google-api-python-client 2.139.0__py2.py3-none-any.whl → 2.141.0__py2.py3-none-any.whl

googleapiclient/discovery_cache/documents/compute.alpha.json

@@ -1409,6 +1409,61 @@
 "https://www.googleapis.com/auth/compute.readonly"
 ]
 },
+"listUsable": {
+"description": "Retrieves a list of all usable backend buckets in the specified project.",
+"flatPath": "projects/{project}/global/backendBuckets/listUsable",
+"httpMethod": "GET",
+"id": "compute.backendBuckets.listUsable",
+"parameterOrder": [
+"project"
+],
+"parameters": {
+"filter": {
+"description": "A filter expression that filters resources listed in the response. Most Compute resources support two types of filter expressions: expressions that support regular expressions and expressions that follow API improvement proposal AIP-160. These two types of filter expressions cannot be mixed in one request. If you want to use AIP-160, your expression must specify the field name, an operator, and the value that you want to use for filtering. The value must be a string, a number, or a boolean. The operator must be either `=`, `!=`, `>`, `<`, `<=`, `>=` or `:`. For example, if you are filtering Compute Engine instances, you can exclude instances named `example-instance` by specifying `name != example-instance`. The `:*` comparison can be used to test whether a key has been defined. For example, to find all objects with `owner` label use: ``` labels.owner:* ``` You can also filter nested fields. For example, you could specify `scheduling.automaticRestart = false` to include instances only if they are not scheduled for automatic restarts. You can use filtering on nested fields to filter based on resource labels. To filter on multiple expressions, provide each separate expression within parentheses. For example: ``` (scheduling.automaticRestart = true) (cpuPlatform = \"Intel Skylake\") ``` By default, each expression is an `AND` expression. However, you can include `AND` and `OR` expressions explicitly. For example: ``` (cpuPlatform = \"Intel Skylake\") OR (cpuPlatform = \"Intel Broadwell\") AND (scheduling.automaticRestart = true) ``` If you want to use a regular expression, use the `eq` (equal) or `ne` (not equal) operator against a single un-parenthesized expression with or without quotes or against multiple parenthesized expressions. Examples: `fieldname eq unquoted literal` `fieldname eq 'single quoted literal'` `fieldname eq \"double quoted literal\"` `(fieldname1 eq literal) (fieldname2 ne \"literal\")` The literal value is interpreted as a regular expression using Google RE2 library syntax. The literal value must match the entire field. For example, to filter for instances that do not end with name \"instance\", you would use `name ne .*instance`. You cannot combine constraints on multiple fields using regular expressions.",
+"location": "query",
+"type": "string"
+},
+"maxResults": {
+"default": "500",
+"description": "The maximum number of results per page that should be returned. If the number of available results is larger than `maxResults`, Compute Engine returns a `nextPageToken` that can be used to get the next page of results in subsequent list requests. Acceptable values are `0` to `500`, inclusive. (Default: `500`)",
+"format": "uint32",
+"location": "query",
+"minimum": "0",
+"type": "integer"
+},
+"orderBy": {
+"description": "Sorts list results by a certain order. By default, results are returned in alphanumerical order based on the resource name. You can also sort results in descending order based on the creation timestamp using `orderBy=\"creationTimestamp desc\"`. This sorts results based on the `creationTimestamp` field in reverse chronological order (newest result first). Use this to sort resources like operations so that the newest operation is returned first. Currently, only sorting by `name` or `creationTimestamp desc` is supported.",
+"location": "query",
+"type": "string"
+},
+"pageToken": {
+"description": "Specifies a page token to use. Set `pageToken` to the `nextPageToken` returned by a previous list request to get the next page of results.",
+"location": "query",
+"type": "string"
+},
+"project": {
+"description": "Project ID for this request.",
+"location": "path",
+"pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?))",
+"required": true,
+"type": "string"
+},
+"returnPartialSuccess": {
+"description": "Opt-in for partial success behavior which provides partial results in case of failure. The default value is false. For example, when partial success behavior is enabled, aggregatedList for a single zone scope either returns all resources in the zone or no resources, with an error code.",
+"location": "query",
+"type": "boolean"
+}
+},
+"path": "projects/{project}/global/backendBuckets/listUsable",
+"response": {
+"$ref": "BackendBucketListUsable"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/compute",
+"https://www.googleapis.com/auth/compute.readonly"
+]
+},
 "patch": {
 "description": "Updates the specified BackendBucket resource with the data included in the request. This method supports PATCH semantics and uses the JSON merge patch format and processing rules.",
 "flatPath": "projects/{project}/global/backendBuckets/{backendBucket}",
@@ -6614,7 +6669,7 @@
 ],
 "parameters": {
 "operation": {
-"description": "Name of the Operations resource to delete.",
+"description": "Name of the Operations resource to delete, or its unique numeric identifier.",
 "location": "path",
 "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
 "required": true,
@@ -6645,7 +6700,7 @@
 ],
 "parameters": {
 "operation": {
