google-api-python-client 2.169.0__py3-none-any.whl → 2.171.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/networkconnectivity.v1alpha1.json

@@ -1122,7 +1122,7 @@
 }
 }
 },
-"revision": "20250414",
+"revision": "20250527",
 "rootUrl": "https://networkconnectivity.googleapis.com/",
 "schemas": {
 "AllocationOptions": {
@@ -1130,7 +1130,7 @@
 "id": "AllocationOptions",
 "properties": {
 "allocationStrategy": {
-"description": "Optional. Allocation strategy Not setting this field when the allocation is requested means an implementation defined strategy is used.",
+"description": "Optional. Allocation strategy. Not setting this field when the allocation is requested means an implementation defined strategy is used.",
 "enum": [
 "ALLOCATION_STRATEGY_UNSPECIFIED",
 "RANDOM",
@@ -1139,7 +1139,7 @@
 "FIRST_SMALLEST_FITTING"
 ],
 "enumDescriptions": [
-"Unspecified strategy must be used when the range is specified explicitly using ip_cidr_range field. Othherwise unspefified means using the default strategy.",
+"Unspecified is the only valid option when the range is specified explicitly by ip_cidr_range field. Otherwise unspefified means using the default strategy.",
 "Random strategy, the legacy algorithm, used for backwards compatibility. This allocation strategy remains efficient in the case of concurrent allocation requests in the same peered network space and doesn't require providing the level of concurrency in an explicit parameter, but it is prone to fragmenting available address space.",
 "Pick the first available address range. This strategy is deterministic and the result is easy to predict.",
 "Pick an arbitrary range out of the first N available ones. The N will be set in the first_available_ranges_lookup_size field. This strategy should be used when concurrent allocation requests are made in the same space of peered networks while the fragmentation of the addrress space is reduced.",

googleapiclient/discovery_cache/documents/networkmanagement.v1.json

@@ -604,7 +604,7 @@
 ],
 "parameters": {
 "parent": {
-"description": "Required. The parent resource of the VPC Flow Logs configuration to create: `projects/{project_id}/locations/global`",
+"description": "Required. The parent resource of the VPC Flow Logs configuration to create: `projects/{project_id}/locations/global` `organizations/{organization_id}/locations/global`",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
@@ -637,7 +637,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. `VpcFlowLogsConfig` resource name using the form: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config}`",
+"description": "Required. `VpcFlowLogsConfig` resource name using one of the form: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config} `organizations/{organization_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config}`",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/vpcFlowLogsConfigs/[^/]+$",
 "required": true,
@@ -662,7 +662,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. `VpcFlowLogsConfig` resource name using the form: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config}`",
+"description": "Required. `VpcFlowLogsConfig` resource name using the form: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config}` `organizations/{organization_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config}`",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/vpcFlowLogsConfigs/[^/]+$",
 "required": true,
@@ -708,7 +708,7 @@
 "type": "string"
 },
 "parent": {
-"description": "Required. The parent resource of the VpcFlowLogsConfig: `projects/{project_id}/locations/global`",
+"description": "Required. The parent resource of the VpcFlowLogsConfig: `projects/{project_id}/locations/global` `organizations/{organization_id}/locations/global`",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
@@ -733,7 +733,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Identifier. Unique name of the configuration using the form: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}`",
