google-api-python-client 2.187.0__py3-none-any.whl → 2.188.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/sqladmin.v1beta4.json

@@ -785,6 +785,38 @@
 },
 "instances": {
 "methods": {
+"ListEntraIdCertificates": {
+"description": "Lists all versions of EntraID certificates for the specified instance. There can be up to three sets of certificates listed: the certificate that is currently in use, a future that has been added but not yet used to sign a certificate, and a certificate that has been rotated out.",
+"flatPath": "sql/v1beta4/projects/{project}/instances/{instance}/listEntraIdCertificates",
+"httpMethod": "GET",
+"id": "sql.instances.ListEntraIdCertificates",
+"parameterOrder": [
+"project",
+"instance"
+],
+"parameters": {
+"instance": {
+"description": "Required. Cloud SQL instance ID. This does not include the project ID.",
+"location": "path",
+"required": true,
+"type": "string"
+},
+"project": {
+"description": "Required. Project ID of the project that contains the instance.",
+"location": "path",
+"required": true,
+"type": "string"
+}
+},
+"path": "sql/v1beta4/projects/{project}/instances/{instance}/listEntraIdCertificates",
+"response": {
+"$ref": "InstancesListEntraIdCertificatesResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/sqlservice.admin"
+]
+},
 "ListServerCertificates": {
 "description": "Lists all versions of server certificates and certificate authorities (CAs) for the specified instance. There can be up to three sets of certs listed: the certificate that is currently in use, a future that has been added but not yet used to sign a certificate, and a certificate that has been rotated out. For instances not using Certificate Authority Service (CAS) server CA, use ListServerCas instead.",
 "flatPath": "sql/v1beta4/projects/{project}/instances/{instance}/listServerCertificates",
@@ -817,6 +849,41 @@
 "https://www.googleapis.com/auth/sqlservice.admin"
 ]
 },
+"RotateEntraIdCertificate": {
+"description": "Rotates the Entra Id certificate version to one previously added with the addEntraIdCertificate method.",
+"flatPath": "sql/v1beta4/projects/{project}/instances/{instance}/rotateEntraIdCertificate",
+"httpMethod": "POST",
+"id": "sql.instances.RotateEntraIdCertificate",
+"parameterOrder": [
+"project",
+"instance"
+],
+"parameters": {
+"instance": {
+"description": "Required. Cloud SQL instance ID. This does not include the project ID.",
+"location": "path",
+"required": true,
+"type": "string"
+},
+"project": {
+"description": "Required. Project ID of the project that contains the instance.",
+"location": "path",
+"required": true,
+"type": "string"
+}
+},
+"path": "sql/v1beta4/projects/{project}/instances/{instance}/rotateEntraIdCertificate",
+"request": {
+"$ref": "InstancesRotateEntraIdCertificateRequest"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/sqlservice.admin"
+]
+},
 "RotateServerCertificate": {
 "description": "Rotates the server certificate version to one previously added with the addServerCertificate method. For instances not using Certificate Authority Service (CAS) server CA, use RotateServerCa instead.",
 "flatPath": "sql/v1beta4/projects/{project}/instances/{instance}/rotateServerCertificate",
@@ -887,6 +954,38 @@
 "https://www.googleapis.com/auth/sqlservice.admin"
 ]
 },
+"addEntraIdCertificate": {
+"description": "Adds a new Entra ID certificate for the specified instance. If an Entra ID certificate was previously added but never used in a certificate rotation, this operation replaces that version.",
+"flatPath": "sql/v1beta4/projects/{project}/instances/{instance}/addEntraIdCertificate",
+"httpMethod": "POST",
+"id": "sql.instances.addEntraIdCertificate",
+"parameterOrder": [
+"project",
+"instance"
+],
+"parameters": {
+"instance": {
+"description": "Required. Cloud SQL instance ID. This does not include the project ID.",
+"location": "path",
