google-api-python-client 2.124.0__py2.py3-none-any.whl → 2.126.0__py2.py3-none-any.whl

googleapiclient/discovery_cache/documents/compute.alpha.json

@@ -3756,6 +3756,40 @@
 "https://www.googleapis.com/auth/compute"
 ]
 },
+"addPacketMirroringRule": {
+"description": "Inserts a packet mirroring rule into a firewall policy.",
+"flatPath": "locations/global/firewallPolicies/{firewallPolicy}/addPacketMirroringRule",
+"httpMethod": "POST",
+"id": "compute.firewallPolicies.addPacketMirroringRule",
+"parameterOrder": [
+"firewallPolicy"
+],
+"parameters": {
+"firewallPolicy": {
+"description": "Name of the firewall policy to update.",
+"location": "path",
+"pattern": "(firewallPolicies/)?[0-9]{0,20}",
+"required": true,
+"type": "string"
+},
+"requestId": {
+"description": "An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).",
+"location": "query",
+"type": "string"
+}
+},
+"path": "locations/global/firewallPolicies/{firewallPolicy}/addPacketMirroringRule",
+"request": {
+"$ref": "FirewallPolicyRule"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/compute"
+]
+},
 "addRule": {
 "description": "Inserts a rule into a firewall policy.",
 "flatPath": "locations/global/firewallPolicies/{firewallPolicy}/addRule",
@@ -3949,6 +3983,39 @@
 "https://www.googleapis.com/auth/compute.readonly"
 ]
 },
+"getPacketMirroringRule": {
+"description": "Gets a packet mirroring rule of the specified priority.",
+"flatPath": "locations/global/firewallPolicies/{firewallPolicy}/getPacketMirroringRule",
+"httpMethod": "GET",
+"id": "compute.firewallPolicies.getPacketMirroringRule",
+"parameterOrder": [
+"firewallPolicy"
+],
+"parameters": {
+"firewallPolicy": {
+"description": "Name of the firewall policy to which the queried rule belongs.",
+"location": "path",
+"pattern": "(firewallPolicies/)?[0-9]{0,20}",
+"required": true,
+"type": "string"
+},
+"priority": {
+"description": "The priority of the rule to get from the firewall policy.",
+"format": "int32",
+"location": "query",
+"type": "integer"
+}
+},
+"path": "locations/global/firewallPolicies/{firewallPolicy}/getPacketMirroringRule",
+"response": {
+"$ref": "FirewallPolicyRule"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/compute",
+"https://www.googleapis.com/auth/compute.readonly"
+]
+},
 "getRule": {
 "description": "Gets a rule of the specified priority.",
 "flatPath": "locations/global/firewallPolicies/{firewallPolicy}/getRule",
@@ -4153,6 +4220,46 @@
 "https://www.googleapis.com/auth/compute"
 ]
 },
+"patchPacketMirroringRule": {
+"description": "Patches a packet mirroring rule of the specified priority.",
+"flatPath": "locations/global/firewallPolicies/{firewallPolicy}/patchPacketMirroringRule",
+"httpMethod": "POST",
+"id": "compute.firewallPolicies.patchPacketMirroringRule",
+"parameterOrder": [
+"firewallPolicy"
+],
+"parameters": {
+"firewallPolicy": {
+"description": "Name of the firewall policy to update.",
+"location": "path",
+"pattern": "(firewallPolicies/)?[0-9]{0,20}",
+"required": true,
+"type": "string"
+},
+"priority": {
+"description": "The priority of the rule to patch.",
+"format": "int32",
+"location": "query",
+"type": "integer"
+},
+"requestId": {
+"description": "An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).",
+"location": "query",
+"type": "string"
+}
+},
+"path": "locations/global/firewallPolicies/{firewallPolicy}/patchPacketMirroringRule",
+"request": {
+"$ref": "FirewallPolicyRule"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/compute"
+]
+},
 "patchRule": {
 "description": "Patches a rule of the specified priority.",
 "flatPath": "locations/global/firewallPolicies/{firewallPolicy}/patchRule",
@@ -4229,6 +4336,43 @@
 "https://www.googleapis.com/auth/compute"
 ]
 },
+"removePacketMirroringRule": {
+"description": "Deletes a packet mirroring rule of the specified priority.",
+"flatPath": "locations/global/firewallPolicies/{firewallPolicy}/removePacketMirroringRule",
+"httpMethod": "POST",
+"id": "compute.firewallPolicies.removePacketMirroringRule",
+"parameterOrder": [
+"firewallPolicy"
+],
+"parameters": {
+"firewallPolicy": {
+"description": "Name of the firewall policy to update.",
+"location": "path",
+"pattern": "(firewallPolicies/)?[0-9]{0,20}",
+"required": true,
+"type": "string"
+},
+"priority": {
+"description": "The priority of the rule to remove from the firewall policy.",
+"format": "int32",
+"location": "query",
+"type": "integer"
+},
+"requestId": {
