google-apis-compute_beta 0.107.0 → 0.109.0

data/lib/google/apis/compute_beta/classes.rb

@@ -567,8 +567,7 @@ module Google
         # @return [String]
         attr_accessor :public_ptr_domain_name
       
-        # [Output Only] The resource URL for the security policy associated with this
-        # access config.
+        # The resource URL for the security policy associated with this access config.
         # Corresponds to the JSON property `securityPolicy`
         # @return [String]
         attr_accessor :security_policy
@@ -1870,7 +1869,9 @@ module Google
         # disk, one of initializeParams.sourceSnapshot or initializeParams.sourceImage
         # or disks.source is required. To create a disk with a snapshot that you created,
         # specify the snapshot name in the following format: global/snapshots/my-backup
-        # If the source snapshot is deleted later, this field will not be set.
+        # If the source snapshot is deleted later, this field will not be set. Note: You
+        # cannot create VMs in bulk using a snapshot as the source. Use an image instead
+        # when you create VMs using the bulk insert method.
         # Corresponds to the JSON property `sourceSnapshot`
         # @return [String]
         attr_accessor :source_snapshot
@@ -3142,7 +3143,8 @@ module Google
         # CACHE_ALL_STATIC Automatically cache static content, including common image
         # formats, media (video and audio), and web assets (JavaScript and CSS).
         # Requests and responses that are marked as uncacheable, as well as dynamic
-        # content (including HTML), will not be cached.
+        # content (including HTML), will not be cached. If no value is provided for
+        # cdnPolicy.cacheMode, it defaults to CACHE_ALL_STATIC.
         # Corresponds to the JSON property `cacheMode`
         # @return [String]
         attr_accessor :cache_mode
@@ -3918,6 +3920,12 @@ module Google
         # @return [Fixnum]
         attr_accessor :timeout_sec
       
+        # Configuration for Backend Authenticated TLS and mTLS. May only be specified
+        # when the backend protocol is SSL, HTTPS or HTTP2.
+        # Corresponds to the JSON property `tlsSettings`
+        # @return [Google::Apis::ComputeBeta::BackendServiceTlsSettings]
+        attr_accessor :tls_settings
+      
         # [Output Only] List of resources referencing given backend service.
         # Corresponds to the JSON property `usedBy`
         # @return [Array<Google::Apis::ComputeBeta::BackendServiceUsedBy>]
@@ -3975,6 +3983,7 @@ module Google
           @strong_session_affinity_cookie = args[:strong_session_affinity_cookie] if args.key?(:strong_session_affinity_cookie)
           @subsetting = args[:subsetting] if args.key?(:subsetting)
           @timeout_sec = args[:timeout_sec] if args.key?(:timeout_sec)
+          @tls_settings = args[:tls_settings] if args.key?(:tls_settings)
           @used_by = args[:used_by] if args.key?(:used_by)
         end
       end
@@ -4130,7 +4139,8 @@ module Google
         # CACHE_ALL_STATIC Automatically cache static content, including common image
         # formats, media (video and audio), and web assets (JavaScript and CSS).
         # Requests and responses that are marked as uncacheable, as well as dynamic
-        # content (including HTML), will not be cached.
+        # content (including HTML), will not be cached. If no value is provided for
+        # cdnPolicy.cacheMode, it defaults to CACHE_ALL_STATIC.
         # Corresponds to the JSON property `cacheMode`
         # @return [String]
         attr_accessor :cache_mode
@@ -4960,6 +4970,80 @@ module Google
         end
       end
       
+      # 
+      class BackendServiceTlsSettings
+        include Google::Apis::Core::Hashable
+      
+        # Reference to the BackendAuthenticationConfig resource from the networksecurity.
+        # googleapis.com namespace. Can be used in authenticating TLS connections to the
+        # backend, as specified by the authenticationMode field. Can only be specified
+        # if authenticationMode is not NONE.
+        # Corresponds to the JSON property `authenticationConfig`
+        # @return [String]
+        attr_accessor :authentication_config
+      
+        # Server Name Indication - see RFC3546 section 3.1. If set, the load balancer
+        # sends this string as the SNI hostname in the TLS connection to the backend,
+        # and requires that this string match a Subject Alternative Name (SAN) in the
+        # backend's server certificate. With a Regional Internet NEG backend, if the SNI
+        # is specified here, the load balancer uses it regardless of whether the
+        # Regional Internet NEG is specified with FQDN or IP address and port. When both
+        # sni and subjectAltNames[] are specified, the load balancer matches the backend
+        # certificate's SAN only to subjectAltNames[].
+        # Corresponds to the JSON property `sni`
+        # @return [String]
+        attr_accessor :sni
+      
+        # A list of Subject Alternative Names (SANs) that the Load Balancer verifies
+        # during a TLS handshake with the backend. When the server presents its X.509
+        # certificate to the Load Balancer, the Load Balancer inspects the certificate's
+        # SAN field, and requires that at least one SAN match one of the subjectAltNames
+        # in the list. This field is limited to 5 entries. When both sni and
+        # subjectAltNames[] are specified, the load balancer matches the backend
+        # certificate's SAN only to subjectAltNames[].
+        # Corresponds to the JSON property `subjectAltNames`
+        # @return [Array<Google::Apis::ComputeBeta::BackendServiceTlsSettingsSubjectAltName>]
+        attr_accessor :subject_alt_names
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @authentication_config = args[:authentication_config] if args.key?(:authentication_config)
+          @sni = args[:sni] if args.key?(:sni)
+          @subject_alt_names = args[:subject_alt_names] if args.key?(:subject_alt_names)
+        end
+      end
+      
+      # A Subject Alternative Name that the load balancer matches against the SAN
+      # field in the TLS certificate provided by the backend, specified as either a
+      # DNS name or a URI, in accordance with RFC 5280 4.2.1.6
+      class BackendServiceTlsSettingsSubjectAltName
+        include Google::Apis::Core::Hashable
+      
+        # The SAN specified as a DNS Name.
+        # Corresponds to the JSON property `dnsName`
+        # @return [String]
+        attr_accessor :dns_name
+      
+        # The SAN specified as a URI.
+        # Corresponds to the JSON property `uniformResourceIdentifier`
+        # @return [String]
+        attr_accessor :uniform_resource_identifier
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @dns_name = args[:dns_name] if args.key?(:dns_name)
+          @uniform_resource_identifier = args[:uniform_resource_identifier] if args.key?(:uniform_resource_identifier)
+        end
+      end
+      
       # 
       class BackendServiceUsedBy
         include Google::Apis::Core::Hashable
@@ -4981,6 +5065,25 @@ module Google
         end
       end
       
+      # 
+      class BackendServicesGetEffectiveSecurityPoliciesResponse
+        include Google::Apis::Core::Hashable
+      
+        # Effective security policies for the backend service.
+        # Corresponds to the JSON property `securityPolicies`
+        # @return [Array<Google::Apis::ComputeBeta::SecurityPolicy>]
+        attr_accessor :security_policies
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @security_policies = args[:security_policies] if args.key?(:security_policies)
+        end
+      end
+      
       # 
       class BackendServicesScopedList
         include Google::Apis::Core::Hashable
@@ -8539,12 +8642,12 @@ module Google
         # @return [String]
         attr_accessor :domain
       
-        # Additional structured details about this error. Keys must match /a-z+/ but
-        # should ideally be lowerCamelCase. Also they must be limited to 64 characters
-        # in length. When identifying the current value of an exceeded limit, the units
-        # should be contained in the key, not the value. For example, rather than `"
-        # instanceLimit": "100/request"`, should be returned as, `"
-        # instanceLimitPerRequest": "100"`, if the client exceeds the number of
+        # Additional structured details about this error. Keys must match a regular
+        # expression of `a-z+` but should ideally be lowerCamelCase. Also, they must be
+        # limited to 64 characters in length. When identifying the current value of an
+        # exceeded limit, the units should be contained in the key, not the value. For
+        # example, rather than ``"instanceLimit": "100/request"``, should be returned as,
+        # ``"instanceLimitPerRequest": "100"``, if the client exceeds the number of
         # instances that can be created in a single (batch) request.
         # Corresponds to the JSON property `metadatas`
         # @return [Hash<String,String>]
@@ -9513,6 +9616,97 @@ module Google
         end
       end
       
