # @return [String]
+        attr_accessor :service
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @audit_log_configs = args[:audit_log_configs] if args.key?(:audit_log_configs)
+          @exempted_members = args[:exempted_members] if args.key?(:exempted_members)
+          @service = args[:service] if args.key?(:service)
+        end
+      end
+      
+      # Provides the configuration for logging a type of permissions. Example:
+      # ` "audit_log_configs": [ ` "log_type": "DATA_READ", "exempted_members": [ "
+      # user:foo@gmail.com" ] `, ` "log_type": "DATA_WRITE", ` ] `
+      # This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting foo@gmail.
+      # com from DATA_READ logging.
+      class AuditLogConfig
+        include Google::Apis::Core::Hashable
+      
+        # Specifies the identities that do not cause logging for this type of permission.
+        # Follows the same format of [Binding.members][].
+        # Corresponds to the JSON property `exemptedMembers`
+        # @return [Array<String>]
+        attr_accessor :exempted_members
+      
+        # The log type that this config enables.
+        # Corresponds to the JSON property `logType`
+        # @return [String]
+        attr_accessor :log_type
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @exempted_members = args[:exempted_members] if args.key?(:exempted_members)
+          @log_type = args[:log_type] if args.key?(:log_type)
+        end
+      end
+      
+      # Authorization-related information used by Cloud Audit Logging.
+      class AuthorizationLoggingOptions
+        include Google::Apis::Core::Hashable
+      
+        # The type of the permission that was checked.
+        # Corresponds to the JSON property `permissionType`
+        # @return [String]
+        attr_accessor :permission_type
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @permission_type = args[:permission_type] if args.key?(:permission_type)
+        end
+      end
+      
       # Represents an Autoscaler resource. Autoscalers allow you to automatically
       # scale virtual machine instances in managed instance groups according to an
       # autoscaling policy that you define. For more information, read Autoscaling
@@ -1769,8 +1890,7 @@ module Google
         attr_accessor :utilization_target
       
         # Defines how target utilization value is expressed for a Stackdriver Monitoring
-        # metric. Either GAUGE, DELTA_PER_SECOND, or DELTA_PER_MINUTE. If not specified,
-        # the default is GAUGE.
+        # metric. Either GAUGE, DELTA_PER_SECOND, or DELTA_PER_MINUTE.
         # Corresponds to the JSON property `utilizationTargetType`
         # @return [String]
         attr_accessor :utilization_target_type
@@ -1836,15 +1956,21 @@ module Google
         # @return [String]
         attr_accessor :description
       
-        # The fully-qualified URL of a Instance Group resource. This instance group
-        # defines the list of instances that serve traffic. Member virtual machine
-        # instances from each instance group must live in the same zone as the instance
-        # group itself. No two backends in a backend service are allowed to use same
-        # Instance Group resource.
-        # Note that you must specify an Instance Group resource using the fully-
-        # qualified URL, rather than a partial URL.
+        # The fully-qualified URL of an Instance Group or Network Endpoint Group
+        # resource. In case of instance group this defines the list of instances that
+        # serve traffic. Member virtual machine instances from each instance group must
+        # live in the same zone as the instance group itself. No two backends in a
+        # backend service are allowed to use same Instance Group resource.
+        # For Network Endpoint Groups this defines list of endpoints. All endpoints of
+        # Network Endpoint Group must be hosted on instances located in the same zone as
+        # the Network Endpoint Group.
+        # Backend service can not contain mix of Instance Group and Network Endpoint
+        # Group backends.
+        # Note that you must specify an Instance Group or Network Endpoint Group
+        # resource using the fully-qualified URL, rather than a partial URL.
         # When the BackendService has load balancing scheme INTERNAL, the instance group
-        # must be within the same region as the BackendService.
+        # must be within the same region as the BackendService. Network Endpoint Groups
+        # are not supported for INTERNAL load balancing scheme.
         # Corresponds to the JSON property `group`
         # @return [String]
         attr_accessor :group
@@ -1990,7 +2116,7 @@ module Google
         # considered fresh. After this time period, the response will be revalidated
         # before being served. Defaults to 1hr (3600s). When serving responses to signed
         # URL requests, Cloud CDN will internally behave as though all responses from
-        # this backend had a ?Cache-Control: public, max-age=[TTL]? header, regardless
+        # this backend had a "Cache-Control: public, max-age=[TTL]" header, regardless
         # of any existing Cache-Control header. The actual headers served in responses
         # will not be altered.
         # Corresponds to the JSON property `signedUrlCacheMaxAgeSec`
@@ -2180,7 +2306,8 @@ module Google
         # Fingerprint of this resource. A hash of the contents stored in this object.
         # This field is used in optimistic locking. This field will be ignored when
         # inserting a BackendService. An up-to-date fingerprint must be provided in
-        # order to update the BackendService.
+        # order to update the BackendService, otherwise the request will fail with error
+        # 412 conditionNotMet.
         # To see the latest fingerprint, make a get() request to retrieve a
         # BackendService.
         # Corresponds to the JSON property `fingerprint`
@@ -2453,7 +2580,7 @@ module Google
         # considered fresh. After this time period, the response will be revalidated
         # before being served. Defaults to 1hr (3600s). When serving responses to signed
         # URL requests, Cloud CDN will internally behave as though all responses from
-        # this backend had a ?Cache-Control: public, max-age=[TTL]? header, regardless
+        # this backend had a "Cache-Control: public, max-age=[TTL]" header, regardless
         # of any existing Cache-Control header. The actual headers served in responses
         # will not be altered.
         # Corresponds to the JSON property `signedUrlCacheMaxAgeSec`
@@ -2481,7 +2608,8 @@ module Google
       class BackendServiceGroupHealth
         include Google::Apis::Core::Hashable
       
-        # 
+        # Health state of the backend instances or endpoints in requested instance or
+        # network endpoint group, determined based on configured health checks.
         # Corresponds to the JSON property `healthStatus`
         # @return [Array<Google::Apis::ComputeV1::HealthStatus>]
         attr_accessor :health_status
@@ -2750,6 +2878,53 @@ module Google
         end
       end
       
+      # Associates `members` with a `role`.
+      class Binding
+        include Google::Apis::Core::Hashable
+      
+        # Represents an expression text. Example:
+        # title: "User account presence" description: "Determines whether the request
+        # has a user account" expression: "size(request.user) > 0"
+        # Corresponds to the JSON property `condition`
+        # @return [Google::Apis::ComputeV1::Expr]
+        attr_accessor :condition
+      
+        # Specifies the identities requesting access for a Cloud Platform resource. `
+        # members` can have the following values:
+        # * `allUsers`: A special identifier that represents anyone who is on the
+        # internet; with or without a Google account.
+        # * `allAuthenticatedUsers`: A special identifier that represents anyone who is
+        # authenticated with a Google account or a service account.
+        # * `user:`emailid``: An email address that represents a specific Google account.
+        # For example, `alice@gmail.com` .
+        # * `serviceAccount:`emailid``: An email address that represents a service
+        # account. For example, `my-other-app@appspot.gserviceaccount.com`.
+        # * `group:`emailid``: An email address that represents a Google group. For
+        # example, `admins@example.com`.
+        # * `domain:`domain``: A Google Apps domain name that represents all the users
+        # of that domain. For example, `google.com` or `example.com`.
+        # Corresponds to the JSON property `members`
+        # @return [Array<String>]
+        attr_accessor :members
+      
+        # Role that is assigned to `members`. For example, `roles/viewer`, `roles/editor`
+        # , or `roles/owner`.
+        # Corresponds to the JSON property `role`
+        # @return [String]
+        attr_accessor :role
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @condition = args[:condition] if args.key?(:condition)
+          @members = args[:members] if args.key?(:members)
+          @role = args[:role] if args.key?(:role)
+        end
+      end
+      
       # 
       class CacheInvalidationRule
         include Google::Apis::Core::Hashable
@@ -3271,6 +3446,56 @@ module Google
         end
       end
       
+      # A condition to be met.
+      class Condition
+        include Google::Apis::Core::Hashable
+      
+        # Trusted attributes supplied by the IAM system.
+        # Corresponds to the JSON property `iam`
+        # @return [String]
+        attr_accessor :iam
+      
+        # An operator to apply the subject with.
+        # Corresponds to the JSON property `op`
+        # @return [String]
+        attr_accessor :op
+      
+        # Trusted attributes discharged by the service.
+        # Corresponds to the JSON property `svc`
+        # @return [String]
+        attr_accessor :svc
+      
+        # Trusted attributes supplied by any service that owns resources and uses the
+        # IAM system for access control.
+        # Corresponds to the JSON property `sys`
+        # @return [String]
+        attr_accessor :sys
+      
+        # DEPRECATED. Use 'values' instead.
+        # Corresponds to the JSON property `value`
+        # @return [String]
+        attr_accessor :value
+      
+        # The objects of the condition. This is mutually exclusive with 'value'.
+        # Corresponds to the JSON property `values`
+        # @return [Array<String>]
+        attr_accessor :values
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @iam = args[:iam] if args.key?(:iam)
+          @op = args[:op] if args.key?(:op)
+          @svc = args[:svc] if args.key?(:svc)
+          @sys = args[:sys] if args.key?(:sys)
+          @value = args[:value] if args.key?(:value)
+          @values = args[:values] if args.key?(:values)
+        end
+      end
+      
       # Message containing connection draining configuration.
       class ConnectionDraining
         include Google::Apis::Core::Hashable
@@ -3447,7 +3672,8 @@ module Google
         # a hash of the labels set used for optimistic locking. The fingerprint is
         # initially generated by Compute Engine and changes after every request to
         # modify or update labels. You must always provide an up-to-date fingerprint
-        # hash in order to update or change labels.
+        # hash in order to update or change labels, otherwise the request will fail with
+        # error 412 conditionNotMet.
         # To see the latest fingerprint, make a get() request to retrieve a disk.
         # Corresponds to the JSON property `labelFingerprint`
         # NOTE: Values are automatically base64 encoded/decoded in the client library.
@@ -3495,6 +3721,14 @@ module Google
         # @return [String]
         attr_accessor :options
       