+"description": "An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).",
+"location": "query",
+"type": "string"
+}
+},
+"path": "locations/global/firewallPolicies/{firewallPolicy}/removePacketMirroringRule",
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/compute"
+]
+},
 "removeRule": {
 "description": "Deletes a rule of the specified priority.",
 "flatPath": "locations/global/firewallPolicies/{firewallPolicy}/removeRule",
@@ -17757,6 +17901,60 @@
 "https://www.googleapis.com/auth/compute"
 ]
 },
+"addPacketMirroringRule": {
+"description": "Inserts a packet mirroring rule into a firewall policy.",
+"flatPath": "projects/{project}/global/firewallPolicies/{firewallPolicy}/addPacketMirroringRule",
+"httpMethod": "POST",
+"id": "compute.networkFirewallPolicies.addPacketMirroringRule",
+"parameterOrder": [
+"project",
+"firewallPolicy"
+],
+"parameters": {
+"firewallPolicy": {
+"description": "Name of the firewall policy to update.",
+"location": "path",
+"pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
+"required": true,
+"type": "string"
+},
+"maxPriority": {
+"description": "When rule.priority is not specified, auto choose a unused priority between minPriority and maxPriority>. This field is exclusive with rule.priority.",
+"format": "int32",
+"location": "query",
+"type": "integer"
+},
+"minPriority": {
+"description": "When rule.priority is not specified, auto choose a unused priority between minPriority and maxPriority>. This field is exclusive with rule.priority.",
+"format": "int32",
+"location": "query",
+"type": "integer"
+},
+"project": {
+"description": "Project ID for this request.",
+"location": "path",
+"pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?))",
+"required": true,
+"type": "string"
+},
+"requestId": {
+"description": "An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).",
+"location": "query",
+"type": "string"
+}
+},
+"path": "projects/{project}/global/firewallPolicies/{firewallPolicy}/addPacketMirroringRule",
+"request": {
+"$ref": "FirewallPolicyRule"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/compute"
+]
+},
 "addRule": {
 "description": "Inserts a rule into a firewall policy.",
 "flatPath": "projects/{project}/global/firewallPolicies/{firewallPolicy}/addRule",
@@ -18010,6 +18208,47 @@
 "https://www.googleapis.com/auth/compute.readonly"
 ]
 },
+"getPacketMirroringRule": {
+"description": "Gets a packet mirroring rule of the specified priority.",
+"flatPath": "projects/{project}/global/firewallPolicies/{firewallPolicy}/getPacketMirroringRule",
+"httpMethod": "GET",
+"id": "compute.networkFirewallPolicies.getPacketMirroringRule",
+"parameterOrder": [
+"project",
+"firewallPolicy"
+],
+"parameters": {
+"firewallPolicy": {
+"description": "Name of the firewall policy to which the queried rule belongs.",
+"location": "path",
+"pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
+"required": true,
+"type": "string"
+},
+"priority": {
+"description": "The priority of the rule to get from the firewall policy.",
+"format": "int32",
+"location": "query",
+"type": "integer"
+},
+"project": {
+"description": "Project ID for this request.",
+"location": "path",
+"pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?))",
+"required": true,
+"type": "string"
+}
+},
+"path": "projects/{project}/global/firewallPolicies/{firewallPolicy}/getPacketMirroringRule",
+"response": {
+"$ref": "FirewallPolicyRule"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/compute",
+"https://www.googleapis.com/auth/compute.readonly"
+]
+},
 "getRule": {
 "description": "Gets a rule of the specified priority.",
 "flatPath": "projects/{project}/global/firewallPolicies/{firewallPolicy}/getRule",
@@ -18224,6 +18463,54 @@
 "https://www.googleapis.com/auth/compute"
 ]
 },
+"patchPacketMirroringRule": {
+"description": "Patches a packet mirroring rule of the specified priority.",
+"flatPath": "projects/{project}/global/firewallPolicies/{firewallPolicy}/patchPacketMirroringRule",
+"httpMethod": "POST",
+"id": "compute.networkFirewallPolicies.patchPacketMirroringRule",
+"parameterOrder": [
+"project",
+"firewallPolicy"
+],
+"parameters": {
+"firewallPolicy": {
+"description": "Name of the firewall policy to update.",
+"location": "path",
+"pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
+"required": true,
+"type": "string"
+},
+"priority": {
+"description": "The priority of the rule to patch.",
+"format": "int32",
+"location": "query",
