google-api-python-client 2.175.0__py3-none-any.whl → 2.177.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/networkmanagement.v1beta1.json

@@ -313,7 +313,7 @@
 "vpcFlowLogsConfigs": {
 "methods": {
 "create": {
-"description": "Creates a new `VpcFlowLogsConfig`. If a configuration with the exact same settings already exists (even if the ID is different), the creation fails. Notes: 1. Creating a configuration with state=DISABLED will fail 2. The following fields are not considered as `settings` for the purpose of the check mentioned above, therefore - creating another configuration with the same fields but different values for the following fields will fail as well: * name * create_time * update_time * labels * description",
+"description": "Creates a new `VpcFlowLogsConfig`. If a configuration with the exact same settings already exists (even if the ID is different), the creation fails. Notes: 1. Creating a configuration with `state=DISABLED` will fail 2. The following fields are not considered as settings for the purpose of the check mentioned above, therefore - creating another configuration with the same fields but different values for the following fields will fail as well: * name * create_time * update_time * labels * description",
 "flatPath": "v1beta1/organizations/{organizationsId}/locations/{locationsId}/vpcFlowLogsConfigs",
 "httpMethod": "POST",
 "id": "networkmanagement.organizations.locations.vpcFlowLogsConfigs.create",
@@ -322,7 +322,7 @@
 ],
 "parameters": {
 "parent": {
-"description": "Required. The parent resource of the VPC Flow Logs configuration to create: `projects/{project_id}/locations/global` `organizations/{organization_id}/locations/global`",
+"description": "Required. The parent resource of the VpcFlowLogsConfig to create, in one of the following formats: - For project-level resources: `projects/{project_id}/locations/global` - For organization-level resources: `organizations/{organization_id}/locations/global`",
 "location": "path",
 "pattern": "^organizations/[^/]+/locations/[^/]+$",
 "required": true,
@@ -355,7 +355,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. `VpcFlowLogsConfig` resource name using one of the form: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config}` `organizations/{organization_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config}`",
+"description": "Required. The resource name of the VpcFlowLogsConfig, in one of the following formats: - For a project-level resource: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}` - For an organization-level resource: `organizations/{organization_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}`",
 "location": "path",
 "pattern": "^organizations/[^/]+/locations/[^/]+/vpcFlowLogsConfigs/[^/]+$",
 "required": true,
@@ -380,7 +380,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. `VpcFlowLogsConfig` resource name using the form: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config}` `organizations/{organization_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config}`",
+"description": "Required. The resource name of the VpcFlowLogsConfig, in one of the following formats: - For project-level resources: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}` - For organization-level resources: `organizations/{organization_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}`",
 "location": "path",
 "pattern": "^organizations/[^/]+/locations/[^/]+/vpcFlowLogsConfigs/[^/]+$",
 "required": true,
@@ -426,7 +426,7 @@
 "type": "string"
 },
 "parent": {
-"description": "Required. The parent resource of the VpcFlowLogsConfig: `projects/{project_id}/locations/global` `organizations/{organization_id}/locations/global`",
+"description": "Required. The parent resource of the VpcFlowLogsConfig, in one of the following formats: - For project-level resourcs: `projects/{project_id}/locations/global` - For organization-level resources: `organizations/{organization_id}/locations/global`",
 "location": "path",
 "pattern": "^organizations/[^/]+/locations/[^/]+$",
 "required": true,
@@ -442,7 +442,7 @@
 ]
 },
 "patch": {
-"description": "Updates an existing `VpcFlowLogsConfig`. If a configuration with the exact same settings already exists (even if the ID is different), the creation fails. Notes: 1. Updating a configuration with state=DISABLED will fail 2. The following fields are not considered as `settings` for the purpose of the check mentioned above, therefore - updating another configuration with the same fields but different values for the following fields will fail as well: * name * create_time * update_time * labels * description",
+"description": "Updates an existing `VpcFlowLogsConfig`. If a configuration with the exact same settings already exists (even if the ID is different), the creation fails. Notes: 1. Updating a configuration with `state=DISABLED` will fail 2. The following fields are not considered as settings for the purpose of the check mentioned above, therefore - updating another configuration with the same fields but different values for the following fields will fail as well: * name * create_time * update_time * labels * description",