+      # 
+      class FirewallPoliciesScopedList
+        include Google::Apis::Core::Hashable
+      
+        # A list of firewall policies contained in this scope.
+        # Corresponds to the JSON property `firewallPolicies`
+        # @return [Array<Google::Apis::ComputeBeta::FirewallPolicy>]
+        attr_accessor :firewall_policies
+      
+        # Informational warning which replaces the list of firewall policies when the
+        # list is empty.
+        # Corresponds to the JSON property `warning`
+        # @return [Google::Apis::ComputeBeta::FirewallPoliciesScopedList::Warning]
+        attr_accessor :warning
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @firewall_policies = args[:firewall_policies] if args.key?(:firewall_policies)
+          @warning = args[:warning] if args.key?(:warning)
+        end
+        
+        # Informational warning which replaces the list of firewall policies when the
+        # list is empty.
+        class Warning
+          include Google::Apis::Core::Hashable
+        
+          # [Output Only] A warning code, if applicable. For example, Compute Engine
+          # returns NO_RESULTS_ON_PAGE if there are no results in the response.
+          # Corresponds to the JSON property `code`
+          # @return [String]
+          attr_accessor :code
+        
+          # [Output Only] Metadata about this warning in key: value format. For example: "
+          # data": [ ` "key": "scope", "value": "zones/us-east1-d" `
+          # Corresponds to the JSON property `data`
+          # @return [Array<Google::Apis::ComputeBeta::FirewallPoliciesScopedList::Warning::Datum>]
+          attr_accessor :data
+        
+          # [Output Only] A human-readable description of the warning code.
+          # Corresponds to the JSON property `message`
+          # @return [String]
+          attr_accessor :message
+        
+          def initialize(**args)
+             update!(**args)
+          end
+        
+          # Update properties of this object
+          def update!(**args)
+            @code = args[:code] if args.key?(:code)
+            @data = args[:data] if args.key?(:data)
+            @message = args[:message] if args.key?(:message)
+          end
+          
+          # 
+          class Datum
+            include Google::Apis::Core::Hashable
+          
+            # [Output Only] A key that provides more detail on the warning being returned.
+            # For example, for warnings where there are no results in a list request for a
+            # particular zone, this key might be scope and the key value might be the zone
+            # name. Other examples might be a key indicating a deprecated resource and a
+            # suggested replacement, or a warning about invalid network settings (for
+            # example, if an instance attempts to perform IP forwarding but is not enabled
+            # for IP forwarding).
+            # Corresponds to the JSON property `key`
+            # @return [String]
+            attr_accessor :key
+          
+            # [Output Only] A warning data value corresponding to the key.
+            # Corresponds to the JSON property `value`
+            # @return [String]
+            attr_accessor :value
+          
+            def initialize(**args)
+               update!(**args)
+            end
+          
+            # Update properties of this object
+            def update!(**args)
+              @key = args[:key] if args.key?(:key)
+              @value = args[:value] if args.key?(:value)
+            end
+          end
+        end
+      end
+      
       # Represents a Firewall Policy resource.
       class FirewallPolicy
         include Google::Apis::Core::Hashable
@@ -11027,6 +11221,12 @@ module Google
         attr_accessor :auto_delete_auto_created_reservations
         alias_method :auto_delete_auto_created_reservations?, :auto_delete_auto_created_reservations
       
+        # If not present, then FR will not deliver a new commitment or update an
+        # existing commitment.
+        # Corresponds to the JSON property `commitmentInfo`
+        # @return [Google::Apis::ComputeBeta::FutureReservationCommitmentInfo]
+        attr_accessor :commitment_info
+      
         # [Output Only] The creation timestamp for this future reservation in RFC3339
         # text format.
         # Corresponds to the JSON property `creationTimestamp`
@@ -11044,25 +11244,12 @@ module Google
         # @return [String]
         attr_accessor :description
       
-        # Indicates if this group of VMs have opportunistic maintenance enabled. This
-        # will be set on the FR by customers, and will be used for reservation and
-        # reservation block maintenance .
-        # Corresponds to the JSON property `enableOpportunisticMaintenance`
-        # @return [Boolean]
-        attr_accessor :enable_opportunistic_maintenance
-        alias_method :enable_opportunistic_maintenance?, :enable_opportunistic_maintenance
-      
         # [Output Only] A unique identifier for this future reservation. The server
         # defines this identifier.
         # Corresponds to the JSON property `id`
         # @return [Fixnum]
         attr_accessor :id
       
-        # Action to take during reservation termination.
-        # Corresponds to the JSON property `instanceTerminationAction`
-        # @return [String]
-        attr_accessor :instance_termination_action
-      
         # [Output Only] Type of the resource. Always compute#futureReservation for
         # future reservations.
         # Corresponds to the JSON property `kind`
@@ -11159,12 +11346,11 @@ module Google
           @auto_created_reservations_delete_time = args[:auto_created_reservations_delete_time] if args.key?(:auto_created_reservations_delete_time)
           @auto_created_reservations_duration = args[:auto_created_reservations_duration] if args.key?(:auto_created_reservations_duration)
           @auto_delete_auto_created_reservations = args[:auto_delete_auto_created_reservations] if args.key?(:auto_delete_auto_created_reservations)
+          @commitment_info = args[:commitment_info] if args.key?(:commitment_info)
           @creation_timestamp = args[:creation_timestamp] if args.key?(:creation_timestamp)
           @deployment_type = args[:deployment_type] if args.key?(:deployment_type)
           @description = args[:description] if args.key?(:description)
-          @enable_opportunistic_maintenance = args[:enable_opportunistic_maintenance] if args.key?(:enable_opportunistic_maintenance)
           @id = args[:id] if args.key?(:id)
-          @instance_termination_action = args[:instance_termination_action] if args.key?(:instance_termination_action)
           @kind = args[:kind] if args.key?(:kind)
           @name = args[:name] if args.key?(:name)
           @name_prefix = args[:name_prefix] if args.key?(:name_prefix)
@@ -11182,6 +11368,40 @@ module Google
         end
       end
       
+      # 
+      class FutureReservationCommitmentInfo
+        include Google::Apis::Core::Hashable
+      
+        # name of the commitment where capacity is being delivered to.
+        # Corresponds to the JSON property `commitmentName`
+        # @return [String]
+        attr_accessor :commitment_name
+      
+        # Indicates if a Commitment needs to be created as part of FR delivery. If this
+        # field is not present, then no commitment needs to be created.
+        # Corresponds to the JSON property `commitmentPlan`
+        # @return [String]
+        attr_accessor :commitment_plan
+      
+        # Only applicable if FR is delivering to the same reservation. If set, all
+        # parent commitments will be extended to match the end date of the plan for this
+        # commitment.
+        # Corresponds to the JSON property `previousCommitmentTerms`
+        # @return [String]
+        attr_accessor :previous_commitment_terms
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @commitment_name = args[:commitment_name] if args.key?(:commitment_name)
+          @commitment_plan = args[:commitment_plan] if args.key?(:commitment_plan)
+          @previous_commitment_terms = args[:previous_commitment_terms] if args.key?(:previous_commitment_terms)
+        end
+      end
+      
       # 
       class FutureReservationSpecificSkuProperties
         include Google::Apis::Core::Hashable
@@ -12088,13 +12308,6 @@ module Google
       class GroupMaintenanceInfo
         include Google::Apis::Core::Hashable
       
-        # This setting enables or disables opportunistic maintenance. If enabled,
-        # maintenance is performed on unused reservations whenever possible.
-        # Corresponds to the JSON property `enableOpportunisticMaintenance`
-        # @return [Boolean]
-        attr_accessor :enable_opportunistic_maintenance
-        alias_method :enable_opportunistic_maintenance?, :enable_opportunistic_maintenance
-      
         # Progress for ongoing maintenance for this group of VMs/hosts. Describes number
         # of hosts in the block that have ongoing maintenance.
         # Corresponds to the JSON property `maintenanceOngoingCount`
@@ -12123,7 +12336,6 @@ module Google
       
