@pulumi/gcp 9.31.0 → 9.32.1

package/types/output.d.ts

@@ -604,6 +604,12 @@ export declare namespace accesscontextmanager {
          * An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
          */
         accessLevel?: string;
+        /**
+         * A Private Service Connect endpoint that is allowed to access data outside the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: outputs.accesscontextmanager.ServicePerimeterDryRunEgressPolicyEgressFromSourcePscEndpoint;
         /**
          * A Google Cloud resource that is allowed to egress the perimeter.
          * Requests from these resources are allowed to access data outside the perimeter.
@@ -614,6 +620,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: string;
     }
+    interface ServicePerimeterDryRunEgressPolicyEgressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: string;
+    }
     interface ServicePerimeterDryRunEgressPolicyEgressTo {
         /**
          * A list of external resources that are allowed to be accessed. A request
@@ -705,6 +718,12 @@ export declare namespace accesscontextmanager {
          * If * is specified, then all IngressSources will be allowed.
          */
         accessLevel?: string;
+        /**
+         * A Private Service Connect endpoint that is allowed to access the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: outputs.accesscontextmanager.ServicePerimeterDryRunIngressPolicyIngressFromSourcePscEndpoint;
         /**
          * A Google Cloud resource that is allowed to ingress the perimeter.
          * Requests from these resources will be allowed to access perimeter data.
@@ -715,6 +734,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: string;
     }
+    interface ServicePerimeterDryRunIngressPolicyIngressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: string;
+    }
     interface ServicePerimeterDryRunIngressPolicyIngressTo {
         /**
          * A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
@@ -801,6 +827,12 @@ export declare namespace accesscontextmanager {
          * An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
          */
         accessLevel?: string;
+        /**
+         * A Private Service Connect endpoint that is allowed to access data outside the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: outputs.accesscontextmanager.ServicePerimeterEgressPolicyEgressFromSourcePscEndpoint;
         /**
          * A Google Cloud resource that is allowed to egress the perimeter.
          * Requests from these resources are allowed to access data outside the perimeter.
@@ -811,6 +843,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: string;
     }
+    interface ServicePerimeterEgressPolicyEgressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: string;
+    }
     interface ServicePerimeterEgressPolicyEgressTo {
         /**
          * A list of external resources that are allowed to be accessed. A request
@@ -902,6 +941,12 @@ export declare namespace accesscontextmanager {
          * If * is specified, then all IngressSources will be allowed.
          */
         accessLevel?: string;
+        /**
+         * A Private Service Connect endpoint that is allowed to access the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: outputs.accesscontextmanager.ServicePerimeterIngressPolicyIngressFromSourcePscEndpoint;
         /**
          * A Google Cloud resource that is allowed to ingress the perimeter.
          * Requests from these resources will be allowed to access perimeter data.
@@ -915,6 +960,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: string;
     }
+    interface ServicePerimeterIngressPolicyIngressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: string;
+    }
     interface ServicePerimeterIngressPolicyIngressTo {
         /**
          * A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
@@ -1066,6 +1118,12 @@ export declare namespace accesscontextmanager {
          * An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
          */
         accessLevel?: string;
+        /**
+         * A Private Service Connect endpoint that is allowed to access data outside the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: outputs.accesscontextmanager.ServicePerimeterSpecEgressPolicyEgressFromSourcePscEndpoint;
         /**
          * A Google Cloud resource that is allowed to egress the perimeter.
          * Requests from these resources are allowed to access data outside the perimeter.
@@ -1076,6 +1134,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: string;
     }
+    interface ServicePerimeterSpecEgressPolicyEgressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: string;
+    }
     interface ServicePerimeterSpecEgressPolicyEgressTo {
         /**
          * A list of external resources that are allowed to be accessed. A request
@@ -1176,6 +1241,12 @@ export declare namespace accesscontextmanager {
          * An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
          */
         accessLevel?: string;
+        /**
+         * A Private Service Connect endpoint that is allowed to access data outside the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: outputs.accesscontextmanager.ServicePerimeterSpecIngressPolicyIngressFromSourcePscEndpoint;
         /**
          * A Google Cloud resource that is allowed to egress the perimeter.
          * Requests from these resources are allowed to access data outside the perimeter.
@@ -1186,6 +1257,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: string;
     }
+    interface ServicePerimeterSpecIngressPolicyIngressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: string;
+    }
     interface ServicePerimeterSpecIngressPolicyIngressTo {
         /**
          * A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
@@ -1241,6 +1319,12 @@ export declare namespace accesscontextmanager {
         permission?: string;
     }
     interface ServicePerimeterSpecVpcAccessibleServices {
+        /**
+         * Specifies which Google services are allowed to be accessed from
+         * VPC networks in the service perimeter.
+         * Structure is documented below.
+         */
+        allowedServicePatterns?: outputs.accesscontextmanager.ServicePerimeterSpecVpcAccessibleServicesAllowedServicePattern[];
         /**
          * The list of APIs usable within the Service Perimeter.
          * Must be empty unless `enableRestriction` is True.
@@ -1251,6 +1335,43 @@ export declare namespace accesscontextmanager {
          * list of APIs specified in 'allowedServices'.
          */
         enableRestriction?: boolean;
+        /**
+         * Defines the enforcement scopes of service patterns.
+         * Each value may be one of: `GOOGLE_APIS_VIA_PRIVATE_PATH`.
+         */
+        servicePatternsEnforcementScopes?: string[];
+    }
+    interface ServicePerimeterSpecVpcAccessibleServicesAllowedServicePattern {
+        /**
+         * Modifiers to apply to the requests that match the URL pattern.
+         * Structure is documented below.
+         */
+        modifiers?: outputs.accesscontextmanager.ServicePerimeterSpecVpcAccessibleServicesAllowedServicePatternModifier[];
+        /**
+         * URL pattern to allow.
+         */
+        pattern?: string;
+        /**
+         * Supported service to allow.
+         */
+        service?: string;
+    }
+    interface ServicePerimeterSpecVpcAccessibleServicesAllowedServicePatternModifier {
+        /**
+         * Adds additional HTTP request headers.
+         * Structure is documented below.
+         */
+        addRequestHeader?: outputs.accesscontextmanager.ServicePerimeterSpecVpcAccessibleServicesAllowedServicePatternModifierAddRequestHeader;
+    }
+    interface ServicePerimeterSpecVpcAccessibleServicesAllowedServicePatternModifierAddRequestHeader {
+        /**
+         * HTTP header key.
+         */
+        key: string;
+        /**
+         * HTTP header value.