 "flatPath": "v1beta1/organizations/{organizationsId}/locations/{locationsId}/vpcFlowLogsConfigs/{vpcFlowLogsConfigsId}",
 "httpMethod": "PATCH",
 "id": "networkmanagement.organizations.locations.vpcFlowLogsConfigs.patch",
@@ -451,14 +451,14 @@
 ],
 "parameters": {
 "name": {
-"description": "Identifier. Unique name of the configuration using one of the forms: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}` `organizations/{organization_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}`",
+"description": "Identifier. Unique name of the configuration. The name can have one of the following forms: - For project-level configurations: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}` - For organization-level configurations: `organizations/{organization_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}`",
 "location": "path",
 "pattern": "^organizations/[^/]+/locations/[^/]+/vpcFlowLogsConfigs/[^/]+$",
 "required": true,
 "type": "string"
 },
 "updateMask": {
-"description": "Required. Mask of fields to update. At least one path must be supplied in this field.",
+"description": "Required. Mask of fields to update. At least one path must be supplied in this field. For example, to change the state of the configuration to ENABLED, specify `update_mask` = `\"state\"`, and the `vpc_flow_logs_config` would be: `vpc_flow_logs_config = { name = \"projects/my-project/locations/global/vpcFlowLogsConfigs/my-config\" state = \"ENABLED\" }`",
 "format": "google-fieldmask",
 "location": "query",
 "type": "string"
@@ -971,7 +971,7 @@
 "vpcFlowLogsConfigs": {
 "methods": {
 "create": {
-"description": "Creates a new `VpcFlowLogsConfig`. If a configuration with the exact same settings already exists (even if the ID is different), the creation fails. Notes: 1. Creating a configuration with state=DISABLED will fail 2. The following fields are not considered as `settings` for the purpose of the check mentioned above, therefore - creating another configuration with the same fields but different values for the following fields will fail as well: * name * create_time * update_time * labels * description",
+"description": "Creates a new `VpcFlowLogsConfig`. If a configuration with the exact same settings already exists (even if the ID is different), the creation fails. Notes: 1. Creating a configuration with `state=DISABLED` will fail 2. The following fields are not considered as settings for the purpose of the check mentioned above, therefore - creating another configuration with the same fields but different values for the following fields will fail as well: * name * create_time * update_time * labels * description",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/vpcFlowLogsConfigs",
 "httpMethod": "POST",
 "id": "networkmanagement.projects.locations.vpcFlowLogsConfigs.create",
@@ -980,7 +980,7 @@
 ],
 "parameters": {
 "parent": {
-"description": "Required. The parent resource of the VPC Flow Logs configuration to create: `projects/{project_id}/locations/global` `organizations/{organization_id}/locations/global`",
+"description": "Required. The parent resource of the VpcFlowLogsConfig to create, in one of the following formats: - For project-level resources: `projects/{project_id}/locations/global` - For organization-level resources: `organizations/{organization_id}/locations/global`",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
@@ -1013,7 +1013,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. `VpcFlowLogsConfig` resource name using one of the form: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config}` `organizations/{organization_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config}`",
+"description": "Required. The resource name of the VpcFlowLogsConfig, in one of the following formats: - For a project-level resource: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}` - For an organization-level resource: `organizations/{organization_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}`",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/vpcFlowLogsConfigs/[^/]+$",
 "required": true,
@@ -1038,7 +1038,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. `VpcFlowLogsConfig` resource name using the form: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config}` `organizations/{organization_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config}`",
+"description": "Required. The resource name of the VpcFlowLogsConfig, in one of the following formats: - For project-level resources: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}` - For organization-level resources: `organizations/{organization_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}`",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/vpcFlowLogsConfigs/[^/]+$",
 "required": true,