+"description": "Identifier. Unique name of the configuration using one of the forms: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}` `organizations/{organization_number}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}`",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/vpcFlowLogsConfigs/[^/]+$",
 "required": true,
@@ -764,7 +764,7 @@
 }
 }
 },
-"revision": "20250416",
+"revision": "20250527",
 "rootUrl": "https://networkmanagement.googleapis.com/",
 "schemas": {
 "AbortInfo": {
@@ -1208,6 +1208,26 @@ false
 "description": "Details of the final state \"deliver\" and associated resource.",
 "id": "DeliverInfo",
 "properties": {
+"googleServiceType": {
+"description": "Recognized type of a Google Service the packet is delivered to (if applicable).",
+"enum": [
+"GOOGLE_SERVICE_TYPE_UNSPECIFIED",
+"IAP",
+"GFE_PROXY_OR_HEALTH_CHECK_PROBER",
+"CLOUD_DNS",
+"PRIVATE_GOOGLE_ACCESS",
+"SERVERLESS_VPC_ACCESS"
+],
+"enumDescriptions": [
+"Unspecified Google Service.",
+"Identity aware proxy. https://cloud.google.com/iap/docs/using-tcp-forwarding",
+"One of two services sharing IP ranges: * Load Balancer proxy * Centralized Health Check prober https://cloud.google.com/load-balancing/docs/firewall-rules",
+"Connectivity from Cloud DNS to forwarding targets or alternate name servers that use private routing. https://cloud.google.com/dns/docs/zones/forwarding-zones#firewall-rules https://cloud.google.com/dns/docs/policies#firewall-rules",
+"private.googleapis.com and restricted.googleapis.com",
+"Google API via Private Service Connect. https://cloud.google.com/vpc/docs/configure-private-service-connect-apis Google API via Serverless VPC Access. https://cloud.google.com/vpc/docs/serverless-vpc-access"
+],
+"type": "string"
+},
 "ipAddress": {
 "description": "IP address of the target (if applicable).",
 "type": "string"
@@ -1320,6 +1340,7 @@ false
 "ROUTE_NEXT_HOP_VPN_TUNNEL_NOT_ESTABLISHED",
 "ROUTE_NEXT_HOP_FORWARDING_RULE_TYPE_INVALID",
 "NO_ROUTE_FROM_INTERNET_TO_PRIVATE_IPV6_ADDRESS",
+"NO_ROUTE_FROM_EXTERNAL_IPV6_SOURCE_TO_PRIVATE_IPV6_ADDRESS",
 "VPN_TUNNEL_LOCAL_SELECTOR_MISMATCH",
 "VPN_TUNNEL_REMOTE_SELECTOR_MISMATCH",
 "PRIVATE_TRAFFIC_TO_INTERNET",
@@ -1394,7 +1415,9 @@ false
 "PSC_PORT_MAPPING_WITHOUT_PSC_CONNECTION_UNSUPPORTED",
 "UNSUPPORTED_ROUTE_MATCHED_FOR_NAT64_DESTINATION",
 "TRAFFIC_FROM_HYBRID_ENDPOINT_TO_INTERNET_DISALLOWED",
-"NO_MATCHING_NAT64_GATEWAY"
+"NO_MATCHING_NAT64_GATEWAY",
+"LOAD_BALANCER_BACKEND_IP_VERSION_MISMATCH",
+"NO_KNOWN_ROUTE_FROM_NCC_NETWORK_TO_DESTINATION"
 ],
 "enumDescriptions": [
 "Cause is unspecified.",
@@ -1411,7 +1434,8 @@ false
 "Route's next hop forwarding rule doesn't match next hop IP address.",
 "Route's next hop VPN tunnel is down (does not have valid IKE SAs).",
 "Route's next hop forwarding rule type is invalid (it's not a forwarding rule of the internal passthrough load balancer).",
-"Packet is sent from the Internet to the private IPv6 address.",
+"Packet is sent from the Internet or Google service to the private IPv6 address.",
+"Packet is sent from the external IPv6 source address of an instance to the private IPv6 address of an instance.",
 "The packet does not match a policy-based VPN tunnel local selector.",
 "The packet does not match a policy-based VPN tunnel remote selector.",
 "Packet with internal destination address sent to the internet gateway.",
@@ -1486,7 +1510,9 @@ false
 "Sending packets directly to the PSC port mapping service without going through the PSC connection is not supported.",
 "Packet with destination IP address within the reserved NAT64 range is dropped due to matching a route of an unsupported type.",
 "Packet could be dropped because hybrid endpoint like a VPN gateway or Interconnect is not allowed to send traffic to the Internet.",
-"Packet with destination IP address within the reserved NAT64 range is dropped due to no matching NAT gateway in the subnet."