+         */
+        value: string;
     }
     interface ServicePerimeterStatus {
         /**
@@ -1349,6 +1470,12 @@ export declare namespace accesscontextmanager {
          * An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
          */
         accessLevel?: string;
+        /**
+         * A Private Service Connect endpoint that is allowed to access data outside the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: outputs.accesscontextmanager.ServicePerimeterStatusEgressPolicyEgressFromSourcePscEndpoint;
         /**
          * A Google Cloud resource that is allowed to egress the perimeter.
          * Requests from these resources are allowed to access data outside the perimeter.
@@ -1359,6 +1486,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: string;
     }
+    interface ServicePerimeterStatusEgressPolicyEgressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: string;
+    }
     interface ServicePerimeterStatusEgressPolicyEgressTo {
         /**
          * A list of external resources that are allowed to be accessed. A request
@@ -1459,6 +1593,12 @@ export declare namespace accesscontextmanager {
          * An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
          */
         accessLevel?: string;
+        /**
+         * A Private Service Connect endpoint that is allowed to access data outside the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: outputs.accesscontextmanager.ServicePerimeterStatusIngressPolicyIngressFromSourcePscEndpoint;
         /**
          * A Google Cloud resource that is allowed to egress the perimeter.
          * Requests from these resources are allowed to access data outside the perimeter.
@@ -1469,6 +1609,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: string;
     }
+    interface ServicePerimeterStatusIngressPolicyIngressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: string;
+    }
     interface ServicePerimeterStatusIngressPolicyIngressTo {
         /**
          * A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
@@ -1524,6 +1671,12 @@ export declare namespace accesscontextmanager {
         permission?: string;
     }
     interface ServicePerimeterStatusVpcAccessibleServices {
+        /**
+         * Specifies which Google services are allowed to be accessed from
+         * VPC networks in the service perimeter.
+         * Structure is documented below.
+         */
+        allowedServicePatterns?: outputs.accesscontextmanager.ServicePerimeterStatusVpcAccessibleServicesAllowedServicePattern[];
         /**
          * The list of APIs usable within the Service Perimeter.
          * Must be empty unless `enableRestriction` is True.
@@ -1534,6 +1687,43 @@ export declare namespace accesscontextmanager {
          * list of APIs specified in 'allowedServices'.
          */
         enableRestriction?: boolean;
+        /**
+         * Defines the enforcement scopes of service patterns.
+         * Each value may be one of: `GOOGLE_APIS_VIA_PRIVATE_PATH`.
+         */
+        servicePatternsEnforcementScopes?: string[];
+    }
+    interface ServicePerimeterStatusVpcAccessibleServicesAllowedServicePattern {
+        /**
+         * Modifiers to apply to the requests that match the URL pattern.
+         * Structure is documented below.
+         */
+        modifiers?: outputs.accesscontextmanager.ServicePerimeterStatusVpcAccessibleServicesAllowedServicePatternModifier[];
+        /**
+         * URL pattern to allow.
+         */
+        pattern?: string;
+        /**
+         * Supported service to allow.
+         */
+        service?: string;
+    }
+    interface ServicePerimeterStatusVpcAccessibleServicesAllowedServicePatternModifier {
+        /**
+         * Adds additional HTTP request headers.
+         * Structure is documented below.
+         */
+        addRequestHeader?: outputs.accesscontextmanager.ServicePerimeterStatusVpcAccessibleServicesAllowedServicePatternModifierAddRequestHeader;
+    }
+    interface ServicePerimeterStatusVpcAccessibleServicesAllowedServicePatternModifierAddRequestHeader {
+        /**
+         * HTTP header key.
+         */
+        key: string;
+        /**
+         * HTTP header value.
+         */
+        value: string;
     }
     interface ServicePerimetersServicePerimeter {
         /**
@@ -1707,6 +1897,12 @@ export declare namespace accesscontextmanager {
          * An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
          */
         accessLevel?: string;
+        /**
+         * A Private Service Connect endpoint that is allowed to access data outside the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: outputs.accesscontextmanager.ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourcePscEndpoint;
         /**
          * A Google Cloud resource that is allowed to egress the perimeter.
          * Requests from these resources are allowed to access data outside the perimeter.
@@ -1717,6 +1913,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: string;
     }
+    interface ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: string;
+    }
     interface ServicePerimetersServicePerimeterSpecEgressPolicyEgressTo {
         /**
          * A list of external resources that are allowed to be accessed. A request
@@ -1817,6 +2020,12 @@ export declare namespace accesscontextmanager {
          * An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
          */
         accessLevel?: string;
+        /**
+         * A Private Service Connect endpoint that is allowed to access data outside the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: outputs.accesscontextmanager.ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourcePscEndpoint;
         /**
          * A Google Cloud resource that is allowed to egress the perimeter.
          * Requests from these resources are allowed to access data outside the perimeter.
@@ -1827,6 +2036,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: string;
     }
+    interface ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: string;
+    }
     interface ServicePerimetersServicePerimeterSpecIngressPolicyIngressTo {
         /**
          * A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
@@ -1882,6 +2098,12 @@ export declare namespace accesscontextmanager {
         permission?: string;
     }
     interface ServicePerimetersServicePerimeterSpecVpcAccessibleServices {
+        /**
+         * Specifies which Google services are allowed to be accessed from
+         * VPC networks in the service perimeter.
+         * Structure is documented below.
+         */
+        allowedServicePatterns?: outputs.accesscontextmanager.ServicePerimetersServicePerimeterSpecVpcAccessibleServicesAllowedServicePattern[];
         /**
          * The list of APIs usable within the Service Perimeter.
          * Must be empty unless `enableRestriction` is True.
@@ -1892,6 +2114,43 @@ export declare namespace accesscontextmanager {
          * list of APIs specified in 'allowedServices'.
          */
         enableRestriction?: boolean;
+        /**
+         * Defines the enforcement scopes of service patterns.
+         * Each value may be one of: `GOOGLE_APIS_VIA_PRIVATE_PATH`.
+         */
+        servicePatternsEnforcementScopes?: string[];
+    }
+    interface ServicePerimetersServicePerimeterSpecVpcAccessibleServicesAllowedServicePattern {
+        /**
+         * Modifiers to apply to the requests that match the URL pattern.
+         * Structure is documented below.
+         */
+        modifiers?: outputs.accesscontextmanager.ServicePerimetersServicePerimeterSpecVpcAccessibleServicesAllowedServicePatternModifier[];
+        /**
+         * URL pattern to allow.
+         */
+        pattern?: string;
+        /**
+         * Supported service to allow.
+         */
+        service?: string;
+    }
+    interface ServicePerimetersServicePerimeterSpecVpcAccessibleServicesAllowedServicePatternModifier {
+        /**
+         * Adds additional HTTP request headers.
+         * Structure is documented below.