+        # Physical block size of the persistent disk, in bytes. If not present in a
+        # request, a default value is used. Currently supported sizes are 4096 and 16384,
+        # other sizes may be added in the future. If an unsupported value is requested,
+        # the error message will list the supported values for the caller's project.
+        # Corresponds to the JSON property `physicalBlockSizeBytes`
+        # @return [Fixnum]
+        attr_accessor :physical_block_size_bytes
+      
         # [Output Only] URL of the region where the disk resides. Only applicable for
         # regional resources. You must specify this field as part of the HTTP request
         # URL. It is not settable as a field in the request body.
@@ -3626,6 +3860,7 @@ module Google
           @licenses = args[:licenses] if args.key?(:licenses)
           @name = args[:name] if args.key?(:name)
           @options = args[:options] if args.key?(:options)
+          @physical_block_size_bytes = args[:physical_block_size_bytes] if args.key?(:physical_block_size_bytes)
           @region = args[:region] if args.key?(:region)
           @replica_zones = args[:replica_zones] if args.key?(:replica_zones)
           @self_link = args[:self_link] if args.key?(:self_link)
@@ -4525,6 +4760,50 @@ module Google
         end
       end
       
+      # Represents an expression text. Example:
+      # title: "User account presence" description: "Determines whether the request
+      # has a user account" expression: "size(request.user) > 0"
+      class Expr
+        include Google::Apis::Core::Hashable
+      
+        # An optional description of the expression. This is a longer text which
+        # describes the expression, e.g. when hovered over it in a UI.
+        # Corresponds to the JSON property `description`
+        # @return [String]
+        attr_accessor :description
+      
+        # Textual representation of an expression in Common Expression Language syntax.
+        # The application context of the containing message determines which well-known
+        # feature set of CEL is supported.
+        # Corresponds to the JSON property `expression`
+        # @return [String]
+        attr_accessor :expression
+      
+        # An optional string indicating the location of the expression for error
+        # reporting, e.g. a file name and a position in the file.
+        # Corresponds to the JSON property `location`
+        # @return [String]
+        attr_accessor :location
+      
+        # An optional title for the expression, i.e. a short string describing its
+        # purpose. This can be used e.g. in UIs which allow to enter the expression.
+        # Corresponds to the JSON property `title`
+        # @return [String]
+        attr_accessor :title
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @description = args[:description] if args.key?(:description)
+          @expression = args[:expression] if args.key?(:expression)
+          @location = args[:location] if args.key?(:location)
+          @title = args[:title] if args.key?(:title)
+        end
+      end
+      
       # Represents a Firewall resource.
       class Firewall
         include Google::Apis::Core::Hashable
@@ -4586,6 +4865,11 @@ module Google
         # @return [String]
         attr_accessor :kind
       
+        # The available logging options for a firewall rule.
+        # Corresponds to the JSON property `logConfig`
+        # @return [Google::Apis::ComputeV1::FirewallLogConfig]
+        attr_accessor :log_config
+      
         # Name of the resource; provided by the client when the resource is created. The
         # name must be 1-63 characters long, and comply with RFC1035. Specifically, the
         # name must be 1-63 characters long and match the regular expression `[a-z]([-a-
@@ -4695,6 +4979,7 @@ module Google
           @disabled = args[:disabled] if args.key?(:disabled)
           @id = args[:id] if args.key?(:id)
           @kind = args[:kind] if args.key?(:kind)
+          @log_config = args[:log_config] if args.key?(:log_config)
           @name = args[:name] if args.key?(:name)
           @network = args[:network] if args.key?(:network)
           @priority = args[:priority] if args.key?(:priority)
@@ -4887,6 +5172,26 @@ module Google
         end
       end
       
+      # The available logging options for a firewall rule.
+      class FirewallLogConfig
+        include Google::Apis::Core::Hashable
+      
+        # This field denotes whether to enable logging for a particular firewall rule.
+        # Corresponds to the JSON property `enable`
+        # @return [Boolean]
+        attr_accessor :enable
+        alias_method :enable?, :enable
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @enable = args[:enable] if args.key?(:enable)
+        end
+      end
+      
       # A ForwardingRule resource. A ForwardingRule resource specifies which pool of
       # target virtual machines to forward a packet to if it matches the given [
       # IPAddress, IPProtocol, ports] tuple. (== resource_for beta.forwardingRules ==)
@@ -5030,9 +5335,9 @@ module Google
       
         # This field is used along with the backend_service field for internal load
         # balancing.
-        # When the load balancing scheme is INTERNAL, a single port or a comma separated
-        # list of ports can be configured. Only packets addressed to these ports will be
-        # forwarded to the backends configured with this forwarding rule.
+        # When the load balancing scheme is INTERNAL, a list of ports can be configured,
+        # for example, ['80'], ['8000','9000'] etc. Only packets addressed to these
+        # ports will be forwarded to the backends configured with this forwarding rule.
         # You may specify a maximum of up to 5 ports.
         # Corresponds to the JSON property `ports`
         # @return [Array<String>]
@@ -5431,8 +5736,9 @@ module Google
         # The fingerprint of the previous set of labels for this resource, used to
         # detect conflicts. The fingerprint is initially generated by Compute Engine and
         # changes after every request to modify or update labels. You must always
-        # provide an up-to-date fingerprint hash when updating or changing labels. Make
-        # a get() request to the resource to get the latest fingerprint.
+        # provide an up-to-date fingerprint hash when updating or changing labels,
+        # otherwise the request will fail with error 412 conditionNotMet. Make a get()
+        # request to the resource to get the latest fingerprint.
         # Corresponds to the JSON property `labelFingerprint`
         # NOTE: Values are automatically base64 encoded/decoded in the client library.
         # @return [String]
@@ -5460,6 +5766,56 @@ module Google
         end
       end
       
+      # 
+      class GlobalSetPolicyRequest
+        include Google::Apis::Core::Hashable
+      
+        # Flatten Policy to create a backward compatible wire-format. Deprecated. Use '
+        # policy' to specify bindings.
+        # Corresponds to the JSON property `bindings`
+        # @return [Array<Google::Apis::ComputeV1::Binding>]
+        attr_accessor :bindings
+      
+        # Flatten Policy to create a backward compatible wire-format. Deprecated. Use '
+        # policy' to specify the etag.
+        # Corresponds to the JSON property `etag`
+        # NOTE: Values are automatically base64 encoded/decoded in the client library.
+        # @return [String]
+        attr_accessor :etag
+      
+        # Defines an Identity and Access Management (IAM) policy. It is used to specify
+        # access control policies for Cloud Platform resources.
+        # A `Policy` consists of a list of `bindings`. A `binding` binds a list of `
+        # members` to a `role`, where the members can be user accounts, Google groups,
+        # Google domains, and service accounts. A `role` is a named list of permissions
+        # defined by IAM.
+        # **JSON Example**
+        # ` "bindings": [ ` "role": "roles/owner", "members": [ "user:mike@example.com",
+        # "group:admins@example.com", "domain:google.com", "serviceAccount:my-other-app@
+        # appspot.gserviceaccount.com" ] `, ` "role": "roles/viewer", "members": ["user:
+        # sean@example.com"] ` ] `
+        # **YAML Example**
+        # bindings: - members: - user:mike@example.com - group:admins@example.com -
+        # domain:google.com - serviceAccount:my-other-app@appspot.gserviceaccount.com
+        # role: roles/owner - members: - user:sean@example.com role: roles/viewer
+        # For a description of IAM and its features, see the [IAM developer's guide](
+        # https://cloud.google.com/iam/docs).
+        # Corresponds to the JSON property `policy`
+        # @return [Google::Apis::ComputeV1::Policy]
+        attr_accessor :policy
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @bindings = args[:bindings] if args.key?(:bindings)
+          @etag = args[:etag] if args.key?(:etag)
+          @policy = args[:policy] if args.key?(:policy)
+        end
+      end
+      
       # Guest OS features.
       class GuestOsFeature
         include Google::Apis::Core::Hashable
@@ -6436,7 +6792,8 @@ module Google
         # a hash of the labels used for optimistic locking. The fingerprint is initially
         # generated by Compute Engine and changes after every request to modify or
         # update labels. You must always provide an up-to-date fingerprint hash in order
-        # to update or change labels.
+        # to update or change labels, otherwise the request will fail with error 412
+        # conditionNotMet.
         # To see the latest fingerprint, make a get() request to retrieve an image.
         # Corresponds to the JSON property `labelFingerprint`
         # NOTE: Values are automatically base64 encoded/decoded in the client library.
@@ -7455,7 +7812,8 @@ module Google
       
         # Fingerprint of this resource. This field may be used in optimistic locking. It
         # will be ignored when inserting an InstanceGroupManager. An up-to-date
-        # fingerprint must be provided in order to update the InstanceGroupManager.
+        # fingerprint must be provided in order to update the InstanceGroupManager,
+        # otherwise the request will fail with error 412 conditionNotMet.
         # To see the latest fingerprint, make a get() request to retrieve an
         # InstanceGroupManager.
         # Corresponds to the JSON property `fingerprint`
@@ -7619,6 +7977,13 @@ module Google
         # @return [Fixnum]
         attr_accessor :restarting
       
+        # [Output Only] The number of instances in the managed instance group that are
+        # being verified. See the managedInstances[].currentAction property in the
+        # listManagedInstances method documentation.
+        # Corresponds to the JSON property `verifying`
+        # @return [Fixnum]
+        attr_accessor :verifying
+      
         def initialize(**args)
            update!(**args)
         end
@@ -7633,6 +7998,7 @@ module Google
           @recreating = args[:recreating] if args.key?(:recreating)
           @refreshing = args[:refreshing] if args.key?(:refreshing)
           @restarting = args[:restarting] if args.key?(:restarting)
+          @verifying = args[:verifying] if args.key?(:verifying)
         end
       end
       
@@ -8376,7 +8742,8 @@ module Google
         # named ports settings concurrently. Obtain the fingerprint with the
         # instanceGroups.get method. Then, include the fingerprint in your request to
         # ensure that you do not overwrite changes that were applied from another
-        # concurrent request.
+        # concurrent request. A request with an incorrect fingerprint will fail with
+        # error 412 conditionNotMet.
         # Corresponds to the JSON property `fingerprint`
         # NOTE: Values are automatically base64 encoded/decoded in the client library.
         # @return [String]
@@ -9438,7 +9805,7 @@ module Google
       
