api.yaml

# Copyright 2017 Google Inc.
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

# TODO(nelsonjr): Make all Zone and Region resource ref

--- !ruby/object:Api::Product
name: Compute
display_name: Compute Engine
versions:
  - !ruby/object:Api::Product::Version
    name: ga
    base_url: https://compute.googleapis.com/compute/v1/
  - !ruby/object:Api::Product::Version
    name: beta
    base_url: https://compute.googleapis.com/compute/beta/
scopes:
  - https://www.googleapis.com/auth/compute
apis_required:
  - !ruby/object:Api::Product::ApiReference
    name: Compute Engine API
    url: https://console.cloud.google.com/apis/library/compute.googleapis.com/
objects:
  - !ruby/object:Api::Resource
    name: 'Address'
    kind: 'compute#address'
    base_url: projects/{{project}}/regions/{{region}}/addresses
    collection_url_key: 'items'
    has_self_link: true
    input: true
    description: |
      Represents an Address resource.

      Each virtual machine instance has an ephemeral internal IP address and,
      optionally, an external IP address. To communicate between instances on
      the same network, you can use an instance's internal IP address. To
      communicate with the Internet and instances outside of the same network,
      you must specify the instance's external IP address.

      Internal IP addresses are ephemeral and only belong to an instance for
      the lifetime of the instance; if the instance is deleted and recreated,
      the instance is assigned a new internal IP address, either by Compute
      Engine or by you. External IP addresses can be either ephemeral or
      static.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Reserving a Static External IP Address': 'https://cloud.google.com/compute/docs/instances-and-network'
        'Reserving a Static Internal IP Address': 'https://cloud.google.com/compute/docs/ip-addresses/reserve-static-internal-ip-address'
      api: 'https://cloud.google.com/compute/docs/reference/beta/addresses'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'name'
        description: |
          URL of the region where the regional address resides.
          This field is not applicable to global addresses.
        required: true
    properties:
      - !ruby/object:Api::Type::String
        name: 'address'
        description: |
          The static external IP address represented by this resource. Only
          IPv4 is supported. An address may only be specified for INTERNAL
          address types. The IP address must be inside the specified subnetwork,
          if any. Set by the API if undefined.
      - !ruby/object:Api::Type::Enum
        name: 'addressType'
        description: |
          The type of address to reserve.
        values:
          - :INTERNAL
          - :EXTERNAL
        default_value: :EXTERNAL
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional description of this resource.'
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. The name must be 1-63 characters long, and
          comply with RFC1035. Specifically, the name must be 1-63 characters
          long and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?`
          which means the first character must be a lowercase letter, and all
          following characters must be a dash, lowercase letter, or digit,
          except the last character, which cannot be a dash.
        required: true
      - !ruby/object:Api::Type::String
        name: purpose
        description: |
          The purpose of this resource, which can be one of the following values:

          * GCE_ENDPOINT for addresses that are used by VM instances, alias IP
            ranges, internal load balancers, and similar resources.

          * SHARED_LOADBALANCER_VIP for an address that can be used by multiple
            internal load balancers.

          * VPC_PEERING for addresses that are reserved for VPC peer networks.

          * IPSEC_INTERCONNECT for addresses created from a private IP range
            that are reserved for a VLAN attachment in an IPsec-encrypted Cloud
            Interconnect configuration. These addresses are regional resources.

          * PRIVATE_SERVICE_CONNECT for a private network address that is used
          to configure Private Service Connect. Only global internal addresses
          can use this purpose.

          This should only be set when using an Internal address.
      - !ruby/object:Api::Type::Enum
        name: 'networkTier'
        description: |
          The networking tier used for configuring this address. If this field is not
          specified, it is assumed to be PREMIUM.
        values:
          - :PREMIUM
          - :STANDARD
      # TODO(alexstephen): Add in status with exclude attribute. What does this
      # mean?
      - !ruby/object:Api::Type::ResourceRef
        name: 'subnetwork'
        resource: 'Subnetwork'
        imports: 'selfLink'
        description: |
          The URL of the subnetwork in which to reserve the address. If an IP
          address is specified, it must be within the subnetwork's IP range.
          This field can only be used with INTERNAL type with
          GCE_ENDPOINT/DNS_RESOLVER purposes.
      - !ruby/object:Api::Type::Array
        name: 'users'
        description: 'The URLs of the resources that are using this address.'
        item_type: Api::Type::String
        output: true
      - !ruby/object:Api::Type::KeyValuePairs
        name: 'labels'
        description: |
          Labels to apply to this address.  A list of key->value pairs.
        update_verb: :POST
        update_url: 'projects/{{project}}/regions/{{region}}/addresses/{{name}}/setLabels'
        min_version: beta
      - !ruby/object:Api::Type::Fingerprint
        name: 'labelFingerprint'
        description: |
          The fingerprint used for optimistic locking of this resource.  Used
          internally during updates.
        update_url: 'projects/{{project}}/regions/{{region}}/addresses/{{name}}/setLabels'
        update_verb: :POST
        min_version: beta
      - !ruby/object:Api::Type::Enum
        name: 'status'
        output: true
        description: |
          The status of the address, which can be one of RESERVING, RESERVED, or IN_USE.
          An address that is RESERVING is currently in the process of being reserved.
          A RESERVED address is currently reserved and available to use. An IN_USE address
          is currently being used by another resource and is not available.
        values:
          - :RESERVING
          - :RESERVED
          - :IN_USE
      - !ruby/object:Api::Type::ResourceRef
        name: 'network'
        resource: 'Network'
        imports: 'selfLink'
        description: |
          The URL of the network in which to reserve the address. This field
          can only be used with INTERNAL type with the VPC_PEERING and
          IPSEC_INTERCONNECT purposes.
      - !ruby/object:Api::Type::Integer
        name: prefixLength
        description: |
          The prefix length if the resource represents an IP range.
  - !ruby/object:Api::Resource
    name: 'Autoscaler'
    kind: 'compute#autoscaler'
    base_url: projects/{{project}}/zones/{{zone}}/autoscalers
    update_url: projects/{{project}}/zones/{{zone}}/autoscalers?autoscaler={{name}}
    collection_url_key: 'items'
    has_self_link: true
    description: |
      Represents an Autoscaler resource.

      Autoscalers allow you to automatically scale virtual machine instances in
      managed instance groups according to an autoscaling policy that you
      define.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Autoscaling Groups of Instances': 'https://cloud.google.com/compute/docs/autoscaler/'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/autoscalers'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/zones/{{zone}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'zone'
        resource: 'Zone'
        imports: 'name'
        description: |
          URL of the zone where the instance group resides.
        required: true
        input: true
    properties:
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'Unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. The name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        required: true
        input: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource.
      - !ruby/object:Api::Type::NestedObject
        name: 'autoscalingPolicy'
        description: |
          The configuration parameters for the autoscaling algorithm. You can
          define one or more of the policies for an autoscaler: cpuUtilization,
          customMetricUtilizations, and loadBalancingUtilization.

          If none of these are specified, the default will be to autoscale based
          on cpuUtilization to 0.6 or 60%.
        required: true
        properties:
          - !ruby/object:Api::Type::Integer
            name: 'minNumReplicas'
            description: |
              The minimum number of replicas that the autoscaler can scale down
              to. This cannot be less than 0. If not provided, autoscaler will
              choose a default value depending on maximum number of instances
              allowed.
            send_empty_value: true
          - !ruby/object:Api::Type::Integer
            name: 'maxNumReplicas'
            description: |
              The maximum number of instances that the autoscaler can scale up
              to. This is required when creating or updating an autoscaler. The
              maximum number of replicas should not be lower than minimal number
              of replicas.
            required: true
          - !ruby/object:Api::Type::Integer
            name: 'coolDownPeriodSec'
            description: |
              The number of seconds that the autoscaler should wait before it
              starts collecting information from a new instance. This prevents
              the autoscaler from collecting information when the instance is
              initializing, during which the collected usage would not be
              reliable. The default time autoscaler waits is 60 seconds.

