google-cloud-compute-v1 2.7.1 → 2.8.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (58) hide show
  1. checksums.yaml +4 -4
  2. data/lib/google/cloud/compute/v1/accelerator_types/rest/client.rb +1 -0
  3. data/lib/google/cloud/compute/v1/addresses/rest/client.rb +1 -0
  4. data/lib/google/cloud/compute/v1/autoscalers/rest/client.rb +1 -0
  5. data/lib/google/cloud/compute/v1/backend_buckets/rest/client.rb +1 -1
  6. data/lib/google/cloud/compute/v1/backend_services/rest/client.rb +1 -0
  7. data/lib/google/cloud/compute/v1/compute_pb.rb +14 -2
  8. data/lib/google/cloud/compute/v1/disk_types/rest/client.rb +1 -0
  9. data/lib/google/cloud/compute/v1/disks/rest/client.rb +1 -0
  10. data/lib/google/cloud/compute/v1/forwarding_rules/rest/client.rb +1 -0
  11. data/lib/google/cloud/compute/v1/global_operations/rest/client.rb +1 -0
  12. data/lib/google/cloud/compute/v1/health_checks/rest/client.rb +1 -0
  13. data/lib/google/cloud/compute/v1/instance_group_managers/rest/client.rb +2 -1
  14. data/lib/google/cloud/compute/v1/instance_groups/rest/client.rb +1 -0
  15. data/lib/google/cloud/compute/v1/instance_templates/rest/client.rb +1 -0
  16. data/lib/google/cloud/compute/v1/instances/rest/client.rb +108 -3
  17. data/lib/google/cloud/compute/v1/instances/rest/service_stub.rb +61 -0
  18. data/lib/google/cloud/compute/v1/interconnect_attachments/rest/client.rb +1 -0
  19. data/lib/google/cloud/compute/v1/machine_types/rest/client.rb +1 -0
  20. data/lib/google/cloud/compute/v1/network_attachments/rest/client.rb +1 -0
  21. data/lib/google/cloud/compute/v1/network_edge_security_services/rest/client.rb +1 -0
  22. data/lib/google/cloud/compute/v1/network_endpoint_groups/rest/client.rb +1 -0
  23. data/lib/google/cloud/compute/v1/node_groups/rest/client.rb +1 -0
  24. data/lib/google/cloud/compute/v1/node_templates/rest/client.rb +1 -0
  25. data/lib/google/cloud/compute/v1/node_types/rest/client.rb +1 -0
  26. data/lib/google/cloud/compute/v1/packet_mirrorings/rest/client.rb +1 -0
  27. data/lib/google/cloud/compute/v1/public_delegated_prefixes/rest/client.rb +1 -0
  28. data/lib/google/cloud/compute/v1/region_commitments/rest/client.rb +1 -0
  29. data/lib/google/cloud/compute/v1/region_instance_group_managers/rest/client.rb +1 -1
  30. data/lib/google/cloud/compute/v1/region_zones/credentials.rb +53 -0
  31. data/lib/google/cloud/compute/v1/region_zones/rest/client.rb +404 -0
  32. data/lib/google/cloud/compute/v1/region_zones/rest/service_stub.rb +129 -0
  33. data/lib/google/cloud/compute/v1/region_zones/rest.rb +51 -0
  34. data/lib/google/cloud/compute/v1/region_zones.rb +47 -0
  35. data/lib/google/cloud/compute/v1/reservations/rest/client.rb +1 -0
  36. data/lib/google/cloud/compute/v1/resource_policies/rest/client.rb +1 -0
  37. data/lib/google/cloud/compute/v1/rest.rb +1 -0
  38. data/lib/google/cloud/compute/v1/routers/rest/client.rb +1 -0
  39. data/lib/google/cloud/compute/v1/security_policies/rest/client.rb +1 -0
  40. data/lib/google/cloud/compute/v1/service_attachments/rest/client.rb +1 -0
  41. data/lib/google/cloud/compute/v1/ssl_certificates/rest/client.rb +1 -0
  42. data/lib/google/cloud/compute/v1/ssl_policies/rest/client.rb +1 -0
  43. data/lib/google/cloud/compute/v1/subnetworks/rest/client.rb +1 -0
  44. data/lib/google/cloud/compute/v1/target_http_proxies/rest/client.rb +1 -0
  45. data/lib/google/cloud/compute/v1/target_https_proxies/rest/client.rb +1 -0
  46. data/lib/google/cloud/compute/v1/target_instances/rest/client.rb +1 -0
  47. data/lib/google/cloud/compute/v1/target_pools/rest/client.rb +1 -0
  48. data/lib/google/cloud/compute/v1/target_ssl_proxies/rest/client.rb +1 -1
  49. data/lib/google/cloud/compute/v1/target_tcp_proxies/rest/client.rb +1 -0
  50. data/lib/google/cloud/compute/v1/target_vpn_gateways/rest/client.rb +1 -0
  51. data/lib/google/cloud/compute/v1/url_maps/rest/client.rb +1 -0
  52. data/lib/google/cloud/compute/v1/version.rb +1 -1
  53. data/lib/google/cloud/compute/v1/vpn_gateways/rest/client.rb +1 -0
  54. data/lib/google/cloud/compute/v1/vpn_tunnels/rest/client.rb +1 -0
  55. data/lib/google/cloud/compute/v1.rb +1 -0
  56. data/proto_docs/google/cloud/compute/v1/compute.rb +391 -85
  57. data/proto_docs/google/protobuf/any.rb +2 -1
  58. metadata +7 -2
@@ -962,6 +962,7 @@ module Google
962
962
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
963
963
  # @!attribute [rw] service_project_number
964
964
  # @return [::Integer]
965
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
965
966
  class AggregatedListAcceleratorTypesRequest
966
967
  include ::Google::Protobuf::MessageExts
967
968
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -991,6 +992,7 @@ module Google
991
992
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
992
993
  # @!attribute [rw] service_project_number
993
994
  # @return [::Integer]
995
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
994
996
  class AggregatedListAddressesRequest
995
997
  include ::Google::Protobuf::MessageExts
996
998
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1020,6 +1022,7 @@ module Google
1020
1022
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1021
1023
  # @!attribute [rw] service_project_number
1022
1024
  # @return [::Integer]
1025
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1023
1026
  class AggregatedListAutoscalersRequest
1024
1027
  include ::Google::Protobuf::MessageExts
1025
1028
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1049,6 +1052,7 @@ module Google
1049
1052
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1050
1053
  # @!attribute [rw] service_project_number
1051
1054
  # @return [::Integer]
1055
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1052
1056
  class AggregatedListBackendServicesRequest
1053
1057
  include ::Google::Protobuf::MessageExts
1054
1058
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1078,6 +1082,7 @@ module Google
1078
1082
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1079
1083
  # @!attribute [rw] service_project_number
1080
1084
  # @return [::Integer]
1085
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1081
1086
  class AggregatedListDiskTypesRequest
1082
1087
  include ::Google::Protobuf::MessageExts
1083
1088
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1107,6 +1112,7 @@ module Google
1107
1112
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1108
1113
  # @!attribute [rw] service_project_number
1109
1114
  # @return [::Integer]
1115
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1110
1116
  class AggregatedListDisksRequest
1111
1117
  include ::Google::Protobuf::MessageExts
1112
1118
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1136,6 +1142,7 @@ module Google
1136
1142
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1137
1143
  # @!attribute [rw] service_project_number
1138
1144
  # @return [::Integer]
1145
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1139
1146
  class AggregatedListForwardingRulesRequest
1140
1147
  include ::Google::Protobuf::MessageExts
1141
1148
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1165,6 +1172,7 @@ module Google
1165
1172
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1166
1173
  # @!attribute [rw] service_project_number
1167
1174
  # @return [::Integer]
1175
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1168
1176
  class AggregatedListGlobalOperationsRequest
1169
1177
  include ::Google::Protobuf::MessageExts
1170
1178
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1194,6 +1202,7 @@ module Google
1194
1202
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1195
1203
  # @!attribute [rw] service_project_number
1196
1204
  # @return [::Integer]
1205
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1197
1206
  class AggregatedListHealthChecksRequest
1198
1207
  include ::Google::Protobuf::MessageExts
1199
1208
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1223,6 +1232,7 @@ module Google
1223
1232
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1224
1233
  # @!attribute [rw] service_project_number
1225
1234
  # @return [::Integer]
1235
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1226
1236
  class AggregatedListInstanceGroupManagersRequest
1227
1237
  include ::Google::Protobuf::MessageExts
1228
1238
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1252,6 +1262,7 @@ module Google
1252
1262
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1253
1263
  # @!attribute [rw] service_project_number
1254
1264
  # @return [::Integer]
1265
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1255
1266
  class AggregatedListInstanceGroupsRequest
1256
1267
  include ::Google::Protobuf::MessageExts
1257
1268
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1281,6 +1292,7 @@ module Google
1281
1292
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1282
1293
  # @!attribute [rw] service_project_number
1283
1294
  # @return [::Integer]
1295
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1284
1296
  class AggregatedListInstanceTemplatesRequest
1285
1297
  include ::Google::Protobuf::MessageExts
1286
1298
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1310,6 +1322,7 @@ module Google
1310
1322
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1311
1323
  # @!attribute [rw] service_project_number
1312
1324
  # @return [::Integer]
1325
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1313
1326
  class AggregatedListInstancesRequest
1314
1327
  include ::Google::Protobuf::MessageExts
1315
1328
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1339,6 +1352,7 @@ module Google
1339
1352
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1340
1353
  # @!attribute [rw] service_project_number
1341
1354
  # @return [::Integer]
1355
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1342
1356
  class AggregatedListInterconnectAttachmentsRequest
1343
1357
  include ::Google::Protobuf::MessageExts
1344
1358
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1368,6 +1382,7 @@ module Google
1368
1382
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1369
1383
  # @!attribute [rw] service_project_number
1370
1384
  # @return [::Integer]
1385
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1371
1386
  class AggregatedListMachineTypesRequest
1372
1387
  include ::Google::Protobuf::MessageExts
1373
1388
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1397,6 +1412,7 @@ module Google
1397
1412
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1398
1413
  # @!attribute [rw] service_project_number
1399
1414
  # @return [::Integer]
1415
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1400
1416
  class AggregatedListNetworkAttachmentsRequest
1401
1417
  include ::Google::Protobuf::MessageExts
1402
1418
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1426,6 +1442,7 @@ module Google
1426
1442
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1427
1443
  # @!attribute [rw] service_project_number
1428
1444
  # @return [::Integer]
1445
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1429
1446
  class AggregatedListNetworkEdgeSecurityServicesRequest
1430
1447
  include ::Google::Protobuf::MessageExts
1431
1448
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1455,6 +1472,7 @@ module Google
1455
1472
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1456
1473
  # @!attribute [rw] service_project_number
1457
1474
  # @return [::Integer]
1475
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1458
1476
  class AggregatedListNetworkEndpointGroupsRequest
1459
1477
  include ::Google::Protobuf::MessageExts
1460
1478
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1484,6 +1502,7 @@ module Google
1484
1502
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1485
1503
  # @!attribute [rw] service_project_number
1486
1504
  # @return [::Integer]
1505
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1487
1506
  class AggregatedListNodeGroupsRequest
1488
1507
  include ::Google::Protobuf::MessageExts
1489
1508
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1513,6 +1532,7 @@ module Google
1513
1532
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1514
1533
  # @!attribute [rw] service_project_number
1515
1534
  # @return [::Integer]
1535
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1516
1536
  class AggregatedListNodeTemplatesRequest
1517
1537
  include ::Google::Protobuf::MessageExts
1518
1538
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1542,6 +1562,7 @@ module Google
1542
1562
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1543
1563
  # @!attribute [rw] service_project_number
1544
1564
  # @return [::Integer]
1565
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1545
1566
  class AggregatedListNodeTypesRequest
1546
1567
  include ::Google::Protobuf::MessageExts
1547
1568
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1571,6 +1592,7 @@ module Google
1571
1592
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1572
1593
  # @!attribute [rw] service_project_number
1573
1594
  # @return [::Integer]
1595
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1574
1596
  class AggregatedListPacketMirroringsRequest
1575
1597
  include ::Google::Protobuf::MessageExts
1576
1598
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1600,6 +1622,7 @@ module Google
1600
1622
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1601
1623
  # @!attribute [rw] service_project_number
1602
1624
  # @return [::Integer]
1625
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1603
1626
  class AggregatedListPublicDelegatedPrefixesRequest
1604
1627
  include ::Google::Protobuf::MessageExts
1605
1628
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1629,6 +1652,7 @@ module Google
1629
1652
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1630
1653
  # @!attribute [rw] service_project_number
1631
1654
  # @return [::Integer]
1655
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1632
1656
  class AggregatedListRegionCommitmentsRequest
1633
1657
  include ::Google::Protobuf::MessageExts
1634
1658
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1658,6 +1682,7 @@ module Google
1658
1682
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1659
1683
  # @!attribute [rw] service_project_number
1660
1684
  # @return [::Integer]
1685
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1661
1686
  class AggregatedListReservationsRequest
1662
1687
  include ::Google::Protobuf::MessageExts
1663
1688
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1687,6 +1712,7 @@ module Google
1687
1712
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1688
1713
  # @!attribute [rw] service_project_number
1689
1714
  # @return [::Integer]
1715
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1690
1716
  class AggregatedListResourcePoliciesRequest
1691
1717
  include ::Google::Protobuf::MessageExts
1692
1718
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1716,6 +1742,7 @@ module Google
1716
1742
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1717
1743
  # @!attribute [rw] service_project_number
1718
1744
  # @return [::Integer]
1745
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1719
1746
  class AggregatedListRoutersRequest
1720
1747
  include ::Google::Protobuf::MessageExts
1721
1748
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1745,6 +1772,7 @@ module Google
1745
1772
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1746
1773
  # @!attribute [rw] service_project_number
1747
1774
  # @return [::Integer]
1775
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1748
1776
  class AggregatedListSecurityPoliciesRequest
1749
1777
  include ::Google::Protobuf::MessageExts
1750
1778
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1774,6 +1802,7 @@ module Google
1774
1802
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1775
1803
  # @!attribute [rw] service_project_number
1776
1804
  # @return [::Integer]
1805
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1777
1806
  class AggregatedListServiceAttachmentsRequest
1778
1807
  include ::Google::Protobuf::MessageExts
1779
1808
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1803,6 +1832,7 @@ module Google
1803
1832
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1804
1833
  # @!attribute [rw] service_project_number
1805
1834
  # @return [::Integer]
1835
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1806
1836
  class AggregatedListSslCertificatesRequest
1807
1837
  include ::Google::Protobuf::MessageExts
1808
1838
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1832,6 +1862,7 @@ module Google
1832
1862
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1833
1863
  # @!attribute [rw] service_project_number
1834
1864
  # @return [::Integer]
1865
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1835
1866
  class AggregatedListSslPoliciesRequest
1836
1867
  include ::Google::Protobuf::MessageExts
1837
1868
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1861,6 +1892,7 @@ module Google
1861
1892
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1862
1893
  # @!attribute [rw] service_project_number
1863
1894
  # @return [::Integer]
1895
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1864
1896
  class AggregatedListSubnetworksRequest
1865
1897
  include ::Google::Protobuf::MessageExts
1866
1898
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1890,6 +1922,7 @@ module Google
1890
1922
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1891
1923
  # @!attribute [rw] service_project_number
1892
1924
  # @return [::Integer]
1925
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1893
1926
  class AggregatedListTargetHttpProxiesRequest
1894
1927
  include ::Google::Protobuf::MessageExts
1895
1928
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1919,6 +1952,7 @@ module Google
1919
1952
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1920
1953
  # @!attribute [rw] service_project_number
1921
1954
  # @return [::Integer]
1955
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1922
1956
  class AggregatedListTargetHttpsProxiesRequest
1923
1957
  include ::Google::Protobuf::MessageExts
1924
1958
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1948,6 +1982,7 @@ module Google
1948
1982
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1949
1983
  # @!attribute [rw] service_project_number
1950
1984
  # @return [::Integer]
1985
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1951
1986
  class AggregatedListTargetInstancesRequest
1952
1987
  include ::Google::Protobuf::MessageExts
1953
1988
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1977,6 +2012,7 @@ module Google
1977
2012
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
1978
2013
  # @!attribute [rw] service_project_number
1979
2014
  # @return [::Integer]
2015
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
1980
2016
  class AggregatedListTargetPoolsRequest
1981
2017
  include ::Google::Protobuf::MessageExts
1982
2018
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -2006,6 +2042,7 @@ module Google
2006
2042
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
2007
2043
  # @!attribute [rw] service_project_number
2008
2044
  # @return [::Integer]
2045
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
2009
2046
  class AggregatedListTargetTcpProxiesRequest
2010
2047
  include ::Google::Protobuf::MessageExts
2011
2048
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -2035,6 +2072,7 @@ module Google
2035
2072
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
2036
2073
  # @!attribute [rw] service_project_number
2037
2074
  # @return [::Integer]
2075
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
2038
2076
  class AggregatedListTargetVpnGatewaysRequest
2039
2077
  include ::Google::Protobuf::MessageExts
2040
2078
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -2064,6 +2102,7 @@ module Google
2064
2102
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
2065
2103
  # @!attribute [rw] service_project_number
2066
2104
  # @return [::Integer]
2105
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
2067
2106
  class AggregatedListUrlMapsRequest
2068
2107
  include ::Google::Protobuf::MessageExts
2069
2108
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -2093,6 +2132,7 @@ module Google
2093
2132
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
2094
2133
  # @!attribute [rw] service_project_number
2095
2134
  # @return [::Integer]
2135
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
2096
2136
  class AggregatedListVpnGatewaysRequest
2097
2137
  include ::Google::Protobuf::MessageExts
2098
2138
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -2122,6 +2162,7 @@ module Google
2122
2162
  # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
2123
2163
  # @!attribute [rw] service_project_number
2124
2164
  # @return [::Integer]
2165
+ # The Shared VPC service project id or service project number for which aggregated list request is invoked for subnetworks list-usable api.
2125
2166
  class AggregatedListVpnTunnelsRequest
2126
2167
  include ::Google::Protobuf::MessageExts
2127
2168
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -2139,6 +2180,71 @@ module Google
2139
2180
  extend ::Google::Protobuf::MessageExts::ClassMethods
2140
2181
  end
2141
2182
 
