google-api-python-client 2.179.0__py3-none-any.whl → 2.181.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/compute.alpha.json

@@ -51140,7 +51140,7 @@
 }
 }
 },
-"revision": "20250729",
+"revision": "20250810",
 "rootUrl": "https://compute.googleapis.com/",
 "schemas": {
 "AWSV4Signature": {
@@ -54928,7 +54928,7 @@ false
 "type": "array"
 },
 "localityLbPolicy": {
-"description": "The load balancing algorithm used within the scope of the locality. The possible values are: - ROUND_ROBIN: This is a simple policy in which each healthy backend is selected in round robin order. This is the default. - LEAST_REQUEST: An O(1) algorithm which selects two random healthy hosts and picks the host which has fewer active requests. - RING_HASH: The ring/modulo hash load balancer implements consistent hashing to backends. The algorithm has the property that the addition/removal of a host from a set of N hosts only affects 1/N of the requests. - RANDOM: The load balancer selects a random healthy host. - ORIGINAL_DESTINATION: Backend host is selected based on the client connection metadata, i.e., connections are opened to the same address as the destination address of the incoming connection before the connection was redirected to the load balancer. - MAGLEV: used as a drop in replacement for the ring hash load balancer. Maglev is not as stable as ring hash but has faster table lookup build times and host selection times. For more information about Maglev, see https://ai.google/research/pubs/pub44824 - WEIGHTED_ROUND_ROBIN: Per-endpoint Weighted Round Robin Load Balancing using weights computed from Backend reported Custom Metrics. If set, the Backend Service responses are expected to contain non-standard HTTP response header field Endpoint-Load-Metrics. The reported metrics to use for computing the weights are specified via the customMetrics field. This field is applicable to either: - A regional backend service with the service_protocol set to HTTP, HTTPS, HTTP2 or H2C, and load_balancing_scheme set to INTERNAL_MANAGED. - A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED, INTERNAL_MANAGED, or EXTERNAL_MANAGED. If sessionAffinity is not configured\u2014that is, if session affinity remains at the default value of NONE\u2014then the default value for localityLbPolicy is ROUND_ROBIN. If session affinity is set to a value other than NONE, then the default value for localityLbPolicy is MAGLEV. Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced by a URL map that is bound to target gRPC proxy that has validateForProxyless field set to true. localityLbPolicy cannot be specified with haPolicy.",
+"description": "The load balancing algorithm used within the scope of the locality. The possible values are: - ROUND_ROBIN: This is a simple policy in which each healthy backend is selected in round robin order. This is the default. - LEAST_REQUEST: An O(1) algorithm which selects two random healthy hosts and picks the host which has fewer active requests. - RING_HASH: The ring/modulo hash load balancer implements consistent hashing to backends. The algorithm has the property that the addition/removal of a host from a set of N hosts only affects 1/N of the requests. - RANDOM: The load balancer selects a random healthy host. - ORIGINAL_DESTINATION: Backend host is selected based on the client connection metadata, i.e., connections are opened to the same address as the destination address of the incoming connection before the connection was redirected to the load balancer. - MAGLEV: used as a drop in replacement for the ring hash load balancer. Maglev is not as stable as ring hash but has faster table lookup build times and host selection times. For more information about Maglev, see Maglev: A Fast and Reliable Software Network Load Balancer. - WEIGHTED_ROUND_ROBIN: Per-endpoint Weighted Round Robin Load Balancing using weights computed from Backend reported Custom Metrics. If set, the Backend Service responses are expected to contain non-standard HTTP response header field Endpoint-Load-Metrics. The reported metrics to use for computing the weights are specified via the customMetrics field. This field is applicable to either: - A regional backend service with the service_protocol set to HTTP, HTTPS, HTTP2 or H2C, and load_balancing_scheme set to INTERNAL_MANAGED. - A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED, INTERNAL_MANAGED, or EXTERNAL_MANAGED. If sessionAffinity is not configured\u2014that is, if session affinity remains at the default value of NONE\u2014then the default value for localityLbPolicy is ROUND_ROBIN. If session affinity is set to a value other than NONE, then the default value for localityLbPolicy is MAGLEV. Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced by a URL map that is bound to target gRPC proxy that has validateForProxyless field set to true. localityLbPolicy cannot be specified with haPolicy.",
 "enum": [
 "INVALID_LB_POLICY",
 "LEAST_REQUEST",
@@ -54937,17 +54937,19 @@ false
 "RANDOM",
 "RING_HASH",
 "ROUND_ROBIN",
+"WEIGHTED_GCP_RENDEZVOUS",
 "WEIGHTED_MAGLEV",
 "WEIGHTED_ROUND_ROBIN"
 ],
 "enumDescriptions": [
 "",
 "An O(1) algorithm which selects two random healthy hosts and picks the host which has fewer active requests.",
-"This algorithm implements consistent hashing to backends. Maglev can be used as a drop in replacement for the ring hash load balancer. Maglev is not as stable as ring hash but has faster table lookup build times and host selection times. For more information about Maglev, see https://ai.google/research/pubs/pub44824",