              Virtual machine initialization times might vary because of
              numerous factors. We recommend that you test how long an
              instance may take to initialize. To do this, create an instance
              and time the startup process.
            default_value: 60
          - !ruby/object:Api::Type::Enum
            name: 'mode'
            default_value: :ON
            description: |
              Defines operating mode for this policy.
            values:
              - :OFF
              - :ONLY_UP
              - :ON
          - !ruby/object:Api::Type::NestedObject
            name: 'scaleDownControl'
            min_version: beta
            description: |
              Defines scale down controls to reduce the risk of response latency
              and outages due to abrupt scale-in events
            properties:
            - !ruby/object:Api::Type::NestedObject
              name: 'maxScaledDownReplicas'
              at_least_one_of:
                - autoscaling_policy.0.scale_down_control.0.max_scaled_down_replicas
                - autoscaling_policy.0.scale_down_control.0.time_window_sec
              properties:
              - !ruby/object:Api::Type::Integer
                name: 'fixed'
                at_least_one_of:
                  - autoscaling_policy.0.scale_down_control.0.max_scaled_down_replicas.0.fixed
                  - autoscaling_policy.0.scale_down_control.0.max_scaled_down_replicas.0.percent
                description: |
                  Specifies a fixed number of VM instances. This must be a positive
                  integer.
              - !ruby/object:Api::Type::Integer
                name: 'percent'
                at_least_one_of:
                  - autoscaling_policy.0.scale_down_control.0.max_scaled_down_replicas.0.fixed
                  - autoscaling_policy.0.scale_down_control.0.max_scaled_down_replicas.0.percent
                description: |
                  Specifies a percentage of instances between 0 to 100%, inclusive.
                  For example, specify 80 for 80%.
            - !ruby/object:Api::Type::Integer
              name: 'timeWindowSec'
              at_least_one_of:
                - autoscaling_policy.0.scale_down_control.0.max_scaled_down_replicas
                - autoscaling_policy.0.scale_down_control.0.time_window_sec
              description: |
                How long back autoscaling should look when computing recommendations
                to include directives regarding slower scale down, as described above.
          - !ruby/object:Api::Type::NestedObject
            name: 'scaleInControl'
            description: |
              Defines scale in controls to reduce the risk of response latency
              and outages due to abrupt scale-in events
            properties:
            - !ruby/object:Api::Type::NestedObject
              name: 'maxScaledInReplicas'
              at_least_one_of:
                - autoscaling_policy.0.scale_in_control.0.max_scaled_in_replicas
                - autoscaling_policy.0.scale_in_control.0.time_window_sec
              properties:
              - !ruby/object:Api::Type::Integer
                name: 'fixed'
                at_least_one_of:
                  - autoscaling_policy.0.scale_in_control.0.max_scaled_in_replicas.0.fixed
                  - autoscaling_policy.0.scale_in_control.0.max_scaled_in_replicas.0.percent
                description: |
                  Specifies a fixed number of VM instances. This must be a positive
                  integer.
              - !ruby/object:Api::Type::Integer
                name: 'percent'
                at_least_one_of:
                  - autoscaling_policy.0.scale_in_control.0.max_scaled_in_replicas.0.fixed
                  - autoscaling_policy.0.scale_in_control.0.max_scaled_in_replicas.0.percent
                description: |
                  Specifies a percentage of instances between 0 to 100%, inclusive.
                  For example, specify 80 for 80%.
            - !ruby/object:Api::Type::Integer
              name: 'timeWindowSec'
              at_least_one_of:
                - autoscaling_policy.0.scale_in_control.0.max_scaled_in_replicas
                - autoscaling_policy.0.scale_in_control.0.time_window_sec
              description: |
                How long back autoscaling should look when computing recommendations
                to include directives regarding slower scale down, as described above.
          - !ruby/object:Api::Type::NestedObject
            name: 'cpuUtilization'
            description: |
              Defines the CPU utilization policy that allows the autoscaler to
              scale based on the average CPU utilization of a managed instance
              group.
            properties:
            - !ruby/object:Api::Type::Double
              name: 'utilizationTarget'
              description: |
                The target CPU utilization that the autoscaler should maintain.
                Must be a float value in the range (0, 1]. If not specified, the
                default is 0.6.

                If the CPU level is below the target utilization, the autoscaler
                scales down the number of instances until it reaches the minimum
                number of instances you specified or until the average CPU of
                your instances reaches the target utilization.

                If the average CPU is above the target utilization, the autoscaler
                scales up until it reaches the maximum number of instances you
                specified or until the average utilization reaches the target
                utilization.
            - !ruby/object:Api::Type::String
              name: 'predictiveMethod'
              default_value: NONE
              description: |
                Indicates whether predictive autoscaling based on CPU metric is enabled. Valid values are:

                - NONE (default). No predictive method is used. The autoscaler scales the group to meet current demand based on real-time metrics.

                - OPTIMIZE_AVAILABILITY. Predictive autoscaling improves availability by monitoring daily and weekly load patterns and scaling out ahead of anticipated demand.
          - !ruby/object:Api::Type::Array
            name: 'customMetricUtilizations'
            description: |
              Configuration parameters of autoscaling based on a custom metric.
            item_type: !ruby/object:Api::Type::NestedObject
              properties:
              - !ruby/object:Api::Type::String
                name: 'metric'
                description: |
                  The identifier (type) of the Stackdriver Monitoring metric.
                  The metric cannot have negative values.

                  The metric must have a value type of INT64 or DOUBLE.
                required: true
              - !ruby/object:Api::Type::Double
                name: 'singleInstanceAssignment'
                min_version: beta
                description: |
                  If scaling is based on a per-group metric value that represents the
                  total amount of work to be done or resource usage, set this value to
                  an amount assigned for a single instance of the scaled group.
                  The autoscaler will keep the number of instances proportional to the
                  value of this metric, the metric itself should not change value due
                  to group resizing.

                  For example, a good metric to use with the target is
                  `pubsub.googleapis.com/subscription/num_undelivered_messages`
                  or a custom metric exporting the total number of requests coming to
                  your instances.

                  A bad example would be a metric exporting an average or median
                  latency, since this value can't include a chunk assignable to a
                  single instance, it could be better used with utilization_target
                  instead.
              - !ruby/object:Api::Type::Double
                name: 'utilizationTarget'
                description: |
                  The target value of the metric that autoscaler should
                  maintain. This must be a positive value. A utilization
                  metric scales number of virtual machines handling requests
                  to increase or decrease proportionally to the metric.

                  For example, a good metric to use as a utilizationTarget is
                  www.googleapis.com/compute/instance/network/received_bytes_count.
                  The autoscaler will work to keep this value constant for each
                  of the instances.
              - !ruby/object:Api::Type::Enum
                name: 'utilizationTargetType'
                description: |
                  Defines how target utilization value is expressed for a
                  Stackdriver Monitoring metric.
                values:
                  - :GAUGE
                  - :DELTA_PER_SECOND
                  - :DELTA_PER_MINUTE
              - !ruby/object:Api::Type::String
                name: 'filter'
                description: |
                  A filter string to be used as the filter string for
                  a Stackdriver Monitoring TimeSeries.list API call.
                  This filter is used to select a specific TimeSeries for
                  the purpose of autoscaling and to determine whether the metric
                  is exporting per-instance or per-group data.

                  You can only use the AND operator for joining selectors.
                  You can only use direct equality comparison operator (=) without
                  any functions for each selector.
                  You can specify the metric in both the filter string and in the
                  metric field. However, if specified in both places, the metric must
                  be identical.

                  The monitored resource type determines what kind of values are
                  expected for the metric. If it is a gce_instance, the autoscaler
                  expects the metric to include a separate TimeSeries for each
                  instance in a group. In such a case, you cannot filter on resource
                  labels.

                  If the resource type is any other value, the autoscaler expects
                  this metric to contain values that apply to the entire autoscaled
                  instance group and resource label filtering can be performed to
                  point autoscaler at the correct TimeSeries to scale upon.
                  This is called a per-group metric for the purpose of autoscaling.

                  If not specified, the type defaults to gce_instance.

                  You should provide a filter that is selective enough to pick just
                  one TimeSeries for the autoscaled group or for each of the instances
                  (if you are using gce_instance resource type). If multiple
                  TimeSeries are returned upon the query execution, the autoscaler
                  will sum their respective values to obtain its scaling value.
                min_version: beta
          - !ruby/object:Api::Type::NestedObject
            name: 'loadBalancingUtilization'
            description: |
              Configuration parameters of autoscaling based on a load balancer.
            properties:
            - !ruby/object:Api::Type::Double
              name: 'utilizationTarget'
              description: |
                Fraction of backend capacity utilization (set in HTTP(s) load
                balancing configuration) that autoscaler should maintain. Must
                be a positive float value. If not defined, the default is 0.8.
          - !ruby/object:Api::Type::Map
            name: 'scalingSchedules'
            description: |
              Scaling schedules defined for an autoscaler. Multiple schedules can be set on an autoscaler and they can overlap.
            key_name: name
            key_description: |
              A name for the schedule.
            value_type: !ruby/object:Api::Type::NestedObject
              name: scalingSchedule
              properties:
                - !ruby/object:Api::Type::Integer
                  name: 'minRequiredReplicas'
                  description: |
                    Minimum number of VM instances that autoscaler will recommend in time intervals starting according to schedule.
                  required: true
                  send_empty_value: true
                - !ruby/object:Api::Type::String
                  name: 'schedule'
                  description: |
                    The start timestamps of time intervals when this scaling schedule should provide a scaling signal. This field uses the extended cron format (with an optional year field).
                  required: true
                - !ruby/object:Api::Type::String
                  name: 'timeZone'
                  default_value: UTC
                  description: |
                    The time zone to be used when interpreting the schedule. The value of this field must be a time zone name from the tz database: http://en.wikipedia.org/wiki/Tz_database.
                - !ruby/object:Api::Type::Integer
                  name: 'durationSec'
                  description: |
                    The duration of time intervals (in seconds) for which this scaling schedule will be running. The minimum allowed value is 300.
                  required: true
                - !ruby/object:Api::Type::Boolean
                  name: 'disabled'
                  description: |
                    A boolean value that specifies if a scaling schedule can influence autoscaler recommendations. If set to true, then a scaling schedule has no effect.
                  default_value: false
                - !ruby/object:Api::Type::String
                  name: 'description'
                  description: |
                    A description of a scaling schedule.
      - !ruby/object:Api::Type::ResourceRef
        name: 'target'
        resource: 'InstanceGroupManager'
        imports: 'selfLink'
        description: |
          URL of the managed instance group that this autoscaler will scale.
        required: true
  - !ruby/object:Api::Resource
    name: 'BackendBucket'
    kind: 'compute#backendBucket'
    base_url: projects/{{project}}/global/backendBuckets
    collection_url_key: 'items'
    has_self_link: true
    description: |
      Backend buckets allow you to use Google Cloud Storage buckets with HTTP(S)
      load balancing.

