google-api-python-client 2.192.0__py3-none-any.whl → 2.193.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/compute.alpha.json

@@ -4108,6 +4108,9 @@
 }
 },
 "path": "projects/{project}/zones/{zone}/disks/{disk}/updateKmsKey",
+"request": {
+"$ref": "DiskUpdateKmsKeyRequest"
+},
 "response": {
 "$ref": "Operation"
 },
@@ -30228,6 +30231,9 @@
 }
 },
 "path": "projects/{project}/regions/{region}/disks/{disk}/updateKmsKey",
+"request": {
+"$ref": "RegionDiskUpdateKmsKeyRequest"
+},
 "response": {
 "$ref": "Operation"
 },
@@ -38866,6 +38872,9 @@
 }
 },
 "path": "projects/{project}/regions/{region}/snapshots/{snapshot}/updateKmsKey",
+"request": {
+"$ref": "RegionSnapshotUpdateKmsKeyRequest"
+},
 "response": {
 "$ref": "Operation"
 },
@@ -46704,6 +46713,9 @@
 }
 },
 "path": "projects/{project}/global/snapshots/{snapshot}/updateKmsKey",
+"request": {
+"$ref": "SnapshotUpdateKmsKeyRequest"
+},
 "response": {
 "$ref": "Operation"
 },
@@ -54664,7 +54676,7 @@
 }
 }
 },
-"revision": "20260213",
+"revision": "20260306",
 "rootUrl": "https://compute.googleapis.com/",
 "schemas": {
 "AWSV4Signature": {
@@ -59080,18 +59092,6 @@ false
 },
 "readOnly": true,
 "type": "array"
-},
-"vpcNetworkScope": {
-"description": "The network scope of the backends that can be added to the backend\nservice. This field can be either GLOBAL_VPC_NETWORK orREGIONAL_VPC_NETWORK.\n\nA backend service with the VPC scope set to GLOBAL_VPC_NETWORK\nis only allowed to have backends in global VPC networks.\n\nWhen the VPC scope is set to REGIONAL_VPC_NETWORK the backend\nservice is only allowed to have backends in regional networks in the same\nscope as the backend service.\nNote: if not specified then GLOBAL_VPC_NETWORK will be used.",
-"enum": [
-"GLOBAL_VPC_NETWORK",
-"REGIONAL_VPC_NETWORK"
-],
-"enumDescriptions": [
-"The backend service can only have backends in global VPCs",
-"The backend service can only have backends in regional VPCs"
-],
-"type": "string"
 }
 },
 "type": "object"
@@ -59484,7 +59484,7 @@ false
 "id": "BackendServiceFailoverPolicy",
 "properties": {
 "disableConnectionDrainOnFailover": {
-"description": "This can be set to true only if the protocol isTCP.\n\nThe default is false.",
+"description": "This can be set to true if the protocol isTCP, UDP, or UNSPECIFIED.\n\nThe default is false.",
 "type": "boolean"
 },
 "dropTrafficIfUnhealthy": {
@@ -61259,6 +61259,10 @@ false
 "description": "Instance provisining properties.",
 "id": "CapacityAdviceRequestInstanceProperties",
 "properties": {
+"acceleratorTopology": {
+"description": "Input only. Specifies the topology required to create a partition for\nVMs that have interconnected GPUs or TPUs.\nExample values: 2x2 for ct5l-hightpu-4t.",
+"type": "string"
+},
 "scheduling": {
 "$ref": "CapacityAdviceRequestInstancePropertiesScheduling",
 "description": "Specifies the scheduling options."
@@ -61560,6 +61564,10 @@ false
 "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?",
 "type": "string"
 },
+"params": {
+"$ref": "CommitmentParams",
+"description": "Input only. Additional params passed with the request, but not persisted\nas part of resource payload."