+         */
+        addRequestHeader?: outputs.accesscontextmanager.ServicePerimetersServicePerimeterSpecVpcAccessibleServicesAllowedServicePatternModifierAddRequestHeader;
+    }
+    interface ServicePerimetersServicePerimeterSpecVpcAccessibleServicesAllowedServicePatternModifierAddRequestHeader {
+        /**
+         * HTTP header key.
+         */
+        key: string;
+        /**
+         * HTTP header value.
+         */
+        value: string;
     }
     interface ServicePerimetersServicePerimeterStatus {
         /**
@@ -1992,6 +2251,12 @@ export declare namespace accesscontextmanager {
          * An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
          */
         accessLevel?: string;
+        /**
+         * A Private Service Connect endpoint that is allowed to access data outside the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: outputs.accesscontextmanager.ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourcePscEndpoint;
         /**
          * A Google Cloud resource that is allowed to egress the perimeter.
          * Requests from these resources are allowed to access data outside the perimeter.
@@ -2002,6 +2267,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: string;
     }
+    interface ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: string;
+    }
     interface ServicePerimetersServicePerimeterStatusEgressPolicyEgressTo {
         /**
          * A list of external resources that are allowed to be accessed. A request
@@ -2102,6 +2374,12 @@ export declare namespace accesscontextmanager {
          * An AccessLevel resource name that allows resources outside the ServicePerimeter to be accessed from the inside.
          */
         accessLevel?: string;
+        /**
+         * A Private Service Connect endpoint that is allowed to access data outside the perimeter.
+         * The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in.
+         * Structure is documented below.
+         */
+        pscEndpoint?: outputs.accesscontextmanager.ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourcePscEndpoint;
         /**
          * A Google Cloud resource that is allowed to egress the perimeter.
          * Requests from these resources are allowed to access data outside the perimeter.
@@ -2112,6 +2390,13 @@ export declare namespace accesscontextmanager {
          */
         resource?: string;
     }
+    interface ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourcePscEndpoint {
+        /**
+         * The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint.
+         * Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.
+         */
+        forwardingRule?: string;
+    }
     interface ServicePerimetersServicePerimeterStatusIngressPolicyIngressTo {
         /**
          * A list of `ApiOperations` the sources specified in corresponding `IngressFrom`
@@ -2167,6 +2452,12 @@ export declare namespace accesscontextmanager {
         permission?: string;
     }
     interface ServicePerimetersServicePerimeterStatusVpcAccessibleServices {
+        /**
+         * Specifies which Google services are allowed to be accessed from
+         * VPC networks in the service perimeter.
+         * Structure is documented below.
+         */
+        allowedServicePatterns?: outputs.accesscontextmanager.ServicePerimetersServicePerimeterStatusVpcAccessibleServicesAllowedServicePattern[];
         /**
          * The list of APIs usable within the Service Perimeter.
          * Must be empty unless `enableRestriction` is True.
@@ -2177,6 +2468,43 @@ export declare namespace accesscontextmanager {
          * list of APIs specified in 'allowedServices'.
          */
         enableRestriction?: boolean;
+        /**
+         * Defines the enforcement scopes of service patterns.
+         * Each value may be one of: `GOOGLE_APIS_VIA_PRIVATE_PATH`.
+         */
+        servicePatternsEnforcementScopes?: string[];
+    }
+    interface ServicePerimetersServicePerimeterStatusVpcAccessibleServicesAllowedServicePattern {
+        /**
+         * Modifiers to apply to the requests that match the URL pattern.
+         * Structure is documented below.
+         */
+        modifiers?: outputs.accesscontextmanager.ServicePerimetersServicePerimeterStatusVpcAccessibleServicesAllowedServicePatternModifier[];
+        /**
+         * URL pattern to allow.
+         */
+        pattern?: string;
+        /**
+         * Supported service to allow.
+         */
+        service?: string;
+    }
+    interface ServicePerimetersServicePerimeterStatusVpcAccessibleServicesAllowedServicePatternModifier {
+        /**
+         * Adds additional HTTP request headers.
+         * Structure is documented below.
+         */
+        addRequestHeader?: outputs.accesscontextmanager.ServicePerimetersServicePerimeterStatusVpcAccessibleServicesAllowedServicePatternModifierAddRequestHeader;
+    }
+    interface ServicePerimetersServicePerimeterStatusVpcAccessibleServicesAllowedServicePatternModifierAddRequestHeader {
+        /**
+         * HTTP header key.
+         */
+        key: string;
+        /**
+         * HTTP header value.
+         */
+        value: string;
     }
 }
 export declare namespace agentregistry {
@@ -7884,7 +8212,8 @@ export declare namespace backupdisasterrecovery {
          */
         backupApplianceBackupConfigs: outputs.backupdisasterrecovery.GetDataSourceBackupConfigInfoBackupApplianceBackupConfig[];
         /**
-         * Configuration for a Google Cloud resource.
+         * Details about the GCP backup configuration. Structure is documented below.
+         * The `gcpBackupConfig` block contains:
          */
         gcpBackupConfigs: outputs.backupdisasterrecovery.GetDataSourceBackupConfigInfoGcpBackupConfig[];
         /**
@@ -7894,11 +8223,11 @@ export declare namespace backupdisasterrecovery {
             [key: string]: string;
         };
         /**
-         * LastBackupstate tracks whether the last backup was not yet started, successful, failed, or could not be run because of the lack of permissions.
+         * The state of the last backup attempt.
          */
         lastBackupState: string;
         /**
-         * If the last backup were successful, this field has the consistency date.
+         * The consistency time of the last successful backup.
          */
         lastSuccessfulBackupConsistencyTime: string;
     }
@@ -7946,7 +8275,7 @@ export declare namespace backupdisasterrecovery {
          */
         backupPlanDescription: string;
         /**
-         * The names of the backup plan rules which point to this backupvault
+         * The rules of the backup plan.
          */
         backupPlanRules: string[];
     }
@@ -8053,6 +8382,10 @@ export declare namespace backupdisasterrecovery {
         resourceType: string;
     }
     interface GetDataSourcesDataSource {
+        /**
+         * This field is set to true if the backup is blocked by vault access restriction.
+         */
+        backupBlockedByVaultAccessRestriction: boolean;
         /**
          * An object containing information about the backup configuration.
          */
@@ -9646,6 +9979,175 @@ export declare namespace biglake {
         expression: string;
         title: string;
     }
+    interface HiveTableIamBindingCondition {
+        description?: string;
+        expression: string;
+        title: string;
+    }
+    interface HiveTableIamMemberCondition {
+        description?: string;
+        expression: string;
+        title: string;
+    }
+    interface HiveTablePartitionKey {
+        /**
+         * Comment of the field.
+         */
+        comment?: string;
+        /**
+         * Name of the field.
+         */
+        name: string;
+        /**
+         * Type of the field.