         # Provisioned bandwidth capacity for the interconnectAttachment. Can be set by
         # the partner to update the customer's provisioned bandwidth. Output only for
-        # for PARTNER type, mutable for PARTNER_PROVIDER, not available for DEDICATED.
+        # PARTNER type, mutable for PARTNER_PROVIDER and DEDICATED.
         # Corresponds to the JSON property `bandwidth`
         # @return [String]
         attr_accessor :bandwidth
@@ -9561,7 +9928,7 @@ module Google
         # @return [String]
         attr_accessor :region
       
-        # URL of the cloud router to be used for dynamic routing. This router must be in
+        # URL of the Cloud Router to be used for dynamic routing. This router must be in
         # the same region as this InterconnectAttachment. The InterconnectAttachment
         # will automatically connect the Interconnect to the network & region within
         # which the Cloud Router is configured.
@@ -9584,9 +9951,8 @@ module Google
         # @return [String]
         attr_accessor :type
       
-        # Available only for DEDICATED and PARTNER_PROVIDER. Desired VLAN tag for this
-        # attachment, in the range 2-4094. This field refers to 802.1q VLAN tag, also
-        # known as IEEE 802.1Q Only specified at creation time.
+        # The IEEE 802.1Q VLAN tag for this attachment, in the range 2-4094. Only
+        # specified at creation time.
         # Corresponds to the JSON property `vlanTag8021q`
         # @return [Fixnum]
         attr_accessor :vlan_tag8021q
@@ -9868,7 +10234,7 @@ module Google
         include Google::Apis::Core::Hashable
       
         # Plain text name of the Interconnect this attachment is connected to, as
-        # displayed in the Partner?s portal. For instance ?Chicago 1?. This value may be
+        # displayed in the Partner?s portal. For instance "Chicago 1". This value may be
         # validated to match approved Partner values.
         # Corresponds to the JSON property `interconnectName`
         # @return [String]
@@ -10045,44 +10411,84 @@ module Google
         end
       end
       
-      # Response to the list request, and contains a list of interconnects.
-      class InterconnectList
+      # Diagnostics information about interconnect, contains detailed and current
+      # technical information about Google?s side of the connection.
+      class InterconnectDiagnostics
         include Google::Apis::Core::Hashable
       
-        # [Output Only] Unique identifier for the resource; defined by the server.
-        # Corresponds to the JSON property `id`
+        # A list of InterconnectDiagnostics.ARPEntry objects, describing individual
+        # neighbors currently seen by the Google router in the ARP cache for the
+        # Interconnect. This will be empty when the Interconnect is not bundled.
+        # Corresponds to the JSON property `arpCaches`
+        # @return [Array<Google::Apis::ComputeV1::InterconnectDiagnosticsArpEntry>]
+        attr_accessor :arp_caches
+      
+        # A list of InterconnectDiagnostics.LinkStatus objects, describing the status
+        # for each link on the Interconnect.
+        # Corresponds to the JSON property `links`
+        # @return [Array<Google::Apis::ComputeV1::InterconnectDiagnosticsLinkStatus>]
+        attr_accessor :links
+      
+        # The MAC address of the Interconnect's bundle interface.
+        # Corresponds to the JSON property `macAddress`
         # @return [String]
-        attr_accessor :id
+        attr_accessor :mac_address
       
-        # A list of Interconnect resources.
-        # Corresponds to the JSON property `items`
-        # @return [Array<Google::Apis::ComputeV1::Interconnect>]
-        attr_accessor :items
+        def initialize(**args)
+           update!(**args)
+        end
       
-        # [Output Only] Type of resource. Always compute#interconnectList for lists of
-        # interconnects.
-        # Corresponds to the JSON property `kind`
+        # Update properties of this object
+        def update!(**args)
+          @arp_caches = args[:arp_caches] if args.key?(:arp_caches)
+          @links = args[:links] if args.key?(:links)
+          @mac_address = args[:mac_address] if args.key?(:mac_address)
+        end
+      end
+      
+      # Describing the ARP neighbor entries seen on this link
+      class InterconnectDiagnosticsArpEntry
+        include Google::Apis::Core::Hashable
+      
+        # The IP address of this ARP neighbor.
+        # Corresponds to the JSON property `ipAddress`
         # @return [String]
-        attr_accessor :kind
+        attr_accessor :ip_address
       
-        # [Output Only] This token allows you to get the next page of results for list
-        # requests. If the number of results is larger than maxResults, use the
-        # nextPageToken as a value for the query parameter pageToken in the next list
-        # request. Subsequent list requests will have their own nextPageToken to
-        # continue paging through the results.
-        # Corresponds to the JSON property `nextPageToken`
+        # The MAC address of this ARP neighbor.
+        # Corresponds to the JSON property `macAddress`
         # @return [String]
-        attr_accessor :next_page_token
+        attr_accessor :mac_address
       
-        # [Output Only] Server-defined URL for this resource.
-        # Corresponds to the JSON property `selfLink`
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @ip_address = args[:ip_address] if args.key?(:ip_address)
+          @mac_address = args[:mac_address] if args.key?(:mac_address)
+        end
+      end
+      
+      # 
+      class InterconnectDiagnosticsLinkLacpStatus
+        include Google::Apis::Core::Hashable
+      
+        # System ID of the port on Google?s side of the LACP exchange.
+        # Corresponds to the JSON property `googleSystemId`
         # @return [String]
-        attr_accessor :self_link
+        attr_accessor :google_system_id
       
-        # [Output Only] Informational warning message.
-        # Corresponds to the JSON property `warning`
-        # @return [Google::Apis::ComputeV1::InterconnectList::Warning]
-        attr_accessor :warning
+        # System ID of the port on the neighbor?s side of the LACP exchange.
+        # Corresponds to the JSON property `neighborSystemId`
+        # @return [String]
+        attr_accessor :neighbor_system_id
+      
+        # 
+        # Corresponds to the JSON property `state`
+        # @return [String]
+        attr_accessor :state
       
         def initialize(**args)
            update!(**args)
@@ -10090,41 +10496,170 @@ module Google
       
         # Update properties of this object
         def update!(**args)
-          @id = args[:id] if args.key?(:id)
-          @items = args[:items] if args.key?(:items)
-          @kind = args[:kind] if args.key?(:kind)
-          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
-          @self_link = args[:self_link] if args.key?(:self_link)
-          @warning = args[:warning] if args.key?(:warning)
+          @google_system_id = args[:google_system_id] if args.key?(:google_system_id)
+          @neighbor_system_id = args[:neighbor_system_id] if args.key?(:neighbor_system_id)
+          @state = args[:state] if args.key?(:state)
         end
-        
-        # [Output Only] Informational warning message.
-        class Warning
-          include Google::Apis::Core::Hashable
-        
-          # [Output Only] A warning code, if applicable. For example, Compute Engine
-          # returns NO_RESULTS_ON_PAGE if there are no results in the response.
-          # Corresponds to the JSON property `code`
-          # @return [String]
-          attr_accessor :code
-        
-          # [Output Only] Metadata about this warning in key: value format. For example:
-          # "data": [ ` "key": "scope", "value": "zones/us-east1-d" `
-          # Corresponds to the JSON property `data`
-          # @return [Array<Google::Apis::ComputeV1::InterconnectList::Warning::Datum>]
-          attr_accessor :data
-        
-          # [Output Only] A human-readable description of the warning code.
-          # Corresponds to the JSON property `message`
-          # @return [String]
-          attr_accessor :message
-        
-          def initialize(**args)
-             update!(**args)
-          end
-        
-          # Update properties of this object
-          def update!(**args)
+      end
+      
+      # 
+      class InterconnectDiagnosticsLinkOpticalPower
+        include Google::Apis::Core::Hashable
+      
+        # 
+        # Corresponds to the JSON property `state`
+        # @return [String]
+        attr_accessor :state
+      
+        # Value of the current optical power, read in dBm. Take a known good optical
+        # value, give it a 10% margin and trigger warnings relative to that value. In
+        # general, a -7dBm warning and a -11dBm alarm are good optical value estimates
+        # for most links.
+        # Corresponds to the JSON property `value`
+        # @return [Float]
+        attr_accessor :value
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @state = args[:state] if args.key?(:state)
+          @value = args[:value] if args.key?(:value)
+        end
+      end
+      
+      # 
+      class InterconnectDiagnosticsLinkStatus
+        include Google::Apis::Core::Hashable
+      
+        # A list of InterconnectDiagnostics.ARPEntry objects, describing the ARP
+        # neighbor entries seen on this link. This will be empty if the link is bundled
+        # Corresponds to the JSON property `arpCaches`
+        # @return [Array<Google::Apis::ComputeV1::InterconnectDiagnosticsArpEntry>]
+        attr_accessor :arp_caches
+      
+        # The unique ID for this link assigned during turn up by Google.
+        # Corresponds to the JSON property `circuitId`
+        # @return [String]
+        attr_accessor :circuit_id
+      
+        # The Demarc address assigned by Google and provided in the LoA.
+        # Corresponds to the JSON property `googleDemarc`
+        # @return [String]
+        attr_accessor :google_demarc
+      
+        # 
+        # Corresponds to the JSON property `lacpStatus`
+        # @return [Google::Apis::ComputeV1::InterconnectDiagnosticsLinkLacpStatus]
+        attr_accessor :lacp_status
+      
+        # 
+        # Corresponds to the JSON property `receivingOpticalPower`
+        # @return [Google::Apis::ComputeV1::InterconnectDiagnosticsLinkOpticalPower]
+        attr_accessor :receiving_optical_power
+      
+        # 
+        # Corresponds to the JSON property `transmittingOpticalPower`
+        # @return [Google::Apis::ComputeV1::InterconnectDiagnosticsLinkOpticalPower]
+        attr_accessor :transmitting_optical_power
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @arp_caches = args[:arp_caches] if args.key?(:arp_caches)
+          @circuit_id = args[:circuit_id] if args.key?(:circuit_id)
+          @google_demarc = args[:google_demarc] if args.key?(:google_demarc)
+          @lacp_status = args[:lacp_status] if args.key?(:lacp_status)
+          @receiving_optical_power = args[:receiving_optical_power] if args.key?(:receiving_optical_power)
+          @transmitting_optical_power = args[:transmitting_optical_power] if args.key?(:transmitting_optical_power)
+        end
+      end
+      
+      # Response to the list request, and contains a list of interconnects.
+      class InterconnectList
+        include Google::Apis::Core::Hashable
+      
+        # [Output Only] Unique identifier for the resource; defined by the server.
+        # Corresponds to the JSON property `id`
+        # @return [String]
+        attr_accessor :id
+      
+        # A list of Interconnect resources.
+        # Corresponds to the JSON property `items`
+        # @return [Array<Google::Apis::ComputeV1::Interconnect>]
+        attr_accessor :items
+      
+        # [Output Only] Type of resource. Always compute#interconnectList for lists of
+        # interconnects.
+        # Corresponds to the JSON property `kind`
+        # @return [String]
+        attr_accessor :kind
+      
+        # [Output Only] This token allows you to get the next page of results for list
+        # requests. If the number of results is larger than maxResults, use the
+        # nextPageToken as a value for the query parameter pageToken in the next list
+        # request. Subsequent list requests will have their own nextPageToken to
+        # continue paging through the results.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        # [Output Only] Server-defined URL for this resource.
+        # Corresponds to the JSON property `selfLink`
+        # @return [String]
+        attr_accessor :self_link
+      
+        # [Output Only] Informational warning message.
+        # Corresponds to the JSON property `warning`
+        # @return [Google::Apis::ComputeV1::InterconnectList::Warning]
+        attr_accessor :warning
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @id = args[:id] if args.key?(:id)
+          @items = args[:items] if args.key?(:items)
+          @kind = args[:kind] if args.key?(:kind)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+          @self_link = args[:self_link] if args.key?(:self_link)
+          @warning = args[:warning] if args.key?(:warning)
+        end
+        
+        # [Output Only] Informational warning message.
+        class Warning
+          include Google::Apis::Core::Hashable
+        
+          # [Output Only] A warning code, if applicable. For example, Compute Engine
+          # returns NO_RESULTS_ON_PAGE if there are no results in the response.
+          # Corresponds to the JSON property `code`
+          # @return [String]
+          attr_accessor :code
+        
+          # [Output Only] Metadata about this warning in key: value format. For example:
+          # "data": [ ` "key": "scope", "value": "zones/us-east1-d" `
+          # Corresponds to the JSON property `data`
+          # @return [Array<Google::Apis::ComputeV1::InterconnectList::Warning::Datum>]
+          attr_accessor :data
+        
+          # [Output Only] A human-readable description of the warning code.
+          # Corresponds to the JSON property `message`
+          # @return [String]
+          attr_accessor :message
+        
+          def initialize(**args)
+             update!(**args)
+          end
+        
+          # Update properties of this object
+          def update!(**args)
             @code = args[:code] if args.key?(:code)
             @data = args[:data] if args.key?(:data)
             @message = args[:message] if args.key?(:message)
@@ -10488,6 +11023,26 @@ module Google
         end
       end
       