-"description": "Name of the Operations resource to return.",
+"description": "Name of the Operations resource to return, or its unique numeric identifier.",
 "location": "path",
 "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
 "required": true,
@@ -6735,7 +6790,7 @@
 ],
 "parameters": {
 "operation": {
-"description": "Name of the Operations resource to return.",
+"description": "Name of the Operations resource to return, or its unique numeric identifier.",
 "location": "path",
 "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
 "required": true,
@@ -6773,7 +6828,7 @@
 ],
 "parameters": {
 "operation": {
-"description": "Name of the Operations resource to delete.",
+"description": "Name of the Operations resource to delete, or its unique numeric identifier.",
 "location": "path",
 "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
 "required": true,
@@ -6801,7 +6856,7 @@
 ],
 "parameters": {
 "operation": {
-"description": "Name of the Operations resource to return.",
+"description": "Name of the Operations resource to return, or its unique numeric identifier.",
 "location": "path",
 "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
 "required": true,
@@ -14145,7 +14200,7 @@
 ],
 "parameters": {
 "instantSnapshotGroup": {
-"description": "Name of the instantSnapshotGroup resource to return.",
+"description": "Name of the InstantSnapshotGroup resource to return.",
 "location": "path",
 "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
 "required": true,
@@ -28562,16 +28617,16 @@
 },
 "get": {
 "description": "returns the specified InstantSnapshotGroup resource in the specified region.",
-"flatPath": "projects/{project}/regions/{region}/instantSnapshotGroups/{instantSnapshot}",
+"flatPath": "projects/{project}/regions/{region}/instantSnapshotGroups/{instantSnapshotGroup}",
 "httpMethod": "GET",
 "id": "compute.regionInstantSnapshotGroups.get",
 "parameterOrder": [
 "project",
 "region",
-"instantSnapshot"
+"instantSnapshotGroup"
 ],
 "parameters": {
-"instantSnapshot": {
+"instantSnapshotGroup": {
 "description": "Name of the InstantSnapshotGroup resource to return.",
 "location": "path",
 "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
@@ -28593,7 +28648,7 @@
 "type": "string"
 }
 },
-"path": "projects/{project}/regions/{region}/instantSnapshotGroups/{instantSnapshot}",
+"path": "projects/{project}/regions/{region}/instantSnapshotGroups/{instantSnapshotGroup}",
 "response": {
 "$ref": "InstantSnapshotGroup"
 },
@@ -30899,7 +30954,7 @@
 ],
 "parameters": {
 "operation": {
-"description": "Name of the Operations resource to delete.",
+"description": "Name of the Operations resource to delete, or its unique numeric identifier.",
 "location": "path",
 "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
 "required": true,
@@ -30938,7 +30993,7 @@
 ],
 "parameters": {
 "operation": {
-"description": "Name of the Operations resource to return.",
+"description": "Name of the Operations resource to return, or its unique numeric identifier.",
 "location": "path",
 "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
 "required": true,
@@ -31044,7 +31099,7 @@
 ],
 "parameters": {
 "operation": {
-"description": "Name of the Operations resource to return.",
+"description": "Name of the Operations resource to return, or its unique numeric identifier.",
 "location": "path",
 "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
 "required": true,
@@ -44640,7 +44695,7 @@
 ],
 "parameters": {
 "operation": {
-"description": "Name of the Operations resource to delete.",
+"description": "Name of the Operations resource to delete, or its unique numeric identifier.",
 "location": "path",
 "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
 "required": true,
@@ -44679,7 +44734,7 @@
 ],
 "parameters": {
 "operation": {
-"description": "Name of the Operations resource to return.",
+"description": "Name of the Operations resource to return, or its unique numeric identifier.",
 "location": "path",
 "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
 "required": true,
@@ -44785,7 +44840,7 @@
 ],
 "parameters": {
 "operation": {
-"description": "Name of the Operations resource to return.",
+"description": "Name of the Operations resource to return, or its unique numeric identifier.",
 "location": "path",
 "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
 "required": true,
@@ -45223,7 +45278,7 @@
 }
 }
 },
-"revision": "20240707",
+"revision": "20240730",
 "rootUrl": "https://compute.googleapis.com/",
 "schemas": {
 "AWSV4Signature": {
@@ -45967,6 +46022,7 @@ false
 "PRIVATE_SERVICE_CONNECT",
 "SERVERLESS",
 "SHARED_LOADBALANCER_VIP",
+"SYSTEM_MANAGED",
 "VPC_PEERING"
 ],
 "enumDescriptions": [
@@ -45977,6 +46033,7 @@ false
 "A private network IP address that can be used to configure Private Service Connect. This purpose can be specified only for GLOBAL addresses of Type INTERNAL",
 "A regional internal IP address range reserved for Serverless.",
 "A private network IP address that can be shared by multiple Internal Load Balancer forwarding rules.",
+"A regional internal IP address that is reserved and managed by Google Cloud. It can not be assigned to Google Cloud compute resources such as VM and internal load balancer.",
 "IP range for peer networks."
 ],
 "type": "string"
@@ -46509,7 +46566,7 @@ false
 "type": "integer"
 },
 "turboMode": {
-"description": "Turbo mode to use for the instance. Supported modes include: * ALL_CORE_MAX Using empty string or not setting this field will use the default turbo mode.",
+"description": "Turbo frequency mode to use for the instance. Supported modes include: * ALL_CORE_MAX Using empty string or not setting this field will use the platform-specific default turbo mode.",