+         */
+        type: string;
+    }
+    interface HiveTableStorageDescriptor {
+        /**
+         * Reducer grouping columns, clustering columns, and bucketing columns.
+         */
+        bucketCols: string[];
+        /**
+         * Specifies the columns of the table (the schema).
+         * Structure is documented below.
+         */
+        columns: outputs.biglake.HiveTableStorageDescriptorColumn[];
+        /**
+         * Whether the table data is compressed.
+         */
+        compressed?: boolean;
+        /**
+         * The fully qualified Java class name of the input format.
+         */
+        inputFormat?: string;
+        /**
+         * The Cloud Storage URI where the table data is located.
+         */
+        locationUri: string;
+        /**
+         * The number of buckets in the table.
+         */
+        numBuckets?: number;
+        /**
+         * The fully qualified Java class name of the output format.
+         */
+        outputFormat?: string;
+        /**
+         * Key-value pairs for the storage descriptor.
+         */
+        parameters: {
+            [key: string]: string;
+        };
+        /**
+         * Serialization and deserialization information.
+         * Structure is documented below.
+         */
+        serdeInfo?: outputs.biglake.HiveTableStorageDescriptorSerdeInfo;
+        /**
+         * Table data skew information.
+         * Structure is documented below.
+         */
+        skewedInfo?: outputs.biglake.HiveTableStorageDescriptorSkewedInfo;
+        /**
+         * Sort order of the data in each bucket.
+         * Structure is documented below.
+         */
+        sortCols?: outputs.biglake.HiveTableStorageDescriptorSortCol[];
+        /**
+         * Whether the table is stored as sub directories.
+         */
+        storedAsSubDirs?: boolean;
+    }
+    interface HiveTableStorageDescriptorColumn {
+        /**
+         * Comment of the field.
+         */
+        comment?: string;
+        /**
+         * Name of the field.
+         */
+        name: string;
+        /**
+         * Type of the field.
+         */
+        type: string;
+    }
+    interface HiveTableStorageDescriptorSerdeInfo {
+        /**
+         * Description of the SerDe.
+         */
+        description?: string;
+        /**
+         * The fully qualified Java class name of the deserializer.
+         */
+        deserializerClass?: string;
+        /**
+         * Name of the SerDe, table name by default.
+         */
+        name: string;
+        /**
+         * Parameters of the SerDe.
+         */
+        parameters: {
+            [key: string]: string;
+        };
+        /**
+         * The SerDe type.
+         * Possible values are: `SERDE_TYPE_UNSPECIFIED`, `HIVE`, `SCHEMA_REGISTRY`.
+         */
+        serdeType?: string;
+        /**
+         * The fully qualified Java class name of the serialization library.
+         */
+        serializationLib: string;
+        /**
+         * The fully qualified Java class name of the serializer.
+         */
+        serializerClass?: string;
+    }
+    interface HiveTableStorageDescriptorSkewedInfo {
+        /**
+         * The column names that are skewed.
+         */
+        skewedColNames: string[];
+        /**
+         * The skewed column values.
+         * Structure is documented below.
+         */
+        skewedColValues: outputs.biglake.HiveTableStorageDescriptorSkewedInfoSkewedColValue[];
+        /**
+         * The skewed key values locations.
+         * Structure is documented below.
+         */
+        skewedKeyValuesLocations: outputs.biglake.HiveTableStorageDescriptorSkewedInfoSkewedKeyValuesLocation[];
+    }
+    interface HiveTableStorageDescriptorSkewedInfoSkewedColValue {
+        /**
+         * (Required)
+         */
+        values: string[];
+    }
+    interface HiveTableStorageDescriptorSkewedInfoSkewedKeyValuesLocation {
+        /**
+         * (Required)
+         */
+        location: string;
+        /**
+         * (Required)
+         */
+        values: string[];
+    }
+    interface HiveTableStorageDescriptorSortCol {
+        /**
+         * The column name.
+         */
+        col: string;
+        /**
+         * Sort order: 1 for Ascending, 0 for Descending.
+         */
+        order: number;
+    }
     interface IcebergCatalogFederatedCatalogOptions {
         /**
          * Configuration for an AWS Glue remote catalog. Exactly one of
@@ -46913,7 +47415,7 @@ export declare namespace compute {
          */
         preemptionNoticeDurations: outputs.compute.GetInstanceSchedulingPreemptionNoticeDuration[];
         /**
-         * Describe the type of preemptible VM.
+         * Describe the type of provisioning model for the instance. Can be `STANDARD`, `SPOT`, `FLEX_START`, or `RESERVATION_BOUND`.
          */
         provisioningModel: string;
         /**
@@ -47532,7 +48034,7 @@ export declare namespace compute {
          */
         preemptionNoticeDurations: outputs.compute.GetInstanceTemplateSchedulingPreemptionNoticeDuration[];
         /**
-         * Describe the type of preemptible VM.
+         * Describe the type of provisioning model for the instance. Can be `STANDARD`, `SPOT`, `FLEX_START`, or `RESERVATION_BOUND`.
          */
         provisioningModel: string;
         /**
@@ -49677,7 +50179,7 @@ export declare namespace compute {
          */
         preemptionNoticeDurations: outputs.compute.GetRegionInstanceTemplateSchedulingPreemptionNoticeDuration[];
         /**
-         * Describe the type of preemptible VM.
+         * Describe the type of provisioning model for the instance. Can be `STANDARD`, `SPOT`, `FLEX_START`, or `RESERVATION_BOUND`.
          */
         provisioningModel: string;
         /**
@@ -52232,6 +52734,134 @@ export declare namespace compute {
          */
         serviceDirectoryRegion?: string;
     }
+    interface GlobalVmExtensionPolicyExtensionPolicy {
+        /**
+         * The identifier for this object. Format specified above.
+         */
+        extensionName: string;
+        /**
+         * The version pinning for the extension.
+         */
+        pinnedVersion?: string;
+        /**
+         * String configuration payload.
+         */
+        stringConfig?: string;
+    }
+    interface GlobalVmExtensionPolicyInstanceSelector {
+        /**
+         * LabelSelector matches VM labels.
+         * Structure is documented below.
+         */
+        labelSelector?: outputs.compute.GlobalVmExtensionPolicyInstanceSelectorLabelSelector;
+    }
+    interface GlobalVmExtensionPolicyInstanceSelectorLabelSelector {
+        /**
+         * Labels as key value pairs.
+         */
+        inclusionLabels?: {
+            [key: string]: string;
+        };
+    }
+    interface GlobalVmExtensionPolicyRolloutOperation {
+        /**
+         * Rollout input settings.
+         * Structure is documented below.
+         */
+        rolloutInput: outputs.compute.GlobalVmExtensionPolicyRolloutOperationRolloutInput;
+        /**
+         * (Output)
+         * Rollout status.