+      # Response for the InterconnectsGetDiagnosticsRequest.
+      class InterconnectsGetDiagnosticsResponse
+        include Google::Apis::Core::Hashable
+      
+        # Diagnostics information about interconnect, contains detailed and current
+        # technical information about Google?s side of the connection.
+        # Corresponds to the JSON property `result`
+        # @return [Google::Apis::ComputeV1::InterconnectDiagnostics]
+        attr_accessor :result
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @result = args[:result] if args.key?(:result)
+        end
+      end
+      
       # A license resource.
       class License
         include Google::Apis::Core::Hashable
@@ -10804,6 +11359,141 @@ module Google
         end
       end
       
+      # Specifies what kind of log the caller must write
+      class LogConfig
+        include Google::Apis::Core::Hashable
+      
+        # Write a Cloud Audit log
+        # Corresponds to the JSON property `cloudAudit`
+        # @return [Google::Apis::ComputeV1::LogConfigCloudAuditOptions]
+        attr_accessor :cloud_audit
+      
+        # Increment a streamz counter with the specified metric and field names.
+        # Metric names should start with a '/', generally be lowercase-only, and end in "
+        # _count". Field names should not contain an initial slash. The actual exported
+        # metric names will have "/iam/policy" prepended.
+        # Field names correspond to IAM request parameters and field values are their
+        # respective values.
+        # Supported field names: - "authority", which is "[token]" if IAMContext.token
+        # is present, otherwise the value of IAMContext.authority_selector if present,
+        # and otherwise a representation of IAMContext.principal; or - "iam_principal",
+        # a representation of IAMContext.principal even if a token or authority selector
+        # is present; or - "" (empty string), resulting in a counter with no fields.
+        # Examples: counter ` metric: "/debug_access_count" field: "iam_principal" ` ==>
+        # increment counter /iam/policy/backend_debug_access_count `iam_principal=[value
+        # of IAMContext.principal]`
+        # At this time we do not support multiple field names (though this may be
+        # supported in the future).
+        # Corresponds to the JSON property `counter`
+        # @return [Google::Apis::ComputeV1::LogConfigCounterOptions]
+        attr_accessor :counter
+      
+        # Write a Data Access (Gin) log
+        # Corresponds to the JSON property `dataAccess`
+        # @return [Google::Apis::ComputeV1::LogConfigDataAccessOptions]
+        attr_accessor :data_access
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @cloud_audit = args[:cloud_audit] if args.key?(:cloud_audit)
+          @counter = args[:counter] if args.key?(:counter)
+          @data_access = args[:data_access] if args.key?(:data_access)
+        end
+      end
+      
+      # Write a Cloud Audit log
+      class LogConfigCloudAuditOptions
+        include Google::Apis::Core::Hashable
+      
+        # Authorization-related information used by Cloud Audit Logging.
+        # Corresponds to the JSON property `authorizationLoggingOptions`
+        # @return [Google::Apis::ComputeV1::AuthorizationLoggingOptions]
+        attr_accessor :authorization_logging_options
+      
+        # The log_name to populate in the Cloud Audit Record.
+        # Corresponds to the JSON property `logName`
+        # @return [String]
+        attr_accessor :log_name
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @authorization_logging_options = args[:authorization_logging_options] if args.key?(:authorization_logging_options)
+          @log_name = args[:log_name] if args.key?(:log_name)
+        end
+      end
+      
+      # Increment a streamz counter with the specified metric and field names.
+      # Metric names should start with a '/', generally be lowercase-only, and end in "
+      # _count". Field names should not contain an initial slash. The actual exported
+      # metric names will have "/iam/policy" prepended.
+      # Field names correspond to IAM request parameters and field values are their
+      # respective values.
+      # Supported field names: - "authority", which is "[token]" if IAMContext.token
+      # is present, otherwise the value of IAMContext.authority_selector if present,
+      # and otherwise a representation of IAMContext.principal; or - "iam_principal",
+      # a representation of IAMContext.principal even if a token or authority selector
+      # is present; or - "" (empty string), resulting in a counter with no fields.
+      # Examples: counter ` metric: "/debug_access_count" field: "iam_principal" ` ==>
+      # increment counter /iam/policy/backend_debug_access_count `iam_principal=[value
+      # of IAMContext.principal]`
+      # At this time we do not support multiple field names (though this may be
+      # supported in the future).
+      class LogConfigCounterOptions
+        include Google::Apis::Core::Hashable
+      
+        # The field value to attribute.
+        # Corresponds to the JSON property `field`
+        # @return [String]
+        attr_accessor :field
+      
+        # The metric to update.
+        # Corresponds to the JSON property `metric`
+        # @return [String]
+        attr_accessor :metric
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @field = args[:field] if args.key?(:field)
+          @metric = args[:metric] if args.key?(:metric)
+        end
+      end
+      
+      # Write a Data Access (Gin) log
+      class LogConfigDataAccessOptions
+        include Google::Apis::Core::Hashable
+      
+        # Whether Gin logging should happen in a fail-closed manner at the caller. This
+        # is relevant only in the LocalIAM implementation, for now.
+        # NOTE: Logging to Gin in a fail-closed manner is currently unsupported while
+        # work is being done to satisfy the requirements of go/345. Currently, setting
+        # LOG_FAIL_CLOSED mode will have no effect, but still exists because there is
+        # active work being done to support it (b/115874152).
+        # Corresponds to the JSON property `logMode`
+        # @return [String]
+        attr_accessor :log_mode
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @log_mode = args[:log_mode] if args.key?(:log_mode)
+        end
+      end
+      
       # A Machine Type resource. (== resource_for v1.machineTypes ==) (== resource_for
       # beta.machineTypes ==)
       class MachineType
@@ -11407,7 +12097,8 @@ module Google
         # metadata's contents and used for optimistic locking. The fingerprint is
         # initially generated by Compute Engine and changes after every request to
         # modify or update metadata. You must always provide an up-to-date fingerprint
-        # hash in order to update or change metadata.
+        # hash in order to update or change metadata, otherwise the request will fail
+        # with error 412 conditionNotMet.
         # To see the latest fingerprint, make a get() request to retrieve the resource.
         # Corresponds to the JSON property `fingerprint`
         # NOTE: Values are automatically base64 encoded/decoded in the client library.
@@ -11617,7 +12308,8 @@ module Google
       
         # Fingerprint hash of contents stored in this network interface. This field will
         # be ignored when inserting an Instance or adding a NetworkInterface. An up-to-
-        # date fingerprint must be provided in order to update the NetworkInterface.
+        # date fingerprint must be provided in order to update the NetworkInterface,
+        # otherwise the request will fail with error 412 conditionNotMet.
         # Corresponds to the JSON property `fingerprint`
         # NOTE: Values are automatically base64 encoded/decoded in the client library.
         # @return [String]
@@ -11812,10 +12504,10 @@ module Google
       class NetworkPeering
         include Google::Apis::Core::Hashable
       
