google-api-client 0.47.0 → 0.52.0

data/generated/google/apis/compute_beta/service.rb

@@ -8553,8 +8553,9 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Modifies the autohealing policies. [Deprecated] This method is deprecated.
-        # Please use Patch instead.
+        # Motifies the autohealing policy for the instances in this managed instance
+        # group. [Deprecated] This method is deprecated. Use instanceGroupManagers.patch
+        # instead.
         # @param [String] project
         #   Project ID for this request.
         # @param [String] zone
@@ -8610,7 +8611,8 @@ module Google
         
         # Specifies the instance template to use when creating new instances in this
         # group. The templates for existing instances in the group do not change unless
-        # you recreate them.
+        # you run recreateInstances, run applyUpdatesToInstances, or set the group's
+        # updatePolicy.type to PROACTIVE.
         # @param [String] project
         #   Project ID for this request.
         # @param [String] zone
@@ -10613,9 +10615,9 @@ module Google
         #   - projects/project/global/instanceTemplates/instanceTemplate
         #   - global/instanceTemplates/instanceTemplate
         # @param [String] source_machine_image
-        #   Specifies instance machine to create the instance.
+        #   Specifies the machine image to use to create the instance.
         #   This field is optional. It can be a full or partial URL. For example, the
-        #   following are all valid URLs to an instance template:
+        #   following are all valid URLs to a machine image:
         #   - https://www.googleapis.com/compute/v1/projects/project/global/global/
         #   machineImages/machineImage
         #   - projects/project/global/global/machineImages/machineImage
@@ -16774,7 +16776,7 @@ module Google
         # @param [Boolean] replace_existing_association
         #   Indicates whether or not to replace it if an association of the attachment
         #   already exists. This is false by default, in which case an error will be
-        #   returned if an assocation already exists.
+        #   returned if an association already exists.
         # @param [String] request_id
         #   An optional request ID to identify requests. Specify a unique request ID so
         #   that if you must retry your request, the server will know to ignore the
@@ -21783,9 +21785,9 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Insert or patch (for the ones that already exist) per-instance configs for the
-        # managed instance group. perInstanceConfig.instance serves as a key used to
-        # distinguish whether to perform insert or patch.
+        # Inserts or patches per-instance configs for the managed instance group.
+        # perInstanceConfig.name serves as a key used to distinguish whether to perform
+        # insert or patch.
         # @param [String] project
         #   Project ID for this request.
         # @param [String] region
@@ -21965,7 +21967,8 @@ module Google
         end
         
         # Modifies the autohealing policy for the instances in this managed instance
-        # group. [Deprecated] This method is deprecated. Please use Patch instead.
+        # group. [Deprecated] This method is deprecated. Use regionInstanceGroupManagers.
+        # patch instead.
         # @param [String] project
         #   Project ID for this request.
         # @param [String] region
@@ -22229,9 +22232,9 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Insert or update (for the ones that already exist) per-instance configs for
-        # the managed instance group. perInstanceConfig.instance serves as a key used to
-        # distinguish whether to perform insert or patch.
+        # Inserts or updates per-instance configs for the managed instance group.
+        # perInstanceConfig.name serves as a key used to distinguish whether to perform
+        # insert or patch.
         # @param [String] project
         #   Project ID for this request.
         # @param [String] region
@@ -24192,6 +24195,8 @@ module Google
         
         # Initiates a cache invalidation operation, invalidating the specified path,
         # scoped to the specified UrlMap.
+        # For more information, see [Invalidating cached content](/cdn/docs/invalidating-
+        # cached-content).
         # @param [String] project
         #   Project ID for this request.
         # @param [String] region
@@ -26724,7 +26729,9 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Patches the specified policy with the data included in the request.
+        # Patches the specified policy with the data included in the request. This
+        # cannot be used to be update the rules in the policy. Please use the per rule
+        # methods like addRule, patchRule, and removeRule instead.
         # @param [String] project
         #   Project ID for this request.
         # @param [String] security_policy
@@ -28499,7 +28506,7 @@ module Google
         end
         
         # Patches the specified subnetwork with the data included in the request. Only
-        # certain fields can up updated with a patch request as indicated in the field
+        # certain fields can be updated with a patch request as indicated in the field
         # descriptions. You must specify the current fingerprint of the subnetwork
         # resource being patched.
         # @param [String] project
@@ -32344,6 +32351,8 @@ module Google
         
         # Initiates a cache invalidation operation, invalidating the specified path,
         # scoped to the specified UrlMap.
+        # For more information, see [Invalidating cached content](/cdn/docs/invalidating-
+        # cached-content).
         # @param [String] project
         #   Project ID for this request.
         # @param [String] url_map

data/generated/google/apis/compute_v1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://developers.google.com/compute/docs/reference/latest/
     module ComputeV1
       VERSION = 'V1'
-      REVISION = '20201005'
+      REVISION = '20201122'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/compute_v1/classes.rb

@@ -629,9 +629,9 @@ module Google
         # - `VPC_PEERING` for addresses that are reserved for VPC peer networks.
         # - `NAT_AUTO` for addresses that are external IP addresses automatically
         # reserved for Cloud NAT.
-        # - `IPSEC_INTERCONNECT` for addresses created from a private IP range reserved
-        # for a VLAN attachment in an IPsec over Interconnect configuration. These
-        # addresses are regional resources.
+        # - `IPSEC_INTERCONNECT` for addresses created from a private IP range that are
+        # reserved for a VLAN attachment in an IPsec encrypted Interconnect
+        # configuration. These addresses are regional resources.
         # Corresponds to the JSON property `purpose`
         # @return [String]
         attr_accessor :purpose
@@ -1542,8 +1542,8 @@ module Google
       
       # Represents an Autoscaler resource.
       # Google Compute Engine has two Autoscaler resources:
-      # * [Global](/compute/docs/reference/rest/`$api_version`/autoscalers) * [
-      # Regional](/compute/docs/reference/rest/`$api_version`/regionAutoscalers)
+      # * [Zonal](/compute/docs/reference/rest/`$api_version`/autoscalers) * [Regional]
+      # (/compute/docs/reference/rest/`$api_version`/regionAutoscalers)
       # Use autoscalers to automatically add or delete instances from a managed
       # instance group according to your defined autoscaling policy. For more
       # information, read Autoscaling Groups of Instances.
@@ -1592,10 +1592,10 @@ module Google
         attr_accessor :name
       
         # [Output Only] Target recommended MIG size (number of instances) computed by
-        # autoscaler. Autoscaler calculates recommended MIG size even when autoscaling
-        # policy mode is different from ON. This field is empty when autoscaler is not
-        # connected to the existing managed instance group or autoscaler did not
-        # generate its prediction.
+        # autoscaler. Autoscaler calculates the recommended MIG size even when the
+        # autoscaling policy mode is different from ON. This field is empty when
+        # autoscaler is not connected to an existing managed instance group or
+        # autoscaler did not generate its prediction.
         # Corresponds to the JSON property `recommendedSize`
         # @return [Fixnum]
         attr_accessor :recommended_size
@@ -1630,7 +1630,8 @@ module Google
         # @return [Array<Google::Apis::ComputeV1::AutoscalerStatusDetails>]
         attr_accessor :status_details
       
-        # URL of the managed instance group that this autoscaler will scale.
+        # URL of the managed instance group that this autoscaler will scale. This field
+        # is required when creating an autoscaler.
         # Corresponds to the JSON property `target`
         # @return [String]
         attr_accessor :target
@@ -1937,7 +1938,7 @@ module Google
         # - MODE_OFF (WARNING): Autoscaling is turned off. The number of instances in
         # the group won't change automatically. The autoscaling configuration is
         # preserved.
-        # - MODE_ONLY_UP (WARNING): Autoscaling is in the "Autoscale only up" mode. The
+        # - MODE_ONLY_UP (WARNING): Autoscaling is in the "Autoscale only out" mode. The
         # autoscaler can add instances but not remove any.
         # - MORE_THAN_ONE_BACKEND_SERVICE (ERROR): The instance group cannot be
         # autoscaled because it has more than one backend service attached to it.
@@ -2063,11 +2064,10 @@ module Google
       class AutoscalingPolicy
         include Google::Apis::Core::Hashable
       
-        # The number of seconds that the autoscaler should wait before it starts
-        # collecting information from a new instance. This prevents the autoscaler from
-        # collecting information when the instance is initializing, during which the
-        # collected usage would not be reliable. The default time autoscaler waits is 60
-        # seconds.
+        # The number of seconds that the autoscaler waits before it starts collecting
+        # information from a new instance. This prevents the autoscaler from collecting
+        # information when the instance is initializing, during which the collected
+        # usage would not be reliable. The default time autoscaler waits is 60 seconds.
         # Virtual machine initialization times might vary because of numerous factors.
         # We recommend that you test how long an instance may take to initialize. To do
         # this, create an instance and time the startup process.
@@ -2090,15 +2090,15 @@ module Google
         # @return [Google::Apis::ComputeV1::AutoscalingPolicyLoadBalancingUtilization]
         attr_accessor :load_balancing_utilization
       
-        # The maximum number of instances that the autoscaler can scale up to. This is
+        # The maximum number of instances that the autoscaler can scale out to. This is
         # required when creating or updating an autoscaler. The maximum number of
-        # replicas should not be lower than minimal number of replicas.
+        # replicas must not be lower than minimal number of replicas.
         # Corresponds to the JSON property `maxNumReplicas`
         # @return [Fixnum]
         attr_accessor :max_num_replicas
       
-        # The minimum number of replicas that the autoscaler can scale down to. This
-        # cannot be less than 0. If not provided, autoscaler will choose a default value
+        # The minimum number of replicas that the autoscaler can scale in to. This
+        # cannot be less than 0. If not provided, autoscaler chooses a default value
         # depending on maximum number of instances allowed.
         # Corresponds to the JSON property `minNumReplicas`
         # @return [Fixnum]
@@ -2137,13 +2137,13 @@ module Google
       class AutoscalingPolicyCpuUtilization
         include Google::Apis::Core::Hashable
       
-        # The target CPU utilization that the autoscaler should maintain. Must be a
-        # float value in the range (0, 1]. If not specified, the default is 0.6.
-        # If the CPU level is below the target utilization, the autoscaler scales down
-        # the number of instances until it reaches the minimum number of instances you
+        # The target CPU utilization that the autoscaler maintains. Must be a float
+        # value in the range (0, 1]. If not specified, the default is 0.6.
+        # If the CPU level is below the target utilization, the autoscaler scales in the
+        # number of instances until it reaches the minimum number of instances you
         # specified or until the average CPU of your instances reaches the target
         # utilization.
-        # If the average CPU is above the target utilization, the autoscaler scales up
+        # If the average CPU is above the target utilization, the autoscaler scales out
         # until it reaches the maximum number of instances you specified or until the
         # average utilization reaches the target utilization.
         # Corresponds to the JSON property `utilizationTarget`
@@ -2164,6 +2164,36 @@ module Google
       class AutoscalingPolicyCustomMetricUtilization
         include Google::Apis::Core::Hashable
       
