@maxim_mazurok/gapi.client.compute-alpha 0.0.20220823 → 0.0.20220913

package/index.d.ts

@@ -10,7 +10,7 @@
 // This file was generated by https://github.com/Maxim-Mazurok/google-api-typings-generator. Please do not edit it manually.
 // In case of any problems please post issue to https://github.com/Maxim-Mazurok/google-api-typings-generator
 // Generated from: https://www.googleapis.com/discovery/v1/apis/compute/alpha/rest
-// Revision: 20220823
+// Revision: 20220913
 
 /// <reference types="gapi.client" />
 
@@ -177,6 +177,8 @@ declare namespace gapi.client {
              * a default PTR record will be createc for first IP in associated external IPv6 range.
              */
             publicPtrDomainName?: string;
+            /** [Output Only] The resource URL for the security policy associated with this access config. */
+            securityPolicy?: string;
             /** Specifies whether a public DNS 'A' record should be created for the external IP address of this access configuration. */
             setPublicDns?: boolean;
             /**
@@ -232,10 +234,9 @@ declare namespace gapi.client {
              * The purpose of this resource, which can be one of the following values: - GCE_ENDPOINT for addresses that are used by VM instances, alias IP ranges, load balancers, and similar
              * resources. - DNS_RESOLVER for a DNS resolver address in a subnetwork for a Cloud DNS inbound forwarder IP addresses (regional internal IP address in a subnet of a VPC network) -
              * VPC_PEERING for global internal IP addresses used for private services access allocated ranges. - NAT_AUTO for the regional external IP addresses used by Cloud NAT when allocating
-             * addresses using automatic NAT IP address allocation. - IPSEC_INTERCONNECT for addresses created from a private IP range that are reserved for a VLAN attachment in an
-             * *IPsec-encrypted Cloud Interconnect* configuration. These addresses are regional resources. Not currently available publicly. - `SHARED_LOADBALANCER_VIP` for an internal IP address
-             * that is assigned to multiple internal forwarding rules. - `PRIVATE_SERVICE_CONNECT` for a private network address that is used to configure Private Service Connect. Only global
-             * internal addresses can use this purpose.
+             * addresses using automatic NAT IP address allocation. - IPSEC_INTERCONNECT for addresses created from a private IP range that are reserved for a VLAN attachment in an *HA VPN over
+             * Cloud Interconnect* configuration. These addresses are regional resources. - `SHARED_LOADBALANCER_VIP` for an internal IP address that is assigned to multiple internal forwarding
+             * rules. - `PRIVATE_SERVICE_CONNECT` for a private network address that is used to configure Private Service Connect. Only global internal addresses can use this purpose.
              */
             purpose?: string;
             /**
@@ -1551,11 +1552,21 @@ declare namespace gapi.client {
             name?: string;
         }
         interface BackendServiceLogConfig {
-            /** This field denotes whether to enable logging for the load balancer traffic served by this backend service. */
+            /** Denotes whether to enable logging for the load balancer traffic served by this backend service. The default value is false. */
             enable?: boolean;
+            /**
+             * This field can only be specified if logging is enabled for this backend service. Configures whether all, none or a subset of optional fields should be added to the reported logs.
+             * One of [INCLUDE_ALL_OPTIONAL, EXCLUDE_ALL_OPTIONAL, CUSTOM]. Default is EXCLUDE_ALL_OPTIONAL.
+             */
+            optional?: string;
+            /**
+             * This field can only be specified if logging is enabled for this backend service and "logConfig.optional" was set to CUSTOM. Contains a list of optional fields you want to include in
+             * the logs. For example: serverInstance, serverGkeDetails.cluster, serverGkeDetails.pod.podNamespace
+             */
+            optionalFields?: string[];
             /**
              * This field can only be specified if logging is enabled for this backend service. The value of the field must be in [0, 1]. This configures the sampling rate of requests to the load
-             * balancer where 1.0 means all logged requests are reported and 0.0 means no logged requests are reported. The default value is 0.0.
+             * balancer where 1.0 means all logged requests are reported and 0.0 means no logged requests are reported. The default value is 1.0.
              */
             sampleRate?: number;
         }
@@ -1679,17 +1690,18 @@ declare namespace gapi.client {
             /**
              * Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on
              * the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service
-             * account. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that
-             * represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier
-             * for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example,
-             * `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. *
-             * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example,
-             * `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. *
-             * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example,
-             * `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service
-             * account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently
-             * deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in
-             * the binding. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`.
+             * account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific
+             * Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example,
+             * `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service
+             * account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. *
+             * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
+             * identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to
+             * `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing
+             * a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value
+             * reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
+             * identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to
+             * `group:{emailid}` and the recovered group retains the role in the binding. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For
+             * example, `google.com` or `example.com`.
              */
             members?: string[];
             /** Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. */
@@ -1731,6 +1743,12 @@ declare namespace gapi.client {
             /** This field is only temporary. It will be removed. Do not use it. */
             name?: string;
         }
+        interface BundledLocalSsds {
+            /** The default disk interface if the interface is not specified. */
+            defaultInterface?: string;
+            /** The number of partitions. */
+            partitionCount?: number;
+        }
         interface CacheInvalidationRule {
             /** If set, this invalidation rule will only apply to requests with a Host header matching host. */
             host?: string;
@@ -2982,9 +3000,9 @@ declare namespace gapi.client {
             description?: string;
             /**
              * Deprecated, please use short name instead. User-provided name of the Organization firewall policy. The name should be unique in the organization in which the firewall policy is
-             * created. This name must be set on creation and cannot be changed. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long
-             * and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase
-             * letter, or digit, except the last character, which cannot be a dash.
+             * created. This field is not applicable to network firewall policies. This name must be set on creation and cannot be changed. The name must be 1-63 characters long, and comply with
+             * RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the first character must be a lowercase
+             * letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
              */
             displayName?: string;
             /**
@@ -2997,9 +3015,9 @@ declare namespace gapi.client {
             id?: string;
             /** [Output only] Type of the resource. Always compute#firewallPolicyfor firewall policies */
             kind?: string;
-            /** [Output Only] Name of the resource. It is a numeric ID allocated by GCP which uniquely identifies the Firewall Policy. */
+            /** Name of the resource. For Organization Firewall Policies it's a [Output Only] numeric ID allocated by GCP which uniquely identifies the Organization Firewall Policy. */
             name?: string;
-            /** [Output Only] The parent of the firewall policy. */
+            /** [Output Only] The parent of the firewall policy. This field is not applicable to network firewall policies. */
             parent?: string;
             /**
              * [Output Only] URL of the region where the regional firewall policy resides. This field is not applicable to global firewall policies. You must specify this field as part of the HTTP
@@ -3018,10 +3036,10 @@ declare namespace gapi.client {
             /** [Output Only] Server-defined URL for this resource with the resource id. */
             selfLinkWithId?: string;
             /**
-             * User-provided name of the Organization firewall plicy. The name should be unique in the organization in which the firewall policy is created. This name must be set on creation and
-             * cannot be changed. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression
-             * `[a-z]([-a-z0-9]*[a-z0-9])?` which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last
-             * character, which cannot be a dash.
+             * User-provided name of the Organization firewall policy. The name should be unique in the organization in which the firewall policy is created. This field is not applicable to
+             * network firewall policies. This name must be set on creation and cannot be changed. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be
+             * 1-63 characters long and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the first character must be a lowercase letter, and all following characters must be a
+             * dash, lowercase letter, or digit, except the last character, which cannot be a dash.
              */
             shortName?: string;
             /**
@@ -3670,17 +3688,19 @@ declare namespace gapi.client {
              * ASCII.
              */
             grpcServiceName?: string;
-            /**
-             * The port number for the health check request. Must be specified if port_name and port_specification are not set or if port_specification is USE_FIXED_PORT. Valid values are 1
-             * through 65535.
-             */
+            /** The TCP port number to which the health check prober sends packets. Valid values are 1 through 65535. */
             port?: number;
-            /** Port name as defined in InstanceGroup#NamedPort#name. If both port and port_name are defined, port takes precedence. The port_name should conform to RFC1035. */
+            /** Not supported. */
             portName?: string;
             /**
-             * Specifies how port is selected for health checking, can be one of following values: USE_FIXED_PORT: The port number in port is used for health checking. USE_NAMED_PORT: The portName
-             * is used for health checking. USE_SERVING_PORT: For NetworkEndpointGroup, the port specified for each network endpoint is used for health checking. For other backends, the port or
-             * named port specified in the Backend Service is used for health checking. If not specified, gRPC health check follows behavior specified in port and portName fields.
+             * Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health
+             * check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all
+             * backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and
+             * instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only
+             * supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that
+             * can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the
+             * port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend
+             * service's named port in the instance group's list of named ports.
              */
             portSpecification?: string;
         }
@@ -4071,23 +4091,35 @@ declare namespace gapi.client {
             pathMatcher?: string;
         }
         interface HTTP2HealthCheck {
-            /** The value of the host header in the HTTP/2 health check request. If left empty (default value), the IP on behalf of which this health check is performed will be used. */
+            /**
+             * The value of the host header in the HTTP/2 health check request. If left empty (default value), the host header is set to the destination IP address to which health check packets
+             * are sent. The destination IP address depends on the type of load balancer. For details, see: https://cloud.google.com/load-balancing/docs/health-check-concepts#hc-packet-dest
+             */
             host?: string;
-            /** The TCP port number for the health check request. The default value is 443. Valid values are 1 through 65535. */
+            /** The TCP port number to which the health check prober sends packets. The default value is 443. Valid values are 1 through 65535. */
             port?: number;
-            /** Port name as defined in InstanceGroup#NamedPort#name. If both port and port_name are defined, port takes precedence. */
+            /** Not supported. */
             portName?: string;
             /**
-             * Specifies how port is selected for health checking, can be one of following values: USE_FIXED_PORT: The port number in port is used for health checking. USE_NAMED_PORT: The portName
-             * is used for health checking. USE_SERVING_PORT: For NetworkEndpointGroup, the port specified for each network endpoint is used for health checking. For other backends, the port or
-             * named port specified in the Backend Service is used for health checking. If not specified, HTTP2 health check follows behavior specified in port and portName fields.
+             * Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health
+             * check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all
+             * backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and
+             * instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only
+             * supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that
+             * can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the
+             * port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend
+             * service's named port in the instance group's list of named ports.