-        # Whether full mesh connectivity is created and managed automatically. When it
-        # is set to true, Google Compute Engine will automatically create and manage the
-        # routes between two networks when the state is ACTIVE. Otherwise, user needs to
-        # create routes manually to route packets to peer network.
+        # Indicates whether full mesh connectivity is created and managed automatically.
+        # When it is set to true, Google Compute Engine will automatically create and
+        # manage the routes between two networks when the state is ACTIVE. Otherwise,
+        # user needs to create routes manually to route packets to peer network.
         # Corresponds to the JSON property `autoCreateRoutes`
         # @return [Boolean]
         attr_accessor :auto_create_routes
@@ -12596,8 +13288,8 @@ module Google
         # RFC1035. Specifically, the name must be 1-63 characters long and match the
         # regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the first
         # character must be a lowercase letter, and all following characters must be a
-        # dash, lowercase letter, or digit, except the last charaicter, which cannot be
-        # a dash.
+        # dash, lowercase letter, or digit, except the last character, which cannot be a
+        # dash.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -14069,13 +14761,21 @@ module Google
         include Google::Apis::Core::Hashable
       
         # The full or partial URL to the BackendService resource. This will be used if
-        # none of the pathRules defined by this PathMatcher is matched by the URL's path
-        # portion. For example, the following are all valid URLs to a BackendService
-        # resource:
+        # none of the pathRules or routeRules defined by this PathMatcher are matched.
+        # For example, the following are all valid URLs to a BackendService resource:
         # - https://www.googleapis.com/compute/v1/projects/project/global/
         # backendServices/backendService
         # - compute/v1/projects/project/global/backendServices/backendService
         # - global/backendServices/backendService
+        # Use defaultService instead of defaultRouteAction when simple routing to a
+        # backend service is desired and other advanced capabilities like traffic
+        # splitting and URL rewrites are not required.
+        # Only one of defaultService, defaultRouteAction or defaultUrlRedirect must be
+        # set.
+        # Authorization requires one or more of the following Google IAM permissions on
+        # the specified resource default_service:
+        # - compute.backendBuckets.use
+        # - compute.backendServices.use
         # Corresponds to the JSON property `defaultService`
         # @return [String]
         attr_accessor :default_service
@@ -14091,7 +14791,13 @@ module Google
         # @return [String]
         attr_accessor :name
       
-        # The list of path rules.
+        # The list of path rules. Use this list instead of routeRules when routing based
+        # on simple path matching is all that's required. The order by which path rules
+        # are specified does not matter. Matches are always done on the longest-path-
+        # first basis.
+        # For example: a pathRule with a path /a/b/c/* will match before /a/b/*
+        # irrespective of the order in which those paths appear in this list.
+        # Only one of pathRules or routeRules must be set.
         # Corresponds to the JSON property `pathRules`
         # @return [Array<Google::Apis::ComputeV1::PathRule>]
         attr_accessor :path_rules
@@ -14122,7 +14828,11 @@ module Google
         # @return [Array<String>]
         attr_accessor :paths
       
-        # The URL of the BackendService resource if this rule is matched.
+        # The URL of the backend service resource if this rule is matched.
+        # Use service instead of routeAction when simple routing to a backend service is
+        # desired and other advanced capabilities like traffic splitting and rewrites
+        # are not required.
+        # Only one of service, routeAction or urlRedirect should must be set.
         # Corresponds to the JSON property `service`
         # @return [String]
         attr_accessor :service
@@ -14138,6 +14848,88 @@ module Google
         end
       end
       
+      # Defines an Identity and Access Management (IAM) policy. It is used to specify
+      # access control policies for Cloud Platform resources.
+      # A `Policy` consists of a list of `bindings`. A `binding` binds a list of `
+      # members` to a `role`, where the members can be user accounts, Google groups,
+      # Google domains, and service accounts. A `role` is a named list of permissions
+      # defined by IAM.
+      # **JSON Example**
+      # ` "bindings": [ ` "role": "roles/owner", "members": [ "user:mike@example.com",
+      # "group:admins@example.com", "domain:google.com", "serviceAccount:my-other-app@
+      # appspot.gserviceaccount.com" ] `, ` "role": "roles/viewer", "members": ["user:
+      # sean@example.com"] ` ] `
+      # **YAML Example**
+      # bindings: - members: - user:mike@example.com - group:admins@example.com -
+      # domain:google.com - serviceAccount:my-other-app@appspot.gserviceaccount.com
+      # role: roles/owner - members: - user:sean@example.com role: roles/viewer
+      # For a description of IAM and its features, see the [IAM developer's guide](
+      # https://cloud.google.com/iam/docs).
+      class Policy
+        include Google::Apis::Core::Hashable
+      
+        # Specifies cloud audit logging configuration for this policy.
+        # Corresponds to the JSON property `auditConfigs`
+        # @return [Array<Google::Apis::ComputeV1::AuditConfig>]
+        attr_accessor :audit_configs
+      
+        # Associates a list of `members` to a `role`. `bindings` with no members will
+        # result in an error.
+        # Corresponds to the JSON property `bindings`
+        # @return [Array<Google::Apis::ComputeV1::Binding>]
+        attr_accessor :bindings
+      
+        # `etag` is used for optimistic concurrency control as a way to help prevent
+        # simultaneous updates of a policy from overwriting each other. It is strongly
+        # suggested that systems make use of the `etag` in the read-modify-write cycle
+        # to perform policy updates in order to avoid race conditions: An `etag` is
+        # returned in the response to `getIamPolicy`, and systems are expected to put
+        # that etag in the request to `setIamPolicy` to ensure that their change will be
+        # applied to the same version of the policy.
+        # If no `etag` is provided in the call to `setIamPolicy`, then the existing
+        # policy is overwritten blindly.
+        # Corresponds to the JSON property `etag`
+        # NOTE: Values are automatically base64 encoded/decoded in the client library.
+        # @return [String]
+        attr_accessor :etag
+      
+        # 
+        # Corresponds to the JSON property `iamOwned`
+        # @return [Boolean]
+        attr_accessor :iam_owned
+        alias_method :iam_owned?, :iam_owned
+      
+        # If more than one rule is specified, the rules are applied in the following
+        # manner: - All matching LOG rules are always applied. - If any DENY/
+        # DENY_WITH_LOG rule matches, permission is denied. Logging will be applied if
+        # one or more matching rule requires logging. - Otherwise, if any ALLOW/
+        # ALLOW_WITH_LOG rule matches, permission is granted. Logging will be applied if
+        # one or more matching rule requires logging. - Otherwise, if no rule applies,
+        # permission is denied.
+        # Corresponds to the JSON property `rules`
+        # @return [Array<Google::Apis::ComputeV1::Rule>]
+        attr_accessor :rules
+      
+        # Deprecated.
+        # Corresponds to the JSON property `version`
+        # @return [Fixnum]
+        attr_accessor :version
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @audit_configs = args[:audit_configs] if args.key?(:audit_configs)
+          @bindings = args[:bindings] if args.key?(:bindings)
+          @etag = args[:etag] if args.key?(:etag)
+          @iam_owned = args[:iam_owned] if args.key?(:iam_owned)
+          @rules = args[:rules] if args.key?(:rules)
+          @version = args[:version] if args.key?(:version)
+        end
+      end
+      
       # A Project resource. For an overview of projects, see  Cloud Platform Resource
       # Hierarchy. (== resource_for v1.projects ==) (== resource_for beta.projects ==)
       class Project
@@ -15440,6 +16232,56 @@ module Google
         end
       end
       
+      # 
+      class RegionSetPolicyRequest
+        include Google::Apis::Core::Hashable
+      
+        # Flatten Policy to create a backwacd compatible wire-format. Deprecated. Use '
+        # policy' to specify bindings.
+        # Corresponds to the JSON property `bindings`
+        # @return [Array<Google::Apis::ComputeV1::Binding>]
+        attr_accessor :bindings
+      
+        # Flatten Policy to create a backward compatible wire-format. Deprecated. Use '
+        # policy' to specify the etag.
+        # Corresponds to the JSON property `etag`
+        # NOTE: Values are automatically base64 encoded/decoded in the client library.
+        # @return [String]
+        attr_accessor :etag
+      
+        # Defines an Identity and Access Management (IAM) policy. It is used to specify
+        # access control policies for Cloud Platform resources.
+        # A `Policy` consists of a list of `bindings`. A `binding` binds a list of `
+        # members` to a `role`, where the members can be user accounts, Google groups,
+        # Google domains, and service accounts. A `role` is a named list of permissions
+        # defined by IAM.
+        # **JSON Example**
+        # ` "bindings": [ ` "role": "roles/owner", "members": [ "user:mike@example.com",
+        # "group:admins@example.com", "domain:google.com", "serviceAccount:my-other-app@
+        # appspot.gserviceaccount.com" ] `, ` "role": "roles/viewer", "members": ["user:
+        # sean@example.com"] ` ] `
+        # **YAML Example**
+        # bindings: - members: - user:mike@example.com - group:admins@example.com -
+        # domain:google.com - serviceAccount:my-other-app@appspot.gserviceaccount.com
+        # role: roles/owner - members: - user:sean@example.com role: roles/viewer
+        # For a description of IAM and its features, see the [IAM developer's guide](
+        # https://cloud.google.com/iam/docs).
+        # Corresponds to the JSON property `policy`
+        # @return [Google::Apis::ComputeV1::Policy]
+        attr_accessor :policy
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @bindings = args[:bindings] if args.key?(:bindings)
+          @etag = args[:etag] if args.key?(:etag)
+          @policy = args[:policy] if args.key?(:policy)
+        end
+      end
+      
       # Commitment for a particular resource (a Commitment is composed of one or more
       # of these).
       class ResourceCommitment
@@ -15474,7 +16316,8 @@ module Google
       class ResourceGroupReference
         include Google::Apis::Core::Hashable
       
-        # A URI referencing one of the instance groups listed in the backend service.
+        # A URI referencing one of the instance groups or network endpoint groups listed
+        # in the backend service.
         # Corresponds to the JSON property `group`
         # @return [String]
         attr_accessor :group
@@ -15870,6 +16713,11 @@ module Google
         # @return [String]
         attr_accessor :name
       