+        # A filter string, compatible with a Stackdriver Monitoring filter string for
+        # TimeSeries.list API call. This filter is used to select a specific TimeSeries
+        # for the purpose of autoscaling and to determine whether the metric is
+        # exporting per-instance or per-group data.
+        # For the filter to be valid for autoscaling purposes, the following rules apply:
+        # 
+        # - You can only use the AND operator for joining selectors.
+        # - You can only use direct equality comparison operator (=) without any
+        # functions for each selector.
+        # - You can specify the metric in both the filter string and in the metric field.
+        # However, if specified in both places, the metric must be identical.
+        # - The monitored resource type determines what kind of values are expected for
+        # the metric. If it is a gce_instance, the autoscaler expects the metric to
+        # include a separate TimeSeries for each instance in a group. In such a case,
+        # you cannot filter on resource labels.
+        # If the resource type is any other value, the autoscaler expects this metric to
+        # contain values that apply to the entire autoscaled instance group and resource
+        # label filtering can be performed to point autoscaler at the correct TimeSeries
+        # to scale upon. This is called a per-group metric for the purpose of
+        # autoscaling.
+        # If not specified, the type defaults to gce_instance.
+        # Try to provide a filter that is selective enough to pick just one TimeSeries
+        # for the autoscaled group or for each of the instances (if you are using
+        # gce_instance resource type). If multiple TimeSeries are returned upon the
+        # query execution, the autoscaler will sum their respective values to obtain its
+        # scaling value.
+        # Corresponds to the JSON property `filter`
+        # @return [String]
+        attr_accessor :filter
+      
         # The identifier (type) of the Stackdriver Monitoring metric. The metric cannot
         # have negative values.
         # The metric must have a value type of INT64 or DOUBLE.
@@ -2171,12 +2201,27 @@ module Google
         # @return [String]
         attr_accessor :metric
       
-        # The target value of the metric that autoscaler should maintain. This must be a
+        # If scaling is based on a per-group metric value that represents the total
+        # amount of work to be done or resource usage, set this value to an amount
+        # assigned for a single instance of the scaled group. Autoscaler keeps the
+        # number of instances proportional to the value of this metric. The metric
+        # itself does not change value due to group resizing.
+        # A good metric to use with the target is for example pubsub.googleapis.com/
+        # subscription/num_undelivered_messages or a custom metric exporting the total
+        # number of requests coming to your instances.
+        # A bad example would be a metric exporting an average or median latency, since
+        # this value can't include a chunk assignable to a single instance, it could be
+        # better used with utilization_target instead.
+        # Corresponds to the JSON property `singleInstanceAssignment`
+        # @return [Float]
+        attr_accessor :single_instance_assignment
+      
+        # The target value of the metric that autoscaler maintains. This must be a
         # positive value. A utilization metric scales number of virtual machines
         # handling requests to increase or decrease proportionally to the metric.
         # For example, a good metric to use as a utilization_target is https://www.
         # googleapis.com/compute/v1/instance/network/received_bytes_count. The
-        # autoscaler will work to keep this value constant for each of the instances.
+        # autoscaler works to keep this value constant for each of the instances.
         # Corresponds to the JSON property `utilizationTarget`
         # @return [Float]
         attr_accessor :utilization_target
@@ -2193,7 +2238,9 @@ module Google
       
         # Update properties of this object
         def update!(**args)
+          @filter = args[:filter] if args.key?(:filter)
           @metric = args[:metric] if args.key?(:metric)
+          @single_instance_assignment = args[:single_instance_assignment] if args.key?(:single_instance_assignment)
           @utilization_target = args[:utilization_target] if args.key?(:utilization_target)
           @utilization_target_type = args[:utilization_target_type] if args.key?(:utilization_target_type)
         end
@@ -2204,7 +2251,7 @@ module Google
         include Google::Apis::Core::Hashable
       
         # Fraction of backend capacity utilization (set in HTTP(S) load balancing
-        # configuration) that autoscaler should maintain. Must be a positive float value.
+        # configuration) that the autoscaler maintains. Must be a positive float value.
         # If not defined, the default is 0.8.
         # Corresponds to the JSON property `utilizationTarget`
         # @return [Float]
@@ -2231,8 +2278,8 @@ module Google
         # @return [Google::Apis::ComputeV1::FixedOrPercent]
         attr_accessor :max_scaled_in_replicas
       
-        # How long back autoscaling should look when computing recommendations to
-        # include directives regarding slower scale in, as described above.
+        # How far back autoscaling looks when computing recommendations to include
+        # directives regarding slower scale in, as described above.
         # Corresponds to the JSON property `timeWindowSec`
         # @return [Fixnum]
         attr_accessor :time_window_sec
@@ -2266,21 +2313,22 @@ module Google
         # parameters: maxConnections (except for regional managed instance groups),
         # maxConnectionsPerInstance, or maxConnectionsPerEndpoint.
         # If the loadBalancingScheme for the backend service is INTERNAL (internal TCP/
-        # UDP load balancers), you cannot specify any additional parameters.
+        # UDP Load Balancers) or EXTERNAL  (Network Load Balancing), you cannot specify
+        # any additional parameters.
         # 
         # - If the load balancing mode is RATE, the load is spread based on the rate of
         # HTTP requests per second (RPS).
         # You can use the RATE balancing mode if the protocol for the backend service is
-        # HTTP or HTTPS. You must specify exactly one of the following parameters:
-        # maxRate (except for regional managed instance groups), maxRatePerInstance, or
-        # maxRatePerEndpoint.
+        # HTTP, HTTP2, or HTTPS. You must specify exactly one of the following
+        # parameters: maxRate (except for regional managed instance groups),
+        # maxRatePerInstance, or maxRatePerEndpoint.
         # 
         # - If the load balancing mode is UTILIZATION, the load is spread based on the
         # backend utilization of instances in an instance group.
         # You can use the UTILIZATION balancing mode if the loadBalancingScheme of the
-        # backend service is EXTERNAL, INTERNAL_SELF_MANAGED, or INTERNAL_MANAGED and
-        # the backends are instance groups. There are no restrictions on the backend
-        # service protocol.
+        # backend service is EXTERNAL (except Network Load Balancing),
+        # INTERNAL_SELF_MANAGED, or INTERNAL_MANAGED and the backends are instance
+        # groups. There are no restrictions on the backend service protocol.
         # Corresponds to the JSON property `balancingMode`
         # @return [String]
         attr_accessor :balancing_mode
@@ -2292,7 +2340,8 @@ module Google
         # available capacity. Valid range is 0.0 and [0.1,1.0]. You cannot configure a
         # setting larger than 0 and smaller than 0.1. You cannot configure a setting of
         # 0 when there is only one backend attached to the backend service.
-        # This cannot be used for internal load balancing.
+        # This cannot be used for Internal TCP/UDP Load Balancing and Network Load
+        # Balancing.
         # Corresponds to the JSON property `capacityScaler`
         # @return [Float]
         attr_accessor :capacity_scaler
@@ -2314,14 +2363,16 @@ module Google
         # resource. The type of backend that a backend service supports depends on the
         # backend service's loadBalancingScheme.
         # 
-        # - When the loadBalancingScheme for the backend service is EXTERNAL,
-        # INTERNAL_SELF_MANAGED, or INTERNAL_MANAGED, the backend can be either an
-        # instance group or a NEG. The backends on the backend service must be either
-        # all instance groups or all NEGs. You cannot mix instance group and NEG
-        # backends on the same backend service.
-        # - When the loadBalancingScheme for the backend service is INTERNAL, the
-        # backend must be an instance group in the same region as the backend service.
-        # NEGs are not supported.
+        # - When the loadBalancingScheme for the backend service is EXTERNAL (except
+        # Network Load Balancing),  INTERNAL_SELF_MANAGED, or INTERNAL_MANAGED , the
+        # backend can be either an instance group or a NEG. The backends on the backend
+        # service must be either all instance groups or all NEGs. You cannot mix
+        # instance group and NEG backends on the same backend service.
+        # - When the loadBalancingScheme for the backend service is EXTERNAL for Network
+        # Load Balancing or INTERNAL for Internal TCP/UDP Load Balancing, the backend
+        # must be an instance group. NEGs are not supported.
+        # For regional services, the backend must be in the same region as the backend
+        # service.
         # You must use the fully-qualified URL (starting with https://www.googleapis.com/
         # ) to specify the instance group or NEG. Partial URLs are not supported.
         # Corresponds to the JSON property `group`
@@ -2333,11 +2384,12 @@ module Google
         # except for regional managed instance groups). If the backend's balancingMode
         # is UTILIZATION, this is an optional parameter. If the backend's balancingMode
         # is CONNECTION, and backend is attached to a backend service whose
-        # loadBalancingScheme is EXTERNAL, you must specify either this parameter,
-        # maxConnectionsPerInstance, or maxConnectionsPerEndpoint.
-        # Not available if the backend's balancingMode is RATE. If the
-        # loadBalancingScheme is INTERNAL, then maxConnections is not supported, even
-        # though the backend requires a balancing mode of CONNECTION.
+        # loadBalancingScheme is EXTERNAL (except Network Load Balancing), you must
+        # specify either this parameter, maxConnectionsPerInstance, or
+        # maxConnectionsPerEndpoint.
+        # Not available if the backend's balancingMode is RATE. Cannot be specified for
+        # Network Load Balancing or Internal TCP/UDP Load Balancing, even though those
+        # load balancers require a balancing mode of CONNECTION.
         # Corresponds to the JSON property `maxConnections`
         # @return [Fixnum]
         attr_accessor :max_connections
@@ -2345,12 +2397,13 @@ module Google
         # Defines a target maximum number of simultaneous connections for an endpoint of
         # a NEG. This is multiplied by the number of endpoints in the NEG to implicitly
         # calculate a maximum number of target maximum simultaneous connections for the
-        # NEG. If the backend's balancingMode is CONNECTION, and the backend is attached
-        # to a backend service whose loadBalancingScheme is EXTERNAL, you must specify
-        # either this parameter, maxConnections, or maxConnectionsPerInstance.
-        # Not available if the backend's balancingMode is RATE. Internal TCP/UDP load
-        # balancing does not support setting maxConnectionsPerEndpoint even though its
-        # backends require a balancing mode of CONNECTION.
+        # NEG. If the backend's balancingMode is CONNECTION, and backend is attached to
+        # a backend service whose loadBalancingScheme is EXTERNAL (except Network Load
+        # Balancing), you must specify either this parameter, maxConnections, or
+        # maxConnectionsPerInstance.
+        # Not available if the backend's balancingMode is RATE. Cannot be specified for
+        # Network Load Balancing or Internal TCP/UDP Load Balancing, even though those
+        # load balancers require a balancing mode of CONNECTION.
         # Corresponds to the JSON property `maxConnectionsPerEndpoint`
         # @return [Fixnum]
         attr_accessor :max_connections_per_endpoint
@@ -2361,11 +2414,11 @@ module Google
         # connections for the whole instance group. If the backend's balancingMode is
         # UTILIZATION, this is an optional parameter. If the backend's balancingMode is
         # CONNECTION, and backend is attached to a backend service whose
-        # loadBalancingScheme is EXTERNAL, you must specify either this parameter,
-        # maxConnections, or maxConnectionsPerEndpoint.
-        # Not available if the backend's balancingMode is RATE. Internal TCP/UDP load
-        # balancing does not support setting maxConnectionsPerInstance even though its
-        # backends require a balancing mode of CONNECTION.
+        # loadBalancingScheme is EXTERNAL (except Network Load Balancing), you must
+        # specify either this parameter,  maxConnections, or maxConnectionsPerEndpoint.
+        # Not available if the backend's balancingMode is RATE. Cannot be specified for
+        # Network Load Balancing or Internal TCP/UDP Load Balancing, even though those
+        # load balancers require a balancing mode of CONNECTION.
         # Corresponds to the JSON property `maxConnectionsPerInstance`
         # @return [Fixnum]
         attr_accessor :max_connections_per_instance
@@ -2457,6 +2510,11 @@ module Google
         # @return [String]
         attr_accessor :creation_timestamp
       
