google-api-python-client 2.181.0__py3-none-any.whl → 2.183.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/networkmanagement.v1beta1.json

@@ -144,7 +144,7 @@
 ],
 "parameters": {
 "extraLocationTypes": {
-"description": "Optional. Do not use this field. It is unsupported and is ignored unless explicitly documented otherwise. This is primarily for internal usage.",
+"description": "Optional. Unless explicitly documented otherwise, don't use this unsupported field which is primarily intended for internal usage.",
 "location": "query",
 "repeated": true,
 "type": "string"
@@ -520,7 +520,7 @@
 ],
 "parameters": {
 "extraLocationTypes": {
-"description": "Optional. Do not use this field. It is unsupported and is ignored unless explicitly documented otherwise. This is primarily for internal usage.",
+"description": "Optional. Unless explicitly documented otherwise, don't use this unsupported field which is primarily intended for internal usage.",
 "location": "query",
 "repeated": true,
 "type": "string"
@@ -1173,6 +1173,52 @@
 "scopes": [
 "https://www.googleapis.com/auth/cloud-platform"
 ]
+},
+"showEffectiveFlowLogsConfigs": {
+"description": "ShowEffectiveFlowLogsConfigs returns a list of all VPC Flow Logs configurations applicable to a specified resource.",
+"flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/vpcFlowLogsConfigs:showEffectiveFlowLogsConfigs",
+"httpMethod": "GET",
+"id": "networkmanagement.projects.locations.vpcFlowLogsConfigs.showEffectiveFlowLogsConfigs",
+"parameterOrder": [
+"parent"
+],
+"parameters": {
+"filter": {
+"description": "Optional. Lists the `EffectiveVpcFlowLogsConfigs` that match the filter expression. A filter expression must use the supported [CEL logic operators] (https://cloud.google.com/vpc/docs/about-flow-logs-records#supported_cel_logic_operators).",
+"location": "query",
+"type": "string"
+},
+"pageSize": {
+"description": "Optional. Number of `EffectiveVpcFlowLogsConfigs` to return. Default is 30.",
+"format": "int32",
+"location": "query",
+"type": "integer"
+},
+"pageToken": {
+"description": "Optional. Page token from an earlier query, as returned in `next_page_token`.",
+"location": "query",
+"type": "string"
+},
+"parent": {
+"description": "Required. The parent resource of the VpcFlowLogsConfig, specified in the following format: `projects/{project_id}/locations/global`",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+$",
+"required": true,
+"type": "string"
+},
+"resource": {
+"description": "Required. The resource to get the effective VPC Flow Logs configuration for. The resource must belong to the same project as the parent. The resource must be a network, subnetwork, interconnect attachment, VPN tunnel, or a project.",
+"location": "query",
+"type": "string"
+}
+},
+"path": "v1beta1/{+parent}/vpcFlowLogsConfigs:showEffectiveFlowLogsConfigs",
+"response": {
+"$ref": "ShowEffectiveFlowLogsConfigsResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
 }
 }
 }
@@ -1181,7 +1227,7 @@
 }
 }
 },
-"revision": "20250813",
+"revision": "20250905",
 "rootUrl": "https://networkmanagement.googleapis.com/",
 "schemas": {
 "AbortInfo": {
@@ -1843,7 +1889,10 @@ false
 "NO_MATCHING_NAT64_GATEWAY",
 "LOAD_BALANCER_BACKEND_IP_VERSION_MISMATCH",
 "NO_KNOWN_ROUTE_FROM_NCC_NETWORK_TO_DESTINATION",
-"CLOUD_NAT_PROTOCOL_UNSUPPORTED"
+"CLOUD_NAT_PROTOCOL_UNSUPPORTED",
+"L2_INTERCONNECT_UNSUPPORTED_PROTOCOL",
+"L2_INTERCONNECT_UNSUPPORTED_PORT",
+"L2_INTERCONNECT_DESTINATION_IP_MISMATCH"
 ],
 "enumDescriptions": [
 "Cause is unspecified.",
@@ -1939,7 +1988,10 @@ false
 "Packet with destination IP address within the reserved NAT64 range is dropped due to no matching NAT gateway in the subnet.",
 "Packet is dropped due to being sent to a backend of a passthrough load balancer that doesn't use the same IP version as the frontend.",
 "Packet from the unknown NCC network is dropped due to no known route from the source network to the destination IP address.",
-"Packet is dropped by Cloud NAT due to using an unsupported protocol."