+},
 "plan": {
 "description": "The minimum time duration that you commit to purchasing resources.\nThe plan that you choose determines the preset term length of the\ncommitment (which is 1 year or 3 years) and affects the discount rate that\nyou receive for your resources. Committing to a longer time duration\ntypically gives you a higher discount rate. The supported values for this\nfield are TWELVE_MONTH (1 year), andTHIRTY_SIX_MONTH (3 years).",
 "enum": [
@@ -62066,6 +62074,20 @@ false
 },
 "type": "object"
 },
+"CommitmentParams": {
+"description": "Additional commitment params.",
+"id": "CommitmentParams",
+"properties": {
+"resourceManagerTags": {
+"additionalProperties": {
+"type": "string"
+},
+"description": "Input only. Resource manager tags to be bound to the commitment. Tag keys and\nvalues have the same definition as resource\nmanager tags. Keys and values can be either in numeric format,\nsuch as `tagKeys/{tag_key_id}` and `tagValues/{tag_value_id}` or in\nnamespaced format such as `{org_id|project_id}/{tag_key_short_name}` and\n`{tag_value_short_name}`. The field is ignored (both PUT &\nPATCH) when empty.",
+"type": "object"
+}
+},
+"type": "object"
+},
 "CommitmentResourceStatus": {
 "description": "[Output Only] Contains output only fields.",
 "id": "CommitmentResourceStatus",
@@ -64900,6 +64922,16 @@ false
 },
 "type": "object"
 },
+"DiskUpdateKmsKeyRequest": {
+"id": "DiskUpdateKmsKeyRequest",
+"properties": {
+"kmsKeyName": {
+"description": "Optional. The new KMS key to replace the current one on the disk. If empty, the disk\nwill be re-encrypted using the primary version of the disk's current KMS\nkey.\n\nThe KMS key can be provided in the following formats:\n   \n   \n     - projects/project_id/locations/location/keyRings/key_ring/cryptoKeys/key\n\n\nWhere project is the project ID or\nproject number.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "DisksAddResourcePoliciesRequest": {
 "id": "DisksAddResourcePoliciesRequest",
 "properties": {
@@ -65135,7 +65167,7 @@ false
 "type": "string"
 },
 "zones": {
-"description": "Zones where the regional managed instance group will create and manage\nits instances.",
+"description": "Zones where the regional managed instance group will create and manage\nits instances.\nBy default, a regional MIG doesn't automatically select an AI zone to create\ninstances, even if an AI zone is available in the specified region. To\ncreate instances in an AI zone in the selected region, you must explicitly\nspecify it in the distribution policy together with the other preferred\nzones.",
 "items": {
 "$ref": "DistributionPolicyZoneConfiguration"
 },
@@ -67983,6 +68015,10 @@ false
 "description": "Name prefix for the reservations to be created at the time of\ndelivery. The name prefix must comply with RFC1035.\nMaximum allowed length for name prefix is 20. Automatically created\nreservations name format will be -date-####.",
 "type": "string"
 },
+"params": {
+"$ref": "FutureReservationParams",
+"description": "Input only. Additional params passed with the request, but not persisted\nas part of resource payload."
+},
 "planningStatus": {
 "description": "Planning state before being submitted for evaluation",
 "enum": [
@@ -68122,6 +68158,20 @@ false
 },
 "type": "object"
 },
+"FutureReservationParams": {
+"description": "Additional future reservation params.",
+"id": "FutureReservationParams",
+"properties": {
+"resourceManagerTags": {
+"additionalProperties": {
+"type": "string"
+},
+"description": "Input only. Resource manager tags to be bound to the future reservation. Tag keys and\nvalues have the same definition as resource\nmanager tags. Keys and values can be either in numeric format,\nsuch as `tagKeys/{tag_key_id}` and `tagValues/{tag_value_id}` or in\nnamespaced format such as `{org_id|project_id}/{tag_key_short_name}` and\n`{tag_value_short_name}`. The field is ignored (both PUT &\nPATCH) when empty.",
+"type": "object"
+}
+},
+"type": "object"
+},
 "FutureReservationSpecificSKUProperties": {
 "id": "FutureReservationSpecificSKUProperties",
 "properties": {
@@ -69804,7 +69854,7 @@ false
 "id": "GlobalVmExtensionPolicyRolloutOperationRolloutInput",
 "properties": {
 "conflictBehavior": {
-"description": "Optional. Specifies the behavior of the rollout if a conflict is detected in a\nproject during a rollout. This only applies to `insert` and `update`\nmethods.\n\nA conflict occurs in the following cases:\n* `insert` method: If the zonal policy already exists when the insert\n  happens.\n* `update` method: If the zonal policy was modified by a zonal API call\n  outside of this rollout.\n\nPossible values are the following:\n* `\"\"` (empty string): If a conflict occurs, the local value is not\n  overwritten. This is the default behavior.\n* `\"overwrite\"`: If a conflict occurs, the local value is overwritten\n  with the rollout value.",