 "type": "string"
 },
 "visibleCoreCount": {
@@ -46556,13 +46613,17 @@ false
 "vmFamily": {
 "description": "The VM family that all instances scheduled against this reservation must belong to.",
 "enum": [
+"VM_FAMILY_CLOUD_TPU_DEVICE_CT3",
 "VM_FAMILY_CLOUD_TPU_LITE_DEVICE_CT5L",
 "VM_FAMILY_CLOUD_TPU_LITE_POD_SLICE_CT5LP",
+"VM_FAMILY_CLOUD_TPU_POD_SLICE_CT3P",
 "VM_FAMILY_CLOUD_TPU_POD_SLICE_CT4P"
 ],
 "enumDescriptions": [
 "",
 "",
+"",
+"",
 ""
 ],
 "type": "string"
@@ -48162,6 +48223,13 @@ false
 "selfLinkWithId": {
 "description": "[Output Only] Server-defined URL for this resource with the resource id.",
 "type": "string"
+},
+"usedBy": {
+"description": "[Output Only] List of resources referencing that backend bucket.",
+"items": {
+"$ref": "BackendBucketUsedBy"
+},
+"type": "array"
 }
 },
 "type": "object"
@@ -48448,6 +48516,167 @@ false
 },
 "type": "object"
 },
+"BackendBucketListUsable": {
+"id": "BackendBucketListUsable",
+"properties": {
+"id": {
+"description": "[Output Only] Unique identifier for the resource; defined by the server.",
+"type": "string"
+},
+"items": {
+"description": "A list of BackendBucket resources.",
+"items": {
+"$ref": "BackendBucket"
+},
+"type": "array"
+},
+"kind": {
+"default": "compute#usableBackendBucketList",
+"description": "[Output Only] Type of resource. Always compute#usableBackendBucketList for lists of usable backend buckets.",
+"type": "string"
+},
+"nextPageToken": {
+"description": "[Output Only] This token allows you to get the next page of results for list requests. If the number of results is larger than maxResults, use the nextPageToken as a value for the query parameter pageToken in the next list request. Subsequent list requests will have their own nextPageToken to continue paging through the results.",
+"type": "string"
+},
+"selfLink": {
+"description": "[Output Only] Server-defined URL for this resource.",
+"type": "string"
+},
+"warning": {
+"description": "[Output Only] Informational warning message.",
+"properties": {
+"code": {
+"description": "[Output Only] A warning code, if applicable. For example, Compute Engine returns NO_RESULTS_ON_PAGE if there are no results in the response.",
+"enum": [
+"CLEANUP_FAILED",
+"DEPRECATED_RESOURCE_USED",
+"DEPRECATED_TYPE_USED",
+"DISK_SIZE_LARGER_THAN_IMAGE_SIZE",
+"EXPERIMENTAL_TYPE_USED",
+"EXTERNAL_API_WARNING",
+"FIELD_VALUE_OVERRIDEN",
+"INJECTED_KERNELS_DEPRECATED",
+"INVALID_HEALTH_CHECK_FOR_DYNAMIC_WIEGHTED_LB",
+"LARGE_DEPLOYMENT_WARNING",
+"LIST_OVERHEAD_QUOTA_EXCEED",
+"MISSING_TYPE_DEPENDENCY",
+"NEXT_HOP_ADDRESS_NOT_ASSIGNED",
+"NEXT_HOP_CANNOT_IP_FORWARD",
+"NEXT_HOP_INSTANCE_HAS_NO_IPV6_INTERFACE",
+"NEXT_HOP_INSTANCE_NOT_FOUND",
+"NEXT_HOP_INSTANCE_NOT_ON_NETWORK",
+"NEXT_HOP_NOT_RUNNING",
+"NOT_CRITICAL_ERROR",
+"NO_RESULTS_ON_PAGE",
+"PARTIAL_SUCCESS",
+"REQUIRED_TOS_AGREEMENT",
+"RESOURCE_IN_USE_BY_OTHER_RESOURCE_WARNING",
+"RESOURCE_NOT_DELETED",
+"SCHEMA_VALIDATION_IGNORED",
+"SINGLE_INSTANCE_PROPERTY_TEMPLATE",
+"UNDECLARED_PROPERTIES",
+"UNREACHABLE"
+],
+"enumDeprecated": [
+false,
+false,
+false,
+false,
+false,
+false,
+true,
+false,
+false,
+false,
+false,
+false,
+false,
+false,
+false,
+false,
+false,
+false,
+false,
+false,
+false,
+false,
+false,
+false,
+false,
+false,
+false,
+false
+],
+"enumDescriptions": [
+"Warning about failed cleanup of transient changes made by a failed operation.",
+"A link to a deprecated resource was created.",
+"When deploying and at least one of the resources has a type marked as deprecated",
+"The user created a boot disk that is larger than image size.",
+"When deploying and at least one of the resources has a type marked as experimental",
+"Warning that is present in an external api call",
+"Warning that value of a field has been overridden. Deprecated unused field.",
+"The operation involved use of an injected kernel, which is deprecated.",
+"A WEIGHTED_MAGLEV backend service is associated with a health check that is not of type HTTP/HTTPS/HTTP2.",
+"When deploying a deployment with a exceedingly large number of resources",
+"Resource can't be retrieved due to list overhead quota exceed which captures the amount of resources filtered out by user-defined list filter.",
+"A resource depends on a missing type",
+"The route's nextHopIp address is not assigned to an instance on the network.",
+"The route's next hop instance cannot ip forward.",
+"The route's nextHopInstance URL refers to an instance that does not have an ipv6 interface on the same network as the route.",
+"The route's nextHopInstance URL refers to an instance that does not exist.",
+"The route's nextHopInstance URL refers to an instance that is not on the same network as the route.",
+"The route's next hop instance does not have a status of RUNNING.",
+"Error which is not critical. We decided to continue the process despite the mentioned error.",
+"No results are present on a particular list page.",
+"Success is reported, but some results may be missing due to errors",
+"The user attempted to use a resource that requires a TOS they have not accepted.",
+"Warning that a resource is in use.",
+"One or more of the resources set to auto-delete could not be deleted because they were in use.",
+"When a resource schema validation is ignored.",
+"Instance template used in instance group manager is valid as such, but its application does not make a lot of sense, because it allows only single instance in instance group.",
+"When undeclared properties in the schema are present",
+"A given scope cannot be reached."
