google-api-python-client 2.178.0__py3-none-any.whl → 2.181.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/networksecurity.v1beta1.json

@@ -557,7 +557,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Immutable. Identifier. name of resource",
+"description": "Immutable. Identifier. Name of resource.",
 "location": "path",
 "pattern": "^organizations/[^/]+/locations/[^/]+/firewallEndpoints/[^/]+$",
 "required": true,
@@ -1078,7 +1078,7 @@
 ],
 "parameters": {
 "extraLocationTypes": {
-"description": "Optional. A list of extra location types that should be used as conditions for controlling the visibility of the locations.",
+"description": "Optional. Do not use this field. It is unsupported and is ignored unless explicitly documented otherwise. This is primarily for internal usage.",
 "location": "query",
 "repeated": true,
 "type": "string"
@@ -2432,12 +2432,12 @@
 ],
 "parameters": {
 "dnsThreatDetectorId": {
-"description": "Optional. Id of the requesting DnsThreatDetector object. If this field is not supplied, the service will generate an identifier.",
+"description": "Optional. The ID of the requesting DnsThreatDetector object. If this field is not supplied, the service generates an identifier.",
 "location": "query",
 "type": "string"
 },
 "parent": {
-"description": "Required. Value for parent of the DnsThreatDetector resource.",
+"description": "Required. The value for the parent of the DnsThreatDetector resource.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
@@ -2481,7 +2481,7 @@
 ]
 },
 "get": {
-"description": "Gets details of a single DnsThreatDetector.",
+"description": "Gets the details of a single DnsThreatDetector.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/dnsThreatDetectors/{dnsThreatDetectorsId}",
 "httpMethod": "GET",
 "id": "networksecurity.projects.locations.dnsThreatDetectors.get",
@@ -2490,7 +2490,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. Name of the DnsThreatDetector resource",
+"description": "Required. Name of the DnsThreatDetector resource.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/dnsThreatDetectors/[^/]+$",
 "required": true,
@@ -2515,18 +2515,18 @@
 ],
 "parameters": {
 "pageSize": {
-"description": "Optional. Requested page size. Server may return fewer items than requested. If unspecified, server will pick an appropriate default.",
+"description": "Optional. The requested page size. The server may return fewer items than requested. If unspecified, the server picks an appropriate default.",
 "format": "int32",
 "location": "query",
 "type": "integer"
 },
 "pageToken": {
-"description": "Optional. A page token, received from a previous `ListDnsThreatDetectorsRequest` call. Provide this to retrieve the subsequent page.",
+"description": "Optional. A page token received from a previous `ListDnsThreatDetectorsRequest` call. Provide this to retrieve the subsequent page.",
 "location": "query",
 "type": "string"
 },
 "parent": {
-"description": "Required. Parent value for ListDnsThreatDetectorsRequest",
+"description": "Required. The parent value for `ListDnsThreatDetectorsRequest`.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
@@ -2542,7 +2542,7 @@
 ]
 },
 "patch": {
-"description": "Updates the parameters of a single DnsThreatDetector.",
+"description": "Updates a single DnsThreatDetector.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/dnsThreatDetectors/{dnsThreatDetectorsId}",
 "httpMethod": "PATCH",
 "id": "networksecurity.projects.locations.dnsThreatDetectors.patch",
@@ -2558,7 +2558,7 @@
 "type": "string"
 },
 "updateMask": {
-"description": "Optional. Field mask is used to specify the fields to be overwritten in the DnsThreatDetector resource by the update. The fields specified in the update_mask are relative to the resource, not the full request. A field will be overwritten if it is in the mask. If the mask is not provided then all fields present in the request will be overwritten.",
+"description": "Optional. The field mask is used to specify the fields to be overwritten in the DnsThreatDetector resource by the update. The fields specified in the update_mask are relative to the resource, not the full request. A field will be overwritten if it is in the mask. If the mask is not provided then all fields present in the request will be overwritten.",
 "format": "google-fieldmask",
 "location": "query",
 "type": "string"
@@ -5513,7 +5513,7 @@
 }
 }
 },
-"revision": "20250721",
+"revision": "20250822",
 "rootUrl": "https://networksecurity.googleapis.com/",
 "schemas": {
 "AddAddressGroupItemsRequest": {
@@ -5830,21 +5830,21 @@
 "id": "AuthzPolicyAuthzRuleFromRequestSource",
 "properties": {
 "ipBlocks": {
-"description": "Optional. A list of IP addresses or IP address ranges to match against the source IP address of the request. Limited to 5 ip_blocks.",
+"description": "Optional. A list of IP addresses or IP address ranges to match against the source IP address of the request. Limited to 10 ip_blocks per Authorization Policy",
