google-api-python-client 2.125.0__py2.py3-none-any.whl → 2.127.0__py2.py3-none-any.whl

googleapiclient/discovery_cache/documents/compute.alpha.json

@@ -44323,7 +44323,7 @@
 }
 }
 },
-"revision": "20240324",
+"revision": "20240407",
 "rootUrl": "https://compute.googleapis.com/",
 "schemas": {
 "AWSV4Signature": {
@@ -47599,11 +47599,11 @@ false
 "type": "boolean"
 },
 "externalManagedMigrationState": {
-"description": "Specifies the canary migration state. Possible values are PREPARE, TEST, and FINALIZE. To begin the migration from EXTERNAL to EXTERNAL_MANAGED, the state must be changed to PREPARE. The state must be changed to FINALIZE before the loadBalancingScheme can be changed to EXTERNAL_MANAGED. Optionally, the TEST state can be used to migrate traffic by percentage using externalManagedMigrationTestingPercentage. Rolling back a migration requires the states to be set in reverse order. So changing the scheme from EXTERNAL_MANAGED to EXTERNAL requires the state to be set to FINALIZE at the same time. Optionally, the TEST state can be used to migrate some traffic back to EXTERNAL or PREPARE can be used to migrate all traffic back to EXTERNAL.",
+"description": "Specifies the canary migration state. Possible values are PREPARE, TEST_BY_PERCENTAGE, and TEST_ALL_TRAFFIC. To begin the migration from EXTERNAL to EXTERNAL_MANAGED, the state must be changed to PREPARE. The state must be changed to TEST_ALL_TRAFFIC before the loadBalancingScheme can be changed to EXTERNAL_MANAGED. Optionally, the TEST_BY_PERCENTAGE state can be used to migrate traffic by percentage using externalManagedMigrationTestingPercentage. Rolling back a migration requires the states to be set in reverse order. So changing the scheme from EXTERNAL_MANAGED to EXTERNAL requires the state to be set to TEST_ALL_TRAFFIC at the same time. Optionally, the TEST_BY_PERCENTAGE state can be used to migrate some traffic back to EXTERNAL or PREPARE can be used to migrate all traffic back to EXTERNAL.",
 "enum": [
-"FINALIZE",
 "PREPARE",
-"TEST"
+"TEST_ALL_TRAFFIC",
+"TEST_BY_PERCENTAGE"
 ],
 "enumDescriptions": [
 "",
@@ -47613,7 +47613,7 @@ false
 "type": "string"
 },
 "externalManagedMigrationTestingPercentage": {
-"description": "Determines the fraction of requests that should be processed by the Global external Application Load Balancer. The value of this field must be in the range [0, 100]. Session affinity options will slightly affect this routing behavior, for more details, see: Session Affinity. This value is only used if the loadBalancingScheme in the BackendService is set to EXTERNAL when using the classic Application Load Balancer.",
+"description": "Determines the fraction of requests that should be processed by the Global external Application Load Balancer. The value of this field must be in the range [0, 100]. Session affinity options will slightly affect this routing behavior, for more details, see: Session Affinity. This value can only be set if the loadBalancingScheme in the BackendService is set to EXTERNAL (when using the classic Application Load Balancer) and the migration state is TEST_BY_PERCENTAGE.",
 "format": "float",
 "type": "number"
 },
@@ -47742,6 +47742,10 @@ false
 "description": "The URL of the network to which this backend service belongs. This field can only be specified when the load balancing scheme is set to INTERNAL.",
 "type": "string"
 },
+"networkPassThroughLbTrafficPolicy": {
+"$ref": "BackendServiceNetworkPassThroughLbTrafficPolicy",
+"description": "Configures traffic steering properties of internal passthrough Network Load Balancers."
+},
 "outlierDetection": {
 "$ref": "OutlierDetection",
 "description": "Settings controlling the ejection of unhealthy backend endpoints from the load balancing pool of each individual proxy instance that processes the traffic for the given backend service. If not set, this feature is considered disabled. Results of the outlier detection algorithm (ejection of endpoints from the load balancing pool and returning them back to the pool) are executed independently by each proxy instance of the load balancer. In most cases, more than one proxy instance handles the traffic received by a backend service. Thus, it is possible that an unhealthy endpoint is detected and ejected by only some of the proxies, and while this happens, other proxies may continue to send requests to the same unhealthy endpoint until they detect and eject the unhealthy endpoint. Applicable backend endpoints can be: - VM instances in an Instance Group - Endpoints in a Zonal NEG (GCE_VM_IP, GCE_VM_IP_PORT) - Endpoints in a Hybrid Connectivity NEG (NON_GCP_PRIVATE_IP_PORT) - Serverless NEGs, that resolve to Cloud Run, App Engine, or Cloud Functions Services - Private Service Connect NEGs, that resolve to Google-managed regional API endpoints or managed services published using Private Service Connect Applicable backend service types can be: - A global backend service with the loadBalancingScheme set to INTERNAL_SELF_MANAGED or EXTERNAL_MANAGED. - A regional backend service with the serviceProtocol set to HTTP, HTTPS, or HTTP2, and loadBalancingScheme set to INTERNAL_MANAGED or EXTERNAL_MANAGED. Not supported for Serverless NEGs. Not supported when the backend service is referenced by a URL map that is bound to target gRPC proxy that has validateForProxyless field set to true."