+"type": "integer"
+},
+"project": {
+"description": "Project ID for this request.",
+"location": "path",
+"pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?))",
+"required": true,
+"type": "string"
+},
+"requestId": {
+"description": "An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).",
+"location": "query",
+"type": "string"
+}
+},
+"path": "projects/{project}/global/firewallPolicies/{firewallPolicy}/patchPacketMirroringRule",
+"request": {
+"$ref": "FirewallPolicyRule"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/compute"
+]
+},
 "patchRule": {
 "description": "Patches a rule of the specified priority.",
 "flatPath": "projects/{project}/global/firewallPolicies/{firewallPolicy}/patchRule",
@@ -18316,6 +18603,51 @@
 "https://www.googleapis.com/auth/compute"
 ]
 },
+"removePacketMirroringRule": {
+"description": "Deletes a packet mirroring rule of the specified priority.",
+"flatPath": "projects/{project}/global/firewallPolicies/{firewallPolicy}/removePacketMirroringRule",
+"httpMethod": "POST",
+"id": "compute.networkFirewallPolicies.removePacketMirroringRule",
+"parameterOrder": [
+"project",
+"firewallPolicy"
+],
+"parameters": {
+"firewallPolicy": {
+"description": "Name of the firewall policy to update.",
+"location": "path",
+"pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
+"required": true,
+"type": "string"
+},
+"priority": {
+"description": "The priority of the rule to remove from the firewall policy.",
+"format": "int32",
+"location": "query",
+"type": "integer"
+},
+"project": {
+"description": "Project ID for this request.",
+"location": "path",
+"pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?))",
+"required": true,
+"type": "string"
+},
+"requestId": {
+"description": "An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).",
+"location": "query",
+"type": "string"
+}
+},
+"path": "projects/{project}/global/firewallPolicies/{firewallPolicy}/removePacketMirroringRule",
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/compute"
+]
+},
 "removeRule": {
 "description": "Deletes a rule of the specified priority.",
 "flatPath": "projects/{project}/global/firewallPolicies/{firewallPolicy}/removeRule",
@@ -43991,7 +44323,7 @@
 }
 }
 },
-"revision": "20240312",
+"revision": "20240326",
 "rootUrl": "https://compute.googleapis.com/",
 "schemas": {
 "AWSV4Signature": {
@@ -47266,6 +47598,25 @@ false
 "description": "If true, enables Cloud CDN for the backend service of a global external Application Load Balancer.",
 "type": "boolean"
 },
+"externalManagedMigrationState": {
+"description": "Specifies the canary migration state. Possible values are PREPARE, TEST, and FINALIZE. To begin the migration from EXTERNAL to EXTERNAL_MANAGED, the state must be changed to PREPARE. The state must be changed to FINALIZE before the loadBalancingScheme can be changed to EXTERNAL_MANAGED. Optionally, the TEST state can be used to migrate traffic by percentage using externalManagedMigrationTestingPercentage. Rolling back a migration requires the states to be set in reverse order. So changing the scheme from EXTERNAL_MANAGED to EXTERNAL requires the state to be set to FINALIZE at the same time. Optionally, the TEST state can be used to migrate some traffic back to EXTERNAL or PREPARE can be used to migrate all traffic back to EXTERNAL.",
+"enum": [
+"FINALIZE",
+"PREPARE",
+"TEST"
+],
+"enumDescriptions": [
+"",
+"",
+""
+],
+"type": "string"
+},
+"externalManagedMigrationTestingPercentage": {
+"description": "Determines the fraction of requests that should be processed by the Global external Application Load Balancer. The value of this field must be in the range [0, 100]. Session affinity options will slightly affect this routing behavior, for more details, see: Session Affinity. This value is only used if the loadBalancingScheme in the BackendService is set to EXTERNAL when using the classic Application Load Balancer.",
+"format": "float",
+"type": "number"
+},
 "failoverPolicy": {
 "$ref": "BackendServiceFailoverPolicy",
 "description": "Requires at least one backend instance group to be defined as a backup (failover) backend. For load balancers that have configurable failover: [Internal passthrough Network Load Balancers](https://cloud.google.com/load-balancing/docs/internal/failover-overview) and [external passthrough Network Load Balancers](https://cloud.google.com/load-balancing/docs/network/networklb-failover-overview)."