 "items": {
 "$ref": "AuthzPolicyAuthzRuleIpBlock"
 },
 "type": "array"
 },
 "principals": {
-"description": "Optional. A list of identities derived from the client's certificate. This field will not match on a request unless frontend mutual TLS is enabled for the forwarding rule or Gateway and the client certificate has been successfully validated by mTLS. Each identity is a string whose value is matched against a list of URI SANs, DNS Name SANs, or the common name in the client's certificate. A match happens when any principal matches with the rule. Limited to 5 principals.",
+"description": "Optional. A list of identities derived from the client's certificate. This field will not match on a request unless frontend mutual TLS is enabled for the forwarding rule or Gateway and the client certificate has been successfully validated by mTLS. Each identity is a string whose value is matched against a list of URI SANs, DNS Name SANs, or the common name in the client's certificate. A match happens when any principal matches with the rule. Limited to 50 principals per Authorization Policy for Regional Internal Application Load Balancer, Regional External Application Load Balancer, Cross-region Internal Application Load Balancer, and Cloud Service Mesh. Limited to 25 principals per Authorization Policy for Global External Application Load Balancer.",
 "items": {
 "$ref": "AuthzPolicyAuthzRulePrincipal"
 },
 "type": "array"
 },
 "resources": {
-"description": "Optional. A list of resources to match against the resource of the source VM of a request. Limited to 5 resources.",
+"description": "Optional. A list of resources to match against the resource of the source VM of a request. Limited to 10 resources per Authorization Policy.",
 "items": {
 "$ref": "AuthzPolicyAuthzRuleRequestResource"
 },
@@ -5902,9 +5902,9 @@
 ],
 "enumDescriptions": [
 "Unspecified principal selector. It will be treated as CLIENT_CERT_URI_SAN by default.",
-"The principal rule is matched against a list of URI SANs in the validated client\u2019s certificate. A match happens when there is any exact URI SAN value match. This is the default principal selector.",
-"The principal rule is matched against a list of DNS Name SANs in the validated client\u2019s certificate. A match happens when there is any exact DNS Name SAN value match.",
-"The principal rule is matched against the common name in the client\u2019s certificate. Authorization against multiple common names in the client certificate is not supported. Requests with multiple common names in the client certificate will be rejected if CLIENT_CERT_COMMON_NAME is set as the principal selector. A match happens when there is an exact common name value match. This is only applicable for Application Load Balancers except for classic Global External Application load balancer. CLIENT_CERT_COMMON_NAME is not supported for INTERNAL_SELF_MANAGED load balancing scheme."
+"The principal rule is matched against a list of URI SANs in the validated client's certificate. A match happens when there is any exact URI SAN value match. This is the default principal selector.",
+"The principal rule is matched against a list of DNS Name SANs in the validated client's certificate. A match happens when there is any exact DNS Name SAN value match. This is only applicable for Application Load Balancers except for classic Global External Application load balancer. CLIENT_CERT_DNS_NAME_SAN is not supported for INTERNAL_SELF_MANAGED load balancing scheme.",
+"The principal rule is matched against the common name in the client's certificate. Authorization against multiple common names in the client certificate is not supported. Requests with multiple common names in the client certificate will be rejected if CLIENT_CERT_COMMON_NAME is set as the principal selector. A match happens when there is an exact common name value match. This is only applicable for Application Load Balancers except for classic Global External Application load balancer. CLIENT_CERT_COMMON_NAME is not supported for INTERNAL_SELF_MANAGED load balancing scheme."
 ],
 "type": "string"
 }
@@ -5931,7 +5931,7 @@
 "id": "AuthzPolicyAuthzRuleRequestResourceTagValueIdSet",
 "properties": {
 "ids": {
-"description": "Required. A list of resource tag value permanent IDs to match against the resource manager tags value associated with the source VM of a request. The match follows AND semantics which means all the ids must match. Limited to 5 matches.",
+"description": "Required. A list of resource tag value permanent IDs to match against the resource manager tags value associated with the source VM of a request. The match follows AND semantics which means all the ids must match. Limited to 5 ids in the Tag value id set.",
 "items": {
 "format": "int64",
 "type": "string"
@@ -5998,21 +5998,21 @@
 "description": "Optional. A list of headers to match against in http header."
