RubyGems - google-apis-compute_beta - Versions diffs - 0.86.0 → 0.88.0 - Mend

google-apis-compute_beta 0.86.0 → 0.88.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (7) hide show

checksums.yaml +4 -4
data/CHANGELOG.md +8 -0
data/lib/google/apis/compute_beta/classes.rb +418 -219
data/lib/google/apis/compute_beta/gem_version.rb +2 -2
data/lib/google/apis/compute_beta/representations.rb +35 -0
data/lib/google/apis/compute_beta/service.rb +67 -13
metadata +4 -4

data/lib/google/apis/compute_beta/classes.rb CHANGED Viewed

@@ -3430,13 +3430,13 @@ module Google
       class BackendService
         include Google::Apis::Core::Hashable
-        # Lifetime of cookies in seconds. This setting is applicable to external and
-        # internal HTTP(S) load balancers and Traffic Director and requires
-        # GENERATED_COOKIE or HTTP_COOKIE session affinity. If set to 0, the cookie is
-        # non-persistent and lasts only until the end of the browser session (or
-        # equivalent). The maximum allowed value is two weeks (1,209,600). Not supported
-        # when the backend service is referenced by a URL map that is bound to target
-        # gRPC proxy that has validateForProxyless field set to true.
+        # Lifetime of cookies in seconds. This setting is applicable to Application Load
+        # Balancers and Traffic Director and requires GENERATED_COOKIE or HTTP_COOKIE
+        # session affinity. If set to 0, the cookie is non-persistent and lasts only
+        # until the end of the browser session (or equivalent). The maximum allowed
+        # value is two weeks (1,209,600). Not supported when the backend service is
+        # referenced by a URL map that is bound to target gRPC proxy that has
+        # validateForProxyless field set to true.
         # Corresponds to the JSON property `affinityCookieTtlSec`
         # @return [Fixnum]
         attr_accessor :affinity_cookie_ttl_sec
@@ -3507,23 +3507,23 @@ module Google
         # @return [String]
         attr_accessor :edge_security_policy
-        # If true, enables Cloud CDN for the backend service of an external HTTP(S) load
-        # balancer.
+        # If true, enables Cloud CDN for the backend service of a global external
+        # Application Load Balancer.
         # Corresponds to the JSON property `enableCDN`
         # @return [Boolean]
         attr_accessor :enable_cdn
         alias_method :enable_cdn?, :enable_cdn
-        # For load balancers that have configurable failover: [Internal TCP/UDP Load
-        # Balancing](https://cloud.google.com/load-balancing/docs/internal/failover-
-        # overview) and [external TCP/UDP Load Balancing](https://cloud.google.com/load-
-        # balancing/docs/network/networklb-failover-overview). On failover or failback,
-        # this field indicates whether connection draining will be honored. Google Cloud
-        # has a fixed connection draining timeout of 10 minutes. A setting of true
-        # terminates existing TCP connections to the active pool during failover and
-        # failback, immediately draining traffic. A setting of false allows existing TCP
-        # connections to persist, even on VMs no longer in the active pool, for up to
-        # the duration of the connection draining timeout (10 minutes).
+        # For load balancers that have configurable failover: [Internal passthrough
+        # Network Load Balancers](https://cloud.google.com/load-balancing/docs/internal/
+        # failover-overview) and [external passthrough Network Load Balancers](https://
+        # cloud.google.com/load-balancing/docs/network/networklb-failover-overview). On
+        # failover or failback, this field indicates whether connection draining will be
+        # honored. Google Cloud has a fixed connection draining timeout of 10 minutes. A
+        # setting of true terminates existing TCP connections to the active pool during
+        # failover and failback, immediately draining traffic. A setting of false allows
+        # existing TCP connections to persist, even on VMs no longer in the active pool,
+        # for up to the duration of the connection draining timeout (10 minutes).
         # Corresponds to the JSON property `failoverPolicy`
         # @return [Google::Apis::ComputeBeta::BackendServiceFailoverPolicy]
         attr_accessor :failover_policy
@@ -3572,12 +3572,13 @@ module Google
         # traffic to the backends of the backend service (Instance Group, Managed
         # Instance Group, Network Endpoint Group), regardless of traffic from the client
         # to the proxy. Only IPv6 health checks are used to check the health of the
-        # backends. This field is applicable to either: - Advanced Global External HTTPS
-        # Load Balancing (load balancing scheme EXTERNAL_MANAGED), - Regional External
-        # HTTPS Load Balancing, - Internal TCP Proxy (load balancing scheme
-        # INTERNAL_MANAGED), - Regional Internal HTTPS Load Balancing (load balancing
-        # scheme INTERNAL_MANAGED), - Traffic Director with Envoy proxies and proxyless
-        # gRPC (load balancing scheme INTERNAL_SELF_MANAGED).
+        # backends. This field is applicable to either: - Advanced global external
+        # Application Load Balancer (load balancing scheme EXTERNAL_MANAGED), - Regional
+        # external Application Load Balancer, - Internal proxy Network Load Balancer (
+        # load balancing scheme INTERNAL_MANAGED), - Regional internal Application Load
+        # Balancer (load balancing scheme INTERNAL_MANAGED), - Traffic Director with
+        # Envoy proxies and proxyless gRPC (load balancing scheme INTERNAL_SELF_MANAGED).
+        #
         # Corresponds to the JSON property `ipAddressSelectionPolicy`
         # @return [String]
         attr_accessor :ip_address_selection_policy
@@ -3677,8 +3678,8 @@ module Google
         attr_accessor :outlier_detection
         # Deprecated in favor of portName. The TCP port to connect on the backend. The
-        # default value is 80. For Internal TCP/UDP Load Balancing and Network Load
-        # Balancing, omit port.
+        # default value is 80. For internal passthrough Network Load Balancers and
+        # external passthrough Network Load Balancers, omit port.
         # Corresponds to the JSON property `port`
         # @return [Fixnum]
         attr_accessor :port
@@ -3687,8 +3688,8 @@ module Google
         # communication to the backend VMs in that group. The named port must be [
         # defined on each backend instance group](https://cloud.google.com/load-
         # balancing/docs/backend-service#named_ports). This parameter has no meaning if
-        # the backends are NEGs. For Internal TCP/UDP Load Balancing and Network Load
-        # Balancing, omit port_name.
+        # the backends are NEGs. For internal passthrough Network Load Balancers and
+        # external passthrough Network Load Balancers, omit port_name.
         # Corresponds to the JSON property `portName`
         # @return [String]
         attr_accessor :port_name
@@ -4179,20 +4180,20 @@ module Google
         # @return [String]
         attr_accessor :connection_persistence_on_unhealthy_backends
-        # Enable Strong Session Affinity for Network Load Balancing. This option is not
-        # available publicly.
+        # Enable Strong Session Affinity for external passthrough Network Load Balancers.
+        # This option is not available publicly.
         # Corresponds to the JSON property `enableStrongAffinity`
         # @return [Boolean]
         attr_accessor :enable_strong_affinity
         alias_method :enable_strong_affinity?, :enable_strong_affinity
         # Specifies how long to keep a Connection Tracking entry while there is no
-        # matching traffic (in seconds). For Internal TCP/UDP Load Balancing: - The
-        # minimum (default) is 10 minutes and the maximum is 16 hours. - It can be set
-        # only if Connection Tracking is less than 5-tuple (i.e. Session Affinity is
-        # CLIENT_IP_NO_DESTINATION, CLIENT_IP or CLIENT_IP_PROTO, and Tracking Mode is
-        # PER_SESSION). For Network Load Balancer the default is 60 seconds. This option
-        # is not available publicly.
+        # matching traffic (in seconds). For internal passthrough Network Load Balancers:
+        # - The minimum (default) is 10 minutes and the maximum is 16 hours. - It can
+        # be set only if Connection Tracking is less than 5-tuple (i.e. Session Affinity
+        # is CLIENT_IP_NO_DESTINATION, CLIENT_IP or CLIENT_IP_PROTO, and Tracking Mode
+        # is PER_SESSION). For external passthrough Network Load Balancers the default
+        # is 60 seconds. This option is not available publicly.