+        # Headers that the HTTP/S load balancer should add to proxied responses.
+        # Corresponds to the JSON property `customResponseHeaders`
+        # @return [Array<String>]
+        attr_accessor :custom_response_headers
+      
         # An optional textual description of the resource; provided by the client when
         # the resource is created.
         # Corresponds to the JSON property `description`
@@ -2503,6 +2561,7 @@ module Google
           @bucket_name = args[:bucket_name] if args.key?(:bucket_name)
           @cdn_policy = args[:cdn_policy] if args.key?(:cdn_policy)
           @creation_timestamp = args[:creation_timestamp] if args.key?(:creation_timestamp)
+          @custom_response_headers = args[:custom_response_headers] if args.key?(:custom_response_headers)
           @description = args[:description] if args.key?(:description)
           @enable_cdn = args[:enable_cdn] if args.key?(:enable_cdn)
           @id = args[:id] if args.key?(:id)
@@ -2516,6 +2575,55 @@ module Google
       class BackendBucketCdnPolicy
         include Google::Apis::Core::Hashable
       
+        # Specifies the cache setting for all responses from this backend. The possible
+        # values are:
+        # USE_ORIGIN_HEADERS Requires the origin to set valid caching headers to cache
+        # content. Responses without these headers will not be cached at Google's edge,
+        # and will require a full trip to the origin on every request, potentially
+        # impacting performance and increasing load on the origin server.
+        # FORCE_CACHE_ALL Cache all content, ignoring any "private", "no-store" or "no-
+        # cache" directives in Cache-Control response headers. Warning: this may result
+        # in Cloud CDN caching private, per-user (user identifiable) content.
+        # CACHE_ALL_STATIC Automatically cache static content, including common image
+        # formats, media (video and audio), and web assets (JavaScript and CSS).
+        # Requests and responses that are marked as uncacheable, as well as dynamic
+        # content (including HTML), will not be cached.
+        # Corresponds to the JSON property `cacheMode`
+        # @return [String]
+        attr_accessor :cache_mode
+      
+        # Specifies a separate client (e.g. browser client) TTL, separate from the TTL
+        # for Cloud CDN's edge caches. Leaving this empty will use the same cache TTL
+        # for both Cloud CDN and the client-facing response. The maximum allowed value
+        # is 86400s (1 day).
+        # Corresponds to the JSON property `clientTtl`
+        # @return [Fixnum]
+        attr_accessor :client_ttl
+      
+        # Specifies the default TTL for cached content served by this origin for
+        # responses that do not have an existing valid TTL (max-age or s-max-age).
+        # Setting a TTL of "0" means "always revalidate". The value of defaultTTL cannot
+        # be set to a value greater than that of maxTTL, but can be equal. When the
+        # cacheMode is set to FORCE_CACHE_ALL, the defaultTTL will overwrite the TTL set
+        # in all responses. The maximum allowed value is 31,622,400s (1 year), noting
+        # that infrequently accessed objects may be evicted from the cache before the
+        # defined TTL.
+        # Corresponds to the JSON property `defaultTtl`
+        # @return [Fixnum]
+        attr_accessor :default_ttl
+      
+        # Specifies the maximum allowed TTL for cached content served by this origin.
+        # Cache directives that attempt to set a max-age or s-maxage higher than this,
+        # or an Expires header more than maxTTL seconds in the future will be capped at
+        # the value of maxTTL, as if it were the value of an s-maxage Cache-Control
+        # directive. Headers sent to the client will not be modified. Setting a TTL of "
+        # 0" means "always revalidate". The maximum allowed value is 31,622,400s (1 year)
+        # , noting that infrequently accessed objects may be evicted from the cache
+        # before the defined TTL.
+        # Corresponds to the JSON property `maxTtl`
+        # @return [Fixnum]
+        attr_accessor :max_ttl
+      
         # Maximum number of seconds the response to a signed URL request will be
         # considered fresh. After this time period, the response will be revalidated
         # before being served. Defaults to 1hr (3600s). When serving responses to signed
@@ -2538,6 +2646,10 @@ module Google
       
         # Update properties of this object
         def update!(**args)
+          @cache_mode = args[:cache_mode] if args.key?(:cache_mode)
+          @client_ttl = args[:client_ttl] if args.key?(:client_ttl)
+          @default_ttl = args[:default_ttl] if args.key?(:default_ttl)
+          @max_ttl = args[:max_ttl] if args.key?(:max_ttl)
           @signed_url_cache_max_age_sec = args[:signed_url_cache_max_age_sec] if args.key?(:signed_url_cache_max_age_sec)
           @signed_url_key_names = args[:signed_url_key_names] if args.key?(:signed_url_key_names)
         end
@@ -2722,6 +2834,11 @@ module Google
         # @return [Array<String>]
         attr_accessor :custom_request_headers
       
+        # Headers that the HTTP/S load balancer should add to proxied responses.
+        # Corresponds to the JSON property `customResponseHeaders`
+        # @return [Array<String>]
+        attr_accessor :custom_response_headers
+      
         # An optional description of this resource. Provide this property when you
         # create the resource.
         # Corresponds to the JSON property `description`
@@ -2735,13 +2852,14 @@ module Google
         attr_accessor :enable_cdn
         alias_method :enable_cdn?, :enable_cdn
       
-        # Applicable only to Failover for Internal TCP/UDP Load Balancing. On failover
-        # or failback, this field indicates whether connection draining will be honored.
-        # GCP has a fixed connection draining timeout of 10 minutes. A setting of true
-        # terminates existing TCP connections to the active pool during failover and
-        # failback, immediately draining traffic. A setting of false allows existing TCP
-        # connections to persist, even on VMs no longer in the active pool, for up to
-        # the duration of the connection draining timeout (10 minutes).
+        # Applicable only to Failover for Internal TCP/UDP Load Balancing and Network
+        # Load Balancing. On failover or failback, this field indicates whether
+        # connection draining will be honored. GCP has a fixed connection draining
+        # timeout of 10 minutes. A setting of true terminates existing TCP connections
+        # to the active pool during failover and failback, immediately draining traffic.
+        # A setting of false allows existing TCP connections to persist, even on VMs no
+        # longer in the active pool, for up to the duration of the connection draining
+        # timeout (10 minutes).
         # Corresponds to the JSON property `failoverPolicy`
         # @return [Google::Apis::ComputeV1::BackendServiceFailoverPolicy]
         attr_accessor :failover_policy
@@ -2786,11 +2904,11 @@ module Google
         # @return [String]
         attr_accessor :kind
       
-        # Specifies the load balancer type. Choose EXTERNAL for load balancers that
-        # receive traffic from external clients. Choose INTERNAL for Internal TCP/UDP
-        # Load Balancing. Choose INTERNAL_MANAGED for Internal HTTP(S) Load Balancing.
-        # Choose INTERNAL_SELF_MANAGED for Traffic Director. A backend service created
-        # for one type of load balancing cannot be used with another. For more
+        # Specifies the load balancer type. Choose EXTERNAL for external HTTP(S), SSL
+        # Proxy, TCP Proxy and Network Load Balancing. Choose  INTERNAL for Internal TCP/
+        # UDP Load Balancing. Choose  INTERNAL_MANAGED for Internal HTTP(S) Load
+        # Balancing.  INTERNAL_SELF_MANAGED for Traffic Director. A backend service
+        # created for one type of load balancer cannot be used with another. For more
         # information, refer to Choosing a load balancer.
         # Corresponds to the JSON property `loadBalancingScheme`
         # @return [String]
@@ -2845,7 +2963,7 @@ module Google
         attr_accessor :name
       
         # The URL of the network to which this backend service belongs. This field can
-        # only be spcified when the load balancing scheme is set to INTERNAL.
+        # only be specified when the load balancing scheme is set to INTERNAL.
         # Corresponds to the JSON property `network`
         # @return [String]
         attr_accessor :network
@@ -2866,11 +2984,12 @@ module Google
       
         # A named port on a backend instance group representing the port for
         # communication to the backend VMs in that group. Required when the
-        # loadBalancingScheme is EXTERNAL, INTERNAL_MANAGED, or INTERNAL_SELF_MANAGED
-        # and the backends are instance groups. The named port must be defined on each
-        # backend instance group. This parameter has no meaning if the backends are NEGs.
-        # Must be omitted when the loadBalancingScheme is INTERNAL (Internal TCP/UDP
-        # Load Balancing).
+        # loadBalancingScheme is EXTERNAL (except Network Load Balancing),
+        # INTERNAL_MANAGED, or  INTERNAL_SELF_MANAGED and the backends are instance
+        # groups. The named port must be defined on each backend instance group. This
+        # parameter has no meaning if the backends are NEGs.
+        # Backend services for Internal TCP/UDP Load Balancing and Network Load
+        # Balancing require you omit port_name.
         # Corresponds to the JSON property `portName`
         # @return [String]
         attr_accessor :port_name
@@ -2900,16 +3019,22 @@ module Google
         # @return [String]
         attr_accessor :security_policy
       
