google-api-python-client 2.179.0__py3-none-any.whl → 2.182.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/compute.v1.json

@@ -661,6 +661,52 @@
 "https://www.googleapis.com/auth/cloud-platform",
 "https://www.googleapis.com/auth/compute"
 ]
+},
+"testIamPermissions": {
+"description": "Returns permissions that a caller has on the specified resource.",
+"flatPath": "projects/{project}/regions/{region}/addresses/{resource}/testIamPermissions",
+"httpMethod": "POST",
+"id": "compute.addresses.testIamPermissions",
+"parameterOrder": [
+"project",
+"region",
+"resource"
+],
+"parameters": {
+"project": {
+"description": "Project ID for this request.",
+"location": "path",
+"pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?))",
+"required": true,
+"type": "string"
+},
+"region": {
+"description": "The name of the region for this request.",
+"location": "path",
+"pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?",
+"required": true,
+"type": "string"
+},
+"resource": {
+"description": "Name or id of the resource for this request.",
+"location": "path",
+"pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
+"required": true,
+"type": "string"
+}
+},
+"path": "projects/{project}/regions/{region}/addresses/{resource}/testIamPermissions",
+"request": {
+"$ref": "TestPermissionsRequest"
+},
+"response": {
+"$ref": "TestPermissionsResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/compute",
+"https://www.googleapis.com/auth/compute.readonly"
+]
 }
 }
 },
@@ -5106,6 +5152,44 @@
 "https://www.googleapis.com/auth/cloud-platform",
 "https://www.googleapis.com/auth/compute"
 ]
+},
+"testIamPermissions": {
+"description": "Returns permissions that a caller has on the specified resource.",
+"flatPath": "projects/{project}/global/addresses/{resource}/testIamPermissions",
+"httpMethod": "POST",
+"id": "compute.globalAddresses.testIamPermissions",
+"parameterOrder": [
+"project",
+"resource"
+],
+"parameters": {
+"project": {
+"description": "Project ID for this request.",
+"location": "path",
+"pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?))",
+"required": true,
+"type": "string"
+},
+"resource": {
+"description": "Name or id of the resource for this request.",
+"location": "path",
+"pattern": "[a-z](?:[-a-z0-9_]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
+"required": true,
+"type": "string"
+}
+},
+"path": "projects/{project}/global/addresses/{resource}/testIamPermissions",
+"request": {
+"$ref": "TestPermissionsRequest"
+},
+"response": {
+"$ref": "TestPermissionsResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/compute",
+"https://www.googleapis.com/auth/compute.readonly"
+]
 }
 }
 },
@@ -9539,6 +9623,52 @@
 "https://www.googleapis.com/auth/cloud-platform",
 "https://www.googleapis.com/auth/compute"
 ]
+},
+"testIamPermissions": {
+"description": "Returns permissions that a caller has on the specified resource.",
+"flatPath": "projects/{project}/zones/{zone}/instanceGroups/{resource}/testIamPermissions",
+"httpMethod": "POST",
+"id": "compute.instanceGroups.testIamPermissions",
+"parameterOrder": [
+"project",
+"zone",
+"resource"
+],
+"parameters": {
+"project": {
+"description": "Project ID for this request.",
+"location": "path",
+"pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?))",
+"required": true,
+"type": "string"
+},
+"resource": {
+"description": "Name or id of the resource for this request.",
+"location": "path",
+"pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
+"required": true,
+"type": "string"
+},
+"zone": {
+"description": "The name of the zone for this request.",
+"location": "path",
+"pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?",
+"required": true,
+"type": "string"
+}
+},
+"path": "projects/{project}/zones/{zone}/instanceGroups/{resource}/testIamPermissions",
+"request": {
+"$ref": "TestPermissionsRequest"
+},
+"response": {
+"$ref": "TestPermissionsResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/compute",
+"https://www.googleapis.com/auth/compute.readonly"
+]
 }
 }
 },
@@ -10036,6 +10166,55 @@
 "https://www.googleapis.com/auth/compute"
 ]
 },
+"addNetworkInterface": {
+"description": "Adds one dynamic network interface to an active instance.",
+"flatPath": "projects/{project}/zones/{zone}/instances/{instance}/addNetworkInterface",
+"httpMethod": "POST",
+"id": "compute.instances.addNetworkInterface",
+"parameterOrder": [
+"project",
+"zone",
+"instance"
+],
+"parameters": {
+"instance": {
+"description": "The instance name for this request stored as resource_id. Name should conform to RFC1035 or be an unsigned long integer.",
+"location": "path",
+"required": true,
+"type": "string"
+},
+"project": {
+"description": "Project ID for this request.",
+"location": "path",
+"pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?))",
+"required": true,
+"type": "string"
+},
+"requestId": {
+"description": "An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).",
+"location": "query",
+"type": "string"
+},
+"zone": {
+"description": "The name of the zone for this request.",
+"location": "path",
+"pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?",
+"required": true,
+"type": "string"
+}
+},
+"path": "projects/{project}/zones/{zone}/instances/{instance}/addNetworkInterface",
+"request": {
+"$ref": "NetworkInterface"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/compute"
+]
+},
 "addResourcePolicies": {
 "description": "Adds existing resource policies to an instance. You can only add one policy right now which will be applied to this instance for scheduling live migrations.",
 "flatPath": "projects/{project}/zones/{zone}/instances/{instance}/addResourcePolicies",
@@ -10357,6 +10536,59 @@
 "https://www.googleapis.com/auth/compute"
 ]
 },
+"deleteNetworkInterface": {
+"description": "Deletes one dynamic network interface from an active instance. InstancesDeleteNetworkInterfaceRequest indicates: - instance from which to delete, using project+zone+resource_id fields; - dynamic network interface to be deleted, using network_interface_name field;",
+"flatPath": "projects/{project}/zones/{zone}/instances/{instance}/deleteNetworkInterface",
+"httpMethod": "POST",
+"id": "compute.instances.deleteNetworkInterface",
+"parameterOrder": [
+"project",
+"zone",
+"instance",
+"networkInterfaceName"
+],
+"parameters": {
+"instance": {
+"description": "The instance name for this request stored as resource_id. Name should conform to RFC1035 or be an unsigned long integer.",
+"location": "path",
+"required": true,
+"type": "string"
+},
+"networkInterfaceName": {
+"description": "The name of the dynamic network interface to be deleted from the instance.",
+"location": "query",
+"required": true,
+"type": "string"
+},
+"project": {
+"description": "Project ID for this request.",
+"location": "path",
+"pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?))",
+"required": true,
+"type": "string"
+},
+"requestId": {
+"description": "An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported ( 00000000-0000-0000-0000-000000000000).",
+"location": "query",
+"type": "string"
+},
+"zone": {
+"description": "The name of the zone for this request.",
+"location": "path",
+"pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?",
+"required": true,
+"type": "string"
+}
+},
+"path": "projects/{project}/zones/{zone}/instances/{instance}/deleteNetworkInterface",