+"Packet is dropped by Cloud NAT due to using an unsupported protocol.",
+"Packet is dropped due to using an unsupported protocol (any other than UDP) for L2 Interconnect.",
+"Packet is dropped due to using an unsupported port (any other than 6081) for L2 Interconnect.",
+"Packet is dropped due to destination IP not matching the appliance mapping IPs configured on the L2 Interconnect attachment."
 ],
 "type": "string"
 },
@@ -1981,6 +2033,137 @@ false
 },
 "type": "object"
 },
+"EffectiveVpcFlowLogsConfig": {
+"description": "A configuration to generate a response for GetEffectiveVpcFlowLogsConfig request.",
+"id": "EffectiveVpcFlowLogsConfig",
+"properties": {
+"aggregationInterval": {
+"description": "The aggregation interval for the logs. Default value is INTERVAL_5_SEC.",
+"enum": [
+"AGGREGATION_INTERVAL_UNSPECIFIED",
+"INTERVAL_5_SEC",
+"INTERVAL_30_SEC",
+"INTERVAL_1_MIN",
+"INTERVAL_5_MIN",
+"INTERVAL_10_MIN",
+"INTERVAL_15_MIN"
+],
+"enumDescriptions": [
+"If not specified, will default to INTERVAL_5_SEC.",
+"Aggregate logs in 5s intervals.",
+"Aggregate logs in 30s intervals.",
+"Aggregate logs in 1m intervals.",
+"Aggregate logs in 5m intervals.",
+"Aggregate logs in 10m intervals.",
+"Aggregate logs in 15m intervals."
+],
+"type": "string"
+},
+"crossProjectMetadata": {
+"description": "Determines whether to include cross project annotations in the logs. This field is available only for organization configurations. If not specified in org configs will be set to CROSS_PROJECT_METADATA_ENABLED.",
+"enum": [
+"CROSS_PROJECT_METADATA_UNSPECIFIED",
+"CROSS_PROJECT_METADATA_ENABLED",
+"CROSS_PROJECT_METADATA_DISABLED"
+],
+"enumDescriptions": [
+"If not specified, the default is CROSS_PROJECT_METADATA_ENABLED.",
+"When CROSS_PROJECT_METADATA_ENABLED, metadata from other projects will be included in the logs.",
+"When CROSS_PROJECT_METADATA_DISABLED, metadata from other projects will not be included in the logs."
+],
+"type": "string"
+},
+"filterExpr": {
+"description": "Export filter used to define which VPC Flow Logs should be logged.",
+"type": "string"
+},
+"flowSampling": {
+"description": "The value of the field must be in (0, 1]. The sampling rate of VPC Flow Logs where 1.0 means all collected logs are reported. Setting the sampling rate to 0.0 is not allowed. If you want to disable VPC Flow Logs, use the state field instead. Default value is 1.0.",
+"format": "float",
+"type": "number"
+},
+"interconnectAttachment": {
+"description": "Traffic will be logged from the Interconnect Attachment. Format: projects/{project_id}/regions/{region}/interconnectAttachments/{name}",
+"type": "string"
+},
+"metadata": {
+"description": "Configures whether all, none or a subset of metadata fields should be added to the reported VPC flow logs. Default value is INCLUDE_ALL_METADATA.",
+"enum": [
+"METADATA_UNSPECIFIED",
+"INCLUDE_ALL_METADATA",
+"EXCLUDE_ALL_METADATA",
+"CUSTOM_METADATA"
+],
+"enumDescriptions": [
+"If not specified, will default to INCLUDE_ALL_METADATA.",
+"Include all metadata fields.",
+"Exclude all metadata fields.",
+"Include only custom fields (specified in metadata_fields)."
