google-api-python-client 2.187.0__py3-none-any.whl → 2.189.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/networkmanagement.v1.json

@@ -183,13 +183,15 @@
 }
 },
 "resources": {
+"global": {
+"resources": {
 "operations": {
 "methods": {
 "cancel": {
 "description": "Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of `1`, corresponding to `Code.CANCELLED`.",
-"flatPath": "v1/organizations/{organizationsId}/locations/{locationsId}/operations/{operationsId}:cancel",
+"flatPath": "v1/organizations/{organizationsId}/locations/global/operations/{operationsId}:cancel",
 "httpMethod": "POST",
-"id": "networkmanagement.organizations.locations.operations.cancel",
+"id": "networkmanagement.organizations.locations.global.operations.cancel",
 "parameterOrder": [
 "name"
 ],
@@ -197,7 +199,7 @@
 "name": {
 "description": "The name of the operation resource to be cancelled.",
 "location": "path",
-"pattern": "^organizations/[^/]+/locations/[^/]+/operations/[^/]+$",
+"pattern": "^organizations/[^/]+/locations/global/operations/[^/]+$",
 "required": true,
 "type": "string"
 }
@@ -215,9 +217,9 @@
 },
 "delete": {
 "description": "Deletes a long-running operation. This method indicates that the client is no longer interested in the operation result. It does not cancel the operation. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`.",
-"flatPath": "v1/organizations/{organizationsId}/locations/{locationsId}/operations/{operationsId}",
+"flatPath": "v1/organizations/{organizationsId}/locations/global/operations/{operationsId}",
 "httpMethod": "DELETE",
-"id": "networkmanagement.organizations.locations.operations.delete",
+"id": "networkmanagement.organizations.locations.global.operations.delete",
 "parameterOrder": [
 "name"
 ],
@@ -225,7 +227,7 @@
 "name": {
 "description": "The name of the operation resource to be deleted.",
 "location": "path",
-"pattern": "^organizations/[^/]+/locations/[^/]+/operations/[^/]+$",
+"pattern": "^organizations/[^/]+/locations/global/operations/[^/]+$",
 "required": true,
 "type": "string"
 }
@@ -240,9 +242,9 @@
 },
 "get": {
 "description": "Gets the latest state of a long-running operation. Clients can use this method to poll the operation result at intervals as recommended by the API service.",
-"flatPath": "v1/organizations/{organizationsId}/locations/{locationsId}/operations/{operationsId}",
+"flatPath": "v1/organizations/{organizationsId}/locations/global/operations/{operationsId}",
 "httpMethod": "GET",
-"id": "networkmanagement.organizations.locations.operations.get",
+"id": "networkmanagement.organizations.locations.global.operations.get",
 "parameterOrder": [
 "name"
 ],
@@ -250,7 +252,7 @@
 "name": {
 "description": "The name of the operation resource.",
 "location": "path",
-"pattern": "^organizations/[^/]+/locations/[^/]+/operations/[^/]+$",
+"pattern": "^organizations/[^/]+/locations/global/operations/[^/]+$",
 "required": true,
 "type": "string"
 }
@@ -265,9 +267,9 @@
 },
 "list": {
 "description": "Lists operations that match the specified filter in the request. If the server doesn't support this method, it returns `UNIMPLEMENTED`.",
-"flatPath": "v1/organizations/{organizationsId}/locations/{locationsId}/operations",
+"flatPath": "v1/organizations/{organizationsId}/locations/global/operations",
 "httpMethod": "GET",
-"id": "networkmanagement.organizations.locations.operations.list",
+"id": "networkmanagement.organizations.locations.global.operations.list",
 "parameterOrder": [
 "name"
 ],
@@ -280,7 +282,7 @@
 "name": {
 "description": "The name of the operation's parent resource.",
 "location": "path",
-"pattern": "^organizations/[^/]+/locations/[^/]+$",
+"pattern": "^organizations/[^/]+/locations/global$",
 "required": true,
 "type": "string"
 },
@@ -296,7 +298,7 @@
 "type": "string"
 },
 "returnPartialSuccess": {