@@ -49366,12 +49717,14 @@ false
 "enum": [
 "ACCELERATOR_OPTIMIZED",
 "ACCELERATOR_OPTIMIZED_A3",
+"ACCELERATOR_OPTIMIZED_A3_MEGA",
 "COMPUTE_OPTIMIZED",
 "COMPUTE_OPTIMIZED_C2D",
 "COMPUTE_OPTIMIZED_C3",
 "COMPUTE_OPTIMIZED_C3D",
 "COMPUTE_OPTIMIZED_H3",
 "GENERAL_PURPOSE",
+"GENERAL_PURPOSE_C4",
 "GENERAL_PURPOSE_E2",
 "GENERAL_PURPOSE_N2",
 "GENERAL_PURPOSE_N2D",
@@ -49401,6 +49754,8 @@ false
 "",
 "",
 "",
+"",
+"",
 ""
 ],
 "type": "string"
@@ -51857,7 +52212,7 @@ false
 "additionalProperties": {
 "type": "string"
 },
-"description": "Additional structured details about this error. Keys should match /[a-zA-Z0-9-_]/ and be limited to 64 characters in length. When identifying the current value of an exceeded limit, the units should be contained in the key, not the value. For example, rather than {\"instanceLimit\": \"100/request\"}, should be returned as, {\"instanceLimitPerRequest\": \"100\"}, if the client exceeds the number of instances that can be created in a single (batch) request.",
+"description": "Additional structured details about this error. Keys must match /a-z+/ but should ideally be lowerCamelCase. Also they must be limited to 64 characters in length. When identifying the current value of an exceeded limit, the units should be contained in the key, not the value. For example, rather than {\"instanceLimit\": \"100/request\"}, should be returned as, {\"instanceLimitPerRequest\": \"100\"}, if the client exceeds the number of instances that can be created in a single (batch) request.",
 "type": "object"
 },
 "reason": {
@@ -52747,6 +53102,13 @@ false
 "description": "Name of the resource. For Organization Firewall Policies it's a [Output Only] numeric ID allocated by Google Cloud which uniquely identifies the Organization Firewall Policy.",
 "type": "string"
 },
+"packetMirroringRules": {
+"description": "A list of packet mirroring rules that belong to this policy.",
+"items": {
+"$ref": "FirewallPolicyRule"
+},
+"type": "array"
+},
 "parent": {
 "description": "[Output Only] The parent of the firewall policy. This field is not applicable to network firewall policies.",
 "type": "string"
@@ -53278,6 +53640,25 @@ false
 "description": "An optional description of this resource. Provide this property when you create the resource.",
 "type": "string"
 },
+"externalManagedBackendBucketMigrationState": {
+"description": "Specifies the canary migration state for the backend buckets attached to this forwarding rule. Possible values are PREPARE, TEST, and FINALIZE. To begin the migration from EXTERNAL to EXTERNAL_MANAGED, the state must be changed to PREPARE. The state must be changed to FINALIZE before the loadBalancingScheme can be changed to EXTERNAL_MANAGED. Optionally, the TEST state can be used to migrate traffic to backend buckets attached to this forwarding rule by percentage using externalManagedBackendBucketMigrationTestingPercentage. Rolling back a migration requires the states to be set in reverse order. So changing the scheme from EXTERNAL_MANAGED to EXTERNAL requires the state to be set to FINALIZE at the same time. Optionally, the TEST state can be used to migrate some traffic back to EXTERNAL or PREPARE can be used to migrate all traffic back to EXTERNAL.",
+"enum": [
+"FINALIZE",
+"PREPARE",
+"TEST"
+],
+"enumDescriptions": [
+"",
+"",
+""
+],
+"type": "string"
+},
+"externalManagedBackendBucketMigrationTestingPercentage": {
+"description": "Determines the fraction of requests to backend buckets that should be processed by the Global external Application Load Balancer. The value of this field must be in the range [0, 100]. This value is only used if the loadBalancingScheme is set to EXTERNAL (when using the Classic ALB).",
+"format": "float",
+"type": "number"
+},
 "fingerprint": {
 "description": "Fingerprint of this resource. A hash of the contents stored in this object. This field is used in optimistic locking. This field will be ignored when inserting a ForwardingRule. Include the fingerprint in patch request to ensure that you do not overwrite changes that were applied from another concurrent request. To see the latest fingerprint, make a get() request to retrieve a ForwardingRule.",
 "format": "byte",
@@ -59911,7 +60292,7 @@ false
 },
 "perInstanceConfigs": {
 "$ref": "InstanceGroupManagerStatusStatefulPerInstanceConfigs",
-"description": "[Output Only] Status of per-instance configurations on the instance."