+        # The authentication and authorization settings for a BackendService.
+        # Corresponds to the JSON property `securitySettings`
+        # @return [Google::Apis::ComputeV1::SecuritySettings]
+        attr_accessor :security_settings
+      
         # [Output Only] Server-defined URL for the resource.
         # Corresponds to the JSON property `selfLink`
         # @return [String]
         attr_accessor :self_link
       
-        # Type of session affinity to use. The default is NONE. Session affinity is not
-        # applicable if the --protocol is UDP.
-        # When the loadBalancingScheme is EXTERNAL, possible values are NONE, CLIENT_IP,
-        # or GENERATED_COOKIE. You can use GENERATED_COOKIE if the protocol is HTTP or
-        # HTTPS.
+        # Type of session affinity to use. The default is NONE.
+        # When the loadBalancingScheme is EXTERNAL: * For Network Load Balancing, the
+        # possible values are NONE, CLIENT_IP, CLIENT_IP_PROTO, or CLIENT_IP_PORT_PROTO.
+        # * For all other load balancers that use loadBalancingScheme=EXTERNAL, the
+        # possible values are NONE, CLIENT_IP, or GENERATED_COOKIE. * You can use
+        # GENERATED_COOKIE if the protocol is HTTP, HTTP2, or HTTPS.
         # When the loadBalancingScheme is INTERNAL, possible values are NONE, CLIENT_IP,
         # CLIENT_IP_PROTO, or CLIENT_IP_PORT_PROTO.
         # When the loadBalancingScheme is INTERNAL_SELF_MANAGED, or INTERNAL_MANAGED,
@@ -2942,6 +3067,7 @@ module Google
           @consistent_hash = args[:consistent_hash] if args.key?(:consistent_hash)
           @creation_timestamp = args[:creation_timestamp] if args.key?(:creation_timestamp)
           @custom_request_headers = args[:custom_request_headers] if args.key?(:custom_request_headers)
+          @custom_response_headers = args[:custom_response_headers] if args.key?(:custom_response_headers)
           @description = args[:description] if args.key?(:description)
           @enable_cdn = args[:enable_cdn] if args.key?(:enable_cdn)
           @failover_policy = args[:failover_policy] if args.key?(:failover_policy)
@@ -2961,6 +3087,7 @@ module Google
           @protocol = args[:protocol] if args.key?(:protocol)
           @region = args[:region] if args.key?(:region)
           @security_policy = args[:security_policy] if args.key?(:security_policy)
+          @security_settings = args[:security_settings] if args.key?(:security_settings)
           @self_link = args[:self_link] if args.key?(:self_link)
           @session_affinity = args[:session_affinity] if args.key?(:session_affinity)
           @timeout_sec = args[:timeout_sec] if args.key?(:timeout_sec)
@@ -3100,6 +3227,55 @@ module Google
         # @return [Google::Apis::ComputeV1::CacheKeyPolicy]
         attr_accessor :cache_key_policy
       
+        # Specifies the cache setting for all responses from this backend. The possible
+        # values are:
+        # USE_ORIGIN_HEADERS Requires the origin to set valid caching headers to cache
+        # content. Responses without these headers will not be cached at Google's edge,
+        # and will require a full trip to the origin on every request, potentially
+        # impacting performance and increasing load on the origin server.
+        # FORCE_CACHE_ALL Cache all content, ignoring any "private", "no-store" or "no-
+        # cache" directives in Cache-Control response headers. Warning: this may result
+        # in Cloud CDN caching private, per-user (user identifiable) content.
+        # CACHE_ALL_STATIC Automatically cache static content, including common image
+        # formats, media (video and audio), and web assets (JavaScript and CSS).
+        # Requests and responses that are marked as uncacheable, as well as dynamic
+        # content (including HTML), will not be cached.
+        # Corresponds to the JSON property `cacheMode`
+        # @return [String]
+        attr_accessor :cache_mode
+      
+        # Specifies a separate client (e.g. browser client) TTL, separate from the TTL
+        # for Cloud CDN's edge caches. Leaving this empty will use the same cache TTL
+        # for both Cloud CDN and the client-facing response. The maximum allowed value
+        # is 86400s (1 day).
+        # Corresponds to the JSON property `clientTtl`
+        # @return [Fixnum]
+        attr_accessor :client_ttl
+      
+        # Specifies the default TTL for cached content served by this origin for
+        # responses that do not have an existing valid TTL (max-age or s-max-age).
+        # Setting a TTL of "0" means "always revalidate". The value of defaultTTL cannot
+        # be set to a value greater than that of maxTTL, but can be equal. When the
+        # cacheMode is set to FORCE_CACHE_ALL, the defaultTTL will overwrite the TTL set
+        # in all responses. The maximum allowed value is 31,622,400s (1 year), noting
+        # that infrequently accessed objects may be evicted from the cache before the
+        # defined TTL.
+        # Corresponds to the JSON property `defaultTtl`
+        # @return [Fixnum]
+        attr_accessor :default_ttl
+      
+        # Specifies the maximum allowed TTL for cached content served by this origin.
+        # Cache directives that attempt to set a max-age or s-maxage higher than this,
+        # or an Expires header more than maxTTL seconds in the future will be capped at
+        # the value of maxTTL, as if it were the value of an s-maxage Cache-Control
+        # directive. Headers sent to the client will not be modified. Setting a TTL of "
+        # 0" means "always revalidate". The maximum allowed value is 31,622,400s (1 year)
+        # , noting that infrequently accessed objects may be evicted from the cache
+        # before the defined TTL.
+        # Corresponds to the JSON property `maxTtl`
+        # @return [Fixnum]
+        attr_accessor :max_ttl
+      
         # Maximum number of seconds the response to a signed URL request will be
         # considered fresh. After this time period, the response will be revalidated
         # before being served. Defaults to 1hr (3600s). When serving responses to signed
@@ -3123,18 +3299,23 @@ module Google
         # Update properties of this object
         def update!(**args)
           @cache_key_policy = args[:cache_key_policy] if args.key?(:cache_key_policy)
+          @cache_mode = args[:cache_mode] if args.key?(:cache_mode)
+          @client_ttl = args[:client_ttl] if args.key?(:client_ttl)
+          @default_ttl = args[:default_ttl] if args.key?(:default_ttl)
+          @max_ttl = args[:max_ttl] if args.key?(:max_ttl)
           @signed_url_cache_max_age_sec = args[:signed_url_cache_max_age_sec] if args.key?(:signed_url_cache_max_age_sec)
           @signed_url_key_names = args[:signed_url_key_names] if args.key?(:signed_url_key_names)
         end
       end
       
-      # Applicable only to Failover for Internal TCP/UDP Load Balancing. On failover
-      # or failback, this field indicates whether connection draining will be honored.
-      # GCP has a fixed connection draining timeout of 10 minutes. A setting of true
-      # terminates existing TCP connections to the active pool during failover and
-      # failback, immediately draining traffic. A setting of false allows existing TCP
-      # connections to persist, even on VMs no longer in the active pool, for up to
-      # the duration of the connection draining timeout (10 minutes).
+      # Applicable only to Failover for Internal TCP/UDP Load Balancing and Network
+      # Load Balancing. On failover or failback, this field indicates whether
+      # connection draining will be honored. GCP has a fixed connection draining
+      # timeout of 10 minutes. A setting of true terminates existing TCP connections
+      # to the active pool during failover and failback, immediately draining traffic.
+      # A setting of false allows existing TCP connections to persist, even on VMs no
+      # longer in the active pool, for up to the duration of the connection draining
+      # timeout (10 minutes).
       class BackendServiceFailoverPolicy
         include Google::Apis::Core::Hashable
       
@@ -3145,22 +3326,21 @@ module Google
         attr_accessor :disable_connection_drain_on_failover
         alias_method :disable_connection_drain_on_failover?, :disable_connection_drain_on_failover
       
-        # Applicable only to Failover for Internal TCP/UDP Load Balancing. If set to
-        # true, connections to the load balancer are dropped when all primary and all
-        # backup backend VMs are unhealthy. If set to false, connections are distributed
-        # among all primary VMs when all primary and all backup backend VMs are
-        # unhealthy.
-        # The default is false.
+        # Applicable only to Failover for Internal TCP/UDP Load Balancing and Network
+        # Load Balancing, If set to true, connections to the load balancer are dropped
+        # when all primary and all backup backend VMs are unhealthy.If set to false,
+        # connections are distributed among all primary VMs when all primary and all
+        # backup backend VMs are unhealthy. The default is false.
         # Corresponds to the JSON property `dropTrafficIfUnhealthy`
         # @return [Boolean]
         attr_accessor :drop_traffic_if_unhealthy
         alias_method :drop_traffic_if_unhealthy?, :drop_traffic_if_unhealthy
       
-        # Applicable only to Failover for Internal TCP/UDP Load Balancing. The value of
-        # the field must be in the range [0, 1]. If the value is 0, the load balancer
-        # performs a failover when the number of healthy primary VMs equals zero. For
-        # all other values, the load balancer performs a failover when the total number
-        # of healthy primary VMs is less than this ratio.
+        # Applicable only to Failover for Internal TCP/UDP Load Balancing and Network
+        # Load Balancing. The value of the field must be in the range [0, 1]. If the
+        # value is 0, the load balancer performs a failover when the number of healthy
+        # primary VMs equals zero. For all other values, the load balancer performs a
+        # failover when the total number of healthy primary VMs is less than this ratio.
         # Corresponds to the JSON property `failoverRatio`
         # @return [Float]
         attr_accessor :failover_ratio
@@ -3516,8 +3696,7 @@ module Google
       class Binding
         include Google::Apis::Core::Hashable
       
-        # A client-specified ID for this binding. Expected to be globally unique to
-        # support the internal bindings-by-ID API.
+        # 
         # Corresponds to the JSON property `bindingId`
         # @return [String]
         attr_accessor :binding_id
@@ -5770,7 +5949,7 @@ module Google
       class DistributionPolicy
         include Google::Apis::Core::Hashable
       