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/compute"
+]
+},
 "detachDisk": {
 "description": "Detaches a disk from an instance.",
 "flatPath": "projects/{project}/zones/{zone}/instances/{instance}/detachDisk",
@@ -25273,6 +25505,52 @@
 "https://www.googleapis.com/auth/cloud-platform",
 "https://www.googleapis.com/auth/compute"
 ]
+},
+"testIamPermissions": {
+"description": "Returns permissions that a caller has on the specified resource.",
+"flatPath": "projects/{project}/regions/{region}/instanceGroups/{resource}/testIamPermissions",
+"httpMethod": "POST",
+"id": "compute.regionInstanceGroups.testIamPermissions",
+"parameterOrder": [
+"project",
+"region",
+"resource"
+],
+"parameters": {
+"project": {
+"description": "Project ID for this request.",
+"location": "path",
+"pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?))",
+"required": true,
+"type": "string"
+},
+"region": {
+"description": "The name of the region for this request.",
+"location": "path",
+"pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?",
+"required": true,
+"type": "string"
+},
+"resource": {
+"description": "Name or id of the resource for this request.",
+"location": "path",
+"pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
+"required": true,
+"type": "string"
+}
+},
+"path": "projects/{project}/regions/{region}/instanceGroups/{resource}/testIamPermissions",
+"request": {
+"$ref": "TestPermissionsRequest"
+},
+"response": {
+"$ref": "TestPermissionsResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/compute",
+"https://www.googleapis.com/auth/compute.readonly"
+]
 }
 }
 },
@@ -33063,6 +33341,11 @@
 "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
 "required": true,
 "type": "string"
+},
+"showNatIps": {
+"description": "Indicates whether NAT IPs should be included in the response.",
+"location": "query",
+"type": "boolean"
 }
 },
 "path": "projects/{project}/regions/{region}/serviceAttachments/{serviceAttachment}",
@@ -34591,6 +34874,7 @@
 "storagePool": {
 "description": "Name of the storage pool to delete.",
 "location": "path",
+"pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
 "required": true,
 "type": "string"
 },
@@ -36968,6 +37252,52 @@
 "https://www.googleapis.com/auth/cloud-platform",
 "https://www.googleapis.com/auth/compute"
 ]
+},
+"testIamPermissions": {
+"description": "Returns permissions that a caller has on the specified resource.",
+"flatPath": "projects/{project}/zones/{zone}/targetInstances/{resource}/testIamPermissions",
+"httpMethod": "POST",
+"id": "compute.targetInstances.testIamPermissions",
+"parameterOrder": [
+"project",
+"zone",
+"resource"
+],
+"parameters": {
+"project": {
+"description": "Project ID for this request.",
+"location": "path",
+"pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?))",
+"required": true,
+"type": "string"
+},
+"resource": {
+"description": "Name or id of the resource for this request.",
+"location": "path",
+"pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
+"required": true,
+"type": "string"
+},
+"zone": {
+"description": "The name of the zone for this request.",
+"location": "path",
+"pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?",
+"required": true,
+"type": "string"
+}
+},
+"path": "projects/{project}/zones/{zone}/targetInstances/{resource}/testIamPermissions",
+"request": {
+"$ref": "TestPermissionsRequest"
+},
+"response": {
+"$ref": "TestPermissionsResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/compute",
+"https://www.googleapis.com/auth/compute.readonly"
+]
 }
 }
 },
@@ -37584,6 +37914,52 @@
 "https://www.googleapis.com/auth/cloud-platform",
 "https://www.googleapis.com/auth/compute"
 ]
+},
+"testIamPermissions": {
+"description": "Returns permissions that a caller has on the specified resource.",
+"flatPath": "projects/{project}/regions/{region}/targetPools/{resource}/testIamPermissions",
+"httpMethod": "POST",
+"id": "compute.targetPools.testIamPermissions",
+"parameterOrder": [
+"project",
+"region",
+"resource"
+],
+"parameters": {
+"project": {
+"description": "Project ID for this request.",
+"location": "path",
+"pattern": "(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?))",
+"required": true,
+"type": "string"
+},
+"region": {
+"description": "The name of the region for this request.",
+"location": "path",
+"pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?",
+"required": true,
+"type": "string"
+},
+"resource": {
+"description": "Name or id of the resource for this request.",
+"location": "path",
+"pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?|[1-9][0-9]{0,19}",
+"required": true,
+"type": "string"
+}
+},
+"path": "projects/{project}/regions/{region}/targetPools/{resource}/testIamPermissions",
+"request": {
+"$ref": "TestPermissionsRequest"
+},
+"response": {
+"$ref": "TestPermissionsResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/compute",
+"https://www.googleapis.com/auth/compute.readonly"
+]
 }
 }
 },
@@ -39996,7 +40372,7 @@
 }
 }
 },
-"revision": "20250729",
+"revision": "20250902",
 "rootUrl": "https://compute.googleapis.com/",
 "schemas": {
 "AWSV4Signature": {
@@ -42878,7 +43254,7 @@ false
 "type": "integer"
 },
 "negativeCaching": {
-"description": "Negative caching allows per-status code TTLs to be set, in order to apply fine-grained caching for common errors or redirects. This can reduce the load on your origin and improve end-user experience by reducing response latency. When the cache mode is set to CACHE_ALL_STATIC or USE_ORIGIN_HEADERS, negative caching applies to responses with the specified response code that lack any Cache-Control, Expires, or Pragma: no-cache directives. When the cache mode is set to FORCE_CACHE_ALL, negative caching applies to all responses with the specified response code, and override any caching headers. By default, Cloud CDN will apply the following default TTLs to these status codes: HTTP 300 (Multiple Choice), 301, 308 (Permanent Redirects): 10m HTTP 404 (Not Found), 410 (Gone), 451 (Unavailable For Legal Reasons): 120s HTTP 405 (Method Not Found), 421 (Misdirected Request), 501 (Not Implemented): 60s. These defaults can be overridden in negative_caching_policy.",
+"description": "Negative caching allows per-status code TTLs to be set, in order to apply fine-grained caching for common errors or redirects. This can reduce the load on your origin and improve end-user experience by reducing response latency. When the cache mode is set to CACHE_ALL_STATIC or USE_ORIGIN_HEADERS, negative caching applies to responses with the specified response code that lack any Cache-Control, Expires, or Pragma: no-cache directives. When the cache mode is set to FORCE_CACHE_ALL, negative caching applies to all responses with the specified response code, and override any caching headers. By default, Cloud CDN will apply the following default TTLs to these status codes: HTTP 300 (Multiple Choice), 301, 308 (Permanent Redirects): 10m HTTP 404 (Not Found), 410 (Gone), 451 (Unavailable For Legal Reasons): 120s HTTP 405 (Method Not Found), 501 (Not Implemented): 60s. These defaults can be overridden in negative_caching_policy.",
 "type": "boolean"
 },
 "negativeCachingPolicy": {
@@ -43341,7 +43717,7 @@ false
 "type": "array"
 },
 "localityLbPolicy": {