         # Corresponds to the JSON property `idleTimeoutSec`
         # @return [Fixnum]
         attr_accessor :idle_timeout_sec
@@ -4223,16 +4224,16 @@ module Google
         end
       end
-      # For load balancers that have configurable failover: [Internal TCP/UDP Load
-      # Balancing](https://cloud.google.com/load-balancing/docs/internal/failover-
-      # overview) and [external TCP/UDP Load Balancing](https://cloud.google.com/load-
-      # balancing/docs/network/networklb-failover-overview). On failover or failback,
-      # this field indicates whether connection draining will be honored. Google Cloud
-      # has a fixed connection draining timeout of 10 minutes. A setting of true
-      # terminates existing TCP connections to the active pool during failover and
-      # failback, immediately draining traffic. A setting of false allows existing TCP
-      # connections to persist, even on VMs no longer in the active pool, for up to
-      # the duration of the connection draining timeout (10 minutes).
+      # For load balancers that have configurable failover: [Internal passthrough
+      # Network Load Balancers](https://cloud.google.com/load-balancing/docs/internal/
+      # failover-overview) and [external passthrough Network Load Balancers](https://
+      # cloud.google.com/load-balancing/docs/network/networklb-failover-overview). On
+      # failover or failback, this field indicates whether connection draining will be
+      # honored. Google Cloud has a fixed connection draining timeout of 10 minutes. A
+      # setting of true terminates existing TCP connections to the active pool during
+      # failover and failback, immediately draining traffic. A setting of false allows
+      # existing TCP connections to persist, even on VMs no longer in the active pool,
+      # for up to the duration of the connection draining timeout (10 minutes).
       class BackendServiceFailoverPolicy
         include Google::Apis::Core::Hashable
@@ -4246,10 +4247,10 @@ module Google
         # and all backup backend VMs are unhealthy.If set to false, connections are
         # distributed among all primary VMs when all primary and all backup backend VMs
         # are unhealthy. For load balancers that have configurable failover: [Internal
-        # TCP/UDP Load Balancing](https://cloud.google.com/load-balancing/docs/internal/
-        # failover-overview) and [external TCP/UDP Load Balancing](https://cloud.google.
-        # com/load-balancing/docs/network/networklb-failover-overview). The default is
-        # false.
+        # passthrough Network Load Balancers](https://cloud.google.com/load-balancing/
+        # docs/internal/failover-overview) and [external passthrough Network Load
+        # Balancers](https://cloud.google.com/load-balancing/docs/network/networklb-
+        # failover-overview). The default is false.
         # Corresponds to the JSON property `dropTrafficIfUnhealthy`
         # @return [Boolean]
         attr_accessor :drop_traffic_if_unhealthy
@@ -5143,21 +5144,43 @@ module Google
         # project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:`emailid``: An
         # email address that represents a Google group. For example, `admins@example.com`
         # . * `domain:`domain``: The G Suite domain (primary) that represents all the
-        # users of that domain. For example, `google.com` or `example.com`. * `deleted:
-        # user:`emailid`?uid=`uniqueid``: An email address (plus unique identifier)
-        # representing a user that has been recently deleted. For example, `alice@
-        # example.com?uid=123456789012345678901`. If the user is recovered, this value
-        # reverts to `user:`emailid`` and the recovered user retains the role in the
-        # binding. * `deleted:serviceAccount:`emailid`?uid=`uniqueid``: An email address
-        # (plus unique identifier) representing a service account that has been recently
-        # deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=
+        # users of that domain. For example, `google.com` or `example.com`. * `principal:
+        # //iam.googleapis.com/locations/global/workforcePools/`pool_id`/subject/`
+        # subject_attribute_value``: A single identity in a workforce identity pool. * `
+        # principalSet://iam.googleapis.com/locations/global/workforcePools/`pool_id`/
+        # group/`group_id``: All workforce identities in a group. * `principalSet://iam.
+        # googleapis.com/locations/global/workforcePools/`pool_id`/attribute.`
+        # attribute_name`/`attribute_value``: All workforce identities with a specific
+        # attribute value. * `principalSet://iam.googleapis.com/locations/global/
+        # workforcePools/`pool_id`/*`: All identities in a workforce identity pool. * `
+        # principal://iam.googleapis.com/projects/`project_number`/locations/global/
+        # workloadIdentityPools/`pool_id`/subject/`subject_attribute_value``: A single
+        # identity in a workload identity pool. * `principalSet://iam.googleapis.com/
+        # projects/`project_number`/locations/global/workloadIdentityPools/`pool_id`/
+        # group/`group_id``: A workload identity pool group. * `principalSet://iam.
+        # googleapis.com/projects/`project_number`/locations/global/
+        # workloadIdentityPools/`pool_id`/attribute.`attribute_name`/`attribute_value``:
+        # All identities in a workload identity pool with a certain attribute. * `
+        # principalSet://iam.googleapis.com/projects/`project_number`/locations/global/
+        # workloadIdentityPools/`pool_id`/*`: All identities in a workload identity pool.
+        # * `deleted:user:`emailid`?uid=`uniqueid``: An email address (plus unique
+        # identifier) representing a user that has been recently deleted. For example, `
+        # alice@example.com?uid=123456789012345678901`. If the user is recovered, this
+        # value reverts to `user:`emailid`` and the recovered user retains the role in
+        # the binding. * `deleted:serviceAccount:`emailid`?uid=`uniqueid``: An email
+        # address (plus unique identifier) representing a service account that has been
+        # recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=
         # 123456789012345678901`. If the service account is undeleted, this value
         # reverts to `serviceAccount:`emailid`` and the undeleted service account
         # retains the role in the binding. * `deleted:group:`emailid`?uid=`uniqueid``:
         # An email address (plus unique identifier) representing a Google group that has
         # been recently deleted. For example, `admins@example.com?uid=
         # 123456789012345678901`. If the group is recovered, this value reverts to `
-        # group:`emailid`` and the recovered group retains the role in the binding.
+        # group:`emailid`` and the recovered group retains the role in the binding. * `
+        # deleted:principal://iam.googleapis.com/locations/global/workforcePools/`
+        # pool_id`/subject/`subject_attribute_value``: Deleted single identity in a
+        # workforce identity pool. For example, `deleted:principal://iam.googleapis.com/
+        # locations/global/workforcePools/my-pool-id/subject/my-subject-attribute-value`.
         # Corresponds to the JSON property `members`
         # @return [Array<String>]
         attr_accessor :members
@@ -5586,6 +5609,15 @@ module Google
         # @return [String]
         attr_accessor :end_timestamp
+        # Specifies the already existing reservations to attach to the Commitment. This
+        # field is optional, and it can be a full or partial URL. For example, the
+        # following are valid URLs to an reservation: - https://www.googleapis.com/
+        # compute/v1/projects/project/zones/zone /reservations/reservation - projects/
+        # project/zones/zone/reservations/reservation
+        # Corresponds to the JSON property `existingReservations`
+        # @return [Array<String>]
+        attr_accessor :existing_reservations
         # [Output Only] The unique identifier for the resource. This identifier is
         # defined by the server.
         # Corresponds to the JSON property `id`
@@ -5629,7 +5661,7 @@ module Google
         # @return [String]
         attr_accessor :region
-        # List of create-on-create reseravtions for this commitment.
+        # List of create-on-create reservations for this commitment.
         # Corresponds to the JSON property `reservations`
         # @return [Array<Google::Apis::ComputeBeta::Reservation>]
         attr_accessor :reservations
@@ -5686,6 +5718,7 @@ module Google
           @creation_timestamp = args[:creation_timestamp] if args.key?(:creation_timestamp)
           @description = args[:description] if args.key?(:description)
           @end_timestamp = args[:end_timestamp] if args.key?(:end_timestamp)
+          @existing_reservations = args[:existing_reservations] if args.key?(:existing_reservations)
           @id = args[:id] if args.key?(:id)
           @kind = args[:kind] if args.key?(:kind)
           @license_resource = args[:license_resource] if args.key?(:license_resource)
@@ -6739,6 +6772,12 @@ module Google
         # @return [Google::Apis::ComputeBeta::DiskResourceStatus]
         attr_accessor :resource_status
+        # Output only. Reserved for future use.