         # Update properties of this object
         def update!(**args)
-          @enable_opportunistic_maintenance = args[:enable_opportunistic_maintenance] if args.key?(:enable_opportunistic_maintenance)
           @maintenance_ongoing_count = args[:maintenance_ongoing_count] if args.key?(:maintenance_ongoing_count)
           @maintenance_pending_count = args[:maintenance_pending_count] if args.key?(:maintenance_pending_count)
           @scheduling_type = args[:scheduling_type] if args.key?(:scheduling_type)
@@ -14404,12 +14616,10 @@ module Google
       
         # In response to a matching matchRule, the load balancer performs advanced
         # routing actions, such as URL rewrites and header transformations, before
-        # forwarding the request to the selected backend. If routeAction specifies any
-        # weightedBackendServices, service must not be set. Conversely if service is set,
-        # routeAction cannot contain any weightedBackendServices. Only one of
-        # urlRedirect, service or routeAction.weightedBackendService must be set. URL
-        # maps for classic Application Load Balancers only support the urlRewrite action
-        # within a route rule's routeAction.
+        # forwarding the request to the selected backend. Only one of urlRedirect,
+        # service or routeAction.weightedBackendService can be set. URL maps for classic
+        # Application Load Balancers only support the urlRewrite action within a route
+        # rule's routeAction.
         # Corresponds to the JSON property `routeAction`
         # @return [Google::Apis::ComputeBeta::HttpRouteAction]
         attr_accessor :route_action
@@ -14417,10 +14627,8 @@ module Google
         # The full or partial URL of the backend service resource to which traffic is
         # directed if this rule is matched. If routeAction is also specified, advanced
         # routing actions, such as URL rewrites, take effect before sending the request
-        # to the backend. However, if service is specified, routeAction cannot contain
-        # any weightedBackendServices. Conversely, if routeAction specifies any
-        # weightedBackendServices, service must not be specified. Only one of
-        # urlRedirect, service or routeAction.weightedBackendService must be set.
+        # to the backend. Only one of urlRedirect, service or routeAction.
+        # weightedBackendService can be set.
         # Corresponds to the JSON property `service`
         # @return [String]
         attr_accessor :service
@@ -20131,6 +20339,11 @@ module Google
         # @return [String]
         attr_accessor :name
       
+        # [Output Only] The packet mirroring rules that apply to the instance.
+        # Corresponds to the JSON property `packetMirroringRules`
+        # @return [Array<Google::Apis::ComputeBeta::FirewallPolicyRule>]
+        attr_accessor :packet_mirroring_rules
+      
         # [Output only] Priority of firewall policy association. Not applicable for type=
         # HIERARCHY.
         # Corresponds to the JSON property `priority`
@@ -20163,6 +20376,7 @@ module Google
         def update!(**args)
           @display_name = args[:display_name] if args.key?(:display_name)
           @name = args[:name] if args.key?(:name)
+          @packet_mirroring_rules = args[:packet_mirroring_rules] if args.key?(:packet_mirroring_rules)
           @priority = args[:priority] if args.key?(:priority)
           @rules = args[:rules] if args.key?(:rules)
           @short_name = args[:short_name] if args.key?(:short_name)
@@ -21459,7 +21673,7 @@ module Google
         # BPS_100M: 100 Mbit/s - BPS_200M: 200 Mbit/s - BPS_300M: 300 Mbit/s - BPS_400M:
         # 400 Mbit/s - BPS_500M: 500 Mbit/s - BPS_1G: 1 Gbit/s - BPS_2G: 2 Gbit/s -
         # BPS_5G: 5 Gbit/s - BPS_10G: 10 Gbit/s - BPS_20G: 20 Gbit/s - BPS_50G: 50 Gbit/
-        # s
+        # s - BPS_100G: 100 Gbit/s
         # Corresponds to the JSON property `bandwidth`
         # @return [String]
         attr_accessor :bandwidth
@@ -21469,13 +21683,13 @@ module Google
         # @return [Array<String>]
         attr_accessor :candidate_ipv6_subnets
       
-        # Up to 16 candidate prefixes that can be used to restrict the allocation of
-        # cloudRouterIpAddress and customerRouterIpAddress for this attachment. All
-        # prefixes must be within link-local address space (169.254.0.0/16) and must be /
-        # 29 or shorter (/28, /27, etc). Google will attempt to select an unused /29
-        # from the supplied candidate prefix(es). The request will fail if all possible /
-        # 29s are in use on Google's edge. If not supplied, Google will randomly select
-        # an unused /29 from all of link-local space.
+        # Input only. Up to 16 candidate prefixes that can be used to restrict the
+        # allocation of cloudRouterIpAddress and customerRouterIpAddress for this
+        # attachment. All prefixes must be within link-local address space (169.254.0.0/
+        # 16) and must be /29 or shorter (/28, /27, etc). Google will attempt to select
+        # an unused /29 from the supplied candidate prefix(es). The request will fail if
+        # all possible /29s are in use on Google's edge. If not supplied, Google will
+        # randomly select an unused /29 from all of link-local space.
         # Corresponds to the JSON property `candidateSubnets`
         # @return [Array<String>]
         attr_accessor :candidate_subnets
@@ -21537,8 +21751,8 @@ module Google
         # @return [String]
         attr_accessor :description
       
-        # Desired availability domain for the attachment. Only available for type
-        # PARTNER, at creation time, and can take one of the following values: -
+        # Input only. Desired availability domain for the attachment. Only available for
+        # type PARTNER, at creation time, and can take one of the following values: -
         # AVAILABILITY_DOMAIN_ANY - AVAILABILITY_DOMAIN_1 - AVAILABILITY_DOMAIN_2 For
         # improved reliability, customers should configure a pair of attachments, one
         # per availability domain. The selected availability domain will be provided to
@@ -21738,13 +21952,13 @@ module Google
         # @return [String]
         attr_accessor :state
       
-        # Length of the IPv4 subnet mask. Allowed values: - 29 (default) - 30 The
-        # default value is 29, except for Cross-Cloud Interconnect connections that use
-        # an InterconnectRemoteLocation with a constraints.subnetLengthRange.min equal
-        # to 30. For example, connections that use an Azure remote location fall into
-        # this category. In these cases, the default value is 30, and requesting 29
-        # returns an error. Where both 29 and 30 are allowed, 29 is preferred, because
-        # it gives Google Cloud Support more debugging visibility.
+        # Input only. Length of the IPv4 subnet mask. Allowed values: - 29 (default) -
+        # 30 The default value is 29, except for Cross-Cloud Interconnect connections
+        # that use an InterconnectRemoteLocation with a constraints.subnetLengthRange.
+        # min equal to 30. For example, connections that use an Azure remote location
+        # fall into this category. In these cases, the default value is 30, and
+        # requesting 29 returns an error. Where both 29 and 30 are allowed, 29 is
+        # preferred, because it gives Google Cloud Support more debugging visibility.
         # Corresponds to the JSON property `subnetLength`
         # @return [Fixnum]
         attr_accessor :subnet_length
@@ -22672,7 +22886,7 @@ module Google
         attr_accessor :availability_zone
       
         # [Output only] List of features available at this InterconnectLocation, which
-        # can take one of the following values: - MACSEC
+        # can take one of the following values: - IF_MACSEC
         # Corresponds to the JSON property `availableFeatures`
         # @return [Array<String>]
         attr_accessor :available_features
@@ -23612,7 +23826,7 @@ module Google
         # @return [String]
         attr_accessor :name
       
-        # 
+        # [Input Only] Deprecated.
         # Corresponds to the JSON property `resourceRequirements`
         # @return [Google::Apis::ComputeBeta::LicenseResourceRequirements]
         attr_accessor :resource_requirements
@@ -23782,14 +23996,14 @@ module Google
       class LicenseResourceRequirements
         include Google::Apis::Core::Hashable
       
-        # Minimum number of guest cpus required to use the Instance. Enforced at
-        # Instance creation and Instance start.
+        # [Input Only] Deprecated. This field no longer reflects the minimum number of
+        # guest cpus required to use the Instance.
         # Corresponds to the JSON property `minGuestCpuCount`
         # @return [Fixnum]
         attr_accessor :min_guest_cpu_count
       
-        # Minimum memory required to use the Instance. Enforced at Instance creation and
-        # Instance start.
+        # [Input Only] Deprecated. This field no longer reflects the minimum memory
+        # required to use the Instance.
         # Corresponds to the JSON property `minMemoryMb`
         # @return [Fixnum]
         attr_accessor :min_memory_mb
@@ -25322,7 +25536,8 @@ module Google
         # @return [String]
         attr_accessor :region
       