+"Packet with destination IP address within the reserved NAT64 range is dropped due to no matching NAT gateway in the subnet.",
+"Packet is dropped due to being sent to a backend of a passthrough load balancer that doesn't use the same IP version as the frontend.",
+"Packet from the unknown NCC network is dropped due to no known route from the source network to the destination IP address."
 ],
 "type": "string"
 },
@@ -1775,6 +1801,11 @@ false
 "description": "The name of the firewall policy that this rule is associated with. This field is not applicable to VPC firewall rules and implied VPC firewall rules.",
 "type": "string"
 },
+"policyPriority": {
+"description": "The priority of the firewall policy that this rule is associated with. This field is not applicable to VPC firewall rules and implied VPC firewall rules.",
+"format": "int32",
+"type": "integer"
+},
 "policyUri": {
 "description": "The URI of the firewall policy that this rule is associated with. This field is not applicable to VPC firewall rules and implied VPC firewall rules.",
 "type": "string"
@@ -2417,7 +2448,7 @@ false
 "type": "object"
 },
 "NetworkInfo": {
-"description": "For display only. Metadata associated with a Compute Engine network. Next ID: 7",
+"description": "For display only. Metadata associated with a Compute Engine network.",
 "id": "NetworkInfo",
 "properties": {
 "displayName": {
@@ -3499,7 +3530,7 @@ false
 "type": "array"
 },
 "name": {
-"description": "Identifier. Unique name of the configuration using the form: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}`",
+"description": "Identifier. Unique name of the configuration using one of the forms: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}` `organizations/{organization_number}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}`",
 "type": "string"
 },
 "state": {

googleapiclient/discovery_cache/documents/networkmanagement.v1beta1.json

@@ -309,6 +309,173 @@
 }
 }
 }
+},
+"vpcFlowLogsConfigs": {
+"methods": {
+"create": {
+"description": "Creates a new `VpcFlowLogsConfig`. If a configuration with the exact same settings already exists (even if the ID is different), the creation fails. Notes: 1. Creating a configuration with state=DISABLED will fail 2. The following fields are not considered as `settings` for the purpose of the check mentioned above, therefore - creating another configuration with the same fields but different values for the following fields will fail as well: * name * create_time * update_time * labels * description",
+"flatPath": "v1beta1/organizations/{organizationsId}/locations/{locationsId}/vpcFlowLogsConfigs",
+"httpMethod": "POST",
+"id": "networkmanagement.organizations.locations.vpcFlowLogsConfigs.create",
+"parameterOrder": [
+"parent"
+],
+"parameters": {
+"parent": {
+"description": "Required. The parent resource of the VPC Flow Logs configuration to create: `projects/{project_id}/locations/global` `organizations/{organization_id}/locations/global`",
+"location": "path",
+"pattern": "^organizations/[^/]+/locations/[^/]+$",
+"required": true,
+"type": "string"
+},
+"vpcFlowLogsConfigId": {
+"description": "Required. ID of the `VpcFlowLogsConfig`.",
+"location": "query",
+"type": "string"
+}
+},
+"path": "v1beta1/{+parent}/vpcFlowLogsConfigs",
+"request": {
+"$ref": "VpcFlowLogsConfig"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"delete": {
+"description": "Deletes a specific `VpcFlowLogsConfig`.",
+"flatPath": "v1beta1/organizations/{organizationsId}/locations/{locationsId}/vpcFlowLogsConfigs/{vpcFlowLogsConfigsId}",
+"httpMethod": "DELETE",