+        # Corresponds to the JSON property `satisfiesPzi`
+        # @return [Boolean]
+        attr_accessor :satisfies_pzi
+        alias_method :satisfies_pzi?, :satisfies_pzi
         # [Output Only] Reserved for future use.
         # Corresponds to the JSON property `satisfiesPzs`
         # @return [Boolean]
@@ -6951,6 +6990,7 @@ module Google
           @replica_zones = args[:replica_zones] if args.key?(:replica_zones)
           @resource_policies = args[:resource_policies] if args.key?(:resource_policies)
           @resource_status = args[:resource_status] if args.key?(:resource_status)
+          @satisfies_pzi = args[:satisfies_pzi] if args.key?(:satisfies_pzi)
           @satisfies_pzs = args[:satisfies_pzs] if args.key?(:satisfies_pzs)
           @self_link = args[:self_link] if args.key?(:self_link)
           @size_gb = args[:size_gb] if args.key?(:size_gb)
@@ -9775,10 +9815,10 @@ module Google
       # google.com/compute/docs/reference/rest/beta/globalForwardingRules) * [Regional]
       # (https://cloud.google.com/compute/docs/reference/rest/beta/forwardingRules) A
       # forwarding rule and its corresponding IP address represent the frontend
-      # configuration of a Google Cloud Platform load balancer. Forwarding rules can
-      # also reference target instances and Cloud VPN Classic gateways (
-      # targetVpnGateway). For more information, read Forwarding rule concepts and
-      # Using protocol forwarding.
+      # configuration of a Google Cloud load balancer. Forwarding rules can also
+      # reference target instances and Cloud VPN Classic gateways (targetVpnGateway).
+      # For more information, read Forwarding rule concepts and Using protocol
+      # forwarding.
       class ForwardingRule
         include Google::Apis::Core::Hashable
@@ -9834,11 +9874,12 @@ module Google
         # This field is used along with the backend_service field for internal load
         # balancing or with the target field for internal TargetInstance. If set to true,
-        # clients can access the Internal TCP/UDP Load Balancer, Internal HTTP(S) and
-        # TCP Proxy Load Balancer from all regions. If false, only allows access from
-        # the local region the load balancer is located at. Note that for
-        # INTERNAL_MANAGED forwarding rules, this field cannot be changed after the
-        # forwarding rule is created.
+        # clients can access the internal passthrough Network Load Balancers, the
+        # regional internal Application Load Balancer, and the regional internal proxy
+        # Network Load Balancer from all regions. If false, only allows access from the
+        # local region the load balancer is located at. Note that for INTERNAL_MANAGED
+        # forwarding rules, this field cannot be changed after the forwarding rule is
+        # created.
         # Corresponds to the JSON property `allowGlobalAccess`
         # @return [Boolean]
         attr_accessor :allow_global_access
@@ -9862,16 +9903,16 @@ module Google
         alias_method :allow_psc_packet_injection?, :allow_psc_packet_injection
         # Identifies the backend service to which the forwarding rule sends traffic.
-        # Required for Internal TCP/UDP Load Balancing and Network Load Balancing; must
-        # be omitted for all other load balancer types.
+        # Required for internal and external passthrough Network Load Balancers; must be
+        # omitted for all other load balancer types.
         # Corresponds to the JSON property `backendService`
         # @return [String]
         attr_accessor :backend_service
-        # [Output Only] The URL for the corresponding base Forwarding Rule. By base
-        # Forwarding Rule, we mean the Forwarding Rule that has the same IP address,
-        # protocol, and port settings with the current Forwarding Rule, but without
-        # sourceIPRanges specified. Always empty if the current Forwarding Rule does not
+        # [Output Only] The URL for the corresponding base forwarding rule. By base
+        # forwarding rule, we mean the forwarding rule that has the same IP address,
+        # protocol, and port settings with the current forwarding rule, but without
+        # sourceIPRanges specified. Always empty if the current forwarding rule does not
         # have sourceIPRanges specified.
         # Corresponds to the JSON property `baseForwardingRule`
         # @return [String]
@@ -9922,7 +9963,7 @@ module Google
         alias_method :is_mirroring_collector?, :is_mirroring_collector
         # [Output Only] Type of the resource. Always compute#forwardingRule for
-        # Forwarding Rule resources.
+        # forwarding rule resources.
         # Corresponds to the JSON property `kind`
         # @return [String]
         attr_accessor :kind
@@ -9984,13 +10025,13 @@ module Google
         # @return [String]
         attr_accessor :name
-        # This field is not used for global external load balancing. For Internal TCP/
-        # UDP Load Balancing, this field identifies the network that the load balanced
-        # IP should belong to for this Forwarding Rule. If the subnetwork is specified,
-        # the network of the subnetwork will be used. If neither subnetwork nor this
-        # field is specified, the default network will be used. For Private Service
-        # Connect forwarding rules that forward traffic to Google APIs, a network must
-        # be provided.
+        # This field is not used for global external load balancing. For internal
+        # passthrough Network Load Balancers, this field identifies the network that the
+        # load balanced IP should belong to for this forwarding rule. If the subnetwork
+        # is specified, the network of the subnetwork will be used. If neither
+        # subnetwork nor this field is specified, the default network will be used. For
+        # Private Service Connect forwarding rules that forward traffic to Google APIs,
+        # a network must be provided.
         # Corresponds to the JSON property `network`
         # @return [String]
         attr_accessor :network
@@ -10049,7 +10090,7 @@ module Google
         # @return [Array<String>]
         attr_accessor :ports
-        # [Output Only] The PSC connection id of the PSC Forwarding Rule.
+        # [Output Only] The PSC connection id of the PSC forwarding rule.
         # Corresponds to the JSON property `pscConnectionId`
         # @return [Fixnum]
         attr_accessor :psc_connection_id
@@ -10078,7 +10119,7 @@ module Google
         # @return [Array<Google::Apis::ComputeBeta::ForwardingRuleServiceDirectoryRegistration>]
         attr_accessor :service_directory_registrations
-        # An optional prefix to the service name for this Forwarding Rule. If specified,
+        # An optional prefix to the service name for this forwarding rule. If specified,
         # the prefix is the first label of the fully qualified service name. The label
         # must be 1-63 characters long, and comply with RFC1035. Specifically, the label
         # must be 1-63 characters long and match the regular expression `[a-z]([-a-z0-9]*
@@ -10090,16 +10131,16 @@ module Google
         # @return [String]
         attr_accessor :service_label
-        # [Output Only] The internal fully qualified service name for this Forwarding
-        # Rule. This field is only used for internal load balancing.
+        # [Output Only] The internal fully qualified service name for this forwarding
+        # rule. This field is only used for internal load balancing.
         # Corresponds to the JSON property `serviceName`
         # @return [String]
         attr_accessor :service_name
-        # If not empty, this Forwarding Rule will only forward the traffic when the
+        # If not empty, this forwarding rule will only forward the traffic when the
         # source IP address matches one of the IP addresses or CIDR ranges set here.
-        # Note that a Forwarding Rule can only have up to 64 source IP ranges, and this
-        # field can only be used with a regional Forwarding Rule whose scheme is
+        # Note that a forwarding rule can only have up to 64 source IP ranges, and this
+        # field can only be used with a regional forwarding rule whose scheme is
         # EXTERNAL. Each source_ip_range entry should be either an IP address (for
         # example, 1.2.3.4) or a CIDR range (for example, 1.2.3.0/24).
         # Corresponds to the JSON property `sourceIpRanges`
@@ -10107,10 +10148,11 @@ module Google
         attr_accessor :source_ip_ranges
         # This field identifies the subnetwork that the load balanced IP should belong
-        # to for this Forwarding Rule, used in internal load balancing and network load
-        # balancing with IPv6. If the network specified is in auto subnet mode, this
-        # field is optional. However, a subnetwork must be specified if the network is
-        # in custom subnet mode or when creating external forwarding rule with IPv6.
+        # to for this forwarding rule, used with internal load balancers and external
+        # passthrough Network Load Balancers with IPv6. If the network specified is in
+        # auto subnet mode, this field is optional. However, a subnetwork must be
+        # specified if the network is in custom subnet mode or when creating external
+        # forwarding rule with IPv6.
         # Corresponds to the JSON property `subnetwork`
         # @return [String]
         attr_accessor :subnetwork
@@ -10435,9 +10477,9 @@ module Google
         end
       end
-      # Describes the auto-registration of the Forwarding Rule to Service Directory.
+      # Describes the auto-registration of the forwarding rule to Service Directory.
       # The region and project of the Service Directory resource generated from this
-      # registration will be the same as this Forwarding Rule.