+"description": "Optional. Specifies the behavior of the rollout if a conflict is detected in a\nproject during a rollout. This only applies to `insert` and `update`\nmethods.\n\nA conflict occurs in the following cases:\n\n* `insert` method: If the zonal policy already exists when the insert\n  happens.\n* `update` method: If the zonal policy was modified by a zonal API call\n  outside of this rollout.\n\nPossible values are the following:\n\n* `\"\"` (empty string): If a conflict occurs, the local value is not\n  overwritten. This is the default behavior.\n* `\"overwrite\"`: If a conflict occurs, the local value is overwritten\n  with the rollout value.",
 "type": "string"
 },
 "name": {
@@ -69812,7 +69862,7 @@ false
 "type": "string"
 },
 "predefinedRolloutPlan": {
-"description": "Optional. Predefined rollout plan.",
+"description": "Optional. Specifies the predefined rollout plan for the policy. Valid values\nare `SLOW_ROLLOUT` and `FAST_ROLLOUT`. The recommended value is\n`SLOW_ROLLOUT` for progressive rollout. For more information, see Rollout\nplans for global policies.",
 "enum": [
 "FAST_ROLLOUT",
 "ROLLOUT_PLAN_UNSPECIFIED",
@@ -69854,6 +69904,14 @@ false
 "GlobalVmExtensionPolicyRolloutOperationRolloutStatusRolloutMetadata": {
 "id": "GlobalVmExtensionPolicyRolloutOperationRolloutStatusRolloutMetadata",
 "properties": {
+"locationRolloutStatus": {
+"additionalProperties": {
+"$ref": "GlobalVmExtensionPolicyRolloutOperationRolloutStatusRolloutMetadataLocationRolloutStatus"
+},
+"description": "Output only. [Output Only] The rollout status for each location. The list of the\nlocations is the same as the list of locations in the rollout plan.",
+"readOnly": true,
+"type": "object"
+},
 "rollout": {
 "description": "Output only. [Output Only] The name of the rollout.\nEx. projects//locations/global/rollouts/.",
 "readOnly": true,
@@ -69890,6 +69948,31 @@ false
 },
 "type": "object"
 },
+"GlobalVmExtensionPolicyRolloutOperationRolloutStatusRolloutMetadataLocationRolloutStatus": {
+"id": "GlobalVmExtensionPolicyRolloutOperationRolloutStatusRolloutMetadataLocationRolloutStatus",
+"properties": {
+"state": {
+"description": "Output only. [Output Only] The state of the location rollout.",
+"enum": [
+"LOCATION_ROLLOUT_STATE_COMPLETED",
+"LOCATION_ROLLOUT_STATE_FAILED",
+"LOCATION_ROLLOUT_STATE_NOT_STARTED",
+"LOCATION_ROLLOUT_STATE_SKIPPED",
+"LOCATION_ROLLOUT_STATE_UNSPECIFIED"
+],
+"enumDescriptions": [
+"The location rollout is completed.",
+"The location rollout has failed.",
+"The location rollout has not started.",
+"The location rollout is skipped.",
+"Default value. This value is unused."
+],
+"readOnly": true,
+"type": "string"
+}
+},
+"type": "object"
+},
 "GroupMaintenanceInfo": {
 "description": "Maintenance Info for ReservationBlocks.",
 "id": "GroupMaintenanceInfo",
@@ -74228,6 +74311,10 @@ false
 "$ref": "HttpFaultInjection",
 "description": "The specification for fault injection introduced into traffic to test\nthe resiliency of clients to backend service failure. As part of fault\ninjection, when clients send requests to a backend service, delays can be\nintroduced by a load balancer on a percentage of requests before sending\nthose requests to the backend service. Similarly requests from clients can\nbe aborted by the load balancer for a percentage of requests.timeout and retry_policy is ignored by clients\nthat are configured with a fault_injection_policy if:\n1. The traffic is generated by fault injection AND\n2. The fault injection is not a delay fault injection.\nFault injection is not supported with the classic Application Load Balancer\n. To see which load balancers support fault injection,\nsee Load\nbalancing: Routing and traffic management features."
 },
+"imageOptimizationPolicy": {
+"$ref": "ImageOptimizationPolicy",
+"description": "Image optimization policy for this URL Map\u2019s route. Available only for\nGlobal EXTERNAL_MANAGED load balancer schemes.\nEither Cloud CDN must be enabled on the backend service or backend bucket\nserving the route, or cache policy must be configured on the same route"
+},
 "maxStreamDuration": {
 "$ref": "Duration",
 "description": "Specifies the maximum duration (timeout) for streams on the selected route.\nUnlike the timeout field where the timeout duration starts\nfrom the time the request has been fully processed (known as*end-of-stream*),\nthe duration in this field is computed from the beginning of the stream\nuntil the response has been processed, including all retries. A\nstream that does not complete in this duration is closed.\n\nIf not specified, this field uses the maximummaxStreamDuration value among all backend services associated\nwith the route.\n\nThis field is only allowed if the Url map is used with backend services\nwith loadBalancingScheme set toINTERNAL_SELF_MANAGED."