-        # Zones where the regional managed instance group will create and manage
+        # Zones where the regional managed instance group will create and manage its
         # instances.
         # Corresponds to the JSON property `zones`
         # @return [Array<Google::Apis::ComputeV1::DistributionPolicyZoneConfiguration>]
@@ -6808,29 +6987,36 @@ module Google
         # assigned. Methods for specifying an IP address:
         # * IPv4 dotted decimal, as in `100.1.2.3` * Full URL, as in https://www.
         # googleapis.com/compute/v1/projects/project_id/regions/region/addresses/address-
-        # name * Partial URL or by name, as in: * projects/project_id/regions/region/
-        # addresses/address-name * regions/region/addresses/address-name * global/
-        # addresses/address-name * address-name
+        # name * Partial URL or by name, as in:
+        # - projects/project_id/regions/region/addresses/address-name
+        # - regions/region/addresses/address-name
+        # - global/addresses/address-name
+        # - address-name
         # The loadBalancingScheme and the forwarding rule's target determine the type of
         # IP address that you can use. For detailed information, refer to [IP address
         # specifications](/load-balancing/docs/forwarding-rule-concepts#
         # ip_address_specifications).
         # Must be set to `0.0.0.0` when the target is targetGrpcProxy that has
         # validateForProxyless field set to true.
+        # For Private Service Connect forwarding rules that forward traffic to Google
+        # APIs, IP address must be provided.
         # Corresponds to the JSON property `IPAddress`
         # @return [String]
         attr_accessor :ip_address
       
-        # The IP protocol to which this rule applies. For protocol forwarding, valid
-        # options are TCP, UDP, ESP, AH, SCTP or ICMP.
-        # For Internal TCP/UDP Load Balancing, the load balancing scheme is INTERNAL,
-        # and one of TCP or UDP are valid. For Traffic Director, the load balancing
-        # scheme is INTERNAL_SELF_MANAGED, and only TCPis valid. For Internal HTTP(S)
-        # Load Balancing, the load balancing scheme is INTERNAL_MANAGED, and only TCP is
-        # valid. For HTTP(S), SSL Proxy, and TCP Proxy Load Balancing, the load
-        # balancing scheme is EXTERNAL and only TCP is valid. For Network TCP/UDP Load
-        # Balancing, the load balancing scheme is EXTERNAL, and one of TCP or UDP is
-        # valid.
+        # The IP protocol to which this rule applies.
+        # For protocol forwarding, valid options are TCP, UDP, ESP, AH, SCTP and ICMP.
+        # The valid IP protocols are different for different load balancing products:
+        # - Internal TCP/UDP Load Balancing: The load balancing scheme is INTERNAL, and
+        # one of TCP, UDP or ALL is valid.
+        # - Traffic Director: The load balancing scheme is INTERNAL_SELF_MANAGED, and
+        # only TCP is valid.
+        # - Internal HTTP(S) Load Balancing: The load balancing scheme is
+        # INTERNAL_MANAGED, and only TCP is valid.
+        # - HTTP(S), SSL Proxy, and TCP Proxy Load Balancing: The load balancing scheme
+        # is EXTERNAL and only TCP is valid.
+        # - Network Load Balancing: The load balancing scheme is EXTERNAL, and one of
+        # TCP or UDP is valid.
         # Corresponds to the JSON property `IPProtocol`
         # @return [String]
         attr_accessor :ip_protocol
@@ -6855,9 +7041,9 @@ module Google
         attr_accessor :allow_global_access
         alias_method :allow_global_access?, :allow_global_access
       
-        # This field is only used for INTERNAL load balancing.
-        # For internal load balancing, this field identifies the BackendService resource
-        # to receive the matched traffic.
+        # Identifies the backend service to which the forwarding rule sends traffic.
+        # Required for Internal TCP/UDP Load Balancing and Network Load Balancing; must
+        # be omitted for all other load balancer types.
         # Corresponds to the JSON property `backendService`
         # @return [String]
         attr_accessor :backend_service
@@ -6919,13 +7105,12 @@ module Google
         # - EXTERNAL is used for:
         # - Classic Cloud VPN gateways
         # - Protocol forwarding to VMs from an external IP address
-        # - The following load balancers: HTTP(S), SSL Proxy, TCP Proxy, and Network TCP/
-        # UDP
+        # - HTTP(S), SSL Proxy, TCP Proxy, and Network Load Balancing
         # - INTERNAL is used for:
         # - Protocol forwarding to VMs from an internal IP address
-        # - Internal TCP/UDP load balancers
+        # - Internal TCP/UDP Load Balancing
         # - INTERNAL_MANAGED is used for:
-        # - Internal HTTP(S) load balancers
+        # - Internal HTTP(S) Load Balancing
         # - INTERNAL_SELF_MANAGED is used for:
         # - Traffic Director
         # For more information about forwarding rules, refer to Forwarding rule concepts.
@@ -6964,9 +7149,11 @@ module Google
         attr_accessor :name
       
         # This field is not used for external load balancing.
-        # For internal load balancing, this field identifies the network that the load
-        # balanced IP should belong to for this Forwarding Rule. If this field is not
-        # specified, the default network will be used.
+        # For Internal TCP/UDP Load Balancing, this field identifies the network that
+        # the load balanced IP should belong to for this Forwarding Rule. If this field
+        # is not specified, the default network will be used.
+        # For Private Service Connect forwarding rules that forward traffic to Google
+        # APIs, a network must be provided.
         # Corresponds to the JSON property `network`
         # @return [String]
         attr_accessor :network
@@ -6981,19 +7168,17 @@ module Google
         # @return [String]
         attr_accessor :network_tier
       
-        # When the load balancing scheme is EXTERNAL, INTERNAL_SELF_MANAGED and
-        # INTERNAL_MANAGED, you can specify a port_range. Use with a forwarding rule
-        # that points to a target proxy or a target pool. Do not use with a forwarding
-        # rule that points to a backend service. This field is used along with the
-        # target field for TargetHttpProxy, TargetHttpsProxy, TargetSslProxy,
-        # TargetTcpProxy, TargetGrpcProxy, TargetVpnGateway, TargetPool, TargetInstance.
-        # Applicable only when IPProtocol is TCP, UDP, or SCTP, only packets addressed
-        # to ports in the specified range will be forwarded to target. Forwarding rules
-        # with the same [IPAddress, IPProtocol] pair must have disjoint port ranges.
+        # This field can be used only if: * Load balancing scheme is one of EXTERNAL,
+        # INTERNAL_SELF_MANAGED or INTERNAL_MANAGED, and * IPProtocol is one of TCP, UDP,
+        # or SCTP.
+        # Packets addressed to ports in the specified range will be forwarded to target
+        # or  backend_service. You can only use one of ports, port_range, or allPorts.
+        # The three are mutually exclusive. Forwarding rules with the same [IPAddress,
+        # IPProtocol] pair must have disjoint port ranges.
         # Some types of forwarding target have constraints on the acceptable ports:
         # - TargetHttpProxy: 80, 8080
         # - TargetHttpsProxy: 443
-        # - TargetGrpcProxy: Any ports
+        # - TargetGrpcProxy: no constraints
         # - TargetTcpProxy: 25, 43, 110, 143, 195, 443, 465, 587, 700, 993, 995, 1688,
         # 1883, 5222
         # - TargetSslProxy: 25, 43, 110, 143, 195, 443, 465, 587, 700, 993, 995, 1688,
@@ -7003,16 +7188,17 @@ module Google
         # @return [String]
         attr_accessor :port_range
       
-        # This field is used along with the backend_service field for internal load
-        # balancing.
-        # When the load balancing scheme is INTERNAL, a list of ports can be configured,
-        # for example, ['80'], ['8000','9000']. Only packets addressed to these ports
-        # are forwarded to the backends configured with the forwarding rule.
-        # If the forwarding rule's loadBalancingScheme is INTERNAL, you can specify
-        # ports in one of the following ways:
-        # * A list of up to five ports, which can be non-contiguous * Keyword ALL, which
-        # causes the forwarding rule to forward traffic on any port of the forwarding
-        # rule's protocol.
+        # The ports field is only supported when the forwarding rule references a
+        # backend_service directly. Supported load balancing products are Internal TCP/
+        # UDP Load Balancing and Network Load Balancing. Only packets addressed to the
+        # specified list of ports are forwarded to backends.
+        # You can only use one of ports and port_range, or allPorts. The three are
+        # mutually exclusive.
+        # You can specify a list of up to five ports, which can be non-contiguous.
+        # For Internal TCP/UDP Load Balancing, if you specify allPorts, you should not
+        # specify ports.
+        # For more information, see [Port specifications](/load-balancing/docs/
+        # forwarding-rule-concepts#port_specifications).
         # Corresponds to the JSON property `ports`
         # @return [Array<String>]
         attr_accessor :ports
@@ -7065,6 +7251,15 @@ module Google
         # resource. The forwarded traffic must be of a type appropriate to the target
         # object. For more information, see the "Target" column in [Port specifications](
         # /load-balancing/docs/forwarding-rule-concepts#ip_address_specifications).
+        # For Private Service Connect forwarding rules that forward traffic to Google
+        # APIs, provide the name of a supported Google API bundle. Currently, the
+        # supported Google API bundles include:
+        # 
+        # - vpc-sc - GCP APIs that support VPC Service Controls. For more information
+        # about which APIs support VPC Service Controls, refer to VPC-SC supported
+        # products and limitations.
+        # - all-apis - All GCP APIs. For more information about which APIs are supported
+        # with this bundle, refer to Private Google Access-specific domains and VIPs.
         # Corresponds to the JSON property `target`
         # @return [String]
         attr_accessor :target
@@ -8047,6 +8242,12 @@ module Google
         # @return [String]
         attr_accessor :kind
       
+        # Configuration of logging on a health check. If logging is enabled, logs will
+        # be exported to Stackdriver.
+        # Corresponds to the JSON property `logConfig`
+        # @return [Google::Apis::ComputeV1::HealthCheckLogConfig]
+        attr_accessor :log_config
+      
         # Name of the resource. Provided by the client when the resource is created. The
         # name must be 1-63 characters long, and comply with RFC1035. Specifically, the
         # name must be 1-63 characters long and match the regular expression `[a-z]([-a-
@@ -8114,6 +8315,7 @@ module Google
           @https_health_check = args[:https_health_check] if args.key?(:https_health_check)
           @id = args[:id] if args.key?(:id)
           @kind = args[:kind] if args.key?(:kind)
+          @log_config = args[:log_config] if args.key?(:log_config)
           @name = args[:name] if args.key?(:name)
           @region = args[:region] if args.key?(:region)
           @self_link = args[:self_link] if args.key?(:self_link)
@@ -8242,6 +8444,28 @@ module Google
         end
       end
       
+      # Configuration of logging on a health check. If logging is enabled, logs will
+      # be exported to Stackdriver.
+      class HealthCheckLogConfig
+        include Google::Apis::Core::Hashable
+      
+        # Indicates whether or not to export logs. This is false by default, which means
+        # no health check logging will be done.
+        # Corresponds to the JSON property `enable`
+        # @return [Boolean]
+        attr_accessor :enable
+        alias_method :enable?, :enable
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @enable = args[:enable] if args.key?(:enable)
+        end
+      end
+      
       # A full or valid partial URL to a health check. For example, the following are
       # valid URLs:
       # - https://www.googleapis.com/compute/beta/projects/project-id/global/
@@ -8774,6 +8998,16 @@ module Google
         # @return [Fixnum]
         attr_accessor :port
       