+"required": true,
+"type": "string"
+},
+"project": {
+"description": "Required. Project ID of the project that contains the instance.",
+"location": "path",
+"required": true,
+"type": "string"
+}
+},
+"path": "sql/v1beta4/projects/{project}/instances/{instance}/addEntraIdCertificate",
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform",
+"https://www.googleapis.com/auth/sqlservice.admin"
+]
+},
 "addServerCa": {
 "description": "Add a new trusted Certificate Authority (CA) version for the specified instance. Required to prepare for a certificate rotation. If a CA version was previously added but never used in a certificate rotation, this operation replaces that version. There cannot be more than one CA version waiting to be rotated in. For instances that have enabled Certificate Authority Service (CAS) based server CA, use AddServerCertificate to add a new server certificate.",
 "flatPath": "sql/v1beta4/projects/{project}/instances/{instance}/addServerCa",
@@ -2647,6 +2746,12 @@
 "instance"
 ],
 "parameters": {
+"databaseRoles": {
+"description": "Optional. List of database roles to grant to the user. body.database_roles will be ignored for update request.",
+"location": "query",
+"repeated": true,
+"type": "string"
+},
 "host": {
 "description": "Optional. Host of the user in the instance.",
 "location": "query",
@@ -2668,6 +2773,11 @@
 "location": "path",
 "required": true,
 "type": "string"
+},
+"revokeExistingRoles": {
+"description": "Optional. revoke the existing roles granted to the user.",
+"location": "query",
+"type": "boolean"
 }
 },
 "path": "sql/v1beta4/projects/{project}/instances/{instance}/users",
@@ -2685,7 +2795,7 @@
 }
 }
 },
-"revision": "20251023",
+"revision": "20251201",
 "rootUrl": "https://sqladmin.googleapis.com/",
 "schemas": {
 "AclEntry": {
@@ -4563,7 +4673,7 @@ false
 ],
 "enumDescriptions": [
 "This is an unknown suspension reason.",
-"The instance is suspended due to billing issues (for example:, GCP account issue)",
+"The instance is suspended due to billing issues (for example:, account issue)",
 "The instance is suspended due to illegal content (for example:, child pornography, copyrighted material, etc.).",
 "The instance is causing operational issues (for example:, causing the database to crash).",
 "The KMS key used by the instance is either revoked or denied access to"
@@ -5473,7 +5583,7 @@ false
 "type": "object"
 },
 "noRecovery": {
-"description": "Whether or not the backup importing will restore database with NORECOVERY option Applies only to Cloud SQL for SQL Server.",
+"description": "Whether or not the backup importing will restore database with NORECOVERY option. Applies only to Cloud SQL for SQL Server.",
 "type": "boolean"
 },
 "recoveryOnly": {
@@ -5742,6 +5852,28 @@ false
 },
 "type": "object"
 },
+"InstancesListEntraIdCertificatesResponse": {
+"description": "Instances ListEntraIdCertificates response.",
+"id": "InstancesListEntraIdCertificatesResponse",
+"properties": {
+"activeVersion": {
+"description": "The `sha1_fingerprint` of the active certificate from `certs`.",
+"type": "string"
+},
+"certs": {
+"description": "List of Entra ID certificates for the instance.",
+"items": {
+"$ref": "SslCert"
+},
+"type": "array"
+},
+"kind": {
+"description": "This is always `sql#instancesListEntraIdCertificates`.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "InstancesListResponse": {
 "description": "Database instances list response.",
 "id": "InstancesListResponse",
@@ -5873,6 +6005,17 @@ false
 },
 "type": "object"
 },
+"InstancesRotateEntraIdCertificateRequest": {
+"description": "Rotate Entra ID Certificate request.",
+"id": "InstancesRotateEntraIdCertificateRequest",
+"properties": {
+"rotateEntraIdCertificateContext": {
+"$ref": "RotateEntraIdCertificateContext",
+"description": "Optional. Contains details about the rotate Entra ID certificate operation."