2183
+ # This reservation type is specified by total resource amounts (e.g. total count of CPUs) and can account for multiple instance SKUs. In other words, one can create instances of varying shapes against this reservation.
2184
+ # @!attribute [rw] in_use_resources
2185
+ # @return [::Array<::Google::Cloud::Compute::V1::AllocationAggregateReservationReservedResourceInfo>]
2186
+ # [Output only] List of resources currently in use.
2187
+ # @!attribute [rw] reserved_resources
2188
+ # @return [::Array<::Google::Cloud::Compute::V1::AllocationAggregateReservationReservedResourceInfo>]
2189
+ # List of reserved resources (CPUs, memory, accelerators).
2190
+ # @!attribute [rw] vm_family
2191
+ # @return [::String]
2192
+ # The VM family that all instances scheduled against this reservation must belong to.
2193
+ # Check the VmFamily enum for the list of possible values.
2194
+ # @!attribute [rw] workload_type
2195
+ # @return [::String]
2196
+ # The workload type of the instances that will target this reservation.
2197
+ # Check the WorkloadType enum for the list of possible values.
2198
+ class AllocationAggregateReservation
2199
+ include ::Google::Protobuf::MessageExts
2200
+ extend ::Google::Protobuf::MessageExts::ClassMethods
2201
+
2202
+ # The VM family that all instances scheduled against this reservation must belong to.
2203
+ module VmFamily
2204
+ # A value indicating that the enum field is not set.
2205
+ UNDEFINED_VM_FAMILY = 0
2206
+
2207
+ VM_FAMILY_CLOUD_TPU_LITE_DEVICE_CT5L = 108_020_067
2208
+
2209
+ VM_FAMILY_CLOUD_TPU_LITE_POD_SLICE_CT5LP = 18_705_267
2210
+
2211
+ VM_FAMILY_CLOUD_TPU_POD_SLICE_CT4P = 517_384_407
2212
+ end
2213
+
2214
+ # The workload type of the instances that will target this reservation.
2215
+ module WorkloadType
2216
+ # A value indicating that the enum field is not set.
2217
+ UNDEFINED_WORKLOAD_TYPE = 0
2218
+
2219
+ # Reserved resources will be optimized for BATCH workloads, such as ML training.
2220
+ BATCH = 62_971_674
2221
+
2222
+ # Reserved resources will be optimized for SERVING workloads, such as ML inference.
2223
+ SERVING = 17_781_740
2224
+
2225
+ UNSPECIFIED = 526_786_327
2226
+ end
2227
+ end
2228
+
2229
+ # @!attribute [rw] accelerator
2230
+ # @return [::Google::Cloud::Compute::V1::AllocationAggregateReservationReservedResourceInfoAccelerator]
2231
+ # Properties of accelerator resources in this reservation.
2232
+ class AllocationAggregateReservationReservedResourceInfo
2233
+ include ::Google::Protobuf::MessageExts
2234
+ extend ::Google::Protobuf::MessageExts::ClassMethods
2235
+ end
2236
+
2237
+ # @!attribute [rw] accelerator_count
2238
+ # @return [::Integer]
2239
+ # Number of accelerators of specified type.
2240
+ # @!attribute [rw] accelerator_type
2241
+ # @return [::String]
2242
+ # Full or partial URL to accelerator type. e.g. "projects/\\{PROJECT}/zones/\\{ZONE}/acceleratorTypes/ct4l"
2243
+ class AllocationAggregateReservationReservedResourceInfoAccelerator
2244
+ include ::Google::Protobuf::MessageExts
2245
+ extend ::Google::Protobuf::MessageExts::ClassMethods
2246
+ end
2247
+
2142
2248
  # [Output Only] Contains output only fields.
2143
2249
  # @!attribute [rw] specific_sku_allocation
2144
2250
  # @return [::Google::Cloud::Compute::V1::AllocationResourceStatusSpecificSKUAllocation]
@@ -2526,6 +2632,9 @@ module Google
2526
2632
  # @!attribute [rw] disk_type
2527
2633
  # @return [::String]
2528
2634
  # Specifies the disk type to use to create the instance. If not specified, the default is pd-standard, specified using the full URL. For example: https://www.googleapis.com/compute/v1/projects/project/zones/zone /diskTypes/pd-standard For a full list of acceptable values, see Persistent disk types. If you specify this field when creating a VM, you can provide either the full or partial URL. For example, the following values are valid: - https://www.googleapis.com/compute/v1/projects/project/zones/zone /diskTypes/diskType - projects/project/zones/zone/diskTypes/diskType - zones/zone/diskTypes/diskType If you specify this field when creating or updating an instance template or all-instances configuration, specify the type of the disk, not the URL. For example: pd-standard.
2635
+ # @!attribute [rw] enable_confidential_compute
2636
+ # @return [::Boolean]
2637
+ # Whether this disk is using confidential compute mode.
2529
2638
  # @!attribute [rw] labels
2530
2639
  # @return [::Google::Protobuf::Map{::String => ::String}]
2531
2640
  # Labels to apply to this disk. These can be later modified by the disks.setLabels method. This field is only applicable for persistent disks.
@@ -3319,7 +3428,7 @@ module Google
3319
3428
  # Represents a Backend Service resource. A backend service defines how Google Cloud load balancers distribute traffic. The backend service configuration contains a set of values, such as the protocol used to connect to backends, various distribution and session settings, health checks, and timeouts. These settings provide fine-grained control over how your load balancer behaves. Most of the settings have default values that allow for easy configuration if you need to get started quickly. Backend services in Google Compute Engine can be either regionally or globally scoped. * [Global](https://cloud.google.com/compute/docs/reference/rest/v1/backendServices) * [Regional](https://cloud.google.com/compute/docs/reference/rest/v1/regionBackendServices) For more information, see Backend Services.
3320
3429
  # @!attribute [rw] affinity_cookie_ttl_sec
3321
3430
  # @return [::Integer]
3322
- # Lifetime of cookies in seconds. This setting is applicable to external and internal HTTP(S) load balancers and Traffic Director and requires GENERATED_COOKIE or HTTP_COOKIE session affinity. If set to 0, the cookie is non-persistent and lasts only until the end of the browser session (or equivalent). The maximum allowed value is two weeks (1,209,600). Not supported when the backend service is referenced by a URL map that is bound to target gRPC proxy that has validateForProxyless field set to true.
3431
+ # Lifetime of cookies in seconds. This setting is applicable to Application Load Balancers and Traffic Director and requires GENERATED_COOKIE or HTTP_COOKIE session affinity. If set to 0, the cookie is non-persistent and lasts only until the end of the browser session (or equivalent). The maximum allowed value is two weeks (1,209,600). Not supported when the backend service is referenced by a URL map that is bound to target gRPC proxy that has validateForProxyless field set to true.
3323
3432
  # @!attribute [rw] backends
3324
3433
  # @return [::Array<::Google::Cloud::Compute::V1::Backend>]
3325
3434
  # The list of backends that serve this BackendService.
@@ -3336,7 +3445,7 @@ module Google
3336
3445
  # @return [::Google::Cloud::Compute::V1::ConnectionDraining]
3337
3446
  # @!attribute [rw] connection_tracking_policy
3338
3447
  # @return [::Google::Cloud::Compute::V1::BackendServiceConnectionTrackingPolicy]
3339
- # Connection Tracking configuration for this BackendService. Connection tracking policy settings are only available for Network Load Balancing and Internal TCP/UDP Load Balancing.
3448
+ # Connection Tracking configuration for this BackendService. Connection tracking policy settings are only available for external passthrough Network Load Balancers and internal passthrough Network Load Balancers.
3340
3449
  # @!attribute [rw] consistent_hash
3341
3450
  # @return [::Google::Cloud::Compute::V1::ConsistentHashLoadBalancerSettings]
3342
3451
  # Consistent Hash-based load balancing can be used to provide soft session affinity based on HTTP headers, cookies or other properties. This load balancing policy is applicable only for HTTP connections. The affinity to a particular destination host will be lost when one or more hosts are added/removed from the destination service. This field specifies parameters that control consistent hashing. This field is only applicable when localityLbPolicy is set to MAGLEV or RING_HASH. This field is applicable to either: - A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2, and load_balancing_scheme set to INTERNAL_MANAGED. - A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
@@ -3357,10 +3466,10 @@ module Google
3357
3466
  # [Output Only] The resource URL for the edge security policy associated with this backend service.
3358
3467
  # @!attribute [rw] enable_c_d_n
3359
3468
  # @return [::Boolean]
3360
- # If true, enables Cloud CDN for the backend service of an external HTTP(S) load balancer.
3469
+ # If true, enables Cloud CDN for the backend service of a global external Application Load Balancer.
3361
3470
  # @!attribute [rw] failover_policy
3362
3471
  # @return [::Google::Cloud::Compute::V1::BackendServiceFailoverPolicy]
3363
- # Requires at least one backend instance group to be defined as a backup (failover) backend. For load balancers that have configurable failover: [Internal TCP/UDP Load Balancing](https://cloud.google.com/load-balancing/docs/internal/failover-overview) and [external TCP/UDP Load Balancing](https://cloud.google.com/load-balancing/docs/network/networklb-failover-overview).
3472
+ # Requires at least one backend instance group to be defined as a backup (failover) backend. For load balancers that have configurable failover: [Internal passthrough Network Load Balancers](https://cloud.google.com/load-balancing/docs/internal/failover-overview) and [external passthrough Network Load Balancers](https://cloud.google.com/load-balancing/docs/network/networklb-failover-overview).
3364
3473
  # @!attribute [rw] fingerprint
3365
3474
  # @return [::String]
3366
3475
  # Fingerprint of this resource. A hash of the contents stored in this object. This field is used in optimistic locking. This field will be ignored when inserting a BackendService. An up-to-date fingerprint must be provided in order to update the BackendService, otherwise the request will fail with error 412 conditionNotMet. To see the latest fingerprint, make a get() request to retrieve a BackendService.
@@ -3369,7 +3478,7 @@ module Google
3369
3478
  # The list of URLs to the healthChecks, httpHealthChecks (legacy), or httpsHealthChecks (legacy) resource for health checking this backend service. Not all backend services support legacy health checks. See Load balancer guide. Currently, at most one health check can be specified for each backend service. Backend services with instance group or zonal NEG backends must have a health check. Backend services with internet or serverless NEG backends must not have a health check.
3370
3479
  # @!attribute [rw] iap
3371
3480
  # @return [::Google::Cloud::Compute::V1::BackendServiceIAP]
3372
- # The configurations for Identity-Aware Proxy on this resource. Not available for Internal TCP/UDP Load Balancing and Network Load Balancing.
3481
+ # The configurations for Identity-Aware Proxy on this resource. Not available for internal passthrough Network Load Balancers and external passthrough Network Load Balancers.
3373
3482
  # @!attribute [rw] id
3374
3483
  # @return [::Integer]
3375
3484
  # [Output Only] The unique identifier for the resource. This identifier is defined by the server.
@@ -3407,10 +3516,10 @@ module Google
3407
3516
  # Settings controlling the ejection of unhealthy backend endpoints from the load balancing pool of each individual proxy instance that processes the traffic for the given backend service. If not set, this feature is considered disabled. Results of the outlier detection algorithm (ejection of endpoints from the load balancing pool and returning them back to the pool) are executed independently by each proxy instance of the load balancer. In most cases, more than one proxy instance handles the traffic received by a backend service. Thus, it is possible that an unhealthy endpoint is detected and ejected by only some of the proxies, and while this happens, other proxies may continue to send requests to the same unhealthy endpoint until they detect and eject the unhealthy endpoint. Applicable backend endpoints can be: - VM instances in an Instance Group - Endpoints in a Zonal NEG (GCE_VM_IP, GCE_VM_IP_PORT) - Endpoints in a Hybrid Connectivity NEG (NON_GCP_PRIVATE_IP_PORT) - Serverless NEGs, that resolve to Cloud Run, App Engine, or Cloud Functions Services - Private Service Connect NEGs, that resolve to Google-managed regional API endpoints or managed services published using Private Service Connect Applicable backend service types can be: - A global backend service with the loadBalancingScheme set to INTERNAL_SELF_MANAGED or EXTERNAL_MANAGED. - A regional backend service with the serviceProtocol set to HTTP, HTTPS, or HTTP2, and loadBalancingScheme set to INTERNAL_MANAGED or EXTERNAL_MANAGED. Not supported for Serverless NEGs. Not supported when the backend service is referenced by a URL map that is bound to target gRPC proxy that has validateForProxyless field set to true.
3408
3517
  # @!attribute [rw] port
3409
3518
  # @return [::Integer]
3410
- # Deprecated in favor of portName. The TCP port to connect on the backend. The default value is 80. For Internal TCP/UDP Load Balancing and Network Load Balancing, omit port.
3519
+ # Deprecated in favor of portName. The TCP port to connect on the backend. The default value is 80. For internal passthrough Network Load Balancers and external passthrough Network Load Balancers, omit port.
3411
3520
  # @!attribute [rw] port_name
3412
3521
  # @return [::String]
3413
- # A named port on a backend instance group representing the port for communication to the backend VMs in that group. The named port must be [defined on each backend instance group](https://cloud.google.com/load-balancing/docs/backend-service#named_ports). This parameter has no meaning if the backends are NEGs. For Internal TCP/UDP Load Balancing and Network Load Balancing, omit port_name.
3522
+ # A named port on a backend instance group representing the port for communication to the backend VMs in that group. The named port must be [defined on each backend instance group](https://cloud.google.com/load-balancing/docs/backend-service#named_ports). This parameter has no meaning if the backends are NEGs. For internal passthrough Network Load Balancers and external passthrough Network Load Balancers, omit port_name.
3414
3523
  # @!attribute [rw] protocol
3415
3524
  # @return [::String]
3416
3525
  # The protocol this BackendService uses to communicate with backends. Possible values are HTTP, HTTPS, HTTP2, TCP, SSL, UDP or GRPC. depending on the chosen load balancer or Traffic Director configuration. Refer to the documentation for the load balancers or for Traffic Director for more information. Must be set to GRPC when the backend service is referenced by a URL map that is bound to target gRPC proxy.
@@ -3471,16 +3580,16 @@ module Google
3471
3580
  # A value indicating that the enum field is not set.
3472
3581
  UNDEFINED_LOAD_BALANCING_SCHEME = 0
3473
3582
 
3474
- # Signifies that this will be used for external HTTP(S), SSL Proxy, TCP Proxy, or Network Load Balancing
3583
+ # Signifies that this will be used for classic Application Load Balancers, global external proxy Network Load Balancers, or external passthrough Network Load Balancers.
3475
3584
  EXTERNAL = 35_607_499
3476
3585
 
3477
- # Signifies that this will be used for External Managed HTTP(S) Load Balancing.
3586
+ # Signifies that this will be used for global external Application Load Balancers, regional external Application Load Balancers, or regional external proxy Network Load Balancers.
3478
3587
  EXTERNAL_MANAGED = 512_006_923
3479
3588
 
3480
- # Signifies that this will be used for Internal TCP/UDP Load Balancing.
3589
+ # Signifies that this will be used for internal passthrough Network Load Balancers.
3481
3590
  INTERNAL = 279_295_677
3482
3591
 
3483
- # Signifies that this will be used for Internal HTTP(S) Load Balancing.
3592
+ # Signifies that this will be used for internal Application Load Balancers.
3484
3593
  INTERNAL_MANAGED = 37_350_397
3485
3594
 