@@ -1084,7 +1084,7 @@
 "type": "string"
 },
 "parent": {
-"description": "Required. The parent resource of the VpcFlowLogsConfig: `projects/{project_id}/locations/global` `organizations/{organization_id}/locations/global`",
+"description": "Required. The parent resource of the VpcFlowLogsConfig, in one of the following formats: - For project-level resourcs: `projects/{project_id}/locations/global` - For organization-level resources: `organizations/{organization_id}/locations/global`",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
@@ -1100,7 +1100,7 @@
 ]
 },
 "patch": {
-"description": "Updates an existing `VpcFlowLogsConfig`. If a configuration with the exact same settings already exists (even if the ID is different), the creation fails. Notes: 1. Updating a configuration with state=DISABLED will fail 2. The following fields are not considered as `settings` for the purpose of the check mentioned above, therefore - updating another configuration with the same fields but different values for the following fields will fail as well: * name * create_time * update_time * labels * description",
+"description": "Updates an existing `VpcFlowLogsConfig`. If a configuration with the exact same settings already exists (even if the ID is different), the creation fails. Notes: 1. Updating a configuration with `state=DISABLED` will fail 2. The following fields are not considered as settings for the purpose of the check mentioned above, therefore - updating another configuration with the same fields but different values for the following fields will fail as well: * name * create_time * update_time * labels * description",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/vpcFlowLogsConfigs/{vpcFlowLogsConfigsId}",
 "httpMethod": "PATCH",
 "id": "networkmanagement.projects.locations.vpcFlowLogsConfigs.patch",
@@ -1109,14 +1109,14 @@
 ],
 "parameters": {
 "name": {
-"description": "Identifier. Unique name of the configuration using one of the forms: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}` `organizations/{organization_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}`",
+"description": "Identifier. Unique name of the configuration. The name can have one of the following forms: - For project-level configurations: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}` - For organization-level configurations: `organizations/{organization_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}`",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/vpcFlowLogsConfigs/[^/]+$",
 "required": true,
 "type": "string"
 },
 "updateMask": {
-"description": "Required. Mask of fields to update. At least one path must be supplied in this field.",
+"description": "Required. Mask of fields to update. At least one path must be supplied in this field. For example, to change the state of the configuration to ENABLED, specify `update_mask` = `\"state\"`, and the `vpc_flow_logs_config` would be: `vpc_flow_logs_config = { name = \"projects/my-project/locations/global/vpcFlowLogsConfigs/my-config\" state = \"ENABLED\" }`",
 "format": "google-fieldmask",
 "location": "query",
 "type": "string"
@@ -1134,7 +1134,7 @@
 ]
 },
 "queryOrgVpcFlowLogsConfigs": {
-"description": "QueryOrgVpcFlowLogsConfigs lists Organization resources for a given project.",
+"description": "QueryOrgVpcFlowLogsConfigs returns a list of all organization-level VPC Flow Logs configurations applicable to the specified project.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/vpcFlowLogsConfigs:queryOrgVpcFlowLogsConfigs",
 "httpMethod": "GET",
 "id": "networkmanagement.projects.locations.vpcFlowLogsConfigs.queryOrgVpcFlowLogsConfigs",
@@ -1159,7 +1159,7 @@
 "type": "string"
 },
 "parent": {
-"description": "Required. The parent resource of the VpcFlowLogsConfig: `projects/{project_id}/locations/global`",
+"description": "Required. The parent resource of the VpcFlowLogsConfig, specified in the following format: `projects/{project_id}/locations/global`",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
@@ -1181,7 +1181,7 @@
 }
 }
 },
-"revision": "20250611",
+"revision": "20250709",
 "rootUrl": "https://networkmanagement.googleapis.com/",
 "schemas": {
 "AbortInfo": {
@@ -1228,7 +1228,8 @@
 "NON_ROUTABLE_IP_ADDRESS",
 "UNKNOWN_ISSUE_IN_GOOGLE_MANAGED_PROJECT",
 "UNSUPPORTED_GOOGLE_MANAGED_PROJECT_CONFIG",
-"NO_SERVERLESS_IP_RANGES"
+"NO_SERVERLESS_IP_RANGES",
+"IP_VERSION_PROTOCOL_MISMATCH"
 ],
 "enumDeprecated": [
 false,
@@ -1268,6 +1269,7 @@ false,
 false,
 false,
 false,
+false,
 false
 ],
 "enumDescriptions": [
@@ -1308,7 +1310,8 @@ false
 "Aborted because one of the endpoints is a non-routable IP address (loopback, link-local, etc).",
 "Aborted due to an unknown issue in the Google-managed project.",
 "Aborted due to an unsupported configuration of the Google-managed project.",
-"Aborted because the source endpoint is a Cloud Run revision with direct VPC access enabled, but there are no reserved serverless IP ranges."
