google-apis-compute_beta 0.86.0 → 0.88.0

data/lib/google/apis/compute_beta/classes.rb

@@ -3430,13 +3430,13 @@ module Google
       class BackendService
         include Google::Apis::Core::Hashable
       
-        # Lifetime of cookies in seconds. This setting is applicable to external and
-        # internal HTTP(S) load balancers and Traffic Director and requires
-        # GENERATED_COOKIE or HTTP_COOKIE session affinity. If set to 0, the cookie is
-        # non-persistent and lasts only until the end of the browser session (or
-        # equivalent). The maximum allowed value is two weeks (1,209,600). Not supported
-        # when the backend service is referenced by a URL map that is bound to target
-        # gRPC proxy that has validateForProxyless field set to true.
+        # Lifetime of cookies in seconds. This setting is applicable to Application Load
+        # Balancers and Traffic Director and requires GENERATED_COOKIE or HTTP_COOKIE
+        # session affinity. If set to 0, the cookie is non-persistent and lasts only
+        # until the end of the browser session (or equivalent). The maximum allowed
+        # value is two weeks (1,209,600). Not supported when the backend service is
+        # referenced by a URL map that is bound to target gRPC proxy that has
+        # validateForProxyless field set to true.
         # Corresponds to the JSON property `affinityCookieTtlSec`
         # @return [Fixnum]
         attr_accessor :affinity_cookie_ttl_sec
@@ -3507,23 +3507,23 @@ module Google
         # @return [String]
         attr_accessor :edge_security_policy
       
-        # If true, enables Cloud CDN for the backend service of an external HTTP(S) load
-        # balancer.
+        # If true, enables Cloud CDN for the backend service of a global external
+        # Application Load Balancer.
         # Corresponds to the JSON property `enableCDN`
         # @return [Boolean]
         attr_accessor :enable_cdn
         alias_method :enable_cdn?, :enable_cdn
       
-        # For load balancers that have configurable failover: [Internal TCP/UDP Load
-        # Balancing](https://cloud.google.com/load-balancing/docs/internal/failover-
-        # overview) and [external TCP/UDP Load Balancing](https://cloud.google.com/load-
-        # balancing/docs/network/networklb-failover-overview). On failover or failback,
-        # this field indicates whether connection draining will be honored. Google Cloud
-        # has a fixed connection draining timeout of 10 minutes. A setting of true
-        # terminates existing TCP connections to the active pool during failover and
-        # failback, immediately draining traffic. A setting of false allows existing TCP
-        # connections to persist, even on VMs no longer in the active pool, for up to
-        # the duration of the connection draining timeout (10 minutes).
+        # For load balancers that have configurable failover: [Internal passthrough
+        # Network Load Balancers](https://cloud.google.com/load-balancing/docs/internal/
+        # failover-overview) and [external passthrough Network Load Balancers](https://
+        # cloud.google.com/load-balancing/docs/network/networklb-failover-overview). On
+        # failover or failback, this field indicates whether connection draining will be
+        # honored. Google Cloud has a fixed connection draining timeout of 10 minutes. A
+        # setting of true terminates existing TCP connections to the active pool during
+        # failover and failback, immediately draining traffic. A setting of false allows
+        # existing TCP connections to persist, even on VMs no longer in the active pool,
+        # for up to the duration of the connection draining timeout (10 minutes).
         # Corresponds to the JSON property `failoverPolicy`
         # @return [Google::Apis::ComputeBeta::BackendServiceFailoverPolicy]
         attr_accessor :failover_policy
@@ -3572,12 +3572,13 @@ module Google
         # traffic to the backends of the backend service (Instance Group, Managed
         # Instance Group, Network Endpoint Group), regardless of traffic from the client
         # to the proxy. Only IPv6 health checks are used to check the health of the
-        # backends. This field is applicable to either: - Advanced Global External HTTPS
-        # Load Balancing (load balancing scheme EXTERNAL_MANAGED), - Regional External
-        # HTTPS Load Balancing, - Internal TCP Proxy (load balancing scheme
-        # INTERNAL_MANAGED), - Regional Internal HTTPS Load Balancing (load balancing
-        # scheme INTERNAL_MANAGED), - Traffic Director with Envoy proxies and proxyless
-        # gRPC (load balancing scheme INTERNAL_SELF_MANAGED).
+        # backends. This field is applicable to either: - Advanced global external
+        # Application Load Balancer (load balancing scheme EXTERNAL_MANAGED), - Regional
+        # external Application Load Balancer, - Internal proxy Network Load Balancer (
+        # load balancing scheme INTERNAL_MANAGED), - Regional internal Application Load
+        # Balancer (load balancing scheme INTERNAL_MANAGED), - Traffic Director with
+        # Envoy proxies and proxyless gRPC (load balancing scheme INTERNAL_SELF_MANAGED).
+        # 
         # Corresponds to the JSON property `ipAddressSelectionPolicy`
         # @return [String]
         attr_accessor :ip_address_selection_policy
@@ -3677,8 +3678,8 @@ module Google
         attr_accessor :outlier_detection
       
         # Deprecated in favor of portName. The TCP port to connect on the backend. The
-        # default value is 80. For Internal TCP/UDP Load Balancing and Network Load
-        # Balancing, omit port.
+        # default value is 80. For internal passthrough Network Load Balancers and
+        # external passthrough Network Load Balancers, omit port.
         # Corresponds to the JSON property `port`
         # @return [Fixnum]
         attr_accessor :port
@@ -3687,8 +3688,8 @@ module Google
         # communication to the backend VMs in that group. The named port must be [
         # defined on each backend instance group](https://cloud.google.com/load-
         # balancing/docs/backend-service#named_ports). This parameter has no meaning if
-        # the backends are NEGs. For Internal TCP/UDP Load Balancing and Network Load
-        # Balancing, omit port_name.
+        # the backends are NEGs. For internal passthrough Network Load Balancers and
+        # external passthrough Network Load Balancers, omit port_name.
         # Corresponds to the JSON property `portName`
         # @return [String]
         attr_accessor :port_name
@@ -4179,20 +4180,20 @@ module Google
         # @return [String]
         attr_accessor :connection_persistence_on_unhealthy_backends
       
-        # Enable Strong Session Affinity for Network Load Balancing. This option is not
-        # available publicly.
+        # Enable Strong Session Affinity for external passthrough Network Load Balancers.
+        # This option is not available publicly.
         # Corresponds to the JSON property `enableStrongAffinity`
         # @return [Boolean]
         attr_accessor :enable_strong_affinity
         alias_method :enable_strong_affinity?, :enable_strong_affinity
       
         # Specifies how long to keep a Connection Tracking entry while there is no
-        # matching traffic (in seconds). For Internal TCP/UDP Load Balancing: - The
-        # minimum (default) is 10 minutes and the maximum is 16 hours. - It can be set
-        # only if Connection Tracking is less than 5-tuple (i.e. Session Affinity is
-        # CLIENT_IP_NO_DESTINATION, CLIENT_IP or CLIENT_IP_PROTO, and Tracking Mode is
-        # PER_SESSION). For Network Load Balancer the default is 60 seconds. This option
-        # is not available publicly.
+        # matching traffic (in seconds). For internal passthrough Network Load Balancers:
+        # - The minimum (default) is 10 minutes and the maximum is 16 hours. - It can
+        # be set only if Connection Tracking is less than 5-tuple (i.e. Session Affinity
+        # is CLIENT_IP_NO_DESTINATION, CLIENT_IP or CLIENT_IP_PROTO, and Tracking Mode
+        # is PER_SESSION). For external passthrough Network Load Balancers the default
+        # is 60 seconds. This option is not available publicly.
         # Corresponds to the JSON property `idleTimeoutSec`
         # @return [Fixnum]
         attr_accessor :idle_timeout_sec
@@ -4223,16 +4224,16 @@ module Google
         end
       end
       
