google-api-python-client 2.187.0__py3-none-any.whl → 2.188.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/networkmanagement.v1beta1.json

@@ -298,7 +298,7 @@
 "type": "string"
 },
 "returnPartialSuccess": {
-"description": "When set to `true`, operations that are reachable are returned as normal, and those that are unreachable are returned in the [ListOperationsResponse.unreachable] field. This can only be `true` when reading across collections e.g. when `parent` is set to `\"projects/example/locations/-\"`. This field is not by default supported and will result in an `UNIMPLEMENTED` error if set unless explicitly documented otherwise in service or product specific documentation.",
+"description": "When set to `true`, operations that are reachable are returned as normal, and those that are unreachable are returned in the ListOperationsResponse.unreachable field. This can only be `true` when reading across collections. For example, when `parent` is set to `\"projects/example/locations/-\"`. This field is not supported by default and will result in an `UNIMPLEMENTED` error if set unless explicitly documented otherwise in service or product specific documentation.",
 "location": "query",
 "type": "boolean"
 }
@@ -431,7 +431,7 @@
 "type": "string"
 },
 "parent": {
-"description": "Required. The parent resource of the VpcFlowLogsConfig, in one of the following formats: - For project-level resourcs: `projects/{project_id}/locations/global` - For organization-level resources: `organizations/{organization_id}/locations/global`",
+"description": "Required. The parent resource of the VpcFlowLogsConfig, in one of the following formats: - For project-level resources: `projects/{project_id}/locations/global` - For organization-level resources: `organizations/{organization_id}/locations/global`",
 "location": "path",
 "pattern": "^organizations/[^/]+/locations/[^/]+$",
 "required": true,
@@ -961,7 +961,7 @@
 "type": "string"
 },
 "returnPartialSuccess": {
-"description": "When set to `true`, operations that are reachable are returned as normal, and those that are unreachable are returned in the [ListOperationsResponse.unreachable] field. This can only be `true` when reading across collections e.g. when `parent` is set to `\"projects/example/locations/-\"`. This field is not by default supported and will result in an `UNIMPLEMENTED` error if set unless explicitly documented otherwise in service or product specific documentation.",
+"description": "When set to `true`, operations that are reachable are returned as normal, and those that are unreachable are returned in the ListOperationsResponse.unreachable field. This can only be `true` when reading across collections. For example, when `parent` is set to `\"projects/example/locations/-\"`. This field is not supported by default and will result in an `UNIMPLEMENTED` error if set unless explicitly documented otherwise in service or product specific documentation.",
 "location": "query",
 "type": "boolean"
 }
@@ -1094,7 +1094,7 @@
 "type": "string"
 },
 "parent": {
-"description": "Required. The parent resource of the VpcFlowLogsConfig, in one of the following formats: - For project-level resourcs: `projects/{project_id}/locations/global` - For organization-level resources: `organizations/{organization_id}/locations/global`",
+"description": "Required. The parent resource of the VpcFlowLogsConfig, in one of the following formats: - For project-level resources: `projects/{project_id}/locations/global` - For organization-level resources: `organizations/{organization_id}/locations/global`",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
@@ -1237,7 +1237,7 @@
 }
 }
 },
-"revision": "20251022",
+"revision": "20251229",
 "rootUrl": "https://networkmanagement.googleapis.com/",
 "schemas": {
 "AbortInfo": {
@@ -1285,7 +1285,8 @@
 "UNKNOWN_ISSUE_IN_GOOGLE_MANAGED_PROJECT",
 "UNSUPPORTED_GOOGLE_MANAGED_PROJECT_CONFIG",
 "NO_SERVERLESS_IP_RANGES",
-"IP_VERSION_PROTOCOL_MISMATCH"
+"IP_VERSION_PROTOCOL_MISMATCH",
+"GKE_POD_UNKNOWN_ENDPOINT_LOCATION"
 ],
 "enumDeprecated": [
 false,
@@ -1326,6 +1327,7 @@ false,
 false,
 false,
 false,
+false,
 false
 ],
 "enumDescriptions": [
@@ -1367,7 +1369,8 @@ false
 "Aborted due to an unknown issue in the Google-managed project.",
 "Aborted due to an unsupported configuration of the Google-managed project.",
 "Aborted because the source endpoint is a Cloud Run revision with direct VPC access enabled, but there are no reserved serverless IP ranges.",
-"Aborted because the used protocol is not supported for the used IP version."