+],
+"type": "string"
+},
+"metadataFields": {
+"description": "Custom metadata fields to include in the reported VPC flow logs. Can only be specified if \"metadata\" was set to CUSTOM_METADATA.",
+"items": {
+"type": "string"
+},
+"type": "array"
+},
+"name": {
+"description": "Unique name of the configuration. The name can have one of the following forms: - For project-level configurations: `projects/{project_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}` - For organization-level configurations: `organizations/{organization_id}/locations/global/vpcFlowLogsConfigs/{vpc_flow_logs_config_id}` - For a Compute config, the name will be the path of the subnet: `projects/{project_id}/regions/{region}/subnetworks/{subnet_id}`",
+"type": "string"
+},
+"network": {
+"description": "Traffic will be logged from VMs, VPN tunnels and Interconnect Attachments within the network. Format: projects/{project_id}/global/networks/{name}",
+"type": "string"
+},
+"scope": {
+"description": "Specifies the scope of the config (e.g., SUBNET, NETWORK, ORGANIZATION..).",
+"enum": [
+"SCOPE_UNSPECIFIED",
+"SUBNET",
+"COMPUTE_API_SUBNET",
+"NETWORK",
+"VPN_TUNNEL",
+"INTERCONNECT_ATTACHMENT",
+"ORGANIZATION"
+],
+"enumDescriptions": [
+"Scope is unspecified.",
+"Target resource is a subnet (Network Management API).",
+"Target resource is a subnet, and the config originates from the Compute API.",
+"Target resource is a network.",
+"Target resource is a VPN tunnel.",
+"Target resource is an interconnect attachment.",
+"Configuration applies to an entire organization."
+],
+"type": "string"
+},
+"state": {
+"description": "The state of the VPC Flow Log configuration. Default value is ENABLED. When creating a new configuration, it must be enabled. Setting state=DISABLED will pause the log generation for this config.",
+"enum": [
+"STATE_UNSPECIFIED",
+"ENABLED",
+"DISABLED"
+],
+"enumDescriptions": [
+"If not specified, will default to ENABLED.",
+"When ENABLED, this configuration will generate logs.",
+"When DISABLED, this configuration will not generate logs."
+],
+"type": "string"
+},
+"subnet": {
+"description": "Traffic will be logged from VMs within the subnetwork. Format: projects/{project_id}/regions/{region}/subnetworks/{name}",
+"type": "string"
+},
+"vpnTunnel": {
+"description": "Traffic will be logged from the VPN Tunnel. Format: projects/{project_id}/regions/{region}/vpnTunnels/{name}",
+"type": "string"
+}
+},
+"type": "object"
+},
 "Empty": {
 "description": "A generic empty message that you can re-use to avoid defining duplicated empty messages in your APIs. A typical example is to use it as the request or the response type of an API method. For instance: service Foo { rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty); }",
 "id": "Empty",
@@ -2042,6 +2225,10 @@ false
 "description": "A cluster URI for [Google Kubernetes Engine cluster control plane](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture).",
 "type": "string"
 },
+"gkePod": {
+"description": "A [GKE Pod](https://cloud.google.com/kubernetes-engine/docs/concepts/pod) URI.",
+"type": "string"
+},
 "instance": {
 "description": "A Compute Engine instance URI.",
 "type": "string"
@@ -2460,6 +2647,25 @@ false
 },
 "type": "object"
 },
+"HybridSubnetInfo": {
+"description": "For display only. Metadata associated with a hybrid subnet.",
+"id": "HybridSubnetInfo",
+"properties": {
+"displayName": {
+"description": "Name of a hybrid subnet.",
+"type": "string"
+},
+"region": {
+"description": "Name of a Google Cloud region where the hybrid subnet is configured.",
+"type": "string"
+},
+"uri": {
+"description": "URI of a hybrid subnet.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "InstanceInfo": {
 "description": "For display only. Metadata associated with a Compute Engine instance.",
 "id": "InstanceInfo",
@@ -2542,10 +2748,32 @@ false
 "description": "URI of the Interconnect where the Interconnect attachment is configured.",
 "type": "string"
 },
+"l2AttachmentMatchedIpAddress": {
+"description": "Appliance IP address that was matched for L2_DEDICATED attachments.",
+"type": "string"
+},
 "region": {
 "description": "Name of a Google Cloud region where the Interconnect attachment is configured.",
 "type": "string"
 },
+"type": {
+"description": "The type of interconnect attachment this is.",
+"enum": [
+"TYPE_UNSPECIFIED",
+"DEDICATED",
+"PARTNER",
+"PARTNER_PROVIDER",
+"L2_DEDICATED"
+],
+"enumDescriptions": [
+"Unspecified type.",
+"Attachment to a dedicated interconnect.",
+"Attachment to a partner interconnect, created by the customer.",
+"Attachment to a partner interconnect, created by the partner.",
+"Attachment to a L2 interconnect, created by the customer."