+      # registration will be the same as this forwarding rule.
       class ForwardingRuleServiceDirectoryRegistration
         include Google::Apis::Core::Hashable
@@ -10453,7 +10495,7 @@ module Google
         # [Optional] Service Directory region to register this global forwarding rule
         # under. Default to "us-central1". Only used for PSC for Google APIs. All PSC
-        # for Google APIs Forwarding Rules on the same network should use the same
+        # for Google APIs forwarding rules on the same network should use the same
         # Service Directory region.
         # Corresponds to the JSON property `serviceDirectoryRegion`
         # @return [String]
@@ -10566,9 +10608,9 @@ module Google
       class FutureReservation
         include Google::Apis::Core::Hashable
-        # Future timestamp when the FR auto-created reservations will be deleted by GCE.
-        # Format of this field must be a valid href="https://www.ietf.org/rfc/rfc3339.
-        # txt">RFC3339 value.
+        # Future timestamp when the FR auto-created reservations will be deleted by
+        # Compute Engine. Format of this field must be a valid href="https://www.ietf.
+        # org/rfc/rfc3339.txt">RFC3339 value.
         # Corresponds to the JSON property `autoCreatedReservationsDeleteTime`
         # @return [String]
         attr_accessor :auto_created_reservations_delete_time
@@ -11307,7 +11349,7 @@ module Google
         # Specifies how a port is selected for health checking. Can be one of the
         # following values: USE_FIXED_PORT: Specifies a port number explicitly using the
-        # port field in the health check. Supported by backend services for pass-through
+        # port field in the health check. Supported by backend services for passthrough
         # load balancers and backend services for proxy load balancers. Not supported by
         # target pools. The health check supports all backends supported by the backend
         # service provided the backend can be health checked. For example, GCE_VM_IP
@@ -11315,13 +11357,13 @@ module Google
         # group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an
         # indirect method of specifying the health check port by referring to the
         # backend service. Only supported by backend services for proxy load balancers.
-        # Not supported by target pools. Not supported by backend services for pass-
-        # through load balancers. Supports all backends that can be health checked; for
-        # example, GCE_VM_IP_PORT network endpoint groups and instance group backends.
-        # For GCE_VM_IP_PORT network endpoint group backends, the health check uses the
-        # port number specified for each endpoint in the network endpoint group. For
-        # instance group backends, the health check uses the port number determined by
-        # looking up the backend service's named port in the instance group's list of
+        # Not supported by target pools. Not supported by backend services for
+        # passthrough load balancers. Supports all backends that can be health checked;
+        # for example, GCE_VM_IP_PORT network endpoint groups and instance group
+        # backends. For GCE_VM_IP_PORT network endpoint group backends, the health check
+        # uses the port number specified for each endpoint in the network endpoint group.
+        # For instance group backends, the health check uses the port number determined
+        # by looking up the backend service's named port in the instance group's list of
         # named ports.
         # Corresponds to the JSON property `portSpecification`
         # @return [String]
@@ -11670,8 +11712,8 @@ module Google
         # The ID of a supported feature. To add multiple values, use commas to separate
         # values. Set to one or more of the following values: - VIRTIO_SCSI_MULTIQUEUE -
         # WINDOWS - MULTI_IP_SUBNET - UEFI_COMPATIBLE - GVNIC - SEV_CAPABLE -
-        # SUSPEND_RESUME_COMPATIBLE - SEV_LIVE_MIGRATABLE - SEV_SNP_CAPABLE For more
-        # information, see Enabling guest operating system features.
+        # SUSPEND_RESUME_COMPATIBLE - SEV_LIVE_MIGRATABLE - SEV_SNP_CAPABLE - IDPF For
+        # more information, see Enabling guest operating system features.
         # Corresponds to the JSON property `type`
         # @return [String]
         attr_accessor :type
@@ -11712,7 +11754,7 @@ module Google
         # Specifies how a port is selected for health checking. Can be one of the
         # following values: USE_FIXED_PORT: Specifies a port number explicitly using the
-        # port field in the health check. Supported by backend services for pass-through
+        # port field in the health check. Supported by backend services for passthrough
         # load balancers and backend services for proxy load balancers. Not supported by
         # target pools. The health check supports all backends supported by the backend
         # service provided the backend can be health checked. For example, GCE_VM_IP
@@ -11720,13 +11762,13 @@ module Google
         # group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an
         # indirect method of specifying the health check port by referring to the
         # backend service. Only supported by backend services for proxy load balancers.
-        # Not supported by target pools. Not supported by backend services for pass-
-        # through load balancers. Supports all backends that can be health checked; for
-        # example, GCE_VM_IP_PORT network endpoint groups and instance group backends.
-        # For GCE_VM_IP_PORT network endpoint group backends, the health check uses the
-        # port number specified for each endpoint in the network endpoint group. For
-        # instance group backends, the health check uses the port number determined by
-        # looking up the backend service's named port in the instance group's list of
+        # Not supported by target pools. Not supported by backend services for
+        # passthrough load balancers. Supports all backends that can be health checked;
+        # for example, GCE_VM_IP_PORT network endpoint groups and instance group
+        # backends. For GCE_VM_IP_PORT network endpoint group backends, the health check
+        # uses the port number specified for each endpoint in the network endpoint group.
+        # For instance group backends, the health check uses the port number determined
+        # by looking up the backend service's named port in the instance group's list of
         # named ports.
         # Corresponds to the JSON property `portSpecification`
         # @return [String]
@@ -11794,7 +11836,7 @@ module Google
         # Specifies how a port is selected for health checking. Can be one of the
         # following values: USE_FIXED_PORT: Specifies a port number explicitly using the
-        # port field in the health check. Supported by backend services for pass-through
+        # port field in the health check. Supported by backend services for passthrough
         # load balancers and backend services for proxy load balancers. Also supported
         # in legacy HTTP health checks for target pools. The health check supports all
         # backends supported by the backend service provided the backend can be health
@@ -11876,7 +11918,7 @@ module Google
         # Specifies how a port is selected for health checking. Can be one of the
         # following values: USE_FIXED_PORT: Specifies a port number explicitly using the
-        # port field in the health check. Supported by backend services for pass-through
+        # port field in the health check. Supported by backend services for passthrough
         # load balancers and backend services for proxy load balancers. Not supported by
         # target pools. The health check supports all backends supported by the backend
         # service provided the backend can be health checked. For example, GCE_VM_IP
@@ -11884,13 +11926,13 @@ module Google
         # group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an
         # indirect method of specifying the health check port by referring to the
         # backend service. Only supported by backend services for proxy load balancers.
-        # Not supported by target pools. Not supported by backend services for pass-
-        # through load balancers. Supports all backends that can be health checked; for
-        # example, GCE_VM_IP_PORT network endpoint groups and instance group backends.
-        # For GCE_VM_IP_PORT network endpoint group backends, the health check uses the
-        # port number specified for each endpoint in the network endpoint group. For
-        # instance group backends, the health check uses the port number determined by
-        # looking up the backend service's named port in the instance group's list of
+        # Not supported by target pools. Not supported by backend services for
+        # passthrough load balancers. Supports all backends that can be health checked;
+        # for example, GCE_VM_IP_PORT network endpoint groups and instance group
+        # backends. For GCE_VM_IP_PORT network endpoint group backends, the health check
+        # uses the port number specified for each endpoint in the network endpoint group.
+        # For instance group backends, the health check uses the port number determined
+        # by looking up the backend service's named port in the instance group's list of
         # named ports.
         # Corresponds to the JSON property `portSpecification`
         # @return [String]
@@ -11936,18 +11978,13 @@ module Google
       # resources: * [Regional](/compute/docs/reference/rest/beta/regionHealthChecks) *
       # [Global](/compute/docs/reference/rest/beta/healthChecks) These health check
       # resources can be used for load balancing and for autohealing VMs in a managed
-      # instance group (MIG). **Load balancing** The following load balancer can use
-      # either regional or global health check: * Internal TCP/UDP load balancer The
-      # following load balancers require regional health check: * Internal HTTP(S)
-      # load balancer * Backend service-based network load balancer Traffic Director
-      # and the following load balancers require global health check: * External HTTP(
-      # S) load balancer * TCP proxy load balancer * SSL proxy load balancer The
-      # following load balancer require [legacy HTTP health checks](/compute/docs/
-      # reference/rest/v1/httpHealthChecks): * Target pool-based network load balancer
-      # **Autohealing in MIGs** The health checks that you use for autohealing VMs in
-      # a MIG can be either regional or global. For more information, see Set up an
-      # application health check and autohealing. For more information, see Health
-      # checks overview.
