google-api-client 0.40.2 → 0.42.1

data/generated/google/apis/cloudtrace_v1/service.rb

@@ -51,13 +51,11 @@ module Google
           @batch_path = 'batch'
         end
         
-        # Sends new traces to Stackdriver Trace or updates existing traces. If the ID
+        # Sends new traces to Cloud Trace or updates existing traces. If the ID
         # of a trace that you send matches that of an existing trace, any fields
         # in the existing trace and its spans are overwritten by the provided values,
         # and any new fields provided are merged with the existing trace data. If the
         # ID does not match, a new trace is created.
-        # In this case, writing traces is not considered an active developer
-        # method since traces are machine generated.
         # @param [String] project_id
         #   Required. ID of the Cloud project where the trace data is stored.
         # @param [Google::Apis::CloudtraceV1::Traces] traces_object
@@ -91,8 +89,6 @@ module Google
         end
         
         # Gets a single trace by its ID.
-        # In this case, getting for traces is considered an active developer method,
-        # even though it is technically a read-only method.
         # @param [String] project_id
         #   Required. ID of the Cloud project where the trace data is stored.
         # @param [String] trace_id
@@ -126,8 +122,6 @@ module Google
         end
         
         # Returns of a list of traces that match the specified filter conditions.
-        # In this case, listing for traces is considered an active developer method,
-        # even though it is technically a read-only method.
         # @param [String] project_id
         #   Required. ID of the Cloud project where the trace data is stored.
         # @param [String] end_time

data/generated/google/apis/cloudtrace_v2.rb

@@ -29,7 +29,7 @@ module Google
     # @see https://cloud.google.com/trace
     module CloudtraceV2
       VERSION = 'V2'
-      REVISION = '20200414'
+      REVISION = '20200713'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/cloudtrace_v2/classes.rb

@@ -322,12 +322,13 @@ module Google
         # @return [Google::Apis::CloudtraceV2::Links]
         attr_accessor :links
       
-        # The resource name of the span in the following format:
+        # Required. The resource name of the span in the following format:
         # projects/[PROJECT_ID]/traces/[TRACE_ID]/spans/SPAN_ID is a unique
         # identifier for a trace within a project;
         # it is a 32-character hexadecimal encoding of a 16-byte array.
         # [SPAN_ID] is a unique identifier for a span within a trace; it
-        # is a 16-character hexadecimal encoding of an 8-byte array.
+        # is a 16-character hexadecimal encoding of an 8-byte array. It should not
+        # be zero.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -340,8 +341,7 @@ module Google
       
         # Optional. Set this parameter to indicate whether this span is in
         # the same process as its parent. If you do not set this parameter,
-        # Stackdriver Trace is unable to take advantage of this helpful
-        # information.
+        # Trace is unable to take advantage of this helpful information.
         # Corresponds to the JSON property `sameProcessAsParentSpan`
         # @return [Boolean]
         attr_accessor :same_process_as_parent_span
@@ -352,7 +352,8 @@ module Google
         # @return [String]
         attr_accessor :span_id
       
-        # Distinguishes between spans generated in a particular context. For example,
+        # Optional. Distinguishes between spans generated in a particular context. For
+        # example,
         # two spans with the same name may be distinguished using `CLIENT` (caller)
         # and `SERVER` (callee) to identify an RPC call.
         # Corresponds to the JSON property `spanKind`

data/generated/google/apis/cloudtrace_v2/service.rb

@@ -53,8 +53,6 @@ module Google
         
         # Sends new spans to new or existing traces. You cannot update
         # existing spans.
-        # In this case, writing traces is not considered an active developer
-        # method since traces are machine generated.
         # @param [String] name
         #   Required. The name of the project where the spans belong. The format is
         #   `projects/[PROJECT_ID]`.
@@ -89,15 +87,14 @@ module Google
         end
         
         # Creates a new span.
-        # In this case, writing traces is not considered an active developer
-        # method since traces are machine generated.
         # @param [String] name
-        #   The resource name of the span in the following format:
+        #   Required. The resource name of the span in the following format:
         #   projects/[PROJECT_ID]/traces/[TRACE_ID]/spans/SPAN_ID is a unique
         #   identifier for a trace within a project;
         #   it is a 32-character hexadecimal encoding of a 16-byte array.
         #   [SPAN_ID] is a unique identifier for a span within a trace; it
-        #   is a 16-character hexadecimal encoding of an 8-byte array.
+        #   is a 16-character hexadecimal encoding of an 8-byte array. It should not
+        #   be zero.
         # @param [Google::Apis::CloudtraceV2::Span] span_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.

data/generated/google/apis/composer_v1beta1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/composer/
     module ComposerV1beta1
       VERSION = 'V1beta1'
-      REVISION = '20200505'
+      REVISION = '20200616'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/composer_v1beta1/classes.rb

@@ -58,8 +58,9 @@ module Google
       class DatabaseConfig
         include Google::Apis::Core::Hashable
       
-        # Optional. Cloud SQL tier used by Airflow database.
-        # If not specified, db-n1-standard-2 will be used.
+        # Optional. Cloud SQL machine type used by Airflow database.
+        # It has to be one of: db-n1-standard-2, db-n1-standard-4, db-n1-standard-8
+        # or db-n1-standard-16. If not specified, db-n1-standard-2 will be used.
         # Corresponds to the JSON property `machineType`
         # @return [String]
         attr_accessor :machine_type
@@ -902,7 +903,7 @@ module Google
         include Google::Apis::Core::Hashable
       
         # Optional. Machine type on which Airflow web server is running.
-        # For example: composer-n1-webserver-2, composer-n1-webserver-4,
+        # It has to be one of: composer-n1-webserver-2, composer-n1-webserver-4 or
         # composer-n1-webserver-8.
         # If not specified, composer-n1-webserver-2 will be used.
         # Value custom is returned only in response, if Airflow web server parameters

data/generated/google/apis/composer_v1beta1/service.rb

@@ -323,6 +323,19 @@ module Google
         #   <a href="/composer/docs/concepts/versioning/composer-versions">Cloud
         #   Composer Version List</a> for valid values.</td>
         #   </tr>
+        #   <tr>
+        #   <td>config.databaseConfig.machineType</td>
+        #   <td>Cloud SQL machine type used by Airflow database.
+        #   It has to be one of: db-n1-standard-2, db-n1-standard-4, db-n1-standard-8
+        #   or db-n1-standard-16.</td>
+        #   </tr>
+        #   <tr>
+        #   <td>config.webServerConfig.machineType</td>
+        #   <td>Machine type on which Airflow web server is running.
+        #   It has to be one of: composer-n1-webserver-2, composer-n1-webserver-4 or
+        #   composer-n1-webserver-8.
+        #   </td>
+        #   </tr>
         #   </tbody>
         #   </table>
         # @param [String] fields

data/generated/google/apis/compute_alpha.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://developers.google.com/compute/docs/reference/latest/
     module ComputeAlpha
       VERSION = 'Alpha'
-      REVISION = '20200515'
+      REVISION = '20200612'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/compute_alpha/classes.rb

@@ -87,7 +87,7 @@ module Google
         # @return [String]
         attr_accessor :kind
       