+],
+"type": "string"
+},
 "uri": {
 "description": "URI of an Interconnect attachment.",
 "type": "string"
@@ -2931,14 +3159,16 @@ false
 "INTERNAL_TO_EXTERNAL",
 "EXTERNAL_TO_INTERNAL",
 "CLOUD_NAT",
-"PRIVATE_SERVICE_CONNECT"
+"PRIVATE_SERVICE_CONNECT",
+"GKE_POD_IP_MASQUERADING"
 ],
 "enumDescriptions": [
 "Type is unspecified.",
 "From Compute Engine instance's internal address to external address.",
 "From Compute Engine instance's external address to internal address.",
 "Cloud NAT Gateway.",
-"Private service connect NAT."
+"Private service connect NAT.",
+"GKE Pod IP address masquerading."
 ],
 "type": "string"
 }
@@ -3566,6 +3796,31 @@ false
 },
 "type": "object"
 },
+"ShowEffectiveFlowLogsConfigsResponse": {
+"description": "Response for the `ShowEffectiveFlowLogsConfigs` method.",
+"id": "ShowEffectiveFlowLogsConfigsResponse",
+"properties": {
+"effectiveFlowLogsConfigs": {
+"description": "List of Effective Vpc Flow Logs configurations.",
+"items": {
+"$ref": "EffectiveVpcFlowLogsConfig"
+},
+"type": "array"
+},
+"nextPageToken": {
+"description": "Page token to fetch the next set of configurations.",
+"type": "string"
+},
+"unreachable": {
+"description": "Locations that could not be reached (when querying all locations with `-`).",
+"items": {
+"type": "string"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
 "SingleEdgeResponse": {
 "description": "Probing results for a single edge device.",
 "id": "SingleEdgeResponse",
@@ -3708,6 +3963,10 @@ false
 "$ref": "GoogleServiceInfo",
 "description": "Display information of a Google service"
 },
+"hybridSubnet": {
+"$ref": "HybridSubnetInfo",
+"description": "Display information of a hybrid subnet."
+},
 "instance": {
 "$ref": "InstanceInfo",
 "description": "Display information of a Compute Engine instance."