+      # instance group (MIG). **Load balancing** Health check requirements vary
+      # depending on the type of load balancer. For details about the type of health
+      # check supported for each load balancer and corresponding backend type, see
+      # Health checks overview: Load balancer guide. **Autohealing in MIGs** The
+      # health checks that you use for autohealing VMs in a MIG can be either regional
+      # or global. For more information, see Set up an application health check and
+      # autohealing. For more information, see Health checks overview.
       class HealthCheck
         include Google::Apis::Core::Hashable
@@ -12781,6 +12818,16 @@ module Google
         # @return [String]
         attr_accessor :ip_address
+        #
+        # Corresponds to the JSON property `ipv6Address`
+        # @return [String]
+        attr_accessor :ipv6_address
+        # Health state of the IPv6 address of the instance.
+        # Corresponds to the JSON property `ipv6HealthState`
+        # @return [String]
+        attr_accessor :ipv6_health_state
         # The named port of the instance group, not necessarily the port that is health-
         # checked.
         # Corresponds to the JSON property `port`
@@ -12809,6 +12856,8 @@ module Google
           @health_state = args[:health_state] if args.key?(:health_state)
           @instance = args[:instance] if args.key?(:instance)
           @ip_address = args[:ip_address] if args.key?(:ip_address)
+          @ipv6_address = args[:ipv6_address] if args.key?(:ipv6_address)
+          @ipv6_health_state = args[:ipv6_health_state] if args.key?(:ipv6_health_state)
           @port = args[:port] if args.key?(:port)
           @weight = args[:weight] if args.key?(:weight)
           @weight_error = args[:weight_error] if args.key?(:weight_error)
@@ -14330,6 +14379,12 @@ module Google
         # @return [Google::Apis::ComputeBeta::RolloutPolicy]
         attr_accessor :rollout_override
+        # Output only. Reserved for future use.
+        # Corresponds to the JSON property `satisfiesPzi`
+        # @return [Boolean]
+        attr_accessor :satisfies_pzi
+        alias_method :satisfies_pzi?, :satisfies_pzi
         # [Output Only] Reserved for future use.
         # Corresponds to the JSON property `satisfiesPzs`
         # @return [Boolean]
@@ -14471,6 +14526,7 @@ module Google
           @name = args[:name] if args.key?(:name)
           @raw_disk = args[:raw_disk] if args.key?(:raw_disk)
           @rollout_override = args[:rollout_override] if args.key?(:rollout_override)
+          @satisfies_pzi = args[:satisfies_pzi] if args.key?(:satisfies_pzi)
           @satisfies_pzs = args[:satisfies_pzs] if args.key?(:satisfies_pzs)
           @self_link = args[:self_link] if args.key?(:self_link)
           @shielded_instance_initial_state = args[:shielded_instance_initial_state] if args.key?(:shielded_instance_initial_state)
@@ -14938,6 +14994,12 @@ module Google
         # @return [Google::Apis::ComputeBeta::ResourceStatus]
         attr_accessor :resource_status
+        # [Output Only] Reserved for future use.
+        # Corresponds to the JSON property `satisfiesPzi`
+        # @return [Boolean]
+        attr_accessor :satisfies_pzi
+        alias_method :satisfies_pzi?, :satisfies_pzi
         # [Output Only] Reserved for future use.
         # Corresponds to the JSON property `satisfiesPzs`
         # @return [Boolean]
@@ -15068,6 +15130,7 @@ module Google
           @reservation_affinity = args[:reservation_affinity] if args.key?(:reservation_affinity)
           @resource_policies = args[:resource_policies] if args.key?(:resource_policies)
           @resource_status = args[:resource_status] if args.key?(:resource_status)
+          @satisfies_pzi = args[:satisfies_pzi] if args.key?(:satisfies_pzi)
           @satisfies_pzs = args[:satisfies_pzs] if args.key?(:satisfies_pzs)
           @scheduling = args[:scheduling] if args.key?(:scheduling)
           @self_link = args[:self_link] if args.key?(:self_link)
@@ -16180,6 +16243,12 @@ module Google
         # @return [Hash<String,Google::Apis::ComputeBeta::InstanceGroupManagerInstanceFlexibilityPolicyInstanceSelection>]
         attr_accessor :instance_selection_lists
+        # Named instance selections configuring properties that the group will use when
+        # creating new VMs.
+        # Corresponds to the JSON property `instanceSelections`
+        # @return [Hash<String,Google::Apis::ComputeBeta::InstanceGroupManagerInstanceFlexibilityPolicyInstanceSelection>]
+        attr_accessor :instance_selections
         def initialize(**args)
            update!(**args)
         end
@@ -16187,6 +16256,7 @@ module Google
         # Update properties of this object
         def update!(**args)
           @instance_selection_lists = args[:instance_selection_lists] if args.key?(:instance_selection_lists)
+          @instance_selections = args[:instance_selections] if args.key?(:instance_selections)
         end
       end
@@ -16476,8 +16546,10 @@ module Google
       class InstanceGroupManagerResizeRequestStatus
         include Google::Apis::Core::Hashable
-        # Errors encountered during the queueing or provisioning phases of the
-        # ResizeRequest.
+        # [Output only] Fatal errors encountered during the queueing or provisioning
+        # phases of the ResizeRequest that caused the transition to the FAILED state. As
+        # a contrary to the last_attempt errors, this field is final and errors are
+        # never removed from here, as the RR is not going to retry.
         # Corresponds to the JSON property `error`
         # @return [Google::Apis::ComputeBeta::InstanceGroupManagerResizeRequestStatus::Error]
         attr_accessor :error
@@ -16491,8 +16563,10 @@ module Google
           @error = args[:error] if args.key?(:error)
         end
-        # Errors encountered during the queueing or provisioning phases of the
-        # ResizeRequest.
+        # [Output only] Fatal errors encountered during the queueing or provisioning
+        # phases of the ResizeRequest that caused the transition to the FAILED state. As
+        # a contrary to the last_attempt errors, this field is final and errors are
+        # never removed from here, as the RR is not going to retry.
         class Error
           include Google::Apis::Core::Hashable
@@ -16723,12 +16797,16 @@ module Google
       class InstanceGroupManagerStandbyPolicy
         include Google::Apis::Core::Hashable
-        #
+        # Specifies the number of seconds that the MIG should wait to suspend or stop a
+        # VM after that VM was created. The initial delay gives the initialization
+        # script the time to prepare your VM for a quick scale out. The value of initial
+        # delay must be between 0 and 3600 seconds. The default value is 0.
         # Corresponds to the JSON property `initialDelaySec`
         # @return [Fixnum]
         attr_accessor :initial_delay_sec
-        # Defines behaviour of using instances from standby pool to resize MIG.
+        # Defines how a MIG resumes or starts VMs from a standby pool when the group
+        # scales out. The default mode is `MANUAL`.
         # Corresponds to the JSON property `mode`
         # @return [String]
         attr_accessor :mode
@@ -19692,6 +19770,12 @@ module Google
         # @return [Google::Apis::ComputeBeta::InstantSnapshotResourceStatus]
         attr_accessor :resource_status
+        # Output only. Reserved for future use.
+        # Corresponds to the JSON property `satisfiesPzi`
+        # @return [Boolean]
+        attr_accessor :satisfies_pzi
+        alias_method :satisfies_pzi?, :satisfies_pzi
         # [Output Only] Reserved for future use.
         # Corresponds to the JSON property `satisfiesPzs`
         # @return [Boolean]
@@ -19757,6 +19841,7 @@ module Google
           @name = args[:name] if args.key?(:name)
           @region = args[:region] if args.key?(:region)
           @resource_status = args[:resource_status] if args.key?(:resource_status)
+          @satisfies_pzi = args[:satisfies_pzi] if args.key?(:satisfies_pzi)
           @satisfies_pzs = args[:satisfies_pzs] if args.key?(:satisfies_pzs)
           @self_link = args[:self_link] if args.key?(:self_link)
           @self_link_with_id = args[:self_link_with_id] if args.key?(:self_link_with_id)
@@ -23216,6 +23301,12 @@ module Google
         # @return [String]
         attr_accessor :name
+        # Output only. Reserved for future use.