-      # For load balancers that have configurable failover: [Internal TCP/UDP Load
-      # Balancing](https://cloud.google.com/load-balancing/docs/internal/failover-
-      # overview) and [external TCP/UDP Load Balancing](https://cloud.google.com/load-
-      # balancing/docs/network/networklb-failover-overview). On failover or failback,
-      # this field indicates whether connection draining will be honored. Google Cloud
-      # has a fixed connection draining timeout of 10 minutes. A setting of true
-      # terminates existing TCP connections to the active pool during failover and
-      # failback, immediately draining traffic. A setting of false allows existing TCP
-      # connections to persist, even on VMs no longer in the active pool, for up to
-      # the duration of the connection draining timeout (10 minutes).
+      # For load balancers that have configurable failover: [Internal passthrough
+      # Network Load Balancers](https://cloud.google.com/load-balancing/docs/internal/
+      # failover-overview) and [external passthrough Network Load Balancers](https://
+      # cloud.google.com/load-balancing/docs/network/networklb-failover-overview). On
+      # failover or failback, this field indicates whether connection draining will be
+      # honored. Google Cloud has a fixed connection draining timeout of 10 minutes. A
+      # setting of true terminates existing TCP connections to the active pool during
+      # failover and failback, immediately draining traffic. A setting of false allows
+      # existing TCP connections to persist, even on VMs no longer in the active pool,
+      # for up to the duration of the connection draining timeout (10 minutes).
       class BackendServiceFailoverPolicy
         include Google::Apis::Core::Hashable
       
@@ -4246,10 +4247,10 @@ module Google
         # and all backup backend VMs are unhealthy.If set to false, connections are
         # distributed among all primary VMs when all primary and all backup backend VMs
         # are unhealthy. For load balancers that have configurable failover: [Internal
-        # TCP/UDP Load Balancing](https://cloud.google.com/load-balancing/docs/internal/
-        # failover-overview) and [external TCP/UDP Load Balancing](https://cloud.google.
-        # com/load-balancing/docs/network/networklb-failover-overview). The default is
-        # false.
+        # passthrough Network Load Balancers](https://cloud.google.com/load-balancing/
+        # docs/internal/failover-overview) and [external passthrough Network Load
+        # Balancers](https://cloud.google.com/load-balancing/docs/network/networklb-
+        # failover-overview). The default is false.
         # Corresponds to the JSON property `dropTrafficIfUnhealthy`
         # @return [Boolean]
         attr_accessor :drop_traffic_if_unhealthy
@@ -5143,21 +5144,43 @@ module Google
         # project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:`emailid``: An
         # email address that represents a Google group. For example, `admins@example.com`
         # . * `domain:`domain``: The G Suite domain (primary) that represents all the
-        # users of that domain. For example, `google.com` or `example.com`. * `deleted:
-        # user:`emailid`?uid=`uniqueid``: An email address (plus unique identifier)
-        # representing a user that has been recently deleted. For example, `alice@
-        # example.com?uid=123456789012345678901`. If the user is recovered, this value
-        # reverts to `user:`emailid`` and the recovered user retains the role in the
-        # binding. * `deleted:serviceAccount:`emailid`?uid=`uniqueid``: An email address
-        # (plus unique identifier) representing a service account that has been recently
-        # deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=
+        # users of that domain. For example, `google.com` or `example.com`. * `principal:
+        # //iam.googleapis.com/locations/global/workforcePools/`pool_id`/subject/`
+        # subject_attribute_value``: A single identity in a workforce identity pool. * `
+        # principalSet://iam.googleapis.com/locations/global/workforcePools/`pool_id`/
+        # group/`group_id``: All workforce identities in a group. * `principalSet://iam.
+        # googleapis.com/locations/global/workforcePools/`pool_id`/attribute.`
+        # attribute_name`/`attribute_value``: All workforce identities with a specific
+        # attribute value. * `principalSet://iam.googleapis.com/locations/global/
+        # workforcePools/`pool_id`/*`: All identities in a workforce identity pool. * `
+        # principal://iam.googleapis.com/projects/`project_number`/locations/global/
+        # workloadIdentityPools/`pool_id`/subject/`subject_attribute_value``: A single
+        # identity in a workload identity pool. * `principalSet://iam.googleapis.com/
+        # projects/`project_number`/locations/global/workloadIdentityPools/`pool_id`/
+        # group/`group_id``: A workload identity pool group. * `principalSet://iam.
+        # googleapis.com/projects/`project_number`/locations/global/
+        # workloadIdentityPools/`pool_id`/attribute.`attribute_name`/`attribute_value``:
+        # All identities in a workload identity pool with a certain attribute. * `
+        # principalSet://iam.googleapis.com/projects/`project_number`/locations/global/
+        # workloadIdentityPools/`pool_id`/*`: All identities in a workload identity pool.
+        # * `deleted:user:`emailid`?uid=`uniqueid``: An email address (plus unique
+        # identifier) representing a user that has been recently deleted. For example, `
+        # alice@example.com?uid=123456789012345678901`. If the user is recovered, this
+        # value reverts to `user:`emailid`` and the recovered user retains the role in
+        # the binding. * `deleted:serviceAccount:`emailid`?uid=`uniqueid``: An email
+        # address (plus unique identifier) representing a service account that has been
+        # recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=
         # 123456789012345678901`. If the service account is undeleted, this value
         # reverts to `serviceAccount:`emailid`` and the undeleted service account
         # retains the role in the binding. * `deleted:group:`emailid`?uid=`uniqueid``:
         # An email address (plus unique identifier) representing a Google group that has
         # been recently deleted. For example, `admins@example.com?uid=
         # 123456789012345678901`. If the group is recovered, this value reverts to `
-        # group:`emailid`` and the recovered group retains the role in the binding.
+        # group:`emailid`` and the recovered group retains the role in the binding. * `
+        # deleted:principal://iam.googleapis.com/locations/global/workforcePools/`
+        # pool_id`/subject/`subject_attribute_value``: Deleted single identity in a
+        # workforce identity pool. For example, `deleted:principal://iam.googleapis.com/
+        # locations/global/workforcePools/my-pool-id/subject/my-subject-attribute-value`.
         # Corresponds to the JSON property `members`
         # @return [Array<String>]
         attr_accessor :members
@@ -5586,6 +5609,15 @@ module Google
         # @return [String]
         attr_accessor :end_timestamp
       
+        # Specifies the already existing reservations to attach to the Commitment. This
+        # field is optional, and it can be a full or partial URL. For example, the
+        # following are valid URLs to an reservation: - https://www.googleapis.com/
+        # compute/v1/projects/project/zones/zone /reservations/reservation - projects/
+        # project/zones/zone/reservations/reservation
+        # Corresponds to the JSON property `existingReservations`
+        # @return [Array<String>]
+        attr_accessor :existing_reservations
+      
         # [Output Only] The unique identifier for the resource. This identifier is
         # defined by the server.
         # Corresponds to the JSON property `id`
@@ -5629,7 +5661,7 @@ module Google
         # @return [String]
         attr_accessor :region
       
-        # List of create-on-create reseravtions for this commitment.
+        # List of create-on-create reservations for this commitment.
         # Corresponds to the JSON property `reservations`
         # @return [Array<Google::Apis::ComputeBeta::Reservation>]
         attr_accessor :reservations
@@ -5686,6 +5718,7 @@ module Google
           @creation_timestamp = args[:creation_timestamp] if args.key?(:creation_timestamp)
           @description = args[:description] if args.key?(:description)
           @end_timestamp = args[:end_timestamp] if args.key?(:end_timestamp)
+          @existing_reservations = args[:existing_reservations] if args.key?(:existing_reservations)
           @id = args[:id] if args.key?(:id)
           @kind = args[:kind] if args.key?(:kind)
           @license_resource = args[:license_resource] if args.key?(:license_resource)
@@ -6739,6 +6772,12 @@ module Google
         # @return [Google::Apis::ComputeBeta::DiskResourceStatus]
         attr_accessor :resource_status
       