-        # [Output Only] Maximum accelerator cards allowed per instance.
+        # [Output Only] Maximum number of accelerator cards allowed per instance.
         # Corresponds to the JSON property `maximumCardsPerInstance`
         # @return [Fixnum]
         attr_accessor :maximum_cards_per_instance
@@ -97,7 +97,7 @@ module Google
         # @return [String]
         attr_accessor :name
       
-        # [Output Only] Server-defined fully-qualified URL for this resource.
+        # [Output Only] Server-defined, fully qualified URL for this resource.
         # Corresponds to the JSON property `selfLink`
         # @return [String]
         attr_accessor :self_link
@@ -1129,7 +1129,7 @@ module Google
         end
       end
       
-      # Properties of the SKU instances being reserved.
+      # Properties of the SKU instances being reserved. Next ID: 9
       class AllocationSpecificSkuAllocationReservedInstanceProperties
         include Google::Apis::Core::Hashable
       
@@ -1175,6 +1175,13 @@ module Google
         # @return [Fixnum]
         attr_accessor :maintenance_freeze_duration_hours
       
+        # Specifies whether this VM may be a stable fleet VM. Setting this to "Periodic"
+        # designates this VM as a Stable Fleet VM.
+        # See go/stable-fleet-ug for more details.
+        # Corresponds to the JSON property `maintenanceInterval`
+        # @return [String]
+        attr_accessor :maintenance_interval
+      
         # Minimum cpu platform the reservation.
         # Corresponds to the JSON property `minCpuPlatform`
         # @return [String]
@@ -1192,6 +1199,7 @@ module Google
           @long_term_release = args[:long_term_release] if args.key?(:long_term_release)
           @machine_type = args[:machine_type] if args.key?(:machine_type)
           @maintenance_freeze_duration_hours = args[:maintenance_freeze_duration_hours] if args.key?(:maintenance_freeze_duration_hours)
+          @maintenance_interval = args[:maintenance_interval] if args.key?(:maintenance_interval)
           @min_cpu_platform = args[:min_cpu_platform] if args.key?(:min_cpu_platform)
         end
       end
@@ -1210,7 +1218,7 @@ module Google
         # @return [Fixnum]
         attr_accessor :in_use_count
       
-        # Properties of the SKU instances being reserved.
+        # Properties of the SKU instances being reserved. Next ID: 9
         # Corresponds to the JSON property `instanceProperties`
         # @return [Google::Apis::ComputeAlpha::AllocationSpecificSkuAllocationReservedInstanceProperties]
         attr_accessor :instance_properties
@@ -1531,10 +1539,10 @@ module Google
       # specified in each AuditConfig are enabled, and the exempted_members in each
       # AuditLogConfig are exempted.
       # Example Policy with multiple AuditConfigs:
-      # ` "audit_configs": [ ` "service": "allServices" "audit_log_configs": [ ` "
+      # ` "audit_configs": [ ` "service": "allServices", "audit_log_configs": [ ` "
       # log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] `, ` "
-      # log_type": "DATA_WRITE", `, ` "log_type": "ADMIN_READ", ` ] `, ` "service": "
-      # sampleservice.googleapis.com" "audit_log_configs": [ ` "log_type": "DATA_READ",
+      # log_type": "DATA_WRITE" `, ` "log_type": "ADMIN_READ" ` ] `, ` "service": "
+      # sampleservice.googleapis.com", "audit_log_configs": [ ` "log_type": "DATA_READ"
       # `, ` "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com"
       # ] ` ] ` ] `
       # For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
@@ -1574,7 +1582,7 @@ module Google
       
       # Provides the configuration for logging a type of permissions. Example:
       # ` "audit_log_configs": [ ` "log_type": "DATA_READ", "exempted_members": [ "
-      # user:jose@example.com" ] `, ` "log_type": "DATA_WRITE", ` ] `
+      # user:jose@example.com" ] `, ` "log_type": "DATA_WRITE" ` ] `
       # This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@
       # example.com from DATA_READ logging.
       class AuditLogConfig
@@ -2551,7 +2559,9 @@ module Google
         # UTILIZATION, RATE or CONNECTION). Default value is 1, which means the group
         # will serve up to 100% of its configured capacity (depending on balancingMode).
         # A setting of 0 means the group is completely drained, offering 0% of its
-        # available Capacity. Valid range is [0.0,1.0].
+        # available capacity. Valid range is 0.0 and [0.1,1.0]. You cannot configure a
+        # setting larger than 0 and smaller than 0.1. You cannot configure a setting of
+        # 0 when there is only one backend attached to the backend service.
         # This cannot be used for internal load balancing.
         # Corresponds to the JSON property `capacityScaler`
         # @return [Float]
@@ -2927,13 +2937,17 @@ module Google
       end
       
       # Represents a Backend Service resource.
-      # A backend service contains configuration values for Google Cloud Platform load
-      # balancing services.
+      # A backend service defines how Google Cloud load balancers distribute traffic.
+      # The backend service configuration contains a set of values, such as the
+      # protocol used to connect to backends, various distribution and session
+      # settings, health checks, and timeouts. These settings provide fine-grained
+      # control over how your load balancer behaves. Most of the settings have default
+      # values that allow for easy configuration if you need to get started quickly.
       # Backend services in Google Compute Engine can be either regionally or globally
       # scoped.
       # * [Global](/compute/docs/reference/rest/`$api_version`/backendServices) * [
       # Regional](/compute/docs/reference/rest/`$api_version`/regionBackendServices)
-      # For more information, read Backend Services.
+      # For more information, see Backend Services.
       # (== resource_for `$api_version`.backendService ==)
       class BackendService
         include Google::Apis::Core::Hashable
@@ -3069,8 +3083,8 @@ module Google
         # redirected to the load balancer.
         # - MAGLEV: used as a drop in replacement for the ring hash load balancer.
         # Maglev is not as stable as ring hash but has faster table lookup build times
-        # and host selection times. For more information about Maglev, refer to https://
-        # ai.google/research/pubs/pub44824
+        # and host selection times. For more information about Maglev, see https://ai.
+        # google/research/pubs/pub44824
         # This field is applicable to either:
         # - A regional backend service with the service_protocol set to HTTP, HTTPS, or
         # HTTP2, and load_balancing_scheme set to INTERNAL_MANAGED.
@@ -3182,8 +3196,8 @@ module Google
         attr_accessor :session_affinity
       
         # The backend service timeout has a different meaning depending on the type of
-        # load balancer. For more information read,  Backend service settings The
-        # default is 30 seconds.
+        # load balancer. For more information see,  Backend service settings The default
+        # is 30 seconds.
         # Corresponds to the JSON property `timeoutSec`
         # @return [Fixnum]
         attr_accessor :timeout_sec
@@ -3476,13 +3490,15 @@ module Google
       class BackendServiceIap
         include Google::Apis::Core::Hashable
       
-        # 
+        # Whether the serving infrastructure will authenticate and authorize all
+        # incoming requests. If true, the oauth2ClientId and oauth2ClientSecret fields
+        # must be non-empty.
         # Corresponds to the JSON property `enabled`
         # @return [Boolean]
         attr_accessor :enabled
         alias_method :enabled?, :enabled
       
-        # 
+        # OAuth2 client ID to use for the authentication flow.
         # Corresponds to the JSON property `oauth2ClientId`
         # @return [String]
         attr_accessor :oauth2_client_id
@@ -3493,7 +3509,9 @@ module Google
         # @return [Google::Apis::ComputeAlpha::BackendServiceIapoAuth2ClientInfo]
         attr_accessor :oauth2_client_info
       