+         * Structure is documented below.
+         */
+        rolloutStatuses: outputs.compute.GlobalVmExtensionPolicyRolloutOperationRolloutStatus[];
+    }
+    interface GlobalVmExtensionPolicyRolloutOperationRolloutInput {
+        /**
+         * Specifies the behavior of the rollout if a conflict is detected.
+         */
+        conflictBehavior?: string;
+        /**
+         * The name of the rollout plan.
+         */
+        name?: string;
+        /**
+         * Specifies the predefined rollout plan for the policy.
+         */
+        predefinedRolloutPlan?: string;
+        /**
+         * The UUID that identifies a policy rollout retry attempt. It should only be set when retrying an existing rollout. Updating this field along with other policy fields (description, extension_policies, instance_selectors, priority) in the same plan will return an error.
+         *
+         * <a name="nestedRolloutOperationRolloutStatus"></a>The `rolloutStatus` block contains:
+         */
+        retryUuid?: string;
+    }
+    interface GlobalVmExtensionPolicyRolloutOperationRolloutStatus {
+        /**
+         * The current rollouts for the latest version of the resource.
+         */
+        currentRollouts: outputs.compute.GlobalVmExtensionPolicyRolloutOperationRolloutStatusCurrentRollout[];
+        /**
+         * Rollout status of the previous rollout.
+         */
+        previousRollouts: outputs.compute.GlobalVmExtensionPolicyRolloutOperationRolloutStatusPreviousRollout[];
+    }
+    interface GlobalVmExtensionPolicyRolloutOperationRolloutStatusCurrentRollout {
+        /**
+         * The rollout status for each location.
+         */
+        locationRolloutStatuses: outputs.compute.GlobalVmExtensionPolicyRolloutOperationRolloutStatusCurrentRolloutLocationRolloutStatus[];
+        /**
+         * The name of the rollout.
+         */
+        rollout: string;
+        /**
+         * The name of the rollout plan.
+         */
+        rolloutPlan: string;
+        /**
+         * The overall state of the rollout.
+         */
+        state: string;
+    }
+    interface GlobalVmExtensionPolicyRolloutOperationRolloutStatusCurrentRolloutLocationRolloutStatus {
+        /**
+         * The identifier for this object. Format specified above.
+         */
+        locationName: string;
+        /**
+         * The state of the location rollout.
+         */
+        state: string;
+    }
+    interface GlobalVmExtensionPolicyRolloutOperationRolloutStatusPreviousRollout {
+        /**
+         * The rollout status for each location.
+         */
+        locationRolloutStatuses: outputs.compute.GlobalVmExtensionPolicyRolloutOperationRolloutStatusPreviousRolloutLocationRolloutStatus[];
+        /**
+         * The name of the rollout.
+         */
+        rollout: string;
+        /**
+         * The name of the rollout plan.
+         */
+        rolloutPlan: string;
+        /**
+         * The overall state of the rollout.
+         */
+        state: string;
+    }
+    interface GlobalVmExtensionPolicyRolloutOperationRolloutStatusPreviousRolloutLocationRolloutStatus {
+        /**
+         * The identifier for this object. Format specified above.
+         */
+        locationName: string;
+        /**
+         * The state of the location rollout.
+         */
+        state: string;
+    }
     interface HaVpnGatewayParams {
         /**
          * Resource manager tags to be bound to the HaVpnGateway. Tag keys and values have the
@@ -53642,7 +54272,7 @@ export declare namespace compute {
          */
         preemptionNoticeDuration: outputs.compute.InstanceFromMachineImageSchedulingPreemptionNoticeDuration;
         /**
-         * Whether the instance is spot. If this is set as SPOT.
+         * Describes the desired provisioning model for the instance. Possible values are STANDARD, SPOT, FLEX_START, and RESERVATION_BOUND. For STANDARD, resources are provisioned immediately. For SPOT, resources are offered at a discount compared to standard pricing but may be preempted. For FLEX_START, resources are offered at a discount with flexible start times. For RESERVATION_BOUND, the instance is bound to a specific reservation and will only consume capacity from that reservation.
          */
         provisioningModel: string;
         /**
@@ -54295,7 +54925,7 @@ export declare namespace compute {
          */
         preemptionNoticeDuration: outputs.compute.InstanceFromTemplateSchedulingPreemptionNoticeDuration;
         /**
-         * Whether the instance is spot. If this is set as SPOT.
+         * Describes the desired provisioning model for the instance. Possible values are STANDARD, SPOT, FLEX_START, and RESERVATION_BOUND. For STANDARD, resources are provisioned immediately. For SPOT, resources are offered at a discount compared to standard pricing but may be preempted. For FLEX_START, resources are offered at a discount with flexible start times. For RESERVATION_BOUND, the instance is bound to a specific reservation and will only consume capacity from that reservation.
          */
         provisioningModel: string;
         /**
@@ -55039,10 +55669,13 @@ export declare namespace compute {
          */
         preemptionNoticeDuration?: outputs.compute.InstanceSchedulingPreemptionNoticeDuration;
         /**
-         * Describe the type of preemptible VM. This field accepts the value `STANDARD` or `SPOT`. If the value is `STANDARD`, there will be no discount. If this   is set to `SPOT`,
+         * Describe the type of provisioning model for the instance. This field accepts the value `STANDARD`, `SPOT`, `FLEX_START`, or `RESERVATION_BOUND`. If the value is `STANDARD`, there will be no discount. If this is set to `SPOT`,
          * `preemptible` should be `true` and `automaticRestart` should be
          * `false`. For more info about
-         * `SPOT`, read [here](https://cloud.google.com/compute/docs/instances/spot)
+         * `SPOT`, read [here](https://cloud.google.com/compute/docs/instances/spot).
+         * If this is set to `FLEX_START`, `automaticRestart` should be `false` and `instanceTerminationAction` should be set to `DELETE`. A `maxRunDuration` must also be specified. For more info about
+         * `FLEX_START`, read [here](https://cloud.google.com/compute/docs/instances/flex-start-vms).
+         * If this is set to `RESERVATION_BOUND`, the instance is bound to a specific reservation and will only consume capacity from that reservation. A `reservationAffinity` block with `type` set to `SPECIFIC_RESERVATION` should also be configured.
          */
         provisioningModel: string;
         /**
@@ -55741,10 +56374,13 @@ export declare namespace compute {
          */
         preemptionNoticeDuration?: outputs.compute.InstanceTemplateSchedulingPreemptionNoticeDuration;
         /**
-         * Describe the type of preemptible VM. This field accepts the value `STANDARD` or `SPOT`. If the value is `STANDARD`, there will be no discount. If this   is set to `SPOT`,
+         * Describe the type of provisioning model for the instance. This field accepts the value `STANDARD`, `SPOT`, `FLEX_START`, or `RESERVATION_BOUND`. If the value is `STANDARD`, there will be no discount. If this is set to `SPOT`,
          * `preemptible` should be `true` and `automaticRestart` should be
          * `false`. For more info about
-         * `SPOT`, read [here](https://cloud.google.com/compute/docs/instances/spot)
+         * `SPOT`, read [here](https://cloud.google.com/compute/docs/instances/spot).