+        # A list of Nat services created in this router.
+        # Corresponds to the JSON property `nats`
+        # @return [Array<Google::Apis::ComputeV1::RouterNat>]
+        attr_accessor :nats
+      
         # URI of the network to which this router belongs.
         # Corresponds to the JSON property `network`
         # @return [String]
@@ -15901,6 +16749,7 @@ module Google
           @interfaces = args[:interfaces] if args.key?(:interfaces)
           @kind = args[:kind] if args.key?(:kind)
           @name = args[:name] if args.key?(:name)
+          @nats = args[:nats] if args.key?(:nats)
           @network = args[:network] if args.key?(:network)
           @region = args[:region] if args.key?(:region)
           @self_link = args[:self_link] if args.key?(:self_link)
@@ -16139,11 +16988,12 @@ module Google
         # @return [String]
         attr_accessor :ip_address
       
-        # [Output Only] Type of how the resource/configuration of the BGP peer is
-        # managed. MANAGED_BY_USER is the default value; MANAGED_BY_ATTACHMENT
-        # represents an BGP peer that is automatically created for PARTNER
-        # interconnectAttachment, Google will automatically create/delete this type of
-        # BGP peer when the PARTNER interconnectAttachment is created/deleted.
+        # [Output Only] The resource that configures and manages this BGP peer.
+        # MANAGED_BY_USER is the default value and can be managed by you or other users;
+        # MANAGED_BY_ATTACHMENT is a BGP peer that is configured and managed by Cloud
+        # Interconnect, specifically by an InterconnectAttachment of type PARTNER.
+        # Google will automatically create, update, and delete this type of BGP peer
+        # when the PARTNER InterconnectAttachment is created, updated, or deleted.
         # Corresponds to the JSON property `managementType`
         # @return [String]
         attr_accessor :management_type
@@ -16210,12 +17060,12 @@ module Google
         # @return [String]
         attr_accessor :linked_vpn_tunnel
       
-        # [Output Only] Type of how the resource/configuration of the interface is
-        # managed. MANAGED_BY_USER is the default value; MANAGED_BY_ATTACHMENT
-        # represents an interface that is automatically created for PARTNER type
-        # interconnectAttachment, Google will automatically create/update/delete this
-        # type of interface when the PARTNER interconnectAttachment is created/
-        # provisioned/deleted.
+        # [Output Only] The resource that configures and manages this interface.
+        # MANAGED_BY_USER is the default value and can be managed by you or other users;
+        # MANAGED_BY_ATTACHMENT is an interface that is configured and managed by Cloud
+        # Interconnect, specifically by an InterconnectAttachment of type PARTNER.
+        # Google will automatically create, update, and delete this type of interface
+        # when the PARTNER InterconnectAttachment is created, updated, or deleted.
         # Corresponds to the JSON property `managementType`
         # @return [String]
         attr_accessor :management_type
@@ -16357,24 +17207,155 @@ module Google
         end
       end
       
-      # 
-      class RouterStatus
+      # Represents a Nat resource. It enables the VMs within the specified subnetworks
+      # to access Internet without external IP addresses. It specifies a list of
+      # subnetworks (and the ranges within) that want to use NAT. Customers can also
+      # provide the external IPs that would be used for NAT. GCP would auto-allocate
+      # ephemeral IPs if no external IPs are provided.
+      class RouterNat
         include Google::Apis::Core::Hashable
       
-        # Best routes for this router's network.
-        # Corresponds to the JSON property `bestRoutes`
-        # @return [Array<Google::Apis::ComputeV1::Route>]
-        attr_accessor :best_routes
+        # Timeout (in seconds) for ICMP connections. Defaults to 30s if not set.
+        # Corresponds to the JSON property `icmpIdleTimeoutSec`
+        # @return [Fixnum]
+        attr_accessor :icmp_idle_timeout_sec
       
-        # Best routes learned by this router.
-        # Corresponds to the JSON property `bestRoutesForRouter`
-        # @return [Array<Google::Apis::ComputeV1::Route>]
-        attr_accessor :best_routes_for_router
+        # Minimum number of ports allocated to a VM from this NAT config. If not set, a
+        # default number of ports is allocated to a VM. This gets rounded up to the
+        # nearest power of 2. Eg. if the value of this field is 50, at least 64 ports
+        # will be allocated to a VM.
+        # Corresponds to the JSON property `minPortsPerVm`
+        # @return [Fixnum]
+        attr_accessor :min_ports_per_vm
       
-        # 
-        # Corresponds to the JSON property `bgpPeerStatus`
-        # @return [Array<Google::Apis::ComputeV1::RouterStatusBgpPeerStatus>]
-        attr_accessor :bgp_peer_status
+        # Unique name of this Nat service. The name must be 1-63 characters long and
+        # comply with RFC1035.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # Specify the NatIpAllocateOption. If it is AUTO_ONLY, then nat_ip should be
+        # empty.
+        # Corresponds to the JSON property `natIpAllocateOption`
+        # @return [String]
+        attr_accessor :nat_ip_allocate_option
+      
+        # A list of URLs of the IP resources used for this Nat service. These IPs must
+        # be valid static external IP addresses assigned to the project. max_length is
+        # subject to change post alpha.
+        # Corresponds to the JSON property `natIps`
+        # @return [Array<String>]
+        attr_accessor :nat_ips
+      
+        # Specify the Nat option. If this field contains ALL_SUBNETWORKS_ALL_IP_RANGES
+        # or ALL_SUBNETWORKS_ALL_PRIMARY_IP_RANGES, then there should not be any other
+        # Router.Nat section in any Router for this network in this region.
+        # Corresponds to the JSON property `sourceSubnetworkIpRangesToNat`
+        # @return [String]
+        attr_accessor :source_subnetwork_ip_ranges_to_nat
+      
+        # A list of Subnetwork resources whose traffic should be translated by NAT
+        # Gateway. It is used only when LIST_OF_SUBNETWORKS is selected for the
+        # SubnetworkIpRangeToNatOption above.
+        # Corresponds to the JSON property `subnetworks`
+        # @return [Array<Google::Apis::ComputeV1::RouterNatSubnetworkToNat>]
+        attr_accessor :subnetworks
+      
+        # Timeout (in seconds) for TCP established connections. Defaults to 1200s if not
+        # set.
+        # Corresponds to the JSON property `tcpEstablishedIdleTimeoutSec`
+        # @return [Fixnum]
+        attr_accessor :tcp_established_idle_timeout_sec
+      
+        # Timeout (in seconds) for TCP transitory connections. Defaults to 30s if not
+        # set.
+        # Corresponds to the JSON property `tcpTransitoryIdleTimeoutSec`
+        # @return [Fixnum]
+        attr_accessor :tcp_transitory_idle_timeout_sec
+      
+        # Timeout (in seconds) for UDP connections. Defaults to 30s if not set.
+        # Corresponds to the JSON property `udpIdleTimeoutSec`
+        # @return [Fixnum]
+        attr_accessor :udp_idle_timeout_sec
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @icmp_idle_timeout_sec = args[:icmp_idle_timeout_sec] if args.key?(:icmp_idle_timeout_sec)
+          @min_ports_per_vm = args[:min_ports_per_vm] if args.key?(:min_ports_per_vm)
+          @name = args[:name] if args.key?(:name)
+          @nat_ip_allocate_option = args[:nat_ip_allocate_option] if args.key?(:nat_ip_allocate_option)
+          @nat_ips = args[:nat_ips] if args.key?(:nat_ips)
+          @source_subnetwork_ip_ranges_to_nat = args[:source_subnetwork_ip_ranges_to_nat] if args.key?(:source_subnetwork_ip_ranges_to_nat)
+          @subnetworks = args[:subnetworks] if args.key?(:subnetworks)
+          @tcp_established_idle_timeout_sec = args[:tcp_established_idle_timeout_sec] if args.key?(:tcp_established_idle_timeout_sec)
+          @tcp_transitory_idle_timeout_sec = args[:tcp_transitory_idle_timeout_sec] if args.key?(:tcp_transitory_idle_timeout_sec)
+          @udp_idle_timeout_sec = args[:udp_idle_timeout_sec] if args.key?(:udp_idle_timeout_sec)
+        end
+      end
+      
+      # Defines the IP ranges that want to use NAT for a subnetwork.
+      class RouterNatSubnetworkToNat
+        include Google::Apis::Core::Hashable
+      
+        # URL for the subnetwork resource to use NAT.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # A list of the secondary ranges of the Subnetwork that are allowed to use NAT.
+        # This can be populated only if "LIST_OF_SECONDARY_IP_RANGES" is one of the
+        # values in source_ip_ranges_to_nat.
+        # Corresponds to the JSON property `secondaryIpRangeNames`
+        # @return [Array<String>]
+        attr_accessor :secondary_ip_range_names
+      
+        # Specify the options for NAT ranges in the Subnetwork. All usages of single
+        # value are valid except NAT_IP_RANGE_OPTION_UNSPECIFIED. The only valid option
+        # with multiple values is: ["PRIMARY_IP_RANGE", "LIST_OF_SECONDARY_IP_RANGES"]
+        # Default: [ALL_IP_RANGES]
+        # Corresponds to the JSON property `sourceIpRangesToNat`
+        # @return [Array<String>]
+        attr_accessor :source_ip_ranges_to_nat
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @name = args[:name] if args.key?(:name)
+          @secondary_ip_range_names = args[:secondary_ip_range_names] if args.key?(:secondary_ip_range_names)
+          @source_ip_ranges_to_nat = args[:source_ip_ranges_to_nat] if args.key?(:source_ip_ranges_to_nat)
+        end
+      end
+      
+      # 
+      class RouterStatus
+        include Google::Apis::Core::Hashable
+      
+        # Best routes for this router's network.
+        # Corresponds to the JSON property `bestRoutes`
+        # @return [Array<Google::Apis::ComputeV1::Route>]
+        attr_accessor :best_routes
+      
+        # Best routes learned by this router.
+        # Corresponds to the JSON property `bestRoutesForRouter`
+        # @return [Array<Google::Apis::ComputeV1::Route>]
+        attr_accessor :best_routes_for_router
+      
+        # 
+        # Corresponds to the JSON property `bgpPeerStatus`
+        # @return [Array<Google::Apis::ComputeV1::RouterStatusBgpPeerStatus>]
+        attr_accessor :bgp_peer_status
+      
+        # 
+        # Corresponds to the JSON property `natStatus`
+        # @return [Array<Google::Apis::ComputeV1::RouterStatusNatStatus>]
+        attr_accessor :nat_status
       
