google-api-client 0.43.0 → 0.44.0

data/generated/google/apis/compute_beta.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://developers.google.com/compute/docs/reference/latest/
     module ComputeBeta
       VERSION = 'Beta'
-      REVISION = '20200704'
+      REVISION = '20200811'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/compute_beta/classes.rb

@@ -1199,7 +1199,20 @@ module Google
         # @return [String]
         attr_accessor :device_name
       
-        # Represents a customer-supplied encryption key
+        # Encrypts or decrypts a disk using a customer-supplied encryption key.
+        # If you are creating a new disk, this field encrypts the new disk using an
+        # encryption key that you provide. If you are attaching an existing disk that is
+        # already encrypted, this field decrypts the disk using the customer-supplied
+        # encryption key.
+        # If you encrypt a disk using a customer-supplied key, you must provide the same
+        # key again when you attempt to use this resource at a later time. For example,
+        # you must provide the key when you create a snapshot or an image from the disk
+        # or when you attach the disk to a virtual machine instance.
+        # If you do not provide an encryption key, then the disk will be encrypted using
+        # an automatically generated key and you do not need to provide a key to use the
+        # disk later.
+        # Instance templates do not store customer-supplied encryption keys, so you
+        # cannot use your own keys to encrypt disks in a managed instance group.
         # Corresponds to the JSON property `diskEncryptionKey`
         # @return [Google::Apis::ComputeBeta::CustomerEncryptionKey]
         attr_accessor :disk_encryption_key
@@ -1407,7 +1420,11 @@ module Google
         # @return [String]
         attr_accessor :source_image
       
-        # Represents a customer-supplied encryption key
+        # The customer-supplied encryption key of the source image. Required if the
+        # source image is protected by a customer-supplied encryption key.
+        # Instance templates do not store customer-supplied encryption keys, so you
+        # cannot create disks for instances in a managed instance group if the source
+        # images are encrypted with your own keys.
         # Corresponds to the JSON property `sourceImageEncryptionKey`
         # @return [Google::Apis::ComputeBeta::CustomerEncryptionKey]
         attr_accessor :source_image_encryption_key
@@ -1423,7 +1440,7 @@ module Google
         # @return [String]
         attr_accessor :source_snapshot
       
-        # Represents a customer-supplied encryption key
+        # The customer-supplied encryption key of the source snapshot.
         # Corresponds to the JSON property `sourceSnapshotEncryptionKey`
         # @return [Google::Apis::ComputeBeta::CustomerEncryptionKey]
         attr_accessor :source_snapshot_encryption_key
@@ -2549,6 +2566,11 @@ module Google
         # @return [String]
         attr_accessor :creation_timestamp
       
+        # Headers that the HTTP/S load balancer should add to proxied responses.
+        # Corresponds to the JSON property `customResponseHeaders`
+        # @return [Array<String>]
+        attr_accessor :custom_response_headers
+      
         # An optional textual description of the resource; provided by the client when
         # the resource is created.
         # Corresponds to the JSON property `description`
@@ -2595,6 +2617,7 @@ module Google
           @bucket_name = args[:bucket_name] if args.key?(:bucket_name)
           @cdn_policy = args[:cdn_policy] if args.key?(:cdn_policy)
           @creation_timestamp = args[:creation_timestamp] if args.key?(:creation_timestamp)
+          @custom_response_headers = args[:custom_response_headers] if args.key?(:custom_response_headers)
           @description = args[:description] if args.key?(:description)
           @enable_cdn = args[:enable_cdn] if args.key?(:enable_cdn)
           @id = args[:id] if args.key?(:id)
@@ -2608,6 +2631,85 @@ module Google
       class BackendBucketCdnPolicy
         include Google::Apis::Core::Hashable
       
+        # Bypass the cache when the specified request headers are matched - e.g. Pragma
+        # or Authorization headers. Up to 5 headers can be specified. The cache is
+        # bypassed for all cdnPolicy.cacheMode settings.
+        # Corresponds to the JSON property `bypassCacheOnRequestHeaders`
+        # @return [Array<Google::Apis::ComputeBeta::BackendBucketCdnPolicyBypassCacheOnRequestHeader>]
+        attr_accessor :bypass_cache_on_request_headers
+      
+        # 
+        # Corresponds to the JSON property `cacheMode`
+        # @return [String]
+        attr_accessor :cache_mode
+      
+        # Specifies a separate client (e.g. browser client) TTL, separate from the TTL
+        # for Cloud CDN's edge caches. Leaving this empty will use the same cache TTL
+        # for both Cloud CDN and the client-facing response. The maximum allowed value
+        # is 86400s (1 day).
+        # Corresponds to the JSON property `clientTtl`
+        # @return [Fixnum]
+        attr_accessor :client_ttl
+      
+        # Specifies the default TTL for cached content served by this origin for
+        # responses that do not have an existing valid TTL (max-age or s-max-age).
+        # Setting a TTL of "0" means "always revalidate" and a value of "-1" disables
+        # caching for that status code. The value of defaultTTL cannot be set to a value
+        # greater than that of maxTTL, but can be equal. When the cacheMode is set to
+        # FORCE_CACHE_ALL, the defaultTTL will overwrite the TTL set in all responses.
+        # The maximum allowed value is 31,622,400s (1 year), noting that infrequently
+        # accessed objects may be evicted from the cache before the defined TTL.
+        # Corresponds to the JSON property `defaultTtl`
+        # @return [Fixnum]
+        attr_accessor :default_ttl
+      
+        # Specifies the maximum allowed TTL for cached content served by this origin.
+        # Cache directives that attempt to set a max-age or s-maxage higher than this,
+        # or an Expires header more than maxTTL seconds in the future will be capped at
+        # the value of maxTTL, as if it were the value of an s-maxage Cache-Control
+        # directive. Setting a TTL of "0" means "always revalidate" and a value of "-1"
+        # disables caching for that status code. The maximum allowed value is 31,622,
+        # 400s (1 year), noting that infrequently accessed objects may be evicted from
+        # the cache before the defined TTL.
+        # Corresponds to the JSON property `maxTtl`
+        # @return [Fixnum]
+        attr_accessor :max_ttl
+      
+        # Negative caching allows per-status code TTLs to be set, in order to apply fine-
+        # grained caching for common errors or redirects. This can reduce the load on
+        # your origin and improve end-user experience by reducing response latency. By
+        # default, Cloud CDN will apply the following default TTLs to these status codes:
+        # HTTP 300 (Multiple Choice), 301, 308 (Permanent Redirects): 10m HTTP 404 (Not
+        # Found), 410 (Gone), 451 (Unavailable For Legal Reasons): 120s HTTP 405 (Method
+        # Not Found), 414 (URI Too Long), 501 (Not Implemented): 60s These defaults can
+        # be overridden in negative_caching_policy
+        # Corresponds to the JSON property `negativeCaching`
+        # @return [Boolean]
+        attr_accessor :negative_caching
+        alias_method :negative_caching?, :negative_caching
+      
+        # Sets a cache TTL for the specified HTTP status code. negative_caching must be
+        # enabled to configure negative_caching_policy. Omitting the policy and leaving
+        # negative_caching enabled will use Cloud CDN's default cache TTLs. Note that
+        # when specifying an explicit negative_caching_policy, you should take care to
+        # specify a cache TTL for all response codes that you wish to cache. Cloud CDN
+        # will not apply any default negative caching when a policy exists.
+        # Corresponds to the JSON property `negativeCachingPolicy`
+        # @return [Array<Google::Apis::ComputeBeta::BackendBucketCdnPolicyNegativeCachingPolicy>]
+        attr_accessor :negative_caching_policy
+      
+        # Serve existing content from the cache (if available) when revalidating content
+        # with the origin, or when an error is encountered when refreshing the cache.
+        # This setting defines the default "max-stale" duration for any cached responses
+        # that do not specify a max-stale directive. Stale responses that exceed the TTL
+        # configured here will not be served. The default limit (max-stale) is 86400s (1
+        # day), which will allow stale content to be served up to this limit beyond the
+        # max-age (or s-max-age) of a cached response. The maximum allowed value is
+        # 604800(1 week). Set this to zero (0) to disable serve-while-stale.
+        # Corresponds to the JSON property `serveWhileStale`
+        # @return [Fixnum]
+        attr_accessor :serve_while_stale
+      
         # Maximum number of seconds the response to a signed URL request will be
         # considered fresh. After this time period, the response will be revalidated
         # before being served. Defaults to 1hr (3600s). When serving responses to signed
@@ -2630,11 +2732,72 @@ module Google
       