+],
+"type": "string"
+},
+"data": {
+"description": "[Output Only] Metadata about this warning in key: value format. For example: \"data\": [ { \"key\": \"scope\", \"value\": \"zones/us-east1-d\" } ",
+"items": {
+"properties": {
+"key": {
+"description": "[Output Only] A key that provides more detail on the warning being returned. For example, for warnings where there are no results in a list request for a particular zone, this key might be scope and the key value might be the zone name. Other examples might be a key indicating a deprecated resource and a suggested replacement, or a warning about invalid network settings (for example, if an instance attempts to perform IP forwarding but is not enabled for IP forwarding).",
+"type": "string"
+},
+"value": {
+"description": "[Output Only] A warning data value corresponding to the key.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"type": "array"
+},
+"message": {
+"description": "[Output Only] A human-readable description of the warning code.",
+"type": "string"
+}
+},
+"type": "object"
+}
+},
+"type": "object"
+},
+"BackendBucketUsedBy": {
+"id": "BackendBucketUsedBy",
+"properties": {
+"reference": {
+"description": "[Output Only] Server-defined URL for UrlMaps referencing that BackendBucket.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "BackendCustomMetric": {
 "description": "Custom Metrics are used for CUSTOM_METRICS balancing_mode and WEIGHTED_ROUND_ROBIN BackendService locality_lb_policy.",
 "id": "BackendCustomMetric",
@@ -48641,7 +48870,7 @@ false
 "type": "array"
 },
 "localityLbPolicy": {
-"description": "The load balancing algorithm used within the scope of the locality. The possible values are: - ROUND_ROBIN: This is a simple policy in which each healthy backend is selected in round robin order. This is the default. - LEAST_REQUEST: An O(1) algorithm which selects two random healthy hosts and picks the host which has fewer active requests. - RING_HASH: The ring/modulo hash load balancer implements consistent hashing to backends. The algorithm has the property that the addition/removal of a host from a set of N hosts only affects 1/N of the requests. - RANDOM: The load balancer selects a random healthy host. - ORIGINAL_DESTINATION: Backend host is selected based on the client connection metadata, i.e., connections are opened to the same address as the destination address of the incoming connection before the connection was redirected to the load balancer. - MAGLEV: used as a drop in replacement for the ring hash load balancer. Maglev is not as stable as ring hash but has faster table lookup build times and host selection times. For more information about Maglev, see https://ai.google/research/pubs/pub44824 This field is applicable to either: - A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2, and load_balancing_scheme set to INTERNAL_MANAGED. - A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED, INTERNAL_MANAGED, or EXTERNAL_MANAGED. If sessionAffinity is not NONE, and this field is not set to MAGLEV or RING_HASH, session affinity settings will not take effect. Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced by a URL map that is bound to target gRPC proxy that has validateForProxyless field set to true.",
+"description": "The load balancing algorithm used within the scope of the locality. The possible values are: - ROUND_ROBIN: This is a simple policy in which each healthy backend is selected in round robin order. This is the default. - LEAST_REQUEST: An O(1) algorithm which selects two random healthy hosts and picks the host which has fewer active requests. - RING_HASH: The ring/modulo hash load balancer implements consistent hashing to backends. The algorithm has the property that the addition/removal of a host from a set of N hosts only affects 1/N of the requests. - RANDOM: The load balancer selects a random healthy host. - ORIGINAL_DESTINATION: Backend host is selected based on the client connection metadata, i.e., connections are opened to the same address as the destination address of the incoming connection before the connection was redirected to the load balancer. - MAGLEV: used as a drop in replacement for the ring hash load balancer. Maglev is not as stable as ring hash but has faster table lookup build times and host selection times. For more information about Maglev, see https://ai.google/research/pubs/pub44824 This field is applicable to either: - A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2, and load_balancing_scheme set to INTERNAL_MANAGED. - A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED, INTERNAL_MANAGED, or EXTERNAL_MANAGED. If sessionAffinity is not configured\u2014that is, if session affinity remains at the default value of NONE\u2014then the default value for localityLbPolicy is ROUND_ROBIN. If session affinity is set to a value other than NONE, then the default value for localityLbPolicy is MAGLEV. Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced by a URL map that is bound to target gRPC proxy that has validateForProxyless field set to true.",
 "enum": [
 "INVALID_LB_POLICY",
 "LEAST_REQUEST",
@@ -48803,6 +49032,10 @@ false
 "format": "int32",
 "type": "integer"
 },
+"tlsSettings": {
+"$ref": "BackendServiceTlsSettings",
+"description": "Configuration for Backend Authenticated TLS and mTLS. May only be specified when the backend protocol is SSL, HTTPS or HTTP2."
+},
 "usedBy": {
 "description": "[Output Only] List of resources referencing given backend service.",
 "items": {
@@ -49758,6 +49991,42 @@ false
 },
 "type": "object"
 },
+"BackendServiceTlsSettings": {
+"id": "BackendServiceTlsSettings",
+"properties": {
+"authenticationConfig": {
+"description": "Reference to the BackendAuthenticationConfig resource from the networksecurity.googleapis.com namespace. Can be used in authenticating TLS connections to the backend, as specified by the authenticationMode field. Can only be specified if authenticationMode is not NONE.",
+"type": "string"
+},
+"sni": {
+"description": "Server Name Indication - see RFC3546 section 3.1. If set, the load balancer sends this string as the SNI hostname in the TLS connection to the backend, and requires that this string match a Subject Alternative Name (SAN) in the backend's server certificate. With a Regional Internet NEG backend, if the SNI is specified here, the load balancer uses it regardless of whether the Regional Internet NEG is specified with FQDN or IP address and port. When both sni and subjectAltNames[] are specified, the load balancer matches the backend certificate's SAN only to subjectAltNames[].",
+"type": "string"
+},
+"subjectAltNames": {
+"description": "A list of Subject Alternative Names (SANs) that the Load Balancer verifies during a TLS handshake with the backend. When the server presents its X.509 certificate to the Load Balancer, the Load Balancer inspects the certificate's SAN field, and requires that at least one SAN match one of the subjectAltNames in the list. This field is limited to 5 entries. When both sni and subjectAltNames[] are specified, the load balancer matches the backend certificate's SAN only to subjectAltNames[].",
+"items": {
+"$ref": "BackendServiceTlsSettingsSubjectAltName"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"BackendServiceTlsSettingsSubjectAltName": {
+"description": "A Subject Alternative Name that the load balancer matches against the SAN field in the TLS certificate provided by the backend, specified as either a DNS name or a URI, in accordance with RFC 5280 4.2.1.6",
+"id": "BackendServiceTlsSettingsSubjectAltName",
+"properties": {
+"dnsName": {
+"description": "The SAN specified as a DNS Name.",
+"type": "string"
+},
+"uniformResourceIdentifier": {
+"description": "The SAN specified as a URI.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "BackendServiceUsedBy": {
 "id": "BackendServiceUsedBy",
 "properties": {
@@ -54367,7 +54636,7 @@ false
 "id": "FirewallPolicyRule",
 "properties": {
 "action": {
-"description": "The Action to perform when the client connection triggers the rule. Valid actions are \"allow\", \"deny\" and \"goto_next\".",
+"description": "The Action to perform when the client connection triggers the rule. Valid actions for firewall rules are: \"allow\", \"deny\", \"apply_security_profile_group\" and \"goto_next\". Valid actions for packet mirroring rules are: \"mirror\", \"do_not_mirror\" and \"goto_next\".",
 "type": "string"
 },
 "description": {
@@ -54396,7 +54665,7 @@ false
 },
 "kind": {
 "default": "compute#firewallPolicyRule",
-"description": "[Output only] Type of the resource. Always compute#firewallPolicyRule for firewall policy rules",
+"description": "[Output only] Type of the resource. Returns compute#firewallPolicyRule for firewall rules and compute#packetMirroringRule for packet mirroring rules.",
 "type": "string"
 },
 "match": {
@@ -54404,7 +54673,7 @@ false
 "description": "A match condition that incoming traffic is evaluated against. If it evaluates to true, the corresponding 'action' is enforced."