-"description": "When set to `true`, operations that are reachable are returned as normal, and those that are unreachable are returned in the [ListOperationsResponse.unreachable] field. This can only be `true` when reading across collections e.g. when `parent` is set to `\"projects/example/locations/-\"`. This field is not by default supported and will result in an `UNIMPLEMENTED` error if set unless explicitly documented otherwise in service or product specific documentation.",
+"description": "When set to `true`, operations that are reachable are returned as normal, and those that are unreachable are returned in the ListOperationsResponse.unreachable field. This can only be `true` when reading across collections. For example, when `parent` is set to `\"projects/example/locations/-\"`. This field is not supported by default and will result in an `UNIMPLEMENTED` error if set unless explicitly documented otherwise in service or product specific documentation.",
 "location": "query",
 "type": "boolean"
 }
@@ -310,6 +312,8 @@
 ]
 }
 }
+}
+}
 },
 "vpcFlowLogsConfigs": {
 "methods": {
@@ -427,7 +431,7 @@
 "type": "string"
 },
 "parent": {
-"description": "Required. The parent resource of the VpcFlowLogsConfig, in one of the following formats: - For project-level resourcs: `projects/{project_id}/locations/global` - For organization-level resources: `organizations/{organization_id}/locations/global`",
+"description": "Required. The parent resource of the VpcFlowLogsConfig, in one of the following formats: - For project-level resources: `projects/{project_id}/locations/global` - For organization-level resources: `organizations/{organization_id}/locations/global`",
 "location": "path",
 "pattern": "^organizations/[^/]+/locations/[^/]+$",
 "required": true,
@@ -957,7 +961,7 @@
 "type": "string"
 },
 "returnPartialSuccess": {
-"description": "When set to `true`, operations that are reachable are returned as normal, and those that are unreachable are returned in the [ListOperationsResponse.unreachable] field. This can only be `true` when reading across collections e.g. when `parent` is set to `\"projects/example/locations/-\"`. This field is not by default supported and will result in an `UNIMPLEMENTED` error if set unless explicitly documented otherwise in service or product specific documentation.",
+"description": "When set to `true`, operations that are reachable are returned as normal, and those that are unreachable are returned in the ListOperationsResponse.unreachable field. This can only be `true` when reading across collections. For example, when `parent` is set to `\"projects/example/locations/-\"`. This field is not supported by default and will result in an `UNIMPLEMENTED` error if set unless explicitly documented otherwise in service or product specific documentation.",
 "location": "query",
 "type": "boolean"
 }
@@ -1090,7 +1094,7 @@
 "type": "string"
 },
 "parent": {
-"description": "Required. The parent resource of the VpcFlowLogsConfig, in one of the following formats: - For project-level resourcs: `projects/{project_id}/locations/global` - For organization-level resources: `organizations/{organization_id}/locations/global`",
+"description": "Required. The parent resource of the VpcFlowLogsConfig, in one of the following formats: - For project-level resources: `projects/{project_id}/locations/global` - For organization-level resources: `organizations/{organization_id}/locations/global`",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
@@ -1233,7 +1237,7 @@
 }
 }
 },
-"revision": "20251022",
+"revision": "20260121",
 "rootUrl": "https://networkmanagement.googleapis.com/",
 "schemas": {
 "AbortInfo": {
@@ -1260,6 +1264,9 @@
 "PERMISSION_DENIED_NO_NEG_ENDPOINT_CONFIGS",
 "PERMISSION_DENIED_NO_CLOUD_ROUTER_CONFIGS",
 "NO_SOURCE_LOCATION",
+"NO_SOURCE_GCP_NETWORK_LOCATION",
+"NO_SOURCE_NON_GCP_NETWORK_LOCATION",
+"NO_SOURCE_INTERNET_LOCATION",
 "INVALID_ARGUMENT",
 "TRACE_TOO_LONG",
 "INTERNAL_ERROR",
@@ -1274,6 +1281,7 @@
 "GOOGLE_MANAGED_SERVICE_AMBIGUOUS_PSC_ENDPOINT",
 "GOOGLE_MANAGED_SERVICE_AMBIGUOUS_ENDPOINT",