+"Aborted because the source endpoint is a Cloud Run revision with direct VPC access enabled, but there are no reserved serverless IP ranges.",
+"Aborted because the used protocol is not supported for the used IP version."
 ],
 "type": "string"
 },
@@ -1839,7 +1842,8 @@ false
 "TRAFFIC_FROM_HYBRID_ENDPOINT_TO_INTERNET_DISALLOWED",
 "NO_MATCHING_NAT64_GATEWAY",
 "LOAD_BALANCER_BACKEND_IP_VERSION_MISMATCH",
-"NO_KNOWN_ROUTE_FROM_NCC_NETWORK_TO_DESTINATION"
+"NO_KNOWN_ROUTE_FROM_NCC_NETWORK_TO_DESTINATION",
+"CLOUD_NAT_PROTOCOL_UNSUPPORTED"
 ],
 "enumDescriptions": [
 "Cause is unspecified.",
@@ -1934,7 +1938,8 @@ false
 "Packet could be dropped because hybrid endpoint like a VPN gateway or Interconnect is not allowed to send traffic to the Internet.",
 "Packet with destination IP address within the reserved NAT64 range is dropped due to no matching NAT gateway in the subnet.",
 "Packet is dropped due to being sent to a backend of a passthrough load balancer that doesn't use the same IP version as the frontend.",
-"Packet from the unknown NCC network is dropped due to no known route from the source network to the destination IP address."
+"Packet from the unknown NCC network is dropped due to no known route from the source network to the destination IP address.",
+"Packet is dropped by Cloud NAT due to using an unsupported protocol."