3486
3595
  # Signifies that this will be used by Traffic Director.
@@ -3701,10 +3810,10 @@ module Google
3701
3810
  # Check the ConnectionPersistenceOnUnhealthyBackends enum for the list of possible values.
3702
3811
  # @!attribute [rw] enable_strong_affinity
3703
3812
  # @return [::Boolean]
3704
- # Enable Strong Session Affinity for Network Load Balancing. This option is not available publicly.
3813
+ # Enable Strong Session Affinity for external passthrough Network Load Balancers. This option is not available publicly.
3705
3814
  # @!attribute [rw] idle_timeout_sec
3706
3815
  # @return [::Integer]
3707
- # Specifies how long to keep a Connection Tracking entry while there is no matching traffic (in seconds). For Internal TCP/UDP Load Balancing: - The minimum (default) is 10 minutes and the maximum is 16 hours. - It can be set only if Connection Tracking is less than 5-tuple (i.e. Session Affinity is CLIENT_IP_NO_DESTINATION, CLIENT_IP or CLIENT_IP_PROTO, and Tracking Mode is PER_SESSION). For Network Load Balancer the default is 60 seconds. This option is not available publicly.
3816
+ # Specifies how long to keep a Connection Tracking entry while there is no matching traffic (in seconds). For internal passthrough Network Load Balancers: - The minimum (default) is 10 minutes and the maximum is 16 hours. - It can be set only if Connection Tracking is less than 5-tuple (i.e. Session Affinity is CLIENT_IP_NO_DESTINATION, CLIENT_IP or CLIENT_IP_PROTO, and Tracking Mode is PER_SESSION). For external passthrough Network Load Balancers the default is 60 seconds. This option is not available publicly.
3708
3817
  # @!attribute [rw] tracking_mode
3709
3818
  # @return [::String]
3710
3819
  # Specifies the key used for connection tracking. There are two options: - PER_CONNECTION: This is the default mode. The Connection Tracking is performed as per the Connection Key (default Hash Method) for the specific protocol. - PER_SESSION: The Connection Tracking is performed as per the configured Session Affinity. It matches the configured Session Affinity. For more details, see [Tracking Mode for Network Load Balancing](https://cloud.google.com/load-balancing/docs/network/networklb-backend-service#tracking-mode) and [Tracking Mode for Internal TCP/UDP Load Balancing](https://cloud.google.com/load-balancing/docs/internal#tracking-mode).
@@ -3738,13 +3847,13 @@ module Google
3738
3847
  end
3739
3848
  end
3740
3849
 
3741
- # For load balancers that have configurable failover: [Internal TCP/UDP Load Balancing](https://cloud.google.com/load-balancing/docs/internal/failover-overview) and [external TCP/UDP Load Balancing](https://cloud.google.com/load-balancing/docs/network/networklb-failover-overview). On failover or failback, this field indicates whether connection draining will be honored. Google Cloud has a fixed connection draining timeout of 10 minutes. A setting of true terminates existing TCP connections to the active pool during failover and failback, immediately draining traffic. A setting of false allows existing TCP connections to persist, even on VMs no longer in the active pool, for up to the duration of the connection draining timeout (10 minutes).
3850
+ # For load balancers that have configurable failover: [Internal passthrough Network Load Balancers](https://cloud.google.com/load-balancing/docs/internal/failover-overview) and [external passthrough Network Load Balancers](https://cloud.google.com/load-balancing/docs/network/networklb-failover-overview). On failover or failback, this field indicates whether connection draining will be honored. Google Cloud has a fixed connection draining timeout of 10 minutes. A setting of true terminates existing TCP connections to the active pool during failover and failback, immediately draining traffic. A setting of false allows existing TCP connections to persist, even on VMs no longer in the active pool, for up to the duration of the connection draining timeout (10 minutes).
3742
3851
  # @!attribute [rw] disable_connection_drain_on_failover
3743
3852
  # @return [::Boolean]
3744
3853
  # This can be set to true only if the protocol is TCP. The default is false.
3745
3854
  # @!attribute [rw] drop_traffic_if_unhealthy
3746
3855
  # @return [::Boolean]
3747
- # If set to true, connections to the load balancer are dropped when all primary and all backup backend VMs are unhealthy.If set to false, connections are distributed among all primary VMs when all primary and all backup backend VMs are unhealthy. For load balancers that have configurable failover: [Internal TCP/UDP Load Balancing](https://cloud.google.com/load-balancing/docs/internal/failover-overview) and [external TCP/UDP Load Balancing](https://cloud.google.com/load-balancing/docs/network/networklb-failover-overview). The default is false.
3856
+ # If set to true, connections to the load balancer are dropped when all primary and all backup backend VMs are unhealthy.If set to false, connections are distributed among all primary VMs when all primary and all backup backend VMs are unhealthy. For load balancers that have configurable failover: [Internal passthrough Network Load Balancers](https://cloud.google.com/load-balancing/docs/internal/failover-overview) and [external passthrough Network Load Balancers](https://cloud.google.com/load-balancing/docs/network/networklb-failover-overview). The default is false.
3748
3857
  # @!attribute [rw] failover_ratio
3749
3858
  # @return [::Float]
3750
3859
  # The value of the field must be in the range [0, 1]. If the value is 0, the load balancer performs a failover when the number of healthy primary VMs equals zero. For all other values, the load balancer performs a failover when the total number of healthy primary VMs is less than this ratio. For load balancers that have configurable failover: [Internal TCP/UDP Load Balancing](https://cloud.google.com/load-balancing/docs/internal/failover-overview) and [external TCP/UDP Load Balancing](https://cloud.google.com/load-balancing/docs/network/networklb-failover-overview).
@@ -4178,10 +4287,10 @@ module Google
4178
4287
  # The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
4179
4288
  # @!attribute [rw] members
4180
4289
  # @return [::Array<::String>]
4181
- # Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
4290
+ # Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workforce identity pool. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/group/{group_id}`: All workforce identities in a group. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All workforce identities with a specific attribute value. * `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/*`: All identities in a workforce identity pool. * `principal://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value}`: A single identity in a workload identity pool. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/group/{group_id}`: A workload identity pool group. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: All identities in a workload identity pool with a certain attribute. * `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/*`: All identities in a workload identity pool. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding. * `deleted:principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: Deleted single identity in a workforce identity pool. For example, `deleted:principal://iam.googleapis.com/locations/global/workforcePools/my-pool-id/subject/my-subject-attribute-value`.
4182
4291
  # @!attribute [rw] role
4183
4292
  # @return [::String]
4184
- # Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
4293
+ # Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. For an overview of the IAM roles and permissions, see the [IAM documentation](https://cloud.google.com/iam/docs/roles-overview). For a list of the available pre-defined roles, see [here](https://cloud.google.com/iam/docs/understanding-roles).
4185
4294
  class Binding
4186
4295
  include ::Google::Protobuf::MessageExts
4187
4296
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -4483,6 +4592,9 @@ module Google
4483
4592
  # @!attribute [rw] end_timestamp
4484
4593
  # @return [::String]
4485
4594
  # [Output Only] Commitment end time in RFC3339 text format.
4595
+ # @!attribute [rw] existing_reservations
4596
+ # @return [::Array<::String>]
4597
+ # Specifies the already existing reservations to attach to the Commitment. This field is optional, and it can be a full or partial URL. For example, the following are valid URLs to an reservation: - https://www.googleapis.com/compute/v1/projects/project/zones/zone /reservations/reservation - projects/project/zones/zone/reservations/reservation
4486
4598
  # @!attribute [rw] id
4487
4599
  # @return [::Integer]
4488
4600
  # [Output Only] The unique identifier for the resource. This identifier is defined by the server.
@@ -4507,7 +4619,7 @@ module Google
4507
4619
  # [Output Only] URL of the region where this commitment may be used.
4508
4620
  # @!attribute [rw] reservations
4509
4621
  # @return [::Array<::Google::Cloud::Compute::V1::Reservation>]
4510
- # List of create-on-create reseravtions for this commitment.
4622
+ # List of create-on-create reservations for this commitment.
4511
4623
  # @!attribute [rw] resources
4512
4624
  # @return [::Array<::Google::Cloud::Compute::V1::ResourceCommitment>]
4513
4625
  # A list of commitment amounts for particular resources. Note that VCPU and MEMORY resource commitments must occur together.
@@ -4611,6 +4723,8 @@ module Google
4611
4723
 
4612
4724
  MEMORY_OPTIMIZED_M3 = 276_301_372
4613
4725
 
4726
+ STORAGE_OPTIMIZED_Z3 = 316_796_085
4727
+
4614
4728
  TYPE_UNSPECIFIED = 437_714_322
4615
4729
  end
4616
4730
  end
@@ -6607,6 +6721,9 @@ module Google
6607
6721
  # @!attribute [rw] disk_encryption_key
6608
6722
  # @return [::Google::Cloud::Compute::V1::CustomerEncryptionKey]
6609
6723
  # Encrypts the disk using a customer-supplied encryption key or a customer-managed encryption key. Encryption keys do not protect access to metadata of the disk. After you encrypt a disk with a customer-supplied key, you must provide the same key if you use the disk later. For example, to create a disk snapshot, to create a disk image, to create a machine image, or to attach the disk to a virtual machine. After you encrypt a disk with a customer-managed key, the diskEncryptionKey.kmsKeyName is set to a key *version* name once the disk is created. The disk is encrypted with this version of the key. In the response, diskEncryptionKey.kmsKeyName appears in the following format: "diskEncryptionKey.kmsKeyName": "projects/kms_project_id/locations/region/keyRings/ key_region/cryptoKeys/key /cryptoKeysVersions/version If you do not provide an encryption key when creating the disk, then the disk is encrypted using an automatically generated key and you don't need to provide a key to use the disk later.
6724
+ # @!attribute [rw] enable_confidential_compute
6725
+ # @return [::Boolean]
6726
+ # Whether this disk is using confidential compute mode.
6610
6727
  # @!attribute [rw] guest_os_features
6611
6728
  # @return [::Array<::Google::Cloud::Compute::V1::GuestOsFeature>]
6612
6729
  # A list of features to enable on the guest operating system. Applicable only for bootable images. Read Enabling guest operating system features to see a list of available options.
@@ -6667,6 +6784,9 @@ module Google
6667
6784
  # @!attribute [rw] resource_status
6668
6785
  # @return [::Google::Cloud::Compute::V1::DiskResourceStatus]
6669
6786
  # [Output Only] Status information for the disk resource.
6787
+ # @!attribute [rw] satisfies_pzi
6788
+ # @return [::Boolean]
6789
+ # Output only. Reserved for future use.
6670
6790
  # @!attribute [rw] satisfies_pzs
6671
6791
  # @return [::Boolean]
6672
6792
  # [Output Only] Reserved for future use.
@@ -7777,6 +7897,9 @@ module Google
7777
7897
  # @!attribute [rw] rule_tuple_count
7778
7898
  # @return [::Integer]
7779
7899
  # [Output Only] Calculation of the complexity of a single firewall policy rule.
7900
+ # @!attribute [rw] security_profile_group
7901
+ # @return [::String]
7902
+ # A fully-qualified URL of a SecurityProfile resource instance. Example: https://networksecurity.googleapis.com/v1/projects/\\{project}/locations/\\{location}/securityProfileGroups/my-security-profile-group Must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
7780
7903
  # @!attribute [rw] target_resources
7781
7904
  # @return [::Array<::String>]
7782
7905
  # A list of network resource URLs to which this rule applies. This field allows you to control which network's VMs get this rule. If this field is left blank, all VMs within the organization will receive the rule.
@@ -7786,6 +7909,9 @@ module Google
7786
7909
  # @!attribute [rw] target_service_accounts
7787
7910
  # @return [::Array<::String>]
7788
7911
  # A list of service accounts indicating the sets of instances that are applied with this rule.
7912
+ # @!attribute [rw] tls_inspect
7913
+ # @return [::Boolean]
7914
+ # Boolean flag indicating if the traffic should be TLS decrypted. Can be set only if action = 'apply_security_profile_group' and cannot be set for other actions.
7789
7915
  class FirewallPolicyRule
7790
7916
  include ::Google::Protobuf::MessageExts
7791
7917
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -7891,7 +8017,7 @@ module Google
7891
8017
  extend ::Google::Protobuf::MessageExts::ClassMethods
7892
8018
  end
7893
8019
 