@@ -48734,6 +48738,41 @@ false
 },
 "type": "object"
 },
+"BackendServiceNetworkPassThroughLbTrafficPolicy": {
+"id": "BackendServiceNetworkPassThroughLbTrafficPolicy",
+"properties": {
+"zonalAffinity": {
+"$ref": "BackendServiceNetworkPassThroughLbTrafficPolicyZonalAffinity",
+"description": "When configured, new connections are load balanced across healthy backend endpoints in the local zone."
+}
+},
+"type": "object"
+},
+"BackendServiceNetworkPassThroughLbTrafficPolicyZonalAffinity": {
+"id": "BackendServiceNetworkPassThroughLbTrafficPolicyZonalAffinity",
+"properties": {
+"spillover": {
+"description": "This field indicates whether zonal affinity is enabled or not. The possible values are: - ZONAL_AFFINITY_DISABLED: Default Value. Zonal Affinity is disabled. The load balancer distributes new connections to all healthy backend endpoints across all zones. - ZONAL_AFFINITY_STAY_WITHIN_ZONE: Zonal Affinity is enabled. The load balancer distributes new connections to all healthy backend endpoints in the local zone only. If there are no healthy backend endpoints in the local zone, the load balancer distributes new connections to all backend endpoints in the local zone. - ZONAL_AFFINITY_SPILL_CROSS_ZONE: Zonal Affinity is enabled. The load balancer distributes new connections to all healthy backend endpoints in the local zone only. If there aren't enough healthy backend endpoints in the local zone, the load balancer distributes new connections to all healthy backend endpoints across all zones. ",
+"enum": [
+"ZONAL_AFFINITY_DISABLED",
+"ZONAL_AFFINITY_SPILL_CROSS_ZONE",
+"ZONAL_AFFINITY_STAY_WITHIN_ZONE"
+],
+"enumDescriptions": [
+"",
+"",
+""
+],
+"type": "string"
+},
+"spilloverRatio": {
+"description": "The value of the field must be in [0, 1]. When the ratio of the count of healthy backend endpoints in a zone to the count of backend endpoints in that same zone is equal to or above this threshold, the load balancer distributes new connections to all healthy endpoints in the local zone only. When the ratio of the count of healthy backend endpoints in a zone to the count of backend endpoints in that same zone is below this threshold, the load balancer distributes all new connections to all healthy endpoints across all zones.",
+"format": "float",
+"type": "number"
+}
+},
+"type": "object"
+},
 "BackendServiceReference": {
 "id": "BackendServiceReference",
 "properties": {
@@ -53641,11 +53680,11 @@ false
 "type": "string"
 },
 "externalManagedBackendBucketMigrationState": {
-"description": "Specifies the canary migration state for the backend buckets attached to this forwarding rule. Possible values are PREPARE, TEST, and FINALIZE. To begin the migration from EXTERNAL to EXTERNAL_MANAGED, the state must be changed to PREPARE. The state must be changed to FINALIZE before the loadBalancingScheme can be changed to EXTERNAL_MANAGED. Optionally, the TEST state can be used to migrate traffic to backend buckets attached to this forwarding rule by percentage using externalManagedBackendBucketMigrationTestingPercentage. Rolling back a migration requires the states to be set in reverse order. So changing the scheme from EXTERNAL_MANAGED to EXTERNAL requires the state to be set to FINALIZE at the same time. Optionally, the TEST state can be used to migrate some traffic back to EXTERNAL or PREPARE can be used to migrate all traffic back to EXTERNAL.",