@@ -74732,7 +74819,7 @@ false
 "type": "string"
 },
 "source": {
-"description": "The full Google Cloud Storage URL where the raw disk image archive is\nstored.\nThe following are valid formats for the URL:\n   \n   - https://storage.googleapis.com/bucket_name/image_archive_name\n   - https://storage.googleapis.com/bucket_name/folder_name/image_archive_name\n\n\n\nIn order to create an image, you must provide the full or partial URL of\none of the following:\n   \n   - The rawDisk.source URL \n   - The sourceDisk URL \n   - The sourceImage URL \n   - The sourceSnapshot URL",
+"description": "The full Google Cloud Storage URL or Artifact Registry path where the raw\ndisk image archive is stored.\nThe following are valid formats:\n   \n   - https://storage.googleapis.com/bucket_name/image_archive_name\n   - https://storage.googleapis.com/bucket_name/folder_name/image_archive_name\n   - projects/project/locations/location/repositories/repo/packages/package/versions/version_id\n   - projects/project/locations/location/repositories/repo/packages/package/versions/version_id@dirsum_sha256:hex_value\n\n\n\nIn order to create an image, you must provide the full or partial URL of\none of the following:\n   \n   - The rawDisk.source URL \n   - The sourceDisk URL \n   - The sourceImage URL \n   - The sourceSnapshot URL",
 "type": "string"
 }
 },
@@ -75010,6 +75097,27 @@ false
 },
 "type": "object"
 },
+"ImageOptimizationPolicy": {
+"description": "The configuration for Cloud CDN's image optimization feature. This feature\ndynamically processes and delivers images from the network edge.\nImage Optimization is only available for Global External Application Load\nBalancers.\nEither Cloud CDN must be enabled on the backend service or backend bucket\nserving the route, or cache policy must be configured on the same route.",
+"id": "ImageOptimizationPolicy",
+"properties": {
+"queryParameterInterpretation": {
+"description": "Specifies whether to interpret query parameters for image optimization.",
+"enum": [
+"DISABLED",
+"ENABLED",
+"QUERY_PARAMETER_INTERPRETATION_UNSPECIFIED"
+],
+"enumDescriptions": [
+"Query parameters for image optimization are ignored.",
+"Query parameters for image optimization are interpreted.",
+"Default value. This field value translates to the\ndefault behavior, which is to ignore query parameters for image\noptimization."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "ImageParams": {
 "description": "Additional image params.",
 "id": "ImageParams",
@@ -78033,6 +78141,37 @@ false
 },
 "description": "Map of accelerator topologies that should have their state changed to\nthe specified value. The key is the hashed topology locus id. It can be\nobtained from the GetAvailableAcceleratorTopologies rpc.",
 "type": "object"
+},
+"acceleratorTopologyConfigurations": {
+"additionalProperties": {
+"$ref": "InstanceGroupManagersConfigureAcceleratorTopologiesRequestAcceleratorTopologyConfiguration"
+},
+"description": "Map of accelerator topologies that should have their state changed to\nthe specified configuration. The map key is the hashed topology locus id.\nIt can be obtained from the GetAvailableAcceleratorTopologies rpc.",
+"type": "object"
+}
+},
+"type": "object"
+},
+"InstanceGroupManagersConfigureAcceleratorTopologiesRequestAcceleratorTopologyConfiguration": {
+"description": "Configuration for a single accelerator topology.",
+"id": "InstanceGroupManagersConfigureAcceleratorTopologiesRequestAcceleratorTopologyConfiguration",
+"properties": {
+"action": {
+"enum": [
+"ACCELERATOR_TOPOLOGY_ACTION_UNSPECIFIED",
+"ACTIVATE",
+"DEACTIVATE"
+],
+"enumDescriptions": [
+"Default value. Should not be used.",
+"The accelerator topology is to be activated.",
+"The accelerator topology is to be deactivated."
+],
+"type": "string"
+},
+"externalId": {
+"description": "Identifier of the accelerator topology assigned externally to\ndifferentiate who is the owner of the topology. The format needs to\nconform to RFC1035 and be unique. The uniqueness is guaranteed by the\nrequestor. If it is provided on activating the sub-slice it will have to\nbe provided on deactivating as well. This identifier is cleared on\nsuccessful deform of a sub-slice.",
+"type": "string"
 }
 },
 "type": "object"
@@ -78117,14 +78256,12 @@ false
 "enum": [
 "DEGRADED",
 "HEALTHY",
-"UNHEALTHY",
-"UNKNOWN"
+"UNHEALTHY"
 ],
 "enumDescriptions": [
 "All VM are in RUNNING state, but there is an issue with\nthe inter-chip connectivity that makes this part\nof the infrastructure ready to use as a working\ninter-chip connected group only in a degraded mode.\nThis is allowed only for Instances configured with ICI\nresiliency",
 "All VM are in RUNNING state, there are no issues with the\ninter-chip connectivity.",
-"Some VMs may not be in RUNNING state, or there is an\nissue with the inter-chip connectivity that makes this\npart of the infrastructure unsuitable for forming a\nworking inter-chip connected group.",
-"No signal available"
+"Some VMs may not be in RUNNING state, or there is an\nissue with the inter-chip connectivity that makes this\npart of the infrastructure unsuitable for forming a\nworking inter-chip connected group."