7894
- # Represents a Forwarding Rule resource. Forwarding rule resources in Google Cloud can be either regional or global in scope: * [Global](https://cloud.google.com/compute/docs/reference/rest/v1/globalForwardingRules) * [Regional](https://cloud.google.com/compute/docs/reference/rest/v1/forwardingRules) A forwarding rule and its corresponding IP address represent the frontend configuration of a Google Cloud Platform load balancer. Forwarding rules can also reference target instances and Cloud VPN Classic gateways (targetVpnGateway). For more information, read Forwarding rule concepts and Using protocol forwarding.
8020
+ # Represents a Forwarding Rule resource. Forwarding rule resources in Google Cloud can be either regional or global in scope: * [Global](https://cloud.google.com/compute/docs/reference/rest/v1/globalForwardingRules) * [Regional](https://cloud.google.com/compute/docs/reference/rest/v1/forwardingRules) A forwarding rule and its corresponding IP address represent the frontend configuration of a Google Cloud load balancer. Forwarding rules can also reference target instances and Cloud VPN Classic gateways (targetVpnGateway). For more information, read Forwarding rule concepts and Using protocol forwarding.
7895
8021
  # @!attribute [rw] I_p_address
7896
8022
  # @return [::String]
7897
8023
  # IP address for which this forwarding rule accepts traffic. When a client sends traffic to this IP address, the forwarding rule directs the traffic to the referenced target or backendService. While creating a forwarding rule, specifying an IPAddress is required under the following circumstances: - When the target is set to targetGrpcProxy and validateForProxyless is set to true, the IPAddress should be set to 0.0.0.0. - When the target is a Private Service Connect Google APIs bundle, you must specify an IPAddress. Otherwise, you can optionally specify an IP address that references an existing static (reserved) IP address resource. When omitted, Google Cloud assigns an ephemeral IP address. Use one of the following formats to specify an IP address while creating a forwarding rule: * IP address number, as in `100.1.2.3` * IPv6 address range, as in `2600:1234::/96` * Full resource URL, as in https://www.googleapis.com/compute/v1/projects/ project_id/regions/region/addresses/address-name * Partial URL or by name, as in: - projects/project_id/regions/region/addresses/address-name - regions/region/addresses/address-name - global/addresses/address-name - address-name The forwarding rule's target or backendService, and in most cases, also the loadBalancingScheme, determine the type of IP address that you can use. For detailed information, see [IP address specifications](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts#ip_address_specifications). When reading an IPAddress, the API always returns the IP address number.
@@ -7904,16 +8030,16 @@ module Google
7904
8030
  # The ports, portRange, and allPorts fields are mutually exclusive. Only packets addressed to ports in the specified range will be forwarded to the backends configured with this forwarding rule. The allPorts field has the following limitations: - It requires that the forwarding rule IPProtocol be TCP, UDP, SCTP, or L3_DEFAULT. - It's applicable only to the following products: internal passthrough Network Load Balancers, backend service-based external passthrough Network Load Balancers, and internal and external protocol forwarding. - Set this field to true to allow packets addressed to any port or packets lacking destination port information (for example, UDP fragments after the first fragment) to be forwarded to the backends configured with this forwarding rule. The L3_DEFAULT protocol requires allPorts be set to true.
7905
8031
  # @!attribute [rw] allow_global_access
7906
8032
  # @return [::Boolean]
7907
- # This field is used along with the backend_service field for internal load balancing or with the target field for internal TargetInstance. If set to true, clients can access the Internal TCP/UDP Load Balancer, Internal HTTP(S) and TCP Proxy Load Balancer from all regions. If false, only allows access from the local region the load balancer is located at. Note that for INTERNAL_MANAGED forwarding rules, this field cannot be changed after the forwarding rule is created.
8033
+ # If set to true, clients can access the internal passthrough Network Load Balancers, the regional internal Application Load Balancer, and the regional internal proxy Network Load Balancer from all regions. If false, only allows access from the local region the load balancer is located at. Note that for INTERNAL_MANAGED forwarding rules, this field cannot be changed after the forwarding rule is created.
7908
8034
  # @!attribute [rw] allow_psc_global_access
7909
8035
  # @return [::Boolean]
7910
8036
  # This is used in PSC consumer ForwardingRule to control whether the PSC endpoint can be accessed from another region.
7911
8037
  # @!attribute [rw] backend_service
7912
8038
  # @return [::String]
7913
- # Identifies the backend service to which the forwarding rule sends traffic. Required for Internal TCP/UDP Load Balancing and Network Load Balancing; must be omitted for all other load balancer types.
8039
+ # Identifies the backend service to which the forwarding rule sends traffic. Required for internal and external passthrough Network Load Balancers; must be omitted for all other load balancer types.
7914
8040
  # @!attribute [rw] base_forwarding_rule
7915
8041
  # @return [::String]
7916
- # [Output Only] The URL for the corresponding base Forwarding Rule. By base Forwarding Rule, we mean the Forwarding Rule that has the same IP address, protocol, and port settings with the current Forwarding Rule, but without sourceIPRanges specified. Always empty if the current Forwarding Rule does not have sourceIPRanges specified.
8042
+ # [Output Only] The URL for the corresponding base forwarding rule. By base forwarding rule, we mean the forwarding rule that has the same IP address, protocol, and port settings with the current forwarding rule, but without sourceIPRanges specified. Always empty if the current forwarding rule does not have sourceIPRanges specified.
7917
8043
  # @!attribute [rw] creation_timestamp
7918
8044
  # @return [::String]
7919
8045
  # [Output Only] Creation timestamp in RFC3339 text format.
@@ -7935,7 +8061,7 @@ module Google
7935
8061
  # Indicates whether or not this load balancer can be used as a collector for packet mirroring. To prevent mirroring loops, instances behind this load balancer will not have their traffic mirrored even if a PacketMirroring rule applies to them. This can only be set to true for load balancers that have their loadBalancingScheme set to INTERNAL.
7936
8062
  # @!attribute [rw] kind
7937
8063
  # @return [::String]
7938
- # [Output Only] Type of the resource. Always compute#forwardingRule for Forwarding Rule resources.
8064
+ # [Output Only] Type of the resource. Always compute#forwardingRule for forwarding rule resources.
7939
8065
  # @!attribute [rw] label_fingerprint
7940
8066
  # @return [::String]
7941
8067
  # A fingerprint for the labels being applied to this resource, which is essentially a hash of the labels set used for optimistic locking. The fingerprint is initially generated by Compute Engine and changes after every request to modify or update labels. You must always provide an up-to-date fingerprint hash in order to update or change labels, otherwise the request will fail with error 412 conditionNotMet. To see the latest fingerprint, make a get() request to retrieve a ForwardingRule.
@@ -7954,7 +8080,7 @@ module Google
7954
8080
  # Name of the resource; provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash. For Private Service Connect forwarding rules that forward traffic to Google APIs, the forwarding rule name must be a 1-20 characters string with lowercase letters and numbers and must start with a letter.
7955
8081
  # @!attribute [rw] network
7956
8082
  # @return [::String]
7957
- # This field is not used for global external load balancing. For Internal TCP/UDP Load Balancing, this field identifies the network that the load balanced IP should belong to for this Forwarding Rule. If the subnetwork is specified, the network of the subnetwork will be used. If neither subnetwork nor this field is specified, the default network will be used. For Private Service Connect forwarding rules that forward traffic to Google APIs, a network must be provided.
8083
+ # This field is not used for global external load balancing. For internal passthrough Network Load Balancers, this field identifies the network that the load balanced IP should belong to for this forwarding rule. If the subnetwork is specified, the network of the subnetwork will be used. If neither subnetwork nor this field is specified, the default network will be used. For Private Service Connect forwarding rules that forward traffic to Google APIs, a network must be provided.
7958
8084
  # @!attribute [rw] network_tier
7959
8085
  # @return [::String]
7960
8086
  # This signifies the networking tier used for configuring this load balancer and can only take the following values: PREMIUM, STANDARD. For regional ForwardingRule, the valid values are PREMIUM and STANDARD. For GlobalForwardingRule, the valid value is PREMIUM. If this field is not specified, it is assumed to be PREMIUM. If IPAddress is specified, this value must be equal to the networkTier of the Address.
@@ -7970,7 +8096,7 @@ module Google
7970
8096
  # The ports, portRange, and allPorts fields are mutually exclusive. Only packets addressed to ports in the specified range will be forwarded to the backends configured with this forwarding rule. The ports field has the following limitations: - It requires that the forwarding rule IPProtocol be TCP, UDP, or SCTP, and - It's applicable only to the following products: internal passthrough Network Load Balancers, backend service-based external passthrough Network Load Balancers, and internal protocol forwarding. - You can specify a list of up to five ports by number, separated by commas. The ports can be contiguous or discontiguous. For external forwarding rules, two or more forwarding rules cannot use the same [IPAddress, IPProtocol] pair if they share at least one port number. For internal forwarding rules within the same VPC network, two or more forwarding rules cannot use the same [IPAddress, IPProtocol] pair if they share at least one port number. @pattern: \\d+(?:-\\d+)?
7971
8097
  # @!attribute [rw] psc_connection_id
7972
8098
  # @return [::Integer]
7973
- # [Output Only] The PSC connection id of the PSC Forwarding Rule.
8099
+ # [Output Only] The PSC connection id of the PSC forwarding rule.
7974
8100
  # @!attribute [rw] psc_connection_status
7975
8101
  # @return [::String]
7976
8102
  # Check the PscConnectionStatus enum for the list of possible values.
@@ -7985,16 +8111,16 @@ module Google
7985
8111
  # Service Directory resources to register this forwarding rule with. Currently, only supports a single Service Directory resource.
7986
8112
  # @!attribute [rw] service_label
7987
8113
  # @return [::String]
7988
- # An optional prefix to the service name for this Forwarding Rule. If specified, the prefix is the first label of the fully qualified service name. The label must be 1-63 characters long, and comply with RFC1035. Specifically, the label must be 1-63 characters long and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash. This field is only used for internal load balancing.
8114
+ # An optional prefix to the service name for this forwarding rule. If specified, the prefix is the first label of the fully qualified service name. The label must be 1-63 characters long, and comply with RFC1035. Specifically, the label must be 1-63 characters long and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash. This field is only used for internal load balancing.
7989
8115
  # @!attribute [rw] service_name
7990
8116
  # @return [::String]
7991
- # [Output Only] The internal fully qualified service name for this Forwarding Rule. This field is only used for internal load balancing.
8117
+ # [Output Only] The internal fully qualified service name for this forwarding rule. This field is only used for internal load balancing.
7992
8118
  # @!attribute [rw] source_ip_ranges
7993
8119
  # @return [::Array<::String>]
7994
- # If not empty, this Forwarding Rule will only forward the traffic when the source IP address matches one of the IP addresses or CIDR ranges set here. Note that a Forwarding Rule can only have up to 64 source IP ranges, and this field can only be used with a regional Forwarding Rule whose scheme is EXTERNAL. Each source_ip_range entry should be either an IP address (for example, 1.2.3.4) or a CIDR range (for example, 1.2.3.0/24).
8120
+ # If not empty, this forwarding rule will only forward the traffic when the source IP address matches one of the IP addresses or CIDR ranges set here. Note that a forwarding rule can only have up to 64 source IP ranges, and this field can only be used with a regional forwarding rule whose scheme is EXTERNAL. Each source_ip_range entry should be either an IP address (for example, 1.2.3.4) or a CIDR range (for example, 1.2.3.0/24).
7995
8121
  # @!attribute [rw] subnetwork
7996
8122
  # @return [::String]
7997
- # This field identifies the subnetwork that the load balanced IP should belong to for this Forwarding Rule, used in internal load balancing and network load balancing with IPv6. If the network specified is in auto subnet mode, this field is optional. However, a subnetwork must be specified if the network is in custom subnet mode or when creating external forwarding rule with IPv6.
8123
+ # This field identifies the subnetwork that the load balanced IP should belong to for this forwarding rule, used with internal load balancers and external passthrough Network Load Balancers with IPv6. If the network specified is in auto subnet mode, this field is optional. However, a subnetwork must be specified if the network is in custom subnet mode or when creating external forwarding rule with IPv6.
7998
8124
  # @!attribute [rw] target
7999
8125
  # @return [::String]
8000
8126
  # The URL of the target resource to receive the matched traffic. For regional forwarding rules, this target must be in the same region as the forwarding rule. For global forwarding rules, this target must be a global load balancing resource. The forwarded traffic must be of a type appropriate to the target object. - For load balancers, see the "Target" column in [Port specifications](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts#ip_address_specifications). - For Private Service Connect forwarding rules that forward traffic to Google APIs, provide the name of a supported Google API bundle: - vpc-sc - APIs that support VPC Service Controls. - all-apis - All supported Google APIs. - For Private Service Connect forwarding rules that forward traffic to managed services, the target must be a service attachment. The target is not mutable once set as a service attachment.
@@ -8168,7 +8294,7 @@ module Google
8168
8294
  extend ::Google::Protobuf::MessageExts::ClassMethods
8169
8295
  end
8170
8296
 
8171
- # Describes the auto-registration of the Forwarding Rule to Service Directory. The region and project of the Service Directory resource generated from this registration will be the same as this Forwarding Rule.
8297
+ # Describes the auto-registration of the forwarding rule to Service Directory. The region and project of the Service Directory resource generated from this registration will be the same as this forwarding rule.
8172
8298
  # @!attribute [rw] namespace
8173
8299
  # @return [::String]
8174
8300
  # Service Directory namespace to register the forwarding rule under.
@@ -8177,7 +8303,7 @@ module Google
8177
8303
  # Service Directory service to register the forwarding rule under.
8178
8304
  # @!attribute [rw] service_directory_region
8179
8305
  # @return [::String]
8180
- # [Optional] Service Directory region to register this global forwarding rule under. Default to "us-central1". Only used for PSC for Google APIs. All PSC for Google APIs Forwarding Rules on the same network should use the same Service Directory region.
8306
+ # [Optional] Service Directory region to register this global forwarding rule under. Default to "us-central1". Only used for PSC for Google APIs. All PSC for Google APIs forwarding rules on the same network should use the same Service Directory region.
8181
8307
  class ForwardingRuleServiceDirectoryRegistration
8182
8308
  include ::Google::Protobuf::MessageExts
8183
8309
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -8205,13 +8331,13 @@ module Google
8205
8331
  # Not supported.
8206
8332
  # @!attribute [rw] port_specification
8207
8333
  # @return [::String]
8208
- # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
8334
+ # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for passthrough load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for passthrough load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
8209
8335
  # Check the PortSpecification enum for the list of possible values.
8210
8336
  class GRPCHealthCheck
8211
8337
  include ::Google::Protobuf::MessageExts
8212
8338
  extend ::Google::Protobuf::MessageExts::ClassMethods
8213
8339
 
8214
- # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
8340
+ # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for passthrough load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for passthrough load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
8215
8341
  module PortSpecification
8216
8342
  # A value indicating that the enum field is not set.
8217
8343
  UNDEFINED_PORT_SPECIFICATION = 0
@@ -10366,13 +10492,13 @@ module Google
10366
10492
  # Guest OS features.
10367
10493
  # @!attribute [rw] type
10368
10494
  # @return [::String]
10369
- # The ID of a supported feature. To add multiple values, use commas to separate values. Set to one or more of the following values: - VIRTIO_SCSI_MULTIQUEUE - WINDOWS - MULTI_IP_SUBNET - UEFI_COMPATIBLE - GVNIC - SEV_CAPABLE - SUSPEND_RESUME_COMPATIBLE - SEV_LIVE_MIGRATABLE - SEV_SNP_CAPABLE For more information, see Enabling guest operating system features.
10495
+ # The ID of a supported feature. To add multiple values, use commas to separate values. Set to one or more of the following values: - VIRTIO_SCSI_MULTIQUEUE - WINDOWS - MULTI_IP_SUBNET - UEFI_COMPATIBLE - GVNIC - SEV_CAPABLE - SUSPEND_RESUME_COMPATIBLE - SEV_LIVE_MIGRATABLE - SEV_SNP_CAPABLE - TDX_CAPABLE - IDPF For more information, see Enabling guest operating system features.
10370
10496
  # Check the Type enum for the list of possible values.
10371
10497
  class GuestOsFeature
10372
10498
  include ::Google::Protobuf::MessageExts
10373
10499
  extend ::Google::Protobuf::MessageExts::ClassMethods
10374
10500
 
10375
- # The ID of a supported feature. To add multiple values, use commas to separate values. Set to one or more of the following values: - VIRTIO_SCSI_MULTIQUEUE - WINDOWS - MULTI_IP_SUBNET - UEFI_COMPATIBLE - GVNIC - SEV_CAPABLE - SUSPEND_RESUME_COMPATIBLE - SEV_LIVE_MIGRATABLE - SEV_SNP_CAPABLE For more information, see Enabling guest operating system features.
10501
+ # The ID of a supported feature. To add multiple values, use commas to separate values. Set to one or more of the following values: - VIRTIO_SCSI_MULTIQUEUE - WINDOWS - MULTI_IP_SUBNET - UEFI_COMPATIBLE - GVNIC - SEV_CAPABLE - SUSPEND_RESUME_COMPATIBLE - SEV_LIVE_MIGRATABLE - SEV_SNP_CAPABLE - TDX_CAPABLE - IDPF For more information, see Enabling guest operating system features.
10376
10502
  module Type
10377
10503
  # A value indicating that the enum field is not set.
10378
10504
  UNDEFINED_TYPE = 0
@@ -10381,6 +10507,8 @@ module Google
10381
10507
 
10382
10508
  GVNIC = 68_209_305
10383
10509
 
10510
+ IDPF = 2_242_641
10511
+
10384
10512
  MULTI_IP_SUBNET = 151_776_719
10385
10513
 
10386
10514
  SECURE_BOOT = 376_811_194
@@ -10412,7 +10540,7 @@ module Google
10412
10540
  # Not supported.
10413
10541
  # @!attribute [rw] port_specification
10414
10542
  # @return [::String]
10415
- # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
10543
+ # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for passthrough load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for passthrough load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
10416
10544
  # Check the PortSpecification enum for the list of possible values.
10417
10545
  # @!attribute [rw] proxy_header
10418
10546
  # @return [::String]
@@ -10428,7 +10556,7 @@ module Google
10428
10556
  include ::Google::Protobuf::MessageExts
10429
10557
  extend ::Google::Protobuf::MessageExts::ClassMethods
10430
10558
 
10431
- # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
10559
+ # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for passthrough load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for passthrough load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
10432
10560
  module PortSpecification
10433
10561
  # A value indicating that the enum field is not set.
10434
10562
  UNDEFINED_PORT_SPECIFICATION = 0
@@ -10465,7 +10593,7 @@ module Google
10465
10593
  # Not supported.
10466
10594
  # @!attribute [rw] port_specification
10467
10595
  # @return [::String]
10468
- # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Also supported in legacy HTTP health checks for target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
10596
+ # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for passthrough load balancers and backend services for proxy load balancers. Also supported in legacy HTTP health checks for target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
10469
10597
  # Check the PortSpecification enum for the list of possible values.
10470
10598
  # @!attribute [rw] proxy_header
10471
10599
  # @return [::String]
@@ -10481,7 +10609,7 @@ module Google
10481
10609
  include ::Google::Protobuf::MessageExts
10482
10610
  extend ::Google::Protobuf::MessageExts::ClassMethods
10483
10611
 
10484
- # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Also supported in legacy HTTP health checks for target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
10612
+ # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for passthrough load balancers and backend services for proxy load balancers. Also supported in legacy HTTP health checks for target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
10485
10613
  module PortSpecification
10486
10614
  # A value indicating that the enum field is not set.
10487
10615
  UNDEFINED_PORT_SPECIFICATION = 0
@@ -10518,7 +10646,7 @@ module Google
10518
10646
  # Not supported.
10519
10647
  # @!attribute [rw] port_specification
10520
10648
  # @return [::String]
10521
- # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
10649
+ # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for passthrough load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for passthrough load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
10522
10650
  # Check the PortSpecification enum for the list of possible values.
10523
10651
  # @!attribute [rw] proxy_header
10524
10652
  # @return [::String]
@@ -10534,7 +10662,7 @@ module Google
10534
10662
  include ::Google::Protobuf::MessageExts
10535
10663
  extend ::Google::Protobuf::MessageExts::ClassMethods
10536
10664
 
10537
- # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
10665
+ # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for passthrough load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for passthrough load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
10538
10666
  module PortSpecification
10539
10667
  # A value indicating that the enum field is not set.
10540
10668
  UNDEFINED_PORT_SPECIFICATION = 0
@@ -10560,7 +10688,7 @@ module Google
10560
10688
  end
10561
10689
  end
10562
10690
 