+}
+},
+"type": "object"
+},
 "InstancesRotateServerCaRequest": {
 "description": "Rotate Server CA request.",
 "id": "InstancesRotateServerCaRequest",
@@ -5985,6 +6128,20 @@ false
 "description": "Optional. The resource name of the server CA pool for an instance with `CUSTOMER_MANAGED_CAS_CA` as the `server_ca_mode`. Format: projects/{PROJECT}/locations/{REGION}/caPools/{CA_POOL_ID}",
 "type": "string"
 },
+"serverCertificateRotationMode": {
+"description": "Optional. Controls the automatic server certificate rotation feature. This feature is disabled by default. When enabled, the server certificate will be automatically rotated during Cloud SQL scheduled maintenance or self-service maintenance updates up to six months before it expires. This setting can only be set if server_ca_mode is either GOOGLE_MANAGED_CAS_CA or CUSTOMER_MANAGED_CAS_CA.",
+"enum": [
+"SERVER_CERTIFICATE_ROTATION_MODE_UNSPECIFIED",
+"NO_AUTOMATIC_ROTATION",
+"AUTOMATIC_ROTATION_DURING_MAINTENANCE"
+],
+"enumDescriptions": [
+"Unspecified: no automatic server certificate rotation.",
+"No automatic server certificate rotation. The user must [manage server certificate rotation](/sql/docs/mysql/manage-ssl-instance#rotate-server-certificate-cas) on their side.",
+"Automatic server certificate rotation during Cloud SQL scheduled maintenance or self-service maintenance updates. Requires `server_ca_mode` to be `GOOGLE_MANAGED_CAS_CA` or `CUSTOMER_MANAGED_CAS_CA`."
+],
+"type": "string"
+},
 "sslMode": {
 "description": "Specify how SSL/TLS is enforced in database connections. If you must use the `require_ssl` flag for backward compatibility, then only the following value pairs are valid: For PostgreSQL and MySQL: * `ssl_mode=ALLOW_UNENCRYPTED_AND_ENCRYPTED` and `require_ssl=false` * `ssl_mode=ENCRYPTED_ONLY` and `require_ssl=false` * `ssl_mode=TRUSTED_CLIENT_CERTIFICATE_REQUIRED` and `require_ssl=true` For SQL Server: * `ssl_mode=ALLOW_UNENCRYPTED_AND_ENCRYPTED` and `require_ssl=false` * `ssl_mode=ENCRYPTED_ONLY` and `require_ssl=true` The value of `ssl_mode` has priority over the value of `require_ssl`. For example, for the pair `ssl_mode=ENCRYPTED_ONLY` and `require_ssl=false`, `ssl_mode=ENCRYPTED_ONLY` means accept only SSL connections, while `require_ssl=false` means accept both non-SSL and SSL connections. In this case, MySQL and PostgreSQL databases respect `ssl_mode` and accepts only SSL connections.",
 "enum": [
@@ -6667,7 +6824,7 @@ false
 "type": "object"
 },
 "PasswordValidationPolicy": {
-"description": "Database instance local user password validation policy",
+"description": "Database instance local user password validation policy. This message defines the password policy for local database users. When enabled, it enforces constraints on password complexity, length, and reuse. Keep this policy enabled to help prevent unauthorized access.",
 "id": "PasswordValidationPolicy",
 "properties": {
 "complexity": {
@@ -6692,7 +6849,7 @@ false
 "type": "boolean"
 },
 "enablePasswordPolicy": {
-"description": "Whether the password policy is enabled or not.",
+"description": "Whether to enable the password policy or not. When enabled, passwords must meet complexity requirements. Keep this policy enabled to help prevent unauthorized access. Disabling this policy allows weak passwords.",
 "type": "boolean"
 },
 "minLength": {
@@ -6725,8 +6882,44 @@ false
 },
 "type": "object"
 },
+"PerformanceCaptureConfig": {
+"description": "Performance Capture configuration.",
+"id": "PerformanceCaptureConfig",
+"properties": {
+"enabled": {
+"description": "Optional. Enable or disable the Performance Capture.",
+"type": "boolean"
+},
+"probeThreshold": {
+"description": "Optional. The minimum number of consecutive readings above threshold that triggers instance state capture.",