 ],
 "type": "string"
 },
@@ -4015,7 +4020,7 @@ false
 "type": "array"
 },
 "name": {
-"description": "Identifier. Unique name of the configuration using one of the forms: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}` `organizations/{organization_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}`",
+"description": "Identifier. Unique name of the configuration. The name can have one of the following forms: - For project-level configurations: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}` - For organization-level configurations: `organizations/{organization_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}`",
 "type": "string"
 },
 "network": {
@@ -4041,7 +4046,7 @@ false
 "type": "string"
 },
 "targetResourceState": {
-"description": "Output only. A diagnostic bit - describes the state of the configured target resource for diagnostic purposes.",
+"description": "Output only. Describes the state of the configured target resource for diagnostic purposes.",
 "enum": [
 "TARGET_RESOURCE_STATE_UNSPECIFIED",
 "TARGET_RESOURCE_EXISTS",

googleapiclient/discovery_cache/documents/networksecurity.v1beta1.json

@@ -2338,7 +2338,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. Name of the ClientTlsPolicy resource. It matches the pattern `projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}`",
+"description": "Required. Name of the ClientTlsPolicy resource. It matches the pattern `projects/{project}/locations/{location}/clientTlsPolicies/{client_tls_policy}`",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/clientTlsPolicies/[^/]+$",
 "required": true,
@@ -5356,7 +5356,7 @@
 }
 }
 },
-"revision": "20250608",
+"revision": "20250714",
 "rootUrl": "https://networksecurity.googleapis.com/",
 "schemas": {
 "AddAddressGroupItemsRequest": {
@@ -5673,12 +5673,19 @@
 "id": "AuthzPolicyAuthzRuleFromRequestSource",
 "properties": {
 "ipBlocks": {
-"description": "Optional. A list of IPs or CIDRs to match against the source IP of a request. Limited to 5 ip_blocks.",
+"description": "Optional. A list of IP addresses or IP address ranges to match against the source IP address of the request. Limited to 5 ip_blocks.",
 "items": {
 "$ref": "AuthzPolicyAuthzRuleIpBlock"
 },
 "type": "array"
 },
+"principals": {
+"description": "Optional. A list of identities derived from the client's certificate. This field will not match on a request unless frontend mutual TLS is enabled for the forwarding rule or Gateway and the client certificate has been successfully validated by mTLS. Each identity is a string whose value is matched against a list of URI SANs, DNS Name SANs, or the common name in the client's certificate. A match happens when any principal matches with the rule. Limited to 5 principals.",
+"items": {
+"$ref": "AuthzPolicyAuthzRulePrincipal"
+},
+"type": "array"
+},
 "resources": {
 "description": "Optional. A list of resources to match against the resource of the source VM of a request. Limited to 5 resources.",
 "items": {
@@ -5720,6 +5727,33 @@
 },
 "type": "object"
 },
+"AuthzPolicyAuthzRulePrincipal": {
+"description": "Describes the properties of a principal to be matched against.",
+"id": "AuthzPolicyAuthzRulePrincipal",
+"properties": {
+"principal": {
+"$ref": "AuthzPolicyAuthzRuleStringMatch",
+"description": "Required. A non-empty string whose value is matched against the principal value based on the principal_selector. Only exact match can be applied for CLIENT_CERT_URI_SAN, CLIENT_CERT_DNS_NAME_SAN, CLIENT_CERT_COMMON_NAME selectors."
+},
+"principalSelector": {
+"description": "Optional. An enum to decide what principal value the principal rule will match against. If not specified, the PrincipalSelector is CLIENT_CERT_URI_SAN.",
+"enum": [
+"PRINCIPAL_SELECTOR_UNSPECIFIED",
+"CLIENT_CERT_URI_SAN",
+"CLIENT_CERT_DNS_NAME_SAN",
+"CLIENT_CERT_COMMON_NAME"
+],
+"enumDescriptions": [
+"Unspecified principal selector. It will be treated as CLIENT_CERT_URI_SAN by default.",
+"The principal rule is matched against a list of URI SANs in the validated client\u2019s certificate. A match happens when there is any exact URI SAN value match. This is the default principal selector.",
+"The principal rule is matched against a list of DNS Name SANs in the validated client\u2019s certificate. A match happens when there is any exact DNS Name SAN value match.",