@@ -3788,6 +4047,7 @@ false
 "ARRIVE_AT_INSTANCE",
 "ARRIVE_AT_INTERNAL_LOAD_BALANCER",
 "ARRIVE_AT_EXTERNAL_LOAD_BALANCER",
+"ARRIVE_AT_HYBRID_SUBNET",
 "ARRIVE_AT_VPN_GATEWAY",
 "ARRIVE_AT_VPN_TUNNEL",
 "ARRIVE_AT_INTERCONNECT_ATTACHMENT",
@@ -3839,6 +4099,7 @@ false,
 false,
 false,
 false,
+false,
 false
 ],
 "enumDescriptions": [
@@ -3866,13 +4127,14 @@ false
 "Forwarding state: arriving at a Compute Engine instance.",
 "Forwarding state: arriving at a Compute Engine internal load balancer. Deprecated in favor of the `ANALYZE_LOAD_BALANCER_BACKEND` state, not used in new tests.",
 "Forwarding state: arriving at a Compute Engine external load balancer. Deprecated in favor of the `ANALYZE_LOAD_BALANCER_BACKEND` state, not used in new tests.",
+"Forwarding state: arriving at a hybrid subnet. Appropriate routing configuration will be determined here.",
 "Forwarding state: arriving at a Cloud VPN gateway.",
 "Forwarding state: arriving at a Cloud VPN tunnel.",
 "Forwarding state: arriving at an interconnect attachment.",
 "Forwarding state: arriving at a VPC connector.",
 "Forwarding state: for packets originating from a serverless endpoint forwarded through Direct VPC egress.",
 "Forwarding state: for packets originating from a serverless endpoint forwarded through public (external) connectivity.",
-"Transition state: packet header translated.",
+"Transition state: packet header translated. The `nat` field is populated with the translation information.",
 "Transition state: original connection is terminated and a new proxied connection is initiated.",
 "Final state: packet could be delivered.",
 "Final state: packet could be dropped.",

googleapiclient/discovery_cache/documents/networksecurity.v1.json

@@ -1078,7 +1078,7 @@
 ],
 "parameters": {
 "extraLocationTypes": {
-"description": "Optional. Do not use this field. It is unsupported and is ignored unless explicitly documented otherwise. This is primarily for internal usage.",
+"description": "Optional. Unless explicitly documented otherwise, don't use this unsupported field which is primarily intended for internal usage.",
 "location": "query",
 "repeated": true,
 "type": "string"
@@ -5070,7 +5070,7 @@
 }
 }
 },
-"revision": "20250822",
+"revision": "20250911",
 "rootUrl": "https://networksecurity.googleapis.com/",
 "schemas": {
 "AddAddressGroupItemsRequest": {
@@ -5394,7 +5394,7 @@
 "type": "array"
 },
 "principals": {
-"description": "Optional. A list of identities derived from the client's certificate. This field will not match on a request unless frontend mutual TLS is enabled for the forwarding rule or Gateway and the client certificate has been successfully validated by mTLS. Each identity is a string whose value is matched against a list of URI SANs, DNS Name SANs, or the common name in the client's certificate. A match happens when any principal matches with the rule. Limited to 50 principals per Authorization Policy for Regional Internal Application Load Balancer, Regional External Application Load Balancer, Cross-region Internal Application Load Balancer, and Cloud Service Mesh. Limited to 25 principals per Authorization Policy for Global External Application Load Balancer.",
+"description": "Optional. A list of identities derived from the client's certificate. This field will not match on a request unless frontend mutual TLS is enabled for the forwarding rule or Gateway and the client certificate has been successfully validated by mTLS. Each identity is a string whose value is matched against a list of URI SANs, DNS Name SANs, or the common name in the client's certificate. A match happens when any principal matches with the rule. Limited to 50 principals per Authorization Policy for regional internal Application Load Balancers, regional external Application Load Balancers, cross-region internal Application Load Balancers, and Cloud Service Mesh. This field is not supported for global external Application Load Balancers.",
 "items": {
 "$ref": "AuthzPolicyAuthzRulePrincipal"
 },
@@ -5461,7 +5461,7 @@
 "Unspecified principal selector. It will be treated as CLIENT_CERT_URI_SAN by default.",
 "The principal rule is matched against a list of URI SANs in the validated client's certificate. A match happens when there is any exact URI SAN value match. This is the default principal selector.",
 "The principal rule is matched against a list of DNS Name SANs in the validated client's certificate. A match happens when there is any exact DNS Name SAN value match. This is only applicable for Application Load Balancers except for classic Global External Application load balancer. CLIENT_CERT_DNS_NAME_SAN is not supported for INTERNAL_SELF_MANAGED load balancing scheme.",
-"The principal rule is matched against the common name in the client's certificate. Authorization against multiple common names in the client certificate is not supported. Requests with multiple common names in the client certificate will be rejected if CLIENT_CERT_COMMON_NAME is set as the principal selector. A match happens when there is an exact common name value match. This is only applicable for Application Load Balancers except for classic Global External Application load balancer. CLIENT_CERT_COMMON_NAME is not supported for INTERNAL_SELF_MANAGED load balancing scheme."