              */
             portSpecification?: string;
             /** Specifies the type of proxy header to append before sending data to the backend, either NONE or PROXY_V1. The default is NONE. */
             proxyHeader?: string;
             /** The request path of the HTTP/2 health check request. The default value is /. */
             requestPath?: string;
-            /** The string to match anywhere in the first 1024 bytes of the response body. If left empty (the default value), the status code determines health. The response data can only be ASCII. */
+            /**
+             * Creates a content-based HTTP/2 health check. In addition to the required HTTP 200 (OK) status code, you can configure the health check to pass only when the backend sends this
+             * specific ASCII response string within the first 1024 bytes of the HTTP response body. For details, see:
+             * https://cloud.google.com/load-balancing/docs/health-check-concepts#criteria-protocol-http
+             */
             response?: string;
             /** Weight report mode. used for weighted Load Balancing. */
             weightReportMode?: string;
@@ -4218,23 +4250,35 @@ declare namespace gapi.client {
             unhealthyThreshold?: number;
         }
         interface HTTPHealthCheck {
-            /** The value of the host header in the HTTP health check request. If left empty (default value), the IP on behalf of which this health check is performed will be used. */
+            /**
+             * The value of the host header in the HTTP health check request. If left empty (default value), the host header is set to the destination IP address to which health check packets are
+             * sent. The destination IP address depends on the type of load balancer. For details, see: https://cloud.google.com/load-balancing/docs/health-check-concepts#hc-packet-dest
+             */
             host?: string;
-            /** The TCP port number for the health check request. The default value is 80. Valid values are 1 through 65535. */
+            /** The TCP port number to which the health check prober sends packets. The default value is 80. Valid values are 1 through 65535. */
             port?: number;
-            /** Port name as defined in InstanceGroup#NamedPort#name. If both port and port_name are defined, port takes precedence. */
+            /** Not supported. */
             portName?: string;
             /**
-             * Specifies how port is selected for health checking, can be one of following values: USE_FIXED_PORT: The port number in port is used for health checking. USE_NAMED_PORT: The portName
-             * is used for health checking. USE_SERVING_PORT: For NetworkEndpointGroup, the port specified for each network endpoint is used for health checking. For other backends, the port or
-             * named port specified in the Backend Service is used for health checking. If not specified, HTTP health check follows behavior specified in port and portName fields.
+             * Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health
+             * check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Also supported in legacy HTTP health checks for target pools. The
+             * health check supports all backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT
+             * network endpoint groups, and instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring
+             * to the backend service. Only supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load
+             * balancers. Supports all backends that can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint
+             * group backends, the health check uses the port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number
+             * determined by looking up the backend service's named port in the instance group's list of named ports.
              */
             portSpecification?: string;
             /** Specifies the type of proxy header to append before sending data to the backend, either NONE or PROXY_V1. The default is NONE. */
             proxyHeader?: string;
             /** The request path of the HTTP health check request. The default value is /. */
             requestPath?: string;
-            /** The string to match anywhere in the first 1024 bytes of the response body. If left empty (the default value), the status code determines health. The response data can only be ASCII. */
+            /**
+             * Creates a content-based HTTP health check. In addition to the required HTTP 200 (OK) status code, you can configure the health check to pass only when the backend sends this
+             * specific ASCII response string within the first 1024 bytes of the HTTP response body. For details, see:
+             * https://cloud.google.com/load-balancing/docs/health-check-concepts#criteria-protocol-http
+             */
             response?: string;
             /** Weight report mode. used for weighted Load Balancing. */
             weightReportMode?: string;
@@ -4531,23 +4575,35 @@ declare namespace gapi.client {
             unhealthyThreshold?: number;
         }
         interface HTTPSHealthCheck {
-            /** The value of the host header in the HTTPS health check request. If left empty (default value), the IP on behalf of which this health check is performed will be used. */
+            /**
+             * The value of the host header in the HTTPS health check request. If left empty (default value), the host header is set to the destination IP address to which health check packets are
+             * sent. The destination IP address depends on the type of load balancer. For details, see: https://cloud.google.com/load-balancing/docs/health-check-concepts#hc-packet-dest
+             */
             host?: string;
-            /** The TCP port number for the health check request. The default value is 443. Valid values are 1 through 65535. */
+            /** The TCP port number to which the health check prober sends packets. The default value is 443. Valid values are 1 through 65535. */
             port?: number;
-            /** Port name as defined in InstanceGroup#NamedPort#name. If both port and port_name are defined, port takes precedence. */
+            /** Not supported. */
             portName?: string;
             /**
-             * Specifies how port is selected for health checking, can be one of following values: USE_FIXED_PORT: The port number in port is used for health checking. USE_NAMED_PORT: The portName
-             * is used for health checking. USE_SERVING_PORT: For NetworkEndpointGroup, the port specified for each network endpoint is used for health checking. For other backends, the port or
-             * named port specified in the Backend Service is used for health checking. If not specified, HTTPS health check follows behavior specified in port and portName fields.
+             * Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health
+             * check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all
+             * backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and
+             * instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only
+             * supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that
+             * can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the
+             * port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend
+             * service's named port in the instance group's list of named ports.
              */
             portSpecification?: string;
             /** Specifies the type of proxy header to append before sending data to the backend, either NONE or PROXY_V1. The default is NONE. */
             proxyHeader?: string;
             /** The request path of the HTTPS health check request. The default value is /. */
             requestPath?: string;
-            /** The string to match anywhere in the first 1024 bytes of the response body. If left empty (the default value), the status code determines health. The response data can only be ASCII. */
+            /**
+             * Creates a content-based HTTPS health check. In addition to the required HTTP 200 (OK) status code, you can configure the health check to pass only when the backend sends this
+             * specific ASCII response string within the first 1024 bytes of the HTTP response body. For details, see:
+             * https://cloud.google.com/load-balancing/docs/health-check-concepts#criteria-protocol-http
+             */
             response?: string;
             /** Weight report mode. used for weighted Load Balancing. */
             weightReportMode?: string;
@@ -5414,6 +5470,28 @@ declare namespace gapi.client {
             };
         }
         interface InstanceGroupManagerResizeRequestStatus {
+            /** Errors encountered during the queueing or provisioning phases of the ResizeRequest. */
+            error?: {
+                /** [Output Only] The array of errors encountered while processing this operation. */
+                errors?: Array<{
+                    /** [Output Only] The error type identifier for this error. */
+                    code?: string;
+                    /**
+                     * [Output Only] An optional list of messages that contain the error details. There is a set of defined message types to use for providing details.The syntax depends on the
+                     * error code. For example, QuotaExceededInfo will have details when the error code is QUOTA_EXCEEDED.
+                     */
+                    errorDetails?: Array<{
+                        errorInfo?: ErrorInfo;
+                        help?: Help;
+                        localizedMessage?: LocalizedMessage;
+                        quotaInfo?: QuotaExceededInfo;
+                    }>;
+                    /** [Output Only] Indicates the field in the request that caused the error. This property is optional. */
+                    location?: string;
+                    /** [Output Only] An optional, human-readable error message. */
+                    message?: string;
+                }>;
+            };
             /** Constraints for the time when the instances start provisioning. Always exposed as absolute time. */
             queuingPolicy?: QueuingPolicy;
         }
@@ -6487,8 +6565,7 @@ declare namespace gapi.client {
              * Indicates the user-supplied encryption option of this VLAN attachment (interconnectAttachment). Can only be specified at attachment creation for PARTNER or DEDICATED attachments.
              * Possible values are: - NONE - This is the default value, which means that the VLAN attachment carries unencrypted traffic. VMs are able to send traffic to, or receive traffic from,
              * such a VLAN attachment. - IPSEC - The VLAN attachment carries only encrypted traffic that is encrypted by an IPsec device, such as an HA VPN gateway or third-party IPsec VPN. VMs
-             * cannot directly send traffic to, or receive traffic from, such a VLAN attachment. To use *IPsec-encrypted Cloud Interconnect*, the VLAN attachment must be created with this option.
-             * Not currently available publicly.
+             * cannot directly send traffic to, or receive traffic from, such a VLAN attachment. To use *HA VPN over Cloud Interconnect*, the VLAN attachment must be created with this option.
              */
             encryption?: string;
             /** [Output Only] Google reference ID, to be used when raising support tickets with Google or otherwise to debug backend connectivity issues. [Deprecated] This field is not used. */
@@ -7468,6 +7545,8 @@ declare namespace gapi.client {
             }>;
             /** [Output Only] The architecture of the machine type. */
             architecture?: string;
+            /** [Output Only] The configuration of bundled local SSD for the machine type. */
+            bundledLocalSsds?: BundledLocalSsds;
             /** [Output Only] Creation timestamp in RFC3339 text format. */
             creationTimestamp?: string;
             /** [Output Only] The deprecation status associated with this machine type. Only applicable if the machine type is unavailable. */
@@ -7789,6 +7868,145 @@ declare namespace gapi.client {
             /** [Output Only] Server-defined fully-qualified URLs for all subnetworks in this VPC network. */
             subnetworks?: string[];
         }
+        interface NetworkAttachment {
+            /** [Output Only] An array of connections for all the producers connected to this network attachment. */
+            connectionEndpoints?: NetworkAttachmentConnectedEndpoint[];
+            connectionPreference?: string;
+            /** [Output Only] Creation timestamp in RFC3339 text format. */
+            creationTimestamp?: string;
+            /** An optional description of this resource. Provide this property when you create the resource. */
+            description?: string;
+            /**
+             * [Output Only] Fingerprint of this resource. A hash of the contents stored in this object. This field is used in optimistic locking. An up-to-date fingerprint must be provided in
+             * order to patch.
+             */
+            fingerprint?: string;
+            /** [Output Only] The unique identifier for the resource type. The server generates this identifier. */
+            id?: string;
+            /** [Output Only] Type of the resource. */
+            kind?: string;
+            /**
+             * Name of the resource. Provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63
+             * characters long and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the first character must be a lowercase letter, and all following characters must be a
+             * dash, lowercase letter, or digit, except the last character, which cannot be a dash.
+             */
+            name?: string;
+            /** [Output Only] The URL of the network which the Network Attachment belongs to. */
+            network?: string;
+            /** Projects that are allowed to connect to this network attachment. The project can be specified using its id or number. */
+            producerAcceptLists?: string[];
+            /** Projects that are not allowed to connect to this network attachment. The project can be specified using its id or number. */
+            producerRejectLists?: string[];
+            /**
+             * [Output Only] URL of the region where the network attachment resides. This field applies only to the region resource. You must specify this field as part of the HTTP request URL. It
+             * is not settable as a field in the request body.