 "SOURCE_PSC_CLOUD_SQL_UNSUPPORTED",
+"SOURCE_EXTERNAL_CLOUD_SQL_UNSUPPORTED",
 "SOURCE_REDIS_CLUSTER_UNSUPPORTED",
 "SOURCE_REDIS_INSTANCE_UNSUPPORTED",
 "SOURCE_FORWARDING_RULE_UNSUPPORTED",
@@ -1281,7 +1289,8 @@
 "UNKNOWN_ISSUE_IN_GOOGLE_MANAGED_PROJECT",
 "UNSUPPORTED_GOOGLE_MANAGED_PROJECT_CONFIG",
 "NO_SERVERLESS_IP_RANGES",
-"IP_VERSION_PROTOCOL_MISMATCH"
+"IP_VERSION_PROTOCOL_MISMATCH",
+"GKE_POD_UNKNOWN_ENDPOINT_LOCATION"
 ],
 "enumDeprecated": [
 false,
@@ -1322,6 +1331,11 @@ false,
 false,
 false,
 false,
+false,
+false,
+false,
+false,
+false,
 false
 ],
 "enumDescriptions": [
@@ -1341,7 +1355,10 @@ false
 "Aborted because user lacks permission to access Cloud NAT configs required to run the test.",
 "Aborted because user lacks permission to access Network endpoint group endpoint configs required to run the test.",
 "Aborted because user lacks permission to access Cloud Router configs required to run the test.",
-"Aborted because no valid source or destination endpoint is derived from the input test request.",
+"Aborted because no valid source or destination endpoint can be derived from the test request.",
+"Aborted because the source IP address is not contained within the subnet ranges of the provided VPC network.",
+"Aborted because the source IP address is not contained within the destination ranges of the routes towards non-GCP networks in the provided VPC network.",
+"Aborted because the source IP address can't be resolved as an Internet IP address.",
 "Aborted because the source or destination endpoint specified in the request is invalid. Some examples: - The request might contain malformed resource URI, project ID, or IP address. - The request might contain inconsistent information (for example, the request might include both the instance and the network, but the instance might not have a NIC in that network).",
 "Aborted because the number of steps in the trace exceeds a certain limit. It might be caused by a routing loop.",
 "Aborted due to internal server error.",
@@ -1356,6 +1373,7 @@ false
 "Aborted because PSC endpoint selection for the Google-managed service is ambiguous (several PSC endpoints satisfy test input).",
 "Aborted because endpoint selection for the Google-managed service is ambiguous (several endpoints satisfy test input).",
 "Aborted because tests with a PSC-based Cloud SQL instance as a source are not supported.",
+"Aborted because tests with the external database as a source are not supported. In such replication scenarios, the connection is initiated by the Cloud SQL replica instance.",
 "Aborted because tests with a Redis Cluster as a source are not supported.",
 "Aborted because tests with a Redis Instance as a source are not supported.",
 "Aborted because tests with a forwarding rule as a source are not supported.",
@@ -1363,7 +1381,8 @@ false
 "Aborted due to an unknown issue in the Google-managed project.",
 "Aborted due to an unsupported configuration of the Google-managed project.",
 "Aborted because the source endpoint is a Cloud Run revision with direct VPC access enabled, but there are no reserved serverless IP ranges.",
-"Aborted because the used protocol is not supported for the used IP version."
+"Aborted because the used protocol is not supported for the used IP version.",
+"Aborted because selected GKE Pod endpoint location is unknown. This is often the case for \"Pending\" Pods, which don't have assigned IP addresses yet."
 ],
 "type": "string"
 },
@@ -1741,7 +1760,8 @@ false
 "CLOUD_RUN_REVISION",
 "GOOGLE_MANAGED_SERVICE",
 "REDIS_INSTANCE",
-"REDIS_CLUSTER"
+"REDIS_CLUSTER",
+"GKE_POD"
 ],
 "enumDescriptions": [
 "Target not specified.",
@@ -1761,7 +1781,8 @@ false
 "Target is a Cloud Run revision. Used only for return traces.",
 "Target is a Google-managed service. Used only for return traces.",
 "Target is a Redis Instance.",
-"Target is a Redis Cluster."
+"Target is a Redis Cluster.",
+"Target is a GKE Pod."