+"description": "Specifies the canary migration state for the backend buckets attached to this forwarding rule. Possible values are PREPARE, TEST_BY_PERCENTAGE, and TEST_ALL_TRAFFIC. To begin the migration from EXTERNAL to EXTERNAL_MANAGED, the state must be changed to PREPARE. The state must be changed to TEST_ALL_TRAFFIC before the loadBalancingScheme can be changed to EXTERNAL_MANAGED. Optionally, the TEST_BY_PERCENTAGE state can be used to migrate traffic to backend buckets attached to this forwarding rule by percentage using externalManagedBackendBucketMigrationTestingPercentage. Rolling back a migration requires the states to be set in reverse order. So changing the scheme from EXTERNAL_MANAGED to EXTERNAL requires the state to be set to TEST_ALL_TRAFFIC at the same time. Optionally, the TEST_BY_PERCENTAGE state can be used to migrate some traffic back to EXTERNAL or PREPARE can be used to migrate all traffic back to EXTERNAL.",
 "enum": [
-"FINALIZE",
 "PREPARE",
-"TEST"
+"TEST_ALL_TRAFFIC",
+"TEST_BY_PERCENTAGE"
 ],
 "enumDescriptions": [
 "",
@@ -53655,7 +53694,7 @@ false
 "type": "string"
 },
 "externalManagedBackendBucketMigrationTestingPercentage": {
-"description": "Determines the fraction of requests to backend buckets that should be processed by the Global external Application Load Balancer. The value of this field must be in the range [0, 100]. This value is only used if the loadBalancingScheme is set to EXTERNAL (when using the Classic ALB).",
+"description": "Determines the fraction of requests to backend buckets that should be processed by the global external Application Load Balancer. The value of this field must be in the range [0, 100]. This value can only be set if the loadBalancingScheme in the BackendService is set to EXTERNAL (when using the classic Application Load Balancer) and the migration state is TEST_BY_PERCENTAGE.",
 "format": "float",
 "type": "number"
 },
@@ -55666,6 +55705,7 @@ false
 "description": "Specifies the type of the healthCheck, either TCP, SSL, HTTP, HTTPS, HTTP2 or GRPC. Exactly one of the protocol-specific health check fields must be specified, which must match type field.",
 "enum": [
 "GRPC",
+"GRPC_WITH_TLS",
 "HTTP",
 "HTTP2",
 "HTTPS",
@@ -55682,6 +55722,7 @@ false
 "",
 "",
 "",
+"",
 ""
 ],
 "type": "string"
@@ -58483,7 +58524,7 @@ false
 },
 "upcomingMaintenance": {
 "$ref": "UpcomingMaintenance",
-"description": "[Output Only] Specifies upcoming maintenance for the instance."
+"description": "[Output Only] DEPRECATED: Please use resource_status.upcoming_maintenance instead. Specifies upcoming maintenance for the instance."
 },
 "zone": {
 "description": "[Output Only] URL of the zone where the instance resides. You must specify this field as part of the HTTP request URL. It is not settable as a field in the request body.",
@@ -62647,6 +62688,11 @@ false
 "description": "[Output Only] The name of the firewall policy.",
 "type": "string"
 },
+"priority": {
+"description": "[Output only] Priority of firewall policy association. Not applicable for type=HIERARCHY.",
+"format": "int32",
+"type": "integer"
+},
 "rules": {
 "description": "The rules that apply to the network.",
 "items": {
@@ -62664,12 +62710,16 @@ false
 "HIERARCHY",
 "NETWORK",
 "NETWORK_REGIONAL",
+"SYSTEM_GLOBAL",
+"SYSTEM_REGIONAL",
 "UNSPECIFIED"
 ],
 "enumDescriptions": [
 "",
 "",
 "",
+"",
+"",
 ""
 ],
 "type": "string"
@@ -63576,6 +63626,10 @@ false
 "description": "Administrative status of the interconnect. When this is set to true, the Interconnect is functional and can carry traffic. When set to false, no packets can be carried over the interconnect and no BGP routes are exchanged over it. By default, the status is set to true.",
 "type": "boolean"
 },
+"applicationAwareInterconnect": {
+"$ref": "InterconnectApplicationAwareInterconnect",
+"description": "Configuration for enabling Application Aware Interconnect (AAI) on this Cloud Interconnect connection between Google and your on-premises router."