+             */
+            region?: string;
+            /** [Output Only] Server-defined URL for the resource. */
+            selfLink?: string;
+            /** [Output Only] Server-defined URL for this resource's resource id. */
+            selfLinkWithId?: string;
+            /** An array of URLs where each entry is the URL of a subnet provided by the service consumer to use for endpoints in the producers that connect to this network attachment. */
+            subnetworks?: string[];
+        }
+        interface NetworkAttachmentAggregatedList {
+            /** [Output Only] Unique identifier for the resource; defined by the server. */
+            id?: string;
+            /** A list of NetworkAttachmentsScopedList resources. */
+            items?: { [P in string]: NetworkAttachmentsScopedList };
+            kind?: string;
+            /**
+             * [Output Only] This token allows you to get the next page of results for list requests. If the number of results is larger than maxResults, use the nextPageToken as a value for the
+             * query parameter pageToken in the next list request. Subsequent list requests will have their own nextPageToken to continue paging through the results.
+             */
+            nextPageToken?: string;
+            /** [Output Only] Server-defined URL for this resource. */
+            selfLink?: string;
+            /** [Output Only] Informational warning message. */
+            warning?: {
+                /** [Output Only] A warning code, if applicable. For example, Compute Engine returns NO_RESULTS_ON_PAGE if there are no results in the response. */
+                code?: string;
+                /** [Output Only] Metadata about this warning in key: value format. For example: "data": [ { "key": "scope", "value": "zones/us-east1-d" } */
+                data?: Array<{
+                    /**
+                     * [Output Only] A key that provides more detail on the warning being returned. For example, for warnings where there are no results in a list request for a particular zone,
+                     * this key might be scope and the key value might be the zone name. Other examples might be a key indicating a deprecated resource and a suggested replacement, or a warning
+                     * about invalid network settings (for example, if an instance attempts to perform IP forwarding but is not enabled for IP forwarding).
+                     */
+                    key?: string;
+                    /** [Output Only] A warning data value corresponding to the key. */
+                    value?: string;
+                }>;
+                /** [Output Only] A human-readable description of the warning code. */
+                message?: string;
+            };
+        }
+        interface NetworkAttachmentConnectedEndpoint {
+            /** The IP address assigned to the producer instance network interface. This value will be a range in case of Serverless. */
+            ipAddress?: string;
+            /** The project id or number of the interface to which the IP was assigned. */
+            projectIdOrNum?: string;
+            /** Alias IP ranges from the same subnetwork */
+            secondaryIpCidrRanges?: string[];
+            /** The status of a connected endpoint to this network attachment. */
+            status?: string;
+            /** The subnetwork used to assign the IP to the producer instance network interface. */
+            subnetwork?: string;
+        }
+        interface NetworkAttachmentList {
+            /** [Output Only] Unique identifier for the resource; defined by the server. */
+            id?: string;
+            /** A list of NetworkAttachment resources. */
+            items?: NetworkAttachment[];
+            kind?: string;
+            /**
+             * [Output Only] This token allows you to get the next page of results for list requests. If the number of results is larger than maxResults, use the nextPageToken as a value for the
+             * query parameter pageToken in the next list request. Subsequent list requests will have their own nextPageToken to continue paging through the results.
+             */
+            nextPageToken?: string;
+            /** [Output Only] Server-defined URL for this resource. */
+            selfLink?: string;
+            /** [Output Only] Informational warning message. */
+            warning?: {
+                /** [Output Only] A warning code, if applicable. For example, Compute Engine returns NO_RESULTS_ON_PAGE if there are no results in the response. */
+                code?: string;
+                /** [Output Only] Metadata about this warning in key: value format. For example: "data": [ { "key": "scope", "value": "zones/us-east1-d" } */
+                data?: Array<{
+                    /**
+                     * [Output Only] A key that provides more detail on the warning being returned. For example, for warnings where there are no results in a list request for a particular zone,
+                     * this key might be scope and the key value might be the zone name. Other examples might be a key indicating a deprecated resource and a suggested replacement, or a warning
+                     * about invalid network settings (for example, if an instance attempts to perform IP forwarding but is not enabled for IP forwarding).
+                     */
+                    key?: string;
+                    /** [Output Only] A warning data value corresponding to the key. */
+                    value?: string;
+                }>;
+                /** [Output Only] A human-readable description of the warning code. */
+                message?: string;
+            };
+        }
+        interface NetworkAttachmentsScopedList {
+            /** A list of NetworkAttachments contained in this scope. */
+            networkAttachments?: NetworkAttachment[];
+            /** Informational warning which replaces the list of network attachments when the list is empty. */
+            warning?: {
+                /** [Output Only] A warning code, if applicable. For example, Compute Engine returns NO_RESULTS_ON_PAGE if there are no results in the response. */
+                code?: string;
+                /** [Output Only] Metadata about this warning in key: value format. For example: "data": [ { "key": "scope", "value": "zones/us-east1-d" } */
+                data?: Array<{
+                    /**
+                     * [Output Only] A key that provides more detail on the warning being returned. For example, for warnings where there are no results in a list request for a particular zone,
+                     * this key might be scope and the key value might be the zone name. Other examples might be a key indicating a deprecated resource and a suggested replacement, or a warning
+                     * about invalid network settings (for example, if an instance attempts to perform IP forwarding but is not enabled for IP forwarding).
+                     */
+                    key?: string;
+                    /** [Output Only] A warning data value corresponding to the key. */
+                    value?: string;
+                }>;
+                /** [Output Only] A human-readable description of the warning code. */
+                message?: string;
+            };
+        }
         interface NetworkEdgeSecurityService {
             /** [Output Only] Creation timestamp in RFC3339 text format. */
             creationTimestamp?: string;
@@ -11251,7 +11469,7 @@ declare namespace gapi.client {
             creationTimestamp?: string;
             /** An optional description of this resource. Provide this property when you create the resource. */
             description?: string;
-            /** Indicates if a router is dedicated for use with encrypted VLAN attachments (interconnectAttachments). Not currently available publicly. */
+            /** Indicates if a router is dedicated for use with encrypted VLAN attachments (interconnectAttachments). */
             encryptedInterconnectRouter?: boolean;
             /** [Output Only] The unique identifier for the resource. This identifier is defined by the server. */
             id?: string;
@@ -12050,6 +12268,12 @@ declare namespace gapi.client {
              * filter requests before the request is served from the application. This field can be set only at resource creation time.
              */
             type?: string;
+            /**
+             * Definitions of user-defined fields for CLOUD_ARMOR_NETWORK policies. A user-defined field consists of up to 4 bytes extracted from a fixed offset in the packet, relative to the
+             * IPv4, IPv6, TCP, or UDP header, with an optional mask to select certain bits. Rules may then specify matching values for these fields. Example: userDefinedFields: - name:
+             * "ipv4_fragment_offset" base: IPV4 offset: 6 size: 2 mask: "0x1fff"
+             */
+            userDefinedFields?: SecurityPolicyUserDefinedField[];
         }
         interface SecurityPolicyAdaptiveProtectionConfig {
             autoDeployConfig?: SecurityPolicyAdaptiveProtectionConfigAutoDeployConfig;
@@ -12166,6 +12390,17 @@ declare namespace gapi.client {
             kind?: string;
             /** A match condition that incoming traffic is evaluated against. If it evaluates to true, the corresponding 'action' is enforced. */
             match?: SecurityPolicyRuleMatcher;
+            /**
+             * A match condition that incoming packets are evaluated against for CLOUD_ARMOR_NETWORK security policies. If it matches, the corresponding 'action' is enforced. The match criteria
+             * for a rule consists of built-in match fields (like 'srcIpRanges') and potentially multiple user-defined match fields ('userDefinedFields'). Field values may be extracted directly
+             * from the packet or derived from it (e.g. 'srcRegionCodes'). Some fields may not be present in every packet (e.g. 'srcPorts'). A user-defined field is only present if the base header
+             * is found in the packet and the entire field is in bounds. Each match field may specify which values can match it, listing one or more ranges, prefixes, or exact values that are
+             * considered a match for the field. A field value must be present in order to match a specified match field. If no match values are specified for a match field, then any field value
+             * is considered to match it, and it's not required to be present. For a packet to match a rule, all specified match fields must match the corresponding field values derived from the
+             * packet. Example: networkMatch: srcIpRanges: - "192.0.2.0/24" - "198.51.100.0/24" userDefinedFields: - name: "ipv4_fragment_offset" values: - "1-0x1fff" The above match condition
+             * matches packets with a source IP in 192.0.2.0/24 or 198.51.100.0/24 and a user-defined field named "ipv4_fragment_offset" with a value between 1 and 0x1fff inclusive.
+             */
+            networkMatch?: SecurityPolicyRuleNetworkMatcher;
             /**
              * Preconfigured WAF configuration to be applied for the rule. If the rule does not evaluate preconfigured WAF rules, i.e., if evaluatePreconfiguredWaf() is not used, this field will
              * have no effect.
@@ -12261,6 +12496,33 @@ declare namespace gapi.client {
              */
             ports?: string[];
         }
+        interface SecurityPolicyRuleNetworkMatcher {
+            /** Destination IPv4/IPv6 addresses or CIDR prefixes, in standard text format. */
+            destIpRanges?: string[];
+            /** Destination port numbers for TCP/UDP/SCTP. Each element can be a 16-bit unsigned decimal number (e.g. "80") or range (e.g. "0-1023"). */
+            destPorts?: string[];
+            /**
+             * IPv4 protocol / IPv6 next header (after extension headers). Each element can be an 8-bit unsigned decimal number (e.g. "6"), range (e.g. "253-254"), or one of the following protocol
+             * names: "tcp", "udp", "icmp", "esp", "ah", "ipip", or "sctp".