         # Update properties of this object
         def update!(**args)
+          @bypass_cache_on_request_headers = args[:bypass_cache_on_request_headers] if args.key?(:bypass_cache_on_request_headers)
+          @cache_mode = args[:cache_mode] if args.key?(:cache_mode)
+          @client_ttl = args[:client_ttl] if args.key?(:client_ttl)
+          @default_ttl = args[:default_ttl] if args.key?(:default_ttl)
+          @max_ttl = args[:max_ttl] if args.key?(:max_ttl)
+          @negative_caching = args[:negative_caching] if args.key?(:negative_caching)
+          @negative_caching_policy = args[:negative_caching_policy] if args.key?(:negative_caching_policy)
+          @serve_while_stale = args[:serve_while_stale] if args.key?(:serve_while_stale)
           @signed_url_cache_max_age_sec = args[:signed_url_cache_max_age_sec] if args.key?(:signed_url_cache_max_age_sec)
           @signed_url_key_names = args[:signed_url_key_names] if args.key?(:signed_url_key_names)
         end
       end
       
+      # Bypass the cache when the specified request headers are present, e.g. Pragma
+      # or Authorization headers. Values are case insensitive. The presence of such a
+      # header overrides the cache_mode setting.
+      class BackendBucketCdnPolicyBypassCacheOnRequestHeader
+        include Google::Apis::Core::Hashable
+      
+        # The header field name to match on when bypassing cache. Values are case-
+        # insensitive.
+        # Corresponds to the JSON property `headerName`
+        # @return [String]
+        attr_accessor :header_name
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @header_name = args[:header_name] if args.key?(:header_name)
+        end
+      end
+      
+      # Specify CDN TTLs for response error codes.
+      class BackendBucketCdnPolicyNegativeCachingPolicy
+        include Google::Apis::Core::Hashable
+      
+        # The HTTP status code to define a TTL against. Only HTTP status codes 300, 301,
+        # 308, 404, 405, 410, 414, 451 and 501 are can be specified as values, and you
+        # cannot specify a status code more than once.
+        # Corresponds to the JSON property `code`
+        # @return [Fixnum]
+        attr_accessor :code
+      
+        # The TTL (in seconds) to cache responses with the corresponding status code for.
+        # A TTL of "0" means "always revalidate" and a value of "-1" disables caching
+        # for that status code. The maximum allowed value is 1800s (30 minutes), noting
+        # that infrequently accessed objects may be evicted from the cache before the
+        # defined TTL.
+        # Corresponds to the JSON property `ttl`
+        # @return [Fixnum]
+        attr_accessor :ttl
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @code = args[:code] if args.key?(:code)
+          @ttl = args[:ttl] if args.key?(:ttl)
+        end
+      end
+      
       # Contains a list of BackendBucket resources.
       class BackendBucketList
         include Google::Apis::Core::Hashable
@@ -2770,6 +2933,8 @@ module Google
       
         # If set to 0, the cookie is non-persistent and lasts only until the end of the
         # browser session (or equivalent). The maximum allowed value is one day (86,400).
+        # Not supported when the backend service is referenced by a URL map that is
+        # bound to target gRPC proxy that has validateForProxyless field set to true.
         # Corresponds to the JSON property `affinityCookieTtlSec`
         # @return [Fixnum]
         attr_accessor :affinity_cookie_ttl_sec
@@ -2809,6 +2974,11 @@ module Google
         # @return [Array<String>]
         attr_accessor :custom_request_headers
       
+        # Headers that the HTTP/S load balancer should add to proxied responses.
+        # Corresponds to the JSON property `customResponseHeaders`
+        # @return [Array<String>]
+        attr_accessor :custom_response_headers
+      
         # An optional description of this resource. Provide this property when you
         # create the resource.
         # Corresponds to the JSON property `description`
@@ -2848,10 +3018,10 @@ module Google
         # The list of URLs to the healthChecks, httpHealthChecks (legacy), or
         # httpsHealthChecks (legacy) resource for health checking this backend service.
         # Not all backend services support legacy health checks. See  Load balancer
-        # guide. Currently at most one health check can be specified. Backend services
-        # with instance group or zonal NEG backends must have a health check. Backend
-        # services with internet NEG backends must not have a health check. A health
-        # check must
+        # guide. Currently, at most one health check can be specified for each backend
+        # service. Backend services with instance group or zonal NEG backends must have
+        # a health check. Backend services with internet or serverless NEG backends must
+        # not have a health check.
         # Corresponds to the JSON property `healthChecks`
         # @return [Array<String>]
         attr_accessor :health_checks
@@ -2906,8 +3076,11 @@ module Google
         # HTTP2, and load_balancing_scheme set to INTERNAL_MANAGED.
         # - A global backend service with the load_balancing_scheme set to
         # INTERNAL_SELF_MANAGED.
-        # If sessionAffinity is not NONE, and this field is not set to >MAGLEV or
+        # If sessionAffinity is not NONE, and this field is not set to MAGLEV or
         # RING_HASH, session affinity settings will not take effect.
+        # Only the default ROUND_ROBIN policy is supported when the backend service is
+        # referenced by a URL map that is bound to target gRPC proxy that has
+        # validateForProxyless field set to true.
         # Corresponds to the JSON property `localityLbPolicy`
         # @return [String]
         attr_accessor :locality_lb_policy
@@ -2960,10 +3133,12 @@ module Google
         attr_accessor :port_name
       
         # The protocol this BackendService uses to communicate with backends.
-        # Possible values are HTTP, HTTPS, HTTP2, TCP, SSL, or UDP. depending on the
-        # chosen load balancer or Traffic Director configuration. Refer to the
+        # Possible values are HTTP, HTTPS, HTTP2, TCP, SSL, UDP or GRPC. depending on
+        # the chosen load balancer or Traffic Director configuration. Refer to the
         # documentation for the load balancer or for Traffic Director for more
         # information.
+        # Must be set to GRPC when the backend service is referenced by a URL map that
+        # is bound to target gRPC proxy.
         # Corresponds to the JSON property `protocol`
         # @return [String]
         attr_accessor :protocol
@@ -3002,6 +3177,8 @@ module Google
         # When the loadBalancingScheme is INTERNAL_SELF_MANAGED, or INTERNAL_MANAGED,
         # possible values are NONE, CLIENT_IP, GENERATED_COOKIE, HEADER_FIELD, or
         # HTTP_COOKIE.
+        # Not supported when the backend service is referenced by a URL map that is
+        # bound to target gRPC proxy that has validateForProxyless field set to true.
         # Corresponds to the JSON property `sessionAffinity`
         # @return [String]
         attr_accessor :session_affinity
@@ -3027,6 +3204,7 @@ module Google
           @consistent_hash = args[:consistent_hash] if args.key?(:consistent_hash)
           @creation_timestamp = args[:creation_timestamp] if args.key?(:creation_timestamp)
           @custom_request_headers = args[:custom_request_headers] if args.key?(:custom_request_headers)
+          @custom_response_headers = args[:custom_response_headers] if args.key?(:custom_response_headers)
           @description = args[:description] if args.key?(:description)
           @enable_cdn = args[:enable_cdn] if args.key?(:enable_cdn)
           @failover_policy = args[:failover_policy] if args.key?(:failover_policy)
@@ -3174,12 +3352,91 @@ module Google
       class BackendServiceCdnPolicy
         include Google::Apis::Core::Hashable
       