-        # Resource policies for this multi-MIG.
+        # Resource policies message for a multi-MIG. Specifies the workload policy
+        # configuration of the multi-MIG.
         # Corresponds to the JSON property `resourcePolicies`
         # @return [Google::Apis::ComputeBeta::MultiMigResourcePolicies]
         attr_accessor :resource_policies
@@ -25349,11 +25564,17 @@ module Google
         end
       end
       
-      # 
+      # Resource policies message for a multi-MIG. Specifies the workload policy
+      # configuration of the multi-MIG.
       class MultiMigResourcePolicies
         include Google::Apis::Core::Hashable
       
-        # 
+        # The URL of the workload policy for this multi-MIG. It can be a full or partial
+        # URL. For example, the following are all valid URLs to a workload policy: -
+        # https://www.googleapis.com/compute/v1/projects/project/regions/region /
+        # resourcePolicies/resourcePolicy - projects/project/regions/region/
+        # resourcePolicies/resourcePolicy - regions/region/resourcePolicies/
+        # resourcePolicy
         # Corresponds to the JSON property `workloadPolicy`
         # @return [String]
         attr_accessor :workload_policy
@@ -25698,7 +25919,7 @@ module Google
       
         # A full or partial URL of the network profile to apply to this network. This
         # field can be set only at resource creation time. For example, the following
-        # are valid URLs: - https://www.googleapis.com/compute/alpha/projects/`
+        # are valid URLs: - https://www.googleapis.com/compute/`api_version`/projects/`
         # project_id`/global/networkProfiles/`network_profile_name` - projects/`
         # project_id`/global/networkProfiles/`network_profile_name`
         # Corresponds to the JSON property `networkProfile`
@@ -27642,6 +27863,130 @@ module Google
         end
       end
       
+      # 
+      class NetworkFirewallPolicyAggregatedList
+        include Google::Apis::Core::Hashable
+      
+        # [Output Only] Unique identifier for the resource; defined by the server.
+        # Corresponds to the JSON property `id`
+        # @return [String]
+        attr_accessor :id
+      
+        # A list of FirewallPoliciesScopedList resources.
+        # Corresponds to the JSON property `items`
+        # @return [Hash<String,Google::Apis::ComputeBeta::FirewallPoliciesScopedList>]
+        attr_accessor :items
+      
+        # [Output Only] Type of resource. Always compute#
+        # networkFirewallPoliciesAggregatedList for lists of network firewall policies.
+        # Corresponds to the JSON property `kind`
+        # @return [String]
+        attr_accessor :kind
+      
+        # [Output Only] This token allows you to get the next page of results for list
+        # requests. If the number of results is larger than maxResults, use the
+        # nextPageToken as a value for the query parameter pageToken in the next list
+        # request. Subsequent list requests will have their own nextPageToken to
+        # continue paging through the results.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        # [Output Only] Server-defined URL for this resource.
+        # Corresponds to the JSON property `selfLink`
+        # @return [String]
+        attr_accessor :self_link
+      
+        # [Output Only] Unreachable resources.
+        # Corresponds to the JSON property `unreachables`
+        # @return [Array<String>]
+        attr_accessor :unreachables
+      
+        # [Output Only] Informational warning message.
+        # Corresponds to the JSON property `warning`
+        # @return [Google::Apis::ComputeBeta::NetworkFirewallPolicyAggregatedList::Warning]
+        attr_accessor :warning
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @id = args[:id] if args.key?(:id)
+          @items = args[:items] if args.key?(:items)
+          @kind = args[:kind] if args.key?(:kind)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+          @self_link = args[:self_link] if args.key?(:self_link)
+          @unreachables = args[:unreachables] if args.key?(:unreachables)
+          @warning = args[:warning] if args.key?(:warning)
+        end
+        
+        # [Output Only] Informational warning message.
+        class Warning
+          include Google::Apis::Core::Hashable
+        
+          # [Output Only] A warning code, if applicable. For example, Compute Engine
+          # returns NO_RESULTS_ON_PAGE if there are no results in the response.
+          # Corresponds to the JSON property `code`
+          # @return [String]
+          attr_accessor :code
+        
+          # [Output Only] Metadata about this warning in key: value format. For example: "
+          # data": [ ` "key": "scope", "value": "zones/us-east1-d" `
+          # Corresponds to the JSON property `data`
+          # @return [Array<Google::Apis::ComputeBeta::NetworkFirewallPolicyAggregatedList::Warning::Datum>]
+          attr_accessor :data
+        
+          # [Output Only] A human-readable description of the warning code.
+          # Corresponds to the JSON property `message`
+          # @return [String]
+          attr_accessor :message
+        
+          def initialize(**args)
+             update!(**args)
+          end
+        
+          # Update properties of this object
+          def update!(**args)
+            @code = args[:code] if args.key?(:code)
+            @data = args[:data] if args.key?(:data)
+            @message = args[:message] if args.key?(:message)
+          end
+          
+          # 
+          class Datum
+            include Google::Apis::Core::Hashable
+          
+            # [Output Only] A key that provides more detail on the warning being returned.
+            # For example, for warnings where there are no results in a list request for a
+            # particular zone, this key might be scope and the key value might be the zone
+            # name. Other examples might be a key indicating a deprecated resource and a
+            # suggested replacement, or a warning about invalid network settings (for
+            # example, if an instance attempts to perform IP forwarding but is not enabled
+            # for IP forwarding).
+            # Corresponds to the JSON property `key`
+            # @return [String]
+            attr_accessor :key
+          
+            # [Output Only] A warning data value corresponding to the key.
+            # Corresponds to the JSON property `value`
+            # @return [String]
+            attr_accessor :value
+          
+            def initialize(**args)
+               update!(**args)
+            end
+          
+            # Update properties of this object
+            def update!(**args)
+              @key = args[:key] if args.key?(:key)
+              @value = args[:value] if args.key?(:value)
+            end
+          end
+        end
+      end
+      
       # A network interface resource attached to an instance.
       class NetworkInterface
         include Google::Apis::Core::Hashable
@@ -28077,6 +28422,11 @@ module Google
         # @return [String]
         attr_accessor :kind
       
+        # [Output Only] Location to which the network is restricted.
+        # Corresponds to the JSON property `location`
+        # @return [Google::Apis::ComputeBeta::NetworkProfileLocation]
+        attr_accessor :location
+      
         # [Output Only] Name of the resource.
         # Corresponds to the JSON property `name`
         # @return [String]
@@ -28108,6 +28458,7 @@ module Google
           @features = args[:features] if args.key?(:features)
           @id = args[:id] if args.key?(:id)
           @kind = args[:kind] if args.key?(:kind)
+          @location = args[:location] if args.key?(:location)
           @name = args[:name] if args.key?(:name)
           @self_link = args[:self_link] if args.key?(:self_link)
           @self_link_with_id = args[:self_link_with_id] if args.key?(:self_link_with_id)
@@ -28115,6 +28466,31 @@ module Google
         end
       end
       
+      # 
+      class NetworkProfileLocation
+        include Google::Apis::Core::Hashable
+      
+        # 
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        # 
+        # Corresponds to the JSON property `scope`
+        # @return [String]
+        attr_accessor :scope
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @name = args[:name] if args.key?(:name)
+          @scope = args[:scope] if args.key?(:scope)
+        end
+      end
+      
       # 
       class NetworkProfileNetworkFeatures
         include Google::Apis::Core::Hashable
@@ -28421,6 +28797,17 @@ module Google
         # @return [String]
         attr_accessor :bgp_inter_region_cost
       
