google-cloud-network_security-v1 0.a → 0.1.0

data/proto_docs/google/cloud/networksecurity/v1/tls_inspection_policy.rb

@@ -0,0 +1,239 @@
+# frozen_string_literal: true
+
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module NetworkSecurity
+      module V1
+        # The TlsInspectionPolicy resource contains references to CA pools in
+        # Certificate Authority Service and associated metadata.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. Name of the resource. Name is of the form
+        #     projects/\\{project}/locations/\\{location}/tlsInspectionPolicies/\\{tls_inspection_policy}
+        #     tls_inspection_policy should match the
+        #     pattern:(^[a-z]([a-z0-9-]\\{0,61}[a-z0-9])?$).
+        # @!attribute [rw] description
+        #   @return [::String]
+        #     Optional. Free-text description of the resource.
+        # @!attribute [r] create_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The timestamp when the resource was created.
+        # @!attribute [r] update_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The timestamp when the resource was updated.
+        # @!attribute [rw] ca_pool
+        #   @return [::String]
+        #     Required. A CA pool resource used to issue interception certificates.
+        #     The CA pool string has a relative resource path following the form
+        #     "projects/\\{project}/locations/\\{location}/caPools/\\{ca_pool}".
+        # @!attribute [rw] trust_config
+        #   @return [::String]
+        #     Optional. A TrustConfig resource used when making a connection to the TLS
+        #     server. This is a relative resource path following the form
+        #     "projects/\\{project}/locations/\\{location}/trustConfigs/\\{trust_config}". This
+        #     is necessary to intercept TLS connections to servers with certificates
+        #     signed by a private CA or self-signed certificates.
+        #     Note that Secure Web Proxy does not yet honor this field.
+        # @!attribute [rw] exclude_public_ca_set
+        #   @return [::Boolean]
+        #     Optional. If  FALSE (the default), use our default set of public CAs in
+        #     addition to any CAs specified in trust_config. These public CAs are
+        #     currently based on the Mozilla Root Program and are subject to change over
+        #     time. If TRUE, do not accept our default set of public CAs. Only CAs
+        #     specified in trust_config will be accepted. This defaults to FALSE (use
+        #     public CAs in addition to trust_config) for backwards compatibility, but
+        #     trusting public root CAs is *not recommended* unless the traffic in
+        #     question is outbound to public web servers. When possible, prefer setting
+        #     this to "false" and explicitly specifying trusted CAs and certificates in a
+        #     TrustConfig. Note that Secure Web Proxy does not yet honor this field.
+        # @!attribute [rw] min_tls_version
+        #   @return [::Google::Cloud::NetworkSecurity::V1::TlsInspectionPolicy::TlsVersion]
+        #     Optional. Minimum TLS version that the firewall should use when negotiating
+        #     connections with both clients and servers. If this is not set, then the
+        #     default value is to allow the broadest set of clients and servers (TLS 1.0
+        #     or higher). Setting this to more restrictive values may improve security,
+        #     but may also prevent the firewall from connecting to some clients or
+        #     servers.
+        #     Note that Secure Web Proxy does not yet honor this field.
+        # @!attribute [rw] tls_feature_profile
+        #   @return [::Google::Cloud::NetworkSecurity::V1::TlsInspectionPolicy::Profile]
+        #     Optional. The selected Profile. If this is not set, then the default value
+        #     is to allow the broadest set of clients and servers ("PROFILE_COMPATIBLE").
+        #     Setting this to more restrictive values may improve security, but may also
+        #     prevent the TLS inspection proxy from connecting to some clients or
+        #     servers. Note that Secure Web Proxy does not yet honor this field.
+        # @!attribute [rw] custom_tls_features
+        #   @return [::Array<::String>]
+        #     Optional. List of custom TLS cipher suites selected.
+        #     This field is valid only if the selected tls_feature_profile is CUSTOM.
+        #     The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the
+        #     set of features that can be specified in this list.
+        #     Note that Secure Web Proxy does not yet honor this field.
+        class TlsInspectionPolicy
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # The minimum version of TLS protocol that can be used by clients or servers
+          # to establish a connection with the TLS inspection proxy.
+          module TlsVersion
+            # Indicates no TLS version was specified.
+            TLS_VERSION_UNSPECIFIED = 0
+
+            # TLS 1.0
+            TLS_1_0 = 1
+
+            # TLS 1.1
+            TLS_1_1 = 2
+
+            # TLS 1.2
+            TLS_1_2 = 3
+
+            # TLS 1.3
+            TLS_1_3 = 4
+          end
+
+          # Profile specifies the set of TLS cipher suites (and possibly
+          # other features in the future) that can be used by the firewall when
+          # negotiating TLS connections with clients and servers. The meaning of these
+          # fields is identical to the load balancers' SSLPolicy resource.