-"description": "The load balancing algorithm used within the scope of the locality. The possible values are: - ROUND_ROBIN: This is a simple policy in which each healthy backend is selected in round robin order. This is the default. - LEAST_REQUEST: An O(1) algorithm which selects two random healthy hosts and picks the host which has fewer active requests. - RING_HASH: The ring/modulo hash load balancer implements consistent hashing to backends. The algorithm has the property that the addition/removal of a host from a set of N hosts only affects 1/N of the requests. - RANDOM: The load balancer selects a random healthy host. - ORIGINAL_DESTINATION: Backend host is selected based on the client connection metadata, i.e., connections are opened to the same address as the destination address of the incoming connection before the connection was redirected to the load balancer. - MAGLEV: used as a drop in replacement for the ring hash load balancer. Maglev is not as stable as ring hash but has faster table lookup build times and host selection times. For more information about Maglev, see https://ai.google/research/pubs/pub44824 - WEIGHTED_ROUND_ROBIN: Per-endpoint Weighted Round Robin Load Balancing using weights computed from Backend reported Custom Metrics. If set, the Backend Service responses are expected to contain non-standard HTTP response header field Endpoint-Load-Metrics. The reported metrics to use for computing the weights are specified via the customMetrics field. This field is applicable to either: - A regional backend service with the service_protocol set to HTTP, HTTPS, HTTP2 or H2C, and load_balancing_scheme set to INTERNAL_MANAGED. - A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED, INTERNAL_MANAGED, or EXTERNAL_MANAGED. If sessionAffinity is not configured\u2014that is, if session affinity remains at the default value of NONE\u2014then the default value for localityLbPolicy is ROUND_ROBIN. If session affinity is set to a value other than NONE, then the default value for localityLbPolicy is MAGLEV. Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced by a URL map that is bound to target gRPC proxy that has validateForProxyless field set to true. localityLbPolicy cannot be specified with haPolicy.",
+"description": "The load balancing algorithm used within the scope of the locality. The possible values are: - ROUND_ROBIN: This is a simple policy in which each healthy backend is selected in round robin order. This is the default. - LEAST_REQUEST: An O(1) algorithm which selects two random healthy hosts and picks the host which has fewer active requests. - RING_HASH: The ring/modulo hash load balancer implements consistent hashing to backends. The algorithm has the property that the addition/removal of a host from a set of N hosts only affects 1/N of the requests. - RANDOM: The load balancer selects a random healthy host. - ORIGINAL_DESTINATION: Backend host is selected based on the client connection metadata, i.e., connections are opened to the same address as the destination address of the incoming connection before the connection was redirected to the load balancer. - MAGLEV: used as a drop in replacement for the ring hash load balancer. Maglev is not as stable as ring hash but has faster table lookup build times and host selection times. For more information about Maglev, see Maglev: A Fast and Reliable Software Network Load Balancer. - WEIGHTED_ROUND_ROBIN: Per-endpoint Weighted Round Robin Load Balancing using weights computed from Backend reported Custom Metrics. If set, the Backend Service responses are expected to contain non-standard HTTP response header field Endpoint-Load-Metrics. The reported metrics to use for computing the weights are specified via the customMetrics field. This field is applicable to either: - A regional backend service with the service_protocol set to HTTP, HTTPS, HTTP2 or H2C, and load_balancing_scheme set to INTERNAL_MANAGED. - A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED, INTERNAL_MANAGED, or EXTERNAL_MANAGED. If sessionAffinity is not configured\u2014that is, if session affinity remains at the default value of NONE\u2014then the default value for localityLbPolicy is ROUND_ROBIN. If session affinity is set to a value other than NONE, then the default value for localityLbPolicy is MAGLEV. Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced by a URL map that is bound to target gRPC proxy that has validateForProxyless field set to true. localityLbPolicy cannot be specified with haPolicy.",
 "enum": [
 "INVALID_LB_POLICY",
 "LEAST_REQUEST",
@@ -43350,17 +43726,19 @@ false
 "RANDOM",
 "RING_HASH",
 "ROUND_ROBIN",
+"WEIGHTED_GCP_RENDEZVOUS",
 "WEIGHTED_MAGLEV",
 "WEIGHTED_ROUND_ROBIN"
 ],
 "enumDescriptions": [
 "",
 "An O(1) algorithm which selects two random healthy hosts and picks the host which has fewer active requests.",
-"This algorithm implements consistent hashing to backends. Maglev can be used as a drop in replacement for the ring hash load balancer. Maglev is not as stable as ring hash but has faster table lookup build times and host selection times. For more information about Maglev, see https://ai.google/research/pubs/pub44824",
+"This algorithm implements consistent hashing to backends. Maglev can be used as a drop in replacement for the ring hash load balancer. Maglev is not as stable as ring hash but has faster table lookup build times and host selection times. For more information about Maglev, see Maglev: A Fast and Reliable Software Network Load Balancer.",
 "Backend host is selected based on the client connection metadata, i.e., connections are opened to the same address as the destination address of the incoming connection before the connection was redirected to the load balancer.",
 "The load balancer selects a random healthy host.",
 "The ring/modulo hash load balancer implements consistent hashing to backends. The algorithm has the property that the addition/removal of a host from a set of N hosts only affects 1/N of the requests.",
 "This is a simple policy in which each healthy backend is selected in round robin order. This is the default.",
+"Per-instance weighted Load Balancing via health check reported weights. In internal passthrough network load balancing, it is weighted rendezvous hashing. This option is only supported in internal passthrough network load balancing.",
 "Per-instance weighted Load Balancing via health check reported weights. If set, the Backend Service must configure a non legacy HTTP-based Health Check, and health check replies are expected to contain non-standard HTTP response header field X-Load-Balancing-Endpoint-Weight to specify the per-instance weights. If set, Load Balancing is weighted based on the per-instance weights reported in the last processed health check replies, as long as every instance either reported a valid weight or had UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains equal-weight. This option is only supported in Network Load Balancing.",
 "Per-endpoint weighted round-robin Load Balancing using weights computed from Backend reported Custom Metrics. If set, the Backend Service responses are expected to contain non-standard HTTP response header field Endpoint-Load-Metrics. The reported metrics to use for computing the weights are specified via the customMetrics fields."