+             */
+            ipProtocols?: string[];
+            /** BGP Autonomous System Number associated with the source IP address. */
+            srcAsns?: number[];
+            /** Source IPv4/IPv6 addresses or CIDR prefixes, in standard text format. */
+            srcIpRanges?: string[];
+            /** Source port numbers for TCP/UDP/SCTP. Each element can be a 16-bit unsigned decimal number (e.g. "80") or range (e.g. "0-1023"). */
+            srcPorts?: string[];
+            /** Two-letter ISO 3166-1 alpha-2 country code associated with the source IP address. */
+            srcRegionCodes?: string[];
+            /** User-defined fields. Each element names a defined field and lists the matching values for that field. */
+            userDefinedFields?: SecurityPolicyRuleNetworkMatcherUserDefinedFieldMatch[];
+        }
+        interface SecurityPolicyRuleNetworkMatcherUserDefinedFieldMatch {
+            /** Name of the user-defined field, as given in the definition. */
+            name?: string;
+            /** Matching values of the field. Each element can be a 32-bit unsigned decimal or hexadecimal (starting with "0x") number (e.g. "64") or range (e.g. "0x400-0x7ff"). */
+            values?: string[];
+        }
         interface SecurityPolicyRulePreconfiguredWafConfig {
             /** A list of exclusions to apply during preconfigured WAF evaluation. */
             exclusions?: SecurityPolicyRulePreconfiguredWafConfigExclusion[];
@@ -12349,6 +12611,25 @@ declare namespace gapi.client {
             /** Type of the redirect action. */
             type?: string;
         }
+        interface SecurityPolicyUserDefinedField {
+            /**
+             * The base relative to which 'offset' is measured. Possible values are: - IPV4: Points to the beginning of the IPv4 header. - IPV6: Points to the beginning of the IPv6 header. - TCP:
+             * Points to the beginning of the TCP header, skipping over any IPv4 options or IPv6 extension headers. Not present for non-first fragments. - UDP: Points to the beginning of the UDP
+             * header, skipping over any IPv4 options or IPv6 extension headers. Not present for non-first fragments. required
+             */
+            base?: string;
+            /**
+             * If specified, apply this mask (bitwise AND) to the field to ignore bits before matching. Encoded as a hexadecimal number (starting with "0x"). The last byte of the field (in network
+             * byte order) corresponds to the least significant byte of the mask.
+             */
+            mask?: string;
+            /** The name of this field. Must be unique within the policy. */
+            name?: string;
+            /** Offset of the first byte of the field (in network byte order) relative to 'base'. */
+            offset?: number;
+            /** Size of the field in bytes. Valid values: 1-4. */
+            size?: number;
+        }
         interface SecuritySettings {
             /** [Deprecated] Use clientTlsPolicy instead. */
             authentication?: string;
@@ -13016,24 +13297,29 @@ declare namespace gapi.client {
             };
         }
         interface SSLHealthCheck {
-            /** The TCP port number for the health check request. The default value is 443. Valid values are 1 through 65535. */
+            /** The TCP port number to which the health check prober sends packets. The default value is 443. Valid values are 1 through 65535. */
             port?: number;
-            /** Port name as defined in InstanceGroup#NamedPort#name. If both port and port_name are defined, port takes precedence. */
+            /** Not supported. */
             portName?: string;
             /**
-             * Specifies how port is selected for health checking, can be one of following values: USE_FIXED_PORT: The port number in port is used for health checking. USE_NAMED_PORT: The portName
-             * is used for health checking. USE_SERVING_PORT: For NetworkEndpointGroup, the port specified for each network endpoint is used for health checking. For other backends, the port or
-             * named port specified in the Backend Service is used for health checking. If not specified, SSL health check follows behavior specified in port and portName fields.
+             * Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health
+             * check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all
+             * backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and
+             * instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only
+             * supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that
+             * can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the
+             * port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend
+             * service's named port in the instance group's list of named ports.
              */
             portSpecification?: string;
             /** Specifies the type of proxy header to append before sending data to the backend, either NONE or PROXY_V1. The default is NONE. */
             proxyHeader?: string;
+            /** Instructs the health check prober to send this exact ASCII string, up to 1024 bytes in length, after establishing the TCP connection and SSL handshake. */
+            request?: string;
             /**
-             * The application data to send once the SSL connection has been established (default value is empty). If both request and response are empty, the connection establishment alone will
-             * indicate health. The request data can only be ASCII.
+             * Creates a content-based SSL health check. In addition to establishing a TCP connection and the TLS handshake, you can configure the health check to pass only when the backend sends
+             * this exact response ASCII string, up to 1024 bytes in length. For details, see: https://cloud.google.com/load-balancing/docs/health-check-concepts#criteria-protocol-ssl-tcp
              */
-            request?: string;
-            /** The bytes to match against the beginning of the response data. If left empty (the default value), any response will indicate health. The response data can only be ASCII. */
             response?: string;
         }
         interface SslPoliciesAggregatedList {
@@ -13925,6 +14211,8 @@ declare namespace gapi.client {
             natPolicy?: string;
             /** The URL of the network this target instance uses to forward traffic. If not specified, the traffic will be forwarded to the network that the default network interface belongs to. */
             network?: string;
+            /** [Output Only] The resource URL for the security policy associated with this target instance. */
+            securityPolicy?: string;
             /** [Output Only] Server-defined URL for the resource. */
             selfLink?: string;
             /** [Output Only] Server-defined URL for this resource with the resource id. */
@@ -14062,6 +14350,8 @@ declare namespace gapi.client {
             name?: string;
             /** [Output Only] URL of the region where the target pool resides. */
             region?: string;
+            /** [Output Only] The resource URL for the security policy associated with this target pool. */
+            securityPolicy?: string;
             /** [Output Only] Server-defined URL for the resource. */
             selfLink?: string;
             /** [Output Only] Server-defined URL for this resource with the resource id. */
@@ -14280,6 +14570,28 @@ declare namespace gapi.client {
                 message?: string;
             };
         }
+        interface TargetTcpProxiesScopedList {
+            /** A list of TargetTcpProxies contained in this scope. */
+            targetTcpProxies?: TargetTcpProxy[];
+            /** Informational warning which replaces the list of backend services when the list is empty. */
+            warning?: {
+                /** [Output Only] A warning code, if applicable. For example, Compute Engine returns NO_RESULTS_ON_PAGE if there are no results in the response. */
+                code?: string;
+                /** [Output Only] Metadata about this warning in key: value format. For example: "data": [ { "key": "scope", "value": "zones/us-east1-d" } */
+                data?: Array<{
+                    /**
+                     * [Output Only] A key that provides more detail on the warning being returned. For example, for warnings where there are no results in a list request for a particular zone,
+                     * this key might be scope and the key value might be the zone name. Other examples might be a key indicating a deprecated resource and a suggested replacement, or a warning
+                     * about invalid network settings (for example, if an instance attempts to perform IP forwarding but is not enabled for IP forwarding).
+                     */
+                    key?: string;
+                    /** [Output Only] A warning data value corresponding to the key. */
+                    value?: string;
+                }>;
+                /** [Output Only] A human-readable description of the warning code. */
+                message?: string;
+            };
+        }
         interface TargetTcpProxiesSetBackendServiceRequest {
             /** The URL of the new BackendService resource for the targetTcpProxy. */
             service?: string;
@@ -14319,6 +14631,41 @@ declare namespace gapi.client {
             /** URL to the BackendService resource. */
             service?: string;
         }
+        interface TargetTcpProxyAggregatedList {
+            /** [Output Only] Unique identifier for the resource; defined by the server. */
+            id?: string;
+            /** A list of TargetTcpProxiesScopedList resources. */
+            items?: { [P in string]: TargetTcpProxiesScopedList };
+            /** [Output Only] Type of resource. Always compute#targetTcpProxyAggregatedList for lists of Target TCP Proxies. */
+            kind?: string;
+            /**
+             * [Output Only] This token allows you to get the next page of results for list requests. If the number of results is larger than maxResults, use the nextPageToken as a value for the
+             * query parameter pageToken in the next list request. Subsequent list requests will have their own nextPageToken to continue paging through the results.
+             */
+            nextPageToken?: string;
+            /** [Output Only] Server-defined URL for this resource. */
+            selfLink?: string;
+            /** [Output Only] Unreachable resources. */
+            unreachables?: string[];
+            /** [Output Only] Informational warning message. */
+            warning?: {
+                /** [Output Only] A warning code, if applicable. For example, Compute Engine returns NO_RESULTS_ON_PAGE if there are no results in the response. */
+                code?: string;
+                /** [Output Only] Metadata about this warning in key: value format. For example: "data": [ { "key": "scope", "value": "zones/us-east1-d" } */
+                data?: Array<{
+                    /**
+                     * [Output Only] A key that provides more detail on the warning being returned. For example, for warnings where there are no results in a list request for a particular zone,
+                     * this key might be scope and the key value might be the zone name. Other examples might be a key indicating a deprecated resource and a suggested replacement, or a warning
+                     * about invalid network settings (for example, if an instance attempts to perform IP forwarding but is not enabled for IP forwarding).
+                     */
+                    key?: string;
+                    /** [Output Only] A warning data value corresponding to the key. */
+                    value?: string;
+                }>;
+                /** [Output Only] A human-readable description of the warning code. */
+                message?: string;
+            };
+        }
         interface TargetTcpProxyList {
             /** [Output Only] Unique identifier for the resource; defined by the server. */
             id?: string;
@@ -14479,24 +14826,29 @@ declare namespace gapi.client {
             };
         }
         interface TCPHealthCheck {
-            /** The TCP port number for the health check request. The default value is 80. Valid values are 1 through 65535. */
+            /** The TCP port number to which the health check prober sends packets. The default value is 80. Valid values are 1 through 65535. */
             port?: number;
-            /** Port name as defined in InstanceGroup#NamedPort#name. If both port and port_name are defined, port takes precedence. */
+            /** Not supported. */
             portName?: string;
             /**
-             * Specifies how port is selected for health checking, can be one of following values: USE_FIXED_PORT: The port number in port is used for health checking. USE_NAMED_PORT: The portName
-             * is used for health checking. USE_SERVING_PORT: For NetworkEndpointGroup, the port specified for each network endpoint is used for health checking. For other backends, the port or
-             * named port specified in the Backend Service is used for health checking. If not specified, TCP health check follows behavior specified in port and portName fields.
+             * Specifies how a port is selected for health checking. Can be one of the following values: USE_FIXED_PORT: Specifies a port number explicitly using the port field in the health
+             * check. Supported by backend services for pass-through load balancers and backend services for proxy load balancers. Not supported by target pools. The health check supports all
+             * backends supported by the backend service provided the backend can be health checked. For example, GCE_VM_IP network endpoint groups, GCE_VM_IP_PORT network endpoint groups, and
+             * instance group backends. USE_NAMED_PORT: Not supported. USE_SERVING_PORT: Provides an indirect method of specifying the health check port by referring to the backend service. Only
+             * supported by backend services for proxy load balancers. Not supported by target pools. Not supported by backend services for pass-through load balancers. Supports all backends that
+             * can be health checked; for example, GCE_VM_IP_PORT network endpoint groups and instance group backends. For GCE_VM_IP_PORT network endpoint group backends, the health check uses the
+             * port number specified for each endpoint in the network endpoint group. For instance group backends, the health check uses the port number determined by looking up the backend
+             * service's named port in the instance group's list of named ports.