+          module Profile
+            # Indicates no profile was specified.
+            PROFILE_UNSPECIFIED = 0
+
+            # Compatible profile. Allows the broadest set of clients, even those
+            # which support only out-of-date SSL features to negotiate with the TLS
+            # inspection proxy.
+            PROFILE_COMPATIBLE = 1
+
+            # Modern profile. Supports a wide set of SSL features, allowing modern
+            # clients to negotiate SSL with the TLS inspection proxy.
+            PROFILE_MODERN = 2
+
+            # Restricted profile. Supports a reduced set of SSL features, intended to
+            # meet stricter compliance requirements.
+            PROFILE_RESTRICTED = 3
+
+            # Custom profile. Allow only the set of allowed SSL features specified in
+            # the custom_features field of SslPolicy.
+            PROFILE_CUSTOM = 4
+          end
+        end
+
+        # Request used by the CreateTlsInspectionPolicy method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The parent resource of the TlsInspectionPolicy. Must be in the
+        #     format `projects/{project}/locations/{location}`.
+        # @!attribute [rw] tls_inspection_policy_id
+        #   @return [::String]
+        #     Required. Short name of the TlsInspectionPolicy resource to be created.
+        #     This value should be 1-63 characters long, containing only
+        #     letters, numbers, hyphens, and underscores, and should not start
+        #     with a number. E.g. "tls_inspection_policy1".
+        # @!attribute [rw] tls_inspection_policy
+        #   @return [::Google::Cloud::NetworkSecurity::V1::TlsInspectionPolicy]
+        #     Required. TlsInspectionPolicy resource to be created.
+        class CreateTlsInspectionPolicyRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used with the ListTlsInspectionPolicies method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The project and location from which the TlsInspectionPolicies
+        #     should be listed, specified in the format
+        #     `projects/{project}/locations/{location}`.
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     Maximum number of TlsInspectionPolicies to return per call.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     The value returned by the last
+        #     'ListTlsInspectionPoliciesResponse' Indicates that this is a
+        #     continuation of a prior 'ListTlsInspectionPolicies' call, and
+        #     that the system should return the next page of data.
+        class ListTlsInspectionPoliciesRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Response returned by the ListTlsInspectionPolicies method.
+        # @!attribute [rw] tls_inspection_policies
+        #   @return [::Array<::Google::Cloud::NetworkSecurity::V1::TlsInspectionPolicy>]
+        #     List of TlsInspectionPolicies resources.
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     If there might be more results than those appearing in this response, then
+        #     'next_page_token' is included. To get the next set of results, call this
+        #     method again using the value of 'next_page_token' as 'page_token'.
+        # @!attribute [rw] unreachable
+        #   @return [::Array<::String>]
+        #     Locations that could not be reached.
+        class ListTlsInspectionPoliciesResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the GetTlsInspectionPolicy method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A name of the TlsInspectionPolicy to get. Must be in the format
+        #     `projects/{project}/locations/{location}/tlsInspectionPolicies/{tls_inspection_policy}`.
+        class GetTlsInspectionPolicyRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the DeleteTlsInspectionPolicy method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A name of the TlsInspectionPolicy to delete. Must be in the
+        #     format
+        #     `projects/{project}/locations/{location}/tlsInspectionPolicies/{tls_inspection_policy}`.
+        # @!attribute [rw] force
+        #   @return [::Boolean]
+        #     If set to true, any rules for this TlsInspectionPolicy will also be
+        #     deleted. (Otherwise, the request will only work if the TlsInspectionPolicy
+        #     has no rules.)
+        class DeleteTlsInspectionPolicyRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the UpdateTlsInspectionPolicy method.
+        # @!attribute [rw] update_mask
+        #   @return [::Google::Protobuf::FieldMask]
+        #     Optional. Field mask is used to specify the fields to be overwritten in the
+        #     TlsInspectionPolicy resource by the update.
+        #     The fields specified in the update_mask are relative to the resource, not
+        #     the full request. A field will be overwritten if it is in the mask. If the
+        #     user does not provide a mask then all fields will be overwritten.
+        # @!attribute [rw] tls_inspection_policy
+        #   @return [::Google::Cloud::NetworkSecurity::V1::TlsInspectionPolicy]
+        #     Required. Updated TlsInspectionPolicy resource.
+        class UpdateTlsInspectionPolicyRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+      end
+    end
+  end
+end

data/proto_docs/google/cloud/networksecurity/v1/url_list.rb

@@ -0,0 +1,144 @@
+# frozen_string_literal: true
+
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module NetworkSecurity
+      module V1
+        # UrlList proto helps users to set reusable, independently manageable lists
+        # of hosts, host patterns, URLs, URL patterns.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. Name of the resource provided by the user.