+"The principal rule is matched against the common name in the client's certificate. Authorization against multiple common names in the client certificate is not supported. Requests with multiple common names in the client certificate will be rejected if CLIENT_CERT_COMMON_NAME is set as the principal selector. A match happens when there is an exact common name value match. This is only applicable for Application Load Balancers except for global external Application Load Balancer and classic Application Load Balancer. CLIENT_CERT_COMMON_NAME is not supported for INTERNAL_SELF_MANAGED load balancing scheme."
 ],
 "type": "string"
 }

googleapiclient/discovery_cache/documents/networksecurity.v1beta1.json

@@ -1078,7 +1078,7 @@
 ],
 "parameters": {
 "extraLocationTypes": {
-"description": "Optional. Do not use this field. It is unsupported and is ignored unless explicitly documented otherwise. This is primarily for internal usage.",
+"description": "Optional. Unless explicitly documented otherwise, don't use this unsupported field which is primarily intended for internal usage.",
 "location": "query",
 "repeated": true,
 "type": "string"
@@ -5513,7 +5513,7 @@
 }
 }
 },
-"revision": "20250822",
+"revision": "20250911",
 "rootUrl": "https://networksecurity.googleapis.com/",
 "schemas": {
 "AddAddressGroupItemsRequest": {
@@ -5837,7 +5837,7 @@
 "type": "array"
 },
 "principals": {
-"description": "Optional. A list of identities derived from the client's certificate. This field will not match on a request unless frontend mutual TLS is enabled for the forwarding rule or Gateway and the client certificate has been successfully validated by mTLS. Each identity is a string whose value is matched against a list of URI SANs, DNS Name SANs, or the common name in the client's certificate. A match happens when any principal matches with the rule. Limited to 50 principals per Authorization Policy for Regional Internal Application Load Balancer, Regional External Application Load Balancer, Cross-region Internal Application Load Balancer, and Cloud Service Mesh. Limited to 25 principals per Authorization Policy for Global External Application Load Balancer.",
+"description": "Optional. A list of identities derived from the client's certificate. This field will not match on a request unless frontend mutual TLS is enabled for the forwarding rule or Gateway and the client certificate has been successfully validated by mTLS. Each identity is a string whose value is matched against a list of URI SANs, DNS Name SANs, or the common name in the client's certificate. A match happens when any principal matches with the rule. Limited to 50 principals per Authorization Policy for regional internal Application Load Balancers, regional external Application Load Balancers, cross-region internal Application Load Balancers, and Cloud Service Mesh. This field is not supported for global external Application Load Balancers.",
 "items": {
 "$ref": "AuthzPolicyAuthzRulePrincipal"
 },
@@ -5904,7 +5904,7 @@
 "Unspecified principal selector. It will be treated as CLIENT_CERT_URI_SAN by default.",
 "The principal rule is matched against a list of URI SANs in the validated client's certificate. A match happens when there is any exact URI SAN value match. This is the default principal selector.",
 "The principal rule is matched against a list of DNS Name SANs in the validated client's certificate. A match happens when there is any exact DNS Name SAN value match. This is only applicable for Application Load Balancers except for classic Global External Application load balancer. CLIENT_CERT_DNS_NAME_SAN is not supported for INTERNAL_SELF_MANAGED load balancing scheme.",
-"The principal rule is matched against the common name in the client's certificate. Authorization against multiple common names in the client certificate is not supported. Requests with multiple common names in the client certificate will be rejected if CLIENT_CERT_COMMON_NAME is set as the principal selector. A match happens when there is an exact common name value match. This is only applicable for Application Load Balancers except for classic Global External Application load balancer. CLIENT_CERT_COMMON_NAME is not supported for INTERNAL_SELF_MANAGED load balancing scheme."
+"The principal rule is matched against the common name in the client's certificate. Authorization against multiple common names in the client certificate is not supported. Requests with multiple common names in the client certificate will be rejected if CLIENT_CERT_COMMON_NAME is set as the principal selector. A match happens when there is an exact common name value match. This is only applicable for Application Load Balancers except for global external Application Load Balancer and classic Application Load Balancer. CLIENT_CERT_COMMON_NAME is not supported for INTERNAL_SELF_MANAGED load balancing scheme."