+"Aborted because the used protocol is not supported for the used IP version.",
+"Aborted because selected GKE Pod endpoint location is unknown. This is often the case for \"Pending\" Pods, which don't have assigned IP addresses yet."
 ],
 "type": "string"
 },
@@ -1745,7 +1748,8 @@ false
 "CLOUD_RUN_REVISION",
 "GOOGLE_MANAGED_SERVICE",
 "REDIS_INSTANCE",
-"REDIS_CLUSTER"
+"REDIS_CLUSTER",
+"GKE_POD"
 ],
 "enumDescriptions": [
 "Target not specified.",
@@ -1765,7 +1769,8 @@ false
 "Target is a Cloud Run revision. Used only for return traces.",
 "Target is a Google-managed service. Used only for return traces.",
 "Target is a Redis Instance.",
-"Target is a Redis Cluster."
+"Target is a Redis Cluster.",
+"Target is a GKE Pod."
 ],
 "type": "string"
 }
@@ -1835,6 +1840,7 @@ false
 "INGRESS_FIREWALL_TAGS_UNSUPPORTED_BY_DIRECT_VPC_EGRESS",
 "INSTANCE_NOT_RUNNING",
 "GKE_CLUSTER_NOT_RUNNING",
+"GKE_POD_NOT_RUNNING",
 "CLOUD_SQL_INSTANCE_NOT_RUNNING",
 "REDIS_INSTANCE_NOT_RUNNING",
 "REDIS_CLUSTER_NOT_RUNNING",
@@ -1897,6 +1903,7 @@ false
 "UNSUPPORTED_ROUTE_MATCHED_FOR_NAT64_DESTINATION",
 "TRAFFIC_FROM_HYBRID_ENDPOINT_TO_INTERNET_DISALLOWED",
 "NO_MATCHING_NAT64_GATEWAY",
+"NO_CONFIGURED_PRIVATE_NAT64_RULE",
 "LOAD_BALANCER_BACKEND_IP_VERSION_MISMATCH",
 "NO_KNOWN_ROUTE_FROM_NCC_NETWORK_TO_DESTINATION",
 "CLOUD_NAT_PROTOCOL_UNSUPPORTED",
@@ -1904,7 +1911,8 @@ false
 "L2_INTERCONNECT_UNSUPPORTED_PORT",
 "L2_INTERCONNECT_DESTINATION_IP_MISMATCH",
 "NCC_ROUTE_WITHIN_HYBRID_SUBNET_UNSUPPORTED",
-"HYBRID_SUBNET_REGION_MISMATCH"
+"HYBRID_SUBNET_REGION_MISMATCH",
+"HYBRID_SUBNET_NO_ROUTE"
 ],
 "enumDescriptions": [
 "Cause is unspecified.",
@@ -1936,6 +1944,7 @@ false
 "Matching ingress firewall rules by network tags for packets sent via serverless VPC direct egress is unsupported. Behavior is undefined. https://cloud.google.com/run/docs/configuring/vpc-direct-vpc#limitations",
 "Packet is sent from or to a Compute Engine instance that is not in a running state.",
 "Packet sent from or to a GKE cluster that is not in running state.",
+"Packet sent from or to a GKE Pod that is not in running state.",
 "Packet sent from or to a Cloud SQL instance that is not in running state.",
 "Packet sent from or to a Redis Instance that is not in running state.",
 "Packet sent from or to a Redis Cluster that is not in running state.",
@@ -1998,6 +2007,7 @@ false
 "Packet with destination IP address within the reserved NAT64 range is dropped due to matching a route of an unsupported type.",
 "Packet could be dropped because hybrid endpoint like a VPN gateway or Interconnect is not allowed to send traffic to the Internet.",
 "Packet with destination IP address within the reserved NAT64 range is dropped due to no matching NAT gateway in the subnet.",
+"Packet is dropped due to matching a Private NAT64 gateway with no rules for source IPv6 addresses.",
 "Packet is dropped due to being sent to a backend of a passthrough load balancer that doesn't use the same IP version as the frontend.",
 "Packet from the unknown NCC network is dropped due to no known route from the source network to the destination IP address.",
 "Packet is dropped by Cloud NAT due to using an unsupported protocol.",
@@ -2005,7 +2015,8 @@ false
 "Packet is dropped due to using an unsupported port (any other than 6081) for L2 Interconnect.",
 "Packet is dropped due to destination IP not matching the appliance mapping IPs configured on the L2 Interconnect attachment.",
 "Packet could be dropped because it matches a route associated with an NCC spoke in the hybrid subnet context, but such a configuration is not supported.",
-"Packet is dropped because the region of the hybrid subnet is different from the region of the next hop of the route matched within this hybrid subnet."