              */
             portSpecification?: string;
             /** Specifies the type of proxy header to append before sending data to the backend, either NONE or PROXY_V1. The default is NONE. */
             proxyHeader?: string;
+            /** Instructs the health check prober to send this exact ASCII string, up to 1024 bytes in length, after establishing the TCP connection. */
+            request?: string;
             /**
-             * The application data to send once the TCP connection has been established (default value is empty). If both request and response are empty, the connection establishment alone will
-             * indicate health. The request data can only be ASCII.
+             * Creates a content-based TCP health check. In addition to establishing a TCP connection, you can configure the health check to pass only when the backend sends this exact response
+             * ASCII string, up to 1024 bytes in length. For details, see: https://cloud.google.com/load-balancing/docs/health-check-concepts#criteria-protocol-ssl-tcp
              */
-            request?: string;
-            /** The bytes to match against the beginning of the response data. If left empty (the default value), any response will indicate health. The response data can only be ASCII. */
             response?: string;
         }
         interface TestFailure {
@@ -14559,9 +14911,9 @@ declare namespace gapi.client {
             validationSource?: string;
         }
         interface UDPHealthCheck {
-            /** The UDP port number for the health check request. Valid values are 1 through 65535. */
+            /** The UDP port number to which the health check prober sends packets. Valid values are 1 through 65535. */
             port?: number;
-            /** Port name as defined in InstanceGroup#NamedPort#name. If both port and port_name are defined, port takes precedence. */
+            /** Not supported. */
             portName?: string;
             /** Raw data of request to send in payload of UDP packet. It is an error if this is empty. The request data can only be ASCII. */
             request?: string;
@@ -15151,15 +15503,15 @@ declare namespace gapi.client {
             /** [Output Only] Numeric identifier for this VPN interface associated with the VPN gateway. */
             id?: number;
             /**
-             * URL of the VLAN attachment (interconnectAttachment) resource for this VPN gateway interface. When the value of this field is present, the VPN gateway is used for IPsec-encrypted
-             * Cloud Interconnect; all egress or ingress traffic for this VPN gateway interface goes through the specified VLAN attachment resource. Not currently available publicly.
+             * URL of the VLAN attachment (interconnectAttachment) resource for this VPN gateway interface. When the value of this field is present, the VPN gateway is used for HA VPN over Cloud
+             * Interconnect; all egress or ingress traffic for this VPN gateway interface goes through the specified VLAN attachment resource.
              */
             interconnectAttachment?: string;
             /**
              * [Output Only] IP address for this VPN interface associated with the VPN gateway. The IP address could be either a regional external IP address or a regional internal IP address. The
              * two IP addresses for a VPN gateway must be all regional external or regional internal IP addresses. There cannot be a mix of regional external IP addresses and regional internal IP
-             * addresses. For IPsec-encrypted Cloud Interconnect, the IP addresses for both interfaces could either be regional internal IP addresses or regional external IP addresses. For regular
-             * (non IPsec-encrypted Cloud Interconnect) HA VPN tunnels, the IP address must be a regional external IP address.
+             * addresses. For HA VPN over Cloud Interconnect, the IP addresses for both interfaces could either be regional internal IP addresses or regional external IP addresses. For regular
+             * (non HA VPN over Cloud Interconnect) HA VPN tunnels, the IP address must be a regional external IP address.
              */
             ipAddress?: string;
         }
@@ -34676,8 +35028,8 @@ declare namespace gapi.client {
                 zone: string;
             }): Request<MachineTypeList>;
         }
-        interface NetworkEdgeSecurityServicesResource {
-            /** Retrieves the list of all NetworkEdgeSecurityService resources available to the specified project. */
+        interface NetworkAttachmentsResource {
+            /** Retrieves the list of all NetworkAttachment resources, regional and global, available to the specified project. */
             aggregatedList(request?: {
                 /** V1 error format. */
                 "$.xgafv"?: string;
@@ -34730,7 +35082,7 @@ declare namespace gapi.client {
                 pageToken?: string;
                 /** Returns response with indentations and line breaks. */
                 prettyPrint?: boolean;
-                /** Name of the project scoping this request. */
+                /** Project ID for this request. */
                 project: string;
                 /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
                 quotaUser?: string;
@@ -34742,8 +35094,8 @@ declare namespace gapi.client {
                 uploadType?: string;
                 /** Legacy name for parameter that has been superseded by `quotaUser`. */
                 userIp?: string;
-            }): Request<NetworkEdgeSecurityServiceAggregatedList>;
-            /** Deletes the specified service. */
+            }): Request<NetworkAttachmentAggregatedList>;
+            /** Deletes the specified NetworkAttachment in the given scope */
             delete(request?: {
                 /** V1 error format. */
                 "$.xgafv"?: string;
@@ -34757,8 +35109,8 @@ declare namespace gapi.client {
                 fields?: string;
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?: string;
-                /** Name of the network edge security service to delete. */
-                networkEdgeSecurityService: string;
+                /** Name of the NetworkAttachment resource to delete. */
+                networkAttachment: string;
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?: string;
                 /** Returns response with indentations and line breaks. */
@@ -34767,13 +35119,14 @@ declare namespace gapi.client {
                 project: string;
                 /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
                 quotaUser?: string;
-                /** Name of the region scoping this request. */
+                /** Name of the region of this request. */
                 region: string;
                 /**
                  * An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already
                  * been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server
                  * can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate
-                 * commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
+                 * commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000). end_interface:
+                 * MixerMutationRequestBuilder
                  */
                 requestId?: string;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
@@ -34783,7 +35136,7 @@ declare namespace gapi.client {
                 /** Legacy name for parameter that has been superseded by `quotaUser`. */
                 userIp?: string;
             }): Request<Operation>;
-            /** Gets a specified NetworkEdgeSecurityService. */
+            /** Returns the specified NetworkAttachment resource in the given scope. */
             get(request?: {
                 /** V1 error format. */
                 "$.xgafv"?: string;
@@ -34797,8 +35150,8 @@ declare namespace gapi.client {
                 fields?: string;
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?: string;
-                /** Name of the network edge security service to get. */
-                networkEdgeSecurityService: string;
+                /** Name of the NetworkAttachment resource to return. */
+                networkAttachment: string;
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?: string;
                 /** Returns response with indentations and line breaks. */
@@ -34807,7 +35160,7 @@ declare namespace gapi.client {
                 project: string;
                 /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
                 quotaUser?: string;
-                /** Name of the region scoping this request. */
+                /** Name of the region of this request. */
                 region: string;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
                 upload_protocol?: string;
@@ -34815,9 +35168,9 @@ declare namespace gapi.client {
                 uploadType?: string;
                 /** Legacy name for parameter that has been superseded by `quotaUser`. */
                 userIp?: string;
-            }): Request<NetworkEdgeSecurityService>;
-            /** Creates a new service in the specified project using the data included in the request. */
-            insert(request: {
+            }): Request<NetworkAttachment>;
+            /** Gets the access control policy for a resource. May be empty if no such policy or resource exists. */
+            getIamPolicy(request?: {
                 /** V1 error format. */
                 "$.xgafv"?: string;
                 /** OAuth access token. */
@@ -34832,32 +35185,418 @@ declare namespace gapi.client {
                 key?: string;
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?: string;
+                /** Requested IAM Policy version. */
+                optionsRequestedPolicyVersion?: number;
                 /** Returns response with indentations and line breaks. */
                 prettyPrint?: boolean;
                 /** Project ID for this request. */
                 project: string;
                 /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
                 quotaUser?: string;
-                /** Name of the region scoping this request. */
+                /** The name of the region for this request. */
                 region: string;
-                /**
-                 * An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already
-                 * been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server
-                 * can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate
-                 * commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
-                 */
-                requestId?: string;
+                /** Name or id of the resource for this request. */
+                resource: string;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
                 upload_protocol?: string;
                 /** Legacy upload protocol for media (e.g. "media", "multipart"). */
                 uploadType?: string;
                 /** Legacy name for parameter that has been superseded by `quotaUser`. */
                 userIp?: string;
-                /** If true, the request will not be committed. */
-                validateOnly?: boolean;
-                /** Request body */
-                resource: NetworkEdgeSecurityService;
-            }): Request<Operation>;
+            }): Request<Policy>;
+            /** Creates a NetworkAttachment in the specified project in the given scope using the parameters that are included in the request. */
+            insert(request: {
+                /** V1 error format. */
+                "$.xgafv"?: string;
+                /** OAuth access token. */
+                access_token?: string;
+                /** Data format for response. */
+                alt?: string;
+                /** JSONP */
+                callback?: string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?: string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?: string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?: string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?: boolean;
+                /** Project ID for this request. */
+                project: string;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?: string;
+                /** Name of the region of this request. */
+                region: string;
+                /**
+                 * An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already
+                 * been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server
+                 * can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate
+                 * commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000). end_interface:
+                 * MixerMutationRequestBuilder
+                 */
+                requestId?: string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?: string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?: string;
+                /** Legacy name for parameter that has been superseded by `quotaUser`. */
+                userIp?: string;
+                /** Request body */
+                resource: NetworkAttachment;
+            }): Request<Operation>;
+            insert(request: {
+                /** V1 error format. */
+                "$.xgafv"?: string;
+                /** OAuth access token. */
+                access_token?: string;
+                /** Data format for response. */
+                alt?: string;
+                /** JSONP */
+                callback?: string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?: string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?: string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?: string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?: boolean;
+                /** Project ID for this request. */
+                project: string;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?: string;
+                /** Name of the region of this request. */
+                region: string;
+                /**
+                 * An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already
+                 * been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server
+                 * can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate
+                 * commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000). end_interface:
+                 * MixerMutationRequestBuilder
+                 */
+                requestId?: string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?: string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?: string;
+                /** Legacy name for parameter that has been superseded by `quotaUser`. */
+                userIp?: string;
+            },
+            body: NetworkAttachment): Request<Operation>;
+            /** Lists the NetworkAttachments for a project in the given scope. */
+            list(request?: {
+                /** V1 error format. */
+                "$.xgafv"?: string;
+                /** OAuth access token. */
+                access_token?: string;
+                /** Data format for response. */
+                alt?: string;
+                /** JSONP */
+                callback?: string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?: string;
+                /**
+                 * A filter expression that filters resources listed in the response. Most Compute resources support two types of filter expressions: expressions that support regular expressions
+                 * and expressions that follow API improvement proposal AIP-160. If you want to use AIP-160, your expression must specify the field name, an operator, and the value that you want
+                 * to use for filtering. The value must be a string, a number, or a boolean. The operator must be either `=`, `!=`, `>`, `<`, `<=`, `>=` or `:`. For example, if you are filtering
+                 * Compute Engine instances, you can exclude instances named `example-instance` by specifying `name != example-instance`. The `:` operator can be used with string fields to match
+                 * substrings. For non-string fields it is equivalent to the `=` operator. The `:*` comparison can be used to test whether a key has been defined. For example, to find all objects
+                 * with `owner` label use: ``` labels.owner:* ``` You can also filter nested fields. For example, you could specify `scheduling.automaticRestart = false` to include instances only
+                 * if they are not scheduled for automatic restarts. You can use filtering on nested fields to filter based on resource labels. To filter on multiple expressions, provide each
+                 * separate expression within parentheses. For example: ``` (scheduling.automaticRestart = true) (cpuPlatform = "Intel Skylake") ``` By default, each expression is an `AND`
+                 * expression. However, you can include `AND` and `OR` expressions explicitly. For example: ``` (cpuPlatform = "Intel Skylake") OR (cpuPlatform = "Intel Broadwell") AND
+                 * (scheduling.automaticRestart = true) ``` If you want to use a regular expression, use the `eq` (equal) or `ne` (not equal) operator against a single un-parenthesized expression
+                 * with or without quotes or against multiple parenthesized expressions. Examples: `fieldname eq unquoted literal` `fieldname eq 'single quoted literal'` `fieldname eq "double
+                 * quoted literal"` `(fieldname1 eq literal) (fieldname2 ne "literal")` The literal value is interpreted as a regular expression using Google RE2 library syntax. The literal value
+                 * must match the entire field. For example, to filter for instances that do not end with name "instance", you would use `name ne .*instance`.