10563
- # Represents a health check resource. Google Compute Engine has two health check resources: * [Regional](/compute/docs/reference/rest/v1/regionHealthChecks) * [Global](/compute/docs/reference/rest/v1/healthChecks) These health check resources can be used for load balancing and for autohealing VMs in a managed instance group (MIG). **Load balancing** The following load balancer can use either regional or global health check: * Internal TCP/UDP load balancer The following load balancers require regional health check: * Internal HTTP(S) load balancer * Backend service-based network load balancer Traffic Director and the following load balancers require global health check: * External HTTP(S) load balancer * TCP proxy load balancer * SSL proxy load balancer The following load balancer require [legacy HTTP health checks](/compute/docs/reference/rest/v1/httpHealthChecks): * Target pool-based network load balancer **Autohealing in MIGs** The health checks that you use for autohealing VMs in a MIG can be either regional or global. For more information, see Set up an application health check and autohealing. For more information, see Health checks overview.
10691
+ # Represents a health check resource. Google Compute Engine has two health check resources: * [Regional](/compute/docs/reference/rest/v1/regionHealthChecks) * [Global](/compute/docs/reference/rest/v1/healthChecks) These health check resources can be used for load balancing and for autohealing VMs in a managed instance group (MIG). **Load balancing** Health check requirements vary depending on the type of load balancer. For details about the type of health check supported for each load balancer and corresponding backend type, see Health checks overview: Load balancer guide. **Autohealing in MIGs** The health checks that you use for autohealing VMs in a MIG can be either regional or global. For more information, see Set up an application health check and autohealing. For more information, see Health checks overview.
10564
10692
  # @!attribute [rw] check_interval_sec
10565
10693
  # @return [::Integer]
10566
10694
  # How often (in seconds) to send a health check. The default value is 5 seconds.
@@ -11238,6 +11366,9 @@ module Google
11238
11366
  # @!attribute [rw] disk_size_gb
11239
11367
  # @return [::Integer]
11240
11368
  # Size of the image when restored onto a persistent disk (in GB).
11369
+ # @!attribute [rw] enable_confidential_compute
11370
+ # @return [::Boolean]
11371
+ # Whether this image is created from a confidential compute mode disk. [Output Only]: This field is not set by user, but from source disk.
11241
11372
  # @!attribute [rw] family
11242
11373
  # @return [::String]
11243
11374
  # The name of the image family to which this image belongs. The image family name can be from a publicly managed image family provided by Compute Engine, or from a custom image family you create. For example, centos-stream-9 is a publicly available image family. For more information, see Image family best practices. When creating disks, you can specify an image family instead of a specific image name. The image family always returns its latest image that is not deprecated. The name of the image family must comply with RFC1035.
@@ -11271,6 +11402,9 @@ module Google
11271
11402
  # @!attribute [rw] raw_disk
11272
11403
  # @return [::Google::Cloud::Compute::V1::RawDisk]
11273
11404
  # The parameters of the raw disk image.
11405
+ # @!attribute [rw] satisfies_pzi
11406
+ # @return [::Boolean]
11407
+ # Output only. Reserved for future use.
11274
11408
  # @!attribute [rw] satisfies_pzs
11275
11409
  # @return [::Boolean]
11276
11410
  # [Output Only] Reserved for future use.
@@ -12762,6 +12896,9 @@ module Google
12762
12896
  # @!attribute [rw] resource_status
12763
12897
  # @return [::Google::Cloud::Compute::V1::ResourceStatus]
12764
12898
  # [Output Only] Specifies values set for instance attributes as compared to the values requested by user in the corresponding input only field.
12899
+ # @!attribute [rw] satisfies_pzi
12900
+ # @return [::Boolean]
12901
+ # [Output Only] Reserved for future use.
12765
12902
  # @!attribute [rw] satisfies_pzs
12766
12903
  # @return [::Boolean]
12767
12904
  # [Output Only] Reserved for future use.
@@ -13048,6 +13185,9 @@ module Google
13048
13185
  end
13049
13186
 
13050
13187
  # Represents a Managed Instance Group resource. An instance group is a collection of VM instances that you can manage as a single entity. For more information, read Instance groups. For zonal Managed Instance Group, use the instanceGroupManagers resource. For regional Managed Instance Group, use the regionInstanceGroupManagers resource.
13188
+ # @!attribute [rw] all_instances_config
13189
+ # @return [::Google::Cloud::Compute::V1::InstanceGroupManagerAllInstancesConfig]
13190
+ # Specifies configuration that overrides the instance template configuration for the group.
13051
13191
  # @!attribute [rw] auto_healing_policies
13052
13192
  # @return [::Array<::Google::Cloud::Compute::V1::InstanceGroupManagerAutoHealingPolicy>]
13053
13193
  # The autohealing policy for this managed instance group. You can specify only one value.
@@ -13217,6 +13357,14 @@ module Google
13217
13357
  end
13218
13358
  end
13219
13359
 
13360
+ # @!attribute [rw] properties
13361
+ # @return [::Google::Cloud::Compute::V1::InstancePropertiesPatch]
13362
+ # Properties to set on all instances in the group. You can add or modify properties using the instanceGroupManagers.patch or regionInstanceGroupManagers.patch. After setting allInstancesConfig on the group, you must update the group's instances to apply the configuration. To apply the configuration, set the group's updatePolicy.type field to use proactive updates or use the applyUpdatesToInstances method.
13363
+ class InstanceGroupManagerAllInstancesConfig
13364
+ include ::Google::Protobuf::MessageExts
13365
+ extend ::Google::Protobuf::MessageExts::ClassMethods
13366
+ end
13367
+
13220
13368
  # @!attribute [rw] health_check
13221
13369
  # @return [::String]
13222
13370
  # The URL for the health check that signals autohealing.
@@ -13271,6 +13419,9 @@ module Google
13271
13419
  extend ::Google::Protobuf::MessageExts::ClassMethods
13272
13420
  end
13273
13421
 
13422
+ # @!attribute [rw] all_instances_config
13423
+ # @return [::Google::Cloud::Compute::V1::InstanceGroupManagerStatusAllInstancesConfig]
13424
+ # [Output only] Status of all-instances configuration on the group.
13274
13425
  # @!attribute [rw] autoscaler
13275
13426
  # @return [::String]
13276
13427
  # [Output Only] The URL of the Autoscaler that targets this instance group manager.
@@ -13288,6 +13439,17 @@ module Google
13288
13439
  extend ::Google::Protobuf::MessageExts::ClassMethods
13289
13440
  end
13290
13441
 
13442
+ # @!attribute [rw] current_revision
13443
+ # @return [::String]
13444
+ # [Output Only] Current all-instances configuration revision. This value is in RFC3339 text format.
13445
+ # @!attribute [rw] effective
13446
+ # @return [::Boolean]
13447
+ # [Output Only] A bit indicating whether this configuration has been applied to all managed instances in the group.
13448
+ class InstanceGroupManagerStatusAllInstancesConfig
13449
+ include ::Google::Protobuf::MessageExts
13450
+ extend ::Google::Protobuf::MessageExts::ClassMethods
13451
+ end
13452
+
13291
13453
  # @!attribute [rw] has_stateful_config
13292
13454
  # @return [::Boolean]
13293
13455
  # [Output Only] A bit indicating whether the managed instance group has stateful configuration, that is, if you have configured any items in a stateful policy or in per-instance configs. The group might report that it has no stateful configuration even when there is still some preserved state on a managed instance, for example, if you have deleted all PICs but not yet applied those deletions.
@@ -13947,6 +14109,36 @@ module Google
13947
14109
  end
13948
14110
  end
13949
14111
 
14112
+ # Represents the change that you want to make to the instance properties.
14113
+ # @!attribute [rw] labels
14114
+ # @return [::Google::Protobuf::Map{::String => ::String}]
14115
+ # The label key-value pairs that you want to patch onto the instance.
14116
+ # @!attribute [rw] metadata
14117
+ # @return [::Google::Protobuf::Map{::String => ::String}]
14118
+ # The metadata key-value pairs that you want to patch onto the instance. For more information, see Project and instance metadata.
14119
+ class InstancePropertiesPatch
14120
+ include ::Google::Protobuf::MessageExts
14121
+ extend ::Google::Protobuf::MessageExts::ClassMethods
14122
+
14123
+ # @!attribute [rw] key
14124
+ # @return [::String]
14125
+ # @!attribute [rw] value
14126
+ # @return [::String]
14127
+ class LabelsEntry
14128
+ include ::Google::Protobuf::MessageExts
14129
+ extend ::Google::Protobuf::MessageExts::ClassMethods
14130
+ end
14131
+
14132
+ # @!attribute [rw] key
14133
+ # @return [::String]
14134
+ # @!attribute [rw] value
14135
+ # @return [::String]
14136
+ class MetadataEntry
14137
+ include ::Google::Protobuf::MessageExts
14138
+ extend ::Google::Protobuf::MessageExts::ClassMethods
14139
+ end
14140
+ end
14141
+
13950
14142
  # @!attribute [rw] instance
13951
14143
  # @return [::String]
13952
14144
  # The URL for a specific instance. @required compute.instancegroups.addInstances/removeInstances
@@ -17896,6 +18088,33 @@ module Google
17896
18088
  extend ::Google::Protobuf::MessageExts::ClassMethods
17897
18089
  end
17898
18090
 
18091
+ # A request message for RegionZones.List. See the method description for details.
18092
+ # @!attribute [rw] filter
18093
+ # @return [::String]
18094
+ # A filter expression that filters resources listed in the response. Most Compute resources support two types of filter expressions: expressions that support regular expressions and expressions that follow API improvement proposal AIP-160. These two types of filter expressions cannot be mixed in one request. If you want to use AIP-160, your expression must specify the field name, an operator, and the value that you want to use for filtering. The value must be a string, a number, or a boolean. The operator must be either `=`, `!=`, `>`, `<`, `<=`, `>=` or `:`. For example, if you are filtering Compute Engine instances, you can exclude instances named `example-instance` by specifying `name != example-instance`. The `:*` comparison can be used to test whether a key has been defined. For example, to find all objects with `owner` label use: ``` labels.owner:* ``` You can also filter nested fields. For example, you could specify `scheduling.automaticRestart = false` to include instances only if they are not scheduled for automatic restarts. You can use filtering on nested fields to filter based on resource labels. To filter on multiple expressions, provide each separate expression within parentheses. For example: ``` (scheduling.automaticRestart = true) (cpuPlatform = "Intel Skylake") ``` By default, each expression is an `AND` expression. However, you can include `AND` and `OR` expressions explicitly. For example: ``` (cpuPlatform = "Intel Skylake") OR (cpuPlatform = "Intel Broadwell") AND (scheduling.automaticRestart = true) ``` If you want to use a regular expression, use the `eq` (equal) or `ne` (not equal) operator against a single un-parenthesized expression with or without quotes or against multiple parenthesized expressions. Examples: `fieldname eq unquoted literal` `fieldname eq 'single quoted literal'` `fieldname eq "double quoted literal"` `(fieldname1 eq literal) (fieldname2 ne "literal")` The literal value is interpreted as a regular expression using Google RE2 library syntax. The literal value must match the entire field. For example, to filter for instances that do not end with name "instance", you would use `name ne .*instance`. You cannot combine constraints on multiple fields using regular expressions.
18095
+ # @!attribute [rw] max_results
18096
+ # @return [::Integer]
18097
+ # The maximum number of results per page that should be returned. If the number of available results is larger than `maxResults`, Compute Engine returns a `nextPageToken` that can be used to get the next page of results in subsequent list requests. Acceptable values are `0` to `500`, inclusive. (Default: `500`)
18098
+ # @!attribute [rw] order_by
18099
+ # @return [::String]
18100
+ # Sorts list results by a certain order. By default, results are returned in alphanumerical order based on the resource name. You can also sort results in descending order based on the creation timestamp using `orderBy="creationTimestamp desc"`. This sorts results based on the `creationTimestamp` field in reverse chronological order (newest result first). Use this to sort resources like operations so that the newest operation is returned first. Currently, only sorting by `name` or `creationTimestamp desc` is supported.
18101
+ # @!attribute [rw] page_token
18102
+ # @return [::String]
18103
+ # Specifies a page token to use. Set `pageToken` to the `nextPageToken` returned by a previous list request to get the next page of results.
18104
+ # @!attribute [rw] project
18105
+ # @return [::String]
18106
+ # Project ID for this request.
18107
+ # @!attribute [rw] region
18108
+ # @return [::String]
18109
+ # Region for this request.
18110
+ # @!attribute [rw] return_partial_success
18111
+ # @return [::Boolean]
18112
+ # Opt-in for partial success behavior which provides partial results in case of failure. The default value is false.
18113
+ class ListRegionZonesRequest
18114
+ include ::Google::Protobuf::MessageExts
18115
+ extend ::Google::Protobuf::MessageExts::ClassMethods
18116
+ end
18117
+
17899
18118
  # A request message for Regions.List. See the method description for details.
17900
18119
  # @!attribute [rw] filter
17901
18120
  # @return [::String]
@@ -18823,6 +19042,9 @@ module Google
18823
19042
  # @!attribute [rw] name
18824
19043
  # @return [::String]
18825
19044
  # Name of the resource; provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
19045
+ # @!attribute [rw] satisfies_pzi
19046
+ # @return [::Boolean]
19047
+ # Output only. Reserved for future use.
18826
19048
  # @!attribute [rw] satisfies_pzs
18827
19049
  # @return [::Boolean]
18828
19050
  # [Output Only] Reserved for future use.
@@ -19740,13 +19962,13 @@ module Google
19740
19962
  # Optional fully qualified domain name of network endpoint. This can only be specified when NetworkEndpointGroup.network_endpoint_type is NON_GCP_FQDN_PORT.
19741
19963
  # @!attribute [rw] instance
19742
19964
  # @return [::String]
19743
- # The name for a specific VM instance that the IP address belongs to. This is required for network endpoints of type GCE_VM_IP_PORT. The instance must be in the same zone of network endpoint group. The name must be 1-63 characters long, and comply with RFC1035.
19965
+ # The name or a URL of VM instance of this network endpoint. This field is required for network endpoints of type GCE_VM_IP and GCE_VM_IP_PORT. The instance must be in the same zone of network endpoint group (for zonal NEGs) or in the zone within the region of the NEG (for regional NEGs). If the ipAddress is specified, it must belongs to the VM instance. The name must be 1-63 characters long, and comply with RFC1035 or be a valid URL pointing to an existing instance.
19744
19966
  # @!attribute [rw] ip_address
19745
19967
  # @return [::String]
19746
- # Optional IPv4 address of network endpoint. The IP address must belong to a VM in Compute Engine (either the primary IP or as part of an aliased IP range). If the IP address is not specified, then the primary IP address for the VM instance in the network that the network endpoint group belongs to will be used.
19968
+ # Optional IPv4 address of network endpoint. The IP address must belong to a VM in Compute Engine (either the primary IP or as part of an aliased IP range). If the IP address is not specified, then the primary IP address for the VM instance in the network that the network endpoint group belongs to will be used. This field is redundant and need not be set for network endpoints of type GCE_VM_IP. If set, it must be set to the primary internal IP address of the attached VM instance that matches the subnetwork of the NEG. The primary internal IP address from any NIC of a multi-NIC VM instance can be added to a NEG as long as it matches the NEG subnetwork.
19747
19969
  # @!attribute [rw] port
19748
19970
  # @return [::Integer]
19749
- # Optional port number of network endpoint. If not specified, the defaultPort for the network endpoint group will be used.
19971
+ # Optional port number of network endpoint. If not specified, the defaultPort for the network endpoint group will be used. This field can not be set for network endpoints of type GCE_VM_IP.
19750
19972
  class NetworkEndpoint
19751
19973
  include ::Google::Protobuf::MessageExts
19752
19974
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -19767,19 +19989,19 @@ module Google
19767
19989
  # Metadata defined as annotations on the network endpoint group.
19768
19990
  # @!attribute [rw] app_engine
19769
19991
  # @return [::Google::Cloud::Compute::V1::NetworkEndpointGroupAppEngine]
19770
- # Only valid when networkEndpointType is "SERVERLESS". Only one of cloudRun, appEngine or cloudFunction may be set.
19992
+ # Only valid when networkEndpointType is SERVERLESS. Only one of cloudRun, appEngine or cloudFunction may be set.
19771
19993
  # @!attribute [rw] cloud_function
19772
19994
  # @return [::Google::Cloud::Compute::V1::NetworkEndpointGroupCloudFunction]
19773
- # Only valid when networkEndpointType is "SERVERLESS". Only one of cloudRun, appEngine or cloudFunction may be set.
19995
+ # Only valid when networkEndpointType is SERVERLESS. Only one of cloudRun, appEngine or cloudFunction may be set.
19774
19996
  # @!attribute [rw] cloud_run
19775
19997
  # @return [::Google::Cloud::Compute::V1::NetworkEndpointGroupCloudRun]
19776
- # Only valid when networkEndpointType is "SERVERLESS". Only one of cloudRun, appEngine or cloudFunction may be set.
19998
+ # Only valid when networkEndpointType is SERVERLESS. Only one of cloudRun, appEngine or cloudFunction may be set.
19777
19999
  # @!attribute [rw] creation_timestamp
19778
20000
  # @return [::String]
19779
20001
  # [Output Only] Creation timestamp in RFC3339 text format.
19780
20002
  # @!attribute [rw] default_port
19781
20003
  # @return [::Integer]
19782
- # The default port used if the port number is not specified in the network endpoint.
20004
+ # The default port used if the port number is not specified in the network endpoint. If the network endpoint type is either GCE_VM_IP, SERVERLESS or PRIVATE_SERVICE_CONNECT, this field must not be specified.
19783
20005
  # @!attribute [rw] description
19784
20006
  # @return [::String]
19785
20007
  # An optional description of this resource. Provide this property when you create the resource.
@@ -19794,7 +20016,7 @@ module Google
19794
20016
  # Name of the resource; provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
19795
20017
  # @!attribute [rw] network
19796
20018
  # @return [::String]
19797
- # The URL of the network to which all network endpoints in the NEG belong. Uses "default" project network if unspecified.
20019
+ # The URL of the network to which all network endpoints in the NEG belong. Uses default project network if unspecified.
19798
20020
  # @!attribute [rw] network_endpoint_type
19799
20021
  # @return [::String]
19800
20022
  # Type of network endpoints in this network endpoint group. Can be one of GCE_VM_IP, GCE_VM_IP_PORT, NON_GCP_PRIVATE_IP_PORT, INTERNET_FQDN_PORT, INTERNET_IP_PORT, SERVERLESS, PRIVATE_SERVICE_CONNECT.
@@ -19803,7 +20025,7 @@ module Google
19803
20025
  # @return [::Google::Cloud::Compute::V1::NetworkEndpointGroupPscData]
19804
20026
  # @!attribute [rw] psc_target_service
19805
20027
  # @return [::String]
19806
- # The target service url used to set up private service connection to a Google API or a PSC Producer Service Attachment. An example value is: "asia-northeast3-cloudkms.googleapis.com"
20028
+ # The target service url used to set up private service connection to a Google API or a PSC Producer Service Attachment. An example value is: asia-northeast3-cloudkms.googleapis.com
19807
20029
  # @!attribute [rw] region
19808
20030
  # @return [::String]
19809
20031
  # [Output Only] The URL of the region where the network endpoint group is located.
@@ -19898,13 +20120,13 @@ module Google
19898
20120
  # Configuration for an App Engine network endpoint group (NEG). The service is optional, may be provided explicitly or in the URL mask. The version is optional and can only be provided explicitly or in the URL mask when service is present. Note: App Engine service must be in the same project and located in the same region as the Serverless NEG.
19899
20121
  # @!attribute [rw] service
19900
20122
  # @return [::String]
19901
- # Optional serving service. The service name is case-sensitive and must be 1-63 characters long. Example value: "default", "my-service".
20123
+ # Optional serving service. The service name is case-sensitive and must be 1-63 characters long. Example value: default, my-service.
19902
20124
  # @!attribute [rw] url_mask
19903
20125
  # @return [::String]
19904
- # A template to parse service and version fields from a request URL. URL mask allows for routing to multiple App Engine services without having to create multiple Network Endpoint Groups and backend services. For example, the request URLs "foo1-dot-appname.appspot.com/v1" and "foo1-dot-appname.appspot.com/v2" can be backed by the same Serverless NEG with URL mask "<service>-dot-appname.appspot.com/<version>". The URL mask will parse them to { service = "foo1", version = "v1" } and { service = "foo1", version = "v2" } respectively.
20126
+ # An URL mask is one of the main components of the Cloud Function. A template to parse service and version fields from a request URL. URL mask allows for routing to multiple App Engine services without having to create multiple Network Endpoint Groups and backend services. For example, the request URLs foo1-dot-appname.appspot.com/v1 and foo1-dot-appname.appspot.com/v2 can be backed by the same Serverless NEG with URL mask <service>-dot-appname.appspot.com/<version>. The URL mask will parse them to { service = "foo1", version = "v1" } and { service = "foo1", version = "v2" } respectively.
19905
20127
  # @!attribute [rw] version
19906
20128
  # @return [::String]
19907
- # Optional serving version. The version name is case-sensitive and must be 1-100 characters long. Example value: "v1", "v2".
20129
+ # Optional serving version. The version name is case-sensitive and must be 1-100 characters long. Example value: v1, v2.
19908
20130
  class NetworkEndpointGroupAppEngine
19909
20131
  include ::Google::Protobuf::MessageExts
19910
20132
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -19913,10 +20135,10 @@ module Google
19913
20135
  # Configuration for a Cloud Function network endpoint group (NEG). The function must be provided explicitly or in the URL mask. Note: Cloud Function must be in the same project and located in the same region as the Serverless NEG.
19914
20136
  # @!attribute [rw] function
19915
20137
  # @return [::String]
19916
- # A user-defined name of the Cloud Function. The function name is case-sensitive and must be 1-63 characters long. Example value: "func1".
20138
+ # A user-defined name of the Cloud Function. The function name is case-sensitive and must be 1-63 characters long. Example value: func1.
19917
20139
  # @!attribute [rw] url_mask
19918
20140
  # @return [::String]
19919
- # A template to parse function field from a request URL. URL mask allows for routing to multiple Cloud Functions without having to create multiple Network Endpoint Groups and backend services. For example, request URLs " mydomain.com/function1" and "mydomain.com/function2" can be backed by the same Serverless NEG with URL mask "/<function>". The URL mask will parse them to { function = "function1" } and { function = "function2" } respectively.
20141
+ # An URL mask is one of the main components of the Cloud Function. A template to parse function field from a request URL. URL mask allows for routing to multiple Cloud Functions without having to create multiple Network Endpoint Groups and backend services. For example, request URLs mydomain.com/function1 and mydomain.com/function2 can be backed by the same Serverless NEG with URL mask /<function>. The URL mask will parse them to { function = "function1" } and { function = "function2" } respectively.
19920
20142
  class NetworkEndpointGroupCloudFunction
19921
20143
  include ::Google::Protobuf::MessageExts
19922
20144
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -19931,7 +20153,7 @@ module Google
19931
20153
  # Optional Cloud Run tag represents the "named-revision" to provide additional fine-grained traffic routing information. The tag must be 1-63 characters long, and comply with RFC1035. Example value: "revision-0010".
19932
20154
  # @!attribute [rw] url_mask
19933
20155
  # @return [::String]
19934
- # A template to parse <service> and <tag> fields from a request URL. URL mask allows for routing to multiple Run services without having to create multiple network endpoint groups and backend services. For example, request URLs "foo1.domain.com/bar1" and "foo1.domain.com/bar2" can be backed by the same Serverless Network Endpoint Group (NEG) with URL mask "<tag>.domain.com/<service>". The URL mask will parse them to { service="bar1", tag="foo1" } and { service="bar2", tag="foo2" } respectively.
20156
+ # An URL mask is one of the main components of the Cloud Function. A template to parse <service> and <tag> fields from a request URL. URL mask allows for routing to multiple Run services without having to create multiple network endpoint groups and backend services. For example, request URLs foo1.domain.com/bar1 and foo1.domain.com/bar2 can be backed by the same Serverless Network Endpoint Group (NEG) with URL mask <tag>.domain.com/<service>. The URL mask will parse them to { service="bar1", tag="foo1" } and { service="bar2", tag="foo2" } respectively.
19935
20157
  class NetworkEndpointGroupCloudRun
19936
20158
  include ::Google::Protobuf::MessageExts
19937
20159
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -21068,7 +21290,7 @@ module Google
21068
21290
  extend ::Google::Protobuf::MessageExts::ClassMethods
21069
21291
  end
21070
21292
 