+"format": "int32",
+"type": "integer"
+},
+"probingIntervalSeconds": {
+"description": "Optional. The time interval in seconds between any two probes.",
+"format": "int32",
+"type": "integer"
+},
+"runningThreadsThreshold": {
+"description": "Optional. The minimum number of server threads running to trigger the capture on primary.",
+"format": "int32",
+"type": "integer"
+},
+"secondsBehindSourceThreshold": {
+"description": "Optional. The minimum number of seconds replica must be lagging behind primary to trigger capture on replica.",
+"format": "int32",
+"type": "integer"
+},
+"transactionDurationThreshold": {
+"description": "Optional. The amount of time in seconds that a transaction needs to have been open before the watcher starts recording it.",
+"format": "int32",
+"type": "integer"
+}
+},
+"type": "object"
+},
 "PointInTimeRestoreContext": {
-"description": "Context to perform a point-in-time restore of an instance managed by Google Cloud Backup and Disaster Recovery.",
+"description": "Context to perform a point-in-time restore of an instance managed by Backup and Disaster Recovery (DR) Service.",
 "id": "PointInTimeRestoreContext",
 "properties": {
 "allocatedIpRange": {
@@ -6734,7 +6927,7 @@ false
 "type": "string"
 },
 "datasource": {
-"description": "The Google Cloud Backup and Disaster Recovery Datasource URI. Format: projects/{project}/locations/{region}/backupVaults/{backupvault}/dataSources/{datasource}.",
+"description": "The Backup and Disaster Recovery (DR) Service Datasource URI. Format: projects/{project}/locations/{region}/backupVaults/{backupvault}/dataSources/{datasource}.",
 "type": "string"
 },
 "pointInTime": {
@@ -6796,6 +6989,19 @@ false
 "readOnly": true,
 "type": "string"
 },
+"pscAutoConnections": {
+"description": "Output only. The list of settings for requested automatically-setup Private Service Connect (PSC) consumer endpoints that can be used to connect to this read pool node.",
+"items": {
+"$ref": "PscAutoConnectionConfig"
+},
+"readOnly": true,
+"type": "array"
+},
+"pscServiceAttachmentLink": {
+"description": "Output only. The Private Service Connect (PSC) service attachment of the read pool node.",
+"readOnly": true,
+"type": "string"
+},
 "state": {
 "description": "Output only. The current state of the read pool node.",
 "enum": [
@@ -7276,6 +7482,21 @@ false
 },
 "type": "object"
 },
+"RotateEntraIdCertificateContext": {
+"description": "Instance rotate Entra ID certificate context.",
+"id": "RotateEntraIdCertificateContext",
+"properties": {
+"kind": {
+"description": "Optional. This is always `sql#rotateEntraIdCertificateContext`.",
+"type": "string"
+},
+"nextVersion": {
+"description": "Optional. The fingerprint of the next version to be rotated to. If left unspecified, will be rotated to the most recently added Entra ID certificate version.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "RotateServerCaContext": {
 "description": "Instance rotate server CA context.",
 "id": "RotateServerCaContext",
@@ -7423,7 +7644,7 @@ true
 "type": "boolean"
 },
 "dataApiAccess": {
-"description": "This parameter controls whether to allow using Data API to connect to the instance. Not allowed by default.",
+"description": "This parameter controls whether to allow using ExecuteSql API to connect to the instance. Not allowed by default.",
 "enum": [
 "DATA_API_ACCESS_UNSPECIFIED",
 "DISALLOW_DATA_API",
@@ -7431,8 +7652,8 @@ true
 ],
 "enumDescriptions": [
 "Unspecified, effectively the same as `DISALLOW_DATA_API`.",
-"Disallow using Data API to connect to the instance.",
-"Allow using Data API to connect to the instance. For private IP instances, this will allow authorized users to access the instance from the public internet."