         # URI of the network to which this router belongs.
         # Corresponds to the JSON property `network`
@@ -16390,6 +17371,7 @@ module Google
           @best_routes = args[:best_routes] if args.key?(:best_routes)
           @best_routes_for_router = args[:best_routes_for_router] if args.key?(:best_routes_for_router)
           @bgp_peer_status = args[:bgp_peer_status] if args.key?(:bgp_peer_status)
+          @nat_status = args[:nat_status] if args.key?(:nat_status)
           @network = args[:network] if args.key?(:network)
         end
       end
@@ -16468,6 +17450,58 @@ module Google
         end
       end
       
+      # Status of a NAT contained in this router.
+      class RouterStatusNatStatus
+        include Google::Apis::Core::Hashable
+      
+        # A list of IPs auto-allocated for NAT. Example: ["1.1.1.1", "129.2.16.89"]
+        # Corresponds to the JSON property `autoAllocatedNatIps`
+        # @return [Array<String>]
+        attr_accessor :auto_allocated_nat_ips
+      
+        # The number of extra IPs to allocate. This will be greater than 0 only if user-
+        # specified IPs are NOT enough to allow all configured VMs to use NAT. This
+        # value is meaningful only when auto-allocation of NAT IPs is *not* used.
+        # Corresponds to the JSON property `minExtraNatIpsNeeded`
+        # @return [Fixnum]
+        attr_accessor :min_extra_nat_ips_needed
+      
+        # Unique name of this NAT.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # Number of VM endpoints (i.e., Nics) that can use NAT.
+        # Corresponds to the JSON property `numVmEndpointsWithNatMappings`
+        # @return [Fixnum]
+        attr_accessor :num_vm_endpoints_with_nat_mappings
+      
+        # A list of fully qualified URLs of reserved IP address resources.
+        # Corresponds to the JSON property `userAllocatedNatIpResources`
+        # @return [Array<String>]
+        attr_accessor :user_allocated_nat_ip_resources
+      
+        # A list of IPs user-allocated for NAT. They will be raw IP strings like "179.12.
+        # 26.133".
+        # Corresponds to the JSON property `userAllocatedNatIps`
+        # @return [Array<String>]
+        attr_accessor :user_allocated_nat_ips
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @auto_allocated_nat_ips = args[:auto_allocated_nat_ips] if args.key?(:auto_allocated_nat_ips)
+          @min_extra_nat_ips_needed = args[:min_extra_nat_ips_needed] if args.key?(:min_extra_nat_ips_needed)
+          @name = args[:name] if args.key?(:name)
+          @num_vm_endpoints_with_nat_mappings = args[:num_vm_endpoints_with_nat_mappings] if args.key?(:num_vm_endpoints_with_nat_mappings)
+          @user_allocated_nat_ip_resources = args[:user_allocated_nat_ip_resources] if args.key?(:user_allocated_nat_ip_resources)
+          @user_allocated_nat_ips = args[:user_allocated_nat_ips] if args.key?(:user_allocated_nat_ips)
+        end
+      end
+      
       # 
       class RouterStatusResponse
         include Google::Apis::Core::Hashable
@@ -16603,6 +17637,67 @@ module Google
         end
       end
       
+      # A rule to be applied in a Policy.
+      class Rule
+        include Google::Apis::Core::Hashable
+      
+        # Required
+        # Corresponds to the JSON property `action`
+        # @return [String]
+        attr_accessor :action
+      
+        # Additional restrictions that must be met. All conditions must pass for the
+        # rule to match.
+        # Corresponds to the JSON property `conditions`
+        # @return [Array<Google::Apis::ComputeV1::Condition>]
+        attr_accessor :conditions
+      
+        # Human-readable description of the rule.
+        # Corresponds to the JSON property `description`
+        # @return [String]
+        attr_accessor :description
+      
+        # If one or more 'in' clauses are specified, the rule matches if the PRINCIPAL/
+        # AUTHORITY_SELECTOR is in at least one of these entries.
+        # Corresponds to the JSON property `ins`
+        # @return [Array<String>]
+        attr_accessor :ins
+      
+        # The config returned to callers of tech.iam.IAM.CheckPolicy for any entries
+        # that match the LOG action.
+        # Corresponds to the JSON property `logConfigs`
+        # @return [Array<Google::Apis::ComputeV1::LogConfig>]
+        attr_accessor :log_configs
+      
+        # If one or more 'not_in' clauses are specified, the rule matches if the
+        # PRINCIPAL/AUTHORITY_SELECTOR is in none of the entries.
+        # Corresponds to the JSON property `notIns`
+        # @return [Array<String>]
+        attr_accessor :not_ins
+      
+        # A permission is a string of form '..' (e.g., 'storage.buckets.list'). A value
+        # of '*' matches all permissions, and a verb part of '*' (e.g., 'storage.buckets.
+        # *') matches all verbs.
+        # Corresponds to the JSON property `permissions`
+        # @return [Array<String>]
+        attr_accessor :permissions
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @action = args[:action] if args.key?(:action)
+          @conditions = args[:conditions] if args.key?(:conditions)
+          @description = args[:description] if args.key?(:description)
+          @ins = args[:ins] if args.key?(:ins)
+          @log_configs = args[:log_configs] if args.key?(:log_configs)
+          @not_ins = args[:not_ins] if args.key?(:not_ins)
+          @permissions = args[:permissions] if args.key?(:permissions)
+        end
+      end
+      
       # 
       class SslHealthCheck
         include Google::Apis::Core::Hashable
@@ -16756,7 +17851,8 @@ module Google
         # metadata's contents and used for optimistic locking. The fingerprint is
         # initially generated by Compute Engine and changes after every request to
         # modify or update metadata. You must always provide an up-to-date fingerprint
-        # hash in order to update or change metadata.
+        # hash in order to update or change metadata, otherwise the request will fail
+        # with error 412 conditionNotMet.
         # To see the latest fingerprint, make get() request to the security policy.
         # Corresponds to the JSON property `fingerprint`
         # NOTE: Values are automatically base64 encoded/decoded in the client library.
@@ -16983,8 +18079,9 @@ module Google
         alias_method :preview?, :preview
       
         # An integer indicating the priority of a rule in the list. The priority must be
-        # a positive value between 0 and 2147483647. Rules are evaluated in the
-        # increasing order of priority.
+        # a positive value between 0 and 2147483647. Rules are evaluated from highest to
+        # lowest priority where 0 is the highest priority and 2147483647 is the lowest
+        # prority.
         # Corresponds to the JSON property `priority`
         # @return [Fixnum]
         attr_accessor :priority
@@ -17195,7 +18292,8 @@ module Google
         # essentially a hash of the labels set used for optimistic locking. The
         # fingerprint is initially generated by Compute Engine and changes after every
         # request to modify or update labels. You must always provide an up-to-date
-        # fingerprint hash in order to update or change labels.
+        # fingerprint hash in order to update or change labels, otherwise the request
+        # will fail with error 412 conditionNotMet.
         # To see the latest fingerprint, make a get() request to retrieve a snapshot.
         # Corresponds to the JSON property `labelFingerprint`
         # NOTE: Values are automatically base64 encoded/decoded in the client library.
@@ -17807,7 +18905,8 @@ module Google
         # Fingerprint of this resource. A hash of the contents stored in this object.
         # This field is used in optimistic locking. This field will be ignored when
         # inserting a SslPolicy. An up-to-date fingerprint must be provided in order to
-        # update the SslPolicy.
+        # update the SslPolicy, otherwise the request will fail with error 412
+        # conditionNotMet.
         # To see the latest fingerprint, make a get() request to retrieve an SslPolicy.
         # Corresponds to the JSON property `fingerprint`
         # NOTE: Values are automatically base64 encoded/decoded in the client library.
@@ -17993,7 +19092,8 @@ module Google
         # Fingerprint of this resource. A hash of the contents stored in this object.
         # This field is used in optimistic locking. This field will be ignored when
         # inserting a Subnetwork. An up-to-date fingerprint must be provided in order to
-        # update the Subnetwork.
+        # update the Subnetwork, otherwise the request will fail with error 412
+        # conditionNotMet.
         # To see the latest fingerprint, make a get() request to retrieve a Subnetwork.
         # Corresponds to the JSON property `fingerprint`
         # NOTE: Values are automatically base64 encoded/decoded in the client library.
@@ -18061,7 +19161,7 @@ module Google
         # An array of configurations for secondary IP ranges for VM instances contained
         # in this subnetwork. The primary IP of such VM must belong to the primary
         # ipCidrRange of the subnetwork. The alias IPs may belong to either primary or
-        # secondary ranges.
+        # secondary ranges. This field can be updated with a patch request.
         # Corresponds to the JSON property `secondaryIpRanges`
         # @return [Array<Google::Apis::ComputeV1::SubnetworkSecondaryRange>]
         attr_accessor :secondary_ip_ranges
@@ -18853,8 +19953,8 @@ module Google
         attr_accessor :self_link
       
         # URLs to SslCertificate resources that are used to authenticate connections
-        # between users and the load balancer. Currently, exactly one SSL certificate
-        # must be specified.
+        # between users and the load balancer. At least one SSL certificate must be
+        # specified. Currently, you may specify up to 15 SSL certificates.
         # Corresponds to the JSON property `sslCertificates`
         # @return [Array<String>]
         attr_accessor :ssl_certificates
@@ -19518,7 +20618,7 @@ module Google
         # @return [String]
         attr_accessor :self_link
       
-        # Sesssion affinity option, must be one of the following values:
+        # Session affinity option, must be one of the following values:
         # NONE: Connections from the same client IP may go to any instance in the pool.
         # CLIENT_IP: Connections from the same client IP will go to the same instance in
         # the pool while that instance remains healthy.
@@ -20121,7 +21221,8 @@ module Google
         attr_accessor :service
       
         # URLs to SslCertificate resources that are used to authenticate connections to
-        # Backends. Currently exactly one SSL certificate must be specified.
+        # Backends. At least one SSL certificate must be specified. Currently, you may
+        # specify up to 15 SSL certificates.
         # Corresponds to the JSON property `sslCertificates`
         # @return [Array<String>]
         attr_accessor :ssl_certificates
@@ -21004,7 +22105,12 @@ module Google
         # @return [String]
         attr_accessor :creation_timestamp
       