21071
- # Represents an Operation resource. Google Compute Engine has three Operation resources: * [Global](/compute/docs/reference/rest/v1/globalOperations) * [Regional](/compute/docs/reference/rest/v1/regionOperations) * [Zonal](/compute/docs/reference/rest/v1/zoneOperations) You can use an operation resource to manage asynchronous API requests. For more information, read Handling API responses. Operations can be global, regional or zonal. - For global operations, use the `globalOperations` resource. - For regional operations, use the `regionOperations` resource. - For zonal operations, use the `zoneOperations` resource. For more information, read Global, Regional, and Zonal Resources.
21293
+ # Represents an Operation resource. Google Compute Engine has three Operation resources: * [Global](/compute/docs/reference/rest/v1/globalOperations) * [Regional](/compute/docs/reference/rest/v1/regionOperations) * [Zonal](/compute/docs/reference/rest/v1/zoneOperations) You can use an operation resource to manage asynchronous API requests. For more information, read Handling API responses. Operations can be global, regional or zonal. - For global operations, use the `globalOperations` resource. - For regional operations, use the `regionOperations` resource. - For zonal operations, use the `zoneOperations` resource. For more information, read Global, Regional, and Zonal Resources. Note that completed Operation resources have a limited retention period.
21072
21294
  # @!attribute [rw] client_operation_id
21073
21295
  # @return [::String]
21074
21296
  # [Output Only] The value of `requestId` if you provided it in the request. Not present otherwise.
@@ -21424,10 +21646,10 @@ module Google
21424
21646
 
21425
21647
  # @!attribute [rw] I_p_protocols
21426
21648
  # @return [::Array<::String>]
21427
- # Protocols that apply as filter on mirrored traffic. If no protocols are specified, all traffic that matches the specified CIDR ranges is mirrored. If neither cidrRanges nor IPProtocols is specified, all traffic is mirrored.
21649
+ # Protocols that apply as filter on mirrored traffic. If no protocols are specified, all traffic that matches the specified CIDR ranges is mirrored. If neither cidrRanges nor IPProtocols is specified, all IPv4 traffic is mirrored.
21428
21650
  # @!attribute [rw] cidr_ranges
21429
21651
  # @return [::Array<::String>]
21430
- # IP CIDR ranges that apply as filter on the source (ingress) or destination (egress) IP in the IP header. Only IPv4 is supported. If no ranges are specified, all traffic that matches the specified IPProtocols is mirrored. If neither cidrRanges nor IPProtocols is specified, all traffic is mirrored.
21652
+ # One or more IPv4 or IPv6 CIDR ranges that apply as filter on the source (ingress) or destination (egress) IP in the IP header. If no ranges are specified, all IPv4 traffic that matches the specified IPProtocols is mirrored. If neither cidrRanges nor IPProtocols is specified, all IPv4 traffic is mirrored. To mirror all IPv4 and IPv6 traffic, use "0.0.0.0/0,::/0". Note: Support for IPv6 traffic is in preview.
21431
21653
  # @!attribute [rw] direction
21432
21654
  # @return [::String]
21433
21655
  # Direction of traffic to mirror, either INGRESS, EGRESS, or BOTH. The default is BOTH.
@@ -22630,6 +22852,24 @@ module Google
22630
22852
  end
22631
22853
  end
22632
22854
 
22855
+ # A request message for Instances.PerformMaintenance. See the method description for details.
22856
+ # @!attribute [rw] instance
22857
+ # @return [::String]
22858
+ # Name of the instance scoping this request.
22859
+ # @!attribute [rw] project
22860
+ # @return [::String]
22861
+ # Project ID for this request.
22862
+ # @!attribute [rw] request_id
22863
+ # @return [::String]
22864
+ # An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
22865
+ # @!attribute [rw] zone
22866
+ # @return [::String]
22867
+ # The name of the zone for this request.
22868
+ class PerformMaintenanceInstanceRequest
22869
+ include ::Google::Protobuf::MessageExts
22870
+ extend ::Google::Protobuf::MessageExts::ClassMethods
22871
+ end
22872
+
22633
22873
  # An Identity and Access Management (IAM) policy, which specifies access controls for Google Cloud resources. A `Policy` is a collection of `bindings`. A `binding` binds one or more `members`, or principals, to a single `role`. Principals can be user accounts, service accounts, Google groups, and domains (such as G Suite). A `role` is a named list of permissions; each `role` can be an IAM predefined role or a user-created custom role. For some types of Google Cloud resources, a `binding` can also specify a `condition`, which is a logical expression that allows access to a resource only if the expression evaluates to `true`. A condition can add constraints based on attributes of the request, the resource, or both. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). **JSON example:** ``` { "bindings": [ { "role": "roles/resourcemanager.organizationAdmin", "members": [ "user:mike@example.com", "group:admins@example.com", "domain:google.com", "serviceAccount:my-project-id@appspot.gserviceaccount.com" ] }, { "role": "roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com" ], "condition": { "title": "expirable access", "description": "Does not grant access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')", } } ], "etag": "BwWWja0YfJA=", "version": 3 } ``` **YAML example:** ``` bindings: - members: - user:mike@example.com - group:admins@example.com - domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.com role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3 ``` For a description of IAM and its features, see the [IAM documentation](https://cloud.google.com/iam/docs/).
22634
22874
  # @!attribute [rw] audit_configs
22635
22875
  # @return [::Array<::Google::Cloud::Compute::V1::AuditConfig>]
@@ -23381,6 +23621,8 @@ module Google
23381
23621
 
23382
23622
  COMMITTED_NVIDIA_A100_GPUS = 375_799_445
23383
23623
 
23624
+ COMMITTED_NVIDIA_H100_GPUS = 71_649_180
23625
+
23384
23626
  COMMITTED_NVIDIA_K80_GPUS = 3_857_188
23385
23627
 
23386
23628
  COMMITTED_NVIDIA_L4_GPUS = 19_163_645
@@ -23397,6 +23639,8 @@ module Google
23397
23639
 
23398
23640
  COMMITTED_T2D_CPUS = 382_266_439
23399
23641
 
23642
+ COMMITTED_Z3_CPUS = 263_844_686
23643
+
23400
23644
  # Guest CPUs
23401
23645
  CPUS = 2_075_595
23402
23646
 
@@ -23532,6 +23776,8 @@ module Google
23532
23776
 
23533
23777
  PREEMPTIBLE_NVIDIA_A100_GPUS = 68_832_784
23534
23778
 
23779
+ PREEMPTIBLE_NVIDIA_H100_GPUS = 301_553_431
23780
+
23535
23781
  PREEMPTIBLE_NVIDIA_K80_GPUS = 374_960_201
23536
23782
 
23537
23783
  PREEMPTIBLE_NVIDIA_L4_GPUS = 100_408_376
@@ -23550,6 +23796,12 @@ module Google
23550
23796
 
23551
23797
  PREEMPTIBLE_NVIDIA_V100_GPUS = 230_123_813
23552
23798
 
23799
+ PREEMPTIBLE_TPU_LITE_DEVICE_V5 = 174_262_523
23800
+
23801
+ PREEMPTIBLE_TPU_LITE_PODSLICE_V5 = 112_281_796
23802
+
23803
+ PREEMPTIBLE_TPU_PODSLICE_V4 = 425_541_132
23804
+
23553
23805
  PSC_ILB_CONSUMER_FORWARDING_RULES_PER_PRODUCER_NETWORK = 231_164_291
23554
23806
 
23555
23807
  PSC_INTERNAL_LB_FORWARDING_RULES = 169_005_435
@@ -23625,6 +23877,12 @@ module Google
23625
23877
 
23626
23878
  TARGET_VPN_GATEWAYS = 75_029_928
23627
23879
 
23880
+ TPU_LITE_DEVICE_V5 = 449_577_597
23881
+
23882
+ TPU_LITE_PODSLICE_V5 = 12_708_294
23883
+
23884
+ TPU_PODSLICE_V4 = 214_467_530
23885
+
23628
23886
  URL_MAPS = 378_660_743
23629
23887
 
23630
23888
  VPN_GATEWAYS = 35_620_282
@@ -24599,6 +24857,9 @@ module Google
24599
24857
  end
24600
24858
 
24601
24859
  # Represents a reservation resource. A reservation ensures that capacity is held in a specific zone even if the reserved VMs are not running. For more information, read Reserving zonal resources.
24860
+ # @!attribute [rw] aggregate_reservation
24861
+ # @return [::Google::Cloud::Compute::V1::AllocationAggregateReservation]
24862
+ # Reservation for aggregated resources, providing shape flexibility.
24602
24863
  # @!attribute [rw] commitment
24603
24864
  # @return [::String]
24604
24865
  # [Output Only] Full or partial URL to a parent commitment. This field displays for reservations that are tied to a commitment.
@@ -26345,7 +26606,7 @@ module Google
26345
26606
  # Not supported.
26346
26607
  # @!attribute [rw] port_specification
26347
26608
  # @return [::String]
26348
- # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
26609
+ # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for passthrough load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for passthrough load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
26349
26610
  # Check the PortSpecification enum for the list of possible values.
26350
26611
  # @!attribute [rw] proxy_header
26351
26612
  # @return [::String]
@@ -26361,7 +26622,7 @@ module Google
26361
26622
  include ::Google::Protobuf::MessageExts
26362
26623
  extend ::Google::Protobuf::MessageExts::ClassMethods
26363
26624
 
26364
- # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
26625
+ # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for passthrough load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for passthrough load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
26365
26626
  module PortSpecification
26366
26627
  # A value indicating that the enum field is not set.
26367
26628
  UNDEFINED_PORT_SPECIFICATION = 0
@@ -27045,6 +27306,9 @@ module Google
27045
27306
  # @!attribute [rw] expr
27046
27307
  # @return [::Google::Cloud::Compute::V1::Expr]
27047
27308
  # User defined CEVAL expression. A CEVAL expression is used to specify match criteria such as origin.ip, source.region_code and contents in the request header. Expressions containing `evaluateThreatIntelligence` require Cloud Armor Managed Protection Plus tier and are not supported in Edge Policies nor in Regional Policies. Expressions containing `evaluatePreconfiguredExpr('sourceiplist-*')` require Cloud Armor Managed Protection Plus tier and are only supported in Global Security Policies.
27309
+ # @!attribute [rw] expr_options
27310
+ # @return [::Google::Cloud::Compute::V1::SecurityPolicyRuleMatcherExprOptions]
27311
+ # The configuration options available when specifying a user defined CEVAL expression (i.e., 'expr').
27048
27312
  # @!attribute [rw] versioned_expr
27049
27313
  # @return [::String]
27050
27314
  # Preconfigured versioned expression. If this field is specified, config must also be specified. Available preconfigured expressions along with their requirements are: SRC_IPS_V1 - must specify the corresponding src_ip_range field in config.
@@ -27071,6 +27335,25 @@ module Google
27071
27335
  extend ::Google::Protobuf::MessageExts::ClassMethods
27072
27336
  end
27073
27337
 