+"The principal rule is matched against the common name in the client\u2019s certificate. Authorization against multiple common names in the client certificate is not supported. Requests with multiple common names in the client certificate will be rejected if CLIENT_CERT_COMMON_NAME is set as the principal selector. A match happens when there is an exact common name value match. This is only applicable for Application Load Balancers except for classic Global External Application load balancer. CLIENT_CERT_COMMON_NAME is not supported for INTERNAL_SELF_MANAGED load balancing scheme."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "AuthzPolicyAuthzRuleRequestResource": {
 "description": "Describes the properties of a client VM resource accessing the internal application load balancers.",
 "id": "AuthzPolicyAuthzRuleRequestResource",
@@ -5910,7 +5944,7 @@
 "type": "object"
 },
 "BackendAuthenticationConfig": {
-"description": "BackendAuthenticationConfig message groups the TrustConfig together with other settings that control how the load balancer authenticates, and expresses its identity to, the backend: * `trustConfig` is the attached TrustConfig. * `wellKnownRoots` indicates whether the load balance should trust backend server certificates that are issued by public certificate authorities, in addition to certificates trusted by the TrustConfig. * `clientCertificate` is a client certificate that the load balancer uses to express its identity to the backend, if the connection to the backend uses mTLS. You can attach the BackendAuthenticationConfig to the load balancer\u2019s BackendService directly determining how that BackendService negotiates TLS.",
+"description": "BackendAuthenticationConfig message groups the TrustConfig together with other settings that control how the load balancer authenticates, and expresses its identity to, the backend: * `trustConfig` is the attached TrustConfig. * `wellKnownRoots` indicates whether the load balance should trust backend server certificates that are issued by public certificate authorities, in addition to certificates trusted by the TrustConfig. * `clientCertificate` is a client certificate that the load balancer uses to express its identity to the backend, if the connection to the backend uses mTLS. You can attach the BackendAuthenticationConfig to the load balancer's BackendService directly determining how that BackendService negotiates TLS.",
 "id": "BackendAuthenticationConfig",
 "properties": {
 "clientCertificate": {
@@ -6013,7 +6047,7 @@
 "type": "object"
 },
 "name": {
-"description": "Required. Name of the ClientTlsPolicy resource. It matches the pattern `projects/*/locations/{location}/clientTlsPolicies/{client_tls_policy}`",
+"description": "Required. Name of the ClientTlsPolicy resource. It matches the pattern `projects/{project}/locations/{location}/clientTlsPolicies/{client_tls_policy}`",
 "type": "string"
 },
 "serverValidationCa": {

googleapiclient/discovery_cache/documents/networkservices.v1.json

@@ -3004,7 +3004,7 @@
 }
 }
 },
-"revision": "20250616",
+"revision": "20250709",
 "rootUrl": "https://networkservices.googleapis.com/",
 "schemas": {
 "AuditConfig": {
@@ -3503,7 +3503,7 @@
 "type": "string"
 },
 "ports": {
-"description": "Required. One or more port numbers (1-65535), on which the Gateway will receive traffic. The proxy binds to the specified ports. Gateways of type 'SECURE_WEB_GATEWAY' are limited to 1 port. Gateways of type 'OPEN_MESH' listen on 0.0.0.0 for IPv4 and :: for IPv6 and support multiple ports.",
+"description": "Required. One or more port numbers (1-65535), on which the Gateway will receive traffic. The proxy binds to the specified ports. Gateways of type 'SECURE_WEB_GATEWAY' are limited to 5 ports. Gateways of type 'OPEN_MESH' listen on 0.0.0.0 for IPv4 and :: for IPv6 and support multiple ports.",
 "items": {
 "format": "int32",
 "type": "integer"
@@ -5890,7 +5890,7 @@
 "type": "boolean"
 },
 "minLogLevel": {
-"description": "Non-empty default. Specificies the lowest level of the plugin logs that are exported to Cloud Logging. This setting relates to the logs generated by using logging statements in your Wasm code. This field is can be set only if logging is enabled for the plugin. If the field is not provided when logging is enabled, it is set to `INFO` by default.",