+         * If this is set to `FLEX_START`, `automaticRestart` should be `false` and `instanceTerminationAction` should be set to `DELETE`. A `maxRunDuration` must also be specified. For more info about
+         * `FLEX_START`, read [here](https://cloud.google.com/compute/docs/instances/flex-start-vms).
+         * If this is set to `RESERVATION_BOUND`, the instance is bound to a specific reservation and will only consume capacity from that reservation. A `reservationAffinity` block with `type` set to `SPECIFIC_RESERVATION` should also be configured.
          */
         provisioningModel: string;
         /**
@@ -60392,10 +61028,13 @@ export declare namespace compute {
          */
         preemptionNoticeDuration?: outputs.compute.RegionInstanceTemplateSchedulingPreemptionNoticeDuration;
         /**
-         * Describe the type of preemptible VM. This field accepts the value `STANDARD` or `SPOT`. If the value is `STANDARD`, there will be no discount. If this   is set to `SPOT`,
+         * Describe the type of provisioning model for the instance. This field accepts the value `STANDARD`, `SPOT`, `FLEX_START`, or `RESERVATION_BOUND`. If the value is `STANDARD`, there will be no discount. If this is set to `SPOT`,
          * `preemptible` should be `true` and `automaticRestart` should be
          * `false`. For more info about
-         * `SPOT`, read [here](https://cloud.google.com/compute/docs/instances/spot)
+         * `SPOT`, read [here](https://cloud.google.com/compute/docs/instances/spot).
+         * If this is set to `FLEX_START`, `automaticRestart` should be `false` and `instanceTerminationAction` should be set to `DELETE`. A `maxRunDuration` must also be specified. For more info about
+         * `FLEX_START`, read [here](https://cloud.google.com/compute/docs/instances/flex-start-vms).
+         * If this is set to `RESERVATION_BOUND`, the instance is bound to a specific reservation and will only consume capacity from that reservation. A `reservationAffinity` block with `type` set to `SPECIFIC_RESERVATION` should also be configured.
          */
         provisioningModel: string;
         /**
@@ -73458,11 +74097,11 @@ export declare namespace container {
     }
     interface ClusterNodeConfigNodeImageConfig {
         /**
-         * The name of the image to use for this node.
+         * The Operating System image for the node pool. This is a private feature, please contact your Google account team for allowlisting this feature.
          */
         image: string;
         /**
-         * The project containing the image to use for this node.
+         * The GCP project storing the Operating System image for the node pool. This is a private feature, please contact your Google account team for allowlisting this feature.
          */
         imageProject: string;
     }
@@ -74943,11 +75582,11 @@ export declare namespace container {
     }
     interface ClusterNodePoolNodeConfigNodeImageConfig {
         /**
-         * The name of the image to use for this node.
+         * The Operating System image for the node pool. This is a private feature, please contact your Google account team for allowlisting this feature.
          */
         image: string;
         /**
-         * The project containing the image to use for this node.
+         * The GCP project storing the Operating System image for the node pool. This is a private feature, please contact your Google account team for allowlisting this feature.
          */
         imageProject: string;
     }
@@ -77077,11 +77716,11 @@ export declare namespace container {
     }
     interface GetClusterNodeConfigNodeImageConfig {
         /**
-         * The name of the image to use for this node.
+         * The Operating System image for the node pool. This is a private feature, please contact your Google account team for allowlisting this feature.
          */
         image: string;
         /**
-         * The project containing the image to use for this node.
+         * The GCP project storing the Operating System image for the node pool. This is a private feature, please contact your Google account team for allowlisting this feature.
          */
         imageProject: string;
     }
@@ -78403,11 +79042,11 @@ export declare namespace container {
     }
     interface GetClusterNodePoolNodeConfigNodeImageConfig {
         /**
-         * The name of the image to use for this node.
+         * The Operating System image for the node pool. This is a private feature, please contact your Google account team for allowlisting this feature.
          */
         image: string;
         /**
-         * The project containing the image to use for this node.
+         * The GCP project storing the Operating System image for the node pool. This is a private feature, please contact your Google account team for allowlisting this feature.
          */
         imageProject: string;
     }
@@ -79805,11 +80444,11 @@ export declare namespace container {
     }
     interface NodePoolNodeConfigNodeImageConfig {
         /**
-         * The name of the image to use for this node.
+         * The Operating System image for the node pool. This is a private feature, please contact your Google account team for allowlisting this feature.
          */
         image: string;
         /**
-         * The project containing the image to use for this node.
+         * The GCP project storing the Operating System image for the node pool. This is a private feature, please contact your Google account team for allowlisting this feature.
          */
         imageProject: string;
     }
@@ -81307,6 +81946,10 @@ export declare namespace dataform {
          * The Git remote's default branch name.
          */
         defaultBranch: string;
+        /**
+         * The name of the Developer Connect GitRepositoryLink to use for machine credentials. Must be in the format projects/*&#47;locations/*&#47;connections/*&#47;gitRepositoryLinks/*.
+         */
+        gitRepositoryLink?: string;
         /**
          * Authentication fields for remote uris using SSH protocol.
          * Structure is documented below.
@@ -89545,7 +90188,13 @@ export declare namespace dataproc {
     }
     interface ClusterClusterConfigGceClusterConfigConfidentialInstanceConfig {
         /**
-         * Defines whether the instance should have confidential compute enabled.
+         * Defines the confidential compute type of the instance. Valid values are `"CONFIDENTIAL_INSTANCE_TYPE_UNSPECIFIED"`, `"SEV"`, `"SEV_SNP"`, `"TDX"`.
+         */
+        confidentialInstanceType?: string;
+        /**
+         * Defines whether the instance should have confidential compute enabled. `enableConfidentialCompute` is deprecated and will be removed in a future major release. Use `confidentialInstanceType` instead.
+         *
+         * @deprecated enable_confidential_compute is deprecated and will be removed in a future major release. Use confidentialInstanceType instead.
          */
         enableConfidentialCompute?: boolean;
     }
@@ -89735,6 +90384,10 @@ export declare namespace dataproc {
         instanceSelectionResults: outputs.dataproc.ClusterClusterConfigMasterConfigInstanceFlexibilityPolicyInstanceSelectionResult[];
     }
     interface ClusterClusterConfigMasterConfigInstanceFlexibilityPolicyInstanceSelectionList {
+        /**
+         * Disk configuration to apply to the instances in this instance selection.