+"id": "networkmanagement.organizations.locations.vpcFlowLogsConfigs.delete",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. `VpcFlowLogsConfig` resource name using one of the form: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config}` `organizations/{organization_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config}`",
+"location": "path",
+"pattern": "^organizations/[^/]+/locations/[^/]+/vpcFlowLogsConfigs/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1beta1/{+name}",
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"get": {
+"description": "Gets the details of a specific `VpcFlowLogsConfig`.",
+"flatPath": "v1beta1/organizations/{organizationsId}/locations/{locationsId}/vpcFlowLogsConfigs/{vpcFlowLogsConfigsId}",
+"httpMethod": "GET",
+"id": "networkmanagement.organizations.locations.vpcFlowLogsConfigs.get",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. `VpcFlowLogsConfig` resource name using the form: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config}` `organizations/{organization_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config}`",
+"location": "path",
+"pattern": "^organizations/[^/]+/locations/[^/]+/vpcFlowLogsConfigs/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1beta1/{+name}",
+"response": {
+"$ref": "VpcFlowLogsConfig"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"list": {
+"description": "Lists all `VpcFlowLogsConfigs` in a given organization.",
+"flatPath": "v1beta1/organizations/{organizationsId}/locations/{locationsId}/vpcFlowLogsConfigs",
+"httpMethod": "GET",
+"id": "networkmanagement.organizations.locations.vpcFlowLogsConfigs.list",
+"parameterOrder": [
+"parent"
+],
+"parameters": {
+"filter": {
+"description": "Optional. Lists the `VpcFlowLogsConfigs` that match the filter expression. A filter expression must use the supported [CEL logic operators] (https://cloud.google.com/vpc/docs/about-flow-logs-records#supported_cel_logic_operators).",
+"location": "query",
+"type": "string"
+},
+"orderBy": {
+"description": "Optional. Field to use to sort the list.",
+"location": "query",
+"type": "string"
+},
+"pageSize": {
+"description": "Optional. Number of `VpcFlowLogsConfigs` to return.",
+"format": "int32",
+"location": "query",
+"type": "integer"
+},
+"pageToken": {
+"description": "Optional. Page token from an earlier query, as returned in `next_page_token`.",
+"location": "query",
+"type": "string"
+},
+"parent": {
+"description": "Required. The parent resource of the VpcFlowLogsConfig: `projects/{project_id}/locations/global` `organizations/{organization_id}/locations/global`",
+"location": "path",
+"pattern": "^organizations/[^/]+/locations/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1beta1/{+parent}/vpcFlowLogsConfigs",
+"response": {
+"$ref": "ListVpcFlowLogsConfigsResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"patch": {
+"description": "Updates an existing `VpcFlowLogsConfig`. If a configuration with the exact same settings already exists (even if the ID is different), the creation fails. Notes: 1. Updating a configuration with state=DISABLED will fail 2. The following fields are not considered as `settings` for the purpose of the check mentioned above, therefore - updating another configuration with the same fields but different values for the following fields will fail as well: * name * create_time * update_time * labels * description",
+"flatPath": "v1beta1/organizations/{organizationsId}/locations/{locationsId}/vpcFlowLogsConfigs/{vpcFlowLogsConfigsId}",
+"httpMethod": "PATCH",
+"id": "networkmanagement.organizations.locations.vpcFlowLogsConfigs.patch",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Identifier. Unique name of the configuration using one of the forms: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}` `organizations/{organization_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}`",