 },
 "priority": {
-"description": "An integer indicating the priority of a rule in the list. The priority must be a positive value between 0 and 2147483647. Rules are evaluated from highest to lowest priority where 0 is the highest priority and 2147483647 is the lowest prority.",
+"description": "An integer indicating the priority of a rule in the list. The priority must be a positive value between 0 and 2147483647. Rules are evaluated from highest to lowest priority where 0 is the highest priority and 2147483647 is the lowest priority.",
 "format": "int32",
 "type": "integer"
 },
@@ -54418,7 +54687,7 @@ false
 "type": "integer"
 },
 "securityProfileGroup": {
-"description": "A fully-qualified URL of a SecurityProfile resource instance. Example: https://networksecurity.googleapis.com/v1/projects/{project}/locations/{location}/securityProfileGroups/my-security-profile-group Must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.",
+"description": "A fully-qualified URL of a SecurityProfile resource instance. Example: https://networksecurity.googleapis.com/v1/projects/{project}/locations/{location}/securityProfileGroups/my-security-profile-group Must be specified if action is one of 'apply_security_profile_group' or 'mirror'. Cannot be specified for other actions.",
 "type": "string"
 },
 "targetResources": {
@@ -55531,6 +55800,10 @@ false
 },
 "type": "array"
 },
+"existingMatchingUsageInfo": {
+"$ref": "FutureReservationStatusExistingMatchingUsageInfo",
+"description": "[Output Only] Represents the existing matching usage for the future reservation."
+},
 "fulfilledCount": {
 "description": "This count indicates the fulfilled capacity so far. This is set during \"PROVISIONING\" state. This count also includes capacity delivered as part of existing matching reservations.",
 "format": "int64",
@@ -55584,6 +55857,23 @@ false
 },
 "type": "object"
 },
+"FutureReservationStatusExistingMatchingUsageInfo": {
+"description": "[Output Only] Represents the existing matching usage for the future reservation.",
+"id": "FutureReservationStatusExistingMatchingUsageInfo",
+"properties": {
+"count": {
+"description": "Count to represent min(FR total_count, matching_reserved_capacity+matching_unreserved_instances)",
+"format": "int64",
+"type": "string"
+},
+"timestamp": {
+"description": "Timestamp when the matching usage was calculated",
+"format": "google-datetime",
+"type": "string"
+}
+},
+"type": "object"
+},
 "FutureReservationStatusLastKnownGoodState": {
 "description": "The state that the future reservation will be reverted to should the amendment be declined.",
 "id": "FutureReservationStatusLastKnownGoodState",
@@ -55592,6 +55882,10 @@ false
 "description": "[Output Only] The description of the FutureReservation before an amendment was requested.",
 "type": "string"
 },
+"existingMatchingUsageInfo": {
+"$ref": "FutureReservationStatusExistingMatchingUsageInfo",
+"description": "[Output Only] Represents the matching usage for the future reservation before an amendment was requested."
+},
 "futureReservationSpecs": {
 "$ref": "FutureReservationStatusLastKnownGoodStateFutureReservationSpecs"
 },
@@ -60165,7 +60459,7 @@ false
 "type": "array"
 },
 "baseInstanceName": {
-"description": "The base instance name is a prefix that you want to attach to the names of all VMs in a MIG. The maximum character length is 58 and the name must comply with RFC1035 format. When a VM is created in the group, the MIG appends a hyphen and a random four-character string to the base instance name. If you want the MIG to assign sequential numbers instead of a random string, then end the base instance name with a hyphen followed by one or more hash symbols. The hash symbols indicate the number of digits. For example, a base instance name of \"vm-###\" results in \"vm-001\" as a VM name. @pattern [a-z](([-a-z0-9]{0,57})|([-a-z0-9]{0,52}-#{1,10}(\\\\[[0-9]{1,10}\\\\])?))",
+"description": "The base instance name is a prefix that you want to attach to the names of all VMs in a MIG. The maximum character length is 58 and the name must comply with RFC1035 format. When a VM is created in the group, the MIG appends a hyphen and a random four-character string to the base instance name. If you want the MIG to assign sequential numbers instead of a random string, then end the base instance name with a hyphen followed by one or more hash symbols. The hash symbols indicate the number of digits. For example, a base instance name of \"vm-###\" results in \"vm-001\" as a VM name. @pattern [a-z](([-a-z0-9]{0,57})|([-a-z0-9]{0,51}-#{1,10}(\\\\[[0-9]{1,10}\\\\])?))",
 "type": "string"
 },
 "creationTimestamp": {
@@ -60319,6 +60613,10 @@ false
 "format": "int32",
 "type": "integer"
 },
+"targetSizePolicy": {
+"$ref": "InstanceGroupManagerTargetSizePolicy",
+"description": "Configures how target size of MIG is achieved."