+        # Output only. Reserved for future use.
+        # Corresponds to the JSON property `satisfiesPzi`
+        # @return [Boolean]
+        attr_accessor :satisfies_pzi
+        alias_method :satisfies_pzi?, :satisfies_pzi
+      
         # [Output Only] Reserved for future use.
         # Corresponds to the JSON property `satisfiesPzs`
         # @return [Boolean]
@@ -6951,6 +6990,7 @@ module Google
           @replica_zones = args[:replica_zones] if args.key?(:replica_zones)
           @resource_policies = args[:resource_policies] if args.key?(:resource_policies)
           @resource_status = args[:resource_status] if args.key?(:resource_status)
+          @satisfies_pzi = args[:satisfies_pzi] if args.key?(:satisfies_pzi)
           @satisfies_pzs = args[:satisfies_pzs] if args.key?(:satisfies_pzs)
           @self_link = args[:self_link] if args.key?(:self_link)
           @size_gb = args[:size_gb] if args.key?(:size_gb)
@@ -9775,10 +9815,10 @@ module Google
       # google.com/compute/docs/reference/rest/beta/globalForwardingRules) * [Regional]
       # (https://cloud.google.com/compute/docs/reference/rest/beta/forwardingRules) A
       # forwarding rule and its corresponding IP address represent the frontend
-      # configuration of a Google Cloud Platform load balancer. Forwarding rules can
-      # also reference target instances and Cloud VPN Classic gateways (
-      # targetVpnGateway). For more information, read Forwarding rule concepts and
-      # Using protocol forwarding.
+      # configuration of a Google Cloud load balancer. Forwarding rules can also
+      # reference target instances and Cloud VPN Classic gateways (targetVpnGateway).
+      # For more information, read Forwarding rule concepts and Using protocol
+      # forwarding.
       class ForwardingRule
         include Google::Apis::Core::Hashable
       
@@ -9834,11 +9874,12 @@ module Google
       
         # This field is used along with the backend_service field for internal load
         # balancing or with the target field for internal TargetInstance. If set to true,
-        # clients can access the Internal TCP/UDP Load Balancer, Internal HTTP(S) and
-        # TCP Proxy Load Balancer from all regions. If false, only allows access from
-        # the local region the load balancer is located at. Note that for
-        # INTERNAL_MANAGED forwarding rules, this field cannot be changed after the
-        # forwarding rule is created.
+        # clients can access the internal passthrough Network Load Balancers, the
+        # regional internal Application Load Balancer, and the regional internal proxy
+        # Network Load Balancer from all regions. If false, only allows access from the
+        # local region the load balancer is located at. Note that for INTERNAL_MANAGED
+        # forwarding rules, this field cannot be changed after the forwarding rule is
+        # created.
         # Corresponds to the JSON property `allowGlobalAccess`
         # @return [Boolean]
         attr_accessor :allow_global_access
@@ -9862,16 +9903,16 @@ module Google
         alias_method :allow_psc_packet_injection?, :allow_psc_packet_injection
       
         # Identifies the backend service to which the forwarding rule sends traffic.
-        # Required for Internal TCP/UDP Load Balancing and Network Load Balancing; must
-        # be omitted for all other load balancer types.
+        # Required for internal and external passthrough Network Load Balancers; must be
+        # omitted for all other load balancer types.
         # Corresponds to the JSON property `backendService`
         # @return [String]
         attr_accessor :backend_service
       
-        # [Output Only] The URL for the corresponding base Forwarding Rule. By base
-        # Forwarding Rule, we mean the Forwarding Rule that has the same IP address,
-        # protocol, and port settings with the current Forwarding Rule, but without
-        # sourceIPRanges specified. Always empty if the current Forwarding Rule does not
+        # [Output Only] The URL for the corresponding base forwarding rule. By base
+        # forwarding rule, we mean the forwarding rule that has the same IP address,
+        # protocol, and port settings with the current forwarding rule, but without
+        # sourceIPRanges specified. Always empty if the current forwarding rule does not
         # have sourceIPRanges specified.
         # Corresponds to the JSON property `baseForwardingRule`
         # @return [String]
@@ -9922,7 +9963,7 @@ module Google
         alias_method :is_mirroring_collector?, :is_mirroring_collector
       
         # [Output Only] Type of the resource. Always compute#forwardingRule for
-        # Forwarding Rule resources.
+        # forwarding rule resources.
         # Corresponds to the JSON property `kind`
         # @return [String]
         attr_accessor :kind
@@ -9984,13 +10025,13 @@ module Google
         # @return [String]
         attr_accessor :name
       
-        # This field is not used for global external load balancing. For Internal TCP/
-        # UDP Load Balancing, this field identifies the network that the load balanced
-        # IP should belong to for this Forwarding Rule. If the subnetwork is specified,
-        # the network of the subnetwork will be used. If neither subnetwork nor this
-        # field is specified, the default network will be used. For Private Service
-        # Connect forwarding rules that forward traffic to Google APIs, a network must
-        # be provided.
+        # This field is not used for global external load balancing. For internal
+        # passthrough Network Load Balancers, this field identifies the network that the
+        # load balanced IP should belong to for this forwarding rule. If the subnetwork
+        # is specified, the network of the subnetwork will be used. If neither
+        # subnetwork nor this field is specified, the default network will be used. For
+        # Private Service Connect forwarding rules that forward traffic to Google APIs,
+        # a network must be provided.
         # Corresponds to the JSON property `network`
         # @return [String]
         attr_accessor :network
@@ -10049,7 +10090,7 @@ module Google
         # @return [Array<String>]
         attr_accessor :ports
       
-        # [Output Only] The PSC connection id of the PSC Forwarding Rule.
+        # [Output Only] The PSC connection id of the PSC forwarding rule.
         # Corresponds to the JSON property `pscConnectionId`
         # @return [Fixnum]
         attr_accessor :psc_connection_id
@@ -10078,7 +10119,7 @@ module Google
         # @return [Array<Google::Apis::ComputeBeta::ForwardingRuleServiceDirectoryRegistration>]
         attr_accessor :service_directory_registrations
       
-        # An optional prefix to the service name for this Forwarding Rule. If specified,
+        # An optional prefix to the service name for this forwarding rule. If specified,
         # the prefix is the first label of the fully qualified service name. The label
         # must be 1-63 characters long, and comply with RFC1035. Specifically, the label
         # must be 1-63 characters long and match the regular expression `[a-z]([-a-z0-9]*
@@ -10090,16 +10131,16 @@ module Google
         # @return [String]
         attr_accessor :service_label
       
-        # [Output Only] The internal fully qualified service name for this Forwarding
-        # Rule. This field is only used for internal load balancing.
+        # [Output Only] The internal fully qualified service name for this forwarding
+        # rule. This field is only used for internal load balancing.
         # Corresponds to the JSON property `serviceName`
         # @return [String]
         attr_accessor :service_name
       
-        # If not empty, this Forwarding Rule will only forward the traffic when the
+        # If not empty, this forwarding rule will only forward the traffic when the
         # source IP address matches one of the IP addresses or CIDR ranges set here.
-        # Note that a Forwarding Rule can only have up to 64 source IP ranges, and this
-        # field can only be used with a regional Forwarding Rule whose scheme is
+        # Note that a forwarding rule can only have up to 64 source IP ranges, and this
+        # field can only be used with a regional forwarding rule whose scheme is
         # EXTERNAL. Each source_ip_range entry should be either an IP address (for
         # example, 1.2.3.4) or a CIDR range (for example, 1.2.3.0/24).
         # Corresponds to the JSON property `sourceIpRanges`
@@ -10107,10 +10148,11 @@ module Google
         attr_accessor :source_ip_ranges
       
         # This field identifies the subnetwork that the load balanced IP should belong
-        # to for this Forwarding Rule, used in internal load balancing and network load
-        # balancing with IPv6. If the network specified is in auto subnet mode, this
-        # field is optional. However, a subnetwork must be specified if the network is
-        # in custom subnet mode or when creating external forwarding rule with IPv6.
+        # to for this forwarding rule, used with internal load balancers and external
+        # passthrough Network Load Balancers with IPv6. If the network specified is in
+        # auto subnet mode, this field is optional. However, a subnetwork must be
+        # specified if the network is in custom subnet mode or when creating external
+        # forwarding rule with IPv6.
         # Corresponds to the JSON property `subnetwork`
         # @return [String]
         attr_accessor :subnetwork
@@ -10435,9 +10477,9 @@ module Google
         end
       end
       
-      # Describes the auto-registration of the Forwarding Rule to Service Directory.
+      # Describes the auto-registration of the forwarding rule to Service Directory.
       # The region and project of the Service Directory resource generated from this
-      # registration will be the same as this Forwarding Rule.
+      # registration will be the same as this forwarding rule.
       class ForwardingRuleServiceDirectoryRegistration
         include Google::Apis::Core::Hashable
       