+        # Corresponds to the JSON property `satisfiesPzi`
+        # @return [Boolean]
+        attr_accessor :satisfies_pzi
+        alias_method :satisfies_pzi?, :satisfies_pzi
         # [Output Only] Reserved for future use.
         # Corresponds to the JSON property `satisfiesPzs`
         # @return [Boolean]
@@ -23285,6 +23376,7 @@ module Google
           @kind = args[:kind] if args.key?(:kind)
           @machine_image_encryption_key = args[:machine_image_encryption_key] if args.key?(:machine_image_encryption_key)
           @name = args[:name] if args.key?(:name)
+          @satisfies_pzi = args[:satisfies_pzi] if args.key?(:satisfies_pzi)
           @satisfies_pzs = args[:satisfies_pzs] if args.key?(:satisfies_pzs)
           @saved_disks = args[:saved_disks] if args.key?(:saved_disks)
           @self_link = args[:self_link] if args.key?(:self_link)
@@ -23974,6 +24066,13 @@ module Google
         # @return [Google::Apis::ComputeBeta::ManagedInstancePropertiesFromFlexibilityPolicy]
         attr_accessor :properties_from_flexibility_policy
+        # [Output Only] The eventual status of the instance. The instance group manager
+        # will not be identified as stable till each managed instance reaches its
+        # targetStatus.
+        # Corresponds to the JSON property `targetStatus`
+        # @return [String]
+        attr_accessor :target_status
         # [Output Only] Intended version of this instance.
         # Corresponds to the JSON property `version`
         # @return [Google::Apis::ComputeBeta::ManagedInstanceVersion]
@@ -23997,6 +24096,7 @@ module Google
           @preserved_state_from_config = args[:preserved_state_from_config] if args.key?(:preserved_state_from_config)
           @preserved_state_from_policy = args[:preserved_state_from_policy] if args.key?(:preserved_state_from_policy)
           @properties_from_flexibility_policy = args[:properties_from_flexibility_policy] if args.key?(:properties_from_flexibility_policy)
+          @target_status = args[:target_status] if args.key?(:target_status)
           @version = args[:version] if args.key?(:version)
         end
       end
@@ -29125,7 +29225,8 @@ module Google
       # global operations, use the `globalOperations` resource. - For regional
       # operations, use the `regionOperations` resource. - For zonal operations, use
       # the `zoneOperations` resource. For more information, read Global, Regional,
-      # and Zonal Resources.
+      # and Zonal Resources. Note that completed Operation resources have a limited
+      # retention period.
       class Operation
         include Google::Apis::Core::Hashable
@@ -30262,15 +30363,17 @@ module Google
         # Protocols that apply as filter on mirrored traffic. If no protocols are
         # specified, all traffic that matches the specified CIDR ranges is mirrored. If
-        # neither cidrRanges nor IPProtocols is specified, all traffic is mirrored.
+        # neither cidrRanges nor IPProtocols is specified, all IPv4 traffic is mirrored.
         # Corresponds to the JSON property `IPProtocols`
         # @return [Array<String>]
         attr_accessor :ip_protocols
-        # IP CIDR ranges that apply as filter on the source (ingress) or destination (
-        # egress) IP in the IP header. Only IPv4 is supported. If no ranges are
-        # specified, all traffic that matches the specified IPProtocols is mirrored. If
-        # neither cidrRanges nor IPProtocols is specified, all traffic is mirrored.
+        # One or more IPv4 or IPv6 CIDR ranges that apply as filter on the source (
+        # ingress) or destination (egress) IP in the IP header. If no ranges are
+        # specified, all IPv4 traffic that matches the specified IPProtocols is mirrored.
+        # If neither cidrRanges nor IPProtocols is specified, all IPv4 traffic is
+        # mirrored. To mirror all IPv4 and IPv6 traffic, use "0.0.0.0/0,::/0". Note:
+        # Support for IPv6 traffic is in preview.
         # Corresponds to the JSON property `cidrRanges`
         # @return [Array<String>]
         attr_accessor :cidr_ranges
@@ -37294,6 +37397,13 @@ module Google
         # @return [Google::Apis::ComputeBeta::BfdStatus]
         attr_accessor :bfd_status
+        # Enable IPv4 traffic over BGP Peer. It is enabled by default if the
+        # peerIpAddress is version 4.
+        # Corresponds to the JSON property `enableIpv4`
+        # @return [Boolean]
+        attr_accessor :enable_ipv4
+        alias_method :enable_ipv4?, :enable_ipv4
         # Enable IPv6 traffic over BGP Peer. If not specified, it is disabled by default.
         # Corresponds to the JSON property `enableIpv6`
         # @return [Boolean]
@@ -37305,6 +37415,11 @@ module Google
         # @return [String]
         attr_accessor :ip_address
+        # IPv4 address of the local BGP interface.
+        # Corresponds to the JSON property `ipv4NexthopAddress`
+        # @return [String]
+        attr_accessor :ipv4_nexthop_address
         # IPv6 address of the local BGP interface.
         # Corresponds to the JSON property `ipv6NexthopAddress`
         # @return [String]
@@ -37336,6 +37451,11 @@ module Google
         # @return [String]
         attr_accessor :peer_ip_address
+        # IPv4 address of the remote BGP interface.
+        # Corresponds to the JSON property `peerIpv4NexthopAddress`
+        # @return [String]
+        attr_accessor :peer_ipv4_nexthop_address
         # IPv6 address of the remote BGP interface.
         # Corresponds to the JSON property `peerIpv6NexthopAddress`
         # @return [String]
@@ -37383,14 +37503,17 @@ module Google
         def update!(**args)
           @advertised_routes = args[:advertised_routes] if args.key?(:advertised_routes)
           @bfd_status = args[:bfd_status] if args.key?(:bfd_status)
+          @enable_ipv4 = args[:enable_ipv4] if args.key?(:enable_ipv4)
           @enable_ipv6 = args[:enable_ipv6] if args.key?(:enable_ipv6)
           @ip_address = args[:ip_address] if args.key?(:ip_address)
+          @ipv4_nexthop_address = args[:ipv4_nexthop_address] if args.key?(:ipv4_nexthop_address)
           @ipv6_nexthop_address = args[:ipv6_nexthop_address] if args.key?(:ipv6_nexthop_address)
           @linked_vpn_tunnel = args[:linked_vpn_tunnel] if args.key?(:linked_vpn_tunnel)
           @md5_auth_enabled = args[:md5_auth_enabled] if args.key?(:md5_auth_enabled)
           @name = args[:name] if args.key?(:name)
           @num_learned_routes = args[:num_learned_routes] if args.key?(:num_learned_routes)
           @peer_ip_address = args[:peer_ip_address] if args.key?(:peer_ip_address)
+          @peer_ipv4_nexthop_address = args[:peer_ipv4_nexthop_address] if args.key?(:peer_ipv4_nexthop_address)
           @peer_ipv6_nexthop_address = args[:peer_ipv6_nexthop_address] if args.key?(:peer_ipv6_nexthop_address)
           @router_appliance_instance = args[:router_appliance_instance] if args.key?(:router_appliance_instance)
           @state = args[:state] if args.key?(:state)
@@ -37727,7 +37850,7 @@ module Google
         # Specifies how a port is selected for health checking. Can be one of the
         # following values: USE_FIXED_PORT: Specifies a port number explicitly using the
-        # port field in the health check. Supported by backend services for pass-through
+        # port field in the health check. Supported by backend services for passthrough
         # load balancers and backend services for proxy load balancers. Not supported by
         # target pools. The health check supports all backends supported by the backend
         # service provided the backend can be health checked. For example, GCE_VM_IP
@@ -37735,13 +37858,13 @@ module Google
         # group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an
         # indirect method of specifying the health check port by referring to the
         # backend service. Only supported by backend services for proxy load balancers.
-        # Not supported by target pools. Not supported by backend services for pass-
-        # through load balancers. Supports all backends that can be health checked; for
-        # example, GCE_VM_IP_PORT network endpoint groups and instance group backends.
-        # For GCE_VM_IP_PORT network endpoint group backends, the health check uses the
-        # port number specified for each endpoint in the network endpoint group. For
-        # instance group backends, the health check uses the port number determined by
-        # looking up the backend service's named port in the instance group's list of
+        # Not supported by target pools. Not supported by backend services for
+        # passthrough load balancers. Supports all backends that can be health checked;
+        # for example, GCE_VM_IP_PORT network endpoint groups and instance group
+        # backends. For GCE_VM_IP_PORT network endpoint group backends, the health check
+        # uses the port number specified for each endpoint in the network endpoint group.