 ],
 "type": "string"
 },
@@ -78226,6 +78363,10 @@ false
 "description": "Timestamp when the last error happened",
 "format": "google-datetime",
 "type": "string"
+},
+"externalId": {
+"description": "Identifier of the accelerator topology assigned externally to\ndifferentiate who is the owner of the topology. This is set in\nConfigureAcceleratorTopologies. If it is provided on activating the\nsub-slice it will have to be provided on deactivating as well.\nThis identifier is cleared on successful deform of a sub-slice.",
+"type": "string"
 }
 },
 "type": "object"
@@ -78446,6 +78587,10 @@ false
 "description": "If this flag is true, the managed instance group attempts to create all\ninstances initiated by this resize request only once. If there is an error\nduring creation, the managed instance group does not retry create this\ninstance, and we will decrease the targetSize of the request\ninstead. If the flag is false, the group attempts to recreate each instance\ncontinuously until it succeeds.\n\nThis flag matters only in the first attempt of creation of an instance.\nAfter an instance is successfully created while this flag is enabled, the\ninstance behaves the same way as all the other instances created with a\nregular resize request. In particular, if a running instance dies\nunexpectedly at a later time and needs to be recreated, this mode does not\naffect the recreation behavior in that scenario.\n\nThis flag is applicable only to the current resize request. It does not\ninfluence other resize requests in any way.\n\nYou can see which instances is being creating in which mode by calling\nthe get or listManagedInstances API.",
 "type": "boolean"
 },
+"scaleInProtection": {
+"description": "If this flag is enabled within a request to decrease a MIG's target size,\nthen the MIG declines that request.",
+"type": "boolean"
+},
 "targetSize": {
 "description": "The number of running instances that the managed instance group should\nmaintain at any given time. The group automatically adds or removes\ninstances to maintain the number of instances specified by this parameter.",
 "format": "int32",
@@ -91891,6 +92036,13 @@ false
 },
 "type": "array"
 },
+"aliasIpv6Ranges": {
+"description": "An array of alias IPv6 ranges for this network interface.\nYou can only specify this field for network interfaces in VPC networks.",
+"items": {
+"$ref": "AliasIpRange"
+},
+"type": "array"
+},
 "enableVpcScopedDns": {
 "description": "Optional. If true, DNS resolution will be enabled over this interface. Only valid\nwith network_attachment.",
 "type": "boolean"
@@ -99615,6 +99767,24 @@ false
 "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?",
 "type": "string"
 },
+"networkTier": {
+"description": "Network tier to be used for this prefix. All child delegated prefixes will\ninherit this field. If this field is not specified, it defaults to the\nnetwork tier of the project that the PublicAdvertisedPrefix belongs to.",
+"enum": [
+"FIXED_STANDARD",
+"PREMIUM",
+"SELECT",
+"STANDARD",
+"STANDARD_OVERRIDES_FIXED_STANDARD"
+],
+"enumDescriptions": [
+"Public internet quality with fixed bandwidth.",
+"High quality, Google-grade network tier, support for all networking\nproducts.",
+"Price competitive network tier, support for all networking products.",
+"Public internet quality, only limited support for other networking\nproducts.",
+"(Output only) Temporary tier for FIXED_STANDARD when fixed standard tier\nis expired or not configured."
+],
+"type": "string"
+},
 "pdpScope": {
 "description": "Specifies how child public delegated prefix will be scoped. It could\nbe one of following values:\n   \n   \n     - `REGIONAL`: The public delegated prefix is regional only. The\n     provisioning will take a few minutes.\n     - `GLOBAL`: The public delegated prefix is global only. The\n     provisioning will take ~4 weeks.\n     - `GLOBAL_AND_REGIONAL` [output only]: The public delegated prefixes is\n      BYOIP V1 legacy prefix. This is output only value and no longer\n      supported in BYOIP V2.",
 "enum": [
@@ -99962,6 +100132,24 @@ false
 "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?",
 "type": "string"
 },
+"networkTier": {
+"description": "Network tier of the public delegated prefix. If populated, it must match\nthe network tier of the parent public advertised prefix. If not populated,\nit defaults to the network tier of the parent public advertised prefix.",
+"enum": [
+"FIXED_STANDARD",
+"PREMIUM",
+"SELECT",
+"STANDARD",
+"STANDARD_OVERRIDES_FIXED_STANDARD"
+],
+"enumDescriptions": [
+"Public internet quality with fixed bandwidth.",
+"High quality, Google-grade network tier, support for all networking\nproducts.",
+"Price competitive network tier, support for all networking products.",
+"Public internet quality, only limited support for other networking\nproducts.",
+"(Output only) Temporary tier for FIXED_STANDARD when fixed standard tier\nis expired or not configured."