@@ -10453,7 +10495,7 @@ module Google
       
         # [Optional] Service Directory region to register this global forwarding rule
         # under. Default to "us-central1". Only used for PSC for Google APIs. All PSC
-        # for Google APIs Forwarding Rules on the same network should use the same
+        # for Google APIs forwarding rules on the same network should use the same
         # Service Directory region.
         # Corresponds to the JSON property `serviceDirectoryRegion`
         # @return [String]
@@ -10566,9 +10608,9 @@ module Google
       class FutureReservation
         include Google::Apis::Core::Hashable
       
-        # Future timestamp when the FR auto-created reservations will be deleted by GCE.
-        # Format of this field must be a valid href="https://www.ietf.org/rfc/rfc3339.
-        # txt">RFC3339 value.
+        # Future timestamp when the FR auto-created reservations will be deleted by
+        # Compute Engine. Format of this field must be a valid href="https://www.ietf.
+        # org/rfc/rfc3339.txt">RFC3339 value.
         # Corresponds to the JSON property `autoCreatedReservationsDeleteTime`
         # @return [String]
         attr_accessor :auto_created_reservations_delete_time
@@ -11307,7 +11349,7 @@ module Google
       
         # Specifies how a port is selected for health checking. Can be one of the
         # following values: USE_FIXED_PORT: Specifies a port number explicitly using the
-        # port field in the health check. Supported by backend services for pass-through
+        # port field in the health check. Supported by backend services for passthrough
         # load balancers and backend services for proxy load balancers. Not supported by
         # target pools. The health check supports all backends supported by the backend
         # service provided the backend can be health checked. For example, GCE_VM_IP
@@ -11315,13 +11357,13 @@ module Google
         # group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an
         # indirect method of specifying the health check port by referring to the
         # backend service. Only supported by backend services for proxy load balancers.
-        # Not supported by target pools. Not supported by backend services for pass-
-        # through load balancers. Supports all backends that can be health checked; for
-        # example, GCE_VM_IP_PORT network endpoint groups and instance group backends.
-        # For GCE_VM_IP_PORT network endpoint group backends, the health check uses the
-        # port number specified for each endpoint in the network endpoint group. For
-        # instance group backends, the health check uses the port number determined by
-        # looking up the backend service's named port in the instance group's list of
+        # Not supported by target pools. Not supported by backend services for
+        # passthrough load balancers. Supports all backends that can be health checked;
+        # for example, GCE_VM_IP_PORT network endpoint groups and instance group
+        # backends. For GCE_VM_IP_PORT network endpoint group backends, the health check
+        # uses the port number specified for each endpoint in the network endpoint group.
+        # For instance group backends, the health check uses the port number determined
+        # by looking up the backend service's named port in the instance group's list of
         # named ports.
         # Corresponds to the JSON property `portSpecification`
         # @return [String]
@@ -11670,8 +11712,8 @@ module Google
         # The ID of a supported feature. To add multiple values, use commas to separate
         # values. Set to one or more of the following values: - VIRTIO_SCSI_MULTIQUEUE -
         # WINDOWS - MULTI_IP_SUBNET - UEFI_COMPATIBLE - GVNIC - SEV_CAPABLE -
-        # SUSPEND_RESUME_COMPATIBLE - SEV_LIVE_MIGRATABLE - SEV_SNP_CAPABLE For more
-        # information, see Enabling guest operating system features.
+        # SUSPEND_RESUME_COMPATIBLE - SEV_LIVE_MIGRATABLE - SEV_SNP_CAPABLE - IDPF For
+        # more information, see Enabling guest operating system features.
         # Corresponds to the JSON property `type`
         # @return [String]
         attr_accessor :type
@@ -11712,7 +11754,7 @@ module Google
       
         # Specifies how a port is selected for health checking. Can be one of the
         # following values: USE_FIXED_PORT: Specifies a port number explicitly using the
-        # port field in the health check. Supported by backend services for pass-through
+        # port field in the health check. Supported by backend services for passthrough
         # load balancers and backend services for proxy load balancers. Not supported by
         # target pools. The health check supports all backends supported by the backend
         # service provided the backend can be health checked. For example, GCE_VM_IP
@@ -11720,13 +11762,13 @@ module Google
         # group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an
         # indirect method of specifying the health check port by referring to the
         # backend service. Only supported by backend services for proxy load balancers.
-        # Not supported by target pools. Not supported by backend services for pass-
-        # through load balancers. Supports all backends that can be health checked; for
-        # example, GCE_VM_IP_PORT network endpoint groups and instance group backends.
-        # For GCE_VM_IP_PORT network endpoint group backends, the health check uses the
-        # port number specified for each endpoint in the network endpoint group. For
-        # instance group backends, the health check uses the port number determined by
-        # looking up the backend service's named port in the instance group's list of
+        # Not supported by target pools. Not supported by backend services for
+        # passthrough load balancers. Supports all backends that can be health checked;
+        # for example, GCE_VM_IP_PORT network endpoint groups and instance group
+        # backends. For GCE_VM_IP_PORT network endpoint group backends, the health check
+        # uses the port number specified for each endpoint in the network endpoint group.
+        # For instance group backends, the health check uses the port number determined
+        # by looking up the backend service's named port in the instance group's list of
         # named ports.
         # Corresponds to the JSON property `portSpecification`
         # @return [String]
@@ -11794,7 +11836,7 @@ module Google
       
         # Specifies how a port is selected for health checking. Can be one of the
         # following values: USE_FIXED_PORT: Specifies a port number explicitly using the
-        # port field in the health check. Supported by backend services for pass-through
+        # port field in the health check. Supported by backend services for passthrough
         # load balancers and backend services for proxy load balancers. Also supported
         # in legacy HTTP health checks for target pools. The health check supports all
         # backends supported by the backend service provided the backend can be health
@@ -11876,7 +11918,7 @@ module Google
       
         # Specifies how a port is selected for health checking. Can be one of the
         # following values: USE_FIXED_PORT: Specifies a port number explicitly using the
-        # port field in the health check. Supported by backend services for pass-through
+        # port field in the health check. Supported by backend services for passthrough
         # load balancers and backend services for proxy load balancers. Not supported by
         # target pools. The health check supports all backends supported by the backend
         # service provided the backend can be health checked. For example, GCE_VM_IP
@@ -11884,13 +11926,13 @@ module Google
         # group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an
         # indirect method of specifying the health check port by referring to the
         # backend service. Only supported by backend services for proxy load balancers.
-        # Not supported by target pools. Not supported by backend services for pass-
-        # through load balancers. Supports all backends that can be health checked; for
-        # example, GCE_VM_IP_PORT network endpoint groups and instance group backends.
-        # For GCE_VM_IP_PORT network endpoint group backends, the health check uses the
-        # port number specified for each endpoint in the network endpoint group. For
-        # instance group backends, the health check uses the port number determined by
-        # looking up the backend service's named port in the instance group's list of
+        # Not supported by target pools. Not supported by backend services for
+        # passthrough load balancers. Supports all backends that can be health checked;
+        # for example, GCE_VM_IP_PORT network endpoint groups and instance group
+        # backends. For GCE_VM_IP_PORT network endpoint group backends, the health check
+        # uses the port number specified for each endpoint in the network endpoint group.
+        # For instance group backends, the health check uses the port number determined
+        # by looking up the backend service's named port in the instance group's list of
         # named ports.
         # Corresponds to the JSON property `portSpecification`
         # @return [String]
@@ -11936,18 +11978,13 @@ module Google
       # resources: * [Regional](/compute/docs/reference/rest/beta/regionHealthChecks) *
       # [Global](/compute/docs/reference/rest/beta/healthChecks) These health check
       # resources can be used for load balancing and for autohealing VMs in a managed
-      # instance group (MIG). **Load balancing** The following load balancer can use
-      # either regional or global health check: * Internal TCP/UDP load balancer The
-      # following load balancers require regional health check: * Internal HTTP(S)
-      # load balancer * Backend service-based network load balancer Traffic Director
-      # and the following load balancers require global health check: * External HTTP(
-      # S) load balancer * TCP proxy load balancer * SSL proxy load balancer The
-      # following load balancer require [legacy HTTP health checks](/compute/docs/
-      # reference/rest/v1/httpHealthChecks): * Target pool-based network load balancer
-      # **Autohealing in MIGs** The health checks that you use for autohealing VMs in
-      # a MIG can be either regional or global. For more information, see Set up an
-      # application health check and autohealing. For more information, see Health
-      # checks overview.
+      # instance group (MIG). **Load balancing** Health check requirements vary
+      # depending on the type of load balancer. For details about the type of health
+      # check supported for each load balancer and corresponding backend type, see
+      # Health checks overview: Load balancer guide. **Autohealing in MIGs** The
+      # health checks that you use for autohealing VMs in a MIG can be either regional
+      # or global. For more information, see Set up an application health check and
+      # autohealing. For more information, see Health checks overview.
       class HealthCheck
         include Google::Apis::Core::Hashable
       