+},
 "availableFeatures": {
 "description": "[Output only] List of features available for this Interconnect connection, which can take one of the following values: - MACSEC If present then the Interconnect connection is provisioned on MACsec capable hardware ports. If not present then the Interconnect connection is provisioned on non-MACsec capable ports and MACsec isn't supported and enabling MACsec fails.",
 "items": {
@@ -63774,6 +63828,74 @@ false
 },
 "type": "object"
 },
+"InterconnectApplicationAwareInterconnect": {
+"description": "Configuration information for enabling Application Aware Interconnect (AAI) on this Cloud Interconnect connection between Google and your on-premises router.",
+"id": "InterconnectApplicationAwareInterconnect",
+"properties": {
+"bandwidthPercentagePolicy": {
+"$ref": "InterconnectApplicationAwareInterconnectBandwidthPercentagePolicy"
+},
+"profileDescription": {
+"description": "A description for the AAI profile on this interconnect.",
+"type": "string"
+},
+"strictPriorityPolicy": {
+"$ref": "InterconnectApplicationAwareInterconnectStrictPriorityPolicy"
+}
+},
+"type": "object"
+},
+"InterconnectApplicationAwareInterconnectBandwidthPercentage": {
+"description": "Specify bandwidth percentages (0-100) for various traffic classes in BandwidthPercentagePolicy. The sum of all percentages must equal 100. It is valid to specify percentages for some classes and not for others. The others will be implicitly marked as 0.",
+"id": "InterconnectApplicationAwareInterconnectBandwidthPercentage",
+"properties": {
+"percentage": {
+"description": "Bandwidth percentage for a specific traffic class.",
+"format": "uint32",
+"type": "integer"
+},
+"trafficClass": {
+"description": "TrafficClass whose bandwidth percentage is being specified.",
+"enum": [
+"TC1",
+"TC2",
+"TC3",
+"TC4",
+"TC5",
+"TC6"
+],
+"enumDescriptions": [
+"Traffic Class 1, corresponding to DSCP ranges (0-7) 000xxx.",
+"Traffic Class 2, corresponding to DSCP ranges (8-15) 001xxx.",
+"Traffic Class 3, corresponding to DSCP ranges (16-23) 010xxx.",
+"Traffic Class 4, corresponding to DSCP ranges (24-31) 011xxx.",
+"Traffic Class 5, corresponding to DSCP ranges (32-47) 10xxxx.",
+"Traffic Class 6, corresponding to DSCP ranges (48-63) 11xxxx."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
+"InterconnectApplicationAwareInterconnectBandwidthPercentagePolicy": {
+"id": "InterconnectApplicationAwareInterconnectBandwidthPercentagePolicy",
+"properties": {
+"bandwidthPercentages": {
+"description": "Specify bandwidth percentages for various traffic classes for queuing type Bandwidth Percent.",
+"items": {
+"$ref": "InterconnectApplicationAwareInterconnectBandwidthPercentage"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"InterconnectApplicationAwareInterconnectStrictPriorityPolicy": {
+"description": "Specify configuration for StrictPriorityPolicy.",
+"id": "InterconnectApplicationAwareInterconnectStrictPriorityPolicy",
+"properties": {},
+"type": "object"
+},
 "InterconnectAttachment": {
 "description": "Represents an Interconnect Attachment (VLAN) resource. You can use Interconnect attachments (VLANS) to connect your Virtual Private Cloud networks to your on-premises networks through an Interconnect. For more information, read Creating VLAN Attachments.",
 "id": "InterconnectAttachment",
@@ -69167,7 +69289,13 @@ false
 "description": "Metadata defined as annotations on the network endpoint.",
 "type": "object"
 },
+"clientDestinationPort": {
+"description": "Represents the port number to which PSC consumer sends packets. Only valid for network endpoint groups created with GCE_VM_IP_PORTMAP endpoint type.",
+"format": "int32",
+"type": "integer"
+},
 "clientPort": {
+"deprecated": true,
 "description": "Represents the port number to which PSC consumer sends packets. Only valid for network endpoint groups created with CLIENT_PORT_PER_ENDPOINT mapping mode.",
 "format": "int32",
 "type": "integer"
@@ -69216,6 +69344,7 @@ false
 "description": "Only valid when networkEndpointType is SERVERLESS. Only one of cloudRun, appEngine or cloudFunction may be set."
 },
 "clientPortMappingMode": {