+                 */
+                filter?: string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?: string;
+                /**
+                 * The maximum number of results per page that should be returned. If the number of available results is larger than `maxResults`, Compute Engine returns a `nextPageToken` that can
+                 * be used to get the next page of results in subsequent list requests. Acceptable values are `0` to `500`, inclusive. (Default: `500`)
+                 */
+                maxResults?: number;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?: string;
+                /**
+                 * Sorts list results by a certain order. By default, results are returned in alphanumerical order based on the resource name. You can also sort results in descending order based
+                 * on the creation timestamp using `orderBy="creationTimestamp desc"`. This sorts results based on the `creationTimestamp` field in reverse chronological order (newest result
+                 * first). Use this to sort resources like operations so that the newest operation is returned first. Currently, only sorting by `name` or `creationTimestamp desc` is supported.
+                 */
+                orderBy?: string;
+                /** Specifies a page token to use. Set `pageToken` to the `nextPageToken` returned by a previous list request to get the next page of results. */
+                pageToken?: string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?: boolean;
+                /** Project ID for this request. */
+                project: string;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?: string;
+                /** Name of the region of this request. */
+                region: string;
+                /** Opt-in for partial success behavior which provides partial results in case of failure. The default value is false. */
+                returnPartialSuccess?: boolean;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?: string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?: string;
+                /** Legacy name for parameter that has been superseded by `quotaUser`. */
+                userIp?: string;
+            }): Request<NetworkAttachmentList>;
+            /** Sets the access control policy on the specified resource. Replaces any existing policy. */
+            setIamPolicy(request: {
+                /** V1 error format. */
+                "$.xgafv"?: string;
+                /** OAuth access token. */
+                access_token?: string;
+                /** Data format for response. */
+                alt?: string;
+                /** JSONP */
+                callback?: string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?: string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?: string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?: string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?: boolean;
+                /** Project ID for this request. */
+                project: string;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?: string;
+                /** The name of the region for this request. */
+                region: string;
+                /** Name or id of the resource for this request. */
+                resource: string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?: string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?: string;
+                /** Legacy name for parameter that has been superseded by `quotaUser`. */
+                userIp?: string;
+            },
+            body: RegionSetPolicyRequest): Request<Policy>;
+            /** Returns permissions that a caller has on the specified resource. */
+            testIamPermissions(request: {
+                /** V1 error format. */
+                "$.xgafv"?: string;
+                /** OAuth access token. */
+                access_token?: string;
+                /** Data format for response. */
+                alt?: string;
+                /** JSONP */
+                callback?: string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?: string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?: string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?: string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?: boolean;
+                /** Project ID for this request. */
+                project: string;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?: string;
+                /** The name of the region for this request. */
+                region: string;
+                /** Name or id of the resource for this request. */
+                resource: string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?: string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?: string;
+                /** Legacy name for parameter that has been superseded by `quotaUser`. */
+                userIp?: string;
+            },
+            body: TestPermissionsRequest): Request<TestPermissionsResponse>;
+        }
+        interface NetworkEdgeSecurityServicesResource {
+            /** Retrieves the list of all NetworkEdgeSecurityService resources available to the specified project. */
+            aggregatedList(request?: {
+                /** V1 error format. */
+                "$.xgafv"?: string;
+                /** OAuth access token. */
+                access_token?: string;
+                /** Data format for response. */
+                alt?: string;
+                /** JSONP */
+                callback?: string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?: string;
+                /**
+                 * A filter expression that filters resources listed in the response. Most Compute resources support two types of filter expressions: expressions that support regular expressions
+                 * and expressions that follow API improvement proposal AIP-160. If you want to use AIP-160, your expression must specify the field name, an operator, and the value that you want
+                 * to use for filtering. The value must be a string, a number, or a boolean. The operator must be either `=`, `!=`, `>`, `<`, `<=`, `>=` or `:`. For example, if you are filtering
+                 * Compute Engine instances, you can exclude instances named `example-instance` by specifying `name != example-instance`. The `:` operator can be used with string fields to match
+                 * substrings. For non-string fields it is equivalent to the `=` operator. The `:*` comparison can be used to test whether a key has been defined. For example, to find all objects
+                 * with `owner` label use: ``` labels.owner:* ``` You can also filter nested fields. For example, you could specify `scheduling.automaticRestart = false` to include instances only
+                 * if they are not scheduled for automatic restarts. You can use filtering on nested fields to filter based on resource labels. To filter on multiple expressions, provide each
+                 * separate expression within parentheses. For example: ``` (scheduling.automaticRestart = true) (cpuPlatform = "Intel Skylake") ``` By default, each expression is an `AND`
+                 * expression. However, you can include `AND` and `OR` expressions explicitly. For example: ``` (cpuPlatform = "Intel Skylake") OR (cpuPlatform = "Intel Broadwell") AND
+                 * (scheduling.automaticRestart = true) ``` If you want to use a regular expression, use the `eq` (equal) or `ne` (not equal) operator against a single un-parenthesized expression
+                 * with or without quotes or against multiple parenthesized expressions. Examples: `fieldname eq unquoted literal` `fieldname eq 'single quoted literal'` `fieldname eq "double
+                 * quoted literal"` `(fieldname1 eq literal) (fieldname2 ne "literal")` The literal value is interpreted as a regular expression using Google RE2 library syntax. The literal value
+                 * must match the entire field. For example, to filter for instances that do not end with name "instance", you would use `name ne .*instance`.
+                 */
+                filter?: string;
+                /**
+                 * Indicates whether every visible scope for each scope type (zone, region, global) should be included in the response. For new resource types added after this field, the flag has
+                 * no effect as new resource types will always include every visible scope for each scope type in response. For resource types which predate this field, if this flag is omitted or
+                 * false, only scopes of the scope types where the resource type is expected to be found will be included.
+                 */
+                includeAllScopes?: boolean;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?: string;
+                /**
+                 * The maximum number of results per page that should be returned. If the number of available results is larger than `maxResults`, Compute Engine returns a `nextPageToken` that can
+                 * be used to get the next page of results in subsequent list requests. Acceptable values are `0` to `500`, inclusive. (Default: `500`)
+                 */
+                maxResults?: number;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?: string;
+                /**
+                 * Sorts list results by a certain order. By default, results are returned in alphanumerical order based on the resource name. You can also sort results in descending order based
+                 * on the creation timestamp using `orderBy="creationTimestamp desc"`. This sorts results based on the `creationTimestamp` field in reverse chronological order (newest result
+                 * first). Use this to sort resources like operations so that the newest operation is returned first. Currently, only sorting by `name` or `creationTimestamp desc` is supported.