+        # Bypass the cache when the specified request headers are matched - e.g. Pragma
+        # or Authorization headers. Up to 5 headers can be specified. The cache is
+        # bypassed for all cdnPolicy.cacheMode settings.
+        # Corresponds to the JSON property `bypassCacheOnRequestHeaders`
+        # @return [Array<Google::Apis::ComputeBeta::BackendServiceCdnPolicyBypassCacheOnRequestHeader>]
+        attr_accessor :bypass_cache_on_request_headers
+      
         # Message containing what to include in the cache key for a request for Cloud
         # CDN.
         # Corresponds to the JSON property `cacheKeyPolicy`
         # @return [Google::Apis::ComputeBeta::CacheKeyPolicy]
         attr_accessor :cache_key_policy
       
+        # 
+        # Corresponds to the JSON property `cacheMode`
+        # @return [String]
+        attr_accessor :cache_mode
+      
+        # Specifies a separate client (e.g. browser client) TTL, separate from the TTL
+        # for Cloud CDN's edge caches. Leaving this empty will use the same cache TTL
+        # for both Cloud CDN and the client-facing response. The maximum allowed value
+        # is 86400s (1 day).
+        # Corresponds to the JSON property `clientTtl`
+        # @return [Fixnum]
+        attr_accessor :client_ttl
+      
+        # Specifies the default TTL for cached content served by this origin for
+        # responses that do not have an existing valid TTL (max-age or s-max-age).
+        # Setting a TTL of "0" means "always revalidate" and a value of "-1" disables
+        # caching for that status code. The value of defaultTTL cannot be set to a value
+        # greater than that of maxTTL, but can be equal. When the cacheMode is set to
+        # FORCE_CACHE_ALL, the defaultTTL will overwrite the TTL set in all responses.
+        # The maximum allowed value is 31,622,400s (1 year), noting that infrequently
+        # accessed objects may be evicted from the cache before the defined TTL.
+        # Corresponds to the JSON property `defaultTtl`
+        # @return [Fixnum]
+        attr_accessor :default_ttl
+      
+        # Specifies the maximum allowed TTL for cached content served by this origin.
+        # Cache directives that attempt to set a max-age or s-maxage higher than this,
+        # or an Expires header more than maxTTL seconds in the future will be capped at
+        # the value of maxTTL, as if it were the value of an s-maxage Cache-Control
+        # directive. Setting a TTL of "0" means "always revalidate" and a value of "-1"
+        # disables caching for that status code. The maximum allowed value is 31,622,
+        # 400s (1 year), noting that infrequently accessed objects may be evicted from
+        # the cache before the defined TTL.
+        # Corresponds to the JSON property `maxTtl`
+        # @return [Fixnum]
+        attr_accessor :max_ttl
+      
+        # Negative caching allows per-status code TTLs to be set, in order to apply fine-
+        # grained caching for common errors or redirects. This can reduce the load on
+        # your origin and improve end-user experience by reducing response latency. By
+        # default, Cloud CDN will apply the following default TTLs to these status codes:
+        # HTTP 300 (Multiple Choice), 301, 308 (Permanent Redirects): 10m HTTP 404 (Not
+        # Found), 410 (Gone), 451 (Unavailable For Legal Reasons): 120s HTTP 405 (Method
+        # Not Found), 414 (URI Too Long), 501 (Not Implemented): 60s These defaults can
+        # be overridden in negative_caching_policy
+        # Corresponds to the JSON property `negativeCaching`
+        # @return [Boolean]
+        attr_accessor :negative_caching
+        alias_method :negative_caching?, :negative_caching
+      
+        # Sets a cache TTL for the specified HTTP status code. negative_caching must be
+        # enabled to configure negative_caching_policy. Omitting the policy and leaving
+        # negative_caching enabled will use Cloud CDN's default cache TTLs. Note that
+        # when specifying an explicit negative_caching_policy, you should take care to
+        # specify a cache TTL for all response codes that you wish to cache. Cloud CDN
+        # will not apply any default negative caching when a policy exists.
+        # Corresponds to the JSON property `negativeCachingPolicy`
+        # @return [Array<Google::Apis::ComputeBeta::BackendServiceCdnPolicyNegativeCachingPolicy>]
+        attr_accessor :negative_caching_policy
+      
+        # Serve existing content from the cache (if available) when revalidating content
+        # with the origin, or when an error is encountered when refreshing the cache.
+        # This setting defines the default "max-stale" duration for any cached responses
+        # that do not specify a max-stale directive. Stale responses that exceed the TTL
+        # configured here will not be served. The default limit (max-stale) is 86400s (1
+        # day), which will allow stale content to be served up to this limit beyond the
+        # max-age (or s-max-age) of a cached response. The maximum allowed value is
+        # 604800(1 week). Set this to zero (0) to disable serve-while-stale.
+        # Corresponds to the JSON property `serveWhileStale`
+        # @return [Fixnum]
+        attr_accessor :serve_while_stale
+      
         # Maximum number of seconds the response to a signed URL request will be
         # considered fresh. After this time period, the response will be revalidated
         # before being served. Defaults to 1hr (3600s). When serving responses to signed
@@ -3202,12 +3459,73 @@ module Google
       
         # Update properties of this object
         def update!(**args)
+          @bypass_cache_on_request_headers = args[:bypass_cache_on_request_headers] if args.key?(:bypass_cache_on_request_headers)
           @cache_key_policy = args[:cache_key_policy] if args.key?(:cache_key_policy)
+          @cache_mode = args[:cache_mode] if args.key?(:cache_mode)
+          @client_ttl = args[:client_ttl] if args.key?(:client_ttl)
+          @default_ttl = args[:default_ttl] if args.key?(:default_ttl)
+          @max_ttl = args[:max_ttl] if args.key?(:max_ttl)
+          @negative_caching = args[:negative_caching] if args.key?(:negative_caching)
+          @negative_caching_policy = args[:negative_caching_policy] if args.key?(:negative_caching_policy)
+          @serve_while_stale = args[:serve_while_stale] if args.key?(:serve_while_stale)
           @signed_url_cache_max_age_sec = args[:signed_url_cache_max_age_sec] if args.key?(:signed_url_cache_max_age_sec)
           @signed_url_key_names = args[:signed_url_key_names] if args.key?(:signed_url_key_names)
         end
       end
       
+      # Bypass the cache when the specified request headers are present, e.g. Pragma
+      # or Authorization headers. Values are case insensitive. The presence of such a
+      # header overrides the cache_mode setting.
+      class BackendServiceCdnPolicyBypassCacheOnRequestHeader
+        include Google::Apis::Core::Hashable
+      
+        # The header field name to match on when bypassing cache. Values are case-
+        # insensitive.
+        # Corresponds to the JSON property `headerName`
+        # @return [String]
+        attr_accessor :header_name
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @header_name = args[:header_name] if args.key?(:header_name)
+        end
+      end
+      
+      # Specify CDN TTLs for response error codes.
+      class BackendServiceCdnPolicyNegativeCachingPolicy
+        include Google::Apis::Core::Hashable
+      
+        # The HTTP status code to define a TTL against. Only HTTP status codes 300, 301,
+        # 308, 404, 405, 410, 414, 451 and 501 are can be specified as values, and you
+        # cannot specify a status code more than once.
+        # Corresponds to the JSON property `code`
+        # @return [Fixnum]
+        attr_accessor :code
+      
+        # The TTL (in seconds) to cache responses with the corresponding status code for.
+        # A TTL of "0" means "always revalidate" and a value of "-1" disables caching
+        # for that status code. The maximum allowed value is 1800s (30 minutes), noting
+        # that infrequently accessed objects may be evicted from the cache before the
+        # defined TTL.
+        # Corresponds to the JSON property `ttl`
+        # @return [Fixnum]
+        attr_accessor :ttl
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @code = args[:code] if args.key?(:code)
+          @ttl = args[:ttl] if args.key?(:ttl)
+        end
+      end
+      
       # Applicable only to Failover for Internal TCP/UDP Load Balancing. On failover
       # or failback, this field indicates whether connection draining will be honored.
       # GCP has a fixed connection draining timeout of 10 minutes. A setting of true
@@ -4071,6 +4389,15 @@ module Google
       class Commitment
         include Google::Apis::Core::Hashable
       