+"Disallow using ExecuteSql API to connect to the instance.",
+"Allow using ExecuteSql API to connect to the instance. For private IP instances, this allows authorized users to access the instance from the public internet using ExecuteSql API."
 ],
 "type": "string"
 },
@@ -7524,6 +7745,10 @@ false
 "description": "Optional. When this parameter is set to true, Cloud SQL instances can connect to Vertex AI to pass requests for real-time predictions and insights to the AI. The default value is false. This applies only to Cloud SQL for MySQL and Cloud SQL for PostgreSQL instances.",
 "type": "boolean"
 },
+"entraidConfig": {
+"$ref": "SqlServerEntraIdConfig",
+"description": "Optional. The Microsoft Entra ID configuration for the SQL Server instance."
+},
 "finalBackupConfig": {
 "$ref": "FinalBackupConfig",
 "description": "Optional. The final backup configuration for the instance."
@@ -7552,6 +7777,10 @@ false
 "$ref": "PasswordValidationPolicy",
 "description": "The local user password validation policy of the instance."
 },
+"performanceCaptureConfig": {
+"$ref": "PerformanceCaptureConfig",
+"description": "Optional. Configuration for Performance Capture, provides diagnostic metrics during high load situations."
+},
 "pricingPlan": {
 "description": "The pricing plan for this instance. This can be either `PER_USE` or `PACKAGE`. Only `PER_USE` is supported for Second Generation instances.",
 "enum": [
@@ -8180,6 +8409,26 @@ false
 },
 "type": "object"
 },
+"SqlServerEntraIdConfig": {
+"description": "SQL Server Entra ID configuration.",
+"id": "SqlServerEntraIdConfig",
+"properties": {
+"applicationId": {
+"description": "Optional. The application ID for the Entra ID configuration.",
+"type": "string"
+},
+"kind": {
+"description": "Output only. This is always sql#sqlServerEntraIdConfig",
+"readOnly": true,
+"type": "string"
+},
+"tenantId": {
+"description": "Optional. The tenant ID for the Entra ID configuration.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "SqlServerUserDetails": {
 "description": "Represents a Sql Server user on the Cloud SQL instance.",
 "id": "SqlServerUserDetails",
@@ -8477,6 +8726,13 @@ false
 "description": "A Cloud SQL user resource.",
 "id": "User",
 "properties": {
+"databaseRoles": {
+"description": "Optional. Role memberships of the user",
+"items": {
+"type": "string"
+},
+"type": "array"
+},
 "dualPasswordType": {
 "description": "Dual password status for the user.",
 "enum": [
@@ -8554,7 +8810,8 @@ false
 "CLOUD_IAM_SERVICE_ACCOUNT",
 "CLOUD_IAM_GROUP",
 "CLOUD_IAM_GROUP_USER",
-"CLOUD_IAM_GROUP_SERVICE_ACCOUNT"
+"CLOUD_IAM_GROUP_SERVICE_ACCOUNT",
+"ENTRAID_USER"
 ],
 "enumDescriptions": [
 "The database's built-in user type.",
@@ -8562,7 +8819,8 @@ false
 "Cloud IAM service account.",
 "Cloud IAM group. Not used for login.",
 "Read-only. Login for a user that belongs to the Cloud IAM group.",
-"Read-only. Login for a service account that belongs to the Cloud IAM group."
+"Read-only. Login for a service account that belongs to the Cloud IAM group.",
+"Microsoft Entra ID user."