+        # For instance group backends, the health check uses the port number determined
+        # by looking up the backend service's named port in the instance group's list of
         # named ports.
         # Corresponds to the JSON property `portSpecification`
         # @return [String]
@@ -38468,7 +38591,7 @@ module Google
         # @return [String]
         attr_accessor :description
-        # User-provided name of the Organization security plicy. The name should be
+        # User-provided name of the organization security policy. The name should be
         # unique in the organization in which the security policy is created. This
         # should only be used when SecurityPolicyType is FIREWALL. The name must be 1-63
         # characters long, and comply with https://www.ietf.org/rfc/rfc1035.txt.
@@ -38758,12 +38881,33 @@ module Google
         # @return [Float]
         attr_accessor :auto_deploy_load_threshold
+        #
+        # Corresponds to the JSON property `detectionAbsoluteQps`
+        # @return [Float]
+        attr_accessor :detection_absolute_qps
+        #
+        # Corresponds to the JSON property `detectionLoadThreshold`
+        # @return [Float]
+        attr_accessor :detection_load_threshold
+        #
+        # Corresponds to the JSON property `detectionRelativeToBaselineQps`
+        # @return [Float]
+        attr_accessor :detection_relative_to_baseline_qps
         # The name must be 1-63 characters long, and comply with RFC1035. The name must
         # be unique within the security policy.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
+        # Configuration options for enabling Adaptive Protection to operate on specified
+        # granular traffic units.
+        # Corresponds to the JSON property `trafficGranularityConfigs`
+        # @return [Array<Google::Apis::ComputeBeta::SecurityPolicyAdaptiveProtectionConfigLayer7DdosDefenseConfigThresholdConfigTrafficGranularityConfig>]
+        attr_accessor :traffic_granularity_configs
         def initialize(**args)
            update!(**args)
         end
@@ -38774,7 +38918,46 @@ module Google
           @auto_deploy_expiration_sec = args[:auto_deploy_expiration_sec] if args.key?(:auto_deploy_expiration_sec)
           @auto_deploy_impacted_baseline_threshold = args[:auto_deploy_impacted_baseline_threshold] if args.key?(:auto_deploy_impacted_baseline_threshold)
           @auto_deploy_load_threshold = args[:auto_deploy_load_threshold] if args.key?(:auto_deploy_load_threshold)
+          @detection_absolute_qps = args[:detection_absolute_qps] if args.key?(:detection_absolute_qps)
+          @detection_load_threshold = args[:detection_load_threshold] if args.key?(:detection_load_threshold)
+          @detection_relative_to_baseline_qps = args[:detection_relative_to_baseline_qps] if args.key?(:detection_relative_to_baseline_qps)
           @name = args[:name] if args.key?(:name)
+          @traffic_granularity_configs = args[:traffic_granularity_configs] if args.key?(:traffic_granularity_configs)
+        end
+      end
+      # Configurations to specifc granular traffic units processed by Adaptive
+      # Protection.
+      class SecurityPolicyAdaptiveProtectionConfigLayer7DdosDefenseConfigThresholdConfigTrafficGranularityConfig
+        include Google::Apis::Core::Hashable
+        # If enabled, traffic matching each unique value for the specified type
+        # constitutes a separate traffic unit. It can only be set to true if `value` is
+        # empty.
+        # Corresponds to the JSON property `enableEachUniqueValue`
+        # @return [Boolean]
+        attr_accessor :enable_each_unique_value
+        alias_method :enable_each_unique_value?, :enable_each_unique_value
+        # Type of this configuration.
+        # Corresponds to the JSON property `type`
+        # @return [String]
+        attr_accessor :type
+        # Requests that match this value constitute a granular traffic unit.
+        # Corresponds to the JSON property `value`
+        # @return [String]
+        attr_accessor :value
+        def initialize(**args)
+           update!(**args)
+        end
+        # Update properties of this object
+        def update!(**args)
+          @enable_each_unique_value = args[:enable_each_unique_value] if args.key?(:enable_each_unique_value)
+          @type = args[:type] if args.key?(:type)
+          @value = args[:value] if args.key?(:value)
         end
       end
@@ -39378,7 +39561,7 @@ module Google
         include Google::Apis::Core::Hashable
         # reCAPTCHA configuration options to be applied for the rule. If the rule does
-        # not evaluate reCAPTCHA tokens, this field will have no effect.
+        # not evaluate reCAPTCHA tokens, this field has no effect.
         # Corresponds to the JSON property `recaptchaOptions`
         # @return [Google::Apis::ComputeBeta::SecurityPolicyRuleMatcherExprOptionsRecaptchaOptions]
         attr_accessor :recaptcha_options
@@ -39662,7 +39845,13 @@ module Google
         # is truncated to the first 128 bytes. - SNI: Server name indication in the TLS
         # session of the HTTPS request. The key value is truncated to the first 128
         # bytes. The key type defaults to ALL on a HTTP session. - REGION_CODE: The
-        # country/region from which the request originates.
+        # country/region from which the request originates. - TLS_JA3_FINGERPRINT: JA3
+        # TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If
+        # not available, the key type defaults to ALL. - USER_IP: The IP address of the
+        # originating client, which is resolved based on "userIpRequestHeaders"
+        # configured with the security policy. If there is no "userIpRequestHeaders"
+        # configuration or an IP address cannot be resolved from it, the key type
+        # defaults to IP.
         # Corresponds to the JSON property `enforceOnKey`
         # @return [String]
         attr_accessor :enforce_on_key
@@ -39751,7 +39940,13 @@ module Google
         # is truncated to the first 128 bytes. - SNI: Server name indication in the TLS
         # session of the HTTPS request. The key value is truncated to the first 128
         # bytes. The key type defaults to ALL on a HTTP session. - REGION_CODE: The
-        # country/region from which the request originates.
+        # country/region from which the request originates. - TLS_JA3_FINGERPRINT: JA3
+        # TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If
+        # not available, the key type defaults to ALL. - USER_IP: The IP address of the
+        # originating client, which is resolved based on "userIpRequestHeaders"
+        # configured with the security policy. If there is no "userIpRequestHeaders"
+        # configuration or an IP address cannot be resolved from it, the key type
+        # defaults to IP.
         # Corresponds to the JSON property `enforceOnKeyType`
         # @return [String]
         attr_accessor :enforce_on_key_type
@@ -41130,6 +41325,12 @@ module Google
         # @return [String]
         attr_accessor :name
+        # Output only. Reserved for future use.
+        # Corresponds to the JSON property `satisfiesPzi`
+        # @return [Boolean]
+        attr_accessor :satisfies_pzi
+        alias_method :satisfies_pzi?, :satisfies_pzi
         # [Output Only] Reserved for future use.
         # Corresponds to the JSON property `satisfiesPzs`
         # @return [Boolean]
@@ -41272,6 +41473,7 @@ module Google
           @licenses = args[:licenses] if args.key?(:licenses)
           @location_hint = args[:location_hint] if args.key?(:location_hint)
           @name = args[:name] if args.key?(:name)
+          @satisfies_pzi = args[:satisfies_pzi] if args.key?(:satisfies_pzi)
           @satisfies_pzs = args[:satisfies_pzs] if args.key?(:satisfies_pzs)
           @self_link = args[:self_link] if args.key?(:self_link)
           @snapshot_encryption_key = args[:snapshot_encryption_key] if args.key?(:snapshot_encryption_key)
@@ -42528,9 +42730,10 @@ module Google
         end
       end
-      # Represents an SSL Policy resource. Use SSL policies to control the SSL
-      # features, such as versions and cipher suites, offered by an HTTPS or SSL Proxy
-      # load balancer. For more information, read SSL Policy Concepts.