+        # The category of the commitment. Category MACHINE specifies commitments
+        # composed of machine resources such as VCPU or MEMORY, listed in resources.
+        # Category LICENSE specifies commitments composed of software licenses, listed
+        # in licenseResources. Note that only MACHINE commitments should have a Type
+        # specified.
+        # Corresponds to the JSON property `category`
+        # @return [String]
+        attr_accessor :category
+      
         # [Output Only] Creation timestamp in RFC3339 text format.
         # Corresponds to the JSON property `creationTimestamp`
         # @return [String]
@@ -4098,6 +4425,11 @@ module Google
         # @return [String]
         attr_accessor :kind
       
+        # Commitment for a particular license resource.
+        # Corresponds to the JSON property `licenseResource`
+        # @return [Google::Apis::ComputeBeta::LicenseResourceCommitment]
+        attr_accessor :license_resource
+      
         # Name of the resource. Provided by the client when the resource is created. The
         # name must be 1-63 characters long, and comply with RFC1035. Specifically, the
         # name must be 1-63 characters long and match the regular expression `[a-z]([-a-
@@ -4167,11 +4499,13 @@ module Google
       
         # Update properties of this object
         def update!(**args)
+          @category = args[:category] if args.key?(:category)
           @creation_timestamp = args[:creation_timestamp] if args.key?(:creation_timestamp)
           @description = args[:description] if args.key?(:description)
           @end_timestamp = args[:end_timestamp] if args.key?(:end_timestamp)
           @id = args[:id] if args.key?(:id)
           @kind = args[:kind] if args.key?(:kind)
+          @license_resource = args[:license_resource] if args.key?(:license_resource)
           @name = args[:name] if args.key?(:name)
           @plan = args[:plan] if args.key?(:plan)
           @region = args[:region] if args.key?(:region)
@@ -4743,7 +5077,7 @@ module Google
         end
       end
       
-      # Represents a customer-supplied encryption key
+      # 
       class CustomerEncryptionKey
         include Google::Apis::Core::Hashable
       
@@ -4800,7 +5134,7 @@ module Google
       class CustomerEncryptionKeyProtectedDisk
         include Google::Apis::Core::Hashable
       
-        # Represents a customer-supplied encryption key
+        # Decrypts data associated with the disk with a customer-supplied encryption key.
         # Corresponds to the JSON property `diskEncryptionKey`
         # @return [Google::Apis::ComputeBeta::CustomerEncryptionKey]
         attr_accessor :disk_encryption_key
@@ -4904,7 +5238,16 @@ module Google
         # @return [String]
         attr_accessor :description
       
-        # Represents a customer-supplied encryption key
+        # Encrypts the disk using a customer-supplied encryption key.
+        # After you encrypt a disk with a customer-supplied key, you must provide the
+        # same key if you use the disk later (e.g. to create a disk snapshot, to create
+        # a disk image, to create a machine image, or to attach the disk to a virtual
+        # machine).
+        # Customer-supplied encryption keys do not protect access to metadata of the
+        # disk.
+        # If you do not provide an encryption key when creating the disk, then the disk
+        # will be encrypted using an automatically generated key and you do not need to
+        # provide a key to use the disk later.
         # Corresponds to the JSON property `diskEncryptionKey`
         # @return [Google::Apis::ComputeBeta::CustomerEncryptionKey]
         attr_accessor :disk_encryption_key
@@ -5031,12 +5374,11 @@ module Google
         # @return [String]
         attr_accessor :self_link
       
-        # Size of the persistent disk, specified in GB. You can specify this field when
-        # creating a persistent disk using the sourceImage or sourceSnapshot parameter,
-        # or specify it alone to create an empty persistent disk.
-        # If you specify this field along with sourceImage or sourceSnapshot, the value
-        # of sizeGb must not be less than the size of the sourceImage or the size of the
-        # snapshot. Acceptable values are 1 to 65536, inclusive.
+        # Size, in GB, of the persistent disk. You can specify this field when creating
+        # a persistent disk using the sourceImage, sourceSnapshot, or sourceDisk
+        # parameter, or specify it alone to create an empty persistent disk.
+        # If you specify this field along with a source, the value of sizeGb must not be
+        # less than the size of the source. Acceptable values are 1 to 65536, inclusive.
         # Corresponds to the JSON property `sizeGb`
         # @return [Fixnum]
         attr_accessor :size_gb
@@ -5078,7 +5420,8 @@ module Google
         # @return [String]
         attr_accessor :source_image
       
-        # Represents a customer-supplied encryption key
+        # The customer-supplied encryption key of the source image. Required if the
+        # source image is protected by a customer-supplied encryption key.
         # Corresponds to the JSON property `sourceImageEncryptionKey`
         # @return [Google::Apis::ComputeBeta::CustomerEncryptionKey]
         attr_accessor :source_image_encryption_key
@@ -5103,7 +5446,8 @@ module Google
         # @return [String]
         attr_accessor :source_snapshot
       
-        # Represents a customer-supplied encryption key
+        # The customer-supplied encryption key of the source snapshot. Required if the
+        # source snapshot is protected by a customer-supplied encryption key.
         # Corresponds to the JSON property `sourceSnapshotEncryptionKey`
         # @return [Google::Apis::ComputeBeta::CustomerEncryptionKey]
         attr_accessor :source_snapshot_encryption_key
@@ -5117,6 +5461,14 @@ module Google
         # @return [String]
         attr_accessor :source_snapshot_id
       
+        # The full Google Cloud Storage URI where the disk image is stored. This file
+        # must be a gzip-compressed tarball whose name ends in .tar.gz or virtual
+        # machine disk whose name ends in vmdk. Valid URIs may start with gs:// or https:
+        # //storage.googleapis.com/.
+        # Corresponds to the JSON property `sourceStorageObject`
+        # @return [String]
+        attr_accessor :source_storage_object
+      
         # [Output Only] The status of disk creation. CREATING: Disk is provisioning.
         # RESTORING: Source data is being copied into the disk. FAILED: Disk creation
         # failed. READY: Disk is ready for use. DELETING: Disk is deleting.
@@ -5186,6 +5538,7 @@ module Google
           @source_snapshot = args[:source_snapshot] if args.key?(:source_snapshot)
           @source_snapshot_encryption_key = args[:source_snapshot_encryption_key] if args.key?(:source_snapshot_encryption_key)
           @source_snapshot_id = args[:source_snapshot_id] if args.key?(:source_snapshot_id)
+          @source_storage_object = args[:source_storage_object] if args.key?(:source_storage_object)
           @status = args[:status] if args.key?(:status)
           @storage_type = args[:storage_type] if args.key?(:storage_type)
           @type = args[:type] if args.key?(:type)
@@ -7162,6 +7515,8 @@ module Google
         # IP address that you can use. For detailed information, refer to [IP address
         # specifications](/load-balancing/docs/forwarding-rule-concepts#
         # ip_address_specifications).
+        # Must be set to `0.0.0.0` when the target is targetGrpcProxy that has
+        # validateForProxyless field set to true.
         # Corresponds to the JSON property `IPAddress`
         # @return [String]
         attr_accessor :ip_address
@@ -7300,7 +7655,7 @@ module Google
       