-        # 
+        # OAuth2 client secret to use for the authentication flow. For security reasons,
+        # this value cannot be retrieved via the API. Instead, the SHA-256 hash of the
+        # value is returned in the oauth2ClientSecretSha256 field.
         # Corresponds to the JSON property `oauth2ClientSecret`
         # @return [String]
         attr_accessor :oauth2_client_secret
@@ -7234,7 +7252,7 @@ module Google
       
         # Deprecated in favor of enable in LogConfig. This field denotes whether to
         # enable logging for a particular firewall rule. If logging is enabled, logs
-        # will be exported to Stackdriver.
+        # will be exported t Cloud Logging.
         # Corresponds to the JSON property `enableLogging`
         # @return [Boolean]
         attr_accessor :enable_logging
@@ -7598,6 +7616,427 @@ module Google
         end
       end
       
+      # Represents a Firewall Policy resource. (== resource_for `$api_version`.
+      # firewallPolicies ==)
+      class FirewallPolicy
+        include Google::Apis::Core::Hashable
+      
+        # A list of associations that belong to this firewall policy.
+        # Corresponds to the JSON property `associations`
+        # @return [Array<Google::Apis::ComputeAlpha::FirewallPolicyAssociation>]
+        attr_accessor :associations
+      
+        # [Output Only] Creation timestamp in RFC3339 text format.
+        # Corresponds to the JSON property `creationTimestamp`
+        # @return [String]
+        attr_accessor :creation_timestamp
+      
+        # An optional description of this resource. Provide this property when you
+        # create the resource.
+        # Corresponds to the JSON property `description`
+        # @return [String]
+        attr_accessor :description
+      
+        # User-provided name of the Organization firewall plicy. The name should be
+        # unique in the organization in which the firewall policy is created. The name
+        # must be 1-63 characters long, and comply with RFC1035. Specifically, the name
+        # must be 1-63 characters long and match the regular expression `[a-z]([-a-z0-9]*
+        # [a-z0-9])?` which means the first character must be a lowercase letter, and
+        # all following characters must be a dash, lowercase letter, or digit, except
+        # the last character, which cannot be a dash.
+        # Corresponds to the JSON property `displayName`
+        # @return [String]
+        attr_accessor :display_name
+      
+        # Specifies a fingerprint for this resource, which is essentially a hash of the
+        # metadata's contents and used for optimistic locking. The fingerprint is
+        # initially generated by Compute Engine and changes after every request to
+        # modify or update metadata. You must always provide an up-to-date fingerprint
+        # hash in order to update or change metadata, otherwise the request will fail
+        # with error 412 conditionNotMet.
+        # To see the latest fingerprint, make get() request to the firewall policy.
+        # Corresponds to the JSON property `fingerprint`
+        # NOTE: Values are automatically base64 encoded/decoded in the client library.
+        # @return [String]
+        attr_accessor :fingerprint
+      
+        # [Output Only] The unique identifier for the resource. This identifier is
+        # defined by the server.
+        # Corresponds to the JSON property `id`
+        # @return [Fixnum]
+        attr_accessor :id
+      
+        # [Output only] Type of the resource. Always compute#firewallPolicyfor firewall
+        # policies
+        # Corresponds to the JSON property `kind`
+        # @return [String]
+        attr_accessor :kind
+      
+        # [Output Only] Name of the resource. It is a numeric ID allocated by GCP which
+        # uniquely identifies the Firewall Policy.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # [Output Only] The parent of the firewall policy.
+        # Corresponds to the JSON property `parent`
+        # @return [String]
+        attr_accessor :parent
+      
+        # [Output Only] Total count of all firewall policy rule tuples. A firewall
+        # policy can not exceed a set number of tuples.
+        # Corresponds to the JSON property `ruleTupleCount`
+        # @return [Fixnum]
+        attr_accessor :rule_tuple_count
+      
+        # A list of rules that belong to this policy. There must always be a default
+        # rule (rule with priority 2147483647 and match "*"). If no rules are provided
+        # when creating a firewall policy, a default rule with action "allow" will be
+        # added.
+        # Corresponds to the JSON property `rules`
+        # @return [Array<Google::Apis::ComputeAlpha::FirewallPolicyRule>]
+        attr_accessor :rules
+      
+        # [Output Only] Server-defined URL for the resource.
+        # Corresponds to the JSON property `selfLink`
+        # @return [String]
+        attr_accessor :self_link
+      
+        # [Output Only] Server-defined URL for this resource with the resource id.
+        # Corresponds to the JSON property `selfLinkWithId`
+        # @return [String]
+        attr_accessor :self_link_with_id
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @associations = args[:associations] if args.key?(:associations)
+          @creation_timestamp = args[:creation_timestamp] if args.key?(:creation_timestamp)
+          @description = args[:description] if args.key?(:description)
+          @display_name = args[:display_name] if args.key?(:display_name)
+          @fingerprint = args[:fingerprint] if args.key?(:fingerprint)
+          @id = args[:id] if args.key?(:id)
+          @kind = args[:kind] if args.key?(:kind)
+          @name = args[:name] if args.key?(:name)
+          @parent = args[:parent] if args.key?(:parent)
+          @rule_tuple_count = args[:rule_tuple_count] if args.key?(:rule_tuple_count)
+          @rules = args[:rules] if args.key?(:rules)
+          @self_link = args[:self_link] if args.key?(:self_link)
+          @self_link_with_id = args[:self_link_with_id] if args.key?(:self_link_with_id)
+        end
+      end
+      
+      # 
+      class FirewallPolicyAssociation
+        include Google::Apis::Core::Hashable
+      
+        # The target that the firewall policy is attached to.
+        # Corresponds to the JSON property `attachmentTarget`
+        # @return [String]
+        attr_accessor :attachment_target
+      
+        # [Output Only] The display name of the firewall policy of the association.
+        # Corresponds to the JSON property `displayName`
+        # @return [String]
+        attr_accessor :display_name
+      
+        # [Output Only] The firewall policy ID of the association.
+        # Corresponds to the JSON property `firewallPolicyId`
+        # @return [String]
+        attr_accessor :firewall_policy_id
+      
+        # The name for an association.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @attachment_target = args[:attachment_target] if args.key?(:attachment_target)
+          @display_name = args[:display_name] if args.key?(:display_name)
+          @firewall_policy_id = args[:firewall_policy_id] if args.key?(:firewall_policy_id)
+          @name = args[:name] if args.key?(:name)
+        end
+      end
+      
+      # 
+      class FirewallPolicyList
+        include Google::Apis::Core::Hashable
+      
+        # [Output Only] Unique identifier for the resource; defined by the server.
+        # Corresponds to the JSON property `id`
+        # @return [String]
+        attr_accessor :id
+      
+        # A list of FirewallPolicy resources.
+        # Corresponds to the JSON property `items`
+        # @return [Array<Google::Apis::ComputeAlpha::FirewallPolicy>]
+        attr_accessor :items
+      
+        # [Output Only] Type of resource. Always compute#firewallPolicyList for listsof
+        # FirewallPolicies
+        # Corresponds to the JSON property `kind`
+        # @return [String]
+        attr_accessor :kind
+      
+        # [Output Only] This token allows you to get the next page of results for list
+        # requests. If the number of results is larger than maxResults, use the
+        # nextPageToken as a value for the query parameter pageToken in the next list
+        # request. Subsequent list requests will have their own nextPageToken to
+        # continue paging through the results.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        # [Output Only] Informational warning message.
+        # Corresponds to the JSON property `warning`
+        # @return [Google::Apis::ComputeAlpha::FirewallPolicyList::Warning]
+        attr_accessor :warning
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @id = args[:id] if args.key?(:id)
+          @items = args[:items] if args.key?(:items)
+          @kind = args[:kind] if args.key?(:kind)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+          @warning = args[:warning] if args.key?(:warning)
+        end
+        
+        # [Output Only] Informational warning message.
+        class Warning
+          include Google::Apis::Core::Hashable
+        
+          # [Output Only] A warning code, if applicable. For example, Compute Engine
+          # returns NO_RESULTS_ON_PAGE if there are no results in the response.