      An HTTP(S) load balancer can direct traffic to specified URLs to a
      backend bucket rather than a backend service. It can send requests for
      static content to a Cloud Storage bucket and requests for dynamic content
      to a virtual machine instance.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Using a Cloud Storage bucket as a load balancer backend': 'https://cloud.google.com/compute/docs/load-balancing/http/backend-bucket'
      api: 'https://cloud.google.com/compute/docs/reference/v1/backendBuckets'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    iam_policy: !ruby/object:Api::Resource::IamPolicy
      min_version: beta
      exclude: false
      parent_resource_attribute: 'name'
      import_format: ["projects/{{project}}/global/backendBuckets/{{name}}", "{{name}}"]    
    properties:
      - !ruby/object:Api::Type::String
        name: 'bucketName'
        description: 'Cloud Storage bucket name.'
        required: true
      - !ruby/object:Api::Type::NestedObject
        name: 'cdnPolicy'
        description: 'Cloud CDN configuration for this Backend Bucket.'
        properties:
        - !ruby/object:Api::Type::NestedObject
          name: 'cacheKeyPolicy'
          description: 'The CacheKeyPolicy for this CdnPolicy.'
          properties:
          - !ruby/object:Api::Type::Array
            send_empty_value: true
            name: 'queryStringWhitelist'
            at_least_one_of:
              - cdn_policy.0.cache_key_policy.0.query_string_whitelist
              - cdn_policy.0.cache_key_policy.0.include_http_headers
            description: |
              Names of query string parameters to include in cache keys.
              Default parameters are always included. '&' and '=' will
              be percent encoded and not treated as delimiters.
            item_type: Api::Type::String
          - !ruby/object:Api::Type::Array
            send_empty_value: true
            name: 'includeHttpHeaders'
            at_least_one_of:
              - cdn_policy.0.cache_key_policy.0.query_string_whitelist
              - cdn_policy.0.cache_key_policy.0.include_http_headers
            description: |
              Allows HTTP request headers (by name) to be used in the
              cache key.
            item_type: Api::Type::String
        - !ruby/object:Api::Type::Integer
          name: 'signedUrlCacheMaxAgeSec'
          description: |
            Maximum number of seconds the response to a signed URL request will
            be considered fresh. After this time period,
            the response will be revalidated before being served.
            When serving responses to signed URL requests,
            Cloud CDN will internally behave as though
            all responses from this backend had a "Cache-Control: public,
            max-age=[TTL]" header, regardless of any existing Cache-Control
            header. The actual headers served in responses will not be altered.
        - !ruby/object:Api::Type::Integer
          name: 'defaultTtl'
          description: |
            Specifies the default TTL for cached content served by this origin for responses
            that do not have an existing valid TTL (max-age or s-max-age).
        - !ruby/object:Api::Type::Integer
          name: 'maxTtl'
          description: |
            Specifies the maximum allowed TTL for cached content served by this origin.
        - !ruby/object:Api::Type::Integer
          name: 'clientTtl'
          description: |
            Specifies the maximum allowed TTL for cached content served by this origin.
        - !ruby/object:Api::Type::Boolean
          name: 'negativeCaching'
          send_empty_value: true
          description: |
            Negative caching allows per-status code TTLs to be set, in order to apply fine-grained caching for common errors or redirects.
        - !ruby/object:Api::Type::Array
          name: 'negativeCachingPolicy'
          description: |
            Sets a cache TTL for the specified HTTP status code. negativeCaching must be enabled to configure negativeCachingPolicy.
            Omitting the policy and leaving negativeCaching enabled will use Cloud CDN's default cache TTLs.
          item_type: !ruby/object:Api::Type::NestedObject
            properties:
              - !ruby/object:Api::Type::Integer
                name: 'code'
                description: |
                  The HTTP status code to define a TTL against. Only HTTP status codes 300, 301, 308, 404, 405, 410, 421, 451 and 501
                  can be specified as values, and you cannot specify a status code more than once.
              - !ruby/object:Api::Type::Integer
                name: 'ttl'
                description: |
                  The TTL (in seconds) for which to cache responses with the corresponding status code. The maximum allowed value is 1800s
                  (30 minutes), noting that infrequently accessed objects may be evicted from the cache before the defined TTL.
        - !ruby/object:Api::Type::Enum
          name: 'cacheMode'
          description: |
            Specifies the cache setting for all responses from this backend.
            The possible values are: USE_ORIGIN_HEADERS, FORCE_CACHE_ALL and CACHE_ALL_STATIC
          values:
            - :USE_ORIGIN_HEADERS
            - :FORCE_CACHE_ALL
            - :CACHE_ALL_STATIC
        - !ruby/object:Api::Type::Integer
          name: 'serveWhileStale'
          send_empty_value: true
          description: |
            Serve existing content from the cache (if available) when revalidating content with the origin, or when an error is encountered when refreshing the cache.
        - !ruby/object:Api::Type::Boolean        
          name: 'requestCoalescing'
          send_empty_value: true
          description: |
            If true then Cloud CDN will combine multiple concurrent cache fill requests into a small number of requests to the origin.
        - !ruby/object:Api::Type::Array
          name: 'bypassCacheOnRequestHeaders'
          description: |
            Bypass the cache when the specified request headers are matched - e.g. Pragma or Authorization headers. Up to 5 headers can be specified. The cache is bypassed for all cdnPolicy.cacheMode settings.
          max_size: 5  
          item_type: !ruby/object:Api::Type::NestedObject
            properties:
              - !ruby/object:Api::Type::String
                name: 'headerName'
                description: |
                  The header field name to match on when bypassing cache. Values are case-insensitive.
      - !ruby/object:Api::Type::Enum
          name: 'compressionMode'
          description: |
            Compress text responses using Brotli or gzip compression, based on the client's Accept-Encoding header.
          values:
            - :AUTOMATIC
            - :DISABLED
      - !ruby/object:Api::Type::String
        name: 'edgeSecurityPolicy'
        description: |
          The security policy associated with this backend bucket.
      - !ruby/object:Api::Type::Array
        name: 'customResponseHeaders'
        description: |
          Headers that the HTTP/S load balancer should add to proxied responses.
        item_type: Api::Type::String
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional textual description of the resource; provided by the
          client when the resource is created.
      - !ruby/object:Api::Type::Boolean
        name: 'enableCdn'
        description: 'If true, enable Cloud CDN for this BackendBucket.'
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'Unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035.  Specifically, the name must be 1-63 characters long and
          match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means
          the first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the
          last character, which cannot be a dash.
        input: true
        required: true
  - !ruby/object:Api::Resource
    name: 'BackendBucketSignedUrlKey'
    kind: 'compute#BackendBucketSignedUrlKey'
    input: true
    base_url: projects/{{project}}/global/backendBuckets/{{backend_bucket}}
    create_url: projects/{{project}}/global/backendBuckets/{{backend_bucket}}/addSignedUrlKey
    create_verb: :POST
    delete_url: projects/{{project}}/global/backendBuckets/{{backend_bucket}}/deleteSignedUrlKey?keyName={{name}}
    delete_verb: :POST
    self_link: projects/{{project}}/global/backendBuckets/{{backend_bucket}}
    identity:
      - name
    nested_query: !ruby/object:Api::Resource::NestedQuery
      keys:
        - cdnPolicy
        - signedUrlKeyNames
      is_list_of_ids: true
    description: |
      A key for signing Cloud CDN signed URLs for BackendBuckets.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Using Signed URLs': 'https://cloud.google.com/cdn/docs/using-signed-urls/'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/backendBuckets'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'backendBucket'
        resource: 'BackendBucket'
        imports: 'name'
        description: |
          The backend bucket this signed URL key belongs.
        required: true
        input: true
    properties:
      - !ruby/object:Api::Type::String
        name: 'name'
        api_name: 'keyName'
        description: |
          Name of the signed URL key.
        required: true
        input: true
      - !ruby/object:Api::Type::String
        name: 'keyValue'
        description: |
          128-bit key value used for signing the URL. The key value must be a
          valid RFC 4648 Section 5 base64url encoded string.
        required: true
        input: true
  - !ruby/object:Api::Resource
    name: 'BackendService'
    kind: 'compute#backendService'
    base_url: projects/{{project}}/global/backendServices
    collection_url_key: 'items'
    has_self_link: true
    description: |
      A Backend Service defines a group of virtual machines that will serve
      traffic for load balancing. This resource is a global backend service,
      appropriate for external load balancing or self-managed internal load balancing.
      For managed internal load balancing, use a regional backend service instead.

      Currently self-managed internal load balancing is only available in beta.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation': 'https://cloud.google.com/compute/docs/load-balancing/http/backend-service'
      api: 'https://cloud.google.com/compute/docs/reference/v1/backendServices'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      - !ruby/object:Api::Type::Integer
        name: 'affinityCookieTtlSec'
        description: |
          Lifetime of cookies in seconds if session_affinity is
          GENERATED_COOKIE. If set to 0, the cookie is non-persistent and lasts
          only until the end of the browser session (or equivalent). The
          maximum allowed value for TTL is one day.