 ],
 "type": "string"
 }
@@ -1817,6 +1838,7 @@ false
 "ROUTE_NEXT_HOP_VPN_TUNNEL_NOT_ESTABLISHED",
 "ROUTE_NEXT_HOP_FORWARDING_RULE_TYPE_INVALID",
 "NO_ROUTE_FROM_INTERNET_TO_PRIVATE_IPV6_ADDRESS",
+"NO_ROUTE_FROM_INTERNET_TO_PRIVATE_IPV4_ADDRESS",
 "NO_ROUTE_FROM_EXTERNAL_IPV6_SOURCE_TO_PRIVATE_IPV6_ADDRESS",
 "VPN_TUNNEL_LOCAL_SELECTOR_MISMATCH",
 "VPN_TUNNEL_REMOTE_SELECTOR_MISMATCH",
@@ -1831,6 +1853,7 @@ false
 "INGRESS_FIREWALL_TAGS_UNSUPPORTED_BY_DIRECT_VPC_EGRESS",
 "INSTANCE_NOT_RUNNING",
 "GKE_CLUSTER_NOT_RUNNING",
+"GKE_POD_NOT_RUNNING",
 "CLOUD_SQL_INSTANCE_NOT_RUNNING",
 "REDIS_INSTANCE_NOT_RUNNING",
 "REDIS_CLUSTER_NOT_RUNNING",
@@ -1893,6 +1916,7 @@ false
 "UNSUPPORTED_ROUTE_MATCHED_FOR_NAT64_DESTINATION",
 "TRAFFIC_FROM_HYBRID_ENDPOINT_TO_INTERNET_DISALLOWED",
 "NO_MATCHING_NAT64_GATEWAY",
+"NO_CONFIGURED_PRIVATE_NAT64_RULE",
 "LOAD_BALANCER_BACKEND_IP_VERSION_MISMATCH",
 "NO_KNOWN_ROUTE_FROM_NCC_NETWORK_TO_DESTINATION",
 "CLOUD_NAT_PROTOCOL_UNSUPPORTED",
@@ -1900,7 +1924,8 @@ false
 "L2_INTERCONNECT_UNSUPPORTED_PORT",
 "L2_INTERCONNECT_DESTINATION_IP_MISMATCH",
 "NCC_ROUTE_WITHIN_HYBRID_SUBNET_UNSUPPORTED",
-"HYBRID_SUBNET_REGION_MISMATCH"
+"HYBRID_SUBNET_REGION_MISMATCH",
+"HYBRID_SUBNET_NO_ROUTE"
 ],
 "enumDescriptions": [
 "Cause is unspecified.",
@@ -1917,7 +1942,8 @@ false
 "Route's next hop forwarding rule doesn't match next hop IP address.",
 "Route's next hop VPN tunnel is down (does not have valid IKE SAs).",
 "Route's next hop forwarding rule type is invalid (it's not a forwarding rule of the internal passthrough load balancer).",
-"Packet is sent from the Internet or Google service to the private IPv6 address.",
+"Packet is sent from the Internet to the private IPv6 address.",
+"Packet is sent from the Internet to the private IPv4 address.",
 "Packet is sent from the external IPv6 source address of an instance to the private IPv6 address of an instance.",
 "The packet does not match a policy-based VPN tunnel local selector.",
 "The packet does not match a policy-based VPN tunnel remote selector.",
@@ -1932,6 +1958,7 @@ false
 "Matching ingress firewall rules by network tags for packets sent via serverless VPC direct egress is unsupported. Behavior is undefined. https://cloud.google.com/run/docs/configuring/vpc-direct-vpc#limitations",
 "Packet is sent from or to a Compute Engine instance that is not in a running state.",
 "Packet sent from or to a GKE cluster that is not in running state.",
+"Packet sent from or to a GKE Pod that is not in running state.",
 "Packet sent from or to a Cloud SQL instance that is not in running state.",
 "Packet sent from or to a Redis Instance that is not in running state.",
 "Packet sent from or to a Redis Cluster that is not in running state.",
@@ -1994,6 +2021,7 @@ false
 "Packet with destination IP address within the reserved NAT64 range is dropped due to matching a route of an unsupported type.",
 "Packet could be dropped because hybrid endpoint like a VPN gateway or Interconnect is not allowed to send traffic to the Internet.",
 "Packet with destination IP address within the reserved NAT64 range is dropped due to no matching NAT gateway in the subnet.",
+"Packet is dropped due to matching a Private NAT64 gateway with no rules for source IPv6 addresses.",
 "Packet is dropped due to being sent to a backend of a passthrough load balancer that doesn't use the same IP version as the frontend.",
 "Packet from the unknown NCC network is dropped due to no known route from the source network to the destination IP address.",
 "Packet is dropped by Cloud NAT due to using an unsupported protocol.",
@@ -2001,7 +2029,8 @@ false
 "Packet is dropped due to using an unsupported port (any other than 6081) for L2 Interconnect.",
 "Packet is dropped due to destination IP not matching the appliance mapping IPs configured on the L2 Interconnect attachment.",
 "Packet could be dropped because it matches a route associated with an NCC spoke in the hybrid subnet context, but such a configuration is not supported.",
-"Packet is dropped because the region of the hybrid subnet is different from the region of the next hop of the route matched within this hybrid subnet."