+"description": "[Output Only] Status of per-instance configurations on the instances."
 }
 },
 "type": "object"
@@ -63195,6 +63576,10 @@ false
 "description": "Administrative status of the interconnect. When this is set to true, the Interconnect is functional and can carry traffic. When set to false, no packets can be carried over the interconnect and no BGP routes are exchanged over it. By default, the status is set to true.",
 "type": "boolean"
 },
+"applicationAwareInterconnect": {
+"$ref": "InterconnectApplicationAwareInterconnect",
+"description": "Configuration for enabling Application Aware Interconnect (AAI) on this Cloud Interconnect connection between Google and your on-premises router."
+},
 "availableFeatures": {
 "description": "[Output only] List of features available for this Interconnect connection, which can take one of the following values: - MACSEC If present then the Interconnect connection is provisioned on MACsec capable hardware ports. If not present then the Interconnect connection is provisioned on non-MACsec capable ports and MACsec isn't supported and enabling MACsec fails.",
 "items": {
@@ -63393,6 +63778,78 @@ false
 },
 "type": "object"
 },
+"InterconnectApplicationAwareInterconnect": {
+"description": "Configuration information for enabling Application Aware Interconnect (AAI) on this Cloud Interconnect connection between Google and your on-premises router.",
+"id": "InterconnectApplicationAwareInterconnect",
+"properties": {
+"bandwidthPercentagePolicy": {
+"$ref": "InterconnectApplicationAwareInterconnectBandwidthPercentagePolicy"
+},
+"enabled": {
+"description": "Enable or disable the AAI feature on this interconnect.",
+"type": "boolean"
+},
+"profileDescription": {
+"description": "A description for the AAI profile on this interconnect.",
+"type": "string"
+},
+"strictPriorityPolicy": {
+"$ref": "InterconnectApplicationAwareInterconnectStrictPriorityPolicy"
+}
+},
+"type": "object"
+},
+"InterconnectApplicationAwareInterconnectBandwidthPercentage": {
+"description": "Specify bandwidth percentages (0-100) for various traffic classes in BandwidthPercentagePolicy. The sum of all percentages must equal 100. It is valid to specify percentages for some classes and not for others. The others will be implicitly marked as 0.",
+"id": "InterconnectApplicationAwareInterconnectBandwidthPercentage",
+"properties": {
+"percentage": {
+"description": "Bandwidth percentage for a specific traffic class.",
+"format": "uint32",
+"type": "integer"
+},
+"trafficClass": {
+"description": "TrafficClass whose bandwidth percentage is being specified.",
+"enum": [
+"TC1",
+"TC2",
+"TC3",
+"TC4",
+"TC5",
+"TC6"
+],
+"enumDescriptions": [
+"Traffic Class 1, corresponding to DSCP ranges (0-7) 000xxx.",
+"Traffic Class 2, corresponding to DSCP ranges (8-15) 001xxx.",
+"Traffic Class 3, corresponding to DSCP ranges (16-23) 010xxx.",
+"Traffic Class 4, corresponding to DSCP ranges (24-31) 011xxx.",
+"Traffic Class 5, corresponding to DSCP ranges (32-47) 10xxxx.",
+"Traffic Class 6, corresponding to DSCP ranges (48-63) 11xxxx."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
+"InterconnectApplicationAwareInterconnectBandwidthPercentagePolicy": {
+"id": "InterconnectApplicationAwareInterconnectBandwidthPercentagePolicy",
+"properties": {
+"bandwidthPercentages": {
+"description": "Specify bandwidth percentages for various traffic classes for queuing type Bandwidth Percent.",
+"items": {
+"$ref": "InterconnectApplicationAwareInterconnectBandwidthPercentage"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"InterconnectApplicationAwareInterconnectStrictPriorityPolicy": {
+"description": "Specify configuration for StrictPriorityPolicy.",
+"id": "InterconnectApplicationAwareInterconnectStrictPriorityPolicy",
+"properties": {},
+"type": "object"
+},
 "InterconnectAttachment": {
 "description": "Represents an Interconnect Attachment (VLAN) resource. You can use Interconnect attachments (VLANS) to connect your Virtual Private Cloud networks to your on-premises networks through an Interconnect. For more information, read Creating VLAN Attachments.",