+"description": "Non-empty default. Specifies the lowest level of the plugin logs that are exported to Cloud Logging. This setting relates to the logs generated by using logging statements in your Wasm code. This field is can be set only if logging is enabled for the plugin. If the field is not provided when logging is enabled, it is set to `INFO` by default.",
 "enum": [
 "LOG_LEVEL_UNSPECIFIED",
 "TRACE",

googleapiclient/discovery_cache/documents/networkservices.v1beta1.json

@@ -2913,7 +2913,7 @@
 }
 }
 },
-"revision": "20250616",
+"revision": "20250709",
 "rootUrl": "https://networkservices.googleapis.com/",
 "schemas": {
 "AuthzExtension": {
@@ -3312,7 +3312,7 @@
 "type": "string"
 },
 "ports": {
-"description": "Required. One or more port numbers (1-65535), on which the Gateway will receive traffic. The proxy binds to the specified ports. Gateways of type 'SECURE_WEB_GATEWAY' are limited to 1 port. Gateways of type 'OPEN_MESH' listen on 0.0.0.0 for IPv4 and :: for IPv6 and support multiple ports.",
+"description": "Required. One or more port numbers (1-65535), on which the Gateway will receive traffic. The proxy binds to the specified ports. Gateways of type 'SECURE_WEB_GATEWAY' are limited to 5 ports. Gateways of type 'OPEN_MESH' listen on 0.0.0.0 for IPv4 and :: for IPv6 and support multiple ports.",
 "items": {
 "format": "int32",
 "type": "integer"
@@ -4262,7 +4262,7 @@
 "type": "object"
 },
 "LbEdgeExtension": {
-"description": "`LbEdgeExtension` is a resource that lets the extension service influence the Backend Service selection or Cloud CDN cache keys by modifying the request headers.",
+"description": "`LbEdgeExtension` is a resource that lets the extension service influence the selection of backend services and Cloud CDN cache keys by modifying request headers.",
 "id": "LbEdgeExtension",
 "properties": {
 "createTime": {
@@ -5754,7 +5754,7 @@
 "type": "boolean"
 },
 "minLogLevel": {
-"description": "Non-empty default. Specificies the lowest level of the plugin logs that are exported to Cloud Logging. This setting relates to the logs generated by using logging statements in your Wasm code. This field is can be set only if logging is enabled for the plugin. If the field is not provided when logging is enabled, it is set to `INFO` by default.",
+"description": "Non-empty default. Specifies the lowest level of the plugin logs that are exported to Cloud Logging. This setting relates to the logs generated by using logging statements in your Wasm code. This field is can be set only if logging is enabled for the plugin. If the field is not provided when logging is enabled, it is set to `INFO` by default.",
 "enum": [
 "LOG_LEVEL_UNSPECIFIED",
 "TRACE",

googleapiclient/discovery_cache/documents/notebooks.v2.json

@@ -185,6 +185,34 @@
 "resources": {
 "instances": {
 "methods": {
+"checkAuthorization": {
+"description": "Initiated by Cloud Console for Oauth consent flow for Workbench Instances. Do not use this method directly. Design doc: go/wbi-euc:auth-dd",
+"flatPath": "v2/projects/{projectsId}/locations/{locationsId}/instances/{instancesId}:checkAuthorization",
+"httpMethod": "POST",
+"id": "notebooks.projects.locations.instances.checkAuthorization",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. The name of the Notebook Instance resource. Format: `projects/{project}/locations/{location}/instances/{instance}`",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/instances/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v2/{+name}:checkAuthorization",
+"request": {
+"$ref": "CheckAuthorizationRequest"
+},
+"response": {
+"$ref": "CheckAuthorizationResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
 "checkUpgradability": {
 "description": "Checks whether a notebook instance is upgradable.",
 "flatPath": "v2/projects/{projectsId}/locations/{locationsId}/instances/{instancesId}:checkUpgradability",
@@ -306,6 +334,34 @@
 "https://www.googleapis.com/auth/cloud-platform"
 ]
 },
+"generateAccessToken": {
+"description": "Called by VM to return an EUC for the instance owner. Do not use this method directly. Design doc: go/wbi-euc:dd",