+        # 
+        # Corresponds to the JSON property `weight`
+        # @return [String]
+        attr_accessor :weight
+      
+        # 
+        # Corresponds to the JSON property `weightError`
+        # @return [String]
+        attr_accessor :weight_error
+      
         def initialize(**args)
            update!(**args)
         end
@@ -8785,6 +9019,8 @@ module Google
           @instance = args[:instance] if args.key?(:instance)
           @ip_address = args[:ip_address] if args.key?(:ip_address)
           @port = args[:port] if args.key?(:port)
+          @weight = args[:weight] if args.key?(:weight)
+          @weight_error = args[:weight_error] if args.key?(:weight_error)
         end
       end
       
@@ -11300,8 +11536,8 @@ module Google
         # @return [String]
         attr_accessor :description
       
-        # Policy specifying intended distribution of instances in regional managed
-        # instance group.
+        # Policy specifying the intended distribution of managed instances across zones
+        # in a regional managed instance group.
         # Corresponds to the JSON property `distributionPolicy`
         # @return [Google::Apis::ComputeV1::DistributionPolicy]
         attr_accessor :distribution_policy
@@ -11330,7 +11566,9 @@ module Google
       
         # The URL of the instance template that is specified for this managed instance
         # group. The group uses this template to create all new instances in the managed
-        # instance group.
+        # instance group. The templates for existing instances in the group do not
+        # change unless you run recreateInstances, run applyUpdatesToInstances, or set
+        # the group's updatePolicy.type to PROACTIVE.
         # Corresponds to the JSON property `instanceTemplate`
         # @return [String]
         attr_accessor :instance_template
@@ -11406,7 +11644,7 @@ module Google
         # @return [Array<Google::Apis::ComputeV1::InstanceGroupManagerVersion>]
         attr_accessor :versions
       
-        # [Output Only] The URL of the zone where the managed instance group is located (
+        # [Output Only] The URL of a zone where the managed instance group is located (
         # for zonal resources).
         # Corresponds to the JSON property `zone`
         # @return [String]
@@ -11991,7 +12229,11 @@ module Google
       
         # The URL of the instance template that is specified for this managed instance
         # group. The group uses this template to create new instances in the managed
-        # instance group until the `targetSize` for this version is reached.
+        # instance group until the `targetSize` for this version is reached. The
+        # templates for existing instances in the group do not change unless you run
+        # recreateInstances, run applyUpdatesToInstances, or set the group's
+        # updatePolicy.type to PROACTIVE; in those cases, existing instances are updated
+        # until the `targetSize` for this version is reached.
         # Corresponds to the JSON property `instanceTemplate`
         # @return [String]
         attr_accessor :instance_template
@@ -12043,6 +12285,13 @@ module Google
       class InstanceGroupManagersApplyUpdatesRequest
         include Google::Apis::Core::Hashable
       
+        # Flag to update all instances instead of specified list of ?instances?. If the
+        # flag is set to true then the instances may not be specified in the request.
+        # Corresponds to the JSON property `allInstances`
+        # @return [Boolean]
+        attr_accessor :all_instances
+        alias_method :all_instances?, :all_instances
+      
         # The list of URLs of one or more instances for which you want to apply updates.
         # Each URL can be a full URL or a partial URL, such as zones/[ZONE]/instances/[
         # INSTANCE_NAME].
@@ -12080,6 +12329,7 @@ module Google
       
         # Update properties of this object
         def update!(**args)
+          @all_instances = args[:all_instances] if args.key?(:all_instances)
           @instances = args[:instances] if args.key?(:instances)
           @minimal_action = args[:minimal_action] if args.key?(:minimal_action)
           @most_disruptive_allowed_action = args[:most_disruptive_allowed_action] if args.key?(:most_disruptive_allowed_action)
@@ -12440,7 +12690,9 @@ module Google
       
         # The URL of the instance template that is specified for this managed instance
         # group. The group uses this template to create all new instances in the managed
-        # instance group.
+        # instance group. The templates for existing instances in the group do not
+        # change unless you run recreateInstances, run applyUpdatesToInstances, or set
+        # the group's updatePolicy.type to PROACTIVE.
         # Corresponds to the JSON property `instanceTemplate`
         # @return [String]
         attr_accessor :instance_template
@@ -14109,6 +14361,11 @@ module Google
         # @return [String]
         attr_accessor :customer_router_ip_address
       
+        # [Output Only] Dataplane version for this InterconnectAttachment.
+        # Corresponds to the JSON property `dataplaneVersion`
+        # @return [Fixnum]
+        attr_accessor :dataplane_version
+      
         # An optional description of this resource.
         # Corresponds to the JSON property `description`
         # @return [String]
@@ -14152,6 +14409,13 @@ module Google
         # @return [String]
         attr_accessor :kind
       
+        # Maximum Transmission Unit (MTU), in bytes, of packets passing through this
+        # interconnect attachment. Only 1440 and 1500 are allowed. If not specified, the
+        # value will default to 1440.
+        # Corresponds to the JSON property `mtu`
+        # @return [Fixnum]
+        attr_accessor :mtu
+      
         # Name of the resource. Provided by the client when the resource is created. The
         # name must be 1-63 characters long, and comply with RFC1035. Specifically, the
         # name must be 1-63 characters long and match the regular expression `[a-z]([-a-
@@ -14270,12 +14534,14 @@ module Google
           @cloud_router_ip_address = args[:cloud_router_ip_address] if args.key?(:cloud_router_ip_address)
           @creation_timestamp = args[:creation_timestamp] if args.key?(:creation_timestamp)
           @customer_router_ip_address = args[:customer_router_ip_address] if args.key?(:customer_router_ip_address)
+          @dataplane_version = args[:dataplane_version] if args.key?(:dataplane_version)
           @description = args[:description] if args.key?(:description)
           @edge_availability_domain = args[:edge_availability_domain] if args.key?(:edge_availability_domain)
           @google_reference_id = args[:google_reference_id] if args.key?(:google_reference_id)
           @id = args[:id] if args.key?(:id)
           @interconnect = args[:interconnect] if args.key?(:interconnect)
           @kind = args[:kind] if args.key?(:kind)
+          @mtu = args[:mtu] if args.key?(:mtu)
           @name = args[:name] if args.key?(:name)
           @operational_status = args[:operational_status] if args.key?(:operational_status)
           @pairing_key = args[:pairing_key] if args.key?(:pairing_key)
@@ -15744,6 +16010,39 @@ module Google
         end
       end
       
+      # 
+      class LocalDisk
+        include Google::Apis::Core::Hashable
+      
+        # Specifies the number of such disks.
+        # Corresponds to the JSON property `diskCount`
+        # @return [Fixnum]
+        attr_accessor :disk_count
+      
+        # Specifies the size of the disk in base-2 GB.
+        # Corresponds to the JSON property `diskSizeGb`
+        # @return [Fixnum]
+        attr_accessor :disk_size_gb
+      
+        # Specifies the desired disk type on the node. This disk type must be a local
+        # storage type (e.g.: local-ssd). Note that for nodeTemplates, this should be
+        # the name of the disk type and not its URL.
+        # Corresponds to the JSON property `diskType`
+        # @return [String]
+        attr_accessor :disk_type
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @disk_count = args[:disk_count] if args.key?(:disk_count)
+          @disk_size_gb = args[:disk_size_gb] if args.key?(:disk_size_gb)
+          @disk_type = args[:disk_type] if args.key?(:disk_type)
+        end
+      end
+      
       # Specifies what kind of log the caller must write
       class LogConfig
         include Google::Apis::Core::Hashable
@@ -16958,8 +17257,9 @@ module Google
       # Represents a collection of network endpoints.
       # A network endpoint group (NEG) defines how a set of endpoints should be
       # reached, whether they are reachable, and where they are located. For more
-      # information about using NEGs, see  Setting up internet NEGs,  Setting up zonal
-      # NEGs, or  Setting up serverless NEGs. (== resource_for `$api_version`.
+      # information about using NEGs, see  Setting up external HTTP(S) Load Balancing
+      # with internet NEGs,  Setting up zonal NEGs, or  Setting up external HTTP(S)
+      # Load Balancing with serverless NEGs. (== resource_for `$api_version`.
       # networkEndpointGroups ==) (== resource_for `$api_version`.
       # globalNetworkEndpointGroups ==) (== resource_for `$api_version`.
       # regionNetworkEndpointGroups ==)
@@ -17827,6 +18127,11 @@ module Google
         # @return [String]
         attr_accessor :network_ip
       
+        # The type of vNIC to be used on this interface. This may be gVNIC or VirtioNet.
+        # Corresponds to the JSON property `nicType`
+        # @return [String]
+        attr_accessor :nic_type
+      
         # The URL of the Subnetwork resource for this instance. If the network resource
         # is in legacy mode, do not specify this field. If the network is in auto subnet
         # mode, specifying the subnetwork is optional. If the network is in custom
@@ -17854,6 +18159,7 @@ module Google
           @name = args[:name] if args.key?(:name)
           @network = args[:network] if args.key?(:network)
           @network_ip = args[:network_ip] if args.key?(:network_ip)
+          @nic_type = args[:nic_type] if args.key?(:nic_type)
           @subnetwork = args[:subnetwork] if args.key?(:subnetwork)
         end
       end
@@ -18247,6 +18553,12 @@ module Google
         # @return [String]
         attr_accessor :maintenance_policy
       
+        # Time window specified for daily maintenance operations. GCE's internal
+        # maintenance will be performed within this window.
+        # Corresponds to the JSON property `maintenanceWindow`
+        # @return [Google::Apis::ComputeV1::NodeGroupMaintenanceWindow]
+        attr_accessor :maintenance_window
+      
         # The name of the resource, provided by the client when initially creating the
         # resource. The resource name must be 1-63 characters long, and comply with
         # RFC1035. Specifically, the name must be 1-63 characters long and match the
@@ -18297,6 +18609,7 @@ module Google
           @id = args[:id] if args.key?(:id)
           @kind = args[:kind] if args.key?(:kind)
           @maintenance_policy = args[:maintenance_policy] if args.key?(:maintenance_policy)
+          @maintenance_window = args[:maintenance_window] if args.key?(:maintenance_window)
           @name = args[:name] if args.key?(:name)
           @node_template = args[:node_template] if args.key?(:node_template)
           @self_link = args[:self_link] if args.key?(:self_link)
@@ -18581,15 +18894,56 @@ module Google
         end
       end
       