+"Packet is dropped because the region of the hybrid subnet is different from the region of the next hop of the route matched within this hybrid subnet.",
+"Packet is dropped because no matching route was found in the hybrid subnet."
 ],
 "type": "string"
 },
@@ -2415,6 +2426,8 @@ false
 "SERVERLESS_VPC_ACCESS_MANAGED_FIREWALL_RULE",
 "NETWORK_FIREWALL_POLICY_RULE",
 "NETWORK_REGIONAL_FIREWALL_POLICY_RULE",
+"SYSTEM_NETWORK_FIREWALL_POLICY_RULE",
+"SYSTEM_REGIONAL_NETWORK_FIREWALL_POLICY_RULE",
 "UNSUPPORTED_FIREWALL_POLICY_RULE",
 "TRACKING_STATE",
 "ANALYSIS_SKIPPED"
@@ -2425,8 +2438,10 @@ false
 "VPC firewall rule. For details, see [VPC firewall rules overview](https://cloud.google.com/vpc/docs/firewalls).",
 "Implied VPC firewall rule. For details, see [Implied rules](https://cloud.google.com/vpc/docs/firewalls#default_firewall_rules).",
 "Implicit firewall rules that are managed by serverless VPC access to allow ingress access. They are not visible in the Google Cloud console. For details, see [VPC connector's implicit rules](https://cloud.google.com/functions/docs/networking/connecting-vpc#restrict-access).",
-"Global network firewall policy rule. For details, see [Network firewall policies](https://cloud.google.com/vpc/docs/network-firewall-policies).",
-"Regional network firewall policy rule. For details, see [Regional network firewall policies](https://cloud.google.com/firewall/docs/regional-firewall-policies).",
+"User-defined global network firewall policy rule. For details, see [Network firewall policies](https://cloud.google.com/vpc/docs/network-firewall-policies).",
+"User-defined regional network firewall policy rule. For details, see [Regional network firewall policies](https://cloud.google.com/firewall/docs/regional-firewall-policies).",
+"System-defined global network firewall policy rule.",
+"System-defined regional network firewall policy rule.",
 "Firewall policy rule containing attributes not yet supported in Connectivity tests. Firewall analysis is skipped if such a rule can potentially be matched. Please see the [list of unsupported configurations](https://cloud.google.com/network-intelligence-center/docs/connectivity-tests/concepts/overview#unsupported-configs).",
 "Tracking state for response traffic created when request traffic goes through allow firewall rule. For details, see [firewall rules specifications](https://cloud.google.com/firewall/docs/firewalls#specifications)",
 "Firewall analysis was skipped due to executing Connectivity Test in the BypassFirewallChecks mode"
@@ -2626,6 +2641,25 @@ false
 },
 "type": "object"
 },
+"GkePodInfo": {
+"description": "For display only. Metadata associated with a Google Kubernetes Engine (GKE) Pod.",
+"id": "GkePodInfo",
+"properties": {
+"ipAddress": {
+"description": "IP address of a GKE Pod. If the Pod is dual-stack, this is the IP address relevant to the trace.",
+"type": "string"
+},
+"networkUri": {
+"description": "URI of the network containing the GKE Pod.",
+"type": "string"
+},
+"podUri": {
+"description": "URI of a GKE Pod. For Pods in regional Clusters, the URI format is: `projects/{project}/locations/{location}/clusters/{cluster}/k8s/namespaces/{namespace}/pods/{pod}` For Pods in zonal Clusters, the URI format is: `projects/{project}/zones/{zone}/clusters/{cluster}/k8s/namespaces/{namespace}/pods/{pod}`",