+        # [Output Only] Effective value of the bgp_always_compare_med field.
+        # Corresponds to the JSON property `effectiveBgpAlwaysCompareMed`
+        # @return [Boolean]
+        attr_accessor :effective_bgp_always_compare_med
+        alias_method :effective_bgp_always_compare_med?, :effective_bgp_always_compare_med
+      
+        # [Output Only] Effective value of the bgp_inter_region_cost field.
+        # Corresponds to the JSON property `effectiveBgpInterRegionCost`
+        # @return [String]
+        attr_accessor :effective_bgp_inter_region_cost
+      
         # The network-wide routing mode to use. If set to REGIONAL, this network's Cloud
         # Routers will only advertise routes with subnets of this network in the same
         # region as the router. If set to GLOBAL, this network's Cloud Routers will
@@ -28438,6 +28825,8 @@ module Google
           @bgp_always_compare_med = args[:bgp_always_compare_med] if args.key?(:bgp_always_compare_med)
           @bgp_best_path_selection_mode = args[:bgp_best_path_selection_mode] if args.key?(:bgp_best_path_selection_mode)
           @bgp_inter_region_cost = args[:bgp_inter_region_cost] if args.key?(:bgp_inter_region_cost)
+          @effective_bgp_always_compare_med = args[:effective_bgp_always_compare_med] if args.key?(:effective_bgp_always_compare_med)
+          @effective_bgp_inter_region_cost = args[:effective_bgp_inter_region_cost] if args.key?(:effective_bgp_inter_region_cost)
           @routing_mode = args[:routing_mode] if args.key?(:routing_mode)
         end
       end
@@ -28538,6 +28927,11 @@ module Google
         # @return [String]
         attr_accessor :name
       
+        # [Output Only] The packet mirroring rules that apply to the network.
+        # Corresponds to the JSON property `packetMirroringRules`
+        # @return [Array<Google::Apis::ComputeBeta::FirewallPolicyRule>]
+        attr_accessor :packet_mirroring_rules
+      
         # [Output only] Priority of firewall policy association. Not applicable for type=
         # HIERARCHY.
         # Corresponds to the JSON property `priority`
@@ -28567,6 +28961,7 @@ module Google
         def update!(**args)
           @display_name = args[:display_name] if args.key?(:display_name)
           @name = args[:name] if args.key?(:name)
+          @packet_mirroring_rules = args[:packet_mirroring_rules] if args.key?(:packet_mirroring_rules)
           @priority = args[:priority] if args.key?(:priority)
           @rules = args[:rules] if args.key?(:rules)
           @short_name = args[:short_name] if args.key?(:short_name)
@@ -32227,11 +32622,8 @@ module Google
         # defaultRouteAction takes effect when none of the pathRules or routeRules match.
         # The load balancer performs advanced routing actions, such as URL rewrites and
         # header transformations, before forwarding the request to the selected backend.
-        # If defaultRouteAction specifies any weightedBackendServices, defaultService
-        # must not be set. Conversely if defaultService is set, defaultRouteAction
-        # cannot contain any weightedBackendServices. If defaultRouteAction is specified,
-        # don't set defaultUrlRedirect. If defaultRouteAction.weightedBackendServices
-        # is specified, don't set defaultService. URL maps for classic Application Load
+        # Only one of defaultUrlRedirect, defaultService or defaultRouteAction.
+        # weightedBackendService can be set. URL maps for classic Application Load
         # Balancers only support the urlRewrite action within a path matcher's
         # defaultRouteAction.
         # Corresponds to the JSON property `defaultRouteAction`
@@ -32245,14 +32637,11 @@ module Google
         # backendService - compute/v1/projects/project/global/backendServices/
         # backendService - global/backendServices/backendService If defaultRouteAction
         # is also specified, advanced routing actions, such as URL rewrites, take effect
-        # before sending the request to the backend. However, if defaultService is
-        # specified, defaultRouteAction cannot contain any weightedBackendServices.
-        # Conversely, if defaultRouteAction specifies any weightedBackendServices,
-        # defaultService must not be specified. If defaultService is specified, then set
-        # either defaultUrlRedirect or defaultRouteAction.weightedBackendService. Don't
-        # set both. Authorization requires one or more of the following Google IAM
-        # permissions on the specified resource default_service: - compute.
-        # backendBuckets.use - compute.backendServices.use
+        # before sending the request to the backend. Only one of defaultUrlRedirect,
+        # defaultService or defaultRouteAction.weightedBackendService can be set.
+        # Authorization requires one or more of the following Google IAM permissions on
+        # the specified resource default_service: - compute.backendBuckets.use - compute.
+        # backendServices.use
         # Corresponds to the JSON property `defaultService`
         # @return [String]
         attr_accessor :default_service
@@ -32336,11 +32725,10 @@ module Google
       
         # In response to a matching path, the load balancer performs advanced routing
         # actions, such as URL rewrites and header transformations, before forwarding
-        # the request to the selected backend. If routeAction specifies any
-        # weightedBackendServices, service must not be set. Conversely if service is set,
-        # routeAction cannot contain any weightedBackendServices. Only one of
-        # routeAction or urlRedirect must be set. URL maps for classic Application Load
-        # Balancers only support the urlRewrite action within a path rule's routeAction.
+        # the request to the selected backend. Only one of urlRedirect, service or
+        # routeAction.weightedBackendService can be set. URL maps for classic
+        # Application Load Balancers only support the urlRewrite action within a path
+        # rule's routeAction.
         # Corresponds to the JSON property `routeAction`
         # @return [Google::Apis::ComputeBeta::HttpRouteAction]
         attr_accessor :route_action
@@ -32348,10 +32736,8 @@ module Google
         # The full or partial URL of the backend service resource to which traffic is
         # directed if this rule is matched. If routeAction is also specified, advanced
         # routing actions, such as URL rewrites, take effect before sending the request
-        # to the backend. However, if service is specified, routeAction cannot contain
-        # any weightedBackendServices. Conversely, if routeAction specifies any
-        # weightedBackendServices, service must not be specified. Only one of
-        # urlRedirect, service or routeAction.weightedBackendService must be set.
+        # to the backend. Only one of urlRedirect, service or routeAction.
+        # weightedBackendService can be set.
         # Corresponds to the JSON property `service`
         # @return [String]
         attr_accessor :service
@@ -32392,7 +32778,7 @@ module Google
         # Serves as a merge key during UpdatePerInstanceConfigs operations, that is, if
         # a per-instance configuration with the same name exists then it will be updated,
         # otherwise a new one will be created for the VM instance with the same name.
-        # An attempt to create a per-instance configconfiguration for a VM instance that
+        # An attempt to create a per-instance configuration for a VM instance that
         # either doesn't exist or is not part of the group will result in an error.
         # Corresponds to the JSON property `name`
         # @return [String]
@@ -32707,7 +33093,7 @@ module Google
         # @return [String]
         attr_accessor :description
       
-        # Restricted features enabled for use on this project.
+        # An optional list of restricted features enabled for use on this project.
         # Corresponds to the JSON property `enabledFeatures`
         # @return [Array<String>]
         attr_accessor :enabled_features
@@ -35736,6 +36122,11 @@ module Google
         # @return [String]
         attr_accessor :name
       
+        # [Output only] The packet mirroring rules that apply to the network.
+        # Corresponds to the JSON property `packetMirroringRules`
+        # @return [Array<Google::Apis::ComputeBeta::FirewallPolicyRule>]
+        attr_accessor :packet_mirroring_rules
+      
         # [Output only] Priority of firewall policy association. Not applicable for type=
         # HIERARCHY.
         # Corresponds to the JSON property `priority`
@@ -35761,6 +36152,7 @@ module Google
         def update!(**args)
           @display_name = args[:display_name] if args.key?(:display_name)
           @name = args[:name] if args.key?(:name)
+          @packet_mirroring_rules = args[:packet_mirroring_rules] if args.key?(:packet_mirroring_rules)
           @priority = args[:priority] if args.key?(:priority)
           @rules = args[:rules] if args.key?(:rules)
           @type = args[:type] if args.key?(:type)
@@ -36000,12 +36392,6 @@ module Google
         # @return [Fixnum]
         attr_accessor :id
       
-        # Instance termination action is invoked when the reservation is deleted. This
-        # only applies to reservations with a Deployment type.
-        # Corresponds to the JSON property `instanceTerminationAction`
-        # @return [String]
-        attr_accessor :instance_termination_action
-      
         # [Output Only] Type of the resource. Always compute#reservations for
         # reservations.
         # Corresponds to the JSON property `kind`
@@ -36098,7 +36484,6 @@ module Google
           @deployment_type = args[:deployment_type] if args.key?(:deployment_type)
           @description = args[:description] if args.key?(:description)
           @id = args[:id] if args.key?(:id)
-          @instance_termination_action = args[:instance_termination_action] if args.key?(:instance_termination_action)
           @kind = args[:kind] if args.key?(:kind)
           @name = args[:name] if args.key?(:name)
           @reservation_sharing_policy = args[:reservation_sharing_policy] if args.key?(:reservation_sharing_policy)
@@ -37733,16 +38118,28 @@ module Google
       class ResourceStatus
         include Google::Apis::Core::Hashable
       