 ],
@@ -43458,7 +43836,7 @@ false
 "type": "array"
 },
 "serviceLbPolicy": {
-"description": "URL to networkservices.ServiceLbPolicy resource. Can only be set if load balancing scheme is EXTERNAL, EXTERNAL_MANAGED, INTERNAL_MANAGED or INTERNAL_SELF_MANAGED and the scope is global.",
+"description": "URL to networkservices.ServiceLbPolicy resource. Can only be set if load balancing scheme is EXTERNAL_MANAGED, INTERNAL_MANAGED or INTERNAL_SELF_MANAGED and the scope is global.",
 "type": "string"
 },
 "sessionAffinity": {
@@ -43724,7 +44102,7 @@ false
 "type": "integer"
 },
 "negativeCaching": {
-"description": "Negative caching allows per-status code TTLs to be set, in order to apply fine-grained caching for common errors or redirects. This can reduce the load on your origin and improve end-user experience by reducing response latency. When the cache mode is set to CACHE_ALL_STATIC or USE_ORIGIN_HEADERS, negative caching applies to responses with the specified response code that lack any Cache-Control, Expires, or Pragma: no-cache directives. When the cache mode is set to FORCE_CACHE_ALL, negative caching applies to all responses with the specified response code, and override any caching headers. By default, Cloud CDN will apply the following default TTLs to these status codes: HTTP 300 (Multiple Choice), 301, 308 (Permanent Redirects): 10m HTTP 404 (Not Found), 410 (Gone), 451 (Unavailable For Legal Reasons): 120s HTTP 405 (Method Not Found), 421 (Misdirected Request), 501 (Not Implemented): 60s. These defaults can be overridden in negative_caching_policy.",
+"description": "Negative caching allows per-status code TTLs to be set, in order to apply fine-grained caching for common errors or redirects. This can reduce the load on your origin and improve end-user experience by reducing response latency. When the cache mode is set to CACHE_ALL_STATIC or USE_ORIGIN_HEADERS, negative caching applies to responses with the specified response code that lack any Cache-Control, Expires, or Pragma: no-cache directives. When the cache mode is set to FORCE_CACHE_ALL, negative caching applies to all responses with the specified response code, and override any caching headers. By default, Cloud CDN will apply the following default TTLs to these status codes: HTTP 300 (Multiple Choice), 301, 308 (Permanent Redirects): 10m HTTP 404 (Not Found), 410 (Gone), 451 (Unavailable For Legal Reasons): 120s HTTP 405 (Method Not Found), 501 (Not Implemented): 60s. These defaults can be overridden in negative_caching_policy.",
 "type": "boolean"
 },
 "negativeCachingPolicy": {
@@ -44330,17 +44708,19 @@ false
 "RANDOM",
 "RING_HASH",
 "ROUND_ROBIN",
+"WEIGHTED_GCP_RENDEZVOUS",
 "WEIGHTED_MAGLEV",
 "WEIGHTED_ROUND_ROBIN"
 ],
 "enumDescriptions": [
 "",
 "An O(1) algorithm which selects two random healthy hosts and picks the host which has fewer active requests.",
-"This algorithm implements consistent hashing to backends. Maglev can be used as a drop in replacement for the ring hash load balancer. Maglev is not as stable as ring hash but has faster table lookup build times and host selection times. For more information about Maglev, see https://ai.google/research/pubs/pub44824",
+"This algorithm implements consistent hashing to backends. Maglev can be used as a drop in replacement for the ring hash load balancer. Maglev is not as stable as ring hash but has faster table lookup build times and host selection times. For more information about Maglev, see Maglev: A Fast and Reliable Software Network Load Balancer.",
 "Backend host is selected based on the client connection metadata, i.e., connections are opened to the same address as the destination address of the incoming connection before the connection was redirected to the load balancer.",
 "The load balancer selects a random healthy host.",
 "The ring/modulo hash load balancer implements consistent hashing to backends. The algorithm has the property that the addition/removal of a host from a set of N hosts only affects 1/N of the requests.",
 "This is a simple policy in which each healthy backend is selected in round robin order. This is the default.",
+"Per-instance weighted Load Balancing via health check reported weights. In internal passthrough network load balancing, it is weighted rendezvous hashing. This option is only supported in internal passthrough network load balancing.",
 "Per-instance weighted Load Balancing via health check reported weights. If set, the Backend Service must configure a non legacy HTTP-based Health Check, and health check replies are expected to contain non-standard HTTP response header field X-Load-Balancing-Endpoint-Weight to specify the per-instance weights. If set, Load Balancing is weighted based on the per-instance weights reported in the last processed health check replies, as long as every instance either reported a valid weight or had UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains equal-weight. This option is only supported in Network Load Balancing.",
 "Per-endpoint weighted round-robin Load Balancing using weights computed from Backend reported Custom Metrics. If set, the Backend Service responses are expected to contain non-standard HTTP response header field Endpoint-Load-Metrics. The reported metrics to use for computing the weights are specified via the customMetrics fields."
