google-cloud-network_security-v1 0.a → 0.1.0

data/proto_docs/google/cloud/networksecurity/v1/security_profile_group_urlfiltering.rb

@@ -0,0 +1,66 @@
+# frozen_string_literal: true
+
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module NetworkSecurity
+      module V1
+        # UrlFilteringProfile defines filters based on URL.
+        # @!attribute [rw] url_filters
+        #   @return [::Array<::Google::Cloud::NetworkSecurity::V1::UrlFilter>]
+        #     Optional. The list of filtering configs in which each config defines an
+        #     action to take for some URL match.
+        class UrlFilteringProfile
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # A URL filter defines an action to take for some URL match.
+        # @!attribute [rw] filtering_action
+        #   @return [::Google::Cloud::NetworkSecurity::V1::UrlFilter::UrlFilteringAction]
+        #     Required. The action taken when this filter is applied.
+        # @!attribute [rw] urls
+        #   @return [::Array<::String>]
+        #     Required. The list of strings that a URL must match with for this filter to
+        #     be applied.
+        # @!attribute [rw] priority
+        #   @return [::Integer]
+        #     Required. The priority of this filter within the URL Filtering Profile.
+        #     Lower integers indicate higher priorities. The priority of a filter must be
+        #     unique within a URL Filtering Profile.
+        class UrlFilter
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # Action to be taken when a URL matches a filter.
+          module UrlFilteringAction
+            # Filtering action not specified.
+            URL_FILTERING_ACTION_UNSPECIFIED = 0
+
+            # The connection matching this filter will be allowed to transmit.
+            ALLOW = 1
+
+            # The connection matching this filter will be dropped.
+            DENY = 2
+          end
+        end
+      end
+    end
+  end
+end