         # Opaque filter criteria used by Loadbalancer to restrict routing configuration
         # to a limited set of xDS compliant clients. In their xDS requests to
-        # Loadbalancer, xDS clients present node metadata. If a match takes place, the
+        # Loadbalancer, xDS clients present node metadata. When there is a match, the
         # relevant configuration is made available to those proxies. Otherwise, all the
         # resources (e.g. TargetHttpProxy, UrlMap) referenced by the ForwardingRule will
         # not be visible to those proxies.
@@ -7308,7 +7663,8 @@ module Google
         # MATCH_ANY, at least one of the filterLabels must match the corresponding label
         # provided in the metadata. If its filterMatchCriteria is set to MATCH_ALL, then
         # all of its filterLabels must match with corresponding labels provided in the
-        # metadata.
+        # metadata. If multiple metadataFilters are specified, all of them need to be
+        # satisfied in order to be considered a match.
         # metadataFilters specified here will be applifed before those specified in the
         # UrlMap that this ForwardingRule references.
         # metadataFilters only applies to Loadbalancers that have their
@@ -7350,13 +7706,14 @@ module Google
         # that points to a target proxy or a target pool. Do not use with a forwarding
         # rule that points to a backend service. This field is used along with the
         # target field for TargetHttpProxy, TargetHttpsProxy, TargetSslProxy,
-        # TargetTcpProxy, TargetVpnGateway, TargetPool, TargetInstance.
+        # TargetTcpProxy, TargetGrpcProxy, TargetVpnGateway, TargetPool, TargetInstance.
         # Applicable only when IPProtocol is TCP, UDP, or SCTP, only packets addressed
         # to ports in the specified range will be forwarded to target. Forwarding rules
         # with the same [IPAddress, IPProtocol] pair must have disjoint port ranges.
         # Some types of forwarding target have constraints on the acceptable ports:
         # - TargetHttpProxy: 80, 8080
         # - TargetHttpsProxy: 443
+        # - TargetGrpcProxy: Any ports
         # - TargetTcpProxy: 25, 43, 110, 143, 195, 443, 465, 587, 700, 993, 995, 1688,
         # 1883, 5222
         # - TargetSslProxy: 25, 43, 110, 143, 195, 443, 465, 587, 700, 993, 995, 1688,
@@ -7393,6 +7750,12 @@ module Google
         # @return [String]
         attr_accessor :self_link
       
+        # Service Directory resources to register this forwarding rule with. Currently,
+        # only supports a single Service Directory resource.
+        # Corresponds to the JSON property `serviceDirectoryRegistrations`
+        # @return [Array<Google::Apis::ComputeBeta::ForwardingRuleServiceDirectoryRegistration>]
+        attr_accessor :service_directory_registrations
+      
         # An optional prefix to the service name for this Forwarding Rule. If specified,
         # the prefix is the first label of the fully qualified service name.
         # The label must be 1-63 characters long, and comply with RFC1035. Specifically,
@@ -7426,8 +7789,8 @@ module Google
         # forwarding rules, this target must live in the same region as the forwarding
         # rule. For global forwarding rules, this target must be a global load balancing
         # resource. The forwarded traffic must be of a type appropriate to the target
-        # object. For INTERNAL_SELF_MANAGED load balancing, only targetHttpProxy is
-        # valid, not targetHttpsProxy.
+        # object. For INTERNAL_SELF_MANAGED load balancing, only targetHttpProxy and
+        # targetGrpcProxy are valid, not targetHttpsProxy.
         # Corresponds to the JSON property `target`
         # @return [String]
         attr_accessor :target
@@ -7461,6 +7824,7 @@ module Google
           @ports = args[:ports] if args.key?(:ports)
           @region = args[:region] if args.key?(:region)
           @self_link = args[:self_link] if args.key?(:self_link)
+          @service_directory_registrations = args[:service_directory_registrations] if args.key?(:service_directory_registrations)
           @service_label = args[:service_label] if args.key?(:service_label)
           @service_name = args[:service_name] if args.key?(:service_name)
           @subnetwork = args[:subnetwork] if args.key?(:subnetwork)
@@ -7722,6 +8086,33 @@ module Google
         end
       end
       
+      # Describes the auto-registration of the Forwarding Rule to Service Directory.
+      # The region and project of the Service Directory resource generated from this
+      # registration will be the same as this Forwarding Rule.
+      class ForwardingRuleServiceDirectoryRegistration
+        include Google::Apis::Core::Hashable
+      
+        # Service Directory namespace to register the forwarding rule under.
+        # Corresponds to the JSON property `namespace`
+        # @return [String]
+        attr_accessor :namespace
+      
+        # Service Directory service to register the forwarding rule under.
+        # Corresponds to the JSON property `service`
+        # @return [String]
+        attr_accessor :service
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @namespace = args[:namespace] if args.key?(:namespace)
+          @service = args[:service] if args.key?(:service)
+        end
+      end
+      
       # 
       class ForwardingRulesScopedList
         include Google::Apis::Core::Hashable
@@ -9251,6 +9642,8 @@ module Google
         # port numbers in the format host:port. * matches any string of ([a-z0-9-.]*).
         # In that case, * must be the first character and must be followed in the
         # pattern by either - or ..
+        # * based matching is not supported when the URL map is bound to target gRPC
+        # proxy that has validateForProxyless field set to true.
         # Corresponds to the JSON property `hosts`
         # @return [Array<String>]
         attr_accessor :hosts
@@ -10031,7 +10424,11 @@ module Google
         # @return [Google::Apis::ComputeBeta::HttpHeaderAction]
         attr_accessor :header_action
       
-        # 
+        # The list of criteria for matching attributes of a request to this routeRule.
+        # This list has OR semantics: the request matches this routeRule when any of the
+        # matchRules are satisfied. However predicates within a given matchRule have AND
+        # semantics. All predicates within a matchRule must match for the request to
+        # match the rule.
         # Corresponds to the JSON property `matchRules`
         # @return [Array<Google::Apis::ComputeBeta::HttpRouteRuleMatch>]
         attr_accessor :match_rules
@@ -10059,6 +10456,8 @@ module Google
         # routeAction cannot contain any  weightedBackendServices.
         # Only one of urlRedirect, service or routeAction.weightedBackendService must be
         # set.
+        # UrlMaps for external HTTP(S) load balancers support only the urlRewrite action
+        # within a routeRule's routeAction.
         # Corresponds to the JSON property `routeAction`
         # @return [Google::Apis::ComputeBeta::HttpRouteAction]
         attr_accessor :route_action
@@ -10126,13 +10525,14 @@ module Google
       
         # Opaque filter criteria used by Loadbalancer to restrict routing configuration
         # to a limited set of xDS compliant clients. In their xDS requests to
-        # Loadbalancer, xDS clients present node metadata. If a match takes place, the
+        # Loadbalancer, xDS clients present node metadata. When there is a match, the
         # relevant routing configuration is made available to those proxies.
         # For each metadataFilter in this list, if its filterMatchCriteria is set to
         # MATCH_ANY, at least one of the filterLabels must match the corresponding label
         # provided in the metadata. If its filterMatchCriteria is set to MATCH_ALL, then
         # all of its filterLabels must match with corresponding labels provided in the
-        # metadata.
+        # metadata. If multiple metadataFilters are specified, all of them need to be
+        # satisfied in order to be considered a match.
         # metadataFilters specified here will be applied after those specified in
         # ForwardingRule that refers to the UrlMap this HttpRouteRuleMatch belongs to.
         # metadataFilters only applies to Loadbalancers that have their
@@ -10459,7 +10859,14 @@ module Google
         # @return [Fixnum]
         attr_accessor :id
       