+      # Time window specified for daily maintenance operations. GCE's internal
+      # maintenance will be performed within this window.
+      class NodeGroupMaintenanceWindow
+        include Google::Apis::Core::Hashable
+      
+        # A Duration represents a fixed-length span of time represented as a count of
+        # seconds and fractions of seconds at nanosecond resolution. It is independent
+        # of any calendar and concepts like "day" or "month". Range is approximately 10,
+        # 000 years.
+        # Corresponds to the JSON property `maintenanceDuration`
+        # @return [Google::Apis::ComputeV1::Duration]
+        attr_accessor :maintenance_duration
+      
+        # Start time of the window. This must be in UTC format that resolves to one of
+        # 00:00, 04:00, 08:00, 12:00, 16:00, or 20:00. For example, both 13:00-5 and 08:
+        # 00 are valid.
+        # Corresponds to the JSON property `startTime`
+        # @return [String]
+        attr_accessor :start_time
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @maintenance_duration = args[:maintenance_duration] if args.key?(:maintenance_duration)
+          @start_time = args[:start_time] if args.key?(:start_time)
+        end
+      end
+      
       # 
       class NodeGroupNode
         include Google::Apis::Core::Hashable
       
+        # Accelerators for this node.
+        # Corresponds to the JSON property `accelerators`
+        # @return [Array<Google::Apis::ComputeV1::AcceleratorConfig>]
+        attr_accessor :accelerators
+      
         # CPU overcommit.
         # Corresponds to the JSON property `cpuOvercommitType`
         # @return [String]
         attr_accessor :cpu_overcommit_type
       
+        # Local disk configurations.
+        # Corresponds to the JSON property `disks`
+        # @return [Array<Google::Apis::ComputeV1::LocalDisk>]
+        attr_accessor :disks
+      
         # Instances scheduled on this node.
         # Corresponds to the JSON property `instances`
         # @return [Array<String>]
@@ -18626,7 +18980,9 @@ module Google
       
         # Update properties of this object
         def update!(**args)
+          @accelerators = args[:accelerators] if args.key?(:accelerators)
           @cpu_overcommit_type = args[:cpu_overcommit_type] if args.key?(:cpu_overcommit_type)
+          @disks = args[:disks] if args.key?(:disks)
           @instances = args[:instances] if args.key?(:instances)
           @name = args[:name] if args.key?(:name)
           @node_type = args[:node_type] if args.key?(:node_type)
@@ -18910,6 +19266,11 @@ module Google
       class NodeTemplate
         include Google::Apis::Core::Hashable
       
+        # 
+        # Corresponds to the JSON property `accelerators`
+        # @return [Array<Google::Apis::ComputeV1::AcceleratorConfig>]
+        attr_accessor :accelerators
+      
         # CPU overcommit.
         # Corresponds to the JSON property `cpuOvercommitType`
         # @return [String]
@@ -18926,6 +19287,11 @@ module Google
         # @return [String]
         attr_accessor :description
       
+        # 
+        # Corresponds to the JSON property `disks`
+        # @return [Array<Google::Apis::ComputeV1::LocalDisk>]
+        attr_accessor :disks
+      
         # [Output Only] The unique identifier for the resource. This identifier is
         # defined by the server.
         # Corresponds to the JSON property `id`
@@ -19005,9 +19371,11 @@ module Google
       
         # Update properties of this object
         def update!(**args)
+          @accelerators = args[:accelerators] if args.key?(:accelerators)
           @cpu_overcommit_type = args[:cpu_overcommit_type] if args.key?(:cpu_overcommit_type)
           @creation_timestamp = args[:creation_timestamp] if args.key?(:creation_timestamp)
           @description = args[:description] if args.key?(:description)
+          @disks = args[:disks] if args.key?(:disks)
           @id = args[:id] if args.key?(:id)
           @kind = args[:kind] if args.key?(:kind)
           @name = args[:name] if args.key?(:name)
@@ -21068,6 +21436,12 @@ module Google
         # @return [Array<String>]
         attr_accessor :cidr_ranges
       
+        # Direction of traffic to mirror, either INGRESS, EGRESS, or BOTH. The default
+        # is BOTH.
+        # Corresponds to the JSON property `direction`
+        # @return [String]
+        attr_accessor :direction
+      
         def initialize(**args)
            update!(**args)
         end
@@ -21076,6 +21450,7 @@ module Google
         def update!(**args)
           @ip_protocols = args[:ip_protocols] if args.key?(:ip_protocols)
           @cidr_ranges = args[:cidr_ranges] if args.key?(:cidr_ranges)
+          @direction = args[:direction] if args.key?(:direction)
         end
       end
       
@@ -22810,6 +23185,13 @@ module Google
       class RegionInstanceGroupManagersApplyUpdatesRequest
         include Google::Apis::Core::Hashable
       
+        # Flag to update all instances instead of specified list of ?instances?. If the
+        # flag is set to true then the instances may not be specified in the request.
+        # Corresponds to the JSON property `allInstances`
+        # @return [Boolean]
+        attr_accessor :all_instances
+        alias_method :all_instances?, :all_instances
+      
         # The list of URLs of one or more instances for which you want to apply updates.
         # Each URL can be a full URL or a partial URL, such as zones/[ZONE]/instances/[
         # INSTANCE_NAME].
@@ -22847,6 +23229,7 @@ module Google
       
         # Update properties of this object
         def update!(**args)
+          @all_instances = args[:all_instances] if args.key?(:all_instances)
           @instances = args[:instances] if args.key?(:instances)
           @minimal_action = args[:minimal_action] if args.key?(:minimal_action)
           @most_disruptive_allowed_action = args[:most_disruptive_allowed_action] if args.key?(:most_disruptive_allowed_action)
@@ -24753,6 +25136,11 @@ module Google
       class ResourcePolicySnapshotSchedulePolicySnapshotProperties
         include Google::Apis::Core::Hashable
       
+        # Chain name that the snapshot is created in.
+        # Corresponds to the JSON property `chainName`
+        # @return [String]
+        attr_accessor :chain_name
+      
         # Indication to perform a 'guest aware' snapshot.
         # Corresponds to the JSON property `guestFlush`
         # @return [Boolean]
@@ -24777,6 +25165,7 @@ module Google
       
         # Update properties of this object
         def update!(**args)
+          @chain_name = args[:chain_name] if args.key?(:chain_name)
           @guest_flush = args[:guest_flush] if args.key?(:guest_flush)
           @labels = args[:labels] if args.key?(:labels)
           @storage_locations = args[:storage_locations] if args.key?(:storage_locations)
@@ -24856,8 +25245,8 @@ module Google
         # @return [String]
         attr_accessor :description
       
-        # The destination range of outgoing packets that this route applies to. Only
-        # IPv4 is supported.
+        # The destination range of outgoing packets that this route applies to. Both
+        # IPv4 and IPv6 are supported.
         # Corresponds to the JSON property `destRange`
         # @return [String]
         attr_accessor :dest_range
@@ -24896,8 +25285,9 @@ module Google
         attr_accessor :next_hop_gateway
       
         # The URL to a forwarding rule of type loadBalancingScheme=INTERNAL that should
-        # handle matching packets. You can only specify the forwarding rule as a partial
-        # or full URL. For example, the following are all valid URLs:
+        # handle matching packets or the IP address of the forwarding Rule. For example,
+        # the following are all valid URLs:
+        # - 10.128.0.56
         # - https://www.googleapis.com/compute/v1/projects/project/regions/region/
         # forwardingRules/forwardingRule
         # - regions/region/forwardingRules/forwardingRule
@@ -25753,6 +26143,12 @@ module Google
         # @return [Array<String>]
         attr_accessor :drain_nat_ips
       
+        # 
+        # Corresponds to the JSON property `enableEndpointIndependentMapping`
+        # @return [Boolean]
+        attr_accessor :enable_endpoint_independent_mapping
+        alias_method :enable_endpoint_independent_mapping?, :enable_endpoint_independent_mapping
+      
         # Timeout (in seconds) for ICMP connections. Defaults to 30s if not set.
         # Corresponds to the JSON property `icmpIdleTimeoutSec`
         # @return [Fixnum]
@@ -25838,6 +26234,7 @@ module Google
         # Update properties of this object
         def update!(**args)
           @drain_nat_ips = args[:drain_nat_ips] if args.key?(:drain_nat_ips)
+          @enable_endpoint_independent_mapping = args[:enable_endpoint_independent_mapping] if args.key?(:enable_endpoint_independent_mapping)
           @icmp_idle_timeout_sec = args[:icmp_idle_timeout_sec] if args.key?(:icmp_idle_timeout_sec)
           @log_config = args[:log_config] if args.key?(:log_config)
           @min_ports_per_vm = args[:min_ports_per_vm] if args.key?(:min_ports_per_vm)
@@ -26379,6 +26776,12 @@ module Google
         attr_accessor :automatic_restart
         alias_method :automatic_restart?, :automatic_restart
       
+        # An opaque location hint used to place the instance close to other resources.
+        # This field is for use by internal tools that use the public API.
+        # Corresponds to the JSON property `locationHint`
+        # @return [String]
+        attr_accessor :location_hint
+      
         # The minimum number of virtual CPUs this instance will consume when running on
         # a sole-tenant node.
         # Corresponds to the JSON property `minNodeCpus`
@@ -26415,6 +26818,7 @@ module Google
         # Update properties of this object
         def update!(**args)
           @automatic_restart = args[:automatic_restart] if args.key?(:automatic_restart)
+          @location_hint = args[:location_hint] if args.key?(:location_hint)
           @min_node_cpus = args[:min_node_cpus] if args.key?(:min_node_cpus)
           @node_affinities = args[:node_affinities] if args.key?(:node_affinities)
           @on_host_maintenance = args[:on_host_maintenance] if args.key?(:on_host_maintenance)
@@ -26519,10 +26923,10 @@ module Google
         end
       end
       
-      # Represents a Cloud Armor Security Policy resource.
+      # Represents a Google Cloud Armor security policy resource.
       # Only external backend services that use load balancers can reference a
-      # Security Policy. For more information, read  Cloud Armor Security Policy
-      # Concepts. (== resource_for `$api_version`.securityPolicies ==)
+      # security policy. For more information, see  Google Cloud Armor security policy
+      # overview. (== resource_for `$api_version`.securityPolicies ==)
       class SecurityPolicy
         include Google::Apis::Core::Hashable
       
@@ -26771,7 +27175,7 @@ module Google
         # An integer indicating the priority of a rule in the list. The priority must be
         # a positive value between 0 and 2147483647. Rules are evaluated from highest to
         # lowest priority where 0 is the highest priority and 2147483647 is the lowest
-        # prority.
+        # priority.
         # Corresponds to the JSON property `priority`
         # @return [Fixnum]
         attr_accessor :priority
@@ -26866,6 +27270,48 @@ module Google
         end
       end
       