+"deprecated": true,
 "description": "Only valid when networkEndpointType is GCE_VM_IP_PORT and the NEG is regional.",
 "enum": [
 "CLIENT_PORT_PER_ENDPOINT",
@@ -69272,10 +69401,11 @@ false
 "type": "string"
 },
 "networkEndpointType": {
-"description": "Type of network endpoints in this network endpoint group. Can be one of GCE_VM_IP, GCE_VM_IP_PORT, NON_GCP_PRIVATE_IP_PORT, INTERNET_FQDN_PORT, INTERNET_IP_PORT, SERVERLESS, PRIVATE_SERVICE_CONNECT.",
+"description": "Type of network endpoints in this network endpoint group. Can be one of GCE_VM_IP, GCE_VM_IP_PORT, NON_GCP_PRIVATE_IP_PORT, INTERNET_FQDN_PORT, INTERNET_IP_PORT, SERVERLESS, PRIVATE_SERVICE_CONNECT, GCE_VM_IP_PORTMAP.",
 "enum": [
 "GCE_VM_IP",
 "GCE_VM_IP_PORT",
+"GCE_VM_IP_PORTMAP",
 "INTERNET_FQDN_PORT",
 "INTERNET_IP_PORT",
 "NON_GCP_PRIVATE_IP_PORT",
@@ -69285,6 +69415,7 @@ false
 "enumDescriptions": [
 "The network endpoint is represented by an IP address.",
 "The network endpoint is represented by IP address and port pair.",
+"The network endpoint is represented by an IP, Port and Client Destination Port.",
 "The network endpoint is represented by fully qualified domain name and port.",
 "The network endpoint is represented by an internet IP address and port.",
 "The network endpoint is represented by an IP address and port. The endpoint belongs to a VM or pod running in a customer's on-premises.",
@@ -70638,12 +70769,10 @@ false
 "description": "Specifies whether auto mode subnet creation is allowed.",
 "enum": [
 "AUTO_MODE_SUBNET_ALLOWED",
-"AUTO_MODE_SUBNET_BLOCKED",
-"AUTO_MODE_SUBNET_UNSPECIFIED"
+"AUTO_MODE_SUBNET_BLOCKED"
 ],
 "enumDescriptions": [
 "",
-"",
 ""
 ],
 "type": "string"
@@ -70652,12 +70781,10 @@ false
 "description": "Specifies whether cloud NAT creation is allowed.",
 "enum": [
 "CLOUD_NAT_ALLOWED",
-"CLOUD_NAT_BLOCKED",
-"CLOUD_NAT_UNSPECIFIED"
+"CLOUD_NAT_BLOCKED"
 ],
 "enumDescriptions": [
 "",
-"",
 ""
 ],
 "type": "string"
@@ -70666,12 +70793,10 @@ false
 "description": "Specifies whether cloud router creation is allowed.",
 "enum": [
 "CLOUD_ROUTER_ALLOWED",
-"CLOUD_ROUTER_BLOCKED",
-"CLOUD_ROUTER_UNSPECIFIED"
+"CLOUD_ROUTER_BLOCKED"
 ],
 "enumDescriptions": [
 "",
-"",
 ""
 ],
 "type": "string"
@@ -70680,12 +70805,10 @@ false
 "description": "Specifies whether Cloud Interconnect creation is allowed.",
 "enum": [
 "INTERCONNECT_ALLOWED",
-"INTERCONNECT_BLOCKED",
-"INTERCONNECT_UNSPECIFIED"
+"INTERCONNECT_BLOCKED"
 ],
 "enumDescriptions": [
 "",
-"",
 ""
 ],
 "type": "string"
@@ -70694,12 +70817,10 @@ false
 "description": "Specifies whether cloud load balancing is allowed.",
 "enum": [
 "LOAD_BALANCING_ALLOWED",
-"LOAD_BALANCING_BLOCKED",
-"LOAD_BALANCING_UNSPECIFIED"
+"LOAD_BALANCING_BLOCKED"
 ],
 "enumDescriptions": [
 "",
-"",
 ""
 ],
 "type": "string"
@@ -70708,12 +70829,10 @@ false
 "description": "Specifies whether multi-nic in the same network is allowed.",
 "enum": [
 "MULTI_NIC_IN_SAME_NETWORK_ALLOWED",
-"MULTI_NIC_IN_SAME_NETWORK_BLOCKED",
-"MULTI_NIC_IN_SAME_NETWORK_UNSPECIFIED"
+"MULTI_NIC_IN_SAME_NETWORK_BLOCKED"
 ],
 "enumDescriptions": [
 "",
-"",
 ""
 ],
 "type": "string"
@@ -70722,12 +70841,10 @@ false
 "description": "Specifies whether Packet Mirroring 1.0 is supported.",
 "enum": [
 "PACKET_MIRRORING_ALLOWED",
-"PACKET_MIRRORING_BLOCKED",
-"PACKET_MIRRORING_UNSPECIFIED"
+"PACKET_MIRRORING_BLOCKED"
 ],
 "enumDescriptions": [
 "",
-"",
 ""
 ],
 "type": "string"
@@ -70736,12 +70853,10 @@ false
 "description": "Specifies whether private Google access is allowed.",
 "enum": [
 "PRIVATE_GOOGLE_ACCESS_ALLOWED",
-"PRIVATE_GOOGLE_ACCESS_BLOCKED",
-"PRIVATE_GOOGLE_ACCESS_UNSPECIFIED"
+"PRIVATE_GOOGLE_ACCESS_BLOCKED"
 ],
 "enumDescriptions": [
 "",
-"",
 ""
 ],
 "type": "string"
@@ -70750,12 +70865,10 @@ false
 "description": "Specifies whether PSC creation is allowed.",
 "enum": [
 "PSC_ALLOWED",
-"PSC_BLOCKED",
-"PSC_UNSPECIFIED"
+"PSC_BLOCKED"
 ],
 "enumDescriptions": [
 "",
-"",
 ""
 ],
 "type": "string"
@@ -70764,12 +70877,10 @@ false
 "description": "Specifies whether unicast within the same network is allowed.",
 "enum": [