-        # Represents a customer-supplied encryption key
+        # Encrypts the image using a customer-supplied encryption key.
+        # After you encrypt an image with a customer-supplied key, you must provide the
+        # same key if you use the image later (e.g. to create a disk from the image).
+        # Customer-supplied encryption keys do not protect access to metadata of the
+        # disk.
+        # If you do not provide an encryption key when creating the image, then the disk
+        # will be encrypted using an automatically generated key and you do not need to
+        # provide a key to use the image later.
         # Corresponds to the JSON property `imageEncryptionKey`
         # @return [Google::Apis::ComputeBeta::CustomerEncryptionKey]
         attr_accessor :image_encryption_key
@@ -10534,7 +10941,8 @@ module Google
         # @return [String]
         attr_accessor :source_disk
       
-        # Represents a customer-supplied encryption key
+        # The customer-supplied encryption key of the source disk. Required if the
+        # source disk is protected by a customer-supplied encryption key.
         # Corresponds to the JSON property `sourceDiskEncryptionKey`
         # @return [Google::Apis::ComputeBeta::CustomerEncryptionKey]
         attr_accessor :source_disk_encryption_key
@@ -10557,7 +10965,8 @@ module Google
         # @return [String]
         attr_accessor :source_image
       
-        # Represents a customer-supplied encryption key
+        # The customer-supplied encryption key of the source image. Required if the
+        # source image is protected by a customer-supplied encryption key.
         # Corresponds to the JSON property `sourceImageEncryptionKey`
         # @return [Google::Apis::ComputeBeta::CustomerEncryptionKey]
         attr_accessor :source_image_encryption_key
@@ -10581,7 +10990,8 @@ module Google
         # @return [String]
         attr_accessor :source_snapshot
       
-        # Represents a customer-supplied encryption key
+        # The customer-supplied encryption key of the source snapshot. Required if the
+        # source snapshot is protected by a customer-supplied encryption key.
         # Corresponds to the JSON property `sourceSnapshotEncryptionKey`
         # @return [Google::Apis::ComputeBeta::CustomerEncryptionKey]
         attr_accessor :source_snapshot_encryption_key
@@ -11063,7 +11473,7 @@ module Google
         # @return [String]
         attr_accessor :source_machine_image
       
-        # Represents a customer-supplied encryption key
+        # Source GMI encryption key when creating an instance from GMI.
         # Corresponds to the JSON property `sourceMachineImageEncryptionKey`
         # @return [Google::Apis::ComputeBeta::CustomerEncryptionKey]
         attr_accessor :source_machine_image_encryption_key
@@ -14196,7 +14606,11 @@ module Google
         # @return [Array<Google::Apis::ComputeBeta::CustomerEncryptionKeyProtectedDisk>]
         attr_accessor :disks
       
-        # Represents a customer-supplied encryption key
+        # Decrypts data associated with an instance that is protected with a customer-
+        # supplied encryption key.
+        # If the instance you are starting is protected with a customer-supplied
+        # encryption key, the correct key must be provided otherwise the instance resume
+        # will not succeed.
         # Corresponds to the JSON property `instanceEncryptionKey`
         # @return [Google::Apis::ComputeBeta::CustomerEncryptionKey]
         attr_accessor :instance_encryption_key
@@ -16227,6 +16641,37 @@ module Google
         end
       end
       
+      # Commitment for a particular license resource.
+      class LicenseResourceCommitment
+        include Google::Apis::Core::Hashable
+      
+        # The number of licenses purchased.
+        # Corresponds to the JSON property `amount`
+        # @return [Fixnum]
+        attr_accessor :amount
+      
+        # Specifies the core range of the instance for which this license applies.
+        # Corresponds to the JSON property `coresPerLicense`
+        # @return [String]
+        attr_accessor :cores_per_license
+      
+        # Any applicable license URI.
+        # Corresponds to the JSON property `license`
+        # @return [String]
+        attr_accessor :license
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @amount = args[:amount] if args.key?(:amount)
+          @cores_per_license = args[:cores_per_license] if args.key?(:cores_per_license)
+          @license = args[:license] if args.key?(:license)
+        end
+      end
+      
       # 
       class LicenseResourceRequirements
         include Google::Apis::Core::Hashable
@@ -16565,7 +17010,16 @@ module Google
         # @return [String]
         attr_accessor :kind
       
-        # Represents a customer-supplied encryption key
+        # Encrypts the machine image using a customer-supplied encryption key.
+        # After you encrypt a machine image using a customer-supplied key, you must
+        # provide the same key if you use the machine image later. For example, you must
+        # provide the encryption key when you create an instance from the encrypted
+        # machine image in a future request.
+        # Customer-supplied encryption keys do not protect access to metadata of the
+        # machine image.
+        # If you do not provide an encryption key when creating the machine image, then
+        # the machine image will be encrypted using an automatically generated key and
+        # you do not need to provide a key to use the machine image later.
         # Corresponds to the JSON property `machineImageEncryptionKey`
         # @return [Google::Apis::ComputeBeta::CustomerEncryptionKey]
         attr_accessor :machine_image_encryption_key
@@ -17774,10 +18228,11 @@ module Google
       # Represents a collection of network endpoints.
       # A network endpoint group (NEG) defines how a set of endpoints should be
       # reached, whether they are reachable, and where they are located. For more
-      # information about using NEGs, see  Setting up internet NEGs or  Setting up
-      # zonal NEGs. (== resource_for `$api_version`.networkEndpointGroups ==) (==
-      # resource_for `$api_version`.globalNetworkEndpointGroups ==) (== resource_for `$
-      # api_version`.regionNetworkEndpointGroups ==)
+      # information about using NEGs, see  Setting up internet NEGs,  Setting up zonal
+      # NEGs, or  Setting up serverless NEGs. (== resource_for `$api_version`.
+      # networkEndpointGroups ==) (== resource_for `$api_version`.
+      # globalNetworkEndpointGroups ==) (== resource_for `$api_version`.
+      # regionNetworkEndpointGroups ==)
       class NetworkEndpointGroup
         include Google::Apis::Core::Hashable
       
@@ -17863,7 +18318,9 @@ module Google
         # @return [String]
         attr_accessor :network
       
-        # Type of network endpoints in this network endpoint group.
+        # Type of network endpoints in this network endpoint group. Can be one of
+        # GCE_VM_IP_PORT, NON_GCP_PRIVATE_IP_PORT, INTERNET_FQDN_PORT, INTERNET_IP_PORT,
+        # or SERVERLESS.
         # Corresponds to the JSON property `networkEndpointType`
         # @return [String]
         attr_accessor :network_endpoint_type
@@ -19166,7 +19623,9 @@ module Google
         attr_accessor :kind
       
         # Specifies how to handle instances when a node in the group undergoes
-        # maintenance.
+        # maintenance. Set to one of: DEFAULT, RESTART_IN_PLACE, or
+        # MIGRATE_WITHIN_NODE_GROUP. The default value is DEFAULT. For more information,
+        # see  Maintenance policies.
         # Corresponds to the JSON property `maintenancePolicy`
         # @return [String]
         attr_accessor :maintenance_policy
@@ -19362,7 +19821,8 @@ module Google
         # @return [Fixnum]
         attr_accessor :min_nodes
       