+      # The authentication and authorization settings for a BackendService.
+      class SecuritySettings
+        include Google::Apis::Core::Hashable
+      
+        # Optional. A URL referring to a networksecurity.ClientTlsPolicy resource that
+        # describes how clients should authenticate with this service's backends.
+        # clientTlsPolicy only applies to a global BackendService with the
+        # loadBalancingScheme set to INTERNAL_SELF_MANAGED.
+        # If left blank, communications are not encrypted.
+        # Note: This field currently has no impact.
+        # Corresponds to the JSON property `clientTlsPolicy`
+        # @return [String]
+        attr_accessor :client_tls_policy
+      
+        # Optional. A list of Subject Alternative Names (SANs) that the client verifies
+        # during a mutual TLS handshake with an server/endpoint for this BackendService.
+        # When the server presents its X.509 certificate to the client, the client
+        # inspects the certificate's subjectAltName field. If the field contains one of
+        # the specified values, the communication continues. Otherwise, it fails. This
+        # additional check enables the client to verify that the server is authorized to
+        # run the requested service.
+        # Note that the contents of the server certificate's subjectAltName field are
+        # configured by the Public Key Infrastructure which provisions server identities.
+        # Only applies to a global BackendService with loadBalancingScheme set to
+        # INTERNAL_SELF_MANAGED. Only applies when BackendService has an attached
+        # clientTlsPolicy with clientCertificate (mTLS mode).
+        # Note: This field currently has no impact.
+        # Corresponds to the JSON property `subjectAltNames`
+        # @return [Array<String>]
+        attr_accessor :subject_alt_names
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @client_tls_policy = args[:client_tls_policy] if args.key?(:client_tls_policy)
+          @subject_alt_names = args[:subject_alt_names] if args.key?(:subject_alt_names)
+        end
+      end
+      
       # An instance's serial console output.
       class SerialPortOutput
         include Google::Apis::Core::Hashable
@@ -27120,6 +27566,16 @@ module Google
         attr_accessor :auto_created
         alias_method :auto_created?, :auto_created
       
+        # Creates the new snapshot in the snapshot chain labeled with the specified name.
+        # The chain name must be 1-63 characters long and comply with RFC1035. This is
+        # an uncommon option only for advanced service owners who needs to create
+        # separate snapshot chains, for example, for chargeback tracking. When you
+        # describe your snapshot resource, this field is visible only if it has a non-
+        # empty value.
+        # Corresponds to the JSON property `chainName`
+        # @return [String]
+        attr_accessor :chain_name
+      
         # [Output Only] Creation timestamp in RFC3339 text format.
         # Corresponds to the JSON property `creationTimestamp`
         # @return [String]
@@ -27264,6 +27720,7 @@ module Google
         # Update properties of this object
         def update!(**args)
           @auto_created = args[:auto_created] if args.key?(:auto_created)
+          @chain_name = args[:chain_name] if args.key?(:chain_name)
           @creation_timestamp = args[:creation_timestamp] if args.key?(:creation_timestamp)
           @description = args[:description] if args.key?(:description)
           @disk_size_gb = args[:disk_size_gb] if args.key?(:disk_size_gb)
@@ -28084,10 +28541,10 @@ module Google
         end
       end
       
-      # Represents a Cloud Armor Security Policy resource.
-      # Only external backend services used by HTTP or HTTPS load balancers can
-      # reference a Security Policy. For more information, read read  Cloud Armor
-      # Security Policy Concepts. (== resource_for `$api_version`.sslPolicies ==)
+      # Represents an SSL Policy resource.
+      # Use SSL policies to control the SSL features, such as versions and cipher
+      # suites, offered by an HTTPS or SSL Proxy load balancer. For more information,
+      # read  SSL Policy Concepts. (== resource_for `$api_version`.sslPolicies ==)
       class SslPolicy
         include Google::Apis::Core::Hashable
       
@@ -28490,12 +28947,14 @@ module Google
         # @return [String]
         attr_accessor :self_link
       
-        # [Output Only] The state of the subnetwork, which can be one of READY or
-        # DRAINING. A subnetwork that is READY is ready to be used. The state of
-        # DRAINING is only applicable to subnetworks that have the purpose set to
+        # [Output Only] The state of the subnetwork, which can be one of the following
+        # values: READY: Subnetwork is created and ready to use DRAINING: only
+        # applicable to subnetworks that have the purpose set to
         # INTERNAL_HTTPS_LOAD_BALANCER and indicates that connections to the load
         # balancer are being drained. A subnetwork that is draining cannot be used or
-        # modified until it reaches a status of READY.
+        # modified until it reaches a status of READY CREATING: Subnetwork is
+        # provisioning DELETING: Subnetwork is being deleted UPDATING: Subnetwork is
+        # being updated
         # Corresponds to the JSON property `state`
         # @return [String]
         attr_accessor :state
@@ -29460,6 +29919,19 @@ module Google
         # @return [String]
         attr_accessor :name
       
+        # This field only applies when the forwarding rule that references this target
+        # proxy has a loadBalancingScheme set to INTERNAL_SELF_MANAGED.
+        # When this field is set to true, Envoy proxies set up inbound traffic
+        # interception and bind to the IP address and port specified in the forwarding
+        # rule. This is generally useful when using Traffic Director to configure Envoy
+        # as a gateway or middle proxy (in other words, not a sidecar proxy). The Envoy
+        # proxy listens for inbound requests and handles requests when it receives them.
+        # The default is false.
+        # Corresponds to the JSON property `proxyBind`
+        # @return [Boolean]
+        attr_accessor :proxy_bind
+        alias_method :proxy_bind?, :proxy_bind
+      
         # [Output Only] URL of the region where the regional Target HTTP Proxy resides.
         # This field is not applicable to global Target HTTP Proxies.
         # Corresponds to the JSON property `region`
@@ -29489,6 +29961,7 @@ module Google
           @id = args[:id] if args.key?(:id)
           @kind = args[:kind] if args.key?(:kind)
           @name = args[:name] if args.key?(:name)
+          @proxy_bind = args[:proxy_bind] if args.key?(:proxy_bind)
           @region = args[:region] if args.key?(:region)
           @self_link = args[:self_link] if args.key?(:self_link)
           @url_map = args[:url_map] if args.key?(:url_map)
@@ -29811,6 +30284,18 @@ module Google
       class TargetHttpsProxy
         include Google::Apis::Core::Hashable
       
+        # Optional. A URL referring to a networksecurity.AuthorizationPolicy resource
+        # that describes how the proxy should authorize inbound traffic. If left blank,
+        # access will not be restricted by an authorization policy.
+        # Refer to the AuthorizationPolicy resource for additional details.
+        # authorizationPolicy only applies to a global TargetHttpsProxy attached to
+        # globalForwardingRules with the loadBalancingScheme set to
+        # INTERNAL_SELF_MANAGED.
+        # Note: This field currently has no impact.
+        # Corresponds to the JSON property `authorizationPolicy`
+        # @return [String]
+        attr_accessor :authorization_policy
+      
         # [Output Only] Creation timestamp in RFC3339 text format.
         # Corresponds to the JSON property `creationTimestamp`
         # @return [String]
@@ -29844,6 +30329,19 @@ module Google
         # @return [String]
         attr_accessor :name
       
+        # This field only applies when the forwarding rule that references this target
+        # proxy has a loadBalancingScheme set to INTERNAL_SELF_MANAGED.
+        # When this field is set to true, Envoy proxies set up inbound traffic
+        # interception and bind to the IP address and port specified in the forwarding
+        # rule. This is generally useful when using Traffic Director to configure Envoy
+        # as a gateway or middle proxy (in other words, not a sidecar proxy). The Envoy
+        # proxy listens for inbound requests and handles requests when it receives them.
+        # The default is false.
+        # Corresponds to the JSON property `proxyBind`
+        # @return [Boolean]
+        attr_accessor :proxy_bind
+        alias_method :proxy_bind?, :proxy_bind
+      
         # Specifies the QUIC override policy for this TargetHttpsProxy resource. This
         # setting determines whether the load balancer attempts to negotiate QUIC with
         # clients. You can specify NONE, ENABLE, or DISABLE.
@@ -29868,6 +30366,17 @@ module Google
         # @return [String]
         attr_accessor :self_link
       
+        # Optional. A URL referring to a networksecurity.ServerTlsPolicy resource that
+        # describes how the proxy should authenticate inbound traffic.
+        # serverTlsPolicy only applies to a global TargetHttpsProxy attached to
+        # globalForwardingRules with the loadBalancingScheme set to
+        # INTERNAL_SELF_MANAGED.
+        # If left blank, communications are not encrypted.
+        # Note: This field currently has no impact.
+        # Corresponds to the JSON property `serverTlsPolicy`
+        # @return [String]
+        attr_accessor :server_tls_policy
+      
         # URLs to SslCertificate resources that are used to authenticate connections
         # between users and the load balancer. At least one SSL certificate must be
         # specified. Currently, you may specify up to 15 SSL certificates.
@@ -29898,14 +30407,17 @@ module Google
       
         # Update properties of this object
         def update!(**args)
+          @authorization_policy = args[:authorization_policy] if args.key?(:authorization_policy)
           @creation_timestamp = args[:creation_timestamp] if args.key?(:creation_timestamp)
           @description = args[:description] if args.key?(:description)
           @id = args[:id] if args.key?(:id)
           @kind = args[:kind] if args.key?(:kind)
           @name = args[:name] if args.key?(:name)
+          @proxy_bind = args[:proxy_bind] if args.key?(:proxy_bind)
           @quic_override = args[:quic_override] if args.key?(:quic_override)
           @region = args[:region] if args.key?(:region)
           @self_link = args[:self_link] if args.key?(:self_link)
+          @server_tls_policy = args[:server_tls_policy] if args.key?(:server_tls_policy)
           @ssl_certificates = args[:ssl_certificates] if args.key?(:ssl_certificates)
           @ssl_policy = args[:ssl_policy] if args.key?(:ssl_policy)
           @url_map = args[:url_map] if args.key?(:url_map)
@@ -30582,9 +31094,9 @@ module Google
       class TargetPool
         include Google::Apis::Core::Hashable
       
-        # This field is applicable only when the containing target pool is serving a
-        # forwarding rule as the primary pool, and its failoverRatio field is properly
-        # set to a value between [0, 1].
+        # The server-defined URL for the resource. This field is applicable only when
+        # the containing target pool is serving a forwarding rule as the primary pool,
+        # and its failoverRatio field is properly set to a value between [0, 1].
         # backupPool and failoverRatio together define the fallback behavior of the
         # primary target pool: if the ratio of the healthy instances in the primary pool
         # is at or below failoverRatio, traffic arriving at the load-balanced IP will be