+"Packet is dropped because the region of the hybrid subnet is different from the region of the next hop of the route matched within this hybrid subnet.",
+"Packet is dropped because no matching route was found in the hybrid subnet."
 ],
 "type": "string"
 },
@@ -2231,6 +2260,10 @@ false
 "description": "A cluster URI for [Google Kubernetes Engine cluster control plane](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture).",
 "type": "string"
 },
+"gkePod": {
+"description": "A [GKE Pod](https://cloud.google.com/kubernetes-engine/docs/concepts/pod) URI.",
+"type": "string"
+},
 "instance": {
 "description": "A Compute Engine instance URI.",
 "type": "string"
@@ -2276,20 +2309,22 @@ false
 "type": "string"
 },
 "network": {
-"description": "A VPC network URI.",
+"description": "A VPC network URI. For source endpoints, used according to the `network_type`. For destination endpoints, used only when the source is an external IP address endpoint, and the destination is an internal IP address endpoint.",
 "type": "string"
 },
 "networkType": {
-"description": "Type of the network where the endpoint is located. Applicable only to source endpoint, as destination network type can be inferred from the source.",
+"description": "For source endpoints, type of the network where the endpoint is located. Not relevant for destination endpoints.",
 "enum": [
 "NETWORK_TYPE_UNSPECIFIED",
 "GCP_NETWORK",
-"NON_GCP_NETWORK"
+"NON_GCP_NETWORK",
+"INTERNET"
 ],
 "enumDescriptions": [
-"Default type if unspecified.",
-"A network hosted within Google Cloud. To receive more detailed output, specify the URI for the source or destination network.",
-"A network hosted outside of Google Cloud. This can be an on-premises network, an internet resource or a network hosted by another cloud provider."
+"Unspecified. The `project_id` field should be set to the project where the GCP endpoint is located, or where the non-GCP endpoint should be reachable from (via routes to non-GCP networks). The test will analyze all possible IP address locations. This might take longer and produce inaccurate or ambiguous results, so prefer specifying an explicit network type.",
+"A VPC network. The `network` field should be set to the URI of this network. Only endpoints within this network will be considered.",
+"A non-GCP network (for example, an on-premises network or network in another Cloud). The `network` field should be set to the URI of the VPC network containing a corresponding VPN tunnel, Interconnect attachment, or router appliance instance. Only endpoints reachable from the provided VPC network via the routes to non-GCP networks will be considered.",
+"Internet. Only endpoints reachable over public Internet and endpoints within Google API and service ranges will be considered."