+"location": "path",
+"pattern": "^organizations/[^/]+/locations/[^/]+/vpcFlowLogsConfigs/[^/]+$",
+"required": true,
+"type": "string"
+},
+"updateMask": {
+"description": "Required. Mask of fields to update. At least one path must be supplied in this field.",
+"format": "google-fieldmask",
+"location": "query",
+"type": "string"
+}
+},
+"path": "v1beta1/{+name}",
+"request": {
+"$ref": "VpcFlowLogsConfig"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+}
+}
 }
 }
 }
@@ -965,6 +1132,47 @@
 "scopes": [
 "https://www.googleapis.com/auth/cloud-platform"
 ]
+},
+"queryOrgVpcFlowLogsConfigs": {
+"description": "QueryOrgVpcFlowLogsConfigs lists Organization resources for a given project.",
+"flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/vpcFlowLogsConfigs:queryOrgVpcFlowLogsConfigs",
+"httpMethod": "GET",
+"id": "networkmanagement.projects.locations.vpcFlowLogsConfigs.queryOrgVpcFlowLogsConfigs",
+"parameterOrder": [
+"parent"
+],
+"parameters": {
+"filter": {
+"description": "Optional. Lists the `VpcFlowLogsConfigs` that match the filter expression. A filter expression must use the supported [CEL logic operators] (https://cloud.google.com/vpc/docs/about-flow-logs-records#supported_cel_logic_operators).",
+"location": "query",
+"type": "string"
+},
+"pageSize": {
+"description": "Optional. Number of `VpcFlowLogsConfigs` to return.",
+"format": "int32",
+"location": "query",
+"type": "integer"
+},
+"pageToken": {
+"description": "Optional. Page token from an earlier query, as returned in `next_page_token`.",
+"location": "query",
+"type": "string"
+},
+"parent": {
+"description": "Required. The parent resource of the VpcFlowLogsConfig: `projects/{project_id}/locations/global`",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/vpcFlowLogsConfigs$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1beta1/{+parent}:queryOrgVpcFlowLogsConfigs",
+"response": {
+"$ref": "QueryOrgVpcFlowLogsConfigsResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
 }
 }
 }
@@ -973,7 +1181,7 @@
 }
 }
 },
-"revision": "20250416",
+"revision": "20250527",
 "rootUrl": "https://networkmanagement.googleapis.com/",
 "schemas": {
 "AbortInfo": {
@@ -1417,6 +1625,26 @@ false
 "description": "Details of the final state \"deliver\" and associated resource.",
 "id": "DeliverInfo",
 "properties": {
+"googleServiceType": {
+"description": "Recognized type of a Google Service the packet is delivered to (if applicable).",
+"enum": [
+"GOOGLE_SERVICE_TYPE_UNSPECIFIED",
+"IAP",
+"GFE_PROXY_OR_HEALTH_CHECK_PROBER",
+"CLOUD_DNS",
+"PRIVATE_GOOGLE_ACCESS",
+"SERVERLESS_VPC_ACCESS"
+],
+"enumDescriptions": [
+"Unspecified Google Service.",
+"Identity aware proxy. https://cloud.google.com/iap/docs/using-tcp-forwarding",
+"One of two services sharing IP ranges: * Load Balancer proxy * Centralized Health Check prober https://cloud.google.com/load-balancing/docs/firewall-rules",
+"Connectivity from Cloud DNS to forwarding targets or alternate name servers that use private routing. https://cloud.google.com/dns/docs/zones/forwarding-zones#firewall-rules https://cloud.google.com/dns/docs/policies#firewall-rules",
+"private.googleapis.com and restricted.googleapis.com",
+"Google API via Serverless VPC Access. https://cloud.google.com/vpc/docs/serverless-vpc-access"
+],
+"type": "string"
+},
 "ipAddress": {
 "description": "IP address of the target (if applicable).",
 "type": "string"
@@ -1529,6 +1757,7 @@ false
 "ROUTE_NEXT_HOP_VPN_TUNNEL_NOT_ESTABLISHED",
 "ROUTE_NEXT_HOP_FORWARDING_RULE_TYPE_INVALID",
 "NO_ROUTE_FROM_INTERNET_TO_PRIVATE_IPV6_ADDRESS",
+"NO_ROUTE_FROM_EXTERNAL_IPV6_SOURCE_TO_PRIVATE_IPV6_ADDRESS",