 "id": "InterconnectAttachment",
@@ -74946,15 +75403,15 @@ false
 },
 "defaultRouteAction": {
 "$ref": "HttpRouteAction",
-"description": "defaultRouteAction takes effect when none of the pathRules or routeRules match. The load balancer performs advanced routing actions, such as URL rewrites and header transformations, before forwarding the request to the selected backend. If defaultRouteAction specifies any weightedBackendServices, defaultService must not be set. Conversely if defaultService is set, defaultRouteAction cannot contain any weightedBackendServices. Only one of defaultRouteAction or defaultUrlRedirect must be set. URL maps for classic Application Load Balancers only support the urlRewrite action within a path matcher's defaultRouteAction."
+"description": "defaultRouteAction takes effect when none of the pathRules or routeRules match. The load balancer performs advanced routing actions, such as URL rewrites and header transformations, before forwarding the request to the selected backend. If defaultRouteAction specifies any weightedBackendServices, defaultService must not be set. Conversely if defaultService is set, defaultRouteAction cannot contain any weightedBackendServices. If defaultRouteAction is specified, don't set defaultUrlRedirect. If defaultRouteAction.weightedBackendServices is specified, don't set defaultService. URL maps for classic Application Load Balancers only support the urlRewrite action within a path matcher's defaultRouteAction."
 },
 "defaultService": {
-"description": "The full or partial URL to the BackendService resource. This URL is used if none of the pathRules or routeRules defined by this PathMatcher are matched. For example, the following are all valid URLs to a BackendService resource: - https://www.googleapis.com/compute/v1/projects/project /global/backendServices/backendService - compute/v1/projects/project/global/backendServices/backendService - global/backendServices/backendService If defaultRouteAction is also specified, advanced routing actions, such as URL rewrites, take effect before sending the request to the backend. However, if defaultService is specified, defaultRouteAction cannot contain any weightedBackendServices. Conversely, if defaultRouteAction specifies any weightedBackendServices, defaultService must not be specified. Only one of defaultService, defaultUrlRedirect , or defaultRouteAction.weightedBackendService must be set. Authorization requires one or more of the following Google IAM permissions on the specified resource default_service: - compute.backendBuckets.use - compute.backendServices.use ",
+"description": "The full or partial URL to the BackendService resource. This URL is used if none of the pathRules or routeRules defined by this PathMatcher are matched. For example, the following are all valid URLs to a BackendService resource: - https://www.googleapis.com/compute/v1/projects/project /global/backendServices/backendService - compute/v1/projects/project/global/backendServices/backendService - global/backendServices/backendService If defaultRouteAction is also specified, advanced routing actions, such as URL rewrites, take effect before sending the request to the backend. However, if defaultService is specified, defaultRouteAction cannot contain any weightedBackendServices. Conversely, if defaultRouteAction specifies any weightedBackendServices, defaultService must not be specified. If defaultService is specified, then set either defaultUrlRedirect or defaultRouteAction.weightedBackendService. Don't set both. Authorization requires one or more of the following Google IAM permissions on the specified resource default_service: - compute.backendBuckets.use - compute.backendServices.use ",
 "type": "string"
 },
 "defaultUrlRedirect": {
 "$ref": "HttpRedirectAction",
-"description": "When none of the specified pathRules or routeRules match, the request is redirected to a URL specified by defaultUrlRedirect. If defaultUrlRedirect is specified, defaultService or defaultRouteAction must not be set. Not supported when the URL map is bound to a target gRPC proxy."