          When the load balancing scheme is INTERNAL, this field is not used.
      - !ruby/object:Api::Type::Array
        name: 'backends'
        description: |
          The set of backends that serve this BackendService.
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::Enum
              name: 'balancingMode'
              default_value: :UTILIZATION
              values:
                - :UTILIZATION
                - :RATE
                - :CONNECTION
              description: |
                Specifies the balancing mode for this backend.

                For global HTTP(S) or TCP/SSL load balancing, the default is
                UTILIZATION. Valid values are UTILIZATION, RATE (for HTTP(S))
                and CONNECTION (for TCP/SSL).

                See the [Backend Services Overview](https://cloud.google.com/load-balancing/docs/backend-service#balancing-mode)
                for an explanation of load balancing modes.
            - !ruby/object:Api::Type::Double
              name: 'capacityScaler'
              send_empty_value: true
              default_value: 1.0
              description: |
                A multiplier applied to the group's maximum servicing capacity
                (based on UTILIZATION, RATE or CONNECTION).

                Default value is 1, which means the group will serve up to 100%
                of its configured capacity (depending on balancingMode). A
                setting of 0 means the group is completely drained, offering
                0% of its available Capacity. Valid range is [0.0,1.0].
            - !ruby/object:Api::Type::String
              name: 'description'
              description: |
                An optional description of this resource.
                Provide this property when you create the resource.
            - !ruby/object:Api::Type::String
              name: 'group'
              description: |
                The fully-qualified URL of an Instance Group or Network Endpoint
                Group resource. In case of instance group this defines the list
                of instances that serve traffic. Member virtual machine
                instances from each instance group must live in the same zone as
                the instance group itself. No two backends in a backend service
                are allowed to use same Instance Group resource.

                For Network Endpoint Groups this defines list of endpoints. All
                endpoints of Network Endpoint Group must be hosted on instances
                located in the same zone as the Network Endpoint Group.

                Backend services cannot mix Instance Group and
                Network Endpoint Group backends.

                Note that you must specify an Instance Group or Network Endpoint
                Group resource using the fully-qualified URL, rather than a
                partial URL.
              required: true
            - !ruby/object:Api::Type::Integer
              name: 'maxConnections'
              description: |
                The max number of simultaneous connections for the group. Can
                be used with either CONNECTION or UTILIZATION balancing modes.

                For CONNECTION mode, either maxConnections or one
                of maxConnectionsPerInstance or maxConnectionsPerEndpoint,
                as appropriate for group type, must be set.
            - !ruby/object:Api::Type::Integer
              name: 'maxConnectionsPerInstance'
              description: |
                The max number of simultaneous connections that a single
                backend instance can handle. This is used to calculate the
                capacity of the group. Can be used in either CONNECTION or
                UTILIZATION balancing modes.

                For CONNECTION mode, either maxConnections or
                maxConnectionsPerInstance must be set.
            - !ruby/object:Api::Type::Integer
              name: 'maxConnectionsPerEndpoint'
              description: |
                The max number of simultaneous connections that a single backend
                network endpoint can handle. This is used to calculate the
                capacity of the group. Can be used in either CONNECTION or
                UTILIZATION balancing modes.

                For CONNECTION mode, either
                maxConnections or maxConnectionsPerEndpoint must be set.
            - !ruby/object:Api::Type::Integer
              name: 'maxRate'
              description: |
                The max requests per second (RPS) of the group.

                Can be used with either RATE or UTILIZATION balancing modes,
                but required if RATE mode. For RATE mode, either maxRate or one
                of maxRatePerInstance or maxRatePerEndpoint, as appropriate for
                group type, must be set.
            - !ruby/object:Api::Type::Double
              name: 'maxRatePerInstance'
              description: |
                The max requests per second (RPS) that a single backend
                instance can handle. This is used to calculate the capacity of
                the group. Can be used in either balancing mode. For RATE mode,
                either maxRate or maxRatePerInstance must be set.
            - !ruby/object:Api::Type::Double
              name: 'maxRatePerEndpoint'
              description: |
                The max requests per second (RPS) that a single backend network
                endpoint can handle. This is used to calculate the capacity of
                the group. Can be used in either balancing mode. For RATE mode,
                either maxRate or maxRatePerEndpoint must be set.
            - !ruby/object:Api::Type::Double
              name: 'maxUtilization'
              description: |
                Used when balancingMode is UTILIZATION. This ratio defines the
                CPU utilization target for the group. Valid range is [0.0, 1.0].
      - !ruby/object:Api::Type::NestedObject
        name: 'circuitBreakers'
        description: |
          Settings controlling the volume of connections to a backend service. This field
          is applicable only when the load_balancing_scheme is set to INTERNAL_SELF_MANAGED.
        properties:
          - !ruby/object:Api::Type::NestedObject
            name: 'connectTimeout'
            min_version: beta
            at_least_one_of:
              - circuit_breakers.0.connect_timeout
              - circuit_breakers.0.max_requests_per_connection
              - circuit_breakers.0.max_connections
              - circuit_breakers.0.max_pending_requests
              - circuit_breakers.0.max_requests
              - circuit_breakers.0.max_retries
            description: |
              The timeout for new network connections to hosts.
            properties:
              - !ruby/object:Api::Type::Integer
                name: 'seconds'
                required: true
                description: |
                  Span of time at a resolution of a second.
                  Must be from 0 to 315,576,000,000 inclusive.
              - !ruby/object:Api::Type::Integer
                name: 'nanos'
                description: |
                  Span of time that's a fraction of a second at nanosecond
                  resolution. Durations less than one second are represented
                  with a 0 seconds field and a positive nanos field. Must
                  be from 0 to 999,999,999 inclusive.
          - !ruby/object:Api::Type::Integer
            name: 'maxRequestsPerConnection'
            at_least_one_of:
              - circuit_breakers.0.connect_timeout
              - circuit_breakers.0.max_requests_per_connection
              - circuit_breakers.0.max_connections
              - circuit_breakers.0.max_pending_requests
              - circuit_breakers.0.max_requests
              - circuit_breakers.0.max_retries
            description: |
              Maximum requests for a single backend connection. This parameter
              is respected by both the HTTP/1.1 and HTTP/2 implementations. If
              not specified, there is no limit. Setting this parameter to 1
              will effectively disable keep alive.
          - !ruby/object:Api::Type::Integer
            name: 'maxConnections'
            default_value: 1024
            at_least_one_of:
              - circuit_breakers.0.connect_timeout
              - circuit_breakers.0.max_requests_per_connection
              - circuit_breakers.0.max_connections
              - circuit_breakers.0.max_pending_requests
              - circuit_breakers.0.max_requests
              - circuit_breakers.0.max_retries
            description: |
              The maximum number of connections to the backend cluster.
              Defaults to 1024.
          - !ruby/object:Api::Type::Integer
            name: 'maxPendingRequests'
            default_value: 1024
            at_least_one_of:
              - circuit_breakers.0.connect_timeout
              - circuit_breakers.0.max_requests_per_connection
              - circuit_breakers.0.max_connections
              - circuit_breakers.0.max_pending_requests
              - circuit_breakers.0.max_requests
              - circuit_breakers.0.max_retries
            description: |
              The maximum number of pending requests to the backend cluster.
              Defaults to 1024.
          - !ruby/object:Api::Type::Integer
            name: 'maxRequests'
            default_value: 1024
            at_least_one_of:
              - circuit_breakers.0.connect_timeout
              - circuit_breakers.0.max_requests_per_connection
              - circuit_breakers.0.max_connections
              - circuit_breakers.0.max_pending_requests
              - circuit_breakers.0.max_requests
              - circuit_breakers.0.max_retries
            description: |
              The maximum number of parallel requests to the backend cluster.
              Defaults to 1024.
          - !ruby/object:Api::Type::Integer
            name: 'maxRetries'
            default_value: 3
            at_least_one_of:
              - circuit_breakers.0.connect_timeout
              - circuit_breakers.0.max_requests_per_connection
              - circuit_breakers.0.max_connections
              - circuit_breakers.0.max_pending_requests
              - circuit_breakers.0.max_requests
              - circuit_breakers.0.max_retries
            description: |
              The maximum number of parallel retries to the backend cluster.
              Defaults to 3.
      - !ruby/object:Api::Type::Enum
          name: 'compressionMode'
          description: |
            Compress text responses using Brotli or gzip compression, based on the client's Accept-Encoding header.
          values:
            - :AUTOMATIC
            - :DISABLED
      - !ruby/object:Api::Type::NestedObject
        name: 'consistentHash'
        description: |
          Consistent Hash-based load balancing can be used to provide soft session
          affinity based on HTTP headers, cookies or other properties. This load balancing
          policy is applicable only for HTTP connections. The affinity to a particular
          destination host will be lost when one or more hosts are added/removed from the
          destination service. This field specifies parameters that control consistent
          hashing. This field only applies if the load_balancing_scheme is set to
          INTERNAL_SELF_MANAGED. This field is only applicable when locality_lb_policy is
          set to MAGLEV or RING_HASH.
        properties:
          - !ruby/object:Api::Type::NestedObject
            name: 'httpCookie'
            at_least_one_of:
              - consistent_hash.0.http_cookie
              - consistent_hash.0.http_header_name
              - consistent_hash.0.minimum_ring_size
            description: |
              Hash is based on HTTP Cookie. This field describes a HTTP cookie
              that will be used as the hash key for the consistent hash load
              balancer. If the cookie is not present, it will be generated.
              This field is applicable if the sessionAffinity is set to HTTP_COOKIE.
            properties:
              - !ruby/object:Api::Type::NestedObject
                name: 'ttl'
                at_least_one_of:
                  - consistent_hash.0.http_cookie.0.ttl
                  - consistent_hash.0.http_cookie.0.name
                  - consistent_hash.0.http_cookie.0.path
                description: |
                  Lifetime of the cookie.
                properties:
                  - !ruby/object:Api::Type::Integer
                    name: 'seconds'
                    required: true
                    description: |
                      Span of time at a resolution of a second.
                      Must be from 0 to 315,576,000,000 inclusive.
                  - !ruby/object:Api::Type::Integer
                    name: 'nanos'
                    description: |
                      Span of time that's a fraction of a second at nanosecond
                      resolution. Durations less than one second are represented
                      with a 0 seconds field and a positive nanos field. Must
                      be from 0 to 999,999,999 inclusive.
              - !ruby/object:Api::Type::String
                name: 'name'
                at_least_one_of:
                  - consistent_hash.0.http_cookie.0.ttl
                  - consistent_hash.0.http_cookie.0.name
                  - consistent_hash.0.http_cookie.0.path
                description: |
                  Name of the cookie.
              - !ruby/object:Api::Type::String
                name: 'path'
                at_least_one_of:
                  - consistent_hash.0.http_cookie.0.ttl
                  - consistent_hash.0.http_cookie.0.name
                  - consistent_hash.0.http_cookie.0.path
                description: |
                  Path to set for the cookie.
          - !ruby/object:Api::Type::String
            name: 'httpHeaderName'
            at_least_one_of:
              - consistent_hash.0.http_cookie
              - consistent_hash.0.http_header_name
              - consistent_hash.0.minimum_ring_size
            description: |
              The hash based on the value of the specified header field.
              This field is applicable if the sessionAffinity is set to HEADER_FIELD.
          - !ruby/object:Api::Type::Integer
            name: 'minimumRingSize'
            default_value: 1024
            at_least_one_of:
              - consistent_hash.0.http_cookie
              - consistent_hash.0.http_header_name
              - consistent_hash.0.minimum_ring_size
            description: |
              The minimum number of virtual nodes to use for the hash ring.
              Larger ring sizes result in more granular load
              distributions. If the number of hosts in the load balancing pool
              is larger than the ring size, each host will be assigned a single
              virtual node.
              Defaults to 1024.
      - !ruby/object:Api::Type::NestedObject
        name: 'cdnPolicy'
        description: 'Cloud CDN configuration for this BackendService.'
        properties:
          - !ruby/object:Api::Type::NestedObject
            name: 'cacheKeyPolicy'
            description: 'The CacheKeyPolicy for this CdnPolicy.'
            at_least_one_of:
              - cdn_policy.0.cache_key_policy
              - cdn_policy.0.signed_url_cache_max_age_sec
            properties:
              - !ruby/object:Api::Type::Boolean
                name: 'includeHost'
                send_empty_value: true
                at_least_one_of:
                  - cdn_policy.0.cache_key_policy.0.include_host
                  - cdn_policy.0.cache_key_policy.0.include_protocol
                  - cdn_policy.0.cache_key_policy.0.include_query_string
                  - cdn_policy.0.cache_key_policy.0.query_string_blacklist
                  - cdn_policy.0.cache_key_policy.0.query_string_whitelist
                  - cdn_policy.0.cache_key_policy.0.include_named_cookies
                description: |
                  If true requests to different hosts will be cached separately.
              - !ruby/object:Api::Type::Boolean
                name: 'includeProtocol'
                send_empty_value: true
                at_least_one_of:
                  - cdn_policy.0.cache_key_policy.0.include_host
                  - cdn_policy.0.cache_key_policy.0.include_protocol
                  - cdn_policy.0.cache_key_policy.0.include_query_string
                  - cdn_policy.0.cache_key_policy.0.query_string_blacklist
                  - cdn_policy.0.cache_key_policy.0.query_string_whitelist
                  - cdn_policy.0.cache_key_policy.0.include_named_cookies
                description: |
                  If true, http and https requests will be cached separately.
              - !ruby/object:Api::Type::Boolean
                name: 'includeQueryString'
                send_empty_value: true
                at_least_one_of:
                  - cdn_policy.0.cache_key_policy.0.include_host
                  - cdn_policy.0.cache_key_policy.0.include_protocol
                  - cdn_policy.0.cache_key_policy.0.include_query_string
                  - cdn_policy.0.cache_key_policy.0.query_string_blacklist
                  - cdn_policy.0.cache_key_policy.0.query_string_whitelist
                  - cdn_policy.0.cache_key_policy.0.include_named_cookies
                description: |
                  If true, include query string parameters in the cache key
                  according to query_string_whitelist and
                  query_string_blacklist. If neither is set, the entire query
                  string will be included.