+"flatPath": "v2/projects/{projectsId}/locations/{locationsId}/instances/{instancesId}:generateAccessToken",
+"httpMethod": "POST",
+"id": "notebooks.projects.locations.instances.generateAccessToken",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. Format: `projects/{project}/locations/{location}/instances/{instance_id}`",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/instances/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v2/{+name}:generateAccessToken",
+"request": {
+"$ref": "GenerateAccessTokenRequest"
+},
+"response": {
+"$ref": "GenerateAccessTokenResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
 "get": {
 "description": "Gets details of a single Instance.",
 "flatPath": "v2/projects/{projectsId}/locations/{locationsId}/instances/{instancesId}",
@@ -910,7 +966,7 @@
 }
 }
 },
-"revision": "20250604",
+"revision": "20250710",
 "rootUrl": "https://notebooks.googleapis.com/",
 "schemas": {
 "AcceleratorConfig": {
@@ -1046,6 +1102,41 @@
 "properties": {},
 "type": "object"
 },
+"CheckAuthorizationRequest": {
+"description": "Request message for checking authorization for the instance owner.",
+"id": "CheckAuthorizationRequest",
+"properties": {
+"authorizationDetails": {
+"additionalProperties": {
+"type": "string"
+},
+"description": "Optional. The details of the OAuth authorization response. This may include additional params such as dry_run, version_info, origin, propagate, etc.",
+"type": "object"
+}
+},
+"type": "object"
+},
+"CheckAuthorizationResponse": {
+"description": "Response message for checking authorization for the instance owner.",
+"id": "CheckAuthorizationResponse",
+"properties": {
+"createTime": {
+"description": "Output only. Timestamp when this Authorization request was created.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+},
+"oauth_uri": {
+"description": "If the user has not completed OAuth consent, then the oauth_url is returned. Otherwise, this field is not set.",
+"type": "string"
+},
+"success": {
+"description": "Success indicates that the user completed OAuth consent and access tokens can be generated.",
+"type": "boolean"
+}
+},
+"type": "object"
+},
 "CheckInstanceUpgradabilityResponse": {
 "description": "Response for checking if a notebook instance is upgradeable.",
 "id": "CheckInstanceUpgradabilityResponse",
@@ -1412,6 +1503,41 @@
 },
 "type": "object"
 },
+"GenerateAccessTokenRequest": {
+"description": "Request message for generating an EUC for the instance owner.",
+"id": "GenerateAccessTokenRequest",
+"properties": {
+"vmToken": {
+"description": "Required. The VM identity token (a JWT) for authenticating the VM. https://cloud.google.com/compute/docs/instances/verifying-instance-identity",
+"type": "string"
+}
+},
+"type": "object"
+},
+"GenerateAccessTokenResponse": {
+"description": "Response message for generating an EUC for the instance owner.",
+"id": "GenerateAccessTokenResponse",
+"properties": {
+"access_token": {
+"description": "Short-lived access token string which may be used to access Google APIs.",
+"type": "string"
+},
+"expires_in": {
+"description": "The time in seconds when the access token expires. Typically that's 3600.",
+"format": "int32",
+"type": "integer"
+},
+"scope": {
+"description": "Space-separated list of scopes contained in the returned token. https://cloud.google.com/docs/authentication/token-types#access-contents",
+"type": "string"
+},
+"token_type": {
+"description": "Type of the returned access token (e.g. \"Bearer\"). It specifies how the token must be used. Bearer tokens may be used by any entity without proof of identity.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "ImageRelease": {
 "description": "ConfigImage represents an image release available to create a WbI",
 "id": "ImageRelease",
@@ -1452,6 +1578,10 @@
 "description": "Optional. If true, deletion protection will be enabled for this Workbench Instance. If false, deletion protection will be disabled for this Workbench Instance.",
 "type": "boolean"
 },
+"enableManagedEuc": {
+"description": "Optional. Flag to enable managed end user credentials for the instance.",
+"type": "boolean"
+},
 "enableThirdPartyIdentity": {
 "description": "Optional. Flag that specifies that a notebook can be accessed with third party identity provider.",
 "type": "boolean"