@@ -12781,6 +12818,16 @@ module Google
         # @return [String]
         attr_accessor :ip_address
       
+        # 
+        # Corresponds to the JSON property `ipv6Address`
+        # @return [String]
+        attr_accessor :ipv6_address
+      
+        # Health state of the IPv6 address of the instance.
+        # Corresponds to the JSON property `ipv6HealthState`
+        # @return [String]
+        attr_accessor :ipv6_health_state
+      
         # The named port of the instance group, not necessarily the port that is health-
         # checked.
         # Corresponds to the JSON property `port`
@@ -12809,6 +12856,8 @@ module Google
           @health_state = args[:health_state] if args.key?(:health_state)
           @instance = args[:instance] if args.key?(:instance)
           @ip_address = args[:ip_address] if args.key?(:ip_address)
+          @ipv6_address = args[:ipv6_address] if args.key?(:ipv6_address)
+          @ipv6_health_state = args[:ipv6_health_state] if args.key?(:ipv6_health_state)
           @port = args[:port] if args.key?(:port)
           @weight = args[:weight] if args.key?(:weight)
           @weight_error = args[:weight_error] if args.key?(:weight_error)
@@ -14330,6 +14379,12 @@ module Google
         # @return [Google::Apis::ComputeBeta::RolloutPolicy]
         attr_accessor :rollout_override
       
+        # Output only. Reserved for future use.
+        # Corresponds to the JSON property `satisfiesPzi`
+        # @return [Boolean]
+        attr_accessor :satisfies_pzi
+        alias_method :satisfies_pzi?, :satisfies_pzi
+      
         # [Output Only] Reserved for future use.
         # Corresponds to the JSON property `satisfiesPzs`
         # @return [Boolean]
@@ -14471,6 +14526,7 @@ module Google
           @name = args[:name] if args.key?(:name)
           @raw_disk = args[:raw_disk] if args.key?(:raw_disk)
           @rollout_override = args[:rollout_override] if args.key?(:rollout_override)
+          @satisfies_pzi = args[:satisfies_pzi] if args.key?(:satisfies_pzi)
           @satisfies_pzs = args[:satisfies_pzs] if args.key?(:satisfies_pzs)
           @self_link = args[:self_link] if args.key?(:self_link)
           @shielded_instance_initial_state = args[:shielded_instance_initial_state] if args.key?(:shielded_instance_initial_state)
@@ -14938,6 +14994,12 @@ module Google
         # @return [Google::Apis::ComputeBeta::ResourceStatus]
         attr_accessor :resource_status
       
+        # [Output Only] Reserved for future use.
+        # Corresponds to the JSON property `satisfiesPzi`
+        # @return [Boolean]
+        attr_accessor :satisfies_pzi
+        alias_method :satisfies_pzi?, :satisfies_pzi
+      
         # [Output Only] Reserved for future use.
         # Corresponds to the JSON property `satisfiesPzs`
         # @return [Boolean]
@@ -15068,6 +15130,7 @@ module Google
           @reservation_affinity = args[:reservation_affinity] if args.key?(:reservation_affinity)
           @resource_policies = args[:resource_policies] if args.key?(:resource_policies)
           @resource_status = args[:resource_status] if args.key?(:resource_status)
+          @satisfies_pzi = args[:satisfies_pzi] if args.key?(:satisfies_pzi)
           @satisfies_pzs = args[:satisfies_pzs] if args.key?(:satisfies_pzs)
           @scheduling = args[:scheduling] if args.key?(:scheduling)
           @self_link = args[:self_link] if args.key?(:self_link)
@@ -16180,6 +16243,12 @@ module Google
         # @return [Hash<String,Google::Apis::ComputeBeta::InstanceGroupManagerInstanceFlexibilityPolicyInstanceSelection>]
         attr_accessor :instance_selection_lists
       
+        # Named instance selections configuring properties that the group will use when
+        # creating new VMs.
+        # Corresponds to the JSON property `instanceSelections`
+        # @return [Hash<String,Google::Apis::ComputeBeta::InstanceGroupManagerInstanceFlexibilityPolicyInstanceSelection>]
+        attr_accessor :instance_selections
+      
         def initialize(**args)
            update!(**args)
         end
@@ -16187,6 +16256,7 @@ module Google
         # Update properties of this object
         def update!(**args)
           @instance_selection_lists = args[:instance_selection_lists] if args.key?(:instance_selection_lists)
+          @instance_selections = args[:instance_selections] if args.key?(:instance_selections)
         end
       end
       
@@ -16476,8 +16546,10 @@ module Google
       class InstanceGroupManagerResizeRequestStatus
         include Google::Apis::Core::Hashable
       
-        # Errors encountered during the queueing or provisioning phases of the
-        # ResizeRequest.
+        # [Output only] Fatal errors encountered during the queueing or provisioning
+        # phases of the ResizeRequest that caused the transition to the FAILED state. As
+        # a contrary to the last_attempt errors, this field is final and errors are
+        # never removed from here, as the RR is not going to retry.
         # Corresponds to the JSON property `error`
         # @return [Google::Apis::ComputeBeta::InstanceGroupManagerResizeRequestStatus::Error]
         attr_accessor :error
@@ -16491,8 +16563,10 @@ module Google
           @error = args[:error] if args.key?(:error)
         end
         
-        # Errors encountered during the queueing or provisioning phases of the
-        # ResizeRequest.
+        # [Output only] Fatal errors encountered during the queueing or provisioning
+        # phases of the ResizeRequest that caused the transition to the FAILED state. As
+        # a contrary to the last_attempt errors, this field is final and errors are
+        # never removed from here, as the RR is not going to retry.
         class Error
           include Google::Apis::Core::Hashable
         
@@ -16723,12 +16797,16 @@ module Google
       class InstanceGroupManagerStandbyPolicy
         include Google::Apis::Core::Hashable
       
-        # 
+        # Specifies the number of seconds that the MIG should wait to suspend or stop a
+        # VM after that VM was created. The initial delay gives the initialization
+        # script the time to prepare your VM for a quick scale out. The value of initial
+        # delay must be between 0 and 3600 seconds. The default value is 0.
         # Corresponds to the JSON property `initialDelaySec`
         # @return [Fixnum]
         attr_accessor :initial_delay_sec
       
-        # Defines behaviour of using instances from standby pool to resize MIG.
+        # Defines how a MIG resumes or starts VMs from a standby pool when the group
+        # scales out. The default mode is `MANUAL`.
         # Corresponds to the JSON property `mode`
         # @return [String]
         attr_accessor :mode
@@ -19692,6 +19770,12 @@ module Google
         # @return [Google::Apis::ComputeBeta::InstantSnapshotResourceStatus]
         attr_accessor :resource_status
       
+        # Output only. Reserved for future use.
+        # Corresponds to the JSON property `satisfiesPzi`
+        # @return [Boolean]
+        attr_accessor :satisfies_pzi
+        alias_method :satisfies_pzi?, :satisfies_pzi
+      
         # [Output Only] Reserved for future use.
         # Corresponds to the JSON property `satisfiesPzs`
         # @return [Boolean]
@@ -19757,6 +19841,7 @@ module Google
           @name = args[:name] if args.key?(:name)
           @region = args[:region] if args.key?(:region)
           @resource_status = args[:resource_status] if args.key?(:resource_status)
+          @satisfies_pzi = args[:satisfies_pzi] if args.key?(:satisfies_pzi)
           @satisfies_pzs = args[:satisfies_pzs] if args.key?(:satisfies_pzs)
           @self_link = args[:self_link] if args.key?(:self_link)
           @self_link_with_id = args[:self_link_with_id] if args.key?(:self_link_with_id)
@@ -23216,6 +23301,12 @@ module Google
         # @return [String]
         attr_accessor :name
       