+          # Corresponds to the JSON property `code`
+          # @return [String]
+          attr_accessor :code
+        
+          # [Output Only] Metadata about this warning in key: value format. For example:
+          # "data": [ ` "key": "scope", "value": "zones/us-east1-d" `
+          # Corresponds to the JSON property `data`
+          # @return [Array<Google::Apis::ComputeAlpha::FirewallPolicyList::Warning::Datum>]
+          attr_accessor :data
+        
+          # [Output Only] A human-readable description of the warning code.
+          # Corresponds to the JSON property `message`
+          # @return [String]
+          attr_accessor :message
+        
+          def initialize(**args)
+             update!(**args)
+          end
+        
+          # Update properties of this object
+          def update!(**args)
+            @code = args[:code] if args.key?(:code)
+            @data = args[:data] if args.key?(:data)
+            @message = args[:message] if args.key?(:message)
+          end
+          
+          # 
+          class Datum
+            include Google::Apis::Core::Hashable
+          
+            # [Output Only] A key that provides more detail on the warning being returned.
+            # For example, for warnings where there are no results in a list request for a
+            # particular zone, this key might be scope and the key value might be the zone
+            # name. Other examples might be a key indicating a deprecated resource and a
+            # suggested replacement, or a warning about invalid network settings (for
+            # example, if an instance attempts to perform IP forwarding but is not enabled
+            # for IP forwarding).
+            # Corresponds to the JSON property `key`
+            # @return [String]
+            attr_accessor :key
+          
+            # [Output Only] A warning data value corresponding to the key.
+            # Corresponds to the JSON property `value`
+            # @return [String]
+            attr_accessor :value
+          
+            def initialize(**args)
+               update!(**args)
+            end
+          
+            # Update properties of this object
+            def update!(**args)
+              @key = args[:key] if args.key?(:key)
+              @value = args[:value] if args.key?(:value)
+            end
+          end
+        end
+      end
+      
+      # Represents a rule that describes one or more match conditions along with the
+      # action to be taken when traffic matches this condition (allow or deny).
+      class FirewallPolicyRule
+        include Google::Apis::Core::Hashable
+      
+        # The Action to perform when the client connection triggers the rule. Can
+        # currently be either "allow" or "deny()" where valid values for status are 403,
+        # 404, and 502.
+        # Corresponds to the JSON property `action`
+        # @return [String]
+        attr_accessor :action
+      
+        # An optional description of this resource. Provide this property when you
+        # create the resource.
+        # Corresponds to the JSON property `description`
+        # @return [String]
+        attr_accessor :description
+      
+        # The direction in which this rule applies.
+        # Corresponds to the JSON property `direction`
+        # @return [String]
+        attr_accessor :direction
+      
+        # Denotes whether to enable logging for a particular rule. If logging is enabled,
+        # logs will be exported to the configured export destination in Stackdriver.
+        # Logs may be exported to BigQuery or Pub/Sub. Note: you cannot enable logging
+        # on "goto_next" rules.
+        # Corresponds to the JSON property `enableLogging`
+        # @return [Boolean]
+        attr_accessor :enable_logging
+        alias_method :enable_logging?, :enable_logging
+      
+        # [Output only] Type of the resource. Always compute#firewallPolicyRule for
+        # firewall policy rules
+        # Corresponds to the JSON property `kind`
+        # @return [String]
+        attr_accessor :kind
+      
+        # Represents a match condition that incoming traffic is evaluated against.
+        # Exactly one field must be specified.
+        # Corresponds to the JSON property `match`
+        # @return [Google::Apis::ComputeAlpha::FirewallPolicyRuleMatcher]
+        attr_accessor :match
+      
+        # If set to true, the specified action is not enforced.
+        # Corresponds to the JSON property `preview`
+        # @return [Boolean]
+        attr_accessor :preview
+        alias_method :preview?, :preview
+      
+        # An integer indicating the priority of a rule in the list. The priority must be
+        # a positive value between 0 and 2147483647. Rules are evaluated from highest to
+        # lowest priority where 0 is the highest priority and 2147483647 is the lowest
+        # prority.
+        # Corresponds to the JSON property `priority`
+        # @return [Fixnum]
+        attr_accessor :priority
+      
+        # [Output Only] Calculation of the complexity of a single firewall policy rule.
+        # Corresponds to the JSON property `ruleTupleCount`
+        # @return [Fixnum]
+        attr_accessor :rule_tuple_count
+      
+        # A list of network resource URLs to which this rule applies. This field allows
+        # you to control which network?s VMs get this rule. If this field is left blank,
+        # all VMs within the organization will receive the rule.
+        # Corresponds to the JSON property `targetResources`
+        # @return [Array<String>]
+        attr_accessor :target_resources
+      
+        # A list of service accounts indicating the sets of instances that are applied
+        # with this rule.
+        # Corresponds to the JSON property `targetServiceAccounts`
+        # @return [Array<String>]
+        attr_accessor :target_service_accounts
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @action = args[:action] if args.key?(:action)
+          @description = args[:description] if args.key?(:description)
+          @direction = args[:direction] if args.key?(:direction)
+          @enable_logging = args[:enable_logging] if args.key?(:enable_logging)
+          @kind = args[:kind] if args.key?(:kind)
+          @match = args[:match] if args.key?(:match)
+          @preview = args[:preview] if args.key?(:preview)
+          @priority = args[:priority] if args.key?(:priority)
+          @rule_tuple_count = args[:rule_tuple_count] if args.key?(:rule_tuple_count)
+          @target_resources = args[:target_resources] if args.key?(:target_resources)
+          @target_service_accounts = args[:target_service_accounts] if args.key?(:target_service_accounts)
+        end
+      end
+      
+      # Represents a match condition that incoming traffic is evaluated against.
+      # Exactly one field must be specified.
+      class FirewallPolicyRuleMatcher
+        include Google::Apis::Core::Hashable
+      
+        # CIDR IP address range.
+        # Corresponds to the JSON property `destIpRanges`
+        # @return [Array<String>]
+        attr_accessor :dest_ip_ranges
+      
+        # Pairs of IP protocols and ports that the rule should match.
+        # Corresponds to the JSON property `layer4Configs`
+        # @return [Array<Google::Apis::ComputeAlpha::FirewallPolicyRuleMatcherLayer4Config>]
+        attr_accessor :layer4_configs
+      
+        # CIDR IP address range.
+        # Corresponds to the JSON property `srcIpRanges`
+        # @return [Array<String>]
+        attr_accessor :src_ip_ranges
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @dest_ip_ranges = args[:dest_ip_ranges] if args.key?(:dest_ip_ranges)
+          @layer4_configs = args[:layer4_configs] if args.key?(:layer4_configs)
+          @src_ip_ranges = args[:src_ip_ranges] if args.key?(:src_ip_ranges)
+        end
+      end
+      
+      # 
+      class FirewallPolicyRuleMatcherLayer4Config
+        include Google::Apis::Core::Hashable
+      
+        # The IP protocol to which this rule applies. The protocol type is required when
+        # creating a firewall rule. This value can either be one of the following well
+        # known protocol strings (tcp, udp, icmp, esp, ah, ipip, sctp), or the IP
+        # protocol number.
+        # Corresponds to the JSON property `ipProtocol`
+        # @return [String]
+        attr_accessor :ip_protocol
+      
+        # An optional list of ports to which this rule applies. This field is only
+        # applicable for UDP or TCP protocol. Each entry must be either an integer or a
+        # range. If not specified, this rule applies to connections through any port.
+        # Example inputs include: ["22"], ["80","443"], and ["12345-12349"].
+        # Corresponds to the JSON property `ports`
+        # @return [Array<String>]
+        attr_accessor :ports
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @ip_protocol = args[:ip_protocol] if args.key?(:ip_protocol)
+          @ports = args[:ports] if args.key?(:ports)
+        end
+      end
+      
       # Encapsulates numeric value that can be either absolute or relative.
       class FixedOrPercent
         include Google::Apis::Core::Hashable
@@ -11213,11 +11652,13 @@ module Google
         # @return [String]
         attr_accessor :source_disk_id
       