+         */
+        diskConfig?: outputs.dataproc.ClusterClusterConfigMasterConfigInstanceFlexibilityPolicyInstanceSelectionListDiskConfig;
         /**
          * Full machine-type names, e.g. `"n1-standard-16"`.
          */
@@ -89744,6 +90397,32 @@ export declare namespace dataproc {
          */
         rank: number;
     }
+    interface ClusterClusterConfigMasterConfigInstanceFlexibilityPolicyInstanceSelectionListDiskConfig {
+        /**
+         * Indicates how many IOPS to provision for the disk.
+         */
+        bootDiskProvisionedIops?: number;
+        /**
+         * Indicates how much throughput to provision for the disk.
+         */
+        bootDiskProvisionedThroughput?: number;
+        /**
+         * Size of the primary disk attached to each node, specified in GB. The smallest allowed disk size is 10GB.
+         */
+        bootDiskSizeGb?: number;
+        /**
+         * The disk type of the primary disk attached to each node. Such as "pd-ssd" or "pd-standard".
+         */
+        bootDiskType?: string;
+        /**
+         * Interface type of local SSDs (no Local SSDs or NVMe).
+         */
+        localSsdInterface?: string;
+        /**
+         * The amount of local SSD disks that will be attached to each cluster node. Defaults to 0.
+         */
+        numLocalSsds?: number;
+    }
     interface ClusterClusterConfigMasterConfigInstanceFlexibilityPolicyInstanceSelectionResult {
         /**
          * Full machine-type names, e.g. "n1-standard-16".
@@ -89838,6 +90517,10 @@ export declare namespace dataproc {
         provisioningModelMix?: outputs.dataproc.ClusterClusterConfigPreemptibleWorkerConfigInstanceFlexibilityPolicyProvisioningModelMix;
     }
     interface ClusterClusterConfigPreemptibleWorkerConfigInstanceFlexibilityPolicyInstanceSelectionList {
+        /**
+         * Optional. Disk configuration to apply to the instances in this instance selection.
+         */
+        diskConfig?: outputs.dataproc.ClusterClusterConfigPreemptibleWorkerConfigInstanceFlexibilityPolicyInstanceSelectionListDiskConfig;
         /**
          * Full machine-type names, e.g. `"n1-standard-16"`.
          */
@@ -89847,6 +90530,32 @@ export declare namespace dataproc {
          */
         rank: number;
     }
+    interface ClusterClusterConfigPreemptibleWorkerConfigInstanceFlexibilityPolicyInstanceSelectionListDiskConfig {
+        /**
+         * Indicates how many IOPS to provision for the disk. This sets the number of I/O operations per second that the disk can handle.
+         */
+        bootDiskProvisionedIops?: number;
+        /**
+         * Indicates how much throughput to provision for the disk. This sets the number of throughput mb per second that the disk can handle.
+         */
+        bootDiskProvisionedThroughput?: number;
+        /**
+         * Size of the primary disk attached to each node, specified in GB. The smallest allowed disk size is 10GB.
+         */
+        bootDiskSizeGb?: number;
+        /**
+         * The disk type of the primary disk attached to each node. Such as "pd-ssd" or "pd-standard".
+         */
+        bootDiskType?: string;
+        /**
+         * Interface type of local SSDs (no Local SSDs or NVMe). Valid values: "scsi" (Small Computer System Interface), "nvme" (Non-Volatile Memory Express).
+         */
+        localSsdInterface?: string;
+        /**
+         * The amount of local SSD disks that will be attached to each cluster node. Defaults to 0.
+         */
+        numLocalSsds?: number;
+    }
     interface ClusterClusterConfigPreemptibleWorkerConfigInstanceFlexibilityPolicyInstanceSelectionResult {
         /**
          * Full machine-type names, e.g. "n1-standard-16".
@@ -90110,6 +90819,10 @@ export declare namespace dataproc {
         instanceSelectionResults: outputs.dataproc.ClusterClusterConfigWorkerConfigInstanceFlexibilityPolicyInstanceSelectionResult[];
     }
     interface ClusterClusterConfigWorkerConfigInstanceFlexibilityPolicyInstanceSelectionList {
+        /**
+         * Disk configuration to apply to the instances in this instance selection.
+         */
+        diskConfig?: outputs.dataproc.ClusterClusterConfigWorkerConfigInstanceFlexibilityPolicyInstanceSelectionListDiskConfig;
         /**
          * Full machine-type names, e.g. `"n1-standard-16"`.
          */
@@ -90119,6 +90832,32 @@ export declare namespace dataproc {
          */
         rank: number;
     }
+    interface ClusterClusterConfigWorkerConfigInstanceFlexibilityPolicyInstanceSelectionListDiskConfig {
+        /**
+         * Indicates how many IOPS to provision for the disk.
+         */
+        bootDiskProvisionedIops?: number;
+        /**
+         * Indicates how much throughput to provision for the disk.
+         */
+        bootDiskProvisionedThroughput?: number;
+        /**
+         * Size of the primary disk attached to each node, specified in GB. The smallest allowed disk size is 10GB.
+         */
+        bootDiskSizeGb?: number;
+        /**
+         * The disk type of the primary disk attached to each node. Such as "pd-ssd" or "pd-standard".
+         */
+        bootDiskType?: string;
+        /**
+         * Interface type of local SSDs (no Local SSDs or NVMe).
+         */
+        localSsdInterface?: string;
+        /**
+         * The amount of local SSD disks that will be attached to each cluster node. Defaults to 0.
+         */
+        numLocalSsds?: number;
+    }
     interface ClusterClusterConfigWorkerConfigInstanceFlexibilityPolicyInstanceSelectionResult {
         /**
          * Full machine-type names, e.g. "n1-standard-16".
@@ -100623,10 +101362,18 @@ export declare namespace discoveryengine {
     interface DataStoreDocumentProcessingConfigDefaultParsingConfigDigitalParsingConfig {
     }
     interface DataStoreDocumentProcessingConfigDefaultParsingConfigLayoutParsingConfig {
+        /**
+         * If true, the processed document will be made available for the GetProcessedDocument API.
+         */
+        enableGetProcessedDocument?: boolean;
         /**
          * If true, the LLM based annotation is added to the image during parsing.
          */
         enableImageAnnotation?: boolean;
+        /**
+         * If true, the pdf layout will be refined using an LLM.
+         */
+        enableLlmLayoutParsing?: boolean;
         /**
          * If true, the LLM based annotation is added to the table during parsing.