+                 */
+                orderBy?: string;
+                /** Specifies a page token to use. Set `pageToken` to the `nextPageToken` returned by a previous list request to get the next page of results. */
+                pageToken?: string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?: boolean;
+                /** Name of the project scoping this request. */
+                project: string;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?: string;
+                /** Opt-in for partial success behavior which provides partial results in case of failure. The default value is false. */
+                returnPartialSuccess?: boolean;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?: string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?: string;
+                /** Legacy name for parameter that has been superseded by `quotaUser`. */
+                userIp?: string;
+            }): Request<NetworkEdgeSecurityServiceAggregatedList>;
+            /** Deletes the specified service. */
+            delete(request?: {
+                /** V1 error format. */
+                "$.xgafv"?: string;
+                /** OAuth access token. */
+                access_token?: string;
+                /** Data format for response. */
+                alt?: string;
+                /** JSONP */
+                callback?: string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?: string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?: string;
+                /** Name of the network edge security service to delete. */
+                networkEdgeSecurityService: string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?: string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?: boolean;
+                /** Project ID for this request. */
+                project: string;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?: string;
+                /** Name of the region scoping this request. */
+                region: string;
+                /**
+                 * An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already
+                 * been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server
+                 * can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate
+                 * commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
+                 */
+                requestId?: string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?: string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?: string;
+                /** Legacy name for parameter that has been superseded by `quotaUser`. */
+                userIp?: string;
+            }): Request<Operation>;
+            /** Gets a specified NetworkEdgeSecurityService. */
+            get(request?: {
+                /** V1 error format. */
+                "$.xgafv"?: string;
+                /** OAuth access token. */
+                access_token?: string;
+                /** Data format for response. */
+                alt?: string;
+                /** JSONP */
+                callback?: string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?: string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?: string;
+                /** Name of the network edge security service to get. */
+                networkEdgeSecurityService: string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?: string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?: boolean;
+                /** Project ID for this request. */
+                project: string;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?: string;
+                /** Name of the region scoping this request. */
+                region: string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?: string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?: string;
+                /** Legacy name for parameter that has been superseded by `quotaUser`. */
+                userIp?: string;
+            }): Request<NetworkEdgeSecurityService>;
+            /** Creates a new service in the specified project using the data included in the request. */
+            insert(request: {
+                /** V1 error format. */
+                "$.xgafv"?: string;
+                /** OAuth access token. */
+                access_token?: string;
+                /** Data format for response. */
+                alt?: string;
+                /** JSONP */
+                callback?: string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?: string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?: string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?: string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?: boolean;
+                /** Project ID for this request. */
+                project: string;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?: string;
+                /** Name of the region scoping this request. */
+                region: string;
+                /**
+                 * An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already
+                 * been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server
+                 * can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate
+                 * commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
+                 */
+                requestId?: string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?: string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?: string;
+                /** Legacy name for parameter that has been superseded by `quotaUser`. */
+                userIp?: string;
+                /** If true, the request will not be committed. */
+                validateOnly?: boolean;
+                /** Request body */
+                resource: NetworkEdgeSecurityService;
+            }): Request<Operation>;
             insert(request: {
                 /** V1 error format. */
                 "$.xgafv"?: string;
@@ -60277,7 +61016,244 @@ declare namespace gapi.client {
                  * commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
                  */
                 requestId?: string;
-                /** Name of the TargetSslProxy resource whose CertificateMap is to be set. The name must be 1-63 characters long, and comply with RFC1035. */
+                /** Name of the TargetSslProxy resource whose CertificateMap is to be set. The name must be 1-63 characters long, and comply with RFC1035. */
+                targetSslProxy: string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?: string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?: string;
+                /** Legacy name for parameter that has been superseded by `quotaUser`. */
+                userIp?: string;
+                /** Request body */
+                resource: TargetSslProxiesSetCertificateMapRequest;
+            }): Request<Operation>;
+            setCertificateMap(request: {
+                /** V1 error format. */
+                "$.xgafv"?: string;
+                /** OAuth access token. */
+                access_token?: string;
+                /** Data format for response. */
+                alt?: string;
+                /** JSONP */
+                callback?: string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?: string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?: string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?: string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?: boolean;
+                /** Project ID for this request. */
+                project: string;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?: string;
+                /**
+                 * An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already
+                 * been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server
+                 * can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate
+                 * commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
+                 */
+                requestId?: string;
+                /** Name of the TargetSslProxy resource whose CertificateMap is to be set. The name must be 1-63 characters long, and comply with RFC1035. */
+                targetSslProxy: string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?: string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?: string;
+                /** Legacy name for parameter that has been superseded by `quotaUser`. */
+                userIp?: string;
+            },
+            body: TargetSslProxiesSetCertificateMapRequest): Request<Operation>;
+            /** Changes the ProxyHeaderType for TargetSslProxy. */
+            setProxyHeader(request: {
+                /** V1 error format. */
+                "$.xgafv"?: string;
+                /** OAuth access token. */
+                access_token?: string;
+                /** Data format for response. */
+                alt?: string;
+                /** JSONP */
+                callback?: string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?: string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?: string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?: string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?: boolean;
+                /** Project ID for this request. */
+                project: string;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?: string;
+                /**
+                 * An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already
+                 * been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server
+                 * can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate
+                 * commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
+                 */
+                requestId?: string;
+                /** Name of the TargetSslProxy resource whose ProxyHeader is to be set. */
+                targetSslProxy: string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?: string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?: string;
+                /** Legacy name for parameter that has been superseded by `quotaUser`. */
+                userIp?: string;
+                /** Request body */
+                resource: TargetSslProxiesSetProxyHeaderRequest;
+            }): Request<Operation>;
+            setProxyHeader(request: {
+                /** V1 error format. */
+                "$.xgafv"?: string;
+                /** OAuth access token. */
+                access_token?: string;
+                /** Data format for response. */
+                alt?: string;
+                /** JSONP */
+                callback?: string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?: string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?: string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?: string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?: boolean;
+                /** Project ID for this request. */
+                project: string;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?: string;
+                /**
+                 * An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already
+                 * been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server
+                 * can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate
+                 * commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
+                 */
+                requestId?: string;
+                /** Name of the TargetSslProxy resource whose ProxyHeader is to be set. */
+                targetSslProxy: string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?: string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?: string;
+                /** Legacy name for parameter that has been superseded by `quotaUser`. */
+                userIp?: string;
+            },
+            body: TargetSslProxiesSetProxyHeaderRequest): Request<Operation>;
+            /** Changes SslCertificates for TargetSslProxy. */
+            setSslCertificates(request: {
+                /** V1 error format. */
+                "$.xgafv"?: string;
+                /** OAuth access token. */
+                access_token?: string;
+                /** Data format for response. */
+                alt?: string;
+                /** JSONP */
+                callback?: string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?: string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?: string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?: string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?: boolean;
+                /** Project ID for this request. */
+                project: string;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?: string;
+                /**
+                 * An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already
+                 * been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server
+                 * can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate
+                 * commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
+                 */
+                requestId?: string;
+                /** Name of the TargetSslProxy resource whose SslCertificate resource is to be set. */
+                targetSslProxy: string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?: string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?: string;
+                /** Legacy name for parameter that has been superseded by `quotaUser`. */
+                userIp?: string;
+                /** Request body */
+                resource: TargetSslProxiesSetSslCertificatesRequest;
+            }): Request<Operation>;
+            setSslCertificates(request: {
+                /** V1 error format. */
+                "$.xgafv"?: string;
+                /** OAuth access token. */
+                access_token?: string;
+                /** Data format for response. */
+                alt?: string;
+                /** JSONP */
+                callback?: string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?: string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?: string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?: string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?: boolean;
+                /** Project ID for this request. */
+                project: string;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?: string;
+                /**
+                 * An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already
+                 * been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server
+                 * can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate
+                 * commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
+                 */
+                requestId?: string;
+                /** Name of the TargetSslProxy resource whose SslCertificate resource is to be set. */
+                targetSslProxy: string;
+                /** Upload protocol for media (e.g. "raw", "multipart"). */
+                upload_protocol?: string;
+                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
+                uploadType?: string;
+                /** Legacy name for parameter that has been superseded by `quotaUser`. */
+                userIp?: string;
+            },
+            body: TargetSslProxiesSetSslCertificatesRequest): Request<Operation>;
+            /**
+             * Sets the SSL policy for TargetSslProxy. The SSL policy specifies the server-side support for SSL features. This affects connections between clients and the SSL proxy load balancer.
+             * They do not affect the connection between the load balancer and the backends.
+             */
+            setSslPolicy(request: {
+                /** V1 error format. */
+                "$.xgafv"?: string;
+                /** OAuth access token. */
+                access_token?: string;
+                /** Data format for response. */
+                alt?: string;
+                /** JSONP */
+                callback?: string;
+                /** Selector specifying which fields to include in a partial response. */
+                fields?: string;
+                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
+                key?: string;
+                /** OAuth 2.0 token for the current user. */
+                oauth_token?: string;
+                /** Returns response with indentations and line breaks. */
+                prettyPrint?: boolean;
+                /** Project ID for this request. */
+                project: string;
+                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
+                quotaUser?: string;
+                /**
+                 * An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already
+                 * been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server
+                 * can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate
+                 * commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
+                 */
+                requestId?: string;
+                /** Name of the TargetSslProxy resource whose SSL policy is to be set. The name must be 1-63 characters long, and comply with RFC1035. */
                 targetSslProxy: string;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
                 upload_protocol?: string;
@@ -60286,9 +61262,9 @@ declare namespace gapi.client {
                 /** Legacy name for parameter that has been superseded by `quotaUser`. */
                 userIp?: string;
                 /** Request body */
-                resource: TargetSslProxiesSetCertificateMapRequest;
+                resource: SslPolicyReference;
             }): Request<Operation>;
-            setCertificateMap(request: {
+            setSslPolicy(request: {
                 /** V1 error format. */
                 "$.xgafv"?: string;
                 /** OAuth access token. */
@@ -60316,7 +61292,7 @@ declare namespace gapi.client {
                  * commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
                  */
                 requestId?: string;
-                /** Name of the TargetSslProxy resource whose CertificateMap is to be set. The name must be 1-63 characters long, and comply with RFC1035. */
+                /** Name of the TargetSslProxy resource whose SSL policy is to be set. The name must be 1-63 characters long, and comply with RFC1035. */
                 targetSslProxy: string;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
                 upload_protocol?: string;
@@ -60325,48 +61301,9 @@ declare namespace gapi.client {
                 /** Legacy name for parameter that has been superseded by `quotaUser`. */
                 userIp?: string;
             },
-            body: TargetSslProxiesSetCertificateMapRequest): Request<Operation>;
-            /** Changes the ProxyHeaderType for TargetSslProxy. */
-            setProxyHeader(request: {
-                /** V1 error format. */
-                "$.xgafv"?: string;
-                /** OAuth access token. */
-                access_token?: string;
-                /** Data format for response. */
-                alt?: string;
-                /** JSONP */
-                callback?: string;
-                /** Selector specifying which fields to include in a partial response. */
-                fields?: string;
-                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
-                key?: string;
-                /** OAuth 2.0 token for the current user. */
-                oauth_token?: string;
-                /** Returns response with indentations and line breaks. */
-                prettyPrint?: boolean;
-                /** Project ID for this request. */
-                project: string;
-                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
-                quotaUser?: string;
-                /**
-                 * An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already
-                 * been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server
-                 * can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate
-                 * commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
-                 */
-                requestId?: string;
-                /** Name of the TargetSslProxy resource whose ProxyHeader is to be set. */
-                targetSslProxy: string;
-                /** Upload protocol for media (e.g. "raw", "multipart"). */
-                upload_protocol?: string;
-                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
-                uploadType?: string;
-                /** Legacy name for parameter that has been superseded by `quotaUser`. */
-                userIp?: string;
-                /** Request body */
-                resource: TargetSslProxiesSetProxyHeaderRequest;
-            }): Request<Operation>;
-            setProxyHeader(request: {
+            body: SslPolicyReference): Request<Operation>;
+            /** Returns permissions that a caller has on the specified resource. */
+            testIamPermissions(request: {
                 /** V1 error format. */
                 "$.xgafv"?: string;
                 /** OAuth access token. */
@@ -60387,15 +61324,8 @@ declare namespace gapi.client {
                 project: string;
                 /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
                 quotaUser?: string;
-                /**
-                 * An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already
-                 * been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server
-                 * can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate
-                 * commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
-                 */
-                requestId?: string;
-                /** Name of the TargetSslProxy resource whose ProxyHeader is to be set. */
-                targetSslProxy: string;
+                /** Name or id of the resource for this request. */
+                resource: string;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
                 upload_protocol?: string;
                 /** Legacy upload protocol for media (e.g. "media", "multipart"). */
@@ -60403,9 +61333,11 @@ declare namespace gapi.client {
                 /** Legacy name for parameter that has been superseded by `quotaUser`. */
                 userIp?: string;
             },
-            body: TargetSslProxiesSetProxyHeaderRequest): Request<Operation>;
-            /** Changes SslCertificates for TargetSslProxy. */
-            setSslCertificates(request: {
+            body: TestPermissionsRequest): Request<TestPermissionsResponse>;
+        }
+        interface TargetTcpProxiesResource {
+            /** Retrieves the list of all TargetTcpProxy resources, regional and global, available to the specified project. */
+            aggregatedList(request?: {
                 /** V1 error format. */
                 "$.xgafv"?: string;
                 /** OAuth access token. */
@@ -60416,187 +61348,60 @@ declare namespace gapi.client {
                 callback?: string;
                 /** Selector specifying which fields to include in a partial response. */
                 fields?: string;
-                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
-                key?: string;
-                /** OAuth 2.0 token for the current user. */
-                oauth_token?: string;
-                /** Returns response with indentations and line breaks. */
-                prettyPrint?: boolean;
-                /** Project ID for this request. */
-                project: string;
-                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
-                quotaUser?: string;
                 /**
-                 * An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already
-                 * been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server
-                 * can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate
-                 * commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
+                 * A filter expression that filters resources listed in the response. Most Compute resources support two types of filter expressions: expressions that support regular expressions
+                 * and expressions that follow API improvement proposal AIP-160. If you want to use AIP-160, your expression must specify the field name, an operator, and the value that you want
+                 * to use for filtering. The value must be a string, a number, or a boolean. The operator must be either `=`, `!=`, `>`, `<`, `<=`, `>=` or `:`. For example, if you are filtering
+                 * Compute Engine instances, you can exclude instances named `example-instance` by specifying `name != example-instance`. The `:` operator can be used with string fields to match
+                 * substrings. For non-string fields it is equivalent to the `=` operator. The `:*` comparison can be used to test whether a key has been defined. For example, to find all objects
+                 * with `owner` label use: ``` labels.owner:* ``` You can also filter nested fields. For example, you could specify `scheduling.automaticRestart = false` to include instances only
+                 * if they are not scheduled for automatic restarts. You can use filtering on nested fields to filter based on resource labels. To filter on multiple expressions, provide each
+                 * separate expression within parentheses. For example: ``` (scheduling.automaticRestart = true) (cpuPlatform = "Intel Skylake") ``` By default, each expression is an `AND`
+                 * expression. However, you can include `AND` and `OR` expressions explicitly. For example: ``` (cpuPlatform = "Intel Skylake") OR (cpuPlatform = "Intel Broadwell") AND
+                 * (scheduling.automaticRestart = true) ``` If you want to use a regular expression, use the `eq` (equal) or `ne` (not equal) operator against a single un-parenthesized expression
+                 * with or without quotes or against multiple parenthesized expressions. Examples: `fieldname eq unquoted literal` `fieldname eq 'single quoted literal'` `fieldname eq "double
+                 * quoted literal"` `(fieldname1 eq literal) (fieldname2 ne "literal")` The literal value is interpreted as a regular expression using Google RE2 library syntax. The literal value
+                 * must match the entire field. For example, to filter for instances that do not end with name "instance", you would use `name ne .*instance`.