 ],
@@ -52842,6 +53222,7 @@ false
 "description": "[Output Only] The status of the instance. One of the following values: PROVISIONING, STAGING, RUNNING, STOPPING, SUSPENDING, SUSPENDED, REPAIRING, and TERMINATED. For more information about the status of the instance, see Instance life cycle.",
 "enum": [
 "DEPROVISIONING",
+"PENDING",
 "PROVISIONING",
 "REPAIRING",
 "RUNNING",
@@ -52854,6 +53235,7 @@ false
 ],
 "enumDescriptions": [
 "The instance is halted and we are performing tear down tasks like network deprogramming, releasing quota, IP, tearing down disks etc.",
+"For Flex Start provisioning instance is waiting for available capacity from Dynamic Workload Scheduler (DWS).",
 "Resources are being allocated for the instance.",
 "The instance is in repair.",
 "The instance is running.",
@@ -55984,6 +56366,10 @@ false
 "description": "Additional instance params.",
 "id": "InstanceParams",
 "properties": {
+"requestValidForDuration": {
+"$ref": "Duration",
+"description": "Relative deadline for waiting for capacity. Relevant only for Instances.Insert API."
+},
 "resourceManagerTags": {
 "additionalProperties": {
 "type": "string"
@@ -56725,6 +57111,7 @@ false
 "description": "[Output Only] The status of the instance.",
 "enum": [
 "DEPROVISIONING",
+"PENDING",
 "PROVISIONING",
 "REPAIRING",
 "RUNNING",
@@ -56737,6 +57124,7 @@ false
 ],
 "enumDescriptions": [
 "The instance is halted and we are performing tear down tasks like network deprogramming, releasing quota, IP, tearing down disks etc.",
+"For Flex Start provisioning instance is waiting for available capacity from Dynamic Workload Scheduler (DWS).",
 "Resources are being allocated for the instance.",
 "The instance is in repair.",
 "The instance is running.",
@@ -59062,7 +59450,7 @@ false
 "type": "string"
 },
 "status": {
-"description": "Whether this Attachment is active, and if so, whether BGP is up. This is based on the statuses available in the Pantheon UI here: http://google3/java/com/google/cloud/boq/clientapi/gce/hybrid/api/interconnect_models.proto",
+"description": "Whether this Attachment is active, and if so, whether BGP is up.",
 "enum": [
 "ATTACHMENT_STATUS_UNKNOWN",
 "CONNECTION_DISABLED",
@@ -62611,6 +62999,7 @@ false
 "description": "[Output Only] The status of the instance. This field is empty when the instance does not exist.",
 "enum": [
 "DEPROVISIONING",
+"PENDING",
 "PROVISIONING",
 "REPAIRING",
 "RUNNING",
@@ -62623,6 +63012,7 @@ false
 ],
 "enumDescriptions": [
 "The instance is halted and we are performing tear down tasks like network deprogramming, releasing quota, IP, tearing down disks etc.",
+"For Flex Start provisioning instance is waiting for available capacity from Dynamic Workload Scheduler (DWS).",
 "Resources are being allocated for the instance.",
 "The instance is in repair.",
 "The instance is running.",
@@ -65165,6 +65555,10 @@ false
 ],
 "type": "string"
 },
+"parentNicName": {
+"description": "Name of the parent network interface of a dynamic network interface.",
+"type": "string"
+},
 "queueCount": {
 "description": "The networking queue count that's specified by users for the network interface. Both Rx and Tx queues will be set to this number. It'll be empty if not specified by the users.",
 "format": "int32",
@@ -65187,6 +65581,11 @@ false
 "subnetwork": {
 "description": "The URL of the Subnetwork resource for this instance. If the network resource is in legacy mode, do not specify this field. If the network is in auto subnet mode, specifying the subnetwork is optional. If the network is in custom subnet mode, specifying the subnetwork is required. If you specify this field, you can specify the subnetwork as a full or partial URL. For example, the following are all valid URLs: - https://www.googleapis.com/compute/v1/projects/project/regions/region /subnetworks/subnetwork - regions/region/subnetworks/subnetwork ",
 "type": "string"
+},
+"vlan": {
+"description": "VLAN tag of a dynamic network interface, must be an integer in the range from 2 to 255 inclusively.",
+"format": "int32",
+"type": "integer"
 }
 },
 "type": "object"
@@ -65604,6 +66003,10 @@ false
 "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?",
 "type": "string"
 },
+"profileType": {
+"$ref": "NetworkProfileProfileType",
+"description": "[Output Only] Type of the network profile."
+},
 "selfLink": {
 "description": "[Output Only] Server-defined URL for the resource.",
 "type": "string"
@@ -66031,6 +66434,56 @@ false
 },
 "type": "object"
 },
+"NetworkProfileProfileType": {
+"id": "NetworkProfileProfileType",
+"properties": {
+"networkType": {
+"enum": [
+"RDMA",
+"ULL",
+"VPC"
+],
+"enumDescriptions": [
+"RDMA network.",
+"ULL network.",
+"VPC network."
+],
+"type": "string"
+},
+"rdmaSubtype": {
+"enum": [
+"FALCON",
+"ROCE"
+],
+"enumDescriptions": [
+"RDMA over Falcon.",
+"RDMA over Converged Ethernet (RoCE)."
+],
+"type": "string"
+},
+"ullSubtype": {
+"enum": [
+"OPERATOR",
+"PARTICIPANT"
+],
+"enumDescriptions": [
+"Exchange operator.",
+"Exchange participant."
+],
+"type": "string"
+},
+"vpcSubtype": {
+"enum": [
+"REGIONAL"
+],
+"enumDescriptions": [
+"Regionally bound VPC network."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "NetworkProfilesListResponse": {
 "description": "Contains a list of network profiles.",
 "id": "NetworkProfilesListResponse",
@@ -76044,6 +76497,10 @@ false
 "description": "Contains output only fields. Use this sub-message for actual values set on Instance attributes as compared to the value requested by the user (intent) in their instance CRUD calls.",
 "id": "ResourceStatus",
 "properties": {
+"effectiveInstanceMetadata": {
+"$ref": "ResourceStatusEffectiveInstanceMetadata",
+"description": "[Output Only] Effective metadata is a field that consolidates project, zonal instance settings, and instance-level predefined metadata keys to provide the overridden value for those metadata keys at the instance level."