+"type": "string"
+}
+},
+"type": "object"
+},
 "GoogleServiceInfo": {
 "description": "For display only. Details of a Google Service sending packets to a VPC network. Although the source IP might be a publicly routable address, some Google Services use special routes within Google production infrastructure to reach Compute Engine Instances. https://cloud.google.com/vpc/docs/routes#special_return_paths",
 "id": "GoogleServiceInfo",
@@ -2795,6 +2829,41 @@ false
 },
 "type": "object"
 },
+"IpMasqueradingSkippedInfo": {
+"description": "For display only. Contains information about why IP masquerading was skipped for the packet.",
+"id": "IpMasqueradingSkippedInfo",
+"properties": {
+"nonMasqueradeRange": {
+"description": "The matched non-masquerade IP range. Only set if reason is DESTINATION_IP_IN_CONFIGURED_NON_MASQUERADE_RANGE or DESTINATION_IP_IN_DEFAULT_NON_MASQUERADE_RANGE.",
+"type": "string"
+},
+"reason": {
+"description": "Reason why IP masquerading was not applied.",
+"enum": [
+"REASON_UNSPECIFIED",
+"DESTINATION_IP_IN_CONFIGURED_NON_MASQUERADE_RANGE",
+"DESTINATION_IP_IN_DEFAULT_NON_MASQUERADE_RANGE",
+"DESTINATION_ON_SAME_NODE",
+"DEFAULT_SNAT_DISABLED",
+"NO_MASQUERADING_FOR_IPV6",
+"POD_USES_NODE_NETWORK_NAMESPACE",
+"NO_MASQUERADING_FOR_RETURN_PACKET"
+],
+"enumDescriptions": [
+"Unused default value.",
+"Masquerading not applied because destination IP is in one of configured non-masquerade ranges.",
+"Masquerading not applied because destination IP is in one of default non-masquerade ranges.",
+"Masquerading not applied because destination is on the same Node.",
+"Masquerading not applied because ip-masq-agent doesn't exist and default SNAT is disabled.",
+"Masquerading not applied because the packet's IP version is IPv6.",
+"Masquerading not applied because the source Pod uses the host Node's network namespace, including the Node's IP address.",
+"Masquerading not applied because the packet is a return packet."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "LatencyDistribution": {
 "description": "Describes measured latency distribution.",
 "id": "LatencyDistribution",
@@ -2885,7 +2954,7 @@ false
 "type": "array"
 },
 "unreachable": {
-"description": "Unordered list. Unreachable resources. Populated when the request sets `ListOperationsRequest.return_partial_success` and reads across collections e.g. when attempting to list all resources across all supported locations.",
+"description": "Unordered list. Unreachable resources. Populated when the request sets `ListOperationsRequest.return_partial_success` and reads across collections. For example, when attempting to list all resources across all supported locations.",
 "items": {
 "type": "string"
 },
@@ -3121,6 +3190,26 @@ false
 "description": "For display only. Metadata associated with NAT.",
 "id": "NatInfo",
 "properties": {
+"cloudNatGatewayType": {
+"description": "Type of Cloud NAT gateway. Only valid when `type` is CLOUD_NAT.",
+"enum": [
+"CLOUD_NAT_GATEWAY_TYPE_UNSPECIFIED",
+"PUBLIC_NAT44",
+"PUBLIC_NAT64",
+"PRIVATE_NAT_NCC",
+"PRIVATE_NAT_HYBRID",
+"PRIVATE_NAT64"
+],
+"enumDescriptions": [
+"Type is unspecified.",
+"Public NAT gateway.",
+"Public NAT64 gateway.",
+"Private NAT gateway for NCC.",
+"Private NAT gateway for hybrid connectivity.",
+"Private NAT64 gateway."