                  */
-                requestId?: string;
-                /** Name of the TargetSslProxy resource whose SslCertificate resource is to be set. */
-                targetSslProxy: string;
-                /** Upload protocol for media (e.g. "raw", "multipart"). */
-                upload_protocol?: string;
-                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
-                uploadType?: string;
-                /** Legacy name for parameter that has been superseded by `quotaUser`. */
-                userIp?: string;
-                /** Request body */
-                resource: TargetSslProxiesSetSslCertificatesRequest;
-            }): Request<Operation>;
-            setSslCertificates(request: {
-                /** V1 error format. */
-                "$.xgafv"?: string;
-                /** OAuth access token. */
-                access_token?: string;
-                /** Data format for response. */
-                alt?: string;
-                /** JSONP */
-                callback?: string;
-                /** Selector specifying which fields to include in a partial response. */
-                fields?: string;
-                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
-                key?: string;
-                /** OAuth 2.0 token for the current user. */
-                oauth_token?: string;
-                /** Returns response with indentations and line breaks. */
-                prettyPrint?: boolean;
-                /** Project ID for this request. */
-                project: string;
-                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
-                quotaUser?: string;
+                filter?: string;
                 /**
-                 * An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already
-                 * been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server
-                 * can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate
-                 * commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
+                 * Indicates whether every visible scope for each scope type (zone, region, global) should be included in the response. For new resource types added after this field, the flag has
+                 * no effect as new resource types will always include every visible scope for each scope type in response. For resource types which predate this field, if this flag is omitted or
+                 * false, only scopes of the scope types where the resource type is expected to be found will be included.
                  */
-                requestId?: string;
-                /** Name of the TargetSslProxy resource whose SslCertificate resource is to be set. */
-                targetSslProxy: string;
-                /** Upload protocol for media (e.g. "raw", "multipart"). */
-                upload_protocol?: string;
-                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
-                uploadType?: string;
-                /** Legacy name for parameter that has been superseded by `quotaUser`. */
-                userIp?: string;
-            },
-            body: TargetSslProxiesSetSslCertificatesRequest): Request<Operation>;
-            /**
-             * Sets the SSL policy for TargetSslProxy. The SSL policy specifies the server-side support for SSL features. This affects connections between clients and the SSL proxy load balancer.
-             * They do not affect the connection between the load balancer and the backends.
-             */
-            setSslPolicy(request: {
-                /** V1 error format. */
-                "$.xgafv"?: string;
-                /** OAuth access token. */
-                access_token?: string;
-                /** Data format for response. */
-                alt?: string;
-                /** JSONP */
-                callback?: string;
-                /** Selector specifying which fields to include in a partial response. */
-                fields?: string;
+                includeAllScopes?: boolean;
                 /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
                 key?: string;
-                /** OAuth 2.0 token for the current user. */
-                oauth_token?: string;
-                /** Returns response with indentations and line breaks. */
-                prettyPrint?: boolean;
-                /** Project ID for this request. */
-                project: string;
-                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
-                quotaUser?: string;
                 /**
-                 * An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already
-                 * been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server
-                 * can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate
-                 * commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
+                 * The maximum number of results per page that should be returned. If the number of available results is larger than `maxResults`, Compute Engine returns a `nextPageToken` that can
+                 * be used to get the next page of results in subsequent list requests. Acceptable values are `0` to `500`, inclusive. (Default: `500`)
                  */
-                requestId?: string;
-                /** Name of the TargetSslProxy resource whose SSL policy is to be set. The name must be 1-63 characters long, and comply with RFC1035. */
-                targetSslProxy: string;
-                /** Upload protocol for media (e.g. "raw", "multipart"). */
-                upload_protocol?: string;
-                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
-                uploadType?: string;
-                /** Legacy name for parameter that has been superseded by `quotaUser`. */
-                userIp?: string;
-                /** Request body */
-                resource: SslPolicyReference;
-            }): Request<Operation>;
-            setSslPolicy(request: {
-                /** V1 error format. */
-                "$.xgafv"?: string;
-                /** OAuth access token. */
-                access_token?: string;
-                /** Data format for response. */
-                alt?: string;
-                /** JSONP */
-                callback?: string;
-                /** Selector specifying which fields to include in a partial response. */
-                fields?: string;
-                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
-                key?: string;
+                maxResults?: number;
                 /** OAuth 2.0 token for the current user. */
                 oauth_token?: string;
-                /** Returns response with indentations and line breaks. */
-                prettyPrint?: boolean;
-                /** Project ID for this request. */
-                project: string;
-                /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
-                quotaUser?: string;
                 /**
-                 * An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already
-                 * been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server
-                 * can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate
-                 * commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).
+                 * Sorts list results by a certain order. By default, results are returned in alphanumerical order based on the resource name. You can also sort results in descending order based
+                 * on the creation timestamp using `orderBy="creationTimestamp desc"`. This sorts results based on the `creationTimestamp` field in reverse chronological order (newest result
+                 * first). Use this to sort resources like operations so that the newest operation is returned first. Currently, only sorting by `name` or `creationTimestamp desc` is supported.
                  */
-                requestId?: string;
-                /** Name of the TargetSslProxy resource whose SSL policy is to be set. The name must be 1-63 characters long, and comply with RFC1035. */
-                targetSslProxy: string;
-                /** Upload protocol for media (e.g. "raw", "multipart"). */
-                upload_protocol?: string;
-                /** Legacy upload protocol for media (e.g. "media", "multipart"). */
-                uploadType?: string;
-                /** Legacy name for parameter that has been superseded by `quotaUser`. */
-                userIp?: string;
-            },
-            body: SslPolicyReference): Request<Operation>;
-            /** Returns permissions that a caller has on the specified resource. */
-            testIamPermissions(request: {
-                /** V1 error format. */
-                "$.xgafv"?: string;
-                /** OAuth access token. */
-                access_token?: string;
-                /** Data format for response. */
-                alt?: string;
-                /** JSONP */
-                callback?: string;
-                /** Selector specifying which fields to include in a partial response. */
-                fields?: string;
-                /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
-                key?: string;
-                /** OAuth 2.0 token for the current user. */
-                oauth_token?: string;
+                orderBy?: string;
+                /** Specifies a page token to use. Set `pageToken` to the `nextPageToken` returned by a previous list request to get the next page of results. */
+                pageToken?: string;
                 /** Returns response with indentations and line breaks. */
                 prettyPrint?: boolean;
-                /** Project ID for this request. */
+                /** Name of the project scoping this request. */
                 project: string;
                 /** Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. */
                 quotaUser?: string;
-                /** Name or id of the resource for this request. */
-                resource: string;
+                /** Opt-in for partial success behavior which provides partial results in case of failure. The default value is false. */
+                returnPartialSuccess?: boolean;
                 /** Upload protocol for media (e.g. "raw", "multipart"). */
                 upload_protocol?: string;
                 /** Legacy upload protocol for media (e.g. "media", "multipart"). */
                 uploadType?: string;
                 /** Legacy name for parameter that has been superseded by `quotaUser`. */
                 userIp?: string;
-            },
-            body: TestPermissionsRequest): Request<TestPermissionsResponse>;
-        }
-        interface TargetTcpProxiesResource {
+            }): Request<TargetTcpProxyAggregatedList>;
             /** Deletes the specified TargetTcpProxy resource. */
             delete(request?: {
                 /** V1 error format. */
@@ -63288,6 +64093,8 @@ declare namespace gapi.client {
 
         const machineTypes: MachineTypesResource;
 
+        const networkAttachments: NetworkAttachmentsResource;
+
         const networkEdgeSecurityServices: NetworkEdgeSecurityServicesResource;
 
         const networkEndpointGroups: NetworkEndpointGroupsResource;