-        # The URL of the BackendService resource if none of the hostRules match.
+        # The URL of the backendService resource if none of the hostRules match.
+        # Use defaultService instead of defaultRouteAction when simple routing to a
+        # backendService is desired and other advanced capabilities like traffic
+        # splitting and rewrites are not required.
+        # Only one of defaultService, defaultRouteAction or defaultUrlRedirect should
+        # must be set.
         # Corresponds to the JSON property `defaultService`
         # @return [String]
         attr_accessor :default_service
@@ -21018,7 +22124,8 @@ module Google
         # Fingerprint of this resource. A hash of the contents stored in this object.
         # This field is used in optimistic locking. This field will be ignored when
         # inserting a UrlMap. An up-to-date fingerprint must be provided in order to
-        # update the UrlMap.
+        # update the UrlMap, otherwise the request will fail with error 412
+        # conditionNotMet.
         # To see the latest fingerprint, make a get() request to retrieve a UrlMap.
         # Corresponds to the JSON property `fingerprint`
         # NOTE: Values are automatically base64 encoded/decoded in the client library.
@@ -21559,6 +22666,191 @@ module Google
         end
       end
       
+      # Contain information of Nat mapping for a VM endpoint (i.e., NIC).
+      class VmEndpointNatMappings
+        include Google::Apis::Core::Hashable
+      
+        # Name of the VM instance which the endpoint belongs to
+        # Corresponds to the JSON property `instanceName`
+        # @return [String]
+        attr_accessor :instance_name
+      
+        # 
+        # Corresponds to the JSON property `interfaceNatMappings`
+        # @return [Array<Google::Apis::ComputeV1::VmEndpointNatMappingsInterfaceNatMappings>]
+        attr_accessor :interface_nat_mappings
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @instance_name = args[:instance_name] if args.key?(:instance_name)
+          @interface_nat_mappings = args[:interface_nat_mappings] if args.key?(:interface_nat_mappings)
+        end
+      end
+      
+      # Contain information of Nat mapping for an interface of this endpoint.
+      class VmEndpointNatMappingsInterfaceNatMappings
+        include Google::Apis::Core::Hashable
+      
+        # A list of all IP:port-range mappings assigned to this interface. These ranges
+        # are inclusive, that is, both the first and the last ports can be used for NAT.
+        # Example: ["2.2.2.2:12345-12355", "1.1.1.1:2234-2234"].
+        # Corresponds to the JSON property `natIpPortRanges`
+        # @return [Array<String>]
+        attr_accessor :nat_ip_port_ranges
+      
+        # Total number of ports across all NAT IPs allocated to this interface. It
+        # equals to the aggregated port number in the field nat_ip_port_ranges.
+        # Corresponds to the JSON property `numTotalNatPorts`
+        # @return [Fixnum]
+        attr_accessor :num_total_nat_ports
+      
+        # Alias IP range for this interface endpoint. It will be a private (RFC 1918) IP
+        # range. Examples: "10.33.4.55/32", or "192.168.5.0/24".
+        # Corresponds to the JSON property `sourceAliasIpRange`
+        # @return [String]
+        attr_accessor :source_alias_ip_range
+      
+        # Primary IP of the VM for this NIC.
+        # Corresponds to the JSON property `sourceVirtualIp`
+        # @return [String]
+        attr_accessor :source_virtual_ip
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @nat_ip_port_ranges = args[:nat_ip_port_ranges] if args.key?(:nat_ip_port_ranges)
+          @num_total_nat_ports = args[:num_total_nat_ports] if args.key?(:num_total_nat_ports)
+          @source_alias_ip_range = args[:source_alias_ip_range] if args.key?(:source_alias_ip_range)
+          @source_virtual_ip = args[:source_virtual_ip] if args.key?(:source_virtual_ip)
+        end
+      end
+      
+      # Contains a list of VmEndpointNatMappings.
+      class VmEndpointNatMappingsList
+        include Google::Apis::Core::Hashable
+      
+        # [Output Only] The unique identifier for the resource. This identifier is
+        # defined by the server.
+        # Corresponds to the JSON property `id`
+        # @return [String]
+        attr_accessor :id
+      
+        # [Output Only] Type of resource. Always compute#vmEndpointNatMappingsList for
+        # lists of Nat mappings of VM endpoints.
+        # Corresponds to the JSON property `kind`
+        # @return [String]
+        attr_accessor :kind
+      
+        # [Output Only] This token allows you to get the next page of results for list
+        # requests. If the number of results is larger than maxResults, use the
+        # nextPageToken as a value for the query parameter pageToken in the next list
+        # request. Subsequent list requests will have their own nextPageToken to
+        # continue paging through the results.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        # [Output Only] A list of Nat mapping information of VM endpoints.
+        # Corresponds to the JSON property `result`
+        # @return [Array<Google::Apis::ComputeV1::VmEndpointNatMappings>]
+        attr_accessor :result
+      
+        # [Output Only] Server-defined URL for this resource.
+        # Corresponds to the JSON property `selfLink`
+        # @return [String]
+        attr_accessor :self_link
+      
+        # [Output Only] Informational warning message.
+        # Corresponds to the JSON property `warning`
+        # @return [Google::Apis::ComputeV1::VmEndpointNatMappingsList::Warning]
+        attr_accessor :warning
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @id = args[:id] if args.key?(:id)
+          @kind = args[:kind] if args.key?(:kind)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+          @result = args[:result] if args.key?(:result)
+          @self_link = args[:self_link] if args.key?(:self_link)
+          @warning = args[:warning] if args.key?(:warning)
+        end
+        
+        # [Output Only] Informational warning message.
+        class Warning
+          include Google::Apis::Core::Hashable
+        
+          # [Output Only] A warning code, if applicable. For example, Compute Engine
+          # returns NO_RESULTS_ON_PAGE if there are no results in the response.
+          # Corresponds to the JSON property `code`
+          # @return [String]
+          attr_accessor :code
+        
+          # [Output Only] Metadata about this warning in key: value format. For example:
+          # "data": [ ` "key": "scope", "value": "zones/us-east1-d" `
+          # Corresponds to the JSON property `data`
+          # @return [Array<Google::Apis::ComputeV1::VmEndpointNatMappingsList::Warning::Datum>]
+          attr_accessor :data
+        
+          # [Output Only] A human-readable description of the warning code.
+          # Corresponds to the JSON property `message`
+          # @return [String]
+          attr_accessor :message
+        
+          def initialize(**args)
+             update!(**args)
+          end
+        
+          # Update properties of this object
+          def update!(**args)
+            @code = args[:code] if args.key?(:code)
+            @data = args[:data] if args.key?(:data)
+            @message = args[:message] if args.key?(:message)
+          end
+          
+          # 
+          class Datum
+            include Google::Apis::Core::Hashable
+          
+            # [Output Only] A key that provides more detail on the warning being returned.
+            # For example, for warnings where there are no results in a list request for a
+            # particular zone, this key might be scope and the key value might be the zone
+            # name. Other examples might be a key indicating a deprecated resource and a
+            # suggested replacement, or a warning about invalid network settings (for
+            # example, if an instance attempts to perform IP forwarding but is not enabled
+            # for IP forwarding).
+            # Corresponds to the JSON property `key`
+            # @return [String]
+            attr_accessor :key
+          
+            # [Output Only] A warning data value corresponding to the key.
+            # Corresponds to the JSON property `value`
+            # @return [String]
+            attr_accessor :value
+          
+            def initialize(**args)
+               update!(**args)
+            end
+          
+            # Update properties of this object
+            def update!(**args)
+              @key = args[:key] if args.key?(:key)
+              @value = args[:value] if args.key?(:value)
+            end
+          end
+        end
+      end
+      
       # VPN tunnel resource. (== resource_for beta.vpnTunnels ==) (== resource_for v1.
       # vpnTunnels ==)
       class VpnTunnel
@@ -22380,6 +23672,56 @@ module Google
           @labels = args[:labels] if args.key?(:labels)
         end
       end
+      
+      # 
+      class ZoneSetPolicyRequest
+        include Google::Apis::Core::Hashable
+      
+        # Flatten Policy to create a backwacd compatible wire-format. Deprecated. Use '
+        # policy' to specify bindings.
+        # Corresponds to the JSON property `bindings`
+        # @return [Array<Google::Apis::ComputeV1::Binding>]
+        attr_accessor :bindings
+      
+        # Flatten Policy to create a backward compatible wire-format. Deprecated. Use '
+        # policy' to specify the etag.
+        # Corresponds to the JSON property `etag`
+        # NOTE: Values are automatically base64 encoded/decoded in the client library.
+        # @return [String]
+        attr_accessor :etag
+      
+        # Defines an Identity and Access Management (IAM) policy. It is used to specify
+        # access control policies for Cloud Platform resources.
+        # A `Policy` consists of a list of `bindings`. A `binding` binds a list of `
+        # members` to a `role`, where the members can be user accounts, Google groups,
+        # Google domains, and service accounts. A `role` is a named list of permissions
+        # defined by IAM.
+        # **JSON Example**
+        # ` "bindings": [ ` "role": "roles/owner", "members": [ "user:mike@example.com",
+        # "group:admins@example.com", "domain:google.com", "serviceAccount:my-other-app@
+        # appspot.gserviceaccount.com" ] `, ` "role": "roles/viewer", "members": ["user:
+        # sean@example.com"] ` ] `
+        # **YAML Example**
+        # bindings: - members: - user:mike@example.com - group:admins@example.com -
+        # domain:google.com - serviceAccount:my-other-app@appspot.gserviceaccount.com
+        # role: roles/owner - members: - user:sean@example.com role: roles/viewer
+        # For a description of IAM and its features, see the [IAM developer's guide](
+        # https://cloud.google.com/iam/docs).
+        # Corresponds to the JSON property `policy`
+        # @return [Google::Apis::ComputeV1::Policy]
+        attr_accessor :policy
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @bindings = args[:bindings] if args.key?(:bindings)
+          @etag = args[:etag] if args.key?(:etag)
+          @policy = args[:policy] if args.key?(:policy)
+        end
+      end
     end
   end
 end