+},
 "physicalHost": {
 "description": "[Output Only] The precise location of your instance within the zone's data center, including the block, sub-block, and host. The field is formatted as follows: blockId/subBlockId/hostId.",
 "type": "string"
@@ -76061,6 +76518,45 @@ false
 },
 "type": "object"
 },
+"ResourceStatusEffectiveInstanceMetadata": {
+"description": "Effective values of predefined metadata keys for an instance.",
+"id": "ResourceStatusEffectiveInstanceMetadata",
+"properties": {
+"blockProjectSshKeysMetadataValue": {
+"description": "Effective block-project-ssh-keys value at Instance level.",
+"type": "boolean"
+},
+"enableGuestAttributesMetadataValue": {
+"description": "Effective enable-guest-attributes value at Instance level.",
+"type": "boolean"
+},
+"enableOsInventoryMetadataValue": {
+"description": "Effective enable-os-inventory value at Instance level.",
+"type": "boolean"
+},
+"enableOsconfigMetadataValue": {
+"description": "Effective enable-osconfig value at Instance level.",
+"type": "boolean"
+},
+"enableOsloginMetadataValue": {
+"description": "Effective enable-oslogin value at Instance level.",
+"type": "boolean"
+},
+"serialPortEnableMetadataValue": {
+"description": "Effective serial-port-enable value at Instance level.",
+"type": "boolean"
+},
+"serialPortLoggingEnableMetadataValue": {
+"description": "Effective serial-port-logging-enable value at Instance level.",
+"type": "boolean"
+},
+"vmDnsSettingMetadataValue": {
+"description": "Effective VM DNS setting at Instance level.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "ResourceStatusPhysicalHostTopology": {
 "description": "Represents the physical host topology of the host on which the VM is running.",
 "id": "ResourceStatusPhysicalHostTopology",
@@ -76731,6 +77227,10 @@ false
 "description": "URI of the network to which this router belongs.",
 "type": "string"
 },
+"params": {
+"$ref": "RouterParams",
+"description": "Input only. [Input Only] Additional params passed with the request, but not persisted as part of resource payload."
+},
 "region": {
 "description": "[Output Only] URI of the region where the router resides. You must specify this field as part of the HTTP request URL. It is not settable as a field in the request body.",
 "type": "string"
@@ -77727,6 +78227,20 @@ false
 },
 "type": "object"
 },
+"RouterParams": {
+"description": "Additional router parameters.",
+"id": "RouterParams",
+"properties": {
+"resourceManagerTags": {
+"additionalProperties": {
+"type": "string"
+},
+"description": "Tag keys/values directly bound to this resource. The field is allowed for INSERT only. The keys/values to set on the resource should be specified in either ID { : } or Namespaced format { : }. For example the following are valid inputs: * {\"tagKeys/333\" : \"tagValues/444\", \"tagKeys/123\" : \"tagValues/456\"} * {\"123/environment\" : \"production\", \"345/abc\" : \"xyz\"} Note: * Invalid combinations of ID & namespaced format is not supported. For instance: {\"123/environment\" : \"tagValues/444\"} is invalid. * Inconsistent format is not supported. For instance: {\"tagKeys/333\" : \"tagValues/444\", \"123/env\" : \"prod\"} is invalid.",
+"type": "object"
+}
+},
+"type": "object"
+},
 "RouterStatus": {
 "id": "RouterStatus",
 "properties": {
@@ -78788,17 +79302,23 @@ false
 "provisioningModel": {
 "description": "Specifies the provisioning model of the instance.",
 "enum": [
+"FLEX_START",
 "RESERVATION_BOUND",
 "SPOT",
 "STANDARD"
 ],
 "enumDescriptions": [
+"Instance is provisioned using the Flex Start provisioning model and has a limited runtime.",
 "Bound to the lifecycle of the reservation in which it is provisioned.",
 "Heavily discounted, no guaranteed runtime.",
 "Standard provisioning with user controlled runtime, no discounts."
 ],
 "type": "string"
 },
+"skipGuestOsShutdown": {
+"description": "Default is false and there will be 120 seconds between GCE ACPI G2 Soft Off and ACPI G3 Mechanical Off for Standard VMs and 30 seconds for Spot VMs.",
+"type": "boolean"
+},
 "terminationTime": {
 "description": "Specifies the timestamp, when the instance will be terminated, in RFC3339 text format. If specified, the instance termination action will be performed at the termination time.",
 "type": "string"
@@ -79257,7 +79777,7 @@ false
 "type": "string"
 },
 "type": {
-"description": "The type indicates the intended use of the security policy. - CLOUD_ARMOR: Cloud Armor backend security policies can be configured to filter incoming HTTP requests targeting backend services. They filter requests before they hit the origin servers. - CLOUD_ARMOR_EDGE: Cloud Armor edge security policies can be configured to filter incoming HTTP requests targeting backend services (including Cloud CDN-enabled) as well as backend buckets (Cloud Storage). They filter requests before the request is served from Google's cache. - CLOUD_ARMOR_INTERNAL_SERVICE: Cloud Armor internal service policies can be configured to filter HTTP requests targeting services managed by Traffic Director in a service mesh. They filter requests before the request is served from the application. - CLOUD_ARMOR_NETWORK: Cloud Armor network policies can be configured to filter packets targeting network load balancing resources such as backend services, target pools, target instances, and instances with external IPs. They filter requests before the request is served from the application. This field can be set only at resource creation time.",
+"description": "The type indicates the intended use of the security policy. - CLOUD_ARMOR: Cloud Armor backend security policies can be configured to filter incoming HTTP requests targeting backend services. They filter requests before they hit the origin servers. - CLOUD_ARMOR_EDGE: Cloud Armor edge security policies can be configured to filter incoming HTTP requests targeting backend services (including Cloud CDN-enabled) as well as backend buckets (Cloud Storage). They filter requests before the request is served from Google's cache. - CLOUD_ARMOR_INTERNAL_SERVICE (preview only): Cloud Armor internal service policies can be configured to filter HTTP requests targeting services managed by Traffic Director in a service mesh. They filter requests before the request is served from the application. - CLOUD_ARMOR_NETWORK: Cloud Armor network policies can be configured to filter packets targeting network load balancing resources such as backend services, target pools, target instances, and instances with external IPs. They filter requests before the request is served from the application. This field can be set only at resource creation time.",