 ],
 "type": "string"
 },
@@ -2299,7 +2334,7 @@ false
 "type": "integer"
 },
 "projectId": {
-"description": "Project ID where the endpoint is located. The project ID can be derived from the URI if you provide a endpoint or network URI. The following are two cases where you may need to provide the project ID: 1. Only the IP address is specified, and the IP address is within a Google Cloud project. 2. When you are using Shared VPC and the IP address that you provide is from the service project. In this case, the network that the IP address resides in is defined in the host project.",
+"description": "For source endpoints, endpoint project ID. Used according to the `network_type`. Not relevant for destination endpoints.",
 "type": "string"
 },
 "redisCluster": {
@@ -2403,6 +2438,8 @@ false
 "SERVERLESS_VPC_ACCESS_MANAGED_FIREWALL_RULE",
 "NETWORK_FIREWALL_POLICY_RULE",
 "NETWORK_REGIONAL_FIREWALL_POLICY_RULE",
+"SYSTEM_NETWORK_FIREWALL_POLICY_RULE",
+"SYSTEM_REGIONAL_NETWORK_FIREWALL_POLICY_RULE",
 "UNSUPPORTED_FIREWALL_POLICY_RULE",
 "TRACKING_STATE",
 "ANALYSIS_SKIPPED"
@@ -2413,8 +2450,10 @@ false
 "VPC firewall rule. For details, see [VPC firewall rules overview](https://cloud.google.com/vpc/docs/firewalls).",
 "Implied VPC firewall rule. For details, see [Implied rules](https://cloud.google.com/vpc/docs/firewalls#default_firewall_rules).",
 "Implicit firewall rules that are managed by serverless VPC access to allow ingress access. They are not visible in the Google Cloud console. For details, see [VPC connector's implicit rules](https://cloud.google.com/functions/docs/networking/connecting-vpc#restrict-access).",
-"Global network firewall policy rule. For details, see [Network firewall policies](https://cloud.google.com/vpc/docs/network-firewall-policies).",
-"Regional network firewall policy rule. For details, see [Regional network firewall policies](https://cloud.google.com/firewall/docs/regional-firewall-policies).",
+"User-defined global network firewall policy rule. For details, see [Network firewall policies](https://cloud.google.com/vpc/docs/network-firewall-policies).",
+"User-defined regional network firewall policy rule. For details, see [Regional network firewall policies](https://cloud.google.com/firewall/docs/regional-firewall-policies).",
+"System-defined global network firewall policy rule.",
+"System-defined regional network firewall policy rule.",
 "Firewall policy rule containing attributes not yet supported in Connectivity tests. Firewall analysis is skipped if such a rule can potentially be matched. Please see the [list of unsupported configurations](https://cloud.google.com/network-intelligence-center/docs/connectivity-tests/concepts/overview#unsupported-configs).",
 "Tracking state for response traffic created when request traffic goes through allow firewall rule. For details, see [firewall rules specifications](https://cloud.google.com/firewall/docs/firewalls#specifications)",
 "Firewall analysis was skipped due to executing Connectivity Test in the BypassFirewallChecks mode"
@@ -2614,6 +2653,64 @@ false
 },
 "type": "object"
 },
+"GkePodInfo": {
+"description": "For display only. Metadata associated with a Google Kubernetes Engine (GKE) Pod.",
+"id": "GkePodInfo",
+"properties": {
+"ipAddress": {
+"description": "IP address of a GKE Pod. If the Pod is dual-stack, this is the IP address relevant to the trace.",
+"type": "string"
+},
+"networkUri": {
+"description": "URI of the network containing the GKE Pod.",
+"type": "string"
+},
+"podUri": {
+"description": "URI of a GKE Pod. For Pods in regional Clusters, the URI format is: `projects/{project}/locations/{location}/clusters/{cluster}/k8s/namespaces/{namespace}/pods/{pod}` For Pods in zonal Clusters, the URI format is: `projects/{project}/zones/{zone}/clusters/{cluster}/k8s/namespaces/{namespace}/pods/{pod}`",
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleManagedServiceInfo": {
+"description": "For display only. Metadata associated with ARRIVE_AT_GOOGLE_MANAGED_SERVICE state.",
+"id": "GoogleManagedServiceInfo",
+"properties": {
+"ipAddress": {
+"description": "IP address of the Google-managed service endpoint.",
+"type": "string"
+},
+"networkUri": {
+"description": "URI of the Google-managed service endpoint network, it is empty if the IP address is a public IP address.",
+"type": "string"
+},
+"serviceType": {
+"description": "Type of a Google-managed service.",
+"enum": [
+"SERVICE_TYPE_UNSPECIFIED",
+"UNSUPPORTED",
+"CLOUD_SQL",
+"GKE_CLUSTER_CONTROL_PLANE",
+"REDIS_CLUSTER",
+"REDIS_INSTANCE"
+],
+"enumDescriptions": [
+"Service type is unspecified.",
+"Unsupported Google-managed service.",
+"Cloud SQL Instance.",
+"GKE Cluster control plane.",
+"Redis Cluster.",
+"Redis Instance."