+        # Output only. Reserved for future use.
+        # Corresponds to the JSON property `satisfiesPzi`
+        # @return [Boolean]
+        attr_accessor :satisfies_pzi
+        alias_method :satisfies_pzi?, :satisfies_pzi
+      
         # [Output Only] Reserved for future use.
         # Corresponds to the JSON property `satisfiesPzs`
         # @return [Boolean]
@@ -23285,6 +23376,7 @@ module Google
           @kind = args[:kind] if args.key?(:kind)
           @machine_image_encryption_key = args[:machine_image_encryption_key] if args.key?(:machine_image_encryption_key)
           @name = args[:name] if args.key?(:name)
+          @satisfies_pzi = args[:satisfies_pzi] if args.key?(:satisfies_pzi)
           @satisfies_pzs = args[:satisfies_pzs] if args.key?(:satisfies_pzs)
           @saved_disks = args[:saved_disks] if args.key?(:saved_disks)
           @self_link = args[:self_link] if args.key?(:self_link)
@@ -23974,6 +24066,13 @@ module Google
         # @return [Google::Apis::ComputeBeta::ManagedInstancePropertiesFromFlexibilityPolicy]
         attr_accessor :properties_from_flexibility_policy
       
+        # [Output Only] The eventual status of the instance. The instance group manager
+        # will not be identified as stable till each managed instance reaches its
+        # targetStatus.
+        # Corresponds to the JSON property `targetStatus`
+        # @return [String]
+        attr_accessor :target_status
+      
         # [Output Only] Intended version of this instance.
         # Corresponds to the JSON property `version`
         # @return [Google::Apis::ComputeBeta::ManagedInstanceVersion]
@@ -23997,6 +24096,7 @@ module Google
           @preserved_state_from_config = args[:preserved_state_from_config] if args.key?(:preserved_state_from_config)
           @preserved_state_from_policy = args[:preserved_state_from_policy] if args.key?(:preserved_state_from_policy)
           @properties_from_flexibility_policy = args[:properties_from_flexibility_policy] if args.key?(:properties_from_flexibility_policy)
+          @target_status = args[:target_status] if args.key?(:target_status)
           @version = args[:version] if args.key?(:version)
         end
       end
@@ -29125,7 +29225,8 @@ module Google
       # global operations, use the `globalOperations` resource. - For regional
       # operations, use the `regionOperations` resource. - For zonal operations, use
       # the `zoneOperations` resource. For more information, read Global, Regional,
-      # and Zonal Resources.
+      # and Zonal Resources. Note that completed Operation resources have a limited
+      # retention period.
       class Operation
         include Google::Apis::Core::Hashable
       
@@ -30262,15 +30363,17 @@ module Google
       
         # Protocols that apply as filter on mirrored traffic. If no protocols are
         # specified, all traffic that matches the specified CIDR ranges is mirrored. If
-        # neither cidrRanges nor IPProtocols is specified, all traffic is mirrored.
+        # neither cidrRanges nor IPProtocols is specified, all IPv4 traffic is mirrored.
         # Corresponds to the JSON property `IPProtocols`
         # @return [Array<String>]
         attr_accessor :ip_protocols
       
-        # IP CIDR ranges that apply as filter on the source (ingress) or destination (
-        # egress) IP in the IP header. Only IPv4 is supported. If no ranges are
-        # specified, all traffic that matches the specified IPProtocols is mirrored. If
-        # neither cidrRanges nor IPProtocols is specified, all traffic is mirrored.
+        # One or more IPv4 or IPv6 CIDR ranges that apply as filter on the source (
+        # ingress) or destination (egress) IP in the IP header. If no ranges are
+        # specified, all IPv4 traffic that matches the specified IPProtocols is mirrored.
+        # If neither cidrRanges nor IPProtocols is specified, all IPv4 traffic is
+        # mirrored. To mirror all IPv4 and IPv6 traffic, use "0.0.0.0/0,::/0". Note:
+        # Support for IPv6 traffic is in preview.
         # Corresponds to the JSON property `cidrRanges`
         # @return [Array<String>]
         attr_accessor :cidr_ranges
@@ -37294,6 +37397,13 @@ module Google
         # @return [Google::Apis::ComputeBeta::BfdStatus]
         attr_accessor :bfd_status
       
+        # Enable IPv4 traffic over BGP Peer. It is enabled by default if the
+        # peerIpAddress is version 4.
+        # Corresponds to the JSON property `enableIpv4`
+        # @return [Boolean]
+        attr_accessor :enable_ipv4
+        alias_method :enable_ipv4?, :enable_ipv4
+      
         # Enable IPv6 traffic over BGP Peer. If not specified, it is disabled by default.
         # Corresponds to the JSON property `enableIpv6`
         # @return [Boolean]
@@ -37305,6 +37415,11 @@ module Google
         # @return [String]
         attr_accessor :ip_address
       
+        # IPv4 address of the local BGP interface.
+        # Corresponds to the JSON property `ipv4NexthopAddress`
+        # @return [String]
+        attr_accessor :ipv4_nexthop_address
+      
         # IPv6 address of the local BGP interface.
         # Corresponds to the JSON property `ipv6NexthopAddress`
         # @return [String]
@@ -37336,6 +37451,11 @@ module Google
         # @return [String]
         attr_accessor :peer_ip_address
       
+        # IPv4 address of the remote BGP interface.
+        # Corresponds to the JSON property `peerIpv4NexthopAddress`
+        # @return [String]
+        attr_accessor :peer_ipv4_nexthop_address
+      
         # IPv6 address of the remote BGP interface.
         # Corresponds to the JSON property `peerIpv6NexthopAddress`
         # @return [String]
@@ -37383,14 +37503,17 @@ module Google
         def update!(**args)
           @advertised_routes = args[:advertised_routes] if args.key?(:advertised_routes)
           @bfd_status = args[:bfd_status] if args.key?(:bfd_status)
+          @enable_ipv4 = args[:enable_ipv4] if args.key?(:enable_ipv4)
           @enable_ipv6 = args[:enable_ipv6] if args.key?(:enable_ipv6)
           @ip_address = args[:ip_address] if args.key?(:ip_address)
+          @ipv4_nexthop_address = args[:ipv4_nexthop_address] if args.key?(:ipv4_nexthop_address)
           @ipv6_nexthop_address = args[:ipv6_nexthop_address] if args.key?(:ipv6_nexthop_address)
           @linked_vpn_tunnel = args[:linked_vpn_tunnel] if args.key?(:linked_vpn_tunnel)
           @md5_auth_enabled = args[:md5_auth_enabled] if args.key?(:md5_auth_enabled)
           @name = args[:name] if args.key?(:name)
           @num_learned_routes = args[:num_learned_routes] if args.key?(:num_learned_routes)
           @peer_ip_address = args[:peer_ip_address] if args.key?(:peer_ip_address)
+          @peer_ipv4_nexthop_address = args[:peer_ipv4_nexthop_address] if args.key?(:peer_ipv4_nexthop_address)
           @peer_ipv6_nexthop_address = args[:peer_ipv6_nexthop_address] if args.key?(:peer_ipv6_nexthop_address)
           @router_appliance_instance = args[:router_appliance_instance] if args.key?(:router_appliance_instance)
           @state = args[:state] if args.key?(:state)
@@ -37727,7 +37850,7 @@ module Google
       
         # Specifies how a port is selected for health checking. Can be one of the
         # following values: USE_FIXED_PORT: Specifies a port number explicitly using the
-        # port field in the health check. Supported by backend services for pass-through
+        # port field in the health check. Supported by backend services for passthrough
         # load balancers and backend services for proxy load balancers. Not supported by
         # target pools. The health check supports all backends supported by the backend
         # service provided the backend can be health checked. For example, GCE_VM_IP
@@ -37735,13 +37858,13 @@ module Google
         # group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an
         # indirect method of specifying the health check port by referring to the
         # backend service. Only supported by backend services for proxy load balancers.
-        # Not supported by target pools. Not supported by backend services for pass-
-        # through load balancers. Supports all backends that can be health checked; for
-        # example, GCE_VM_IP_PORT network endpoint groups and instance group backends.
-        # For GCE_VM_IP_PORT network endpoint group backends, the health check uses the
-        # port number specified for each endpoint in the network endpoint group. For
-        # instance group backends, the health check uses the port number determined by
-        # looking up the backend service's named port in the instance group's list of
+        # Not supported by target pools. Not supported by backend services for
+        # passthrough load balancers. Supports all backends that can be health checked;
+        # for example, GCE_VM_IP_PORT network endpoint groups and instance group
+        # backends. For GCE_VM_IP_PORT network endpoint group backends, the health check
+        # uses the port number specified for each endpoint in the network endpoint group.
+        # For instance group backends, the health check uses the port number determined
+        # by looking up the backend service's named port in the instance group's list of
         # named ports.
         # Corresponds to the JSON property `portSpecification`
         # @return [String]
@@ -38468,7 +38591,7 @@ module Google
         # @return [String]
         attr_accessor :description
       