                  If false, the query string will be excluded from the cache
                  key entirely.
              - !ruby/object:Api::Type::Array
                name: 'queryStringBlacklist'
                send_empty_value: true
                at_least_one_of:
                  - cdn_policy.0.cache_key_policy.0.include_host
                  - cdn_policy.0.cache_key_policy.0.include_protocol
                  - cdn_policy.0.cache_key_policy.0.include_query_string
                  - cdn_policy.0.cache_key_policy.0.query_string_blacklist
                  - cdn_policy.0.cache_key_policy.0.query_string_whitelist
                  - cdn_policy.0.cache_key_policy.0.include_named_cookies
                description: |
                  Names of query string parameters to exclude in cache keys.

                  All other parameters will be included. Either specify
                  query_string_whitelist or query_string_blacklist, not both.
                  '&' and '=' will be percent encoded and not treated as
                  delimiters.
                item_type: Api::Type::String
              - !ruby/object:Api::Type::Array
                send_empty_value: true
                name: 'queryStringWhitelist'
                at_least_one_of:
                  - cdn_policy.0.cache_key_policy.0.include_host
                  - cdn_policy.0.cache_key_policy.0.include_protocol
                  - cdn_policy.0.cache_key_policy.0.include_query_string
                  - cdn_policy.0.cache_key_policy.0.query_string_blacklist
                  - cdn_policy.0.cache_key_policy.0.query_string_whitelist
                  - cdn_policy.0.cache_key_policy.0.include_named_cookies
                description: |
                  Names of query string parameters to include in cache keys.

                  All other parameters will be excluded. Either specify
                  query_string_whitelist or query_string_blacklist, not both.
                  '&' and '=' will be percent encoded and not treated as
                  delimiters.
                item_type: Api::Type::String
              - !ruby/object:Api::Type::Array
                name: 'includeNamedCookies'
                send_empty_value: true
                at_least_one_of:
                  - cdn_policy.0.cache_key_policy.0.include_host
                  - cdn_policy.0.cache_key_policy.0.include_protocol
                  - cdn_policy.0.cache_key_policy.0.include_query_string
                  - cdn_policy.0.cache_key_policy.0.query_string_blacklist
                  - cdn_policy.0.cache_key_policy.0.query_string_whitelist
                  - cdn_policy.0.cache_key_policy.0.include_named_cookies
                description: |
                  Names of cookies to include in cache keys.
                item_type: Api::Type::String
          - !ruby/object:Api::Type::Integer
            name: 'signedUrlCacheMaxAgeSec'
            default_value: 3600
            at_least_one_of:
              - cdn_policy.0.cache_key_policy
              - cdn_policy.0.signed_url_cache_max_age_sec
            description: |
              Maximum number of seconds the response to a signed URL request
              will be considered fresh, defaults to 1hr (3600s). After this
              time period, the response will be revalidated before
              being served.