 },
 "hosts": {
-"description": "Optional. A list of HTTP Hosts to match against. The match can be one of exact, prefix, suffix, or contains (substring match). Matches are always case sensitive unless the ignoreCase is set. Limited to 5 matches.",
+"description": "Optional. A list of HTTP Hosts to match against. The match can be one of exact, prefix, suffix, or contains (substring match). Matches are always case sensitive unless the ignoreCase is set. Limited to 10 hosts per Authorization Policy.",
 "items": {
 "$ref": "AuthzPolicyAuthzRuleStringMatch"
 },
 "type": "array"
 },
 "methods": {
-"description": "Optional. A list of HTTP methods to match against. Each entry must be a valid HTTP method name (GET, PUT, POST, HEAD, PATCH, DELETE, OPTIONS). It only allows exact match and is always case sensitive.",
+"description": "Optional. A list of HTTP methods to match against. Each entry must be a valid HTTP method name (GET, PUT, POST, HEAD, PATCH, DELETE, OPTIONS). It only allows exact match and is always case sensitive. Limited to 10 methods per Authorization Policy.",
 "items": {
 "type": "string"
 },
 "type": "array"
 },
 "paths": {
-"description": "Optional. A list of paths to match against. The match can be one of exact, prefix, suffix, or contains (substring match). Matches are always case sensitive unless the ignoreCase is set. Limited to 5 matches. Note that this path match includes the query parameters. For gRPC services, this should be a fully-qualified name of the form /package.service/method.",
+"description": "Optional. A list of paths to match against. The match can be one of exact, prefix, suffix, or contains (substring match). Matches are always case sensitive unless the ignoreCase is set. Limited to 10 paths per Authorization Policy. Note that this path match includes the query parameters. For gRPC services, this should be a fully-qualified name of the form /package.service/method.",
 "items": {
 "$ref": "AuthzPolicyAuthzRuleStringMatch"
 },
@@ -6026,7 +6026,7 @@
 "id": "AuthzPolicyAuthzRuleToRequestOperationHeaderSet",
 "properties": {
 "headers": {
-"description": "Required. A list of headers to match against in http header. The match can be one of exact, prefix, suffix, or contains (substring match). The match follows AND semantics which means all the headers must match. Matches are always case sensitive unless the ignoreCase is set. Limited to 5 matches.",
+"description": "Required. A list of headers to match against in http header. The match can be one of exact, prefix, suffix, or contains (substring match). The match follows AND semantics which means all the headers must match. Matches are always case sensitive unless the ignoreCase is set. Limited to 10 headers per Authorization Policy.",
 "items": {
 "$ref": "AuthzPolicyAuthzRuleHeaderMatch"
 },
@@ -6075,7 +6075,7 @@
 "id": "AuthzPolicyTarget",
 "properties": {
 "loadBalancingScheme": {
-"description": "Required. All gateways and forwarding rules referenced by this policy and extensions must share the same load balancing scheme. Supported values: `INTERNAL_MANAGED` and `EXTERNAL_MANAGED`. For more information, refer to [Backend services overview](https://cloud.google.com/load-balancing/docs/backend-service).",
+"description": "Required. All gateways and forwarding rules referenced by this policy and extensions must share the same load balancing scheme. Supported values: `INTERNAL_MANAGED`, `INTERNAL_SELF_MANAGED`, and `EXTERNAL_MANAGED`. For more information, refer to [Backend services overview](https://cloud.google.com/load-balancing/docs/backend-service).",
 "enum": [
 "LOAD_BALANCING_SCHEME_UNSPECIFIED",
 "INTERNAL_MANAGED",
@@ -6091,7 +6091,7 @@
 "type": "string"
 },
 "resources": {
-"description": "Required. A list of references to the Forwarding Rules on which this policy will be applied.",
+"description": "Required. A list of references to the Forwarding Rules on which this policy will be applied. For policies created for Cloudrun, this field will reference the Cloud Run services.",
 "items": {
 "type": "string"
 },
@@ -6298,17 +6298,17 @@
 "type": "object"
 },
 "DnsThreatDetector": {
-"description": "Message describing DnsThreatDetector object",
+"description": "A DNS threat detector sends DNS query logs to a _provider_ that then analyzes the logs to identify malicious activity in the DNS queries. By default, all VPC networks in your projects are included. You can exclude specific networks by supplying `excluded_networks`.",