+"This algorithm implements consistent hashing to backends. Maglev can be used as a drop in replacement for the ring hash load balancer. Maglev is not as stable as ring hash but has faster table lookup build times and host selection times. For more information about Maglev, see Maglev: A Fast and Reliable Software Network Load Balancer.",
 "Backend host is selected based on the client connection metadata, i.e., connections are opened to the same address as the destination address of the incoming connection before the connection was redirected to the load balancer.",
 "The load balancer selects a random healthy host.",
 "The ring/modulo hash load balancer implements consistent hashing to backends. The algorithm has the property that the addition/removal of a host from a set of N hosts only affects 1/N of the requests.",
 "This is a simple policy in which each healthy backend is selected in round robin order. This is the default.",
+"Per-instance weighted Load Balancing via health check reported weights. In internal passthrough network load balancing, it is weighted rendezvous hashing. This option is only supported in internal passthrough network load balancing.",
 "Per-instance weighted Load Balancing via health check reported weights. If set, the Backend Service must configure a non legacy HTTP-based Health Check, and health check replies are expected to contain non-standard HTTP response header field X-Load-Balancing-Endpoint-Weight to specify the per-instance weights. If set, Load Balancing is weighted based on the per-instance weights reported in the last processed health check replies, as long as every instance either reported a valid weight or had UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains equal-weight. This option is only supported in Network Load Balancing.",
 "Per-endpoint weighted round-robin Load Balancing using weights computed from Backend reported Custom Metrics. If set, the Backend Service responses are expected to contain non-standard HTTP response header field Endpoint-Load-Metrics. The reported metrics to use for computing the weights are specified via the customMetrics fields."
 ],
@@ -55055,7 +55057,7 @@ false
 "type": "array"
 },
 "serviceLbPolicy": {
-"description": "URL to networkservices.ServiceLbPolicy resource. Can only be set if load balancing scheme is EXTERNAL, EXTERNAL_MANAGED, INTERNAL_MANAGED or INTERNAL_SELF_MANAGED and the scope is global.",
+"description": "URL to networkservices.ServiceLbPolicy resource. Can only be set if load balancing scheme is EXTERNAL_MANAGED, INTERNAL_MANAGED or INTERNAL_SELF_MANAGED and the scope is global.",
 "type": "string"
 },
 "sessionAffinity": {
@@ -55983,17 +55985,19 @@ false
 "RANDOM",
 "RING_HASH",
 "ROUND_ROBIN",
+"WEIGHTED_GCP_RENDEZVOUS",
 "WEIGHTED_MAGLEV",
 "WEIGHTED_ROUND_ROBIN"
 ],
 "enumDescriptions": [
 "",
 "An O(1) algorithm which selects two random healthy hosts and picks the host which has fewer active requests.",
-"This algorithm implements consistent hashing to backends. Maglev can be used as a drop in replacement for the ring hash load balancer. Maglev is not as stable as ring hash but has faster table lookup build times and host selection times. For more information about Maglev, see https://ai.google/research/pubs/pub44824",
+"This algorithm implements consistent hashing to backends. Maglev can be used as a drop in replacement for the ring hash load balancer. Maglev is not as stable as ring hash but has faster table lookup build times and host selection times. For more information about Maglev, see Maglev: A Fast and Reliable Software Network Load Balancer.",
 "Backend host is selected based on the client connection metadata, i.e., connections are opened to the same address as the destination address of the incoming connection before the connection was redirected to the load balancer.",
 "The load balancer selects a random healthy host.",
 "The ring/modulo hash load balancer implements consistent hashing to backends. The algorithm has the property that the addition/removal of a host from a set of N hosts only affects 1/N of the requests.",
 "This is a simple policy in which each healthy backend is selected in round robin order. This is the default.",
+"Per-instance weighted Load Balancing via health check reported weights. In internal passthrough network load balancing, it is weighted rendezvous hashing. This option is only supported in internal passthrough network load balancing.",
 "Per-instance weighted Load Balancing via health check reported weights. If set, the Backend Service must configure a non legacy HTTP-based Health Check, and health check replies are expected to contain non-standard HTTP response header field X-Load-Balancing-Endpoint-Weight to specify the per-instance weights. If set, Load Balancing is weighted based on the per-instance weights reported in the last processed health check replies, as long as every instance either reported a valid weight or had UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains equal-weight. This option is only supported in Network Load Balancing.",
 "Per-endpoint weighted round-robin Load Balancing using weights computed from Backend reported Custom Metrics. If set, the Backend Service responses are expected to contain non-standard HTTP response header field Endpoint-Load-Metrics. The reported metrics to use for computing the weights are specified via the customMetrics fields."