-        # User-provided name of the Organization security plicy. The name should be
+        # User-provided name of the organization security policy. The name should be
         # unique in the organization in which the security policy is created. This
         # should only be used when SecurityPolicyType is FIREWALL. The name must be 1-63
         # characters long, and comply with https://www.ietf.org/rfc/rfc1035.txt.
@@ -38758,12 +38881,33 @@ module Google
         # @return [Float]
         attr_accessor :auto_deploy_load_threshold
       
+        # 
+        # Corresponds to the JSON property `detectionAbsoluteQps`
+        # @return [Float]
+        attr_accessor :detection_absolute_qps
+      
+        # 
+        # Corresponds to the JSON property `detectionLoadThreshold`
+        # @return [Float]
+        attr_accessor :detection_load_threshold
+      
+        # 
+        # Corresponds to the JSON property `detectionRelativeToBaselineQps`
+        # @return [Float]
+        attr_accessor :detection_relative_to_baseline_qps
+      
         # The name must be 1-63 characters long, and comply with RFC1035. The name must
         # be unique within the security policy.
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
       
+        # Configuration options for enabling Adaptive Protection to operate on specified
+        # granular traffic units.
+        # Corresponds to the JSON property `trafficGranularityConfigs`
+        # @return [Array<Google::Apis::ComputeBeta::SecurityPolicyAdaptiveProtectionConfigLayer7DdosDefenseConfigThresholdConfigTrafficGranularityConfig>]
+        attr_accessor :traffic_granularity_configs
+      
         def initialize(**args)
            update!(**args)
         end
@@ -38774,7 +38918,46 @@ module Google
           @auto_deploy_expiration_sec = args[:auto_deploy_expiration_sec] if args.key?(:auto_deploy_expiration_sec)
           @auto_deploy_impacted_baseline_threshold = args[:auto_deploy_impacted_baseline_threshold] if args.key?(:auto_deploy_impacted_baseline_threshold)
           @auto_deploy_load_threshold = args[:auto_deploy_load_threshold] if args.key?(:auto_deploy_load_threshold)
+          @detection_absolute_qps = args[:detection_absolute_qps] if args.key?(:detection_absolute_qps)
+          @detection_load_threshold = args[:detection_load_threshold] if args.key?(:detection_load_threshold)
+          @detection_relative_to_baseline_qps = args[:detection_relative_to_baseline_qps] if args.key?(:detection_relative_to_baseline_qps)
           @name = args[:name] if args.key?(:name)
+          @traffic_granularity_configs = args[:traffic_granularity_configs] if args.key?(:traffic_granularity_configs)
+        end
+      end
+      
+      # Configurations to specifc granular traffic units processed by Adaptive
+      # Protection.
+      class SecurityPolicyAdaptiveProtectionConfigLayer7DdosDefenseConfigThresholdConfigTrafficGranularityConfig
+        include Google::Apis::Core::Hashable
+      
+        # If enabled, traffic matching each unique value for the specified type
+        # constitutes a separate traffic unit. It can only be set to true if `value` is
+        # empty.
+        # Corresponds to the JSON property `enableEachUniqueValue`
+        # @return [Boolean]
+        attr_accessor :enable_each_unique_value
+        alias_method :enable_each_unique_value?, :enable_each_unique_value
+      
+        # Type of this configuration.
+        # Corresponds to the JSON property `type`
+        # @return [String]
+        attr_accessor :type
+      
+        # Requests that match this value constitute a granular traffic unit.
+        # Corresponds to the JSON property `value`
+        # @return [String]
+        attr_accessor :value
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @enable_each_unique_value = args[:enable_each_unique_value] if args.key?(:enable_each_unique_value)
+          @type = args[:type] if args.key?(:type)
+          @value = args[:value] if args.key?(:value)
         end
       end
       
@@ -39378,7 +39561,7 @@ module Google
         include Google::Apis::Core::Hashable
       
         # reCAPTCHA configuration options to be applied for the rule. If the rule does
-        # not evaluate reCAPTCHA tokens, this field will have no effect.
+        # not evaluate reCAPTCHA tokens, this field has no effect.
         # Corresponds to the JSON property `recaptchaOptions`
         # @return [Google::Apis::ComputeBeta::SecurityPolicyRuleMatcherExprOptionsRecaptchaOptions]
         attr_accessor :recaptcha_options
@@ -39662,7 +39845,13 @@ module Google
         # is truncated to the first 128 bytes. - SNI: Server name indication in the TLS
         # session of the HTTPS request. The key value is truncated to the first 128
         # bytes. The key type defaults to ALL on a HTTP session. - REGION_CODE: The
-        # country/region from which the request originates.
+        # country/region from which the request originates. - TLS_JA3_FINGERPRINT: JA3
+        # TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If
+        # not available, the key type defaults to ALL. - USER_IP: The IP address of the
+        # originating client, which is resolved based on "userIpRequestHeaders"
+        # configured with the security policy. If there is no "userIpRequestHeaders"
+        # configuration or an IP address cannot be resolved from it, the key type
+        # defaults to IP.
         # Corresponds to the JSON property `enforceOnKey`
         # @return [String]
         attr_accessor :enforce_on_key
@@ -39751,7 +39940,13 @@ module Google
         # is truncated to the first 128 bytes. - SNI: Server name indication in the TLS
         # session of the HTTPS request. The key value is truncated to the first 128
         # bytes. The key type defaults to ALL on a HTTP session. - REGION_CODE: The
-        # country/region from which the request originates.
+        # country/region from which the request originates. - TLS_JA3_FINGERPRINT: JA3
+        # TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If
+        # not available, the key type defaults to ALL. - USER_IP: The IP address of the
+        # originating client, which is resolved based on "userIpRequestHeaders"
+        # configured with the security policy. If there is no "userIpRequestHeaders"
+        # configuration or an IP address cannot be resolved from it, the key type
+        # defaults to IP.
         # Corresponds to the JSON property `enforceOnKeyType`
         # @return [String]
         attr_accessor :enforce_on_key_type
@@ -41130,6 +41325,12 @@ module Google
         # @return [String]
         attr_accessor :name
       
+        # Output only. Reserved for future use.
+        # Corresponds to the JSON property `satisfiesPzi`
+        # @return [Boolean]
+        attr_accessor :satisfies_pzi
+        alias_method :satisfies_pzi?, :satisfies_pzi
+      
         # [Output Only] Reserved for future use.
         # Corresponds to the JSON property `satisfiesPzs`
         # @return [Boolean]
@@ -41272,6 +41473,7 @@ module Google
           @licenses = args[:licenses] if args.key?(:licenses)
           @location_hint = args[:location_hint] if args.key?(:location_hint)
           @name = args[:name] if args.key?(:name)
+          @satisfies_pzi = args[:satisfies_pzi] if args.key?(:satisfies_pzi)
           @satisfies_pzs = args[:satisfies_pzs] if args.key?(:satisfies_pzs)
           @self_link = args[:self_link] if args.key?(:self_link)
           @snapshot_encryption_key = args[:snapshot_encryption_key] if args.key?(:snapshot_encryption_key)
@@ -42528,9 +42730,10 @@ module Google
         end
       end
       
-      # Represents an SSL Policy resource. Use SSL policies to control the SSL
-      # features, such as versions and cipher suites, offered by an HTTPS or SSL Proxy
-      # load balancer. For more information, read SSL Policy Concepts.
+      # Represents an SSL Policy resource. Use SSL policies to control SSL features,
+      # such as versions and cipher suites, that are offered by Application Load
+      # Balancers and proxy Network Load Balancers. For more information, read SSL
+      # policies overview.
       class SslPolicy
         include Google::Apis::Core::Hashable
       
@@ -43011,18 +43214,15 @@ module Google
         attr_accessor :private_ipv6_google_access
       