+],
+"type": "string"
+},
 "parentPrefix": {
 "description": "The URL of parent prefix. Either PublicAdvertisedPrefix or\nPublicDelegatedPrefix.",
 "type": "string"
@@ -103036,6 +103224,16 @@ false
 },
 "type": "object"
 },
+"RegionDiskUpdateKmsKeyRequest": {
+"id": "RegionDiskUpdateKmsKeyRequest",
+"properties": {
+"kmsKeyName": {
+"description": "Optional. The new KMS key to replace the current one on the disk. If empty, the disk\nwill be re-encrypted using the primary version of the disk's current KMS\nkey.\n\nThe KMS key can be provided in the following formats:\n   \n   \n     - projects/project_id/locations/location/keyRings/key_ring/cryptoKeys/key\n\n\nWhere project is the project ID or\nproject number.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "RegionDisksAddResourcePoliciesRequest": {
 "id": "RegionDisksAddResourcePoliciesRequest",
 "properties": {
@@ -103956,6 +104154,10 @@ false
 "description": "If this flag is true, the managed instance group attempts to create all\ninstances initiated by this resize request only once. If there is an error\nduring creation, the managed instance group does not retry create this\ninstance, and we will decrease the targetSize of the request\ninstead. If the flag is false, the group attempts to recreate each instance\ncontinuously until it succeeds.\n\nThis flag matters only in the first attempt of creation of an instance.\nAfter an instance is successfully created while this flag is enabled, the\ninstance behaves the same way as all the other instances created with a\nregular resize request. In particular, if a running instance dies\nunexpectedly at a later time and needs to be recreated, this mode does not\naffect the recreation behavior in that scenario.\n\nThis flag is applicable only to the current resize request. It does not\ninfluence other resize requests in any way.\n\nYou can see which instances ar being created in which mode by calling\nthe get or listManagedInstances API.",
 "type": "boolean"
 },
+"scaleInProtection": {
+"description": "If this flag is enabled within a request to decrease a MIG's target size,\nthen the MIG declines that request.",
+"type": "boolean"
+},
 "targetSize": {
 "description": "The number of running instances that the managed instance group should\nmaintain at any given time. The group automatically adds or removes\ninstances to maintain the number of instances specified by this parameter.",
 "format": "int32",
@@ -104567,6 +104769,16 @@ false
 },
 "type": "object"
 },
+"RegionSnapshotUpdateKmsKeyRequest": {
+"id": "RegionSnapshotUpdateKmsKeyRequest",
+"properties": {
+"kmsKeyName": {
+"description": "Optional. The new KMS key to replace the current one on the snapshot. If empty, the\nsnapshot will be re-encrypted using the primary version of the snapshot's\ncurrent KMS key.\n\nThe KMS key can be provided in the following formats:\n   \n   \n     - projects/project_id/locations/region/keyRings/region/cryptoKeys/key",
+"type": "string"
+}
+},
+"type": "object"
+},
 "RegionTargetHttpsProxiesSetSslCertificatesRequest": {
 "id": "RegionTargetHttpsProxiesSetSslCertificatesRequest",
 "properties": {
@@ -108306,6 +108518,16 @@ false
 "pattern": "[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?",
 "type": "string"
 },
+"pauseTime": {
+"description": "Output only. The timestamp at which the Rollout was paused.",
+"readOnly": true,
+"type": "string"
+},
+"resumeTime": {
+"description": "Output only. The timestamp at which the Rollout was resumed.",
+"readOnly": true,
+"type": "string"
+},
 "rolloutEntity": {
 "$ref": "RolloutRolloutEntity",
 "description": "Required. The resource being rolled out."
@@ -108872,6 +109094,11 @@ false
 "readOnly": true,
 "type": "string"
 },
+"estimatedCompletionTime": {
+"description": "Output only. Estimated timestamp at which the wave will complete. Extrapolated from\ncurrent progress.",
+"readOnly": true,
+"type": "string"
+},
 "estimatedTotalResourcesCount": {
 "description": "Output only. Estimated total count of resources.",
 "format": "int64",
@@ -108891,6 +109118,42 @@ false
 "format": "int64",
 "readOnly": true,
 "type": "string"
+},
+"locationStatus": {
+"additionalProperties": {
+"$ref": "RolloutWaveDetailsOrchestratedWaveDetailsLocationStatus"
+},
+"description": "Output only. Status of each location in the wave. Map keys (locations) must be\nspecified like \"us-east1\" or \"asia-west1-a\".",
+"readOnly": true,
+"type": "object"
+}
+},
+"type": "object"
+},
+"RolloutWaveDetailsOrchestratedWaveDetailsLocationStatus": {
+"description": "Represents the status of a location in a wave.",
+"id": "RolloutWaveDetailsOrchestratedWaveDetailsLocationStatus",
+"properties": {
+"state": {
+"description": "Output only. Location state of the wave.",
+"enum": [
+"STATE_FAILED",
+"STATE_IN_PROGRESS",
+"STATE_PENDING",
+"STATE_SKIPPED",
+"STATE_SUCCEEDED",
+"STATE_UNSPECIFIED"
+],
+"enumDescriptions": [
+"Location state is FAILED.",
+"Location state is PROCESSING.",
+"Location state is either INITIALIZED or WAITING.",
+"Location state is either CANCELED or SKIPPED.",
+"Location state is COMPLETED.",
+"Undefined default state. Should never be exposed to users."