 ],
@@ -56123,6 +56127,10 @@ false
 "description": "Reference to the BackendAuthenticationConfig resource from the networksecurity.googleapis.com namespace. Can be used in authenticating TLS connections to the backend, as specified by the authenticationMode field. Can only be specified if authenticationMode is not NONE.",
 "type": "string"
 },
+"identity": {
+"description": "Assigns the Managed Identity for the RegionBackendService Workload. Use this property to configure the load balancer back-end to use certificates and roots of trust provisioned by the Managed Workload Identity system. The `managedIdentity` property is the fully-specified SPIFFE ID to use in the SVID presented by the Load Balancer Workload. The SPIFFE ID must be a resource starting with the \"spiffe\" scheme identifier, followed by the \"trustDomain\" property value, followed by the path to the Managed Workload Identity. Supported SPIFFE ID format: - spiffe://<trust_domain>/ns/<namespace>/sa/<subject> The Trust Domain within the Managed Identity must refer to a valid Workload Identity Pool. The TrustConfig and CertificateIssuanceConfig will be inherited from the Workload Identity Pool. Restrictions: - If you set the `managedIdentity` property, you cannot manually set the following fields: - tlsSettings.sni - tlsSettings.subjectAltNames - tlsSettings.authenticationConfig When defining a `managedIdentity` for a RegionBackendServices, the corresponding Workload Identity Pool must have a ca_pool configured in the same region. The system will set up a read-only tlsSettings.authenticationConfig for the Managed Identity.",
+"type": "string"
+},
 "sni": {
 "description": "Server Name Indication - see RFC3546 section 3.1. If set, the load balancer sends this string as the SNI hostname in the TLS connection to the backend, and requires that this string match a Subject Alternative Name (SAN) in the backend's server certificate. With a Regional Internet NEG backend, if the SNI is specified here, the load balancer uses it regardless of whether the Regional Internet NEG is specified with FQDN or IP address and port. When both sni and subjectAltNames[] are specified, the load balancer matches the backend certificate's SAN only to subjectAltNames[].",
 "type": "string"
@@ -57462,6 +57470,7 @@ false
 "GENERAL_PURPOSE_N2",
 "GENERAL_PURPOSE_N2D",
 "GENERAL_PURPOSE_N4",
+"GENERAL_PURPOSE_N4D",
 "GENERAL_PURPOSE_T2D",
 "GRAPHICS_OPTIMIZED",
 "MEMORY_OPTIMIZED",
@@ -57507,6 +57516,7 @@ false
 "",
 "",
 "",
+"",
 "Note for internal users: When adding a new enum Type for v1, make sure to also add it in the comment for the `optional Type type` definition. This ensures that the public documentation displays the new enum Type."