-        # The autoscaling mode.
+        # The autoscaling mode. Set to one of: ON, OFF, or ONLY_SCALE_OUT. For more
+        # information, see  Autoscaler modes.
         # Corresponds to the JSON property `mode`
         # @return [String]
         attr_accessor :mode
@@ -22411,6 +22871,8 @@ module Google
         # Only one of defaultRouteAction or defaultUrlRedirect must be set.
         # UrlMaps for external HTTP(S) load balancers support only the urlRewrite action
         # within a pathMatcher's defaultRouteAction.
+        # Not supported when the backend service is referenced by a URL map that is
+        # bound to target gRPC proxy that has validateForProxyless field set to true.
         # Corresponds to the JSON property `defaultRouteAction`
         # @return [Google::Apis::ComputeBeta::HttpRouteAction]
         attr_accessor :default_route_action
@@ -22433,6 +22895,8 @@ module Google
         # the specified resource default_service:
         # - compute.backendBuckets.use
         # - compute.backendServices.use
+        # pathMatchers[].defaultService is the only option available when the URL map is
+        # bound to target gRPC proxy that has validateForProxyless field set to true.
         # Corresponds to the JSON property `defaultService`
         # @return [String]
         attr_accessor :default_service
@@ -22466,6 +22930,8 @@ module Google
         # For example: a pathRule with a path /a/b/c/* will match before /a/b/*
         # irrespective of the order in which those paths appear in this list.
         # Within a given pathMatcher, only one of pathRules or routeRules must be set.
+        # Not supported when the backend service is referenced by a URL map that is
+        # bound to target gRPC proxy that has validateForProxyless field set to true.
         # Corresponds to the JSON property `pathRules`
         # @return [Array<Google::Apis::ComputeBeta::PathRule>]
         attr_accessor :path_rules
@@ -22474,6 +22940,8 @@ module Google
         # route matching and routing actions are desired. routeRules are evaluated in
         # order of priority, from the lowest to highest number.
         # Within a given pathMatcher, you can set only one of pathRules or routeRules.
+        # Not supported when the backend service is referenced by a URL map that is
+        # bound to target gRPC proxy that has validateForProxyless field set to true.
         # Corresponds to the JSON property `routeRules`
         # @return [Array<Google::Apis::ComputeBeta::HttpRouteRule>]
         attr_accessor :route_rules
@@ -22868,7 +23336,8 @@ module Google
         attr_accessor :usage_export_location
       
         # [Output Only] The role this project has in a shared VPC configuration.
-        # Currently only HOST projects are differentiated.
+        # Currently, only projects with the host role, which is specified by the value
+        # HOST, are differentiated.
         # Corresponds to the JSON property `xpnProjectStatus`
         # @return [String]
         attr_accessor :xpn_project_status
@@ -23792,7 +24261,7 @@ module Google
         end
       end
       
-      # InstanceGroupManagers.applyUpdatesToInstances
+      # RegionInstanceGroupManagers.applyUpdatesToInstances
       class RegionInstanceGroupManagersApplyUpdatesRequest
         include Google::Apis::Core::Hashable
       
@@ -24550,6 +25019,10 @@ module Google
         # Traffic Director.
         # * urlMaps are used by external HTTP(S) load balancers and Traffic Director. *
         # regionUrlMaps are used by internal HTTP(S) load balancers.
+        # For a list of supported URL map features by load balancer type, see the  Load
+        # balancing features: Routing and traffic management table.
+        # For a list of supported URL map features for Traffic Director, see the
+        # Traffic Director features: Routing and traffic management table.
         # This resource defines mappings from host names and URL paths to either a
         # backend service or a backend bucket.
         # To use the global urlMaps resource, the backend service must have a
@@ -27487,7 +27960,7 @@ module Google
         # @return [String]
         attr_accessor :device_name
       
-        # Represents a customer-supplied encryption key
+        # The encryption key for the disk.
         # Corresponds to the JSON property `diskEncryptionKey`
         # @return [Google::Apis::ComputeBeta::CustomerEncryptionKey]
         attr_accessor :disk_encryption_key
@@ -28229,7 +28702,7 @@ module Google
         # @return [Array<Google::Apis::ComputeBeta::SecurityPolicyRuleMatcherConfigLayer4Config>]
         attr_accessor :layer4_configs
       
-        # CIDR IP address range.
+        # CIDR IP address range. Maximum number of src_ip_ranges allowed is 10.
         # Corresponds to the JSON property `srcIpRanges`
         # @return [Array<String>]
         attr_accessor :src_ip_ranges
@@ -28292,6 +28765,7 @@ module Google
         # clientTlsPolicy only applies to a global BackendService with the
         # loadBalancingScheme set to INTERNAL_SELF_MANAGED.
         # If left blank, communications are not encrypted.
+        # Note: This field currently has no impact.
         # Corresponds to the JSON property `clientTlsPolicy`
         # @return [String]
         attr_accessor :client_tls_policy
@@ -28308,6 +28782,7 @@ module Google
         # Only applies to a global BackendService with loadBalancingScheme set to
         # INTERNAL_SELF_MANAGED. Only applies when BackendService has an attached
         # clientTlsPolicy with clientCertificate (mTLS mode).
+        # Note: This field currently has no impact.
         # Corresponds to the JSON property `subjectAltNames`
         # @return [Array<String>]
         attr_accessor :subject_alt_names
@@ -28775,7 +29250,16 @@ module Google
         # @return [String]
         attr_accessor :self_link
       
-        # Represents a customer-supplied encryption key
+        # Encrypts the snapshot using a customer-supplied encryption key.
+        # After you encrypt a snapshot using a customer-supplied key, you must provide
+        # the same key if you use the snapshot later. For example, you must provide the
+        # encryption key when you create a disk from the encrypted snapshot in a future
+        # request.
+        # Customer-supplied encryption keys do not protect access to metadata of the
+        # snapshot.
+        # If you do not provide an encryption key when creating the snapshot, then the
+        # snapshot will be encrypted using an automatically generated key and you do not
+        # need to provide a key to use the snapshot later.
         # Corresponds to the JSON property `snapshotEncryptionKey`
         # @return [Google::Apis::ComputeBeta::CustomerEncryptionKey]
         attr_accessor :snapshot_encryption_key
@@ -28785,7 +29269,8 @@ module Google
         # @return [String]
         attr_accessor :source_disk
       
-        # Represents a customer-supplied encryption key
+        # The customer-supplied encryption key of the source disk. Required if the
+        # source disk is protected by a customer-supplied encryption key.
         # Corresponds to the JSON property `sourceDiskEncryptionKey`
         # @return [Google::Apis::ComputeBeta::CustomerEncryptionKey]
         attr_accessor :source_disk_encryption_key
@@ -28975,7 +29460,8 @@ module Google
       class SourceDiskEncryptionKey
         include Google::Apis::Core::Hashable
       
-        # Represents a customer-supplied encryption key
+        # The customer-supplied encryption key of the source disk. Required if the
+        # source disk is protected by a customer-supplied encryption key.
         # Corresponds to the JSON property `diskEncryptionKey`
         # @return [Google::Apis::ComputeBeta::CustomerEncryptionKey]
         attr_accessor :disk_encryption_key
@@ -30165,16 +30651,6 @@ module Google
         # @return [String]
         attr_accessor :private_ipv6_google_access
       