-        # [Output Only] An opaque ID of the host on which the VM is running.
+        # [Output Only] The precise location of your instance within the zone's data
+        # center, including the block, sub-block, and host. The field is formatted as
+        # follows: blockId/subBlockId/hostId.
         # Corresponds to the JSON property `physicalHost`
         # @return [String]
         attr_accessor :physical_host
       
+        # Represents the physical host topology of the host on which the VM is running.
+        # Corresponds to the JSON property `physicalHostTopology`
+        # @return [Google::Apis::ComputeBeta::ResourceStatusPhysicalHostTopology]
+        attr_accessor :physical_host_topology
+      
         # 
         # Corresponds to the JSON property `scheduling`
         # @return [Google::Apis::ComputeBeta::ResourceStatusScheduling]
         attr_accessor :scheduling
       
+        # [Output Only] Details about the instance stopping state.
+        # Corresponds to the JSON property `shutdownDetails`
+        # @return [Google::Apis::ComputeBeta::ResourceStatusShutdownDetails]
+        attr_accessor :shutdown_details
+      
         # Upcoming Maintenance notification information.
         # Corresponds to the JSON property `upcomingMaintenance`
         # @return [Google::Apis::ComputeBeta::UpcomingMaintenance]
@@ -37755,11 +38152,55 @@ module Google
         # Update properties of this object
         def update!(**args)
           @physical_host = args[:physical_host] if args.key?(:physical_host)
+          @physical_host_topology = args[:physical_host_topology] if args.key?(:physical_host_topology)
           @scheduling = args[:scheduling] if args.key?(:scheduling)
+          @shutdown_details = args[:shutdown_details] if args.key?(:shutdown_details)
           @upcoming_maintenance = args[:upcoming_maintenance] if args.key?(:upcoming_maintenance)
         end
       end
       
+      # Represents the physical host topology of the host on which the VM is running.
+      class ResourceStatusPhysicalHostTopology
+        include Google::Apis::Core::Hashable
+      
+        # [Output Only] The ID of the block in which the running instance is located.
+        # Instances within the same block experience low network latency.
+        # Corresponds to the JSON property `block`
+        # @return [String]
+        attr_accessor :block
+      
+        # [Output Only] The global name of the Compute Engine cluster where the running
+        # instance is located.
+        # Corresponds to the JSON property `cluster`
+        # @return [String]
+        attr_accessor :cluster
+      
+        # [Output Only] The ID of the host on which the running instance is located.
+        # Instances on the same host experience the lowest possible network latency.
+        # Corresponds to the JSON property `host`
+        # @return [String]
+        attr_accessor :host
+      
+        # [Output Only] The ID of the sub-block in which the running instance is located.
+        # Instances in the same sub-block experience lower network latency than
+        # instances in the same block.
+        # Corresponds to the JSON property `subblock`
+        # @return [String]
+        attr_accessor :subblock
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @block = args[:block] if args.key?(:block)
+          @cluster = args[:cluster] if args.key?(:cluster)
+          @host = args[:host] if args.key?(:host)
+          @subblock = args[:subblock] if args.key?(:subblock)
+        end
+      end
+      
       # 
       class ResourceStatusScheduling
         include Google::Apis::Core::Hashable
@@ -37787,6 +38228,46 @@ module Google
         end
       end
       
+      # 
+      class ResourceStatusShutdownDetails
+        include Google::Apis::Core::Hashable
+      
+        # A Duration represents a fixed-length span of time represented as a count of
+        # seconds and fractions of seconds at nanosecond resolution. It is independent
+        # of any calendar and concepts like "day" or "month". Range is approximately 10,
+        # 000 years.
+        # Corresponds to the JSON property `maxDuration`
+        # @return [Google::Apis::ComputeBeta::Duration]
+        attr_accessor :max_duration
+      
+        # 
+        # Corresponds to the JSON property `requestTimestamp`
+        # @return [String]
+        attr_accessor :request_timestamp
+      
+        # 
+        # Corresponds to the JSON property `stopState`
+        # @return [String]
+        attr_accessor :stop_state
+      
+        # 
+        # Corresponds to the JSON property `targetState`
+        # @return [String]
+        attr_accessor :target_state
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @max_duration = args[:max_duration] if args.key?(:max_duration)
+          @request_timestamp = args[:request_timestamp] if args.key?(:request_timestamp)
+          @stop_state = args[:stop_state] if args.key?(:stop_state)
+          @target_state = args[:target_state] if args.key?(:target_state)
+        end
+      end
+      
       # A rollout policy configuration.
       class RolloutPolicy
         include Google::Apis::Core::Hashable
@@ -39275,6 +39756,13 @@ module Google
         # @return [String]
         attr_accessor :name
       
+        # List of Subnetwork resources whose traffic should be translated by NAT64
+        # Gateway. It is used only when LIST_OF_IPV6_SUBNETWORKS is selected for the
+        # SubnetworkIpRangeToNat64Option above.
+        # Corresponds to the JSON property `nat64Subnetworks`
+        # @return [Array<Google::Apis::ComputeBeta::RouterNatSubnetworkToNat64>]
+        attr_accessor :nat64_subnetworks
+      
         # Specify the NatIpAllocateOption, which can take one of the following values: -
         # MANUAL_ONLY: Uses only Nat IP addresses provided by customers. When there are
         # not enough specified Nat IPs, the Nat service fails for new VMs. - AUTO_ONLY:
@@ -39307,6 +39795,18 @@ module Google
         # @return [String]
         attr_accessor :source_subnetwork_ip_ranges_to_nat
       
+        # Specify the Nat option for NAT64, which can take one of the following values: -
+        # ALL_IPV6_SUBNETWORKS: All of the IP ranges in every Subnetwork are allowed to
+        # Nat. - LIST_OF_IPV6_SUBNETWORKS: A list of Subnetworks are allowed to Nat (
+        # specified in the field nat64_subnetwork below) The default is
+        # NAT64_OPTION_UNSPECIFIED. Note that if this field contains
+        # NAT64_ALL_V6_SUBNETWORKS no other Router.Nat section in this region can also
+        # enable NAT64 for any Subnetworks in this network. Other Router.Nat sections
+        # can still be present to enable NAT44 only.
+        # Corresponds to the JSON property `sourceSubnetworkIpRangesToNat64`
+        # @return [String]
+        attr_accessor :source_subnetwork_ip_ranges_to_nat64
+      
         # A list of Subnetwork resources whose traffic should be translated by NAT
         # Gateway. It is used only when LIST_OF_SUBNETWORKS is selected for the
         # SubnetworkIpRangeToNatOption above.
@@ -39359,10 +39859,12 @@ module Google
           @max_ports_per_vm = args[:max_ports_per_vm] if args.key?(:max_ports_per_vm)
           @min_ports_per_vm = args[:min_ports_per_vm] if args.key?(:min_ports_per_vm)
           @name = args[:name] if args.key?(:name)
+          @nat64_subnetworks = args[:nat64_subnetworks] if args.key?(:nat64_subnetworks)
           @nat_ip_allocate_option = args[:nat_ip_allocate_option] if args.key?(:nat_ip_allocate_option)
           @nat_ips = args[:nat_ips] if args.key?(:nat_ips)
           @rules = args[:rules] if args.key?(:rules)
           @source_subnetwork_ip_ranges_to_nat = args[:source_subnetwork_ip_ranges_to_nat] if args.key?(:source_subnetwork_ip_ranges_to_nat)
+          @source_subnetwork_ip_ranges_to_nat64 = args[:source_subnetwork_ip_ranges_to_nat64] if args.key?(:source_subnetwork_ip_ranges_to_nat64)
           @subnetworks = args[:subnetworks] if args.key?(:subnetworks)
           @tcp_established_idle_timeout_sec = args[:tcp_established_idle_timeout_sec] if args.key?(:tcp_established_idle_timeout_sec)
           @tcp_time_wait_timeout_sec = args[:tcp_time_wait_timeout_sec] if args.key?(:tcp_time_wait_timeout_sec)
@@ -39530,6 +40032,25 @@ module Google
         end
       end
       