 "VPN_TUNNEL_LOCAL_SELECTOR_MISMATCH",
 "VPN_TUNNEL_REMOTE_SELECTOR_MISMATCH",
 "PRIVATE_TRAFFIC_TO_INTERNET",
@@ -1603,7 +1832,9 @@ false
 "PSC_PORT_MAPPING_WITHOUT_PSC_CONNECTION_UNSUPPORTED",
 "UNSUPPORTED_ROUTE_MATCHED_FOR_NAT64_DESTINATION",
 "TRAFFIC_FROM_HYBRID_ENDPOINT_TO_INTERNET_DISALLOWED",
-"NO_MATCHING_NAT64_GATEWAY"
+"NO_MATCHING_NAT64_GATEWAY",
+"LOAD_BALANCER_BACKEND_IP_VERSION_MISMATCH",
+"NO_KNOWN_ROUTE_FROM_NCC_NETWORK_TO_DESTINATION"
 ],
 "enumDescriptions": [
 "Cause is unspecified.",
@@ -1620,7 +1851,8 @@ false
 "Route's next hop forwarding rule doesn't match next hop IP address.",
 "Route's next hop VPN tunnel is down (does not have valid IKE SAs).",
 "Route's next hop forwarding rule type is invalid (it's not a forwarding rule of the internal passthrough load balancer).",
-"Packet is sent from the Internet to the private IPv6 address.",
+"Packet is sent from the Internet or Google service to the private IPv6 address.",
+"Packet is sent from the external IPv6 source address of an instance to the private IPv6 address of an instance.",
 "The packet does not match a policy-based VPN tunnel local selector.",
 "The packet does not match a policy-based VPN tunnel remote selector.",
 "Packet with internal destination address sent to the internet gateway.",
@@ -1695,7 +1927,9 @@ false
 "Sending packets directly to the PSC port mapping service without going through the PSC connection is not supported.",
 "Packet with destination IP address within the reserved NAT64 range is dropped due to matching a route of an unsupported type.",
 "Packet could be dropped because hybrid endpoint like a VPN gateway or Interconnect is not allowed to send traffic to the Internet.",
-"Packet with destination IP address within the reserved NAT64 range is dropped due to no matching NAT gateway in the subnet."
+"Packet with destination IP address within the reserved NAT64 range is dropped due to no matching NAT gateway in the subnet.",
+"Packet is dropped due to being sent to a backend of a passthrough load balancer that doesn't use the same IP version as the frontend.",
+"Packet from the unknown NCC network is dropped due to no known route from the source network to the destination IP address."
 ],
 "type": "string"
 },
@@ -1988,6 +2222,11 @@ false
 "description": "The name of the firewall policy that this rule is associated with. This field is not applicable to VPC firewall rules and implied VPC firewall rules.",
 "type": "string"
 },
+"policyPriority": {
+"description": "The priority of the firewall policy that this rule is associated with. This field is not applicable to VPC firewall rules and implied VPC firewall rules.",
+"format": "int32",
+"type": "integer"
+},
 "policyUri": {
 "description": "The URI of the firewall policy that this rule is associated with. This field is not applicable to VPC firewall rules and implied VPC firewall rules.",
 "type": "string"
@@ -2630,7 +2869,7 @@ false
 "type": "object"
 },
 "NetworkInfo": {
-"description": "For display only. Metadata associated with a Compute Engine network. Next ID: 7",
+"description": "For display only. Metadata associated with a Compute Engine network.",
 "id": "NetworkInfo",
 "properties": {
 "displayName": {
@@ -2895,6 +3134,31 @@ false
 },
 "type": "object"
 },
+"QueryOrgVpcFlowLogsConfigsResponse": {
+"description": "Response for the `QueryVpcFlowLogsConfigs` method.",
+"id": "QueryOrgVpcFlowLogsConfigsResponse",
+"properties": {
+"nextPageToken": {
+"description": "Page token to fetch the next set of configurations.",
+"type": "string"
+},
+"unreachable": {
+"description": "Locations that could not be reached (when querying all locations with `-`).",
+"items": {
+"type": "string"
+},
+"type": "array"
+},