 ],
 "type": "string"
@@ -58071,9 +58081,6 @@ false
 "description": "Contains a list of CompositeHealthChecksScopedList.",
 "id": "CompositeHealthCheckAggregatedList",
 "properties": {
-"etag": {
-"type": "string"
-},
 "id": {
 "description": "[Output Only] Unique identifier for the resource; defined by the server.",
 "type": "string"
@@ -58099,13 +58106,6 @@ false
 "description": "[Output Only] Server-defined URL for this resource.",
 "type": "string"
 },
-"unreachables": {
-"description": "[Output Only] Unreachable resources.",
-"items": {
-"type": "string"
-},
-"type": "array"
-},
 "warning": {
 "description": "[Output Only] Informational warning message.",
 "properties": {
@@ -58236,9 +58236,6 @@ false
 "CompositeHealthCheckList": {
 "id": "CompositeHealthCheckList",
 "properties": {
-"etag": {
-"type": "string"
-},
 "id": {
 "description": "[Output Only] Unique identifier for the resource; defined by the server.",
 "type": "string"
@@ -58263,13 +58260,6 @@ false
 "description": "[Output Only] Server-defined URL for this resource.",
 "type": "string"
 },
-"unreachables": {
-"description": "[Output Only] Unreachable resources. end_interface: MixerListResponseWithEtagBuilder",
-"items": {
-"type": "string"
-},
-"type": "array"
-},
 "warning": {
 "description": "[Output Only] Informational warning message.",
 "properties": {
@@ -61852,10 +61842,12 @@ false
 "description": "The type of the firewall policy. This field can be either VPC_POLICY or RDMA_ROCE_POLICY. Note: if not specified then VPC_POLICY will be used.",
 "enum": [
 "RDMA_ROCE_POLICY",
+"ULL_POLICY",
 "VPC_POLICY"
 ],
 "enumDescriptions": [
 "",
+"",
 ""
 ],
 "type": "string"
@@ -65846,9 +65838,6 @@ false
 "HealthAggregationPolicyList": {
 "id": "HealthAggregationPolicyList",
 "properties": {
-"etag": {
-"type": "string"
-},
 "id": {
 "description": "[Output Only] Unique identifier for the resource; defined by the server.",
 "type": "string"
@@ -65873,13 +65862,6 @@ false
 "description": "[Output Only] Server-defined URL for this resource.",
 "type": "string"
 },
-"unreachables": {
-"description": "[Output Only] Unreachable resources. end_interface: MixerListResponseWithEtagBuilder",
-"items": {
-"type": "string"
-},
-"type": "array"
-},
 "warning": {
 "description": "[Output Only] Informational warning message.",
 "properties": {
@@ -67234,9 +67216,6 @@ false
 "description": "Contains a list of HealthSourcesScopedList.",
 "id": "HealthSourceAggregatedList",
 "properties": {
-"etag": {
-"type": "string"
-},
 "id": {
 "description": "[Output Only] Unique identifier for the resource; defined by the server.",
 "type": "string"
@@ -67262,13 +67241,6 @@ false
 "description": "[Output Only] Server-defined URL for this resource.",
 "type": "string"
 },
-"unreachables": {
-"description": "[Output Only] Unreachable resources.",
-"items": {
-"type": "string"
-},
-"type": "array"
-},
 "warning": {
 "description": "[Output Only] Informational warning message.",
 "properties": {
@@ -67399,9 +67371,6 @@ false
 "HealthSourceList": {
 "id": "HealthSourceList",
 "properties": {
-"etag": {
-"type": "string"
-},
 "id": {
 "description": "[Output Only] Unique identifier for the resource; defined by the server.",
 "type": "string"
@@ -67426,13 +67395,6 @@ false
 "description": "[Output Only] Server-defined URL for this resource.",
 "type": "string"
 },
-"unreachables": {
-"description": "[Output Only] Unreachable resources. end_interface: MixerListResponseWithEtagBuilder",
-"items": {
-"type": "string"
-},
-"type": "array"
-},
 "warning": {
 "description": "[Output Only] Informational warning message.",
 "properties": {
@@ -69253,6 +69215,12 @@ false
 "format": "uint64",
 "type": "string"
 },
+"identity": {
+"type": "string"
+},
+"identityCertificate": {
+"type": "boolean"
+},
 "instanceEncryptionKey": {
 "$ref": "CustomerEncryptionKey",
 "description": "Encrypts suspended data for an instance with a customer-managed encryption key. If you are creating a new instance, this field will encrypt the local SSD and in-memory contents of the instance during the suspend operation. If you do not provide an encryption key when creating the instance, then the local SSD and in-memory contents will be encrypted using an automatically generated key during the suspend operation."
@@ -73040,7 +73008,7 @@ false
 "properties": {
 "requestValidForDuration": {
 "$ref": "Duration",
-"description": "Relative deadline for waiting for capacity. Relevant only for Instances.Insert and Instances.Start API."
+"description": "Relative deadline for waiting for capacity. Relevant only for Instances.Insert API."