 "id": "DnsThreatDetector",
 "properties": {
 "createTime": {
-"description": "Output only. [Output only] Create time stamp",
+"description": "Output only. Create time stamp.",
 "format": "google-datetime",
 "readOnly": true,
 "type": "string"
 },
 "excludedNetworks": {
-"description": "Optional. A list of Network resource names which are exempt from the configuration in this DnsThreatDetector. Example: `projects/PROJECT_ID/global/networks/NETWORK_NAME`.",
+"description": "Optional. A list of network resource names which aren't monitored by this DnsThreatDetector. Example: `projects/PROJECT_ID/global/networks/NETWORK_NAME`.",
 "items": {
 "type": "string"
 },
@@ -6318,7 +6318,7 @@
 "additionalProperties": {
 "type": "string"
 },
-"description": "Optional. Labels as key value pairs",
+"description": "Optional. Any labels associated with the DnsThreatDetector, listed as key value pairs.",
 "type": "object"
 },
 "name": {
@@ -6333,12 +6333,12 @@
 ],
 "enumDescriptions": [
 "An unspecified provider.",
-"The Infoblox DNS threat detecter."
+"The Infoblox DNS threat detector provider."
 ],
 "type": "string"
 },
 "updateTime": {
-"description": "Output only. [Output only] Update time stamp",
+"description": "Output only. Update time stamp.",
 "format": "google-datetime",
 "readOnly": true,
 "type": "string"
@@ -6376,7 +6376,7 @@
 "type": "object"
 },
 "FirewallEndpoint": {
-"description": "Message describing Endpoint object",
+"description": "Message describing Endpoint object.",
 "id": "FirewallEndpoint",
 "properties": {
 "associatedNetworks": {
@@ -6401,7 +6401,7 @@
 "type": "string"
 },
 "createTime": {
-"description": "Output only. Create time stamp",
+"description": "Output only. Create time stamp.",
 "format": "google-datetime",
 "readOnly": true,
 "type": "string"
@@ -6410,6 +6410,10 @@
 "description": "Optional. Description of the firewall endpoint. Max length 2048 characters.",
 "type": "string"
 },
+"endpointSettings": {
+"$ref": "FirewallEndpointEndpointSettings",
+"description": "Optional. Settings for the endpoint."
+},
 "labels": {
 "additionalProperties": {
 "type": "string"
@@ -6418,7 +6422,7 @@
 "type": "object"
 },
 "name": {
-"description": "Immutable. Identifier. name of resource",
+"description": "Immutable. Identifier. Name of resource.",
 "type": "string"
 },
 "reconciling": {
@@ -6553,6 +6557,12 @@
 },
 "type": "object"
 },
+"FirewallEndpointEndpointSettings": {
+"description": "Settings for the endpoint.",
+"id": "FirewallEndpointEndpointSettings",
+"properties": {},
+"type": "object"
+},
 "GatewaySecurityPolicy": {
 "description": "The GatewaySecurityPolicy resource contains a collection of GatewaySecurityPolicyRules and associated metadata.",
 "id": "GatewaySecurityPolicy",
@@ -7456,7 +7466,7 @@
 "type": "object"
 },
 "ListDnsThreatDetectorsResponse": {
-"description": "Message for response to listing DnsThreatDetectors",
+"description": "The response message to requesting a list of DnsThreatDetectors.",
 "id": "ListDnsThreatDetectorsResponse",
 "properties": {
 "dnsThreatDetectors": {
@@ -7467,7 +7477,7 @@
 "type": "array"
 },
 "nextPageToken": {
-"description": "A token, which can be sent as `page_token` to retrieve the next page.",
+"description": "A token, which can be sent as `page_token`, to retrieve the next page.",
 "type": "string"
 },
 "unreachable": {

googleapiclient/discovery_cache/documents/networkservices.v1beta1.json

@@ -1439,6 +1439,188 @@
 }
 }
 },
+"lbTcpExtensions": {
+"methods": {
+"create": {
+"description": "Creates a new `LbTcpExtension` resource in a given project and location.",
+"flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/lbTcpExtensions",
+"httpMethod": "POST",
+"id": "networkservices.projects.locations.lbTcpExtensions.create",
+"parameterOrder": [
+"parent"
+],
+"parameters": {
+"lbTcpExtensionId": {
+"description": "Required. User-provided ID of the `LbTcpExtension` resource to be created.",
+"location": "query",
+"type": "string"
+},
+"parent": {
+"description": "Required. The parent resource of the `LbTcpExtension` resource. Must be in the format `projects/{project}/locations/{location}`.",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+$",
+"required": true,
+"type": "string"
+},
+"requestId": {
+"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server can ignore the request if it has already been completed. The server guarantees that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, ignores the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"location": "query",