+"vpcFlowLogsConfigs": {
+"description": "List of VPC Flow Log configurations.",
+"items": {
+"$ref": "VpcFlowLogsConfig"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
 "ReachabilityDetails": {
 "description": "Results of the configuration analysis from the last run of the test.",
 "id": "ReachabilityDetails",
@@ -3664,6 +3928,20 @@ false
 "readOnly": true,
 "type": "string"
 },
+"crossProjectMetadata": {
+"description": "Optional. Determines whether to include cross project annotations in the logs. This field is available only for organization configurations. If not specified in org configs will be set to CROSS_PROJECT_METADATA_ENABLED.",
+"enum": [
+"CROSS_PROJECT_METADATA_UNSPECIFIED",
+"CROSS_PROJECT_METADATA_ENABLED",
+"CROSS_PROJECT_METADATA_DISABLED"
+],
+"enumDescriptions": [
+"If not specified, the default is CROSS_PROJECT_METADATA_ENABLED.",
+"When CROSS_PROJECT_METADATA_ENABLED, metadata from other projects will be included in the logs.",
+"When CROSS_PROJECT_METADATA_DISABLED, metadata from other projects will not be included in the logs."
+],
+"type": "string"
+},
 "description": {
 "description": "Optional. The user-supplied description of the VPC Flow Logs configuration. Maximum of 512 characters.",
 "type": "string"
@@ -3715,6 +3993,10 @@ false
 "description": "Identifier. Unique name of the configuration using one of the forms: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}` `organizations/{organization_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}`",
 "type": "string"
 },
+"network": {
+"description": "Traffic will be logged from VMs, VPN tunnels and Interconnect Attachments within the network. Format: projects/{project_id}/global/networks/{name}",
+"type": "string"
+},
 "state": {
 "description": "Optional. The state of the VPC Flow Log configuration. Default value is ENABLED. When creating a new configuration, it must be enabled. Setting state=DISABLED will pause the log generation for this config.",
 "enum": [
@@ -3729,6 +4011,10 @@ false
 ],
 "type": "string"
 },
+"subnet": {
+"description": "Traffic will be logged from VMs within the subnetwork. Format: projects/{project_id}/regions/{region}/subnetworks/{name}",
+"type": "string"
+},
 "targetResourceState": {
 "description": "Output only. A diagnostic bit - describes the state of the configured target resource for diagnostic purposes.",
 "enum": [

googleapiclient/discovery_cache/documents/networksecurity.v1.json

@@ -4908,7 +4908,7 @@
 }
 }
 },
-"revision": "20250416",
+"revision": "20250514",
 "rootUrl": "https://networksecurity.googleapis.com/",
 "schemas": {
 "AddAddressGroupItemsRequest": {
@@ -5224,13 +5224,6 @@
 "description": "Describes the properties of a single source.",
 "id": "AuthzPolicyAuthzRuleFromRequestSource",
 "properties": {
-"principals": {
-"description": "Optional. A list of identities derived from the client's certificate. This field will not match on a request unless mutual TLS is enabled for the forwarding rule or Gateway. For Application Load Balancers, each identity is a string whose value is matched against the URI SAN, or DNS SAN, or SPIFFE ID, or the subject field in the client's certificate. For Cloud Service Mesh, each identity is a string whose value is matched against the URI SAN, or DNS SAN, or the subject field in the client's certificate. The match can be exact, prefix, suffix, or a substring match. One of exact, prefix, suffix, or contains must be specified. Limited to 5 principals.",
-"items": {
-"$ref": "AuthzPolicyAuthzRuleStringMatch"
-},
-"type": "array"
-},
 "resources": {
 "description": "Optional. A list of resources to match against the resource of the source VM of a request. Limited to 5 resources.",
 "items": {