data/proto_docs/google/cloud/networksecurity/v1/server_tls_policy.rb

@@ -0,0 +1,251 @@
+# frozen_string_literal: true
+
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module NetworkSecurity
+      module V1
+        # ServerTlsPolicy is a resource that specifies how a server should authenticate
+        # incoming requests. This resource itself does not affect configuration unless
+        # it is attached to a target HTTPS proxy or endpoint config selector resource.
+        #
+        # ServerTlsPolicy in the form accepted by Application Load Balancers can
+        # be attached only to TargetHttpsProxy with an `EXTERNAL`, `EXTERNAL_MANAGED`
+        # or `INTERNAL_MANAGED` load balancing scheme. Traffic Director compatible
+        # ServerTlsPolicies can be attached to EndpointPolicy and TargetHttpsProxy with
+        # Traffic Director `INTERNAL_SELF_MANAGED` load balancing scheme.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. Name of the ServerTlsPolicy resource. It matches the pattern
+        #     `projects/*/locations/{location}/serverTlsPolicies/{server_tls_policy}`
+        # @!attribute [rw] description
+        #   @return [::String]
+        #     Free-text description of the resource.
+        # @!attribute [r] create_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The timestamp when the resource was created.
+        # @!attribute [r] update_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The timestamp when the resource was updated.
+        # @!attribute [rw] labels
+        #   @return [::Google::Protobuf::Map{::String => ::String}]
+        #     Set of label tags associated with the resource.
+        # @!attribute [rw] allow_open
+        #   @return [::Boolean]
+        #     This field applies only for Traffic Director policies. It is must be set to
+        #     false for Application Load Balancer policies.
+        #
+        #     Determines if server allows plaintext connections. If set to true, server
+        #     allows plain text connections. By default, it is set to false. This setting
+        #     is not exclusive of other encryption modes. For example, if `allow_open`
+        #     and `mtls_policy` are set, server allows both plain text and mTLS
+        #     connections. See documentation of other encryption modes to confirm
+        #     compatibility.
+        #
+        #     Consider using it if you wish to upgrade in place your deployment to TLS
+        #     while having mixed TLS and non-TLS traffic reaching port :80.
+        # @!attribute [rw] server_certificate
+        #   @return [::Google::Cloud::NetworkSecurity::V1::CertificateProvider]
+        #     Optional if policy is to be used with Traffic Director. For Application
+        #     Load Balancers must be empty.
+        #
+        #     Defines a mechanism to provision server identity (public and private keys).
+        #     Cannot be combined with `allow_open` as a permissive mode that allows both
+        #     plain text and TLS is not supported.
+        # @!attribute [rw] mtls_policy
+        #   @return [::Google::Cloud::NetworkSecurity::V1::ServerTlsPolicy::MTLSPolicy]
+        #     This field is required if the policy is used with Application Load
+        #     Balancers. This field can be empty for Traffic Director.
+        #
+        #     Defines a mechanism to provision peer validation certificates for peer to
+        #     peer authentication (Mutual TLS - mTLS). If not specified, client
+        #     certificate will not be requested. The connection is treated as TLS and not
+        #     mTLS. If `allow_open` and `mtls_policy` are set, server allows both plain
+        #     text and mTLS connections.
+        class ServerTlsPolicy
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # Specification of the MTLSPolicy.
+          # @!attribute [rw] client_validation_mode
+          #   @return [::Google::Cloud::NetworkSecurity::V1::ServerTlsPolicy::MTLSPolicy::ClientValidationMode]
+          #     When the client presents an invalid certificate or no certificate to the
+          #     load balancer, the `client_validation_mode` specifies how the client
+          #     connection is handled.
+          #
+          #     Required if the policy is to be used with the Application Load
+          #     Balancers. For Traffic Director it must be empty.
+          # @!attribute [rw] client_validation_ca
+          #   @return [::Array<::Google::Cloud::NetworkSecurity::V1::ValidationCA>]
+          #     Required if the policy is to be used with Traffic Director. For
+          #     Application Load Balancers it must be empty.
+          #
+          #     Defines the mechanism to obtain the Certificate Authority certificate to
+          #     validate the client certificate.
+          # @!attribute [rw] client_validation_trust_config
+          #   @return [::String]
+          #     Reference to the TrustConfig from certificatemanager.googleapis.com
+          #     namespace.
+          #
+          #     If specified, the chain validation will be performed against certificates
+          #     configured in the given TrustConfig.
+          #
+          #     Allowed only if the policy is to be used with Application Load
+          #     Balancers.
+          class MTLSPolicy
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+
+            # Mutual TLS certificate validation mode.
+            module ClientValidationMode
+              # Not allowed.
+              CLIENT_VALIDATION_MODE_UNSPECIFIED = 0
+
+              # Allow connection even if certificate chain validation
+              # of the client certificate failed or no client certificate was
+              # presented. The proof of possession of the private key is always checked
+              # if client certificate was presented. This mode requires the backend to
+              # implement processing of data extracted from a client certificate to
+              # authenticate the peer, or to reject connections if the client
+              # certificate fingerprint is missing.
+              ALLOW_INVALID_OR_MISSING_CLIENT_CERT = 1
+
+              # Require a client certificate and allow connection to the backend only
+              # if validation of the client certificate passed.
+              #
+              # If set, requires a reference to non-empty TrustConfig specified in
+              # `client_validation_trust_config`.
+              REJECT_INVALID = 2
+            end
+          end
+
+          # @!attribute [rw] key
+          #   @return [::String]
+          # @!attribute [rw] value
+          #   @return [::String]
+          class LabelsEntry
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+        end
+
+        # Request used by the ListServerTlsPolicies method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The project and location from which the ServerTlsPolicies should
+        #     be listed, specified in the format `projects/*/locations/{location}`.
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     Maximum number of ServerTlsPolicies to return per call.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     The value returned by the last `ListServerTlsPoliciesResponse`
+        #     Indicates that this is a continuation of a prior
+        #     `ListServerTlsPolicies` call, and that the system
+        #     should return the next page of data.
+        # @!attribute [rw] return_partial_success
+        #   @return [::Boolean]
+        #     Optional. Setting this field to `true` will opt the request into returning
+        #     the resources that are reachable, and into including the names of those
+        #     that were unreachable in the [ListServerTlsPoliciesResponse.unreachable]
+        #     field. This can only be `true` when reading across collections e.g. when
+        #     `parent` is set to `"projects/example/locations/-"`.
+        class ListServerTlsPoliciesRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Response returned by the ListServerTlsPolicies method.
+        # @!attribute [rw] server_tls_policies
+        #   @return [::Array<::Google::Cloud::NetworkSecurity::V1::ServerTlsPolicy>]
+        #     List of ServerTlsPolicy resources.
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     If there might be more results than those appearing in this response, then
+        #     `next_page_token` is included. To get the next set of results, call this
+        #     method again using the value of `next_page_token` as `page_token`.
+        # @!attribute [rw] unreachable
+        #   @return [::Array<::String>]
+        #     Unreachable resources. Populated when the request opts into
+        #     `return_partial_success` and reading across collections e.g. when
+        #     attempting to list all resources across all supported locations.
+        class ListServerTlsPoliciesResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the GetServerTlsPolicy method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A name of the ServerTlsPolicy to get. Must be in the format
+        #     `projects/*/locations/{location}/serverTlsPolicies/*`.
+        class GetServerTlsPolicyRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the CreateServerTlsPolicy method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The parent resource of the ServerTlsPolicy. Must be in
+        #     the format `projects/*/locations/{location}`.
+        # @!attribute [rw] server_tls_policy_id
+        #   @return [::String]
+        #     Required. Short name of the ServerTlsPolicy resource to be created. This
+        #     value should be 1-63 characters long, containing only letters, numbers,
+        #     hyphens, and underscores, and should not start with a number. E.g.
+        #     "server_mtls_policy".
+        # @!attribute [rw] server_tls_policy
+        #   @return [::Google::Cloud::NetworkSecurity::V1::ServerTlsPolicy]
+        #     Required. ServerTlsPolicy resource to be created.
+        class CreateServerTlsPolicyRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by UpdateServerTlsPolicy method.
+        # @!attribute [rw] update_mask
+        #   @return [::Google::Protobuf::FieldMask]
+        #     Optional. Field mask is used to specify the fields to be overwritten in the
+        #     ServerTlsPolicy resource by the update.  The fields
+        #     specified in the update_mask are relative to the resource, not
+        #     the full request. A field will be overwritten if it is in the
+        #     mask. If the user does not provide a mask then all fields will be
+        #     overwritten.
+        # @!attribute [rw] server_tls_policy
+        #   @return [::Google::Cloud::NetworkSecurity::V1::ServerTlsPolicy]
+        #     Required. Updated ServerTlsPolicy resource.
+        class UpdateServerTlsPolicyRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the DeleteServerTlsPolicy method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A name of the ServerTlsPolicy to delete. Must be in
+        #     the format `projects/*/locations/{location}/serverTlsPolicies/*`.
+        class DeleteServerTlsPolicyRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+      end
+    end
+  end
+end