+],
+"type": "string"
+},
 "natGatewayName": {
 "description": "The name of Cloud NAT Gateway. Only valid when type is CLOUD_NAT.",
 "type": "string"
@@ -3980,6 +4069,10 @@ false
 "$ref": "GKEMasterInfo",
 "description": "Display information of a Google Kubernetes Engine cluster master."
 },
+"gkePod": {
+"$ref": "GkePodInfo",
+"description": "Display information of a Google Kubernetes Engine Pod."
+},
 "googleService": {
 "$ref": "GoogleServiceInfo",
 "description": "Display information of a Google service"
@@ -3996,6 +4089,10 @@ false
 "$ref": "InterconnectAttachmentInfo",
 "description": "Display information of an interconnect attachment."
 },
+"ipMasqueradingSkipped": {
+"$ref": "IpMasqueradingSkippedInfo",
+"description": "Display information of the reason why GKE Pod IP masquerading was skipped."
+},
 "loadBalancer": {
 "$ref": "LoadBalancerInfo",
 "deprecated": true,
@@ -4051,6 +4148,7 @@ false
 "START_FROM_PRIVATE_NETWORK",
 "START_FROM_GKE_MASTER",
 "START_FROM_CLOUD_SQL_INSTANCE",
+"START_FROM_GKE_POD",
 "START_FROM_REDIS_INSTANCE",
 "START_FROM_REDIS_CLUSTER",
 "START_FROM_CLOUD_FUNCTION",
@@ -4076,6 +4174,7 @@ false
 "DIRECT_VPC_EGRESS_CONNECTION",
 "SERVERLESS_EXTERNAL_CONNECTION",
 "NAT",
+"SKIP_GKE_POD_IP_MASQUERADING",
 "PROXY_CONNECTION",
 "DELIVER",
 "DROP",
@@ -4106,6 +4205,7 @@ false,
 false,
 false,
 false,
+false,
 true,
 true,
 false,
@@ -4121,6 +4221,7 @@ false,
 false,
 false,
 false,
+false,
 false
 ],
 "enumDescriptions": [
@@ -4131,6 +4232,7 @@ false
 "Initial state: packet originating from a VPC or on-premises network with internal source IP. If the source is a VPC network visible to the user, a NetworkInfo is populated with details of the network.",
 "Initial state: packet originating from a Google Kubernetes Engine cluster master. A GKEMasterInfo is populated with starting instance information.",
 "Initial state: packet originating from a Cloud SQL instance. A CloudSQLInstanceInfo is populated with starting instance information.",
+"Initial state: packet originating from a Google Kubernetes Engine Pod. A GkePodInfo is populated with starting Pod information.",
 "Initial state: packet originating from a Redis instance. A RedisInstanceInfo is populated with starting instance information.",
 "Initial state: packet originating from a Redis Cluster. A RedisClusterInfo is populated with starting Cluster information.",
 "Initial state: packet originating from a Cloud Function. A CloudFunctionInfo is populated with starting function information.",
@@ -4156,6 +4258,7 @@ false
 "Forwarding state: for packets originating from a serverless endpoint forwarded through Direct VPC egress.",
 "Forwarding state: for packets originating from a serverless endpoint forwarded through public (external) connectivity.",
 "Transition state: packet header translated. The `nat` field is populated with the translation information.",
+"Transition state: GKE Pod IP masquerading is skipped. The `ip_masquerading_skipped` field is populated with the reason.",
 "Transition state: original connection is terminated and a new proxied connection is initiated.",
 "Final state: packet could be delivered.",
 "Final state: packet could be dropped.",