+],
+"type": "string"
+},
+"serviceUri": {
+"description": "URI of the Google-managed service.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "GoogleServiceInfo": {
 "description": "For display only. Details of a Google Service sending packets to a VPC network. Although the source IP might be a publicly routable address, some Google Services use special routes within Google production infrastructure to reach Compute Engine Instances. https://cloud.google.com/vpc/docs/routes#special_return_paths",
 "id": "GoogleServiceInfo",
@@ -2783,6 +2880,41 @@ false
 },
 "type": "object"
 },
+"IpMasqueradingSkippedInfo": {
+"description": "For display only. Contains information about why IP masquerading was skipped for the packet.",
+"id": "IpMasqueradingSkippedInfo",
+"properties": {
+"nonMasqueradeRange": {
+"description": "The matched non-masquerade IP range. Only set if reason is DESTINATION_IP_IN_CONFIGURED_NON_MASQUERADE_RANGE or DESTINATION_IP_IN_DEFAULT_NON_MASQUERADE_RANGE.",
+"type": "string"
+},
+"reason": {
+"description": "Reason why IP masquerading was not applied.",
+"enum": [
+"REASON_UNSPECIFIED",
+"DESTINATION_IP_IN_CONFIGURED_NON_MASQUERADE_RANGE",
+"DESTINATION_IP_IN_DEFAULT_NON_MASQUERADE_RANGE",
+"DESTINATION_ON_SAME_NODE",
+"DEFAULT_SNAT_DISABLED",
+"NO_MASQUERADING_FOR_IPV6",
+"POD_USES_NODE_NETWORK_NAMESPACE",
+"NO_MASQUERADING_FOR_RETURN_PACKET"
+],
+"enumDescriptions": [
+"Unused default value.",
+"Masquerading not applied because destination IP is in one of configured non-masquerade ranges.",
+"Masquerading not applied because destination IP is in one of default non-masquerade ranges.",
+"Masquerading not applied because destination is on the same Node.",
+"Masquerading not applied because ip-masq-agent doesn't exist and default SNAT is disabled.",
+"Masquerading not applied because the packet's IP version is IPv6.",
+"Masquerading not applied because the source Pod uses the host Node's network namespace, including the Node's IP address.",
+"Masquerading not applied because the packet is a return packet."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "LatencyDistribution": {
 "description": "Describes measured latency distribution.",
 "id": "LatencyDistribution",
@@ -2873,7 +3005,7 @@ false
 "type": "array"
 },
 "unreachable": {
-"description": "Unordered list. Unreachable resources. Populated when the request sets `ListOperationsRequest.return_partial_success` and reads across collections e.g. when attempting to list all resources across all supported locations.",
+"description": "Unordered list. Unreachable resources. Populated when the request sets `ListOperationsRequest.return_partial_success` and reads across collections. For example, when attempting to list all resources across all supported locations.",
 "items": {
 "type": "string"
 },
@@ -3109,6 +3241,26 @@ false
 "description": "For display only. Metadata associated with NAT.",
 "id": "NatInfo",
 "properties": {
+"cloudNatGatewayType": {
+"description": "Type of Cloud NAT gateway. Only valid when `type` is CLOUD_NAT.",
+"enum": [
+"CLOUD_NAT_GATEWAY_TYPE_UNSPECIFIED",
+"PUBLIC_NAT44",
+"PUBLIC_NAT64",
+"PRIVATE_NAT_NCC",
+"PRIVATE_NAT_HYBRID",
+"PRIVATE_NAT64"
+],
+"enumDescriptions": [
+"Type is unspecified.",
+"Public NAT gateway.",
+"Public NAT64 gateway.",
+"Private NAT gateway for NCC.",
+"Private NAT gateway for hybrid connectivity.",
+"Private NAT64 gateway."