 "SAME_NETWORK_UNICAST_ALLOWED",
-"SAME_NETWORK_UNICAST_BLOCKED",
-"SAME_NETWORK_UNICAST_UNSPECIFIED"
+"SAME_NETWORK_UNICAST_BLOCKED"
 ],
 "enumDescriptions": [
 "",
-"",
 ""
 ],
 "type": "string"
@@ -70778,12 +70889,10 @@ false
 "description": "Specifies whether static route creation is allowed.",
 "enum": [
 "STATIC_ROUTES_ALLOWED",
-"STATIC_ROUTES_BLOCKED",
-"STATIC_ROUTES_UNSPECIFIED"
+"STATIC_ROUTES_BLOCKED"
 ],
 "enumDescriptions": [
 "",
-"",
 ""
 ],
 "type": "string"
@@ -70792,12 +70901,10 @@ false
 "description": "Specifies whether VPC peering is allowed.",
 "enum": [
 "VPC_PEERING_ALLOWED",
-"VPC_PEERING_BLOCKED",
-"VPC_PEERING_UNSPECIFIED"
+"VPC_PEERING_BLOCKED"
 ],
 "enumDescriptions": [
 "",
-"",
 ""
 ],
 "type": "string"
@@ -70806,12 +70913,10 @@ false
 "description": "Specifies whether VPN creation is allowed.",
 "enum": [
 "VPN_ALLOWED",
-"VPN_BLOCKED",
-"VPN_UNSPECIFIED"
+"VPN_BLOCKED"
 ],
 "enumDescriptions": [
 "",
-"",
 ""
 ],
 "type": "string"
@@ -70821,12 +70926,10 @@ false
 "items": {
 "enum": [
 "SUBNET_PURPOSE_CUSTOM_HARDWARE",
-"SUBNET_PURPOSE_PRIVATE",
-"SUBNET_PURPOSE_UNSPECIFIED"
+"SUBNET_PURPOSE_PRIVATE"
 ],
 "enumDescriptions": [
 "",
-"",
 ""
 ],
 "type": "string"
@@ -70839,13 +70942,11 @@ false
 "enum": [
 "SUBNET_STACK_TYPE_IPV4_IPV6",
 "SUBNET_STACK_TYPE_IPV4_ONLY",
-"SUBNET_STACK_TYPE_IPV6_ONLY",
-"SUBNET_STACK_TYPE_UNSPECIFIED"
+"SUBNET_STACK_TYPE_IPV6_ONLY"
 ],
 "enumDescriptions": [
 "",
 "",
-"",
 ""
 ],
 "type": "string"
@@ -70875,12 +70976,10 @@ false
 "description": "Specifies which type of multicast is supported.",
 "enum": [
 "MULTICAST_SDN",
-"MULTICAST_ULL",
-"MULTICAST_UNSPECIFIED"
+"MULTICAST_ULL"
 ],
 "enumDescriptions": [
 "",
-"",
 ""
 ],
 "type": "string"
@@ -70889,12 +70988,10 @@ false
 "description": "Specifies which type of unicast is supported.",
 "enum": [
 "UNICAST_SDN",
-"UNICAST_ULL",
-"UNICAST_UNSPECIFIED"
+"UNICAST_ULL"
 ],
 "enumDescriptions": [
 "",
-"",
 ""
 ],
 "type": "string"
@@ -71185,6 +71282,11 @@ false
 "description": "[Output Only] The name of the firewall policy.",
 "type": "string"
 },
+"priority": {
+"description": "[Output only] Priority of firewall policy association. Not applicable for type=HIERARCHY.",
+"format": "int32",
+"type": "integer"
+},
 "rules": {
 "description": "The rules that apply to the network.",
 "items": {
@@ -71201,11 +71303,13 @@ false
 "enum": [
 "HIERARCHY",
 "NETWORK",
+"SYSTEM",
 "UNSPECIFIED"
 ],
 "enumDescriptions": [
 "",
 "",
+"",
 ""
 ],
 "type": "string"
@@ -74906,7 +75010,7 @@ false
 "type": "array"
 },
 "cidrRanges": {
-"description": "One or more IPv4 or IPv6 CIDR ranges that apply as filter on the source (ingress) or destination (egress) IP in the IP header. If no ranges are specified, all IPv4 traffic that matches the specified IPProtocols is mirrored. If neither cidrRanges nor IPProtocols is specified, all IPv4 traffic is mirrored. To mirror all IPv4 and IPv6 traffic, use \"0.0.0.0/0,::/0\". Note: Support for IPv6 traffic is in preview.",
+"description": "One or more IPv4 or IPv6 CIDR ranges that apply as filter on the source (ingress) or destination (egress) IP in the IP header. If no ranges are specified, all IPv4 traffic that matches the specified IPProtocols is mirrored. If neither cidrRanges nor IPProtocols is specified, all IPv4 traffic is mirrored. To mirror all IPv4 and IPv6 traffic, use \"0.0.0.0/0,::/0\".",
 "items": {
 "type": "string"
 },
@@ -75327,15 +75431,15 @@ false
 },
 "defaultRouteAction": {
 "$ref": "HttpRouteAction",
-"description": "defaultRouteAction takes effect when none of the pathRules or routeRules match. The load balancer performs advanced routing actions, such as URL rewrites and header transformations, before forwarding the request to the selected backend. If defaultRouteAction specifies any weightedBackendServices, defaultService must not be set. Conversely if defaultService is set, defaultRouteAction cannot contain any weightedBackendServices. Only one of defaultRouteAction or defaultUrlRedirect must be set. URL maps for classic Application Load Balancers only support the urlRewrite action within a path matcher's defaultRouteAction."