          */
@@ -100677,10 +101424,18 @@ export declare namespace discoveryengine {
     interface DataStoreDocumentProcessingConfigParsingConfigOverrideDigitalParsingConfig {
     }
     interface DataStoreDocumentProcessingConfigParsingConfigOverrideLayoutParsingConfig {
+        /**
+         * If true, the processed document will be made available for the GetProcessedDocument API.
+         */
+        enableGetProcessedDocument?: boolean;
         /**
          * If true, the LLM based annotation is added to the image during parsing.
          */
         enableImageAnnotation?: boolean;
+        /**
+         * If true, the pdf layout will be refined using an LLM.
+         */
+        enableLlmLayoutParsing?: boolean;
         /**
          * If true, the LLM based annotation is added to the table during parsing.
          */
@@ -100777,10 +101532,18 @@ export declare namespace discoveryengine {
     interface GetDataStoreDocumentProcessingConfigDefaultParsingConfigDigitalParsingConfig {
     }
     interface GetDataStoreDocumentProcessingConfigDefaultParsingConfigLayoutParsingConfig {
+        /**
+         * If true, the processed document will be made available for the GetProcessedDocument API.
+         */
+        enableGetProcessedDocument: boolean;
         /**
          * If true, the LLM based annotation is added to the image during parsing.
          */
         enableImageAnnotation: boolean;
+        /**
+         * If true, the pdf layout will be refined using an LLM.
+         */
+        enableLlmLayoutParsing: boolean;
         /**
          * If true, the LLM based annotation is added to the table during parsing.
          */
@@ -100826,10 +101589,18 @@ export declare namespace discoveryengine {
     interface GetDataStoreDocumentProcessingConfigParsingConfigOverrideDigitalParsingConfig {
     }
     interface GetDataStoreDocumentProcessingConfigParsingConfigOverrideLayoutParsingConfig {
+        /**
+         * If true, the processed document will be made available for the GetProcessedDocument API.
+         */
+        enableGetProcessedDocument: boolean;
         /**
          * If true, the LLM based annotation is added to the image during parsing.
          */
         enableImageAnnotation: boolean;
+        /**
+         * If true, the pdf layout will be refined using an LLM.
+         */
+        enableLlmLayoutParsing: boolean;
         /**
          * If true, the LLM based annotation is added to the table during parsing.
          */
@@ -146422,6 +147193,10 @@ export declare namespace sql {
          * The project ID of consumer service project of this consumer endpoint.
          */
         consumerServiceProjectId: string;
+        /**
+         * (Output) The status of the automated DNS provisioning for the instance.
+         */
+        instanceAutoDnsStatus: string;
         /**
          * (Output) The IP address of the consumer endpoint.
          */
@@ -146438,6 +147213,10 @@ export declare namespace sql {
          * (Output) The connection status of the consumer endpoint.
          */
         status: string;
+        /**
+         * (Output) The status of the automated DNS provisioning for the write endpoint.
+         */
+        writeEndpointAutoDnsStatus: string;
     }
     interface DatabaseInstanceSettingsLocationPreference {
         /**
@@ -147173,6 +147952,10 @@ export declare namespace sql {
          * The project ID of consumer service project of this consumer endpoint.
          */
         consumerServiceProjectId: string;
+        /**
+         * The status of the automated DNS provisioning for the instance.
+         */
+        instanceAutoDnsStatus: string;
         /**
          * The IP address of the consumer endpoint.
          */
@@ -147189,6 +147972,10 @@ export declare namespace sql {
          * The connection status of the consumer endpoint.
          */
         status: string;
+        /**
+         * The status of the automated DNS provisioning for the write endpoint.
+         */
+        writeEndpointAutoDnsStatus: string;
     }
     interface GetDatabaseInstanceSettingLocationPreference {
         /**
@@ -147379,6 +148166,10 @@ export declare namespace sql {
          * The first IPv4 address of any type assigned. This is to support accessing the first address in the list in a terraform output when the resource is configured with a count.
          */
         firstIpAddress: string;
+        /**
+         * When this parameter is set to true, Cloud SQL instances can perform in-place major version upgrades of read replicas along with the primary instance when 'database_version' is updated. This is an input-only field that is not persisted in the API and only takes effect during a major version upgrade.
+         */
+        includeReplicasForMajorVersionUpgrade: boolean;
         /**
          * The type of the instance. See https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1/instances#SqlInstanceType for supported values.
          */
@@ -147463,6 +148254,10 @@ export declare namespace sql {
          * The settings to use for the database. The configuration is detailed below.
          */
         settings: outputs.sql.GetDatabaseInstancesInstanceSetting[];
+        /**
+         * When set to true, Cloud SQL instances can switch storing point-in-time recovery transaction logs from a data disk to Cloud Storage, freeing up data disk space and enabling longer retention windows. This is an input-only field that is not persisted in the API.
+         */
+        switchTransactionLogsToCloudStorageEnabled: boolean;
     }
     interface GetDatabaseInstancesInstanceClone {
         /**
@@ -148032,6 +148827,10 @@ export declare namespace sql {
          * The project ID of consumer service project of this consumer endpoint.
          */
         consumerServiceProjectId: string;
+        /**
+         * The status of the automated DNS provisioning for the instance.
+         */
+        instanceAutoDnsStatus: string;
         /**
          * The IP address of the consumer endpoint.
          */
@@ -148048,6 +148847,10 @@ export declare namespace sql {
          * The connection status of the consumer endpoint.
          */
         status: string;
+        /**
+         * The status of the automated DNS provisioning for the write endpoint.
+         */
+        writeEndpointAutoDnsStatus: string;
     }
     interface GetDatabaseInstancesInstanceSettingLocationPreference {
         /**
@@ -157681,6 +158484,10 @@ export declare namespace workbench {
         metadata: {
             [key: string]: string;
         };
+        /**
+         * Optional. The minimum CPU platform to use for this instance.
+         */
+        minCpuPlatform: string;
         /**
          * The network interfaces for the VM. Supports only one interface.
          * Structure is documented below.
@@ -157793,6 +158600,10 @@ export declare namespace workbench {
          * Learn more about using your own encryption keys.'
          */
         kmsKey?: string;
+        /**
+         * Optional. Resource policies applied to this disk.
+         */
+        resourcePolicies: string[];
     }
     interface InstanceGceSetupNetworkInterface {
         /**
@@ -158145,6 +158956,12 @@ export declare namespace workstations {
          * See https://cloud.google.com/workstations/docs/reference/rest/v1/projects.locations.workstationClusters.workstationConfigs#GceInstance.FIELDS.enable_nested_virtualization
          */
         enableNestedVirtualization?: boolean;
+        /**
+         * Client-specified metadata key-value pairs, to be passed to the start-up script in the VM.
+         */
+        instanceMetadata?: {
+            [key: string]: string;
+        };
         /**
          * The name of a Compute Engine machine type.
          */