-        # Deprecated in favor of enable PrivateIpv6GoogleAccess on instance directly.
-        # The service accounts can be used to selectively turn on Private IPv6 Google
-        # Access only on the VMs primary service account matching the value. This value
-        # only takes effect when PrivateIpv6GoogleAccess is
-        # ENABLE_OUTBOUND_VM_ACCESS_TO_GOOGLE_FOR_SERVICE_ACCOUNTS or
-        # ENABLE_BIDIRECTIONAL_ACCESS_TO_GOOGLE_FOR_SERVICE_ACCOUNTS.
-        # Corresponds to the JSON property `privateIpv6GoogleAccessServiceAccounts`
-        # @return [Array<String>]
-        attr_accessor :private_ipv6_google_access_service_accounts
-      
         # The purpose of the resource. This field can be either PRIVATE_RFC_1918 or
         # INTERNAL_HTTPS_LOAD_BALANCER. A subnetwork with purpose set to
         # INTERNAL_HTTPS_LOAD_BALANCER is a user-created subnetwork that is reserved for
@@ -30245,7 +30721,6 @@ module Google
           @network = args[:network] if args.key?(:network)
           @private_ip_google_access = args[:private_ip_google_access] if args.key?(:private_ip_google_access)
           @private_ipv6_google_access = args[:private_ipv6_google_access] if args.key?(:private_ipv6_google_access)
-          @private_ipv6_google_access_service_accounts = args[:private_ipv6_google_access_service_accounts] if args.key?(:private_ipv6_google_access_service_accounts)
           @purpose = args[:purpose] if args.key?(:purpose)
           @region = args[:region] if args.key?(:region)
           @role = args[:role] if args.key?(:role)
@@ -30817,7 +31292,7 @@ module Google
       # A target gRPC proxy is a component of load balancers intended for load
       # balancing gRPC traffic. Global forwarding rules reference a target gRPC proxy.
       # The Target gRPC Proxy references a URL map which specifies how traffic routes
-      # to gRPC backend services.
+      # to gRPC backend services. (== resource_for `$api_version`.targetGrpcProxies ==)
       class TargetGrpcProxy
         include Google::Apis::Core::Hashable
       
@@ -30884,12 +31359,11 @@ module Google
         # If true, indicates that the BackendServices referenced by the urlMap may be
         # accessed by gRPC applications without using a sidecar proxy. This will enable
         # configuration checks on urlMap and its referenced BackendServices to not allow
-        # unsupported features. A gRPC application must use "xds-experimental:///"
-        # scheme in the target URI of the service it is connecting to. If false,
-        # indicates that the BackendServices referenced by the urlMap will be accessed
-        # by gRPC applications via a sidecar proxy. In this case, a gRPC application
-        # must not use "xds-experimental:///" scheme in the target URI of the service it
-        # is connecting to
+        # unsupported features. A gRPC application must use "xds:///" scheme in the
+        # target URI of the service it is connecting to. If false, indicates that the
+        # BackendServices referenced by the urlMap will be accessed by gRPC applications
+        # via a sidecar proxy. In this case, a gRPC application must not use "xds:///"
+        # scheme in the target URI of the service it is connecting to
         # Corresponds to the JSON property `validateForProxyless`
         # @return [Boolean]
         attr_accessor :validate_for_proxyless
@@ -31610,6 +32084,7 @@ module Google
         # authorizationPolicy only applies to a global TargetHttpsProxy attached to
         # globalForwardingRules with the loadBalancingScheme set to
         # INTERNAL_SELF_MANAGED.
+        # Note: This field currently has no impact.
         # Corresponds to the JSON property `authorizationPolicy`
         # @return [String]
         attr_accessor :authorization_policy
@@ -31685,6 +32160,7 @@ module Google
         # globalForwardingRules with the loadBalancingScheme set to
         # INTERNAL_SELF_MANAGED.
         # If left blank, communications are not encrypted.
+        # Note: This field currently has no impact.
         # Corresponds to the JSON property `serverTlsPolicy`
         # @return [String]
         attr_accessor :server_tls_policy
@@ -32033,6 +32509,13 @@ module Google
         # @return [String]
         attr_accessor :nat_policy
       
+        # The URL of the network this target instance uses to forward traffic. If not
+        # specified, the traffic will be forwarded to the network that the default
+        # network interface belongs to.
+        # Corresponds to the JSON property `network`
+        # @return [String]
+        attr_accessor :network
+      
         # [Output Only] Server-defined URL for the resource.
         # Corresponds to the JSON property `selfLink`
         # @return [String]
@@ -32058,6 +32541,7 @@ module Google
           @kind = args[:kind] if args.key?(:kind)
           @name = args[:name] if args.key?(:name)
           @nat_policy = args[:nat_policy] if args.key?(:nat_policy)
+          @network = args[:network] if args.key?(:network)
           @self_link = args[:self_link] if args.key?(:self_link)
           @zone = args[:zone] if args.key?(:zone)
         end
@@ -32440,7 +32924,7 @@ module Google
       
         # The URL of the HttpHealthCheck resource. A member instance in this pool is
         # considered healthy if and only if the health checks pass. An empty list means
-        # all member instances will be considered healthy at all times. Only
+        # all member instances will be considered healthy at all times. Only legacy
         # HttpHealthChecks are supported. Only one health check may be specified.
         # Corresponds to the JSON property `healthChecks`
         # @return [Array<String>]
@@ -33998,6 +34482,10 @@ module Google
       # Traffic Director.
       # * urlMaps are used by external HTTP(S) load balancers and Traffic Director. *
       # regionUrlMaps are used by internal HTTP(S) load balancers.
+      # For a list of supported URL map features by load balancer type, see the  Load
+      # balancing features: Routing and traffic management table.
+      # For a list of supported URL map features for Traffic Director, see the
+      # Traffic Director features: Routing and traffic management table.
       # This resource defines mappings from host names and URL paths to either a
       # backend service or a backend bucket.
       # To use the global urlMaps resource, the backend service must have a
@@ -34021,6 +34509,9 @@ module Google
         # Only one of defaultRouteAction or defaultUrlRedirect must be set.
         # UrlMaps for external HTTP(S) load balancers support only the urlRewrite action
         # within defaultRouteAction.
+        # defaultRouteAction has no effect when the backend service is referenced by a
+        # URL map that is bound to target gRPC proxy that has validateForProxyless field
+        # set to true.
         # Corresponds to the JSON property `defaultRouteAction`
         # @return [Google::Apis::ComputeBeta::HttpRouteAction]
         attr_accessor :default_route_action
@@ -34034,6 +34525,9 @@ module Google
         # specified.
         # Only one of defaultService, defaultUrlRedirect  or defaultRouteAction.
         # weightedBackendService must be set.
+        # defaultService has no effect when the backend service is referenced by a URL
+        # map that is bound to target gRPC proxy that has validateForProxyless field set
+        # to true.
         # Corresponds to the JSON property `defaultService`
         # @return [String]
         attr_accessor :default_service
@@ -34112,6 +34606,8 @@ module Google
         # The list of expected URL mapping tests. Request to update this UrlMap will
         # succeed only if all of the test cases pass. You can specify a maximum of 100
         # tests per UrlMap.
+        # Not supported when the backend service is referenced by a URL map that is
+        # bound to target gRPC proxy that has validateForProxyless field set to true.
         # Corresponds to the JSON property `tests`
         # @return [Array<Google::Apis::ComputeBeta::UrlMapTest>]
         attr_accessor :tests
@@ -34574,6 +35070,10 @@ module Google
         # Traffic Director.
         # * urlMaps are used by external HTTP(S) load balancers and Traffic Director. *
         # regionUrlMaps are used by internal HTTP(S) load balancers.
+        # For a list of supported URL map features by load balancer type, see the  Load
+        # balancing features: Routing and traffic management table.
+        # For a list of supported URL map features for Traffic Director, see the
+        # Traffic Director features: Routing and traffic management table.
         # This resource defines mappings from host names and URL paths to either a
         # backend service or a backend bucket.
         # To use the global urlMaps resource, the backend service must have a
@@ -35655,7 +36155,7 @@ module Google
       end
       
       # Represents a Cloud VPN Tunnel resource.
-      # For more information about VPN, read the the Cloud VPN Overview. (==
+      # For more information about VPN, read the  the Cloud VPN Overview. (==
       # resource_for `$api_version`.vpnTunnels ==)
       class VpnTunnel
         include Google::Apis::Core::Hashable