27338
+ # @!attribute [rw] recaptcha_options
27339
+ # @return [::Google::Cloud::Compute::V1::SecurityPolicyRuleMatcherExprOptionsRecaptchaOptions]
27340
+ # reCAPTCHA configuration options to be applied for the rule. If the rule does not evaluate reCAPTCHA tokens, this field has no effect.
27341
+ class SecurityPolicyRuleMatcherExprOptions
27342
+ include ::Google::Protobuf::MessageExts
27343
+ extend ::Google::Protobuf::MessageExts::ClassMethods
27344
+ end
27345
+
27346
+ # @!attribute [rw] action_token_site_keys
27347
+ # @return [::Array<::String>]
27348
+ # A list of site keys to be used during the validation of reCAPTCHA action-tokens. The provided site keys need to be created from reCAPTCHA API under the same project where the security policy is created.
27349
+ # @!attribute [rw] session_token_site_keys
27350
+ # @return [::Array<::String>]
27351
+ # A list of site keys to be used during the validation of reCAPTCHA session-tokens. The provided site keys need to be created from reCAPTCHA API under the same project where the security policy is created.
27352
+ class SecurityPolicyRuleMatcherExprOptionsRecaptchaOptions
27353
+ include ::Google::Protobuf::MessageExts
27354
+ extend ::Google::Protobuf::MessageExts::ClassMethods
27355
+ end
27356
+
27074
27357
  # Represents a match condition that incoming network traffic is evaluated against.
27075
27358
  # @!attribute [rw] dest_ip_ranges
27076
27359
  # @return [::Array<::String>]
@@ -27187,7 +27470,7 @@ module Google
27187
27470
  # Action to take for requests that are under the configured rate limit threshold. Valid option is "allow" only.
27188
27471
  # @!attribute [rw] enforce_on_key
27189
27472
  # @return [::String]
27190
- # Determines the key to enforce the rate_limit_threshold on. Possible values are: - ALL: A single rate limit threshold is applied to all the requests matching this rule. This is the default value if "enforceOnKey" is not configured. - IP: The source IP address of the request is the key. Each IP has this limit enforced separately. - HTTP_HEADER: The value of the HTTP header whose name is configured under "enforceOnKeyName". The key value is truncated to the first 128 bytes of the header value. If no such header is present in the request, the key type defaults to ALL. - XFF_IP: The first IP address (i.e. the originating client IP address) specified in the list of IPs under X-Forwarded-For HTTP header. If no such header is present or the value is not a valid IP, the key defaults to the source IP address of the request i.e. key type IP. - HTTP_COOKIE: The value of the HTTP cookie whose name is configured under "enforceOnKeyName". The key value is truncated to the first 128 bytes of the cookie value. If no such cookie is present in the request, the key type defaults to ALL. - HTTP_PATH: The URL path of the HTTP request. The key value is truncated to the first 128 bytes. - SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session. - REGION_CODE: The country/region from which the request originates.
27473
+ # Determines the key to enforce the rate_limit_threshold on. Possible values are: - ALL: A single rate limit threshold is applied to all the requests matching this rule. This is the default value if "enforceOnKey" is not configured. - IP: The source IP address of the request is the key. Each IP has this limit enforced separately. - HTTP_HEADER: The value of the HTTP header whose name is configured under "enforceOnKeyName". The key value is truncated to the first 128 bytes of the header value. If no such header is present in the request, the key type defaults to ALL. - XFF_IP: The first IP address (i.e. the originating client IP address) specified in the list of IPs under X-Forwarded-For HTTP header. If no such header is present or the value is not a valid IP, the key defaults to the source IP address of the request i.e. key type IP. - HTTP_COOKIE: The value of the HTTP cookie whose name is configured under "enforceOnKeyName". The key value is truncated to the first 128 bytes of the cookie value. If no such cookie is present in the request, the key type defaults to ALL. - HTTP_PATH: The URL path of the HTTP request. The key value is truncated to the first 128 bytes. - SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session. - REGION_CODE: The country/region from which the request originates. - TLS_JA3_FINGERPRINT: JA3 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL. - USER_IP: The IP address of the originating client, which is resolved based on "userIpRequestHeaders" configured with the security policy. If there is no "userIpRequestHeaders" configuration or an IP address cannot be resolved from it, the key type defaults to IP.
27191
27474
  # Check the EnforceOnKey enum for the list of possible values.
27192
27475
  # @!attribute [rw] enforce_on_key_configs
27193
27476
  # @return [::Array<::Google::Cloud::Compute::V1::SecurityPolicyRuleRateLimitOptionsEnforceOnKeyConfig>]
@@ -27208,7 +27491,7 @@ module Google
27208
27491
  include ::Google::Protobuf::MessageExts
27209
27492
  extend ::Google::Protobuf::MessageExts::ClassMethods
27210
27493
 
27211
- # Determines the key to enforce the rate_limit_threshold on. Possible values are: - ALL: A single rate limit threshold is applied to all the requests matching this rule. This is the default value if "enforceOnKey" is not configured. - IP: The source IP address of the request is the key. Each IP has this limit enforced separately. - HTTP_HEADER: The value of the HTTP header whose name is configured under "enforceOnKeyName". The key value is truncated to the first 128 bytes of the header value. If no such header is present in the request, the key type defaults to ALL. - XFF_IP: The first IP address (i.e. the originating client IP address) specified in the list of IPs under X-Forwarded-For HTTP header. If no such header is present or the value is not a valid IP, the key defaults to the source IP address of the request i.e. key type IP. - HTTP_COOKIE: The value of the HTTP cookie whose name is configured under "enforceOnKeyName". The key value is truncated to the first 128 bytes of the cookie value. If no such cookie is present in the request, the key type defaults to ALL. - HTTP_PATH: The URL path of the HTTP request. The key value is truncated to the first 128 bytes. - SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session. - REGION_CODE: The country/region from which the request originates.
27494
+ # Determines the key to enforce the rate_limit_threshold on. Possible values are: - ALL: A single rate limit threshold is applied to all the requests matching this rule. This is the default value if "enforceOnKey" is not configured. - IP: The source IP address of the request is the key. Each IP has this limit enforced separately. - HTTP_HEADER: The value of the HTTP header whose name is configured under "enforceOnKeyName". The key value is truncated to the first 128 bytes of the header value. If no such header is present in the request, the key type defaults to ALL. - XFF_IP: The first IP address (i.e. the originating client IP address) specified in the list of IPs under X-Forwarded-For HTTP header. If no such header is present or the value is not a valid IP, the key defaults to the source IP address of the request i.e. key type IP. - HTTP_COOKIE: The value of the HTTP cookie whose name is configured under "enforceOnKeyName". The key value is truncated to the first 128 bytes of the cookie value. If no such cookie is present in the request, the key type defaults to ALL. - HTTP_PATH: The URL path of the HTTP request. The key value is truncated to the first 128 bytes. - SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session. - REGION_CODE: The country/region from which the request originates. - TLS_JA3_FINGERPRINT: JA3 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL. - USER_IP: The IP address of the originating client, which is resolved based on "userIpRequestHeaders" configured with the security policy. If there is no "userIpRequestHeaders" configuration or an IP address cannot be resolved from it, the key type defaults to IP.
27212
27495
  module EnforceOnKey
27213
27496
  # A value indicating that the enum field is not set.
27214
27497
  UNDEFINED_ENFORCE_ON_KEY = 0
@@ -27227,6 +27510,10 @@ module Google
27227
27510
 
27228
27511
  SNI = 82_254
27229
27512
 
27513
+ TLS_JA3_FINGERPRINT = 327_127_933
27514
+
27515
+ USER_IP = 34_009_627
27516
+
27230
27517
  XFF_IP = 438_707_118
27231
27518
  end
27232
27519
  end
@@ -27236,13 +27523,13 @@ module Google
27236
27523
  # Rate limit key name applicable only for the following key types: HTTP_HEADER -- Name of the HTTP header whose value is taken as the key value. HTTP_COOKIE -- Name of the HTTP cookie whose value is taken as the key value.
27237
27524
  # @!attribute [rw] enforce_on_key_type
27238
27525
  # @return [::String]
27239
- # Determines the key to enforce the rate_limit_threshold on. Possible values are: - ALL: A single rate limit threshold is applied to all the requests matching this rule. This is the default value if "enforceOnKeyConfigs" is not configured. - IP: The source IP address of the request is the key. Each IP has this limit enforced separately. - HTTP_HEADER: The value of the HTTP header whose name is configured under "enforceOnKeyName". The key value is truncated to the first 128 bytes of the header value. If no such header is present in the request, the key type defaults to ALL. - XFF_IP: The first IP address (i.e. the originating client IP address) specified in the list of IPs under X-Forwarded-For HTTP header. If no such header is present or the value is not a valid IP, the key defaults to the source IP address of the request i.e. key type IP. - HTTP_COOKIE: The value of the HTTP cookie whose name is configured under "enforceOnKeyName". The key value is truncated to the first 128 bytes of the cookie value. If no such cookie is present in the request, the key type defaults to ALL. - HTTP_PATH: The URL path of the HTTP request. The key value is truncated to the first 128 bytes. - SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session. - REGION_CODE: The country/region from which the request originates.
27526
+ # Determines the key to enforce the rate_limit_threshold on. Possible values are: - ALL: A single rate limit threshold is applied to all the requests matching this rule. This is the default value if "enforceOnKeyConfigs" is not configured. - IP: The source IP address of the request is the key. Each IP has this limit enforced separately. - HTTP_HEADER: The value of the HTTP header whose name is configured under "enforceOnKeyName". The key value is truncated to the first 128 bytes of the header value. If no such header is present in the request, the key type defaults to ALL. - XFF_IP: The first IP address (i.e. the originating client IP address) specified in the list of IPs under X-Forwarded-For HTTP header. If no such header is present or the value is not a valid IP, the key defaults to the source IP address of the request i.e. key type IP. - HTTP_COOKIE: The value of the HTTP cookie whose name is configured under "enforceOnKeyName". The key value is truncated to the first 128 bytes of the cookie value. If no such cookie is present in the request, the key type defaults to ALL. - HTTP_PATH: The URL path of the HTTP request. The key value is truncated to the first 128 bytes. - SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session. - REGION_CODE: The country/region from which the request originates. - TLS_JA3_FINGERPRINT: JA3 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL. - USER_IP: The IP address of the originating client, which is resolved based on "userIpRequestHeaders" configured with the security policy. If there is no "userIpRequestHeaders" configuration or an IP address cannot be resolved from it, the key type defaults to IP.
27240
27527
  # Check the EnforceOnKeyType enum for the list of possible values.
27241
27528
  class SecurityPolicyRuleRateLimitOptionsEnforceOnKeyConfig
27242
27529
  include ::Google::Protobuf::MessageExts
27243
27530
  extend ::Google::Protobuf::MessageExts::ClassMethods
27244
27531
 
27245
- # Determines the key to enforce the rate_limit_threshold on. Possible values are: - ALL: A single rate limit threshold is applied to all the requests matching this rule. This is the default value if "enforceOnKeyConfigs" is not configured. - IP: The source IP address of the request is the key. Each IP has this limit enforced separately. - HTTP_HEADER: The value of the HTTP header whose name is configured under "enforceOnKeyName". The key value is truncated to the first 128 bytes of the header value. If no such header is present in the request, the key type defaults to ALL. - XFF_IP: The first IP address (i.e. the originating client IP address) specified in the list of IPs under X-Forwarded-For HTTP header. If no such header is present or the value is not a valid IP, the key defaults to the source IP address of the request i.e. key type IP. - HTTP_COOKIE: The value of the HTTP cookie whose name is configured under "enforceOnKeyName". The key value is truncated to the first 128 bytes of the cookie value. If no such cookie is present in the request, the key type defaults to ALL. - HTTP_PATH: The URL path of the HTTP request. The key value is truncated to the first 128 bytes. - SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session. - REGION_CODE: The country/region from which the request originates.
27532
+ # Determines the key to enforce the rate_limit_threshold on. Possible values are: - ALL: A single rate limit threshold is applied to all the requests matching this rule. This is the default value if "enforceOnKeyConfigs" is not configured. - IP: The source IP address of the request is the key. Each IP has this limit enforced separately. - HTTP_HEADER: The value of the HTTP header whose name is configured under "enforceOnKeyName". The key value is truncated to the first 128 bytes of the header value. If no such header is present in the request, the key type defaults to ALL. - XFF_IP: The first IP address (i.e. the originating client IP address) specified in the list of IPs under X-Forwarded-For HTTP header. If no such header is present or the value is not a valid IP, the key defaults to the source IP address of the request i.e. key type IP. - HTTP_COOKIE: The value of the HTTP cookie whose name is configured under "enforceOnKeyName". The key value is truncated to the first 128 bytes of the cookie value. If no such cookie is present in the request, the key type defaults to ALL. - HTTP_PATH: The URL path of the HTTP request. The key value is truncated to the first 128 bytes. - SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session. - REGION_CODE: The country/region from which the request originates. - TLS_JA3_FINGERPRINT: JA3 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL. - USER_IP: The IP address of the originating client, which is resolved based on "userIpRequestHeaders" configured with the security policy. If there is no "userIpRequestHeaders" configuration or an IP address cannot be resolved from it, the key type defaults to IP.
27246
27533
  module EnforceOnKeyType
27247
27534
  # A value indicating that the enum field is not set.
27248
27535
  UNDEFINED_ENFORCE_ON_KEY_TYPE = 0
@@ -27261,6 +27548,10 @@ module Google
27261
27548
 
27262
27549
  SNI = 82_254
27263
27550
 
27551
+ TLS_JA3_FINGERPRINT = 327_127_933
27552
+
27553
+ USER_IP = 34_009_627
27554
+
27264
27555
  XFF_IP = 438_707_118
27265
27556
  end
27266
27557
  end
@@ -27855,7 +28146,7 @@ module Google
27855
28146
  # A request message for BackendBuckets.SetEdgeSecurityPolicy. See the method description for details.
27856
28147
  # @!attribute [rw] backend_bucket
27857
28148
  # @return [::String]
27858
- # Name of the BackendService resource to which the security policy should be set. The name should conform to RFC1035.
28149
+ # Name of the BackendBucket resource to which the security policy should be set. The name should conform to RFC1035.
27859
28150
  # @!attribute [rw] project
27860
28151
  # @return [::String]
27861
28152
  # Project ID for this request.
@@ -29390,6 +29681,9 @@ module Google
29390
29681
  # @!attribute [rw] request_id
29391
29682
  # @return [::String]
29392
29683
  # An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
29684
+ # @!attribute [rw] with_extended_notifications
29685
+ # @return [::Boolean]
29686
+ # Determines whether the customers receive notifications before migration. Only applicable to SF vms.
29393
29687
  # @!attribute [rw] zone
29394
29688
  # @return [::String]
29395
29689
  # The name of the zone for this request.
@@ -29445,6 +29739,9 @@ module Google
29445
29739
  # @!attribute [rw] download_bytes
29446
29740
  # @return [::Integer]
29447
29741
  # [Output Only] Number of bytes downloaded to restore a snapshot to a disk.
29742
+ # @!attribute [rw] enable_confidential_compute
29743
+ # @return [::Boolean]
29744
+ # Whether this snapshot is created from a confidential compute mode disk. [Output Only]: This field is not set by user, but from source disk.
29448
29745
  # @!attribute [rw] guest_os_features
29449
29746
  # @return [::Array<::Google::Cloud::Compute::V1::GuestOsFeature>]
29450
29747
  # [Output Only] A list of features to enable on the guest operating system. Applicable only for bootable images. Read Enabling guest operating system features to see a list of available options.
@@ -29472,6 +29769,9 @@ module Google
29472
29769
  # @!attribute [rw] name
29473
29770
  # @return [::String]
29474
29771
  # Name of the resource; provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
29772
+ # @!attribute [rw] satisfies_pzi
29773
+ # @return [::Boolean]
29774
+ # Output only. Reserved for future use.
29475
29775
  # @!attribute [rw] satisfies_pzs
29476
29776
  # @return [::Boolean]
29477
29777
  # [Output Only] Reserved for future use.
@@ -30030,7 +30330,7 @@ module Google
30030
30330
  extend ::Google::Protobuf::MessageExts::ClassMethods
30031
30331
  end
30032
30332
 