+"description": "When none of the specified pathRules or routeRules match, the request is redirected to a URL specified by defaultUrlRedirect. If defaultUrlRedirect is specified, then set either defaultService or defaultRouteAction. Don't set both. Not supported when the URL map is bound to a target gRPC proxy."
 },
 "description": {
 "description": "An optional description of this resource. Provide this property when you create the resource.",
@@ -79371,6 +79828,11 @@ false
 "description": "[Output Only] The name of the firewall policy.",
 "type": "string"
 },
+"priority": {
+"description": "[Output only] Priority of firewall policy association. Not applicable for type=HIERARCHY.",
+"format": "int32",
+"type": "integer"
+},
 "rules": {
 "description": "The rules that apply to the network.",
 "items": {
@@ -79384,12 +79846,16 @@ false
 "HIERARCHY",
 "NETWORK",
 "NETWORK_REGIONAL",
+"SYSTEM_GLOBAL",
+"SYSTEM_REGIONAL",
 "UNSPECIFIED"
 ],
 "enumDescriptions": [
 "",
 "",
 "",
+"",
+"",
 ""
 ],
 "type": "string"
@@ -86069,7 +86535,7 @@ false
 "type": "string"
 },
 "propagatedConnectionLimit": {
-"description": "The number of consumer Network Connectivity Center spokes that connected Private Service Connect endpoints can be propagated to. This limit lets a service producer indirectly limit how many propagated Private Service Connect connections can be established to the producer's service attachment. If the connection preference of the service attachment is ACCEPT_MANUAL, the limit applies to each project or network that is listed in the consumer accept list. If the connection preference of the service attachment is ACCEPT_AUTOMATIC, the limit applies to each project that contains a connected endpoint. If unspecified, the default propagated connection limit is 250.",
+"description": "The number of consumer spokes that connected Private Service Connect endpoints can be propagated to through Network Connectivity Center. This limit lets the service producer limit how many propagated Private Service Connect connections can be established to this service attachment from a single consumer. If the connection preference of the service attachment is ACCEPT_MANUAL, the limit applies to each project or network that is listed in the consumer accept list. If the connection preference of the service attachment is ACCEPT_AUTOMATIC, the limit applies to each project that contains a connected endpoint. If unspecified, the default propagated connection limit is 250.",
 "format": "uint32",
 "type": "integer"
 },
@@ -95805,7 +96271,7 @@ false
 "description": "defaultRouteAction takes effect when none of the hostRules match. The load balancer performs advanced routing actions, such as URL rewrites and header transformations, before forwarding the request to the selected backend. If defaultRouteAction specifies any weightedBackendServices, defaultService must not be set. Conversely if defaultService is set, defaultRouteAction cannot contain any weightedBackendServices. Only one of defaultRouteAction or defaultUrlRedirect must be set. URL maps for classic Application Load Balancers only support the urlRewrite action within defaultRouteAction. defaultRouteAction has no effect when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true."
 },
 "defaultService": {
-"description": "The full or partial URL of the defaultService resource to which traffic is directed if none of the hostRules match. If defaultRouteAction is also specified, advanced routing actions, such as URL rewrites, take effect before sending the request to the backend. However, if defaultService is specified, defaultRouteAction cannot contain any weightedBackendServices. Conversely, if routeAction specifies any weightedBackendServices, service must not be specified. Only one of defaultService, defaultUrlRedirect , or defaultRouteAction.weightedBackendService must be set. defaultService has no effect when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.",
+"description": "The full or partial URL of the defaultService resource to which traffic is directed if none of the hostRules match. If defaultRouteAction is also specified, advanced routing actions, such as URL rewrites, take effect before sending the request to the backend. However, if defaultService is specified, defaultRouteAction cannot contain any weightedBackendServices. Conversely, if routeAction specifies any weightedBackendServices, service must not be specified. If defaultService is specified, then set either defaultUrlRedirect , or defaultRouteAction.weightedBackendService Don't set both. defaultService has no effect when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.",
 "type": "string"
 },
 "defaultUrlRedirect": {