+],
+"readOnly": true,
+"type": "string"
 }
 },
 "type": "object"
@@ -113031,7 +113294,7 @@ false
 "type": "string"
 },
 "ddosImpactedBaselineThreshold": {
-"description": "DDoS Protection for Network Load Balancers (and VMs with public IPs)\nbuilds DDos mitigations that minimize collateral damage. It quantifies\nthis as the fraction of a non-abuse baseline that's inadvertently\nblocked.\n\nRules whose collateral damage exceeds ddosImpactedBaselineThreshold will\nnot be deployed. Using a lower value will prioritize keeping collateral\ndamage low, possibly at the cost of its effectiveness in rate limiting\nsome or all of the attack. It should typically be unset, so Advanced DDos\n(and Adaptive Protection) uses the best mitigation it can find. Setting\nthe threshold is advised if there are logs for false positive detections\nwith high collateral damage, and will cause Advanced DDos to attempt to\nfind a less aggressive rule that satisfies the constraint; Failing that,\nit will fall back to no mitigation (smaller attack) or to broader network\nthrottles (larger attack).",
+"description": "DDoS Protection for Network Load Balancers (and VMs with public IPs)\nbuilds DDoS mitigations that minimize collateral damage. It quantifies\nthis as the fraction of a non-abuse baseline that's inadvertently\nblocked.\n\nRules whose collateral damage exceeds ddosImpactedBaselineThreshold will\nnot be deployed. Using a lower value will prioritize keeping collateral\ndamage low, possibly at the cost of its effectiveness in rate limiting\nsome or all of the attack. It should typically be unset, so Advanced DDoS\n(and Adaptive Protection) uses the best mitigation it can find. Setting\nthe threshold is advised if there are logs for false positive detections\nwith high collateral damage, and will cause Advanced DDoS to attempt to\nfind a less aggressive rule that satisfies the constraint. If a suitable\nrule cannot be found, the system falls back to either no mitigation for\nsmaller attacks or broader network throttles for larger ones.",
 "format": "float",
 "type": "number"
 },
@@ -115964,6 +116227,16 @@ false
 },
 "type": "object"
 },
+"SnapshotUpdateKmsKeyRequest": {
+"id": "SnapshotUpdateKmsKeyRequest",
+"properties": {
+"kmsKeyName": {
+"description": "Optional. The new KMS key to replace the current one on the snapshot. If empty, the\nsnapshot will be re-encrypted using the primary version of the snapshot's\ncurrent KMS key.\n\nThe KMS key can be provided in the following formats:\n   \n   \n     - projects/project_id/locations/region/keyRings/key_ring/cryptoKeys/key",
+"type": "string"
+}
+},
+"type": "object"
+},
 "SnapshotsGetEffectiveRecycleBinRuleResponse": {
 "id": "SnapshotsGetEffectiveRecycleBinRuleResponse",
 "properties": {
@@ -117408,7 +117681,7 @@ false
 "type": "string"
 },
 "postQuantumKeyExchange": {
-"description": "One of DEFAULT, ENABLED, orDEFERRED. Controls whether the load balancer allows\nnegotiating X25519MLKEM768 key exchange when clients advertise support for\nit. When set to DEFAULT, or if no SSL Policy is\nattached to the target proxy, the load balancer disallows X25519MLKEM768\nkey exchange until it is enabled by default on LBs. When set toENABLED, the load balancer will negotiate X25519MLKEM768 key\nexchange. Customers can set this to DEFERRED to temporarily\nopt-out the LB from negotiating post-quantum key exchange by default.",
+"description": "One of DEFAULT, ENABLED, orDEFERRED. Controls whether the load balancer allows\nnegotiating X25519MLKEM768 key exchange when clients advertise support for\nit. When set to DEFAULT, or if no SSL Policy is\nattached to the target proxy, the load balancer disallows X25519MLKEM768\nkey exchange until it is enabled by default on load balancers. When set toENABLED, the load balancer can negotiate X25519MLKEM768 key\nexchange. When set to DEFERRED, temporarily opts out the load\nbalancer from negotiating X25519MLKEM768 beyond the point where it is\nenabled by default on load balancers.",
 "enum": [
 "DEFAULT",
 "DEFERRED",
@@ -117422,7 +117695,7 @@ false
 "type": "string"
 },
 "profile": {
-"description": "Profile specifies the set of SSL features that can be used by the load\nbalancer when negotiating SSL with clients. This can be one ofCOMPATIBLE, MODERN, RESTRICTED, orCUSTOM. If using CUSTOM, the set of SSL features\nto enable must be specified in the customFeatures field.",