+"description": "defaultRouteAction takes effect when none of the pathRules or routeRules match. The load balancer performs advanced routing actions, such as URL rewrites and header transformations, before forwarding the request to the selected backend. If defaultRouteAction specifies any weightedBackendServices, defaultService must not be set. Conversely if defaultService is set, defaultRouteAction cannot contain any weightedBackendServices. If defaultRouteAction is specified, don't set defaultUrlRedirect. If defaultRouteAction.weightedBackendServices is specified, don't set defaultService. URL maps for classic Application Load Balancers only support the urlRewrite action within a path matcher's defaultRouteAction."
 },
 "defaultService": {
-"description": "The full or partial URL to the BackendService resource. This URL is used if none of the pathRules or routeRules defined by this PathMatcher are matched. For example, the following are all valid URLs to a BackendService resource: - https://www.googleapis.com/compute/v1/projects/project /global/backendServices/backendService - compute/v1/projects/project/global/backendServices/backendService - global/backendServices/backendService If defaultRouteAction is also specified, advanced routing actions, such as URL rewrites, take effect before sending the request to the backend. However, if defaultService is specified, defaultRouteAction cannot contain any weightedBackendServices. Conversely, if defaultRouteAction specifies any weightedBackendServices, defaultService must not be specified. Only one of defaultService, defaultUrlRedirect , or defaultRouteAction.weightedBackendService must be set. Authorization requires one or more of the following Google IAM permissions on the specified resource default_service: - compute.backendBuckets.use - compute.backendServices.use ",
+"description": "The full or partial URL to the BackendService resource. This URL is used if none of the pathRules or routeRules defined by this PathMatcher are matched. For example, the following are all valid URLs to a BackendService resource: - https://www.googleapis.com/compute/v1/projects/project /global/backendServices/backendService - compute/v1/projects/project/global/backendServices/backendService - global/backendServices/backendService If defaultRouteAction is also specified, advanced routing actions, such as URL rewrites, take effect before sending the request to the backend. However, if defaultService is specified, defaultRouteAction cannot contain any weightedBackendServices. Conversely, if defaultRouteAction specifies any weightedBackendServices, defaultService must not be specified. If defaultService is specified, then set either defaultUrlRedirect or defaultRouteAction.weightedBackendService. Don't set both. Authorization requires one or more of the following Google IAM permissions on the specified resource default_service: - compute.backendBuckets.use - compute.backendServices.use ",
 "type": "string"
 },
 "defaultUrlRedirect": {
 "$ref": "HttpRedirectAction",
-"description": "When none of the specified pathRules or routeRules match, the request is redirected to a URL specified by defaultUrlRedirect. If defaultUrlRedirect is specified, defaultService or defaultRouteAction must not be set. Not supported when the URL map is bound to a target gRPC proxy."
+"description": "When none of the specified pathRules or routeRules match, the request is redirected to a URL specified by defaultUrlRedirect. If defaultUrlRedirect is specified, then set either defaultService or defaultRouteAction. Don't set both. Not supported when the URL map is bound to a target gRPC proxy."