 ],
 "type": "string"
 }
@@ -8282,6 +8282,18 @@
 "readOnly": true,
 "type": "string"
 },
+"type": {
+"description": "Immutable. The type of the endpoint group. If left unspecified, defaults to DIRECT.",
+"enum": [
+"TYPE_UNSPECIFIED",
+"DIRECT"
+],
+"enumDescriptions": [
+"Not set.",
+"An endpoint group that sends packets to a single deployment group."
+],
+"type": "string"
+},
 "updateTime": {
 "description": "Output only. The timestamp when the resource was most recently updated. See https://google.aip.dev/148#timestamps.",
 "format": "google-datetime",
@@ -8862,13 +8874,15 @@
 "PROFILE_TYPE_UNSPECIFIED",
 "THREAT_PREVENTION",
 "CUSTOM_MIRRORING",
-"CUSTOM_INTERCEPT"
+"CUSTOM_INTERCEPT",
+"URL_FILTERING"
 ],
 "enumDescriptions": [
 "Profile type not specified.",
 "Profile type for threat prevention.",
 "Profile type for packet mirroring v2",
-"Profile type for TPPI."
+"Profile type for TPPI.",
+"Profile type for URL filtering."
 ],
 "type": "string"
 },
@@ -8877,6 +8891,10 @@
 "format": "google-datetime",
 "readOnly": true,
 "type": "string"
+},
+"urlFilteringProfile": {
+"$ref": "UrlFilteringProfile",
+"description": "The URL filtering configuration for the SecurityProfile."
 }
 },
 "type": "object"
@@ -8934,6 +8952,10 @@
 "format": "google-datetime",
 "readOnly": true,
 "type": "string"
+},
+"urlFilteringProfile": {
+"description": "Optional. Reference to a SecurityProfile with the UrlFiltering configuration.",
+"type": "string"
 }
 },
 "type": "object"
@@ -9237,6 +9259,53 @@
 },
 "type": "object"
 },
+"UrlFilter": {
+"description": "A URL filter defines an action to take for some URL match.",
+"id": "UrlFilter",
+"properties": {
+"filteringAction": {
+"description": "Required. The action taken when this filter is applied.",
+"enum": [
+"URL_FILTERING_ACTION_UNSPECIFIED",
+"ALLOW",
+"DENY"
+],
+"enumDescriptions": [
+"Filtering action not specified.",
+"The connection matching this filter will be allowed to transmit.",
+"The connection matching this filter will be dropped."
+],
+"type": "string"
+},
+"priority": {
+"description": "Required. The priority of this filter within the URL Filtering Profile. Lower integers indicate higher priorities. The priority of a filter must be unique within a URL Filtering Profile.",
+"format": "int32",
+"type": "integer"
+},
+"urls": {
+"description": "Required. The list of strings that a URL must match with for this filter to be applied.",
+"items": {
+"type": "string"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"UrlFilteringProfile": {
+"description": "UrlFilteringProfile defines filters based on URL.",
+"id": "UrlFilteringProfile",
+"properties": {
+"urlFilters": {
+"description": "Optional. The list of filtering configs in which each config defines an action to take for some URL match.",
+"items": {
+"$ref": "UrlFilter"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
 "UrlList": {
 "description": "UrlList proto helps users to set reusable, independently manageable lists of hosts, host patterns, URLs, URL patterns.",
 "id": "UrlList",

googleapiclient/discovery_cache/documents/observability.v1.json

@@ -144,7 +144,7 @@
 ],
 "parameters": {
 "extraLocationTypes": {
-"description": "Optional. Do not use this field. It is unsupported and is ignored unless explicitly documented otherwise. This is primarily for internal usage.",
+"description": "Optional. Unless explicitly documented otherwise, don't use this unsupported field which is primarily intended for internal usage.",
 "location": "query",
 "repeated": true,
 "type": "string"
@@ -531,7 +531,7 @@
 }
 }
 },
-"revision": "20250822",
+"revision": "20250904",
 "rootUrl": "https://observability.googleapis.com/",
 "schemas": {
 "CancelOperationRequest": {