+"description": "Profile specifies the set of SSL features that can be used by the load\nbalancer when negotiating SSL with clients. This can be one ofCOMPATIBLE, MODERN, RESTRICTED,FIPS_202205, or CUSTOM. If usingCUSTOM, the set of SSL features to enable must be specified in\nthe customFeatures field. If using FIPS_202205,\nthe min_tls_version field must be set to TLS_1_2.",
 "enum": [
 "COMPATIBLE",
 "CUSTOM",
@@ -119421,6 +119694,24 @@ false
 "readOnly": true,
 "type": "string"
 },
+"ipv6NetworkTier": {
+"description": "Specifies the network tier for EXTERNAL IPv6. Can only be set when\nipv6_access_type is EXTERNAL. Defaults to project defaultNetworkTier if not\nspecified during the creation of the subnetwork. This field is IMMUTABLE\nonce set with EXTERNAL IPv6.",
+"enum": [
+"FIXED_STANDARD",
+"PREMIUM",
+"SELECT",
+"STANDARD",
+"STANDARD_OVERRIDES_FIXED_STANDARD"
+],
+"enumDescriptions": [
+"Public internet quality with fixed bandwidth.",
+"High quality, Google-grade network tier, support for all networking\nproducts.",
+"Price competitive network tier, support for all networking products.",
+"Public internet quality, only limited support for other networking\nproducts.",
+"(Output only) Temporary tier for FIXED_STANDARD when fixed standard tier\nis expired or not configured."
+],
+"type": "string"
+},
 "kind": {
 "default": "compute#subnetwork",
 "description": "Output only. [Output Only] Type of the resource. Always compute#subnetwork\nfor Subnetwork resources.",
@@ -120015,6 +120306,23 @@ false
 "description": "The range of IP addresses belonging to this subnetwork secondary range.\nProvide this property when you create the subnetwork. Ranges must be\nunique and non-overlapping with all primary and secondary IP ranges\nwithin a network. Both IPv4 and IPv6 ranges are supported. For IPv4,\nthe range can be any range listed in theValid\nranges list.\n\nFor IPv6:\nThe range must have a /64 prefix length.\nThe range must be omitted, for auto-allocation from Google-defined ULA\nIPv6 range.\nFor BYOGUA internal IPv6 secondary range, the range may be specified\nalong with the `ipCollection` field.\nIf an `ipCollection` is specified, the requested ip_cidr_range must lie\nwithin the range of the PDP referenced by the `ipCollection` field for\nallocation.\nIf `ipCollection` field is specified, but ip_cidr_range is not,\nthe range is auto-allocated from the PDP referenced by the `ipCollection`\nfield.",
 "type": "string"
 },
+"ipCollection": {
+"description": "Reference to a Public Delegated Prefix (PDP) for BYOIP.\nThis field should be specified for configuring BYOGUA internal IPv6\nsecondary range.\nWhen specified along with the ip_cidr_range, the ip_cidr_range must lie\nwithin the PDP referenced by the `ipCollection` field.\nWhen specified without the ip_cidr_range, the range is auto-allocated\nfrom the PDP referenced by the `ipCollection` field.",
+"type": "string"
+},
+"ipVersion": {
+"enum": [
+"IPV4",
+"IPV6",
+"IP_VERSION_UNSPECIFIED"
+],
+"enumDescriptions": [
+"",
+"",
+"Treated as IPV4 for backward-compatibility."
+],
+"type": "string"
+},
 "rangeName": {
 "description": "The name associated with this subnetwork secondary range, used when adding\nan alias IP/IPv6 range to a VM instance.\nThe name must be 1-63 characters long, and comply withRFC1035.\nThe name must be unique within the subnetwork.",
 "type": "string"
@@ -124650,6 +124958,21 @@ false
 "description": "The latest time for the planned maintenance window to start.\nThis timestamp value is in RFC3339 text format.",
 "type": "string"
 },
+"maintenanceMethod": {
+"description": "Output only. Maintenance method for the upcoming maintenance.",
+"enum": [
+"LIVE_UPDATE",
+"MAINTENANCE_METHOD_UNSPECIFIED",
+"TERMINATION"
+],
+"enumDescriptions": [
+"VM will stay alive during maintenance",
+"Maintenance method does not specify whether VM will be terminated or not",
+"VM will be terminated during maintenance"
+],
+"readOnly": true,
+"type": "string"
+},
 "maintenanceOnShutdown": {
 "description": "Indicates whether the UpcomingMaintenance will be triggered on VM shutdown.",
 "type": "boolean"