 ],
 "type": "string"
 }

googleapiclient/discovery_cache/documents/storage.v1.json

@@ -253,7 +253,7 @@
 "location": "northamerica-south1"
 }
 ],
-"etag": "\"3131343633323936333034313936343439353533\"",
+"etag": "\"39373339343838363630393031393634343537\"",
 "icons": {
 "x16": "https://www.google.com/images/icons/product/cloud_storage-16.png",
 "x32": "https://www.google.com/images/icons/product/cloud_storage-32.png"
@@ -4549,7 +4549,7 @@
 }
 }
 },
-"revision": "20250925",
+"revision": "20251118",
 "rootUrl": "https://storage.googleapis.com/",
 "schemas": {
 "AdvanceRelocateBucketOperationRequest": {
@@ -5500,6 +5500,10 @@
 "description": "A Compose request.",
 "id": "ComposeRequest",
 "properties": {
+"deleteSourceObjects": {
+"description": "If true, the source objects will be deleted.",
+"type": "boolean"
+},
 "destination": {
 "$ref": "Object",
 "description": "Properties of the resulting object."

googleapiclient/discovery_cache/documents/storagebatchoperations.v1.json

@@ -467,7 +467,7 @@
 "type": "string"
 },
 "returnPartialSuccess": {
-"description": "When set to `true`, operations that are reachable are returned as normal, and those that are unreachable are returned in the [ListOperationsResponse.unreachable] field. This can only be `true` when reading across collections e.g. when `parent` is set to `\"projects/example/locations/-\"`. This field is not by default supported and will result in an `UNIMPLEMENTED` error if set unless explicitly documented otherwise in service or product specific documentation.",
+"description": "When set to `true`, operations that are reachable are returned as normal, and those that are unreachable are returned in the ListOperationsResponse.unreachable field. This can only be `true` when reading across collections. For example, when `parent` is set to `\"projects/example/locations/-\"`. This field is not supported by default and will result in an `UNIMPLEMENTED` error if set unless explicitly documented otherwise in service or product specific documentation.",
 "location": "query",
 "type": "boolean"
 }
@@ -487,7 +487,7 @@
 }
 }
 },
-"revision": "20251022",
+"revision": "20251203",
 "rootUrl": "https://storagebatchoperations.googleapis.com/",
 "schemas": {
 "Bucket": {
@@ -562,6 +562,12 @@
 "readOnly": true,
 "type": "string"
 },
+"totalBytesFound": {
+"description": "Output only. Number of bytes found from source. This field is only populated for jobs with a prefix list object configuration.",
+"format": "int64",
+"readOnly": true,
+"type": "string"
+},
 "totalObjectCount": {
 "description": "Output only. Number of objects listed.",
 "format": "int64",
@@ -702,6 +708,10 @@
 "description": "Optional. A description provided by the user for the job. Its max length is 1024 bytes when Unicode-encoded.",
 "type": "string"
 },
+"dryRun": {
+"description": "Optional. If true, the job will run in dry run mode, returning the total object count and, if the object configuration is a prefix list, the bytes found from source. No transformations will be performed.",
+"type": "boolean"
+},
 "errorSummaries": {
 "description": "Output only. Summarizes errors encountered with sample error log entries.",
 "items": {
@@ -817,7 +827,7 @@
 "type": "array"
 },
 "unreachable": {
-"description": "Unordered list. Unreachable resources. Populated when the request sets `ListOperationsRequest.return_partial_success` and reads across collections e.g. when attempting to list all resources across all supported locations.",
+"description": "Unordered list. Unreachable resources. Populated when the request sets `ListOperationsRequest.return_partial_success` and reads across collections. For example, when attempting to list all resources across all supported locations.",
 "items": {
 "type": "string"
 },

googleapiclient/discovery_cache/documents/storagetransfer.v1.json

@@ -565,7 +565,7 @@
 "type": "string"
 },
 "returnPartialSuccess": {