+"type": "string"
+}
+},
+"path": "v1beta1/{+parent}/lbTcpExtensions",
+"request": {
+"$ref": "LbTcpExtension"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"delete": {
+"description": "Deletes the specified `LbTcpExtension` resource.",
+"flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/lbTcpExtensions/{lbTcpExtensionsId}",
+"httpMethod": "DELETE",
+"id": "networkservices.projects.locations.lbTcpExtensions.delete",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. The name of the `LbTcpExtension` resource to delete. Must be in the format `projects/{project}/locations/{location}/LbTcpExtensions/{lb_tcp_extension}`.",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/lbTcpExtensions/[^/]+$",
+"required": true,
+"type": "string"
+},
+"requestId": {
+"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server can ignore the request if it has already been completed. The server guarantees that for at least 60 minutes after the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, ignores the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"location": "query",
+"type": "string"
+}
+},
+"path": "v1beta1/{+name}",
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"get": {
+"description": "Gets details of the specified `LbTcpExtension` resource.",
+"flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/lbTcpExtensions/{lbTcpExtensionsId}",
+"httpMethod": "GET",
+"id": "networkservices.projects.locations.lbTcpExtensions.get",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. A name of the `LbTcpExtension` resource to get. Must be in the format `projects/{project}/locations/{location}/LbTcpExtensions/{lb_tcp_extension}`.",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/lbTcpExtensions/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1beta1/{+name}",
+"response": {
+"$ref": "LbTcpExtension"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"list": {
+"description": "Lists `LbTcpExtension` resources in a given project and location.",
+"flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/lbTcpExtensions",
+"httpMethod": "GET",
+"id": "networkservices.projects.locations.lbTcpExtensions.list",
+"parameterOrder": [
+"parent"
+],
+"parameters": {
+"filter": {
+"description": "Optional. Filtering results.",
+"location": "query",
+"type": "string"
+},
+"orderBy": {
+"description": "Optional. Hint for how to order the results.",
+"location": "query",
+"type": "string"
+},
+"pageSize": {
+"description": "Optional. Requested page size. The server might return fewer items than requested. If unspecified, the server picks an appropriate default.",
+"format": "int32",
+"location": "query",
+"type": "integer"
+},
+"pageToken": {
+"description": "Optional. A token identifying a page of results that the server returns.",
+"location": "query",
+"type": "string"
+},
+"parent": {
+"description": "Required. The project and location from which the `LbTcpExtension` resources are listed, specified in the following format: `projects/{project}/locations/{location}`.",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1beta1/{+parent}/lbTcpExtensions",
+"response": {
+"$ref": "ListLbTcpExtensionsResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"patch": {
+"description": "Updates the parameters of the specified `LbTcpExtension` resource.",
+"flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/lbTcpExtensions/{lbTcpExtensionsId}",
+"httpMethod": "PATCH",
+"id": "networkservices.projects.locations.lbTcpExtensions.patch",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. Identifier. Name of the `LbTcpExtension` resource in the following format: `projects/{project}/locations/{location}/LbTcpExtension/{lb_tcp_extension}`",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/lbTcpExtensions/[^/]+$",
+"required": true,
+"type": "string"
+},
+"requestId": {
+"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server can ignore the request if it has already been completed. The server guarantees that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, ignores the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"location": "query",
+"type": "string"
+},
+"updateMask": {
+"description": "Optional. Used to specify the fields to be overwritten in the `LbTcpExtension` resource by the update. The fields specified in the update_mask are relative to the resource, not the full request. A field is overwritten if it is in the mask. If the user does not specify a mask, then all fields are overwritten.",