 "enum": [
 "CLOUD_ARMOR",
 "CLOUD_ARMOR_EDGE",
@@ -79643,7 +80163,7 @@ false
 "id": "SecurityPolicyRule",
 "properties": {
 "action": {
-"description": "The Action to perform when the rule is matched. The following are the valid actions: - allow: allow access to target. - deny(STATUS): deny access to target, returns the HTTP response code specified. Valid values for `STATUS` are 403, 404, and 502. - rate_based_ban: limit client traffic to the configured threshold and ban the client if the traffic exceeds the threshold. Configure parameters for this action in RateLimitOptions. Requires rate_limit_options to be set. - redirect: redirect to a different target. This can either be an internal reCAPTCHA redirect, or an external URL-based redirect via a 302 response. Parameters for this action can be configured via redirectOptions. This action is only supported in Global Security Policies of type CLOUD_ARMOR. - throttle: limit client traffic to the configured threshold. Configure parameters for this action in rateLimitOptions. Requires rate_limit_options to be set for this. ",
+"description": "The Action to perform when the rule is matched. The following are the valid actions: - allow: allow access to target. - deny(STATUS): deny access to target, returns the HTTP response code specified. Valid values for `STATUS` are 403, 404, and 502. - rate_based_ban: limit client traffic to the configured threshold and ban the client if the traffic exceeds the threshold. Configure parameters for this action in RateLimitOptions. Requires rate_limit_options to be set. - redirect: redirect to a different target. This can either be an internal reCAPTCHA redirect, or an external URL-based redirect via a 302 response. Parameters for this action can be configured via redirectOptions. This action is only supported in Global Security Policies of type CLOUD_ARMOR. - throttle: limit client traffic to the configured threshold. Configure parameters for this action in rateLimitOptions. Requires rate_limit_options to be set for this. - fairshare (preview only): when traffic reaches the threshold limit, requests from the clients matching this rule begin to be rate-limited using the Fair Share algorithm. This action is only allowed in security policies of type `CLOUD_ARMOR_INTERNAL_SERVICE`. ",
 "type": "string"
 },
 "description": {
@@ -79682,7 +80202,7 @@ false
 },
 "rateLimitOptions": {
 "$ref": "SecurityPolicyRuleRateLimitOptions",
-"description": "Must be specified if the action is \"rate_based_ban\" or \"throttle\". Cannot be specified for any other actions."
+"description": "Must be specified if the action is \"rate_based_ban\" or \"throttle\" or \"fairshare\". Cannot be specified for any other actions."
 },
 "redirectOptions": {
 "$ref": "SecurityPolicyRuleRedirectOptions",
@@ -79728,7 +80248,7 @@ false
 },
 "expr": {
 "$ref": "Expr",
-"description": "User defined CEVAL expression. A CEVAL expression is used to specify match criteria such as origin.ip, source.region_code and contents in the request header. Expressions containing `evaluateThreatIntelligence` require Cloud Armor Managed Protection Plus tier and are not supported in Edge Policies nor in Regional Policies. Expressions containing `evaluatePreconfiguredExpr('sourceiplist-*')` require Cloud Armor Managed Protection Plus tier and are only supported in Global Security Policies."
+"description": "User defined CEVAL expression. A CEVAL expression is used to specify match criteria such as origin.ip, source.region_code and contents in the request header. Expressions containing `evaluateThreatIntelligence` require a Cloud Armor Enterprise subscription and are not supported in Edge Policies nor in Regional Policies. Expressions containing `evaluatePreconfiguredExpr('sourceiplist-*')` require a Cloud Armor Enterprise subscription and are only supported in Global Security Policies."
 },
 "exprOptions": {
 "$ref": "SecurityPolicyRuleMatcherExprOptions",
@@ -79974,7 +80494,7 @@ false
 "type": "string"
 },
 "enforceOnKey": {
-"description": "Determines the key to enforce the rate_limit_threshold on. Possible values are: - ALL: A single rate limit threshold is applied to all the requests matching this rule. This is the default value if \"enforceOnKey\" is not configured. - IP: The source IP address of the request is the key. Each IP has this limit enforced separately. - HTTP_HEADER: The value of the HTTP header whose name is configured under \"enforceOnKeyName\". The key value is truncated to the first 128 bytes of the header value. If no such header is present in the request, the key type defaults to ALL. - XFF_IP: The first IP address (i.e. the originating client IP address) specified in the list of IPs under X-Forwarded-For HTTP header. If no such header is present or the value is not a valid IP, the key defaults to the source IP address of the request i.e. key type IP. - HTTP_COOKIE: The value of the HTTP cookie whose name is configured under \"enforceOnKeyName\". The key value is truncated to the first 128 bytes of the cookie value. If no such cookie is present in the request, the key type defaults to ALL. - HTTP_PATH: The URL path of the HTTP request. The key value is truncated to the first 128 bytes. - SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session. - REGION_CODE: The country/region from which the request originates. - TLS_JA3_FINGERPRINT: JA3 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL. - USER_IP: The IP address of the originating client, which is resolved based on \"userIpRequestHeaders\" configured with the security policy. If there is no \"userIpRequestHeaders\" configuration or an IP address cannot be resolved from it, the key type defaults to IP. - TLS_JA4_FINGERPRINT: JA4 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL. ",