-        # URL of the source image used to create this image. This can be a full or valid
-        # partial URL. You must provide exactly one of:
-        # - this property, or
-        # - the rawDisk.source property, or
-        # - the sourceDisk property   in order to create an image.
+        # URL of the source image used to create this image.
+        # In order to create an image, you must provide the full or partial URL of one
+        # of the following:
+        # - The selfLink URL
+        # - This property
+        # - The rawDisk.source URL
+        # - The sourceDisk URL
         # Corresponds to the JSON property `sourceImage`
         # @return [String]
         attr_accessor :source_image
@@ -11234,12 +11675,14 @@ module Google
         # @return [String]
         attr_accessor :source_image_id
       
-        # URL of the source snapshot used to create this image. This can be a full or
-        # valid partial URL. You must provide exactly one of:
-        # - this property, or
-        # - the sourceImage property, or
-        # - the rawDisk.source property, or
-        # - the sourceDisk property   in order to create an image.
+        # URL of the source snapshot used to create this image.
+        # In order to create an image, you must provide the full or partial URL of one
+        # of the following:
+        # - The selfLink URL
+        # - This property
+        # - The sourceImage URL
+        # - The rawDisk.source URL
+        # - The sourceDisk URL
         # Corresponds to the JSON property `sourceSnapshot`
         # @return [String]
         attr_accessor :source_snapshot
@@ -11884,6 +12327,21 @@ module Google
         # @return [Hash<String,String>]
         attr_accessor :labels
       
+        # [Output Only] Last start timestamp in RFC3339 text format.
+        # Corresponds to the JSON property `lastStartTimestamp`
+        # @return [String]
+        attr_accessor :last_start_timestamp
+      
+        # [Output Only] Last stop timestamp in RFC3339 text format.
+        # Corresponds to the JSON property `lastStopTimestamp`
+        # @return [String]
+        attr_accessor :last_stop_timestamp
+      
+        # [Output Only] Last suspended timestamp in RFC3339 text format.
+        # Corresponds to the JSON property `lastSuspendedTimestamp`
+        # @return [String]
+        attr_accessor :last_suspended_timestamp
+      
         # Full or partial URL of the machine type resource to use for this instance, in
         # the format: zones/zone/machineTypes/machine-type. This is provided by the
         # client when the instance is created. For example, the following is a valid
@@ -11957,7 +12415,7 @@ module Google
         # @return [Array<String>]
         attr_accessor :resource_policies
       
-        # Sets the scheduling options for an Instance. NextID: 11
+        # Sets the scheduling options for an Instance. NextID: 12
         # Corresponds to the JSON property `scheduling`
         # @return [Google::Apis::ComputeAlpha::Scheduling]
         attr_accessor :scheduling
@@ -12072,6 +12530,9 @@ module Google
           @kind = args[:kind] if args.key?(:kind)
           @label_fingerprint = args[:label_fingerprint] if args.key?(:label_fingerprint)
           @labels = args[:labels] if args.key?(:labels)
+          @last_start_timestamp = args[:last_start_timestamp] if args.key?(:last_start_timestamp)
+          @last_stop_timestamp = args[:last_stop_timestamp] if args.key?(:last_stop_timestamp)
+          @last_suspended_timestamp = args[:last_suspended_timestamp] if args.key?(:last_suspended_timestamp)
           @machine_type = args[:machine_type] if args.key?(:machine_type)
           @metadata = args[:metadata] if args.key?(:metadata)
           @min_cpu_platform = args[:min_cpu_platform] if args.key?(:min_cpu_platform)
@@ -13296,6 +13757,11 @@ module Google
         attr_accessor :is_stateful
         alias_method :is_stateful?, :is_stateful
       
+        # [Output Only] Status of per-instance configs on the instance.
+        # Corresponds to the JSON property `perInstanceConfigs`
+        # @return [Google::Apis::ComputeAlpha::InstanceGroupManagerStatusStatefulPerInstanceConfigs]
+        attr_accessor :per_instance_configs
+      
         def initialize(**args)
            update!(**args)
         end
@@ -13304,6 +13770,29 @@ module Google
         def update!(**args)
           @has_stateful_config = args[:has_stateful_config] if args.key?(:has_stateful_config)
           @is_stateful = args[:is_stateful] if args.key?(:is_stateful)
+          @per_instance_configs = args[:per_instance_configs] if args.key?(:per_instance_configs)
+        end
+      end
+      
+      # 
+      class InstanceGroupManagerStatusStatefulPerInstanceConfigs
+        include Google::Apis::Core::Hashable
+      
+        # A bit indicating if all of the group's per-instance configs (listed in the
+        # output of a listPerInstanceConfigs API call) have status EFFECTIVE or there
+        # are no per-instance-configs.
+        # Corresponds to the JSON property `allEffective`
+        # @return [Boolean]
+        attr_accessor :all_effective
+        alias_method :all_effective?, :all_effective
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @all_effective = args[:all_effective] if args.key?(:all_effective)
         end
       end
       
@@ -14676,9 +15165,9 @@ module Google
       class InstanceProperties
         include Google::Apis::Core::Hashable
       
-        # Enables instances created based on this template to send packets with source
-        # IP addresses other than their own and receive packets with destination IP
-        # addresses other than their own. If these instances will be used as an IP
+        # Enables instances created based on these properties to send packets with
+        # source IP addresses other than their own and receive packets with destination
+        # IP addresses other than their own. If these instances will be used as an IP
         # gateway or it will be set as the next-hop in a Route resource, specify true.
         # If unsure, leave this set to false. See the Enable IP forwarding documentation
         # for more information.
@@ -14692,14 +15181,14 @@ module Google
         # @return [Google::Apis::ComputeAlpha::ConfidentialInstanceConfig]
         attr_accessor :confidential_instance_config
       