+},
 "targetSizeUnit": {
 "description": "The unit of measure for the target size.",
 "enum": [
@@ -60980,12 +61278,16 @@ false
 "deprecated": true,
 "description": "This field is deprecated, ResizeRequests would not be provisioned immediately and would stay in the queue until explicitly cancelled. When set, defines queing parameters for the requested deferred capacity. When unset, the request starts provisioning immediately, or fails if immediate provisioning is not possible."
 },
+"region": {
+"description": "[Output Only] The URL of a region where the resize request is located. Populated only for regional resize requests.",
+"type": "string"
+},
 "requestedRunDuration": {
 "$ref": "Duration",
 "description": "Requested run duration for instances that will be created by this request. At the end of the run duration instance will be deleted."
 },
 "resizeBy": {
-"description": "The number of instances to be created by this resize request. The group's target size will be increased by this number.",
+"description": "The number of instances to be created by this resize request. The group's target size will be increased by this number. This field cannot be used together with 'instances'.",
 "format": "int32",
 "type": "integer"
 },
@@ -61355,6 +61657,10 @@ false
 "description": "[Output Only] The URL of the Autoscaler that targets this instance group manager.",
 "type": "string"
 },
+"bulkInstanceOperation": {
+"$ref": "InstanceGroupManagerStatusBulkInstanceOperation",
+"description": "[Output Only] Status of bulk instance operation."
+},
 "isStable": {
 "description": "[Output Only] A bit indicating whether the managed instance group is in a stable state. A stable state means that: none of the instances in the managed instance group is currently undergoing any type of change (for example, creation, restart, or deletion); no future changes are scheduled for instances in the managed instance group; and the managed instance group itself is not being modified.",
 "type": "boolean"
@@ -61384,6 +61690,79 @@ false
 },
 "type": "object"
 },
+"InstanceGroupManagerStatusBulkInstanceOperation": {
+"id": "InstanceGroupManagerStatusBulkInstanceOperation",
+"properties": {
+"inProgress": {
+"description": "[Output Only] Informs whether bulk instance operation is in progress.",
+"type": "boolean"
+},
+"lastProgressCheck": {
+"$ref": "InstanceGroupManagerStatusBulkInstanceOperationLastProgressCheck",
+"description": "[Output Only] Information from last progress check of bulk instance operation."
+}
+},
+"type": "object"
+},
+"InstanceGroupManagerStatusBulkInstanceOperationLastProgressCheck": {
+"id": "InstanceGroupManagerStatusBulkInstanceOperationLastProgressCheck",
+"properties": {
+"error": {
+"description": "[Output Only] Contains errors encountered during bulk instance operation.",
+"properties": {
+"errors": {
+"description": "[Output Only] The array of errors encountered while processing this operation.",
+"items": {
+"properties": {
+"code": {
+"description": "[Output Only] The error type identifier for this error.",
+"type": "string"
+},
+"errorDetails": {
+"description": "[Output Only] An optional list of messages that contain the error details. There is a set of defined message types to use for providing details.The syntax depends on the error code. For example, QuotaExceededInfo will have details when the error code is QUOTA_EXCEEDED.",
+"items": {
+"properties": {
+"errorInfo": {
+"$ref": "ErrorInfo"
+},
+"help": {
+"$ref": "Help"
+},
+"localizedMessage": {
+"$ref": "LocalizedMessage"
+},
+"quotaInfo": {
+"$ref": "QuotaExceededInfo"
+}
+},
+"type": "object"
+},
+"type": "array"
+},
+"location": {
+"description": "[Output Only] Indicates the field in the request that caused the error. This property is optional.",
+"type": "string"
+},
+"message": {
+"description": "[Output Only] An optional, human-readable error message.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"timestamp": {
+"description": "[Output Only] Timestamp of the last progress check of bulk instance operation. Timestamp is in RFC3339 text format.",
+"format": "google-datetime",
+"type": "string"
+}
+},
+"type": "object"
+},
 "InstanceGroupManagerStatusStateful": {
 "id": "InstanceGroupManagerStatusStateful",
 "properties": {
@@ -61423,6 +61802,26 @@ false
 },
 "type": "object"
 },
+"InstanceGroupManagerTargetSizePolicy": {
+"id": "InstanceGroupManagerTargetSizePolicy",
+"properties": {
+"mode": {
+"description": "Mode in which operations on size are processed.",
+"enum": [
+"BULK",
+"INDIVIDUAL",
+"UNSPECIFIED_MODE"
+],
+"enumDescriptions": [
+"Mode in which MIG creates and starts VMs in all-or-nothing manner. If any VM from the request cannot be provisioned, the whole request waits for conditions that allow for provisioning whole capacity in bulk.",
+"Default mode in which MIG creates and starts VMs individually without cross-dependency between VMs. This means that in case of something blocking part of VMs to be provisioned, the other part will be created.",
+"If mode is unspecified, MIG will behave as in the default `INDIVIDUAL` mode."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "InstanceGroupManagerUpdatePolicy": {
 "id": "InstanceGroupManagerUpdatePolicy",
 "properties": {
@@ -64185,6 +64584,14 @@ false
 "description": "[Output Only] The ID value of the disk used to create this InstantSnapshot. This value may be used to determine whether the InstantSnapshot was taken from the current or a previous instance of a given disk name.",
 "type": "string"
 },
+"sourceInstantSnapshotGroup": {
+"description": "[Output Only] URL of the source instant snapshot this instant snapshot is part of. Note that the source instant snapshot group must be in the same zone/region as the instant snapshot to be created. This can be a full or valid partial URL.",
+"type": "string"
+},
+"sourceInstantSnapshotGroupId": {