+      # Represents an SSL Policy resource. Use SSL policies to control SSL features,
+      # such as versions and cipher suites, that are offered by Application Load
+      # Balancers and proxy Network Load Balancers. For more information, read SSL
+      # policies overview.
       class SslPolicy
         include Google::Apis::Core::Hashable
@@ -43011,18 +43214,15 @@ module Google
         attr_accessor :private_ipv6_google_access
         # The purpose of the resource. This field can be either PRIVATE,
-        # REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or
-        # INTERNAL_HTTPS_LOAD_BALANCER. PRIVATE is the default purpose for user-created
-        # subnets or subnets that are automatically created in auto mode networks. A
-        # subnet with purpose set to REGIONAL_MANAGED_PROXY is a user-created subnetwork
-        # that is reserved for regional Envoy-based load balancers. A subnet with
-        # purpose set to PRIVATE_SERVICE_CONNECT is used to publish services using
-        # Private Service Connect. A subnet with purpose set to
-        # INTERNAL_HTTPS_LOAD_BALANCER is a proxy-only subnet that can be used only by
-        # regional internal HTTP(S) load balancers. Note that REGIONAL_MANAGED_PROXY is
-        # the preferred setting for all regional Envoy load balancers. If unspecified,
-        # the subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't
-        # supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
+        # GLOBAL_MANAGED_PROXY, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or
+        # PRIVATE is the default purpose for user-created subnets or subnets that are
+        # automatically created in auto mode networks. Subnets with purpose set to
+        # GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY are user-created subnetworks
+        # that are reserved for Envoy-based load balancers. A subnet with purpose set to
+        # PRIVATE_SERVICE_CONNECT is used to publish services using Private Service
+        # Connect. If unspecified, the subnet purpose defaults to PRIVATE. The
+        # enableFlowLogs field isn't supported if the subnet purpose field is set to
+        # GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY.
         # Corresponds to the JSON property `purpose`
         # @return [String]
         attr_accessor :purpose
@@ -43038,11 +43238,12 @@ module Google
         # @return [String]
         attr_accessor :reserved_internal_range
-        # The role of subnetwork. Currently, this field is only used when purpose =
-        # REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or BACKUP. An ACTIVE
-        # subnetwork is one that is currently being used for Envoy-based load balancers
-        # in a region. A BACKUP subnetwork is one that is ready to be promoted to ACTIVE
-        # or is currently draining. This field can be updated with a patch request.
+        # The role of subnetwork. Currently, this field is only used when purpose is set
+        # to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY. The value can be set to
+        # ACTIVE or BACKUP. An ACTIVE subnetwork is one that is currently being used for
+        # Envoy-based load balancers in a region. A BACKUP subnetwork is one that is
+        # ready to be promoted to ACTIVE or is currently draining. This field can be
+        # updated with a patch request.
         # Corresponds to the JSON property `role`
         # @return [String]
         attr_accessor :role
@@ -43642,7 +43843,7 @@ module Google
         # Specifies how a port is selected for health checking. Can be one of the
         # following values: USE_FIXED_PORT: Specifies a port number explicitly using the
-        # port field in the health check. Supported by backend services for pass-through
+        # port field in the health check. Supported by backend services for passthrough
         # load balancers and backend services for proxy load balancers. Not supported by
         # target pools. The health check supports all backends supported by the backend
         # service provided the backend can be health checked. For example, GCE_VM_IP
@@ -43650,13 +43851,13 @@ module Google
         # group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an
         # indirect method of specifying the health check port by referring to the
         # backend service. Only supported by backend services for proxy load balancers.
-        # Not supported by target pools. Not supported by backend services for pass-
-        # through load balancers. Supports all backends that can be health checked; for
-        # example, GCE_VM_IP_PORT network endpoint groups and instance group backends.
-        # For GCE_VM_IP_PORT network endpoint group backends, the health check uses the
-        # port number specified for each endpoint in the network endpoint group. For
-        # instance group backends, the health check uses the port number determined by
-        # looking up the backend service's named port in the instance group's list of
+        # Not supported by target pools. Not supported by backend services for
+        # passthrough load balancers. Supports all backends that can be health checked;
+        # for example, GCE_VM_IP_PORT network endpoint groups and instance group
+        # backends. For GCE_VM_IP_PORT network endpoint group backends, the health check
+        # uses the port number specified for each endpoint in the network endpoint group.
+        # For instance group backends, the health check uses the port number determined
+        # by looking up the backend service's named port in the instance group's list of
         # named ports.
         # Corresponds to the JSON property `portSpecification`
         # @return [String]
@@ -45456,10 +45657,10 @@ module Google
         end
       end
-      # Represents a Target Pool resource. Target pools are used for network TCP/UDP
-      # load balancing. A target pool references member instances, an associated
-      # legacy HttpHealthCheck resource, and, optionally, a backup target pool. For
-      # more information, read Using target pools.
+      # Represents a Target Pool resource. Target pools are used with external
+      # passthrough Network Load Balancers. A target pool references member instances,
+      # an associated legacy HttpHealthCheck resource, and, optionally, a backup
+      # target pool. For more information, read Using target pools.
       class TargetPool
         include Google::Apis::Core::Hashable
@@ -46129,9 +46330,9 @@ module Google
       end
       # Represents a Target SSL Proxy resource. A target SSL proxy is a component of a
-      # SSL Proxy load balancer. Global forwarding rules reference a target SSL proxy,
-      # and the target proxy then references an external backend service. For more
-      # information, read Using Target Proxies.
+      # Proxy Network Load Balancer. The forwarding rule references the target SSL
+      # proxy, and the target proxy then references a backend service. For more
+      # information, read Proxy Network Load Balancer overview.
       class TargetSslProxy
         include Google::Apis::Core::Hashable
@@ -46476,9 +46677,9 @@ module Google
       end
       # Represents a Target TCP Proxy resource. A target TCP proxy is a component of a
-      # TCP Proxy load balancer. Global forwarding rules reference target TCP proxy,
-      # and the target proxy then references an external backend service. For more
-      # information, read TCP Proxy Load Balancing overview.
+      # Proxy Network Load Balancer. The forwarding rule references the target TCP
+      # proxy, and the target proxy then references a backend service. For more
+      # information, read Proxy Network Load Balancer overview.
       class TargetTcpProxy
         include Google::Apis::Core::Hashable
@@ -48251,27 +48452,25 @@ module Google
         attr_accessor :network
         # The purpose of the resource. This field can be either PRIVATE,
-        # REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or
-        # INTERNAL_HTTPS_LOAD_BALANCER. PRIVATE is the default purpose for user-created
-        # subnets or subnets that are automatically created in auto mode networks. A
-        # subnet with purpose set to REGIONAL_MANAGED_PROXY is a user-created subnetwork
-        # that is reserved for regional Envoy-based load balancers. A subnet with
-        # purpose set to PRIVATE_SERVICE_CONNECT is used to publish services using
-        # Private Service Connect. A subnet with purpose set to
-        # INTERNAL_HTTPS_LOAD_BALANCER is a proxy-only subnet that can be used only by
-        # regional internal HTTP(S) load balancers. Note that REGIONAL_MANAGED_PROXY is
-        # the preferred setting for all regional Envoy load balancers. If unspecified,
-        # the subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't
-        # supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
+        # GLOBAL_MANAGED_PROXY, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or
+        # PRIVATE is the default purpose for user-created subnets or subnets that are
+        # automatically created in auto mode networks. Subnets with purpose set to
+        # GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY are user-created subnetworks
+        # that are reserved for Envoy-based load balancers. A subnet with purpose set to
+        # PRIVATE_SERVICE_CONNECT is used to publish services using Private Service
+        # Connect. If unspecified, the subnet purpose defaults to PRIVATE. The
+        # enableFlowLogs field isn't supported if the subnet purpose field is set to
+        # GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY.
         # Corresponds to the JSON property `purpose`
         # @return [String]
         attr_accessor :purpose
-        # The role of subnetwork. Currently, this field is only used when purpose =
-        # REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or BACKUP. An ACTIVE
-        # subnetwork is one that is currently being used for Envoy-based load balancers
-        # in a region. A BACKUP subnetwork is one that is ready to be promoted to ACTIVE
-        # or is currently draining. This field can be updated with a patch request.
+        # The role of subnetwork. Currently, this field is only used when purpose is set
+        # to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY. The value can be set to
+        # ACTIVE or BACKUP. An ACTIVE subnetwork is one that is currently being used for
+        # Envoy-based load balancers in a region. A BACKUP subnetwork is one that is
+        # ready to be promoted to ACTIVE or is currently draining. This field can be
+        # updated with a patch request.
         # Corresponds to the JSON property `role`
         # @return [String]
         attr_accessor :role