+      # Specifies a subnetwork to enable NAT64.
+      class RouterNatSubnetworkToNat64
+        include Google::Apis::Core::Hashable
+      
+        # URL for the subnetwork resource that will use NAT64.
+        # Corresponds to the JSON property `name`
+        # @return [String]
+        attr_accessor :name
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @name = args[:name] if args.key?(:name)
+        end
+      end
+      
       # 
       class RouterStatus
         include Google::Apis::Core::Hashable
@@ -40557,6 +41078,11 @@ module Google
         # @return [Fixnum]
         attr_accessor :availability_domain
       
+        # The configuration for gracefully shutting down the instance.
+        # Corresponds to the JSON property `gracefulShutdown`
+        # @return [Google::Apis::ComputeBeta::SchedulingGracefulShutdown]
+        attr_accessor :graceful_shutdown
+      
         # Specify the time in seconds for host error detection, the value must be within
         # the range of [90, 330] with the increment of 30, if unset, the default
         # behavior of host error recovery will be used.
@@ -40657,6 +41183,7 @@ module Google
         def update!(**args)
           @automatic_restart = args[:automatic_restart] if args.key?(:automatic_restart)
           @availability_domain = args[:availability_domain] if args.key?(:availability_domain)
+          @graceful_shutdown = args[:graceful_shutdown] if args.key?(:graceful_shutdown)
           @host_error_timeout_seconds = args[:host_error_timeout_seconds] if args.key?(:host_error_timeout_seconds)
           @instance_termination_action = args[:instance_termination_action] if args.key?(:instance_termination_action)
           @local_ssd_recovery_timeout = args[:local_ssd_recovery_timeout] if args.key?(:local_ssd_recovery_timeout)
@@ -40674,6 +41201,35 @@ module Google
         end
       end
       
+      # The configuration for gracefully shutting down the instance.
+      class SchedulingGracefulShutdown
+        include Google::Apis::Core::Hashable
+      
+        # Opts-in for graceful shutdown.
+        # Corresponds to the JSON property `enabled`
+        # @return [Boolean]
+        attr_accessor :enabled
+        alias_method :enabled?, :enabled
+      
+        # A Duration represents a fixed-length span of time represented as a count of
+        # seconds and fractions of seconds at nanosecond resolution. It is independent
+        # of any calendar and concepts like "day" or "month". Range is approximately 10,
+        # 000 years.
+        # Corresponds to the JSON property `maxDuration`
+        # @return [Google::Apis::ComputeBeta::Duration]
+        attr_accessor :max_duration
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @enabled = args[:enabled] if args.key?(:enabled)
+          @max_duration = args[:max_duration] if args.key?(:max_duration)
+        end
+      end
+      
       # Node Affinity: the configuration of desired nodes onto which this Instance
       # could be scheduled.
       class SchedulingNodeAffinity
@@ -41454,6 +42010,12 @@ module Google
         # @return [String]
         attr_accessor :log_level
       
+        # The maximum request size chosen by the customer with Waf enabled. Currently
+        # only "8KB" and "128KB" are supported. Values are case insensitive.
+        # Corresponds to the JSON property `requestBodyInspectionSize`
+        # @return [String]
+        attr_accessor :request_body_inspection_size
+      
         # An optional list of case-insensitive request header names to use for resolving
         # the callers client IP address.
         # Corresponds to the JSON property `userIpRequestHeaders`
@@ -41469,6 +42031,7 @@ module Google
           @json_custom_config = args[:json_custom_config] if args.key?(:json_custom_config)
           @json_parsing = args[:json_parsing] if args.key?(:json_parsing)
           @log_level = args[:log_level] if args.key?(:log_level)
+          @request_body_inspection_size = args[:request_body_inspection_size] if args.key?(:request_body_inspection_size)
           @user_ip_request_headers = args[:user_ip_request_headers] if args.key?(:user_ip_request_headers)
         end
       end
@@ -42342,7 +42905,9 @@ module Google
         # originating client, which is resolved based on "userIpRequestHeaders"
         # configured with the security policy. If there is no "userIpRequestHeaders"
         # configuration or an IP address cannot be resolved from it, the key type
-        # defaults to IP.
+        # defaults to IP. - TLS_JA4_FINGERPRINT: JA4 TLS/SSL fingerprint if the client
+        # connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type
+        # defaults to ALL.
         # Corresponds to the JSON property `enforceOnKey`
         # @return [String]
         attr_accessor :enforce_on_key
@@ -42437,7 +43002,9 @@ module Google
         # originating client, which is resolved based on "userIpRequestHeaders"
         # configured with the security policy. If there is no "userIpRequestHeaders"
         # configuration or an IP address cannot be resolved from it, the key type
-        # defaults to IP.
+        # defaults to IP. - TLS_JA4_FINGERPRINT: JA4 TLS/SSL fingerprint if the client
+        # connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type
+        # defaults to ALL.
         # Corresponds to the JSON property `enforceOnKeyType`
         # @return [String]
         attr_accessor :enforce_on_key_type
@@ -46940,6 +47507,18 @@ module Google
         # @return [String]
         attr_accessor :ip_cidr_range
       
+        # Reference to the source of IP, like a PublicDelegatedPrefix (PDP) for BYOIP.
+        # The PDP must be a sub-PDP in EXTERNAL_IPV6_SUBNETWORK_CREATION mode. Use one
+        # of the following formats to specify a sub-PDP when creating a dual stack
+        # subnetwork with external access using BYOIP: - Full resource URL, as in https:/
+        # /www.googleapis.com/compute/v1/projects/projectId/regions/region /
+        # publicDelegatedPrefixes/sub-pdp-name - Partial URL, as in - projects/projectId/
+        # regions/region/publicDelegatedPrefixes/ sub-pdp-name - regions/region/
+        # publicDelegatedPrefixes/sub-pdp-name
+        # Corresponds to the JSON property `ipCollection`
+        # @return [String]
+        attr_accessor :ip_collection
+      
         # The access type of IPv6 address this subnet holds. It's immutable and can only
         # be specified during creation or the first time the subnet is updated into
         # IPV4_IPV6 dual stack.
@@ -46952,6 +47531,18 @@ module Google
         # @return [String]
         attr_accessor :ipv6_cidr_range
       
+        # [Output Only] Possible endpoints of this subnetwork. It can be one of the
+        # following: - VM_ONLY: The subnetwork can be used for creating instances and
+        # IPv6 addresses with VM endpoint type. Such a subnetwork gets external IPv6
+        # ranges from a public delegated prefix and cannot be used to create NetLb. -
+        # VM_AND_FR: The subnetwork can be used for creating both VM instances and
+        # Forwarding Rules. It can also be used to reserve IPv6 addresses with both VM
+        # and FR endpoint types. Such a subnetwork gets its IPv6 range from Google IP
+        # Pool directly.
+        # Corresponds to the JSON property `ipv6GceEndpoint`
+        # @return [String]
+        attr_accessor :ipv6_gce_endpoint
+      
         # [Output Only] Type of the resource. Always compute#subnetwork for Subnetwork
         # resources.
         # Corresponds to the JSON property `kind`
@@ -46995,15 +47586,17 @@ module Google
         attr_accessor :private_ipv6_google_access
       