+"description": "[Output Only] The ID value of the source instant snapshot group this InstantSnapshot is part of. This value may be used to determine whether the InstantSnapshot was created as part of an InstantSnapshotGroup creation.",
+"type": "string"
+},
 "status": {
 "description": "[Output Only] The status of the instantSnapshot. This can be CREATING, DELETING, FAILED, or READY.",
 "enum": [
@@ -64370,6 +64777,7 @@ false
 "type": "object"
 },
 "InstantSnapshotGroup": {
+"description": "Represents an InstantSnapshotGroup resource. An instant snapshot group is a set of instant snapshots that represents a point in time state of a consistency group.",
 "id": "InstantSnapshotGroup",
 "properties": {
 "creationTimestamp": {
@@ -64410,6 +64818,9 @@ false
 "description": "[Output Only] Server-defined URL for this resource's resource id.",
 "type": "string"
 },
+"sourceConsistencyGroup": {
+"type": "string"
+},
 "status": {
 "description": "[Output Only]",
 "enum": [
@@ -64999,9 +65410,6 @@ false
 "bandwidthPercentagePolicy": {
 "$ref": "InterconnectApplicationAwareInterconnectBandwidthPercentagePolicy"
 },
-"egressMinBandwidthPercentagePolicy": {
-"$ref": "InterconnectApplicationAwareInterconnectBandwidthPercentagePolicy"
-},
 "profileDescription": {
 "description": "A description for the AAI profile on this interconnect.",
 "type": "string"
@@ -72816,6 +73224,7 @@ false
 "PRIVATE_SERVICE_CONNECT",
 "SERVERLESS",
 "SHARED_LOADBALANCER_VIP",
+"SYSTEM_MANAGED",
 "VPC_PEERING"
 ],
 "enumDescriptions": [
@@ -72826,6 +73235,7 @@ false
 "A private network IP address that can be used to configure Private Service Connect. This purpose can be specified only for GLOBAL addresses of Type INTERNAL",
 "A regional internal IP address range reserved for Serverless.",
 "A private network IP address that can be shared by multiple Internal Load Balancer forwarding rules.",
+"A regional internal IP address that is reserved and managed by Google Cloud. It can not be assigned to Google Cloud compute resources such as VM and internal load balancer.",
 "IP range for peer networks."
 ],
 "type": "string"
@@ -85275,6 +85685,13 @@ false
 "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?",
 "type": "string"
 },
+"nat64Subnetworks": {
+"description": "List of Subnetwork resources whose traffic should be translated by NAT64 Gateway. It is used only when LIST_OF_IPV6_SUBNETWORKS is selected for the SubnetworkIpRangeToNat64Option above.",
+"items": {
+"$ref": "RouterNatSubnetworkToNat64"
+},
+"type": "array"
+},
 "natIpAllocateOption": {
 "description": "Specify the NatIpAllocateOption, which can take one of the following values: - MANUAL_ONLY: Uses only Nat IP addresses provided by customers. When there are not enough specified Nat IPs, the Nat service fails for new VMs. - AUTO_ONLY: Nat IPs are allocated by Google Cloud Platform; customers can't specify any Nat IPs. When choosing AUTO_ONLY, then nat_ip should be empty. ",
 "enum": [
@@ -85315,6 +85732,18 @@ false
 ],
 "type": "string"
 },
+"sourceSubnetworkIpRangesToNat64": {
+"description": "Specify the Nat option for NAT64, which can take one of the following values: - ALL_IPV6_SUBNETWORKS: All of the IP ranges in every Subnetwork are allowed to Nat. - LIST_OF_IPV6_SUBNETWORKS: A list of Subnetworks are allowed to Nat (specified in the field nat64_subnetwork below) The default is NAT64_OPTION_UNSPECIFIED. Note that if this field contains NAT64_ALL_V6_SUBNETWORKS no other Router.Nat section in this region can also enable NAT64 for any Subnetworks in this network. Other Router.Nat sections can still be present to enable NAT44 only.",
+"enum": [
+"ALL_IPV6_SUBNETWORKS",
+"LIST_OF_IPV6_SUBNETWORKS"
+],
+"enumDescriptions": [
+"NAT64 is enabled for all the IPv6 subnet ranges. In dual stack subnets, NAT64 will only be enabled for IPv6-only VMs.",
+"NAT64 is enabled for a list of IPv6 subnet ranges. In dual stack subnets, NAT64 will only be enabled for IPv6-only VMs. If this option is used, the nat64_subnetworks field must be specified."
+],
+"type": "string"
+},
 "subnetworks": {
 "description": "A list of Subnetwork resources whose traffic should be translated by NAT Gateway. It is used only when LIST_OF_SUBNETWORKS is selected for the SubnetworkIpRangeToNatOption above.",
 "items": {
@@ -85474,6 +85903,17 @@ false
 },
 "type": "object"
 },
+"RouterNatSubnetworkToNat64": {
+"description": "Specifies a subnetwork to enable NAT64.",
+"id": "RouterNatSubnetworkToNat64",
+"properties": {
+"name": {
+"description": "URL for the subnetwork resource that will use NAT64.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "RouterStatus": {
 "id": "RouterStatus",
 "properties": {
@@ -86820,26 +87260,6 @@ false
 "terminationTime": {
 "description": "Specifies the timestamp, when the instance will be terminated, in RFC3339 text format. If specified, the instance termination action will be performed at the termination time.",
 "type": "string"
-},
-"windowsLicenseOptimizationMode": {
-"description": "Represents the Windows Server License Optimization Mode of the VM. If unspecified, the default mode is `OFF`.",
-"enum": [
-"AUTO",
-"BALANCED",
-"COST_OPTIMIZED",
-"OFF",
-"PERFORMANCE",
-"UNSPECIFIED"
-],
-"enumDescriptions": [
-"\"Automatically maximize savings and minimize performance impact by matching license optimization mode to current CPU utilization.",
-"Significant license cost savings via moderate throttles (40% baseline, 10 minute maximum burst at full utilization).",
-"Maximum license cost savings via restrictive throttles (20% baseline, 3.75 minute maximum burst at full utilization).",
-"No license cost savings with maximum CPU performance.",
-"Moderate license cost savings via least restrictive throttles (60% baseline, 22.5 minute maximum burst at full utilization).",
-"Unspecified license optimization mode defaults to `OFF`."