 },
 "resourceManagerTags": {
 "additionalProperties": {
@@ -73089,6 +73057,12 @@ false
 },
 "type": "array"
 },
+"identity": {
+"type": "string"
+},
+"identityCertificate": {
+"type": "boolean"
+},
 "keyRevocationActionType": {
 "description": "KeyRevocationActionType of the instance. Supported options are \"STOP\" and \"NONE\". The default value is \"NONE\" if it is not specified.",
 "enum": [
@@ -75286,6 +75260,18 @@ false
 ],
 "type": "string"
 },
+"subzone": {
+"description": "Specific subzone in the InterconnectLocation that represents where this connection is to be provisioned.",
+"enum": [
+"SUBZONE_A",
+"SUBZONE_B"
+],
+"enumDescriptions": [
+"Subzone A.",
+"Subzone B."
+],
+"type": "string"
+},
 "wireGroups": {
 "description": "[Output Only] A list of the URLs of all CrossSiteNetwork WireGroups configured to use this Interconnect. The Interconnect cannot be deleted if this list is non-empty.",
 "items": {
@@ -78214,6 +78200,13 @@ false
 "description": "[Output Only] Server-defined URL for this resource with the resource id.",
 "type": "string"
 },
+"singleRegionProductionCriticalPeerLocations": {
+"description": "[Output Only] URLs of the other locations that can pair up with this location to support Single-Region 99.99% SLA. E.g. iad-zone1-1 and iad-zone2-5467 are Single-Region 99.99% peer locations of each other.",
+"items": {
+"type": "string"
+},
+"type": "array"
+},
 "status": {
 "description": "[Output Only] The status of this InterconnectLocation, which can take one of the following values: - CLOSED: The InterconnectLocation is closed and is unavailable for provisioning new Interconnects. - AVAILABLE: The InterconnectLocation is available for provisioning new Interconnects. ",
 "enum": [
@@ -85476,10 +85469,12 @@ false
 "items": {
 "enum": [
 "RDMA_ROCE_POLICY",
+"ULL_POLICY",
 "VPC_POLICY"
 ],
 "enumDescriptions": [
 "",
+"",
 ""
 ],
 "type": "string"
@@ -102787,7 +102782,7 @@ false
 "type": "string"
 },
 "type": {
-"description": "The type indicates the intended use of the security policy. - CLOUD_ARMOR: Cloud Armor backend security policies can be configured to filter incoming HTTP requests targeting backend services. They filter requests before they hit the origin servers. - CLOUD_ARMOR_EDGE: Cloud Armor edge security policies can be configured to filter incoming HTTP requests targeting backend services (including Cloud CDN-enabled) as well as backend buckets (Cloud Storage). They filter requests before the request is served from Google's cache. - CLOUD_ARMOR_INTERNAL_SERVICE: Cloud Armor internal service policies can be configured to filter HTTP requests targeting services managed by Traffic Director in a service mesh. They filter requests before the request is served from the application. - CLOUD_ARMOR_NETWORK: Cloud Armor network policies can be configured to filter packets targeting network load balancing resources such as backend services, target pools, target instances, and instances with external IPs. They filter requests before the request is served from the application. This field can be set only at resource creation time.",
+"description": "The type indicates the intended use of the security policy. - CLOUD_ARMOR: Cloud Armor backend security policies can be configured to filter incoming HTTP requests targeting backend services. They filter requests before they hit the origin servers. - CLOUD_ARMOR_EDGE: Cloud Armor edge security policies can be configured to filter incoming HTTP requests targeting backend services (including Cloud CDN-enabled) as well as backend buckets (Cloud Storage). They filter requests before the request is served from Google's cache. - CLOUD_ARMOR_INTERNAL_SERVICE (preview only): Cloud Armor internal service policies can be configured to filter HTTP requests targeting services managed by Traffic Director in a service mesh. They filter requests before the request is served from the application. - CLOUD_ARMOR_NETWORK: Cloud Armor network policies can be configured to filter packets targeting network load balancing resources such as backend services, target pools, target instances, and instances with external IPs. They filter requests before the request is served from the application. This field can be set only at resource creation time.",
 "enum": [
 "CLOUD_ARMOR",
 "CLOUD_ARMOR_EDGE",
@@ -103288,7 +103283,7 @@ false
 "id": "SecurityPolicyRule",
 "properties": {
 "action": {