-        # An optional text description for the instances that are created from this
-        # instance template.
+        # An optional text description for the instances that are created from these
+        # properties.
         # Corresponds to the JSON property `description`
         # @return [String]
         attr_accessor :description
       
         # An array of disks that are associated with the instances that are created from
-        # this template.
+        # these properties.
         # Corresponds to the JSON property `disks`
         # @return [Array<Google::Apis::ComputeAlpha::AttachedDisk>]
         attr_accessor :disks
@@ -14710,17 +15199,17 @@ module Google
         attr_accessor :display_device
       
         # A list of guest accelerator cards' type and count to use for instances created
-        # from the instance template.
+        # from these properties.
         # Corresponds to the JSON property `guestAccelerators`
         # @return [Array<Google::Apis::ComputeAlpha::AcceleratorConfig>]
         attr_accessor :guest_accelerators
       
-        # Labels to apply to instances that are created from this template.
+        # Labels to apply to instances that are created from these properties.
         # Corresponds to the JSON property `labels`
         # @return [Hash<String,String>]
         attr_accessor :labels
       
-        # The machine type to use for instances that are created from this template.
+        # The machine type to use for instances that are created from these properties.
         # Corresponds to the JSON property `machineType`
         # @return [String]
         attr_accessor :machine_type
@@ -14730,11 +15219,11 @@ module Google
         # @return [Google::Apis::ComputeAlpha::Metadata]
         attr_accessor :metadata
       
-        # Minimum cpu/platform to be used by this instance. The instance may be
-        # scheduled on the specified or newer cpu/platform. Applicable values are the
-        # friendly names of CPU platforms, such as minCpuPlatform: "Intel Haswell" or
-        # minCpuPlatform: "Intel Sandy Bridge". For more information, read Specifying a
-        # Minimum CPU Platform.
+        # Minimum cpu/platform to be used by instances. The instance may be scheduled on
+        # the specified or newer cpu/platform. Applicable values are the friendly names
+        # of CPU platforms, such as minCpuPlatform: "Intel Haswell" or minCpuPlatform: "
+        # Intel Sandy Bridge". For more information, read Specifying a Minimum CPU
+        # Platform.
         # Corresponds to the JSON property `minCpuPlatform`
         # @return [String]
         attr_accessor :min_cpu_platform
@@ -14744,12 +15233,12 @@ module Google
         # @return [Array<Google::Apis::ComputeAlpha::NetworkInterface>]
         attr_accessor :network_interfaces
       
-        # Specifies whether this instance will be shut down on key revocation.
+        # Specifies whether instances will be shut down on key revocation.
         # Corresponds to the JSON property `postKeyRevocationActionType`
         # @return [String]
         attr_accessor :post_key_revocation_action_type
       
-        # The private IPv6 google access type for the VM. If not specified, use
+        # The private IPv6 google access type for VMs. If not specified, use
         # INHERIT_FROM_SUBNETWORK as default.
         # Corresponds to the JSON property `privateIpv6GoogleAccess`
         # @return [String]
@@ -14760,20 +15249,21 @@ module Google
         # @return [Google::Apis::ComputeAlpha::ReservationAffinity]
         attr_accessor :reservation_affinity
       
-        # Resource policies (names, not ULRs) applied to instances created from this
-        # template.
+        # Resource policies (names, not ULRs) applied to instances created from these
+        # properties.
         # Corresponds to the JSON property `resourcePolicies`
         # @return [Array<String>]
         attr_accessor :resource_policies
       
-        # Sets the scheduling options for an Instance. NextID: 11
+        # Sets the scheduling options for an Instance. NextID: 12
         # Corresponds to the JSON property `scheduling`
         # @return [Google::Apis::ComputeAlpha::Scheduling]
         attr_accessor :scheduling
       
         # A list of service accounts with specified scopes. Access tokens for these
-        # service accounts are available to the instances that are created from this
-        # template. Use metadata queries to obtain the access tokens for these instances.
+        # service accounts are available to the instances that are created from these
+        # properties. Use metadata queries to obtain the access tokens for these
+        # instances.
         # Corresponds to the JSON property `serviceAccounts`
         # @return [Array<Google::Apis::ComputeAlpha::ServiceAccount>]
         attr_accessor :service_accounts
@@ -16383,8 +16873,7 @@ module Google
       end
       
       # Describes a single physical circuit between the Customer and Google.
-      # CircuitInfo objects are created by Google, so all fields are output only. Next
-      # id: 4
+      # CircuitInfo objects are created by Google, so all fields are output only.
       class InterconnectCircuitInfo
         include Google::Apis::Core::Hashable
       
@@ -16998,7 +17487,7 @@ module Google
         end
       end
       
-      # Description of a planned outage on this Interconnect. Next id: 9
+      # Description of a planned outage on this Interconnect.
       class InterconnectOutageNotification
         include Google::Apis::Core::Hashable
       
@@ -18139,7 +18628,8 @@ module Google
         # @return [String]
         attr_accessor :status
       
-        # GCS bucket storage location of the machine image (regional or multi-regional).
+        # The regional or multi-regional Cloud Storage bucket location where the machine
+        # image is stored.
         # Corresponds to the JSON property `storageLocations`
         # @return [Array<String>]
         attr_accessor :storage_locations
@@ -19233,10 +19723,12 @@ module Google
         # @return [String]
         attr_accessor :i_pv4_range
       
-        # When set to true, the VPC network is created in "auto" mode. When set to false,
-        # the VPC network is created in "custom" mode.
+        # When set to true, the VPC network is created in auto mode. When set to false,
+        # the VPC network is created in custom mode.
         # An auto mode VPC network starts with one subnet per region. Each subnet has a
         # predetermined range as described in Auto mode VPC network IP ranges.
+        # For custom mode VPC networks, you can add subnets using the subnetworks insert
+        # method.
         # Corresponds to the JSON property `autoCreateSubnetworks`
         # @return [Boolean]
         attr_accessor :auto_create_subnetworks
@@ -19253,6 +19745,11 @@ module Google
         # @return [String]
         attr_accessor :description
       
+        # [Output Only] URL of the firewall policy the network is associated with.
+        # Corresponds to the JSON property `firewallPolicy`
+        # @return [String]
+        attr_accessor :firewall_policy
+      
         # [Output Only] The gateway address for default routing out of the network,
         # selected by GCP.
         # Corresponds to the JSON property `gatewayIPv4`
@@ -19324,6 +19821,7 @@ module Google
           @auto_create_subnetworks = args[:auto_create_subnetworks] if args.key?(:auto_create_subnetworks)
           @creation_timestamp = args[:creation_timestamp] if args.key?(:creation_timestamp)
           @description = args[:description] if args.key?(:description)
+          @firewall_policy = args[:firewall_policy] if args.key?(:firewall_policy)
           @gateway_i_pv4 = args[:gateway_i_pv4] if args.key?(:gateway_i_pv4)
           @id = args[:id] if args.key?(:id)
           @kind = args[:kind] if args.key?(:kind)
@@ -19337,7 +19835,7 @@ module Google
         end
       end
       