-],
-"type": "string"
 }
 },
 "type": "object"
@@ -93515,6 +93935,7 @@ false
 "enum": [
 "AGGREGATE",
 "CLOUD_EXTENSION",
+"CUSTOM_HARDWARE_LINK",
 "GLOBAL_MANAGED_PROXY",
 "INTERNAL_HTTPS_LOAD_BALANCER",
 "PRIVATE",
@@ -93526,6 +93947,7 @@ false
 "enumDescriptions": [
 "Subnetwork used to aggregate multiple private subnetworks.",
 "Subnetworks created for Cloud Extension Machines.",
+"Subnetwork used for Custom Hardware Link.",
 "Subnet reserved for Global Envoy-based Load Balancing.",
 "Subnet reserved for Internal HTTP(S) Load Balancing. This is a legacy purpose, please use REGIONAL_MANAGED_PROXY instead.",
 "Regular user created or automatically created subnet.",
@@ -95290,7 +95712,7 @@ false
 "type": "string"
 },
 "certificateMap": {
-"description": "URL of a certificate map that identifies a certificate map associated with the given target proxy. This field can only be set for global target proxies. If set, sslCertificates will be ignored. Accepted format is //certificatemanager.googleapis.com/projects/{project }/locations/{location}/certificateMaps/{resourceName}.",
+"description": "URL of a certificate map that identifies a certificate map associated with the given target proxy. This field can only be set for Global external Application Load Balancer or Classic Application Load Balancer. For other products use Certificate Manager Certificates instead. If set, sslCertificates will be ignored. Accepted format is //certificatemanager.googleapis.com/projects/{project }/locations/{location}/certificateMaps/{resourceName}.",
 "type": "string"
 },
 "creationTimestamp": {
@@ -95368,7 +95790,7 @@ false
 "type": "string"
 },
 "sslCertificates": {
-"description": "URLs to SslCertificate resources that are used to authenticate connections between users and the load balancer. At least one SSL certificate must be specified. Currently, you may specify up to 15 SSL certificates. sslCertificates do not apply when the load balancing scheme is set to INTERNAL_SELF_MANAGED.",
+"description": "URLs to SslCertificate resources that are used to authenticate connections between users and the load balancer. At least one SSL certificate must be specified. SslCertificates do not apply when the load balancing scheme is set to INTERNAL_SELF_MANAGED. The URLs should refer to a SSL Certificate resource or Certificate Manager Certificate resource. Mixing Classic Certificates and Certificate Manager Certificates is not allowed. Certificate Manager Certificates must include the certificatemanager API. Certificate Manager Certificates are not supported by Global external Application Load Balancer or Classic Application Load Balancer, use certificate_map instead. Currently, you may specify up to 15 Classic SSL Certificates. Certificate Manager Certificates accepted formats are: - //certificatemanager.googleapis.com/projects/{project}/locations/{ location}/certificates/{resourceName}. - https://certificatemanager.googleapis.com/v1alpha1/projects/{project }/locations/{location}/certificates/{resourceName}. ",
 "items": {
 "type": "string"
 },
@@ -98465,7 +98887,7 @@ false
 "description": "defaultRouteAction takes effect when none of the hostRules match. The load balancer performs advanced routing actions, such as URL rewrites and header transformations, before forwarding the request to the selected backend. If defaultRouteAction specifies any weightedBackendServices, defaultService must not be set. Conversely if defaultService is set, defaultRouteAction cannot contain any weightedBackendServices. Only one of defaultRouteAction or defaultUrlRedirect must be set. URL maps for classic Application Load Balancers only support the urlRewrite action within defaultRouteAction. defaultRouteAction has no effect when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true."
 },
 "defaultService": {
-"description": "The full or partial URL of the defaultService resource to which traffic is directed if none of the hostRules match. If defaultRouteAction is also specified, advanced routing actions, such as URL rewrites, take effect before sending the request to the backend. However, if defaultService is specified, defaultRouteAction cannot contain any weightedBackendServices. Conversely, if routeAction specifies any weightedBackendServices, service must not be specified. If defaultService is specified, then set either defaultUrlRedirect , or defaultRouteAction.weightedBackendService Don't set both. defaultService has no effect when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.",
+"description": "The full or partial URL of the defaultService resource to which traffic is directed if none of the hostRules match. If defaultRouteAction is also specified, advanced routing actions, such as URL rewrites, take effect before sending the request to the backend. However, if defaultService is specified, defaultRouteAction cannot contain any defaultRouteAction.weightedBackendServices. Conversely, if defaultRouteAction specifies any defaultRouteAction.weightedBackendServices, defaultService must not be specified. If defaultService is specified, then set either defaultUrlRedirect , or defaultRouteAction.weightedBackendService Don't set both. defaultService has no effect when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.",
 "type": "string"
 },
 "defaultUrlRedirect": {
@@ -99168,6 +99590,7 @@ false
 "enum": [
 "AGGREGATE",
 "CLOUD_EXTENSION",
+"CUSTOM_HARDWARE_LINK",
 "GLOBAL_MANAGED_PROXY",
 "INTERNAL_HTTPS_LOAD_BALANCER",
 "PRIVATE",
@@ -99179,6 +99602,7 @@ false
 "enumDescriptions": [
 "Subnetwork used to aggregate multiple private subnetworks.",
 "Subnetworks created for Cloud Extension Machines.",
+"Subnetwork used for Custom Hardware Link.",
 "Subnet reserved for Global Envoy-based Load Balancing.",
 "Subnet reserved for Internal HTTP(S) Load Balancing. This is a legacy purpose, please use REGIONAL_MANAGED_PROXY instead.",
 "Regular user created or automatically created subnet.",