30033
- # Represents an SSL Policy resource. Use SSL policies to control the SSL features, such as versions and cipher suites, offered by an HTTPS or SSL Proxy load balancer. For more information, read SSL Policy Concepts.
30333
+ # Represents an SSL Policy resource. Use SSL policies to control SSL features, such as versions and cipher suites, that are offered by Application Load Balancers and proxy Network Load Balancers. For more information, read SSL policies overview.
30034
30334
  # @!attribute [rw] creation_timestamp
30035
30335
  # @return [::String]
30036
30336
  # [Output Only] Creation timestamp in RFC3339 text format.
@@ -30376,7 +30676,7 @@ module Google
30376
30676
  # A request message for Instances.Stop. See the method description for details.
30377
30677
  # @!attribute [rw] discard_local_ssd
30378
30678
  # @return [::Boolean]
30379
- # If true, discard the contents of any attached localSSD partitions. Default value is false.
30679
+ # This property is required if the instance has any attached Local SSD disks. If false, Local SSD data will be preserved when the instance is suspended. If true, the contents of any attached Local SSD disks will be discarded.
30380
30680
  # @!attribute [rw] instance
30381
30681
  # @return [::String]
30382
30682
  # Name of the instance resource to stop.
@@ -30450,14 +30750,17 @@ module Google
30450
30750
  # Check the PrivateIpv6GoogleAccess enum for the list of possible values.
30451
30751
  # @!attribute [rw] purpose
30452
30752
  # @return [::String]
30453
- # The purpose of the resource. This field can be either PRIVATE, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or INTERNAL_HTTPS_LOAD_BALANCER. PRIVATE is the default purpose for user-created subnets or subnets that are automatically created in auto mode networks. A subnet with purpose set to REGIONAL_MANAGED_PROXY is a user-created subnetwork that is reserved for regional Envoy-based load balancers. A subnet with purpose set to PRIVATE_SERVICE_CONNECT is used to publish services using Private Service Connect. A subnet with purpose set to INTERNAL_HTTPS_LOAD_BALANCER is a proxy-only subnet that can be used only by regional internal HTTP(S) load balancers. Note that REGIONAL_MANAGED_PROXY is the preferred setting for all regional Envoy load balancers. If unspecified, the subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
30753
+ # The purpose of the resource. This field can be either PRIVATE, GLOBAL_MANAGED_PROXY, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or PRIVATE is the default purpose for user-created subnets or subnets that are automatically created in auto mode networks. Subnets with purpose set to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY are user-created subnetworks that are reserved for Envoy-based load balancers. A subnet with purpose set to PRIVATE_SERVICE_CONNECT is used to publish services using Private Service Connect. If unspecified, the subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't supported if the subnet purpose field is set to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY.
30454
30754
  # Check the Purpose enum for the list of possible values.
30455
30755
  # @!attribute [rw] region
30456
30756
  # @return [::String]
30457
30757
  # URL of the region where the Subnetwork resides. This field can be set only at resource creation time.
30758
+ # @!attribute [rw] reserved_internal_range
30759
+ # @return [::String]
30760
+ # The URL of the reserved internal range.
30458
30761
  # @!attribute [rw] role
30459
30762
  # @return [::String]
30460
- # The role of subnetwork. Currently, this field is only used when purpose = REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or BACKUP. An ACTIVE subnetwork is one that is currently being used for Envoy-based load balancers in a region. A BACKUP subnetwork is one that is ready to be promoted to ACTIVE or is currently draining. This field can be updated with a patch request.
30763
+ # The role of subnetwork. Currently, this field is only used when purpose is set to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or BACKUP. An ACTIVE subnetwork is one that is currently being used for Envoy-based load balancers in a region. A BACKUP subnetwork is one that is ready to be promoted to ACTIVE or is currently draining. This field can be updated with a patch request.
30461
30764
  # Check the Role enum for the list of possible values.
30462
30765
  # @!attribute [rw] secondary_ip_ranges
30463
30766
  # @return [::Array<::Google::Cloud::Compute::V1::SubnetworkSecondaryRange>]
@@ -30506,7 +30809,7 @@ module Google
30506
30809
  ENABLE_OUTBOUND_VM_ACCESS_TO_GOOGLE = 288_210_263
30507
30810
  end
30508
30811
 
30509
- # The purpose of the resource. This field can be either PRIVATE, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or INTERNAL_HTTPS_LOAD_BALANCER. PRIVATE is the default purpose for user-created subnets or subnets that are automatically created in auto mode networks. A subnet with purpose set to REGIONAL_MANAGED_PROXY is a user-created subnetwork that is reserved for regional Envoy-based load balancers. A subnet with purpose set to PRIVATE_SERVICE_CONNECT is used to publish services using Private Service Connect. A subnet with purpose set to INTERNAL_HTTPS_LOAD_BALANCER is a proxy-only subnet that can be used only by regional internal HTTP(S) load balancers. Note that REGIONAL_MANAGED_PROXY is the preferred setting for all regional Envoy load balancers. If unspecified, the subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
30812
+ # The purpose of the resource. This field can be either PRIVATE, GLOBAL_MANAGED_PROXY, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or PRIVATE is the default purpose for user-created subnets or subnets that are automatically created in auto mode networks. Subnets with purpose set to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY are user-created subnetworks that are reserved for Envoy-based load balancers. A subnet with purpose set to PRIVATE_SERVICE_CONNECT is used to publish services using Private Service Connect. If unspecified, the subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't supported if the subnet purpose field is set to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY.
30510
30813
  module Purpose
30511
30814
  # A value indicating that the enum field is not set.
30512
30815
  UNDEFINED_PURPOSE = 0
@@ -30514,7 +30817,7 @@ module Google
30514
30817
  # Subnet reserved for Global Envoy-based Load Balancing.
30515
30818
  GLOBAL_MANAGED_PROXY = 236_463_602
30516
30819
 
30517
- # Subnet reserved for Internal HTTP(S) Load Balancing.
30820
+ # Subnet reserved for Internal HTTP(S) Load Balancing. This is a legacy purpose, please use REGIONAL_MANAGED_PROXY instead.
30518
30821
  INTERNAL_HTTPS_LOAD_BALANCER = 248_748_889
30519
30822
 
30520
30823
  # Regular user created or automatically created subnet.
@@ -30533,7 +30836,7 @@ module Google
30533
30836
  REGIONAL_MANAGED_PROXY = 153_049_966
30534
30837
  end
30535
30838
 
30536
- # The role of subnetwork. Currently, this field is only used when purpose = REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or BACKUP. An ACTIVE subnetwork is one that is currently being used for Envoy-based load balancers in a region. A BACKUP subnetwork is one that is ready to be promoted to ACTIVE or is currently draining. This field can be updated with a patch request.
30839
+ # The role of subnetwork. Currently, this field is only used when purpose is set to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or BACKUP. An ACTIVE subnetwork is one that is currently being used for Envoy-based load balancers in a region. A BACKUP subnetwork is one that is ready to be promoted to ACTIVE or is currently draining. This field can be updated with a patch request.
30537
30840
  module Role
30538
30841
  # A value indicating that the enum field is not set.
30539
30842
  UNDEFINED_ROLE = 0
@@ -30694,6 +30997,9 @@ module Google
30694
30997
  # @!attribute [rw] range_name
30695
30998
  # @return [::String]
30696
30999
  # The name associated with this subnetwork secondary range, used when adding an alias IP range to a VM instance. The name must be 1-63 characters long, and comply with RFC1035. The name must be unique within the subnetwork.
31000
+ # @!attribute [rw] reserved_internal_range
31001
+ # @return [::String]
31002
+ # The URL of the reserved internal range.
30697
31003
  class SubnetworkSecondaryRange
30698
31004
  include ::Google::Protobuf::MessageExts
30699
31005
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -30749,7 +31055,7 @@ module Google
30749
31055
  # A request message for Instances.Suspend. See the method description for details.
30750
31056
  # @!attribute [rw] discard_local_ssd
30751
31057
  # @return [::Boolean]
30752
- # If true, discard the contents of any attached localSSD partitions. Default value is false.
31058
+ # This property is required if the instance has any attached Local SSD disks. If false, Local SSD data will be preserved when the instance is suspended. If true, the contents of any attached Local SSD disks will be discarded.
30753
31059
  # @!attribute [rw] instance
30754
31060
  # @return [::String]
30755
31061
  # Name of the instance resource to suspend.
@@ -30790,7 +31096,7 @@ module Google
30790
31096
  # Not supported.
30791
31097
  # @!attribute [rw] port_specification
30792
31098
  # @return [::String]
30793
- # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
31099
+ # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for passthrough load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for passthrough load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
30794
31100
  # Check the PortSpecification enum for the list of possible values.
30795
31101
  # @!attribute [rw] proxy_header
30796
31102
  # @return [::String]
@@ -30806,7 +31112,7 @@ module Google
30806
31112
  include ::Google::Protobuf::MessageExts
30807
31113
  extend ::Google::Protobuf::MessageExts::ClassMethods
30808
31114
 
30809
- # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
31115
+ # Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health check. Supported by backend services for passthrough load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for passthrough load balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend service's named port in the instance group's list of named ports.
30810
31116
  module PortSpecification
30811
31117
  # A value indicating that the enum field is not set.
30812
31118
  UNDEFINED_PORT_SPECIFICATION = 0
@@ -31311,7 +31617,7 @@ module Google
31311
31617
  extend ::Google::Protobuf::MessageExts::ClassMethods
31312
31618
  end
31313
31619
 
31314
- # Represents a Target Pool resource. Target pools are used for network TCP/UDP load balancing. A target pool references member instances, an associated legacy HttpHealthCheck resource, and, optionally, a backup target pool. For more information, read Using target pools.
31620
+ # Represents a Target Pool resource. Target pools are used with external passthrough Network Load Balancers. A target pool references member instances, an associated legacy HttpHealthCheck resource, and, optionally, a backup target pool. For more information, read Using target pools.
31315
31621
  # @!attribute [rw] backup_pool
31316
31622
  # @return [::String]
31317
31623
  # The server-defined URL for the resource. This field is applicable only when the containing target pool is serving a forwarding rule as the primary pool, and its failoverRatio field is properly set to a value between [0, 1]. backupPool and failoverRatio together define the fallback behavior of the primary target pool: if the ratio of the healthy instances in the primary pool is at or below failoverRatio, traffic arriving at the load-balanced IP will be directed to the backup pool. In case where failoverRatio and backupPool are not set, or all the instances in the backup pool are unhealthy, the traffic will be directed back to the primary pool in the "force" mode, where traffic will be spread to the healthy instances with the best effort, or to all instances when no instance is healthy.
@@ -31549,7 +31855,7 @@ module Google
31549
31855
  extend ::Google::Protobuf::MessageExts::ClassMethods
31550
31856
  end
31551
31857
 
31552
- # Represents a Target SSL Proxy resource. A target SSL proxy is a component of a SSL Proxy load balancer. Global forwarding rules reference a target SSL proxy, and the target proxy then references an external backend service. For more information, read Using Target Proxies.
31858
+ # Represents a Target SSL Proxy resource. A target SSL proxy is a component of a Proxy Network Load Balancer. The forwarding rule references the target SSL proxy, and the target proxy then references a backend service. For more information, read Proxy Network Load Balancer overview.
31553
31859
  # @!attribute [rw] certificate_map
31554
31860
  # @return [::String]
31555
31861
  # URL of a certificate map that identifies a certificate map associated with the given target proxy. This field can only be set for global target proxies. If set, sslCertificates will be ignored. Accepted format is //certificatemanager.googleapis.com/projects/\\{project }/locations/\\{location}/certificateMaps/\\{resourceName}.
@@ -31661,7 +31967,7 @@ module Google
31661
31967
  end
31662
31968
  end
31663
31969
 
31664
- # Represents a Target TCP Proxy resource. A target TCP proxy is a component of a TCP Proxy load balancer. Global forwarding rules reference target TCP proxy, and the target proxy then references an external backend service. For more information, read TCP Proxy Load Balancing overview.
31970
+ # Represents a Target TCP Proxy resource. A target TCP proxy is a component of a Proxy Network Load Balancer. The forwarding rule references the target TCP proxy, and the target proxy then references a backend service. For more information, read Proxy Network Load Balancer overview.
31665
31971
  # @!attribute [rw] creation_timestamp
31666
31972
  # @return [::String]
31667
31973
  # [Output Only] Creation timestamp in RFC3339 text format.
@@ -33222,11 +33528,11 @@ module Google
33222
33528
  # Network URL.
33223
33529
  # @!attribute [rw] purpose
33224
33530
  # @return [::String]
33225
- # The purpose of the resource. This field can be either PRIVATE, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or INTERNAL_HTTPS_LOAD_BALANCER. PRIVATE is the default purpose for user-created subnets or subnets that are automatically created in auto mode networks. A subnet with purpose set to REGIONAL_MANAGED_PROXY is a user-created subnetwork that is reserved for regional Envoy-based load balancers. A subnet with purpose set to PRIVATE_SERVICE_CONNECT is used to publish services using Private Service Connect. A subnet with purpose set to INTERNAL_HTTPS_LOAD_BALANCER is a proxy-only subnet that can be used only by regional internal HTTP(S) load balancers. Note that REGIONAL_MANAGED_PROXY is the preferred setting for all regional Envoy load balancers. If unspecified, the subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
33531
+ # The purpose of the resource. This field can be either PRIVATE, GLOBAL_MANAGED_PROXY, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or PRIVATE is the default purpose for user-created subnets or subnets that are automatically created in auto mode networks. Subnets with purpose set to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY are user-created subnetworks that are reserved for Envoy-based load balancers. A subnet with purpose set to PRIVATE_SERVICE_CONNECT is used to publish services using Private Service Connect. If unspecified, the subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't supported if the subnet purpose field is set to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY.
33226
33532
  # Check the Purpose enum for the list of possible values.
33227
33533
  # @!attribute [rw] role
33228
33534
  # @return [::String]
33229
- # The role of subnetwork. Currently, this field is only used when purpose = REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or BACKUP. An ACTIVE subnetwork is one that is currently being used for Envoy-based load balancers in a region. A BACKUP subnetwork is one that is ready to be promoted to ACTIVE or is currently draining. This field can be updated with a patch request.
33535
+ # The role of subnetwork. Currently, this field is only used when purpose is set to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or BACKUP. An ACTIVE subnetwork is one that is currently being used for Envoy-based load balancers in a region. A BACKUP subnetwork is one that is ready to be promoted to ACTIVE or is currently draining. This field can be updated with a patch request.
33230
33536
  # Check the Role enum for the list of possible values.
33231
33537
  # @!attribute [rw] secondary_ip_ranges
33232
33538
  # @return [::Array<::Google::Cloud::Compute::V1::UsableSubnetworkSecondaryRange>]
@@ -33254,7 +33560,7 @@ module Google
33254
33560
  INTERNAL = 279_295_677
33255
33561
  end
33256
33562
 
33257
- # The purpose of the resource. This field can be either PRIVATE, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or INTERNAL_HTTPS_LOAD_BALANCER. PRIVATE is the default purpose for user-created subnets or subnets that are automatically created in auto mode networks. A subnet with purpose set to REGIONAL_MANAGED_PROXY is a user-created subnetwork that is reserved for regional Envoy-based load balancers. A subnet with purpose set to PRIVATE_SERVICE_CONNECT is used to publish services using Private Service Connect. A subnet with purpose set to INTERNAL_HTTPS_LOAD_BALANCER is a proxy-only subnet that can be used only by regional internal HTTP(S) load balancers. Note that REGIONAL_MANAGED_PROXY is the preferred setting for all regional Envoy load balancers. If unspecified, the subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
33563
+ # The purpose of the resource. This field can be either PRIVATE, GLOBAL_MANAGED_PROXY, REGIONAL_MANAGED_PROXY, PRIVATE_SERVICE_CONNECT, or PRIVATE is the default purpose for user-created subnets or subnets that are automatically created in auto mode networks. Subnets with purpose set to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY are user-created subnetworks that are reserved for Envoy-based load balancers. A subnet with purpose set to PRIVATE_SERVICE_CONNECT is used to publish services using Private Service Connect. If unspecified, the subnet purpose defaults to PRIVATE. The enableFlowLogs field isn't supported if the subnet purpose field is set to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY.
33258
33564
  module Purpose
33259
33565
  # A value indicating that the enum field is not set.
33260
33566
  UNDEFINED_PURPOSE = 0
@@ -33262,7 +33568,7 @@ module Google
33262
33568
  # Subnet reserved for Global Envoy-based Load Balancing.
33263
33569
  GLOBAL_MANAGED_PROXY = 236_463_602
33264
33570
 
33265
- # Subnet reserved for Internal HTTP(S) Load Balancing.
33571
+ # Subnet reserved for Internal HTTP(S) Load Balancing. This is a legacy purpose, please use REGIONAL_MANAGED_PROXY instead.
33266
33572
  INTERNAL_HTTPS_LOAD_BALANCER = 248_748_889
33267
33573
 
33268
33574
  # Regular user created or automatically created subnet.
@@ -33281,7 +33587,7 @@ module Google
33281
33587
  REGIONAL_MANAGED_PROXY = 153_049_966
33282
33588
  end
33283
33589
 
33284
- # The role of subnetwork. Currently, this field is only used when purpose = REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or BACKUP. An ACTIVE subnetwork is one that is currently being used for Envoy-based load balancers in a region. A BACKUP subnetwork is one that is ready to be promoted to ACTIVE or is currently draining. This field can be updated with a patch request.
33590
+ # The role of subnetwork. Currently, this field is only used when purpose is set to GLOBAL_MANAGED_PROXY or REGIONAL_MANAGED_PROXY. The value can be set to ACTIVE or BACKUP. An ACTIVE subnetwork is one that is currently being used for Envoy-based load balancers in a region. A BACKUP subnetwork is one that is ready to be promoted to ACTIVE or is currently draining. This field can be updated with a patch request.
33285
33591
  module Role
33286
33592
  # A value indicating that the enum field is not set.
33287
33593
  UNDEFINED_ROLE = 0