         # The purpose of the resource. This field can be either PRIVATE,
-        # REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or
-        # INTERNAL_HTTPS_LOAD_BALANCER. PRIVATE is the default purpose for user-created
-        # subnets or subnets that are automatically created in auto mode networks. A
-        # subnet with purpose set to REGIONAL_MANAGED_PROXY is a user-created subnetwork
-        # that is reserved for regional Envoy-based load balancers. A subnet with
-        # purpose set to PRIVATE_SERVICE_CONNECT is used to publish services using
-        # Private Service Connect. A subnet with purpose set to
-        # INTERNAL_HTTPS_LOAD_BALANCER is a proxy-only subnet that can be used only by
-        # regional internal HTTP(S) load balancers. Note that REGIONAL_MANAGED_PROXY is
-        # the preferred setting for all regional Envoy load balancers. If unspecified,
-        # the subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't
-        # supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
+        # GLOBAL_MANAGED_PROXY, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or
+        # PRIVATE is the default purpose for user-created subnets or subnets that are
+        # automatically created in auto mode networks. Subnets with purpose set to
+        # GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY are user-created subnetworks
+        # that are reserved for Envoy-based load balancers. A subnet with purpose set to
+        # PRIVATE_SERVICE_CONNECT is used to publish services using Private Service
+        # Connect. If unspecified, the subnet purpose defaults to PRIVATE. The
+        # enableFlowLogs field isn't supported if the subnet purpose field is set to
+        # GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY.
         # Corresponds to the JSON property `purpose`
         # @return [String]
         attr_accessor :purpose
@@ -43038,11 +43238,12 @@ module Google
         # @return [String]
         attr_accessor :reserved_internal_range
       
-        # The role of subnetwork. Currently, this field is only used when purpose =
-        # REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or BACKUP. An ACTIVE
-        # subnetwork is one that is currently being used for Envoy-based load balancers
-        # in a region. A BACKUP subnetwork is one that is ready to be promoted to ACTIVE
-        # or is currently draining. This field can be updated with a patch request.
+        # The role of subnetwork. Currently, this field is only used when purpose is set
+        # to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY. The value can be set to
+        # ACTIVE or BACKUP. An ACTIVE subnetwork is one that is currently being used for
+        # Envoy-based load balancers in a region. A BACKUP subnetwork is one that is
+        # ready to be promoted to ACTIVE or is currently draining. This field can be
+        # updated with a patch request.
         # Corresponds to the JSON property `role`
         # @return [String]
         attr_accessor :role
@@ -43642,7 +43843,7 @@ module Google
       
         # Specifies how a port is selected for health checking. Can be one of the
         # following values: USE_FIXED_PORT: Specifies a port number explicitly using the
-        # port field in the health check. Supported by backend services for pass-through
+        # port field in the health check. Supported by backend services for passthrough
         # load balancers and backend services for proxy load balancers. Not supported by
         # target pools. The health check supports all backends supported by the backend
         # service provided the backend can be health checked. For example, GCE_VM_IP
@@ -43650,13 +43851,13 @@ module Google
         # group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an
         # indirect method of specifying the health check port by referring to the
         # backend service. Only supported by backend services for proxy load balancers.
-        # Not supported by target pools. Not supported by backend services for pass-
-        # through load balancers. Supports all backends that can be health checked; for
-        # example, GCE_VM_IP_PORT network endpoint groups and instance group backends.
-        # For GCE_VM_IP_PORT network endpoint group backends, the health check uses the
-        # port number specified for each endpoint in the network endpoint group. For
-        # instance group backends, the health check uses the port number determined by
-        # looking up the backend service's named port in the instance group's list of
+        # Not supported by target pools. Not supported by backend services for
+        # passthrough load balancers. Supports all backends that can be health checked;
+        # for example, GCE_VM_IP_PORT network endpoint groups and instance group
+        # backends. For GCE_VM_IP_PORT network endpoint group backends, the health check
+        # uses the port number specified for each endpoint in the network endpoint group.
+        # For instance group backends, the health check uses the port number determined
+        # by looking up the backend service's named port in the instance group's list of
         # named ports.
         # Corresponds to the JSON property `portSpecification`
         # @return [String]
@@ -45456,10 +45657,10 @@ module Google
         end
       end
       
-      # Represents a Target Pool resource. Target pools are used for network TCP/UDP
-      # load balancing. A target pool references member instances, an associated
-      # legacy HttpHealthCheck resource, and, optionally, a backup target pool. For
-      # more information, read Using target pools.
+      # Represents a Target Pool resource. Target pools are used with external
+      # passthrough Network Load Balancers. A target pool references member instances,
+      # an associated legacy HttpHealthCheck resource, and, optionally, a backup
+      # target pool. For more information, read Using target pools.
       class TargetPool
         include Google::Apis::Core::Hashable
       
@@ -46129,9 +46330,9 @@ module Google
       end
       
       # Represents a Target SSL Proxy resource. A target SSL proxy is a component of a
-      # SSL Proxy load balancer. Global forwarding rules reference a target SSL proxy,
-      # and the target proxy then references an external backend service. For more
-      # information, read Using Target Proxies.
+      # Proxy Network Load Balancer. The forwarding rule references the target SSL
+      # proxy, and the target proxy then references a backend service. For more
+      # information, read Proxy Network Load Balancer overview.
       class TargetSslProxy
         include Google::Apis::Core::Hashable
       
@@ -46476,9 +46677,9 @@ module Google
       end
       
       # Represents a Target TCP Proxy resource. A target TCP proxy is a component of a
-      # TCP Proxy load balancer. Global forwarding rules reference target TCP proxy,
-      # and the target proxy then references an external backend service. For more
-      # information, read TCP Proxy Load Balancing overview.
+      # Proxy Network Load Balancer. The forwarding rule references the target TCP
+      # proxy, and the target proxy then references a backend service. For more
+      # information, read Proxy Network Load Balancer overview.
       class TargetTcpProxy
         include Google::Apis::Core::Hashable
       
@@ -48251,27 +48452,25 @@ module Google
         attr_accessor :network
       
         # The purpose of the resource. This field can be either PRIVATE,
-        # REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or
-        # INTERNAL_HTTPS_LOAD_BALANCER. PRIVATE is the default purpose for user-created
-        # subnets or subnets that are automatically created in auto mode networks. A
-        # subnet with purpose set to REGIONAL_MANAGED_PROXY is a user-created subnetwork
-        # that is reserved for regional Envoy-based load balancers. A subnet with
-        # purpose set to PRIVATE_SERVICE_CONNECT is used to publish services using
-        # Private Service Connect. A subnet with purpose set to
-        # INTERNAL_HTTPS_LOAD_BALANCER is a proxy-only subnet that can be used only by
-        # regional internal HTTP(S) load balancers. Note that REGIONAL_MANAGED_PROXY is
-        # the preferred setting for all regional Envoy load balancers. If unspecified,
-        # the subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't
-        # supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
+        # GLOBAL_MANAGED_PROXY, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or
+        # PRIVATE is the default purpose for user-created subnets or subnets that are
+        # automatically created in auto mode networks. Subnets with purpose set to
+        # GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY are user-created subnetworks
+        # that are reserved for Envoy-based load balancers. A subnet with purpose set to
+        # PRIVATE_SERVICE_CONNECT is used to publish services using Private Service
+        # Connect. If unspecified, the subnet purpose defaults to PRIVATE. The
+        # enableFlowLogs field isn't supported if the subnet purpose field is set to
+        # GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY.
         # Corresponds to the JSON property `purpose`
         # @return [String]
         attr_accessor :purpose
       
-        # The role of subnetwork. Currently, this field is only used when purpose =
-        # REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or BACKUP. An ACTIVE
-        # subnetwork is one that is currently being used for Envoy-based load balancers
-        # in a region. A BACKUP subnetwork is one that is ready to be promoted to ACTIVE
-        # or is currently draining. This field can be updated with a patch request.
+        # The role of subnetwork. Currently, this field is only used when purpose is set
+        # to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY. The value can be set to
+        # ACTIVE or BACKUP. An ACTIVE subnetwork is one that is currently being used for
+        # Envoy-based load balancers in a region. A BACKUP subnetwork is one that is
+        # ready to be promoted to ACTIVE or is currently draining. This field can be
+        # updated with a patch request.
         # Corresponds to the JSON property `role`
         # @return [String]
         attr_accessor :role