-"description": "The Action to perform when the rule is matched. The following are the valid actions: - allow: allow access to target. - deny(STATUS): deny access to target, returns the HTTP response code specified. Valid values for `STATUS` are 403, 404, and 502. - rate_based_ban: limit client traffic to the configured threshold and ban the client if the traffic exceeds the threshold. Configure parameters for this action in RateLimitOptions. Requires rate_limit_options to be set. - redirect: redirect to a different target. This can either be an internal reCAPTCHA redirect, or an external URL-based redirect via a 302 response. Parameters for this action can be configured via redirectOptions. This action is only supported in Global Security Policies of type CLOUD_ARMOR. - throttle: limit client traffic to the configured threshold. Configure parameters for this action in rateLimitOptions. Requires rate_limit_options to be set for this. ",
+"description": "The Action to perform when the rule is matched. The following are the valid actions: - allow: allow access to target. - deny(STATUS): deny access to target, returns the HTTP response code specified. Valid values for `STATUS` are 403, 404, and 502. - rate_based_ban: limit client traffic to the configured threshold and ban the client if the traffic exceeds the threshold. Configure parameters for this action in RateLimitOptions. Requires rate_limit_options to be set. - redirect: redirect to a different target. This can either be an internal reCAPTCHA redirect, or an external URL-based redirect via a 302 response. Parameters for this action can be configured via redirectOptions. This action is only supported in Global Security Policies of type CLOUD_ARMOR. - throttle: limit client traffic to the configured threshold. Configure parameters for this action in rateLimitOptions. Requires rate_limit_options to be set for this. - fairshare (preview only): when traffic reaches the threshold limit, requests from the clients matching this rule begin to be rate-limited using the Fair Share algorithm. This action is only allowed in security policies of type `CLOUD_ARMOR_INTERNAL_SERVICE`. ",
 "type": "string"
 },
 "description": {
@@ -103345,7 +103340,7 @@ false
 },
 "rateLimitOptions": {
 "$ref": "SecurityPolicyRuleRateLimitOptions",
-"description": "Must be specified if the action is \"rate_based_ban\" or \"throttle\". Cannot be specified for any other actions."
+"description": "Must be specified if the action is \"rate_based_ban\" or \"throttle\" or \"fairshare\". Cannot be specified for any other actions."
 },
 "redirectOptions": {
 "$ref": "SecurityPolicyRuleRedirectOptions",
@@ -103747,7 +103742,7 @@ false
 "type": "string"
 },
 "enforceOnKey": {
-"description": "Determines the key to enforce the rate_limit_threshold on. Possible values are: - ALL: A single rate limit threshold is applied to all the requests matching this rule. This is the default value if \"enforceOnKey\" is not configured. - IP: The source IP address of the request is the key. Each IP has this limit enforced separately. - HTTP_HEADER: The value of the HTTP header whose name is configured under \"enforceOnKeyName\". The key value is truncated to the first 128 bytes of the header value. If no such header is present in the request, the key type defaults to ALL. - XFF_IP: The first IP address (i.e. the originating client IP address) specified in the list of IPs under X-Forwarded-For HTTP header. If no such header is present or the value is not a valid IP, the key defaults to the source IP address of the request i.e. key type IP. - HTTP_COOKIE: The value of the HTTP cookie whose name is configured under \"enforceOnKeyName\". The key value is truncated to the first 128 bytes of the cookie value. If no such cookie is present in the request, the key type defaults to ALL. - HTTP_PATH: The URL path of the HTTP request. The key value is truncated to the first 128 bytes. - SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session. - REGION_CODE: The country/region from which the request originates. - TLS_JA3_FINGERPRINT: JA3 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL. - USER_IP: The IP address of the originating client, which is resolved based on \"userIpRequestHeaders\" configured with the security policy. If there is no \"userIpRequestHeaders\" configuration or an IP address cannot be resolved from it, the key type defaults to IP. - TLS_JA4_FINGERPRINT: JA4 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL. ",