+"format": "google-fieldmask",
+"location": "query",
+"type": "string"
+}
+},
+"path": "v1beta1/{+name}",
+"request": {
+"$ref": "LbTcpExtension"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+}
+}
+},
 "lbTrafficExtensions": {
 "methods": {
 "create": {
@@ -2913,7 +3095,7 @@
 }
 }
 },
-"revision": "20250723",
+"revision": "20250730",
 "rootUrl": "https://networkservices.googleapis.com/",
 "schemas": {
 "AuthzExtension": {
@@ -4395,6 +4577,68 @@
 },
 "type": "object"
 },
+"LbTcpExtension": {
+"description": "`LbTcpExtension` is a resource that allows traffic forwarding to different backend services to make allow/deny decisions on TCP connections for all L7 Load Balancers within a network. Currently only internal load-balancers are supported.",
+"id": "LbTcpExtension",
+"properties": {
+"createTime": {
+"description": "Output only. The timestamp when the resource was created.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+},
+"description": {
+"description": "Optional. A human-readable description of the resource.",
+"type": "string"
+},
+"extensionChains": {
+"description": "Required. A set of ordered extension chains that contain the match conditions and extensions to execute. Match conditions for each extension chain are evaluated in sequence for a given request. The first extension chain that has a condition that matches the request is executed. Any subsequent extension chains do not execute. Limited to 5 extension chains per resource.",
+"items": {
+"$ref": "ExtensionChain"
+},
+"type": "array"
+},
+"labels": {
+"additionalProperties": {
+"type": "string"
+},
+"description": "Optional. Set of labels associated with the `LbTcpExtension` resource. The format must comply with [the requirements for labels](/compute/docs/labeling-resources#requirements) for Google Cloud resources.",
+"type": "object"
+},
+"loadBalancingScheme": {
+"description": "Required. All backend services and forwarding rules referenced by this extension must share the same load balancing scheme. Supported values: `INTERNAL_MANAGED`. For more information, refer to [Backend services overview](https://cloud.google.com/load-balancing/docs/backend-service).",
+"enum": [
+"LOAD_BALANCING_SCHEME_UNSPECIFIED",
+"INTERNAL_MANAGED",
+"EXTERNAL_MANAGED"
+],
+"enumDescriptions": [
+"Default value. Do not use.",
+"Signifies that this is used for Internal HTTP(S) Load Balancing.",
+"Signifies that this is used for External Managed HTTP(S) Load Balancing."
+],
+"type": "string"
+},
+"name": {
+"description": "Required. Identifier. Name of the `LbTcpExtension` resource in the following format: `projects/{project}/locations/{location}/LbTcpExtension/{lb_tcp_extension}`",
+"type": "string"
+},
+"networks": {
+"description": "Optional. If set, this `LbTcpExtension` resource applies to all `ForwardingRule` resources in these VPC networks. Values should be relative resource names identifying VPC networks, for example `projects/*/global/networks/network-1`. Currently limited to 1 network per resource. Limited to 1 network per resource.",
+"items": {
+"type": "string"
+},
+"type": "array"
+},
+"updateTime": {
+"description": "Output only. The timestamp when the resource was updated.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+}
+},
+"type": "object"
+},
 "LbTrafficExtension": {
 "description": "`LbTrafficExtension` is a resource that lets the extension service modify the headers and payloads of both requests and responses without impacting the choice of backend services or any other security policies associated with the backend service.",
 "id": "LbTrafficExtension",
@@ -4665,6 +4909,31 @@
 },
 "type": "object"
 },
+"ListLbTcpExtensionsResponse": {
+"description": "Message for response to listing `LbTcpExtension` resources.",
+"id": "ListLbTcpExtensionsResponse",
+"properties": {
+"lbTcpExtensions": {
+"description": "The list of `LbTcpExtension` resources.",
+"items": {
+"$ref": "LbTcpExtension"
+},
+"type": "array"
+},
+"nextPageToken": {
+"description": "A token identifying a page of results that the server returns.",
+"type": "string"
+},
+"unreachable": {
+"description": "Locations that could not be reached.",
+"items": {
+"type": "string"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
 "ListLbTrafficExtensionsResponse": {
 "description": "Message for response to listing `LbTrafficExtension` resources.",
 "id": "ListLbTrafficExtensionsResponse",