-      # The network endpoint. Next ID: 7
+      # The network endpoint.
       class NetworkEndpoint
         include Google::Apis::Core::Hashable
       
@@ -20036,7 +20534,7 @@ module Google
       class NetworkEndpointGroupsListEndpointsRequestNetworkEndpointFilter
         include Google::Apis::Core::Hashable
       
-        # The network endpoint. Next ID: 7
+        # The network endpoint.
         # Corresponds to the JSON property `networkEndpoint`
         # @return [Google::Apis::ComputeAlpha::NetworkEndpoint]
         attr_accessor :network_endpoint
@@ -20265,7 +20763,7 @@ module Google
         # @return [Array<Google::Apis::ComputeAlpha::HealthStatusForNetworkEndpoint>]
         attr_accessor :healths
       
-        # The network endpoint. Next ID: 7
+        # The network endpoint.
         # Corresponds to the JSON property `networkEndpoint`
         # @return [Google::Apis::ComputeAlpha::NetworkEndpoint]
         attr_accessor :network_endpoint
@@ -20862,7 +21360,7 @@ module Google
         # @return [String]
         attr_accessor :name
       
-        # The URL of the node template to which this node group belongs.
+        # URL of the node template to create the node group from.
         # Corresponds to the JSON property `nodeTemplate`
         # @return [String]
         attr_accessor :node_template
@@ -21557,7 +22055,7 @@ module Google
       # Represent a sole-tenant Node Template resource.
       # You can use a template to define properties for nodes in a node group. For
       # more information, read Creating node groups and instances. (== resource_for `$
-      # api_version`.nodeTemplates ==) (== NextID: 19 ==)
+      # api_version`.nodeTemplates ==)
       class NodeTemplate
         include Google::Apis::Core::Hashable
       
@@ -24225,6 +24723,8 @@ module Google
         # defaultService must not be set. Conversely if defaultService is set,
         # defaultRouteAction cannot contain any  weightedBackendServices.
         # Only one of defaultRouteAction or defaultUrlRedirect must be set.
+        # UrlMaps for external HTTP(S) load balancers support only the urlRewrite action
+        # within a pathMatcher's defaultRouteAction.
         # Corresponds to the JSON property `defaultRouteAction`
         # @return [Google::Apis::ComputeAlpha::HttpRouteAction]
         attr_accessor :default_route_action
@@ -24328,6 +24828,8 @@ module Google
         # weightedBackendServices, service must not be set. Conversely if service is set,
         # routeAction cannot contain any  weightedBackendServices.
         # Only one of routeAction or urlRedirect must be set.
+        # UrlMaps for external HTTP(S) load balancers support only the urlRewrite action
+        # within a pathRule's routeAction.
         # Corresponds to the JSON property `routeAction`
         # @return [Google::Apis::ComputeAlpha::HttpRouteAction]
         attr_accessor :route_action
@@ -24411,6 +24913,12 @@ module Google
         # @return [Google::Apis::ComputeAlpha::PreservedState]
         attr_accessor :preserved_state
       
+        # The status of applying this per-instance config on the corresponding managed
+        # instance.
+        # Corresponds to the JSON property `status`
+        # @return [String]
+        attr_accessor :status
+      
         def initialize(**args)
            update!(**args)
         end
@@ -24420,6 +24928,7 @@ module Google
           @fingerprint = args[:fingerprint] if args.key?(:fingerprint)
           @name = args[:name] if args.key?(:name)
           @preserved_state = args[:preserved_state] if args.key?(:preserved_state)
+          @status = args[:status] if args.key?(:status)
         end
       end
       
@@ -30296,7 +30805,7 @@ module Google
         end
       end
       
-      # Status of a NAT contained in this router. Next tag: 9
+      # Status of a NAT contained in this router.
       class RouterStatusNatStatus
         include Google::Apis::Core::Hashable
       
@@ -30747,7 +31256,7 @@ module Google
         end
       end
       
-      # Sets the scheduling options for an Instance. NextID: 11
+      # Sets the scheduling options for an Instance. NextID: 12
       class Scheduling
         include Google::Apis::Core::Hashable
       
@@ -30815,8 +31324,9 @@ module Google
         attr_accessor :on_host_maintenance
       
         # Defines whether the instance is preemptible. This can only be set during
-        # instance creation, it cannot be set or changed after the instance has been
-        # created.
+        # instance creation or while the instance is stopped and therefore, in a `
+        # TERMINATED` state. See Instance Life Cycle for more information on the
+        # possible instance states.
         # Corresponds to the JSON property `preemptible`
         # @return [Boolean]
         attr_accessor :preemptible
@@ -31621,14 +32131,7 @@ module Google
       class SecuritySettings
         include Google::Apis::Core::Hashable
       
-        # A URL referring to a networksecurity.Authentication resource that describes
-        # how clients should authenticate with this service's backends. If left blank,
-        # communications between services are not encrypted (i.e., the TLS policy is set
-        # to OPEN). When sending traffic to this service's backends, the OriginationTls
-        # setting of Authentication.TransportAuthentication is applied. Refer to the
-        # Authentication and Authentication.TransportAuthentication.OriginationTls
-        # resources for additional details. authentication only applies to a global
-        # BackendService with the loadBalancingScheme set to INTERNAL_SELF_MANAGED.
+        # [Deprecated] Use clientTlsPolicy instead.
         # Corresponds to the JSON property `authentication`
         # @return [String]
         attr_accessor :authentication
@@ -31645,18 +32148,33 @@ module Google
         # @return [Google::Apis::ComputeAlpha::AuthorizationConfig]
         attr_accessor :authorization_config
       
+        # Optional. A URL referring to a networksecurity.ClientTlsPolicy resource that
+        # describes how clients should authenticate with this service's backends.
+        # clientTlsPolicy only applies to a global BackendService with the
+        # loadBalancingScheme set to INTERNAL_SELF_MANAGED.
+        # If left blank, communications are not encrypted.
+        # Corresponds to the JSON property `clientTlsPolicy`
+        # @return [String]
+        attr_accessor :client_tls_policy
+      
         # [Deprecated] The client side authentication settings for connection
         # originating from the backend service. the backend service.
         # Corresponds to the JSON property `clientTlsSettings`
         # @return [Google::Apis::ComputeAlpha::ClientTlsSettings]
         attr_accessor :client_tls_settings
       
-        # Optional. A list of subject alternate names to verify the subject identity (
-        # SAN) in the certificate presented by the server, to authorize the SAN list as
-        # identities to run the service represented by this BackendService. If specified,
-        # the client will verify that the server certificate's subject alt name matches
-        # one of the specified values. Only applies to a global BackendService with the
-        # loadBalancingScheme set to INTERNAL_SELF_MANAGED.
+        # Optional. A list of Subject Alternative Names (SANs) that the client verifies
+        # during a mutual TLS handshake with an server/endpoint for this BackendService.
+        # When the server presents its X.509 certificate to the client, the client
+        # inspects the certificate's subjectAltName field. If the field contains one of
+        # the specified values, the communication continues. Otherwise, it fails. This
+        # additional check enables the client to verify that the server is authorized to
+        # run the requested service.
+        # Note that the contents of the server certificate's subjectAltName field are
+        # configured by the Public Key Infrastructure which provisions server identities.
+        # Only applies to a global BackendService with loadBalancingScheme set to
+        # INTERNAL_SELF_MANAGED. Only applies when BackendService has an attached
+        # clientTlsPolicy with clientCertificate (mTLS mode).
         # Corresponds to the JSON property `subjectAltNames`
         # @return [Array<String>]
         attr_accessor :subject_alt_names
@@ -31670,6 +32188,7 @@ module Google
           @authentication = args[:authentication] if args.key?(:authentication)
           @authentication_policy = args[:authentication_policy] if args.key?(:authentication_policy)
           @authorization_config = args[:authorization_config] if args.key?(:authorization_config)
+          @client_tls_policy = args[:client_tls_policy] if args.key?(:client_tls_policy)
           @client_tls_settings = args[:client_tls_settings] if args.key?(:client_tls_settings)
           @subject_alt_names = args[:subject_alt_names] if args.key?(:subject_alt_names)
         end
@@ -32732,7 +33251,7 @@ module Google
         # @return [Array<Google::Apis::ComputeAlpha::NetworkInterface>]
         attr_accessor :network_interfaces
       