+"description": "Determines the key to enforce the rate_limit_threshold on. Possible values are: - ALL: A single rate limit threshold is applied to all the requests matching this rule. This is the default value if \"enforceOnKey\" is not configured. - IP: The source IP address of the request is the key. Each IP has this limit enforced separately. - HTTP_HEADER: The value of the HTTP header whose name is configured under \"enforceOnKeyName\". The key value is truncated to the first 128 bytes of the header value. If no such header is present in the request, the key type defaults to ALL. - XFF_IP: The first IP address (i.e. the originating client IP address) specified in the list of IPs under X-Forwarded-For HTTP header. If no such header is present or the value is not a valid IP, the key defaults to the source IP address of the request i.e. key type IP. - HTTP_COOKIE: The value of the HTTP cookie whose name is configured under \"enforceOnKeyName\". The key value is truncated to the first 128 bytes of the cookie value. If no such cookie is present in the request, the key type defaults to ALL. - HTTP_PATH: The URL path of the HTTP request. The key value is truncated to the first 128 bytes. - SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session. - REGION_CODE: The country/region from which the request originates. - TLS_JA3_FINGERPRINT: JA3 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL. - USER_IP: The IP address of the originating client, which is resolved based on \"userIpRequestHeaders\" configured with the security policy. If there is no \"userIpRequestHeaders\" configuration or an IP address cannot be resolved from it, the key type defaults to IP. - TLS_JA4_FINGERPRINT: JA4 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL. For \"fairshare\" action, this value is limited to ALL i.e. a single rate limit threshold is enforced for all the requests matching the rule.",
 "enum": [
 "ALL",
 "ALL_IPS",
@@ -107319,12 +107314,14 @@ false
 "enum": [
 "COMPATIBLE",
 "CUSTOM",
+"FIPS_202205",
 "MODERN",
 "RESTRICTED"
 ],
 "enumDescriptions": [
 "Compatible profile. Allows the broadset set of clients, even those which support only out-of-date SSL features to negotiate with the load balancer.",
 "Custom profile. Allow only the set of allowed SSL features specified in the customFeatures field.",
+"FIPS complatible profile. Supports a reduced set of SSL features, intended to meet FIPS 140-3 compliance requirements.",
 "Modern profile. Supports a wide set of SSL features, allowing modern clients to negotiate SSL with the load balancer.",
 "Restricted profile. Supports a reduced set of SSL features, intended to meet stricter compliance requirements."
 ],
@@ -111190,7 +111187,7 @@ false
 "type": "object"
 },
 "TargetHttpsProxy": {
-"description": "Represents a Target HTTPS Proxy resource. Google Compute Engine has two Target HTTPS Proxy resources: * [Global](/compute/docs/reference/rest/alpha/targetHttpsProxies) * [Regional](/compute/docs/reference/rest/alpha/regionTargetHttpsProxies) A target HTTPS proxy is a component of Google Cloud HTTPS load balancers. * targetHttpProxies are used by global external Application Load Balancers, classic Application Load Balancers, cross-region internal Application Load Balancers, and Traffic Director. * regionTargetHttpProxies are used by regional internal Application Load Balancers and regional external Application Load Balancers. Forwarding rules reference a target HTTPS proxy, and the target proxy then references a URL map. For more information, read Using Target Proxies and Forwarding rule concepts.",
+"description": "Represents a Target HTTPS Proxy resource. Google Compute Engine has two Target HTTPS Proxy resources: * [Global](/compute/docs/reference/rest/alpha/targetHttpsProxies) * [Regional](/compute/docs/reference/rest/alpha/regionTargetHttpsProxies) A target HTTPS proxy is a component of Google Cloud HTTPS load balancers. * targetHttpsProxies are used by global external Application Load Balancers, classic Application Load Balancers, cross-region internal Application Load Balancers, and Traffic Director. * regionTargetHttpsProxies are used by regional internal Application Load Balancers and regional external Application Load Balancers. Forwarding rules reference a target HTTPS proxy, and the target proxy then references a URL map. For more information, read Using Target Proxies and Forwarding rule concepts.",
 "id": "TargetHttpsProxy",
 "properties": {
 "authentication": {
@@ -114388,6 +114385,7 @@ false
 "FAILURE_MEMORY",
 "FAILURE_NETWORK",
 "FAILURE_NVLINK",
+"FAILURE_REDUNDANT_HARDWARE_FAULT",
 "INFRASTRUCTURE_RELOCATION",
 "MAINTENANCE_REASON_UNKNOWN",
 "PLANNED_NETWORK_UPDATE",
@@ -114403,6 +114401,7 @@ false
 "Maintenance due to memory errors.",
 "Maintenance due to network errors.",
 "Maintenance due to NVLink failure.",
+"Maintenance due to redundant hardware fault.",
 "Maintenance due to infrastructure relocation.",
 "Unknown maintenance reason. Do not use this value.",
 "Maintenance due to planned network update.",