+        #     Name is of the form
+        #     projects/\\{project}/locations/\\{location}/urlLists/\\{url_list}
+        #     url_list should match the
+        #     pattern:(^[a-z]([a-z0-9-]\\{0,61}[a-z0-9])?$).
+        # @!attribute [r] create_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. Time when the security policy was created.
+        # @!attribute [r] update_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. Time when the security policy was updated.
+        # @!attribute [rw] description
+        #   @return [::String]
+        #     Optional. Free-text description of the resource.
+        # @!attribute [rw] values
+        #   @return [::Array<::String>]
+        #     Required. FQDNs and URLs.
+        class UrlList
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the ListUrlList method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The project and location from which the UrlLists should
+        #     be listed, specified in the format
+        #     `projects/{project}/locations/{location}`.
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     Maximum number of UrlLists to return per call.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     The value returned by the last `ListUrlListsResponse`
+        #     Indicates that this is a continuation of a prior
+        #     `ListUrlLists` call, and that the system
+        #     should return the next page of data.
+        class ListUrlListsRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Response returned by the ListUrlLists method.
+        # @!attribute [rw] url_lists
+        #   @return [::Array<::Google::Cloud::NetworkSecurity::V1::UrlList>]
+        #     List of UrlList resources.
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     If there might be more results than those appearing in this response, then
+        #     `next_page_token` is included. To get the next set of results, call this
+        #     method again using the value of `next_page_token` as `page_token`.
+        # @!attribute [rw] unreachable
+        #   @return [::Array<::String>]
+        #     Locations that could not be reached.
+        class ListUrlListsResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the GetUrlList method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A name of the UrlList to get. Must be in the format
+        #     `projects/*/locations/{location}/urlLists/*`.
+        class GetUrlListRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the CreateUrlList method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The parent resource of the UrlList. Must be in
+        #     the format `projects/*/locations/{location}`.
+        # @!attribute [rw] url_list_id
+        #   @return [::String]
+        #     Required. Short name of the UrlList resource to be created. This value
+        #     should be 1-63 characters long, containing only letters, numbers, hyphens,
+        #     and underscores, and should not start with a number. E.g. "url_list".
+        # @!attribute [rw] url_list
+        #   @return [::Google::Cloud::NetworkSecurity::V1::UrlList]
+        #     Required. UrlList resource to be created.
+        class CreateUrlListRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by UpdateUrlList method.
+        # @!attribute [rw] update_mask
+        #   @return [::Google::Protobuf::FieldMask]
+        #     Optional. Field mask is used to specify the fields to be overwritten in the
+        #     UrlList resource by the update.  The fields
+        #     specified in the update_mask are relative to the resource, not
+        #     the full request. A field will be overwritten if it is in the
+        #     mask. If the user does not provide a mask then all fields will be
+        #     overwritten.
+        # @!attribute [rw] url_list
+        #   @return [::Google::Cloud::NetworkSecurity::V1::UrlList]
+        #     Required. Updated UrlList resource.
+        class UpdateUrlListRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the DeleteUrlList method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A name of the UrlList to delete. Must be in
+        #     the format `projects/*/locations/{location}/urlLists/*`.
+        class DeleteUrlListRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+      end
+    end
+  end
+end

data/proto_docs/google/longrunning/operations.rb

@@ -0,0 +1,191 @@
+# frozen_string_literal: true
+
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Longrunning
+    # This resource represents a long-running operation that is the result of a
+    # network API call.
+    # @!attribute [rw] name
+    #   @return [::String]
+    #     The server-assigned name, which is only unique within the same service that
+    #     originally returns it. If you use the default HTTP mapping, the
+    #     `name` should be a resource name ending with `operations/{unique_id}`.
+    # @!attribute [rw] metadata
+    #   @return [::Google::Protobuf::Any]
+    #     Service-specific metadata associated with the operation.  It typically
+    #     contains progress information and common metadata such as create time.
+    #     Some services might not provide such metadata.  Any method that returns a
+    #     long-running operation should document the metadata type, if any.
+    # @!attribute [rw] done
+    #   @return [::Boolean]
+    #     If the value is `false`, it means the operation is still in progress.
+    #     If `true`, the operation is completed, and either `error` or `response` is
+    #     available.
+    # @!attribute [rw] error
+    #   @return [::Google::Rpc::Status]
+    #     The error result of the operation in case of failure or cancellation.
+    #
+    #     Note: The following fields are mutually exclusive: `error`, `response`. If a field in that set is populated, all other fields in the set will automatically be cleared.