-"description": "When set to `true`, operations that are reachable are returned as normal, and those that are unreachable are returned in the [ListOperationsResponse.unreachable] field. This can only be `true` when reading across collections e.g. when `parent` is set to `\"projects/example/locations/-\"`. This field is not by default supported and will result in an `UNIMPLEMENTED` error if set unless explicitly documented otherwise in service or product specific documentation.",
+"description": "When set to `true`, operations that are reachable are returned as normal, and those that are unreachable are returned in the ListOperationsResponse.unreachable field. This can only be `true` when reading across collections. For example, when `parent` is set to `\"projects/example/locations/-\"`. This field is not supported by default and will result in an `UNIMPLEMENTED` error if set unless explicitly documented otherwise in service or product specific documentation.",
 "location": "query",
 "type": "boolean"
 }
@@ -637,7 +637,7 @@
 }
 }
 },
-"revision": "20251010",
+"revision": "20251128",
 "rootUrl": "https://storagetransfer.googleapis.com/",
 "schemas": {
 "AgentPool": {
@@ -746,6 +746,10 @@
 "description": "Root path to transfer objects. Must be an empty string or full path name that ends with a '/'. This field is treated as an object prefix. As such, it should generally not begin with a '/'.",
 "type": "string"
 },
+"privateNetworkService": {
+"description": "Service Directory Service to be used as the endpoint for transfers from a custom VPC. Format: `projects/{project_id}/locations/{location}/namespaces/{namespace}/services/{service}`",
+"type": "string"
+},
 "roleArn": {
 "description": "The Amazon Resource Name (ARN) of the role to support temporary credentials via `AssumeRoleWithWebIdentity`. For more information about ARNs, see [IAM ARNs](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns). When a role ARN is provided, Transfer Service fetches temporary credentials for the session using a `AssumeRoleWithWebIdentity` call for the provided role using the GoogleServiceAccount for this project.",
 "type": "string"
@@ -777,6 +781,10 @@
 "description": "Root path to transfer objects. Must be an empty string or full path name that ends with a '/'. This field is treated as an object prefix. As such, it should generally not begin with a '/'.",
 "type": "string"
 },
+"privateNetworkService": {
+"description": "Service Directory Service to be used as the endpoint for transfers from a custom VPC. Format: `projects/{project_id}/locations/{location}/namespaces/{namespace}/services/{service}`",
+"type": "string"
+},
 "storageAccount": {
 "description": "Required. The name of the Azure Storage account.",
 "type": "string"
@@ -1047,7 +1055,7 @@
 "type": "array"
 },
 "unreachable": {
-"description": "Unordered list. Unreachable resources. Populated when the request sets `ListOperationsRequest.return_partial_success` and reads across collections e.g. when attempting to list all resources across all supported locations.",
+"description": "Unordered list. Unreachable resources. Populated when the request sets `ListOperationsRequest.return_partial_success` and reads across collections. For example, when attempting to list all resources across all supported locations.",
 "items": {
 "type": "string"
 },
@@ -1336,6 +1344,10 @@
 "format": "google-datetime",
 "type": "string"
 },
+"matchGlob": {
+"description": "Optional. If specified, only objects matching this glob are transferred.",
+"type": "string"
+},
 "maxTimeElapsedSinceLastModification": {
 "description": "Ensures that objects are not transferred if a specific maximum time has elapsed since the \"last modification time\". When a TransferOperation begins, objects with a \"last modification time\" are transferred only if the elapsed time between the start_time of the `TransferOperation`and the \"last modification time\" of the object is less than the value of max_time_elapsed_since_last_modification`. Objects that do not have a \"last modification time\" are also transferred.",
 "format": "google-duration",
@@ -1757,7 +1769,7 @@
 "description": "Specifies schedule for the transfer job. This is an optional field. When the field is not set, the job never executes a transfer, unless you invoke RunTransferJob or update the job to have a non-empty schedule."