+"description": "Determines the key to enforce the rate_limit_threshold on. Possible values are: - ALL: A single rate limit threshold is applied to all the requests matching this rule. This is the default value if \"enforceOnKey\" is not configured. - IP: The source IP address of the request is the key. Each IP has this limit enforced separately. - HTTP_HEADER: The value of the HTTP header whose name is configured under \"enforceOnKeyName\". The key value is truncated to the first 128 bytes of the header value. If no such header is present in the request, the key type defaults to ALL. - XFF_IP: The first IP address (i.e. the originating client IP address) specified in the list of IPs under X-Forwarded-For HTTP header. If no such header is present or the value is not a valid IP, the key defaults to the source IP address of the request i.e. key type IP. - HTTP_COOKIE: The value of the HTTP cookie whose name is configured under \"enforceOnKeyName\". The key value is truncated to the first 128 bytes of the cookie value. If no such cookie is present in the request, the key type defaults to ALL. - HTTP_PATH: The URL path of the HTTP request. The key value is truncated to the first 128 bytes. - SNI: Server name indication in the TLS session of the HTTPS request. The key value is truncated to the first 128 bytes. The key type defaults to ALL on a HTTP session. - REGION_CODE: The country/region from which the request originates. - TLS_JA3_FINGERPRINT: JA3 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL. - USER_IP: The IP address of the originating client, which is resolved based on \"userIpRequestHeaders\" configured with the security policy. If there is no \"userIpRequestHeaders\" configuration or an IP address cannot be resolved from it, the key type defaults to IP. - TLS_JA4_FINGERPRINT: JA4 TLS/SSL fingerprint if the client connects using HTTPS, HTTP/2 or HTTP/3. If not available, the key type defaults to ALL. For \"fairshare\" action, this value is limited to ALL i.e. a single rate limit threshold is enforced for all the requests matching the rule.",
 "enum": [
 "ALL",
 "HTTP_COOKIE",
@@ -80541,6 +81061,13 @@ false
 "description": "The url of a connected endpoint.",
 "type": "string"
 },
+"natIps": {
+"description": "NAT IPs of the connected PSC endpoint and those of other endpoints propagated from it.",
+"items": {
+"type": "string"
+},
+"type": "array"
+},
 "propagatedConnectionCount": {
 "description": "The number of consumer Network Connectivity Center spokes that the connected Private Service Connect endpoint has propagated to.",
 "format": "uint32",
@@ -86210,7 +86737,7 @@ false
 "type": "object"
 },
 "TargetHttpsProxy": {
-"description": "Represents a Target HTTPS Proxy resource. Google Compute Engine has two Target HTTPS Proxy resources: * [Global](/compute/docs/reference/rest/v1/targetHttpsProxies) * [Regional](/compute/docs/reference/rest/v1/regionTargetHttpsProxies) A target HTTPS proxy is a component of Google Cloud HTTPS load balancers. * targetHttpProxies are used by global external Application Load Balancers, classic Application Load Balancers, cross-region internal Application Load Balancers, and Traffic Director. * regionTargetHttpProxies are used by regional internal Application Load Balancers and regional external Application Load Balancers. Forwarding rules reference a target HTTPS proxy, and the target proxy then references a URL map. For more information, read Using Target Proxies and Forwarding rule concepts.",
+"description": "Represents a Target HTTPS Proxy resource. Google Compute Engine has two Target HTTPS Proxy resources: * [Global](/compute/docs/reference/rest/v1/targetHttpsProxies) * [Regional](/compute/docs/reference/rest/v1/regionTargetHttpsProxies) A target HTTPS proxy is a component of Google Cloud HTTPS load balancers. * targetHttpsProxies are used by global external Application Load Balancers, classic Application Load Balancers, cross-region internal Application Load Balancers, and Traffic Director. * regionTargetHttpsProxies are used by regional internal Application Load Balancers and regional external Application Load Balancers. Forwarding rules reference a target HTTPS proxy, and the target proxy then references a URL map. For more information, read Using Target Proxies and Forwarding rule concepts.",
 "id": "TargetHttpsProxy",
 "properties": {
 "authorizationPolicy": {
@@ -89240,6 +89767,8 @@ false
 "enum": [
 "FAILURE_DISK",
 "FAILURE_GPU",
+"FAILURE_GPU_MULTIPLE_FAULTY_HOSTS_CUSTOMER_REPORTED",
+"FAILURE_GPU_NVLINK_SWITCH_CUSTOMER_REPORTED",
 "FAILURE_GPU_TEMPERATURE",
 "FAILURE_GPU_XID",
 "FAILURE_INFRA",
@@ -89247,6 +89776,7 @@ false
 "FAILURE_MEMORY",
 "FAILURE_NETWORK",
 "FAILURE_NVLINK",
+"FAILURE_REDUNDANT_HARDWARE_FAULT",
 "INFRASTRUCTURE_RELOCATION",
 "MAINTENANCE_REASON_UNKNOWN",
 "PLANNED_NETWORK_UPDATE",
@@ -89255,6 +89785,8 @@ false
 "enumDescriptions": [
 "Maintenance due to disk errors.",
 "Maintenance due to GPU errors.",
+"Maintenance due to customer reported multiple faulty hosts via R&R Subblock API.",
+"Maintenance due to customer reported NVLink switch failure via R&R Subblock API.",
 "Maintenance due to high GPU temperature.",
 "Maintenance due to GPU xid failure.",
 "Maintenance due to infrastructure errors.",
@@ -89262,6 +89794,7 @@ false
 "Maintenance due to memory errors.",
 "Maintenance due to network errors.",
 "Maintenance due to NVLink failure.",
+"Maintenance due to redundant hardware fault.",
 "Maintenance due to infrastructure relocation.",
 "Unknown maintenance reason. Do not use this value.",
 "Maintenance due to planned network update.",
@@ -91218,6 +91751,10 @@ false
 "description": "Represents a Cloud VPN Tunnel resource. For more information about VPN, read the the Cloud VPN Overview.",
 "id": "VpnTunnel",
 "properties": {
+"cipherSuite": {
+"$ref": "VpnTunnelCipherSuite",
+"description": "User specified list of ciphers to use for the phase 1 and phase 2 of the IKE protocol."
+},
 "creationTimestamp": {
 "description": "[Output Only] Creation timestamp in RFC3339 text format.",
 "type": "string"
@@ -91530,6 +92067,18 @@ false
 },
 "type": "object"
 },
+"VpnTunnelCipherSuite": {
+"id": "VpnTunnelCipherSuite",
+"properties": {
+"phase1": {
+"$ref": "VpnTunnelPhase1Algorithms"
+},
+"phase2": {
+"$ref": "VpnTunnelPhase2Algorithms"
+}
+},
+"type": "object"
+},
 "VpnTunnelList": {
 "description": "Contains a list of VpnTunnel resources.",
 "id": "VpnTunnelList",
@@ -91685,6 +92234,60 @@ false
 },
 "type": "object"
 },
+"VpnTunnelPhase1Algorithms": {
+"id": "VpnTunnelPhase1Algorithms",
+"properties": {
+"dh": {
+"items": {
+"type": "string"
+},
+"type": "array"
+},
+"encryption": {
+"items": {
+"type": "string"
+},
+"type": "array"
+},
+"integrity": {
+"items": {
+"type": "string"
+},
+"type": "array"
+},
+"prf": {
+"items": {
+"type": "string"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"VpnTunnelPhase2Algorithms": {
+"id": "VpnTunnelPhase2Algorithms",
+"properties": {
+"encryption": {
+"items": {
+"type": "string"
+},
+"type": "array"
+},
+"integrity": {
+"items": {
+"type": "string"
+},
+"type": "array"
+},
+"pfs": {
+"items": {
+"type": "string"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
 "VpnTunnelsScopedList": {
 "id": "VpnTunnelsScopedList",
 "properties": {