         # The purpose of the resource. This field can be either PRIVATE,
-        # GLOBAL_MANAGED_PROXY, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or
-        # PRIVATE is the default purpose for user-created subnets or subnets that are
-        # automatically created in auto mode networks. Subnets with purpose set to
-        # GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY are user-created subnetworks
-        # that are reserved for Envoy-based load balancers. A subnet with purpose set to
-        # PRIVATE_SERVICE_CONNECT is used to publish services using Private Service
-        # Connect. If unspecified, the subnet purpose defaults to PRIVATE. The
-        # enableFlowLogs field isn't supported if the subnet purpose field is set to
-        # GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY.
+        # GLOBAL_MANAGED_PROXY, REGIONAL_MANAGED_PROXY, PEER_MIGRATION or
+        # PRIVATE_SERVICE_CONNECT. PRIVATE is the default purpose for user-created
+        # subnets or subnets that are automatically created in auto mode networks.
+        # Subnets with purpose set to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY are
+        # user-created subnetworks that are reserved for Envoy-based load balancers. A
+        # subnet with purpose set to PRIVATE_SERVICE_CONNECT is used to publish services
+        # using Private Service Connect. A subnet with purpose set to PEER_MIGRATION is
+        # used for subnet migration from one peered VPC to another. If unspecified, the
+        # subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't supported
+        # if the subnet purpose field is set to GLOBAL_MANAGED_PROXY or
+        # REGIONAL_MANAGED_PROXY.
         # Corresponds to the JSON property `purpose`
         # @return [String]
         attr_accessor :purpose
@@ -47076,8 +47669,10 @@ module Google
           @id = args[:id] if args.key?(:id)
           @internal_ipv6_prefix = args[:internal_ipv6_prefix] if args.key?(:internal_ipv6_prefix)
           @ip_cidr_range = args[:ip_cidr_range] if args.key?(:ip_cidr_range)
+          @ip_collection = args[:ip_collection] if args.key?(:ip_collection)
           @ipv6_access_type = args[:ipv6_access_type] if args.key?(:ipv6_access_type)
           @ipv6_cidr_range = args[:ipv6_cidr_range] if args.key?(:ipv6_cidr_range)
+          @ipv6_gce_endpoint = args[:ipv6_gce_endpoint] if args.key?(:ipv6_gce_endpoint)
           @kind = args[:kind] if args.key?(:kind)
           @log_config = args[:log_config] if args.key?(:log_config)
           @name = args[:name] if args.key?(:name)
@@ -48552,14 +49147,14 @@ module Google
       # Represents a Target HTTPS Proxy resource. Google Compute Engine has two Target
       # HTTPS Proxy resources: * [Global](/compute/docs/reference/rest/beta/
       # targetHttpsProxies) * [Regional](/compute/docs/reference/rest/beta/
-      # regionTargetHttpsProxies) A target HTTPS proxy is a component of GCP HTTPS
-      # load balancers. * targetHttpProxies are used by global external Application
-      # Load Balancers, classic Application Load Balancers, cross-region internal
-      # Application Load Balancers, and Traffic Director. * regionTargetHttpProxies
-      # are used by regional internal Application Load Balancers and regional external
-      # Application Load Balancers. Forwarding rules reference a target HTTPS proxy,
-      # and the target proxy then references a URL map. For more information, read
-      # Using Target Proxies and Forwarding rule concepts.
+      # regionTargetHttpsProxies) A target HTTPS proxy is a component of Google Cloud
+      # HTTPS load balancers. * targetHttpProxies are used by global external
+      # Application Load Balancers, classic Application Load Balancers, cross-region
+      # internal Application Load Balancers, and Traffic Director. *
+      # regionTargetHttpProxies are used by regional internal Application Load
+      # Balancers and regional external Application Load Balancers. Forwarding rules
+      # reference a target HTTPS proxy, and the target proxy then references a URL map.
+      # For more information, read Using Target Proxies and Forwarding rule concepts.
       class TargetHttpsProxy
         include Google::Apis::Core::Hashable
       
@@ -48716,14 +49311,15 @@ module Google
         # to INTERNAL_SELF_MANAGED. The URLs should refer to a SSL Certificate resource
         # or Certificate Manager Certificate resource. Mixing Classic Certificates and
         # Certificate Manager Certificates is not allowed. Certificate Manager
-        # Certificates must include the certificatemanager API. Certificate Manager
-        # Certificates are not supported by Global external Application Load Balancer or
-        # Classic Application Load Balancer, use certificate_map instead. Currently, you
-        # may specify up to 15 Classic SSL Certificates. Certificate Manager
-        # Certificates accepted formats are: - //certificatemanager.googleapis.com/
-        # projects/`project`/locations/` location`/certificates/`resourceName`. - https:/
-        # /certificatemanager.googleapis.com/v1alpha1/projects/`project `/locations/`
-        # location`/certificates/`resourceName`.
+        # Certificates must include the certificatemanager API namespace. Using
+        # Certificate Manager Certificates in this field is not supported by Global
+        # external Application Load Balancer or Classic Application Load Balancer, use
+        # certificate_map instead. Currently, you may specify up to 15 Classic SSL
+        # Certificates or up to 100 Certificate Manager Certificates. Certificate
+        # Manager Certificates accepted formats are: - //certificatemanager.googleapis.
+        # com/projects/`project`/locations/` location`/certificates/`resourceName`. -
+        # https://certificatemanager.googleapis.com/v1alpha1/projects/`project `/
+        # locations/`location`/certificates/`resourceName`.
         # Corresponds to the JSON property `sslCertificates`
         # @return [Array<String>]
         attr_accessor :ssl_certificates
@@ -51495,11 +52091,9 @@ module Google
       
         # defaultRouteAction takes effect when none of the hostRules match. The load
         # balancer performs advanced routing actions, such as URL rewrites and header
-        # transformations, before forwarding the request to the selected backend. If
-        # defaultRouteAction specifies any weightedBackendServices, defaultService must
-        # not be set. Conversely if defaultService is set, defaultRouteAction cannot
-        # contain any weightedBackendServices. Only one of defaultRouteAction or
-        # defaultUrlRedirect must be set. URL maps for classic Application Load
+        # transformations, before forwarding the request to the selected backend. Only
+        # one of defaultUrlRedirect, defaultService or defaultRouteAction.
+        # weightedBackendService can be set. URL maps for classic Application Load
         # Balancers only support the urlRewrite action within defaultRouteAction.
         # defaultRouteAction has no effect when the URL map is bound to a target gRPC
         # proxy that has the validateForProxyless field set to true.
@@ -51510,14 +52104,10 @@ module Google
         # The full or partial URL of the defaultService resource to which traffic is
         # directed if none of the hostRules match. If defaultRouteAction is also
         # specified, advanced routing actions, such as URL rewrites, take effect before
-        # sending the request to the backend. However, if defaultService is specified,
-        # defaultRouteAction cannot contain any defaultRouteAction.
-        # weightedBackendServices. Conversely, if defaultRouteAction specifies any
-        # defaultRouteAction.weightedBackendServices, defaultService must not be
-        # specified. If defaultService is specified, then set either defaultUrlRedirect ,
-        # or defaultRouteAction.weightedBackendService Don't set both. defaultService
-        # has no effect when the URL map is bound to a target gRPC proxy that has the
-        # validateForProxyless field set to true.
+        # sending the request to the backend. Only one of defaultUrlRedirect,
+        # defaultService or defaultRouteAction.weightedBackendService can be set.
+        # defaultService has no effect when the URL map is bound to a target gRPC proxy
+        # that has the validateForProxyless field set to true.
         # Corresponds to the JSON property `defaultService`
         # @return [String]
         attr_accessor :default_service
@@ -52266,15 +52856,17 @@ module Google
         attr_accessor :network
       
         # The purpose of the resource. This field can be either PRIVATE,
-        # GLOBAL_MANAGED_PROXY, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or
-        # PRIVATE is the default purpose for user-created subnets or subnets that are
-        # automatically created in auto mode networks. Subnets with purpose set to
-        # GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY are user-created subnetworks
-        # that are reserved for Envoy-based load balancers. A subnet with purpose set to
-        # PRIVATE_SERVICE_CONNECT is used to publish services using Private Service
-        # Connect. If unspecified, the subnet purpose defaults to PRIVATE. The
-        # enableFlowLogs field isn't supported if the subnet purpose field is set to
-        # GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY.
+        # GLOBAL_MANAGED_PROXY, REGIONAL_MANAGED_PROXY, PEER_MIGRATION or
+        # PRIVATE_SERVICE_CONNECT. PRIVATE is the default purpose for user-created
+        # subnets or subnets that are automatically created in auto mode networks.
+        # Subnets with purpose set to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY are
+        # user-created subnetworks that are reserved for Envoy-based load balancers. A
+        # subnet with purpose set to PRIVATE_SERVICE_CONNECT is used to publish services
+        # using Private Service Connect. A subnet with purpose set to PEER_MIGRATION is
+        # used for subnet migration from one peered VPC to another. If unspecified, the
+        # subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't supported
+        # if the subnet purpose field is set to GLOBAL_MANAGED_PROXY or
+        # REGIONAL_MANAGED_PROXY.
         # Corresponds to the JSON property `purpose`
         # @return [String]
         attr_accessor :purpose