 },
 "serviceAccount": {
-"description": "Optional. The user-managed service account to which to delegate service agent permissions. You can grant Cloud Storage bucket permissions to this service account instead of to the Transfer Service service agent. Format is `projects/-/serviceAccounts/ACCOUNT_EMAIL_OR_UNIQUEID` Either the service account email (`SERVICE_ACCOUNT_NAME@PROJECT_ID.iam.gserviceaccount.com`) or the unique ID (`123456789012345678901`) are accepted in the string. The `-` wildcard character is required; replacing it with a project ID is invalid. See https://cloud.google.com//storage-transfer/docs/delegate-service-agent-permissions for required permissions.",
+"description": "Optional. The user-managed service account to which to delegate service agent permissions. You can grant Cloud Storage bucket permissions to this service account instead of to the Transfer Service service agent. Either the service account email (`SERVICE_ACCOUNT_NAME@PROJECT_ID.iam.gserviceaccount.com`) or the unique ID (`123456789012345678901`) are accepted. See https://docs.cloud.google.com/storage-transfer/docs/delegate-service-agent-permissions for required permissions.",
 "type": "string"
 },
 "status": {

googleapiclient/discovery_cache/documents/sts.v1.json

@@ -99,6 +99,11 @@
 },
 {
 "description": "Regional Endpoint",
+"endpointUrl": "https://sts.europe-west15.rep.googleapis.com/",
+"location": "europe-west15"
+},
+{
+"description": "Regional Endpoint",
 "endpointUrl": "https://sts.europe-west2.rep.googleapis.com/",
 "location": "europe-west2"
 },
@@ -338,7 +343,7 @@
 }
 }
 },
-"revision": "20250827",
+"revision": "20251203",
 "rootUrl": "https://sts.googleapis.com/",
 "schemas": {
 "GoogleIamV1Binding": {
@@ -471,6 +476,10 @@
 "$ref": "GoogleIdentityStsV1AccessBoundary",
 "description": "An access boundary that defines the upper bound of permissions the credential may have. The value should be a JSON object of AccessBoundary. The access boundary can include up to 10 rules. The size of the parameter value should not exceed 2048 characters."
 },
+"bindCertFingerprint": {
+"description": "The unpadded, base64url-encoded SHA-256 hash of the certificate's DER encoding and it must be 43 characters long. The resulting token will be bound to this value.",
+"type": "string"
+},
 "userProject": {
 "description": "A Google project used for quota and billing purposes when the credential is used to access Google APIs. The provided project overrides the project bound to the credential. The value must be a project number or a project ID. Example: `my-sample-project-191923`. The maximum length is 32 characters.",
 "type": "string"

googleapiclient/discovery_cache/documents/sts.v1beta.json

@@ -99,6 +99,11 @@
 },
 {
 "description": "Regional Endpoint",
+"endpointUrl": "https://sts.europe-west15.rep.googleapis.com/",
+"location": "europe-west15"
+},
+{
+"description": "Regional Endpoint",
 "endpointUrl": "https://sts.europe-west2.rep.googleapis.com/",
 "location": "europe-west2"
 },
@@ -338,7 +343,7 @@
 }
 }
 },
-"revision": "20250521",
+"revision": "20251203",
 "rootUrl": "https://sts.googleapis.com/",
 "schemas": {
 "GoogleIamV1Binding": {
@@ -407,6 +412,10 @@
 "$ref": "GoogleIdentityStsV1AccessBoundary",
 "description": "An access boundary that defines the upper bound of permissions the credential may have. The value should be a JSON object of AccessBoundary. The access boundary can include up to 10 rules. The size of the parameter value should not exceed 2048 characters."
 },
+"bindCertFingerprint": {
+"description": "The unpadded, base64url-encoded SHA-256 hash of the certificate's DER encoding and it must be 43 characters long. The resulting token will be bound to this value.",
+"type": "string"
+},
 "userProject": {
 "description": "A Google project used for quota and billing purposes when the credential is used to access Google APIs. The provided project overrides the project bound to the credential. The value must be a project number or a project ID. Example: `my-sample-project-191923`. The maximum length is 32 characters.",
 "type": "string"