              When serving responses to signed URL requests, Cloud CDN will
              internally behave as though all responses from this backend had a
              "Cache-Control: public, max-age=[TTL]" header, regardless of any
              existing Cache-Control header. The actual headers served in
              responses will not be altered.
          - !ruby/object:Api::Type::Integer
            name: 'defaultTtl'
            description: |
              Specifies the default TTL for cached content served by this origin for responses
              that do not have an existing valid TTL (max-age or s-max-age).
          - !ruby/object:Api::Type::Integer
            name: 'maxTtl'
            description: |
              Specifies the maximum allowed TTL for cached content served by this origin.
          - !ruby/object:Api::Type::Integer
            name: 'clientTtl'
            description: |
              Specifies the maximum allowed TTL for cached content served by this origin.
          - !ruby/object:Api::Type::Boolean
            name: 'negativeCaching'
            send_empty_value: true
            description: |
              Negative caching allows per-status code TTLs to be set, in order to apply fine-grained caching for common errors or redirects.
          - !ruby/object:Api::Type::Array
            name: 'negativeCachingPolicy'
            description: |
              Sets a cache TTL for the specified HTTP status code. negativeCaching must be enabled to configure negativeCachingPolicy.
              Omitting the policy and leaving negativeCaching enabled will use Cloud CDN's default cache TTLs.
            item_type: !ruby/object:Api::Type::NestedObject
              properties:
                - !ruby/object:Api::Type::Integer
                  name: 'code'
                  description: |
                    The HTTP status code to define a TTL against. Only HTTP status codes 300, 301, 308, 404, 405, 410, 421, 451 and 501
                    can be specified as values, and you cannot specify a status code more than once.
                - !ruby/object:Api::Type::Integer
                  name: 'ttl'
                  description: |
                    The TTL (in seconds) for which to cache responses with the corresponding status code. The maximum allowed value is 1800s
                    (30 minutes), noting that infrequently accessed objects may be evicted from the cache before the defined TTL.
          - !ruby/object:Api::Type::Enum
            name: 'cacheMode'
            description: |
              Specifies the cache setting for all responses from this backend.
              The possible values are: USE_ORIGIN_HEADERS, FORCE_CACHE_ALL and CACHE_ALL_STATIC
            values:
              - :USE_ORIGIN_HEADERS
              - :FORCE_CACHE_ALL
              - :CACHE_ALL_STATIC
          - !ruby/object:Api::Type::Integer
            name: 'serveWhileStale'
            send_empty_value: true
            description: |
              Serve existing content from the cache (if available) when revalidating content with the origin, or when an error is encountered when refreshing the cache.
      - !ruby/object:Api::Type::NestedObject
        name: 'connectionDraining'
        description: |
          Settings for connection draining
        properties:
          - !ruby/object:Api::Type::Integer
            name: 'drainingTimeoutSec'
            default_value: 300
            description: |
              Time for which instance will be drained (not accept new
              connections, but still work to finish started).
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: |
          Creation timestamp in RFC3339 text format.
        output: true
      - !ruby/object:Api::Type::Array
        name: 'customRequestHeaders'
        item_type: Api::Type::String
        description: |
          Headers that the HTTP/S load balancer should add to proxied
          requests.
      - !ruby/object:Api::Type::Array
        name: 'customResponseHeaders'
        item_type: Api::Type::String
        description: |
          Headers that the HTTP/S load balancer should add to proxied
          responses.
      - !ruby/object:Api::Type::Fingerprint
        name: 'fingerprint'
        output: true
        description: |
          Fingerprint of this resource. A hash of the contents stored in this
          object. This field is used in optimistic locking.
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource.
      - !ruby/object:Api::Type::Boolean
        name: 'enableCDN'
        description: |
          If true, enable Cloud CDN for this BackendService.
      - !ruby/object:Api::Type::Array
        name: 'healthChecks'
        item_type: Api::Type::String
        min_size: 1
        max_size: 1
        description: |
           The set of URLs to the HttpHealthCheck or HttpsHealthCheck resource
           for health checking this BackendService. Currently at most one health
           check can be specified.

           A health check must be specified unless the backend service uses an internet
           or serverless NEG as a backend.

           For internal load balancing, a URL to a HealthCheck resource must be specified instead.
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::NestedObject
        name: 'iap'
        description: Settings for enabling Cloud Identity Aware Proxy
        properties:
          - !ruby/object:Api::Type::Boolean
            name: 'enabled'
            description: Enables IAP.
          - !ruby/object:Api::Type::String
            name: 'oauth2ClientId'
            required: true
            description: |
              OAuth2 Client ID for IAP
          - !ruby/object:Api::Type::String
            name: 'oauth2ClientSecret'
            required: true
            description: |
              OAuth2 Client Secret for IAP
          - !ruby/object:Api::Type::String
            name: 'oauth2ClientSecretSha256'
            output: true
            description: |
              OAuth2 Client Secret SHA-256 for IAP
      - !ruby/object:Api::Type::Enum
        name: 'loadBalancingScheme'
        input: true
        description: |
          Indicates whether the backend service will be used with internal or
          external load balancing. A backend service created for one type of
          load balancing cannot be used with the other. For more information, refer to
          [Choosing a load balancer](https://cloud.google.com/load-balancing/docs/backend-service).
        default_value: :EXTERNAL
        # If you're modifying this value, it probably means Global ILB is now
        # an option. If that's the case, all of the documentation is based on
        # this resource supporting external load balancing only.
        values:
          - :EXTERNAL
          - :INTERNAL_SELF_MANAGED
          - :EXTERNAL_MANAGED
      - !ruby/object:Api::Type::Enum
        name: 'localityLbPolicy'
        values:
          - :ROUND_ROBIN
          - :LEAST_REQUEST
          - :RING_HASH
          - :RANDOM
          - :ORIGINAL_DESTINATION
          - :MAGLEV
        description: |
          The load balancing algorithm used within the scope of the locality.
          The possible values are:

          * `ROUND_ROBIN`: This is a simple policy in which each healthy backend
                           is selected in round robin order.

          * `LEAST_REQUEST`: An O(1) algorithm which selects two random healthy
                             hosts and picks the host which has fewer active requests.

          * `RING_HASH`: The ring/modulo hash load balancer implements consistent
                         hashing to backends. The algorithm has the property that the
                         addition/removal of a host from a set of N hosts only affects
                         1/N of the requests.

          * `RANDOM`: The load balancer selects a random healthy host.

          * `ORIGINAL_DESTINATION`: Backend host is selected based on the client
                                    connection metadata, i.e., connections are opened
                                    to the same address as the destination address of
                                    the incoming connection before the connection
                                    was redirected to the load balancer.

          * `MAGLEV`: used as a drop in replacement for the ring hash load balancer.
                      Maglev is not as stable as ring hash but has faster table lookup
                      build times and host selection times. For more information about
                      Maglev, refer to https://ai.google/research/pubs/pub44824


          This field is applicable to either:

          * A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
            and loadBalancingScheme set to INTERNAL_MANAGED.
          * A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.


          If session_affinity is not NONE, and this field is not set to MAGLEV or RING_HASH,
          session affinity settings will not take effect.

          Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
          by a URL map that is bound to target gRPC proxy that has validate_for_proxyless
          field set to true.
      - !ruby/object:Api::Type::String
        name: 'name'
        required: true
        input: true
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
      - !ruby/object:Api::Type::NestedObject
        name: 'outlierDetection'
        description: |
          Settings controlling eviction of unhealthy hosts from the load balancing pool.
          This field is applicable only when the load_balancing_scheme is set
          to INTERNAL_SELF_MANAGED.
        properties:
          - !ruby/object:Api::Type::NestedObject
            name: 'baseEjectionTime'
            at_least_one_of:
              - outlier_detection.0.base_ejection_time
              - outlier_detection.0.consecutive_errors
              - outlier_detection.0.consecutive_gateway_failure
              - outlier_detection.0.enforcing_consecutive_errors
              - outlier_detection.0.enforcing_consecutive_gateway_failure
              - outlier_detection.0.enforcing_success_rate
              - outlier_detection.0.interval
              - outlier_detection.0.max_ejection_percent
              - outlier_detection.0.success_rate_minimum_hosts
              - outlier_detection.0.success_rate_request_volume
              - outlier_detection.0.success_rate_stdev_factor
            description: |
              The base time that a host is ejected for. The real time is equal to the base
              time multiplied by the number of times the host has been ejected. Defaults to
              30000ms or 30s.
            properties:
              - !ruby/object:Api::Type::Integer
                name: 'seconds'
                required: true
                description: |
                  Span of time at a resolution of a second. Must be from 0 to 315,576,000,000
                  inclusive.
              - !ruby/object:Api::Type::Integer
                name: 'nanos'
                description: |
                  Span of time that's a fraction of a second at nanosecond resolution. Durations
                  less than one second are represented with a 0 `seconds` field and a positive
                  `nanos` field. Must be from 0 to 999,999,999 inclusive.
          - !ruby/object:Api::Type::Integer
            name: 'consecutiveErrors'
            at_least_one_of:
              - outlier_detection.0.base_ejection_time
              - outlier_detection.0.consecutive_errors
              - outlier_detection.0.consecutive_gateway_failure
              - outlier_detection.0.enforcing_consecutive_errors
              - outlier_detection.0.enforcing_consecutive_gateway_failure
              - outlier_detection.0.enforcing_success_rate
              - outlier_detection.0.interval
              - outlier_detection.0.max_ejection_percent
              - outlier_detection.0.success_rate_minimum_hosts
              - outlier_detection.0.success_rate_request_volume
              - outlier_detection.0.success_rate_stdev_factor
            default_value: 5
            description: |
              Number of errors before a host is ejected from the connection pool. When the
              backend host is accessed over HTTP, a 5xx return code qualifies as an error.
              Defaults to 5.
          - !ruby/object:Api::Type::Integer
            name: 'consecutiveGatewayFailure'
            at_least_one_of:
              - outlier_detection.0.base_ejection_time
              - outlier_detection.0.consecutive_errors
              - outlier_detection.0.consecutive_gateway_failure
              - outlier_detection.0.enforcing_consecutive_errors
              - outlier_detection.0.enforcing_consecutive_gateway_failure
              - outlier_detection.0.enforcing_success_rate
              - outlier_detection.0.interval
              - outlier_detection.0.max_ejection_percent
              - outlier_detection.0.success_rate_minimum_hosts
              - outlier_detection.0.success_rate_request_volume
              - outlier_detection.0.success_rate_stdev_factor
            default_value: 5
            description: |
              The number of consecutive gateway failures (502, 503, 504 status or connection
              errors that are mapped to one of those status codes) before a consecutive
              gateway failure ejection occurs. Defaults to 5.
          - !ruby/object:Api::Type::Integer
            name: 'enforcingConsecutiveErrors'
            at_least_one_of:
              - outlier_detection.0.base_ejection_time
              - outlier_detection.0.consecutive_errors
              - outlier_detection.0.consecutive_gateway_failure
              - outlier_detection.0.enforcing_consecutive_errors
              - outlier_detection.0.enforcing_consecutive_gateway_failure
              - outlier_detection.0.enforcing_success_rate
              - outlier_detection.0.interval
              - outlier_detection.0.max_ejection_percent
              - outlier_detection.0.success_rate_minimum_hosts
              - outlier_detection.0.success_rate_request_volume
              - outlier_detection.0.success_rate_stdev_factor
            default_value: 100
            description: |
              The percentage chance that a host will be actually ejected when an outlier
              status is detected through consecutive 5xx. This setting can be used to disable
              ejection or to ramp it up slowly. Defaults to 100.
          - !ruby/object:Api::Type::Integer
            name: 'enforcingConsecutiveGatewayFailure'
            at_least_one_of:
              - outlier_detection.0.base_ejection_time
              - outlier_detection.0.consecutive_errors
              - outlier_detection.0.consecutive_gateway_failure
              - outlier_detection.0.enforcing_consecutive_errors
              - outlier_detection.0.enforcing_consecutive_gateway_failure
              - outlier_detection.0.enforcing_success_rate
              - outlier_detection.0.interval
              - outlier_detection.0.max_ejection_percent
              - outlier_detection.0.success_rate_minimum_hosts
              - outlier_detection.0.success_rate_request_volume
              - outlier_detection.0.success_rate_stdev_factor
            default_value: 0
            description: |
              The percentage chance that a host will be actually ejected when an outlier
              status is detected through consecutive gateway failures. This setting can be
              used to disable ejection or to ramp it up slowly. Defaults to 0.
          - !ruby/object:Api::Type::Integer
            name: 'enforcingSuccessRate'
            at_least_one_of:
              - outlier_detection.0.base_ejection_time
              - outlier_detection.0.consecutive_errors
              - outlier_detection.0.consecutive_gateway_failure
              - outlier_detection.0.enforcing_consecutive_errors
              - outlier_detection.0.enforcing_consecutive_gateway_failure
              - outlier_detection.0.enforcing_success_rate
              - outlier_detection.0.interval
              - outlier_detection.0.max_ejection_percent
              - outlier_detection.0.success_rate_minimum_hosts
              - outlier_detection.0.success_rate_request_volume
              - outlier_detection.0.success_rate_stdev_factor
            default_value: 100
            description: |
              The percentage chance that a host will be actually ejected when an outlier
              status is detected through success rate statistics. This setting can be used to
              disable ejection or to ramp it up slowly. Defaults to 100.
          - !ruby/object:Api::Type::NestedObject
            name: 'interval'
            at_least_one_of:
              - outlier_detection.0.base_ejection_time
              - outlier_detection.0.consecutive_errors
              - outlier_detection.0.consecutive_gateway_failure
              - outlier_detection.0.enforcing_consecutive_errors
              - outlier_detection.0.enforcing_consecutive_gateway_failure
              - outlier_detection.0.enforcing_success_rate
              - outlier_detection.0.interval
              - outlier_detection.0.max_ejection_percent
              - outlier_detection.0.success_rate_minimum_hosts
              - outlier_detection.0.success_rate_request_volume
              - outlier_detection.0.success_rate_stdev_factor
            description: |
              Time interval between ejection sweep analysis. This can result in both new
              ejections as well as hosts being returned to service. Defaults to 10 seconds.
            properties:
              - !ruby/object:Api::Type::Integer
                name: 'seconds'
                required: true
                description: |
                  Span of time at a resolution of a second. Must be from 0 to 315,576,000,000
                  inclusive.
              - !ruby/object:Api::Type::Integer
                name: 'nanos'
                description: |
                  Span of time that's a fraction of a second at nanosecond resolution. Durations
                  less than one second are represented with a 0 `seconds` field and a positive
                  `nanos` field. Must be from 0 to 999,999,999 inclusive.
          - !ruby/object:Api::Type::Integer
            name: 'maxEjectionPercent'
            at_least_one_of:
              - outlier_detection.0.base_ejection_time
              - outlier_detection.0.consecutive_errors
              - outlier_detection.0.consecutive_gateway_failure
              - outlier_detection.0.enforcing_consecutive_errors
              - outlier_detection.0.enforcing_consecutive_gateway_failure
              - outlier_detection.0.enforcing_success_rate
              - outlier_detection.0.interval
              - outlier_detection.0.max_ejection_percent
              - outlier_detection.0.success_rate_minimum_hosts
              - outlier_detection.0.success_rate_request_volume
              - outlier_detection.0.success_rate_stdev_factor
            default_value: 10
            description: |
              Maximum percentage of hosts in the load balancing pool for the backend service
              that can be ejected. Defaults to 10%.
          - !ruby/object:Api::Type::Integer
            name: 'successRateMinimumHosts'
            at_least_one_of:
              - outlier_detection.0.base_ejection_time
              - outlier_detection.0.consecutive_errors
              - outlier_detection.0.consecutive_gateway_failure
              - outlier_detection.0.enforcing_consecutive_errors
              - outlier_detection.0.enforcing_consecutive_gateway_failure
              - outlier_detection.0.enforcing_success_rate
              - outlier_detection.0.interval
              - outlier_detection.0.max_ejection_percent
              - outlier_detection.0.success_rate_minimum_hosts
              - outlier_detection.0.success_rate_request_volume
              - outlier_detection.0.success_rate_stdev_factor
            default_value: 5
            description: |
              The number of hosts in a cluster that must have enough request volume to detect
              success rate outliers. If the number of hosts is less than this setting, outlier
              detection via success rate statistics is not performed for any host in the
              cluster. Defaults to 5.
          - !ruby/object:Api::Type::Integer
            name: 'successRateRequestVolume'
            at_least_one_of:
              - outlier_detection.0.base_ejection_time
              - outlier_detection.0.consecutive_errors
              - outlier_detection.0.consecutive_gateway_failure
              - outlier_detection.0.enforcing_consecutive_errors
              - outlier_detection.0.enforcing_consecutive_gateway_failure
              - outlier_detection.0.enforcing_success_rate
              - outlier_detection.0.interval
              - outlier_detection.0.max_ejection_percent
              - outlier_detection.0.success_rate_minimum_hosts
              - outlier_detection.0.success_rate_request_volume
              - outlier_detection.0.success_rate_stdev_factor
            default_value: 100
            description: |
              The minimum number of total requests that must be collected in one interval (as
              defined by the interval duration above) to include this host in success rate
              based outlier detection. If the volume is lower than this setting, outlier
              detection via success rate statistics is not performed for that host. Defaults
              to 100.
          - !ruby/object:Api::Type::Integer
            name: 'successRateStdevFactor'
            at_least_one_of:
              - outlier_detection.0.base_ejection_time
              - outlier_detection.0.consecutive_errors
              - outlier_detection.0.consecutive_gateway_failure
              - outlier_detection.0.enforcing_consecutive_errors
              - outlier_detection.0.enforcing_consecutive_gateway_failure
              - outlier_detection.0.enforcing_success_rate
              - outlier_detection.0.interval
              - outlier_detection.0.max_ejection_percent
              - outlier_detection.0.success_rate_minimum_hosts
              - outlier_detection.0.success_rate_request_volume
              - outlier_detection.0.success_rate_stdev_factor
            default_value: 1900
            description: |
              This factor is used to determine the ejection threshold for success rate outlier
              ejection. The ejection threshold is the difference between the mean success
              rate, and the product of this factor and the standard deviation of the mean
              success rate: mean - (stdev * success_rate_stdev_factor). This factor is divided
              by a thousand to get a double. That is, if the desired factor is 1.9, the
              runtime value should be 1900. Defaults to 1900.
      # 'port' is deprecated
      - !ruby/object:Api::Type::String
        name: 'portName'
        description: |
          Name of backend port. The same name should appear in the instance
          groups referenced by this service. Required when the load balancing
          scheme is EXTERNAL.
      - !ruby/object:Api::Type::Enum
        name: 'protocol'
        description: |
          The protocol this BackendService uses to communicate with backends.
          The default is HTTP. **NOTE**: HTTP2 is only valid for beta HTTP/2 load balancer
          types and may result in errors if used with the GA API.
        values:
          - :HTTP
          - :HTTPS
          - :HTTP2
          - :TCP
          - :SSL
          - :GRPC
      # TODO: make a ResourceRef to Security Policy
      - !ruby/object:Api::Type::String
        name: 'securityPolicy'
        description: |
          The security policy associated with this backend service.
      - !ruby/object:Api::Type::NestedObject
        name: 'securitySettings'
        description: |
          The security settings that apply to this backend service. This field is applicable to either
          a regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2, and
          load_balancing_scheme set to INTERNAL_MANAGED; or a global backend service with the
          load_balancing_scheme set to INTERNAL_SELF_MANAGED.
        properties:
          - !ruby/object:Api::Type::ResourceRef
            name: 'clientTlsPolicy'
            resource: 'Region' # TODO: 'Region' is incorrect and should be 'ClientTlsPolicy'
            imports: 'name'
            description: |
              ClientTlsPolicy is a resource that specifies how a client should authenticate
              connections to backends of a service. This resource itself does not affect
              configuration unless it is attached to a backend service resource.
            required: true
          - !ruby/object:Api::Type::Array
            name: 'subjectAltNames'
            description: |
              A list of alternate names to verify the subject identity in the certificate.
              If specified, the client will verify that the server certificate's subject
              alt name matches one of the specified values.
            required: true
            item_type: Api::Type::String
      - !ruby/object:Api::Type::Enum
        name: 'sessionAffinity'
        description: |
          Type of session affinity to use. The default is NONE. Session affinity is
          not applicable if the protocol is UDP.
        values:
          - :NONE
          - :CLIENT_IP
          - :CLIENT_IP_PORT_PROTO
          - :CLIENT_IP_PROTO
          - :GENERATED_COOKIE
          - :HEADER_FIELD
          - :HTTP_COOKIE
      - !ruby/object:Api::Type::Integer
        name: 'timeoutSec'
        description: |
          How many seconds to wait for the backend before considering it a
          failed request. Default is 30 seconds. Valid range is [1, 86400].
      - !ruby/object:Api::Type::NestedObject
        name: 'logConfig'
        description: |
          This field denotes the logging options for the load balancer traffic served by this backend service.
          If logging is enabled, logs will be exported to Stackdriver.
        properties:
          - !ruby/object:Api::Type::Boolean
            name: 'enable'
            at_least_one_of:
              - log_config.0.enable
              - log_config.0.sample_rate
            description: |
              Whether to enable logging for the load balancer traffic served by this backend service.
          - !ruby/object:Api::Type::Double
            name: 'sampleRate'
            at_least_one_of:
              - log_config.0.enable
              - log_config.0.sample_rate
            description: |
              This field can only be specified if logging is enabled for this backend service. The value of
              the field must be in [0, 1]. This configures the sampling rate of requests to the load balancer
              where 1.0 means all logged requests are reported and 0.0 means no logged requests are reported.
              The default value is 1.0.
  - !ruby/object:Api::Resource
    name: 'RegionBackendService'
    kind: 'compute#backendService'
    base_url: projects/{{project}}/regions/{{region}}/backendServices
    collection_url_key: 'items'
    has_self_link: true
    description: |
      A Region Backend Service defines a regionally-scoped group of virtual
      machines that will serve traffic for load balancing.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Internal TCP/UDP Load Balancing': 'https://cloud.google.com/compute/docs/load-balancing/internal/'
      api: 'https://cloud.google.com/compute/docs/reference/latest/regionBackendServices'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'name'
        description: |
          A reference to the region where the regional backend service resides.
        required: true
    properties:
      - !ruby/object:Api::Type::Integer
        name: 'affinityCookieTtlSec'
        description: |
          Lifetime of cookies in seconds if session_affinity is
          GENERATED_COOKIE. If set to 0, the cookie is non-persistent and lasts
          only until the end of the browser session (or equivalent). The
          maximum allowed value for TTL is one day.