+],
+"type": "string"
+},
 "natGatewayName": {
 "description": "The name of Cloud NAT Gateway. Only valid when type is CLOUD_NAT.",
 "type": "string"
@@ -3968,6 +4120,14 @@ false
 "$ref": "GKEMasterInfo",
 "description": "Display information of a Google Kubernetes Engine cluster master."
 },
+"gkePod": {
+"$ref": "GkePodInfo",
+"description": "Display information of a Google Kubernetes Engine Pod."
+},
+"googleManagedService": {
+"$ref": "GoogleManagedServiceInfo",
+"description": "Display information of a Google-managed service."
+},
 "googleService": {
 "$ref": "GoogleServiceInfo",
 "description": "Display information of a Google service"
@@ -3984,6 +4144,10 @@ false
 "$ref": "InterconnectAttachmentInfo",
 "description": "Display information of an interconnect attachment."
 },
+"ipMasqueradingSkipped": {
+"$ref": "IpMasqueradingSkippedInfo",
+"description": "Display information of the reason why GKE Pod IP masquerading was skipped."
+},
 "loadBalancer": {
 "$ref": "LoadBalancerInfo",
 "deprecated": true,
@@ -4039,6 +4203,7 @@ false
 "START_FROM_PRIVATE_NETWORK",
 "START_FROM_GKE_MASTER",
 "START_FROM_CLOUD_SQL_INSTANCE",
+"START_FROM_GKE_POD",
 "START_FROM_REDIS_INSTANCE",
 "START_FROM_REDIS_CLUSTER",
 "START_FROM_CLOUD_FUNCTION",
@@ -4063,7 +4228,9 @@ false
 "ARRIVE_AT_VPC_CONNECTOR",
 "DIRECT_VPC_EGRESS_CONNECTION",
 "SERVERLESS_EXTERNAL_CONNECTION",
+"ARRIVE_AT_GOOGLE_MANAGED_SERVICE",
 "NAT",
+"SKIP_GKE_POD_IP_MASQUERADING",
 "PROXY_CONNECTION",
 "DELIVER",
 "DROP",
@@ -4094,6 +4261,7 @@ false,
 false,
 false,
 false,
+false,
 true,
 true,
 false,
@@ -4109,6 +4277,8 @@ false,
 false,
 false,
 false,
+false,
+false,
 false
 ],
 "enumDescriptions": [
@@ -4119,6 +4289,7 @@ false
 "Initial state: packet originating from a VPC or on-premises network with internal source IP. If the source is a VPC network visible to the user, a NetworkInfo is populated with details of the network.",
 "Initial state: packet originating from a Google Kubernetes Engine cluster master. A GKEMasterInfo is populated with starting instance information.",
 "Initial state: packet originating from a Cloud SQL instance. A CloudSQLInstanceInfo is populated with starting instance information.",
+"Initial state: packet originating from a Google Kubernetes Engine Pod. A GkePodInfo is populated with starting Pod information.",
 "Initial state: packet originating from a Redis instance. A RedisInstanceInfo is populated with starting instance information.",
 "Initial state: packet originating from a Redis Cluster. A RedisClusterInfo is populated with starting Cluster information.",
 "Initial state: packet originating from a Cloud Function. A CloudFunctionInfo is populated with starting function information.",
@@ -4143,7 +4314,9 @@ false
 "Forwarding state: arriving at a VPC connector.",
 "Forwarding state: for packets originating from a serverless endpoint forwarded through Direct VPC egress.",
 "Forwarding state: for packets originating from a serverless endpoint forwarded through public (external) connectivity.",
+"Forwarding state: arriving at a Google-managed service endpoint.",
 "Transition state: packet header translated. The `nat` field is populated with the translation information.",
+"Transition state: GKE Pod IP masquerading is skipped. The `ip_masquerading_skipped` field is populated with the reason.",
 "Transition state: original connection is terminated and a new proxied connection is initiated.",
 "Final state: packet could be delivered.",
 "Final state: packet could be dropped.",