 },
 "description": {
 "description": "An optional description of this resource. Provide this property when you create the resource.",
@@ -79752,6 +79856,11 @@ false
 "description": "[Output Only] The name of the firewall policy.",
 "type": "string"
 },
+"priority": {
+"description": "[Output only] Priority of firewall policy association. Not applicable for type=HIERARCHY.",
+"format": "int32",
+"type": "integer"
+},
 "rules": {
 "description": "The rules that apply to the network.",
 "items": {
@@ -79765,12 +79874,16 @@ false
 "HIERARCHY",
 "NETWORK",
 "NETWORK_REGIONAL",
+"SYSTEM_GLOBAL",
+"SYSTEM_REGIONAL",
 "UNSPECIFIED"
 ],
 "enumDescriptions": [
 "",
 "",
 "",
+"",
+"",
 ""
 ],
 "type": "string"
@@ -80909,7 +81022,7 @@ false
 "type": "object"
 },
 "ResourcePolicyGroupPlacementPolicy": {
-"description": "A GroupPlacementPolicy specifies resource placement configuration. It specifies the failure bucket separation as well as network locality",
+"description": "A GroupPlacementPolicy specifies resource placement configuration. It specifies the failure bucket separation",
 "id": "ResourcePolicyGroupPlacementPolicy",
 "properties": {
 "availabilityDomainCount": {
@@ -80922,25 +81035,13 @@ false
 "enum": [
 "CLUSTERED",
 "COLLOCATED",
+"MAX_SPREAD",
 "UNSPECIFIED_COLLOCATION"
 ],
 "enumDescriptions": [
 "Specifies collocation option that provides tight collocation with minimum network latency.",
 "",
-""
-],
-"type": "string"
-},
-"locality": {
-"description": "Specifies network locality",
-"enum": [
-"BEST_EFFORT",
-"STRICT",
-"UNSPECIFIED_LOCALITY"
-],
-"enumDescriptions": [
-"",
-"",
+"Specifies collocation option that provides spreading across clusters.",
 ""
 ],
 "type": "string"
@@ -80967,20 +81068,6 @@ false
 "format": "int32",
 "type": "integer"
 },
-"style": {
-"description": "Specifies instances to hosts placement relationship",
-"enum": [
-"COMPACT",
-"FULLY_SPREAD",
-"UNSPECIFIED_PLACEMENT_TYPE"
-],
-"enumDescriptions": [
-"VMs are placed without regard for shared hosts",
-"VMs do not share the same hosts",
-""
-],
-"type": "string"
-},
 "tpuTopology": {
 "description": "Specifies the shape of the TPU slice",
 "type": "string"
@@ -81469,6 +81556,7 @@ false
 "OS_TERMINATED",
 "PREEMPTED",
 "SCHEDULED_STOP",
+"SHUTDOWN_DUE_TO_HOST_ERROR",
 "SHUTDOWN_DUE_TO_MAINTENANCE",
 "USER_TERMINATED"
 ],
@@ -81484,6 +81572,7 @@ false
 "Terminated from the OS level",
 "Terminated due to preemption",
 "Terminated due to scheduled stop",
+"Terminated due to host error",
 "Terminated due to maintenance",
 "Terminated by user"
 ],
@@ -86380,14 +86469,14 @@ false
 "type": "string"
 },
 "consumerAcceptLists": {
-"description": "Projects that are allowed to connect to this service attachment.",
+"description": "Specifies which consumer projects or networks are allowed to connect to the service attachment. Each project or network has a connection limit. A given service attachment can manage connections at either the project or network level. Therefore, both the accept and reject lists for a given service attachment must contain either only projects or only networks.",
 "items": {
 "$ref": "ServiceAttachmentConsumerProjectLimit"
 },
 "type": "array"
 },
 "consumerRejectLists": {
-"description": "Projects that are not allowed to connect to this service attachment. The project can be specified using its id or number.",
+"description": "Specifies a list of projects or networks that are not allowed to connect to this service attachment. The project can be specified using its project ID or project number and the network can be specified using its URL. A given service attachment can manage connections at either the project or network level. Therefore, both the reject and accept lists for a given service attachment must contain either only projects or only networks.",
 "items": {
 "type": "string"
 },
@@ -96186,7 +96275,7 @@ false
 "description": "defaultRouteAction takes effect when none of the hostRules match. The load balancer performs advanced routing actions, such as URL rewrites and header transformations, before forwarding the request to the selected backend. If defaultRouteAction specifies any weightedBackendServices, defaultService must not be set. Conversely if defaultService is set, defaultRouteAction cannot contain any weightedBackendServices. Only one of defaultRouteAction or defaultUrlRedirect must be set. URL maps for classic Application Load Balancers only support the urlRewrite action within defaultRouteAction. defaultRouteAction has no effect when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true."
 },
 "defaultService": {
-"description": "The full or partial URL of the defaultService resource to which traffic is directed if none of the hostRules match. If defaultRouteAction is also specified, advanced routing actions, such as URL rewrites, take effect before sending the request to the backend. However, if defaultService is specified, defaultRouteAction cannot contain any weightedBackendServices. Conversely, if routeAction specifies any weightedBackendServices, service must not be specified. Only one of defaultService, defaultUrlRedirect , or defaultRouteAction.weightedBackendService must be set. defaultService has no effect when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.",
+"description": "The full or partial URL of the defaultService resource to which traffic is directed if none of the hostRules match. If defaultRouteAction is also specified, advanced routing actions, such as URL rewrites, take effect before sending the request to the backend. However, if defaultService is specified, defaultRouteAction cannot contain any weightedBackendServices. Conversely, if routeAction specifies any weightedBackendServices, service must not be specified. If defaultService is specified, then set either defaultUrlRedirect , or defaultRouteAction.weightedBackendService Don't set both. defaultService has no effect when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.",
 "type": "string"
 },
 "defaultUrlRedirect": {