+    # @!attribute [rw] response
+    #   @return [::Google::Protobuf::Any]
+    #     The normal, successful response of the operation.  If the original
+    #     method returns no data on success, such as `Delete`, the response is
+    #     `google.protobuf.Empty`.  If the original method is standard
+    #     `Get`/`Create`/`Update`, the response should be the resource.  For other
+    #     methods, the response should have the type `XxxResponse`, where `Xxx`
+    #     is the original method name.  For example, if the original method name
+    #     is `TakeSnapshot()`, the inferred response type is
+    #     `TakeSnapshotResponse`.
+    #
+    #     Note: The following fields are mutually exclusive: `response`, `error`. If a field in that set is populated, all other fields in the set will automatically be cleared.
+    class Operation
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+    end
+
+    # The request message for
+    # Operations.GetOperation.
+    # @!attribute [rw] name
+    #   @return [::String]
+    #     The name of the operation resource.
+    class GetOperationRequest
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+    end
+
+    # The request message for
+    # Operations.ListOperations.
+    # @!attribute [rw] name
+    #   @return [::String]
+    #     The name of the operation's parent resource.
+    # @!attribute [rw] filter
+    #   @return [::String]
+    #     The standard list filter.
+    # @!attribute [rw] page_size
+    #   @return [::Integer]
+    #     The standard list page size.
+    # @!attribute [rw] page_token
+    #   @return [::String]
+    #     The standard list page token.
+    # @!attribute [rw] return_partial_success
+    #   @return [::Boolean]
+    #     When set to `true`, operations that are reachable are returned as normal,
+    #     and those that are unreachable are returned in the
+    #     [ListOperationsResponse.unreachable] field.
+    #
+    #     This can only be `true` when reading across collections e.g. when `parent`
+    #     is set to `"projects/example/locations/-"`.
+    #
+    #     This field is not by default supported and will result in an
+    #     `UNIMPLEMENTED` error if set unless explicitly documented otherwise in
+    #     service or product specific documentation.
+    class ListOperationsRequest
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+    end
+
+    # The response message for
+    # Operations.ListOperations.
+    # @!attribute [rw] operations
+    #   @return [::Array<::Google::Longrunning::Operation>]
+    #     A list of operations that matches the specified filter in the request.
+    # @!attribute [rw] next_page_token
+    #   @return [::String]
+    #     The standard List next-page token.
+    # @!attribute [rw] unreachable
+    #   @return [::Array<::String>]
+    #     Unordered list. Unreachable resources. Populated when the request sets
+    #     `ListOperationsRequest.return_partial_success` and reads across
+    #     collections e.g. when attempting to list all resources across all supported
+    #     locations.
+    class ListOperationsResponse
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+    end
+
+    # The request message for
+    # Operations.CancelOperation.
+    # @!attribute [rw] name
+    #   @return [::String]
+    #     The name of the operation resource to be cancelled.
+    class CancelOperationRequest
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+    end
+
+    # The request message for
+    # Operations.DeleteOperation.
+    # @!attribute [rw] name
+    #   @return [::String]
+    #     The name of the operation resource to be deleted.
+    class DeleteOperationRequest
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+    end
+
+    # The request message for
+    # Operations.WaitOperation.
+    # @!attribute [rw] name
+    #   @return [::String]
+    #     The name of the operation resource to wait on.
+    # @!attribute [rw] timeout
+    #   @return [::Google::Protobuf::Duration]
+    #     The maximum duration to wait before timing out. If left blank, the wait
+    #     will be at most the time permitted by the underlying HTTP/RPC protocol.
+    #     If RPC context deadline is also specified, the shorter one will be used.
+    class WaitOperationRequest
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+    end
+
+    # A message representing the message types used by a long-running operation.
+    #
+    # Example:
+    #
+    #     rpc Export(ExportRequest) returns (google.longrunning.Operation) {
+    #       option (google.longrunning.operation_info) = {
+    #         response_type: "ExportResponse"
+    #         metadata_type: "ExportMetadata"
+    #       };
+    #     }
+    # @!attribute [rw] response_type
+    #   @return [::String]
+    #     Required. The message name of the primary return type for this
+    #     long-running operation.
+    #     This type will be used to deserialize the LRO's response.
+    #
+    #     If the response is in a different package from the rpc, a fully-qualified
+    #     message name must be used (e.g. `google.protobuf.Struct`).
+    #
+    #     Note: Altering this value constitutes a breaking change.
+    # @!attribute [rw] metadata_type
+    #   @return [::String]
+    #     Required. The message name of the metadata type for this long-running
+    #     operation.
+    #
+    #     If the response is in a different package from the rpc, a fully-qualified
+    #     message name must be used (e.g. `google.protobuf.Struct`).
+    #
+    #     Note: Altering this value constitutes a breaking change.
+    class OperationInfo
+      include ::Google::Protobuf::MessageExts
+      extend ::Google::Protobuf::MessageExts::ClassMethods
+    end
+  end
+end