-        # Sets the scheduling options for an Instance. NextID: 11
+        # Sets the scheduling options for an Instance. NextID: 12
         # Corresponds to the JSON property `scheduling`
         # @return [Google::Apis::ComputeAlpha::Scheduling]
         attr_accessor :scheduling
@@ -32784,9 +33303,9 @@ module Google
       # to five PEM-encoded certificates. The API call creates an object (
       # sslCertificate) that holds this data. You can use SSL keys and certificates to
       # secure connections to a load balancer. For more information, read  Creating
-      # and using SSL certificates and SSL certificates quotas and limits. (==
-      # resource_for `$api_version`.sslCertificates ==) (== resource_for `$api_version`
-      # .regionSslCertificates ==)
+      # and using SSL certificates, SSL certificates quotas and limits, and
+      # Troubleshooting SSL certificates. (== resource_for `$api_version`.
+      # sslCertificates ==) (== resource_for `$api_version`.regionSslCertificates ==)
       class SslCertificate
         include Google::Apis::Core::Hashable
       
@@ -33798,7 +34317,8 @@ module Google
         # The range of internal addresses that are owned by this subnetwork. Provide
         # this property when you create the subnetwork. For example, 10.0.0.0/8 or 192.
         # 168.0.0/16. Ranges must be unique and non-overlapping within a network. Only
-        # IPv4 is supported. This field can be set only at resource creation time.
+        # IPv4 is supported. This field is set at resource creation time. The range can
+        # be expanded after creation using expandIpCidrRange.
         # Corresponds to the JSON property `ipCidrRange`
         # @return [String]
         attr_accessor :ip_cidr_range
@@ -35351,31 +35871,27 @@ module Google
       class TargetHttpsProxy
         include Google::Apis::Core::Hashable
       
-        # A URL referring to a networksecurity.Authentication resource that describes
-        # how the proxy should authenticate inbound traffic. If left blank,
-        # communications between services are not encrypted (i.e., the TLS policy is set
-        # to OPEN). When terminating inbound traffic to this proxy, the TerminationTls
-        # setting of Authentication.TransportAuthentication is applied.
-        # Refer to the Authentication and Authentication.TransportAuthentication.
-        # TerminationTls resources for additional details.
-        # authentication only applies to a global TargetHttpsProxy attached to
-        # globalForwardingRules with the loadBalancingScheme set to
-        # INTERNAL_SELF_MANAGED.
+        # [Deprecated] Use serverTlsPolicy instead.
         # Corresponds to the JSON property `authentication`
         # @return [String]
         attr_accessor :authentication
       
-        # A URL referring to a networksecurity.Authorization resource that describes how
-        # the proxy should authorize inbound traffic. If left blank, access will not be
-        # restricted by an authorization policy.
-        # Refer to the Authorization resource for additional details.
-        # authorization only applies to a global TargetHttpsProxy attached to
-        # globalForwardingRules with the loadBalancingScheme set to
-        # INTERNAL_SELF_MANAGED.
+        # [Deprecated] Use authorizationPolicy instead.
         # Corresponds to the JSON property `authorization`
         # @return [String]
         attr_accessor :authorization
       
+        # Optional. A URL referring to a networksecurity.AuthorizationPolicy resource
+        # that describes how the proxy should authorize inbound traffic. If left blank,
+        # access will not be restricted by an authorization policy.
+        # Refer to the AuthorizationPolicy resource for additional details.
+        # authorizationPolicy only applies to a global TargetHttpsProxy attached to
+        # globalForwardingRules with the loadBalancingScheme set to
+        # INTERNAL_SELF_MANAGED.
+        # Corresponds to the JSON property `authorizationPolicy`
+        # @return [String]
+        attr_accessor :authorization_policy
+      
         # URL of a certificate map that identifies a certificate map associated with the
         # given target proxy. This field can only be set for global target proxies. If
         # set, sslCertificates will be ignored.
@@ -35453,6 +35969,16 @@ module Google
         # @return [String]
         attr_accessor :self_link_with_id
       
+        # Optional. A URL referring to a networksecurity.ServerTlsPolicy resource that
+        # describes how the proxy should authenticate inbound traffic.
+        # serverTlsPolicy only applies to a global TargetHttpsProxy attached to
+        # globalForwardingRules with the loadBalancingScheme set to
+        # INTERNAL_SELF_MANAGED.
+        # If left blank, communications are not encrypted.
+        # Corresponds to the JSON property `serverTlsPolicy`
+        # @return [String]
+        attr_accessor :server_tls_policy
+      
         # URLs to SslCertificate resources that are used to authenticate connections
         # between users and the load balancer. At least one SSL certificate must be
         # specified. Currently, you may specify up to 15 SSL certificates.
@@ -35485,6 +36011,7 @@ module Google
         def update!(**args)
           @authentication = args[:authentication] if args.key?(:authentication)
           @authorization = args[:authorization] if args.key?(:authorization)
+          @authorization_policy = args[:authorization_policy] if args.key?(:authorization_policy)
           @certificate_map = args[:certificate_map] if args.key?(:certificate_map)
           @creation_timestamp = args[:creation_timestamp] if args.key?(:creation_timestamp)
           @description = args[:description] if args.key?(:description)
@@ -35496,6 +36023,7 @@ module Google
           @region = args[:region] if args.key?(:region)
           @self_link = args[:self_link] if args.key?(:self_link)
           @self_link_with_id = args[:self_link_with_id] if args.key?(:self_link_with_id)
+          @server_tls_policy = args[:server_tls_policy] if args.key?(:server_tls_policy)
           @ssl_certificates = args[:ssl_certificates] if args.key?(:ssl_certificates)
           @ssl_policy = args[:ssl_policy] if args.key?(:ssl_policy)
           @url_map = args[:url_map] if args.key?(:url_map)
@@ -38052,6 +38580,8 @@ module Google
         # must not be set. Conversely if defaultService is set, defaultRouteAction
         # cannot contain any  weightedBackendServices.
         # Only one of defaultRouteAction or defaultUrlRedirect must be set.
+        # UrlMaps for external HTTP(S) load balancers support only the urlRewrite action
+        # within defaultRouteAction.
         # Corresponds to the JSON property `defaultRouteAction`
         # @return [Google::Apis::ComputeAlpha::HttpRouteAction]
         attr_accessor :default_route_action