          When the load balancing scheme is INTERNAL, this field is not used.
      - !ruby/object:Api::Type::Array
        name: 'backends'
        description: |
          The set of backends that serve this RegionBackendService.
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::Enum
              name: 'balancingMode'
              default_value: :CONNECTION
              values:
                - :UTILIZATION
                - :RATE
                - :CONNECTION
              description: |
                Specifies the balancing mode for this backend.

                See the [Backend Services Overview](https://cloud.google.com/load-balancing/docs/backend-service#balancing-mode)
                for an explanation of load balancing modes.
            - !ruby/object:Api::Type::Double
              name: 'capacityScaler'
              description: |
                A multiplier applied to the group's maximum servicing capacity
                (based on UTILIZATION, RATE or CONNECTION).

                ~>**NOTE**: This field cannot be set for
                INTERNAL region backend services (default loadBalancingScheme),
                but is required for non-INTERNAL backend service. The total
                capacity_scaler for all backends must be non-zero.

                A setting of 0 means the group is completely drained, offering
                0% of its available Capacity. Valid range is [0.0,1.0].
              send_empty_value: true
            - !ruby/object:Api::Type::String
              name: 'description'
              description: |
                An optional description of this resource.
                Provide this property when you create the resource.
            - !ruby/object:Api::Type::Boolean
              name: 'failover'
              description: |
                This field designates whether this is a failover backend. More
                than one failover backend can be configured for a given RegionBackendService.
            - !ruby/object:Api::Type::String
              name: 'group'
              required: true
              description: |
                The fully-qualified URL of an Instance Group or Network Endpoint
                Group resource. In case of instance group this defines the list
                of instances that serve traffic. Member virtual machine
                instances from each instance group must live in the same zone as
                the instance group itself. No two backends in a backend service
                are allowed to use same Instance Group resource.

                For Network Endpoint Groups this defines list of endpoints. All
                endpoints of Network Endpoint Group must be hosted on instances
                located in the same zone as the Network Endpoint Group.

                Backend services cannot mix Instance Group and
                Network Endpoint Group backends.

                When the `load_balancing_scheme` is INTERNAL, only instance groups
                are supported.

                Note that you must specify an Instance Group or Network Endpoint
                Group resource using the fully-qualified URL, rather than a
                partial URL.
            - !ruby/object:Api::Type::Integer
              name: 'maxConnections'
              description: |
                The max number of simultaneous connections for the group. Can
                be used with either CONNECTION or UTILIZATION balancing modes.
                Cannot be set for INTERNAL backend services.

                For CONNECTION mode, either maxConnections or one
                of maxConnectionsPerInstance or maxConnectionsPerEndpoint,
                as appropriate for group type, must be set.
            - !ruby/object:Api::Type::Integer
              name: 'maxConnectionsPerInstance'
              description: |
                The max number of simultaneous connections that a single
                backend instance can handle. Cannot be set for INTERNAL backend
                services.

                This is used to calculate the capacity of the group.
                Can be used in either CONNECTION or UTILIZATION balancing modes.
                For CONNECTION mode, either maxConnections or
                maxConnectionsPerInstance must be set.
            - !ruby/object:Api::Type::Integer
              name: 'maxConnectionsPerEndpoint'
              description: |
                The max number of simultaneous connections that a single backend
                network endpoint can handle. Cannot be set
                for INTERNAL backend services.

                This is used to calculate the capacity of the group. Can be
                used in either CONNECTION or UTILIZATION balancing modes. For
                CONNECTION mode, either maxConnections or
                maxConnectionsPerEndpoint must be set.
            - !ruby/object:Api::Type::Integer
              name: 'maxRate'
              description: |
                The max requests per second (RPS) of the group. Cannot be set
                for INTERNAL backend services.

                Can be used with either RATE or UTILIZATION balancing modes,
                but required if RATE mode. Either maxRate or one
                of maxRatePerInstance or maxRatePerEndpoint, as appropriate for
                group type, must be set.
            - !ruby/object:Api::Type::Double
              name: 'maxRatePerInstance'
              description: |
                The max requests per second (RPS) that a single backend
                instance can handle. This is used to calculate the capacity of
                the group. Can be used in either balancing mode. For RATE mode,
                either maxRate or maxRatePerInstance must be set. Cannot be set
                for INTERNAL backend services.
            - !ruby/object:Api::Type::Double
              name: 'maxRatePerEndpoint'
              description: |
                The max requests per second (RPS) that a single backend network
                endpoint can handle. This is used to calculate the capacity of
                the group. Can be used in either balancing mode. For RATE mode,
                either maxRate or maxRatePerEndpoint must be set. Cannot be set
                for INTERNAL backend services.
            - !ruby/object:Api::Type::Double
              name: 'maxUtilization'
              description: |
                Used when balancingMode is UTILIZATION. This ratio defines the
                CPU utilization target for the group. Valid range is [0.0, 1.0].
                Cannot be set for INTERNAL backend services.
      - !ruby/object:Api::Type::NestedObject
        name: 'circuitBreakers'
        description: |
          Settings controlling the volume of connections to a backend service. This field
          is applicable only when the `load_balancing_scheme` is set to INTERNAL_MANAGED
          and the `protocol` is set to HTTP, HTTPS, or HTTP2.
        properties:
          - !ruby/object:Api::Type::NestedObject
            name: 'connectTimeout'
            min_version: beta
            at_least_one_of:
              - circuit_breakers.0.connect_timeout
              - circuit_breakers.0.max_requests_per_connection
              - circuit_breakers.0.max_connections
              - circuit_breakers.0.max_pending_requests
              - circuit_breakers.0.max_requests
              - circuit_breakers.0.max_retries
            description: |
              The timeout for new network connections to hosts.
            properties:
              - !ruby/object:Api::Type::Integer
                name: 'seconds'
                required: true
                description: |
                  Span of time at a resolution of a second.
                  Must be from 0 to 315,576,000,000 inclusive.
              - !ruby/object:Api::Type::Integer
                name: 'nanos'
                description: |
                  Span of time that's a fraction of a second at nanosecond
                  resolution. Durations less than one second are represented
                  with a 0 seconds field and a positive nanos field. Must
                  be from 0 to 999,999,999 inclusive.
          - !ruby/object:Api::Type::Integer
            name: 'maxRequestsPerConnection'
            at_least_one_of:
              - circuit_breakers.0.connect_timeout
              - circuit_breakers.0.max_requests_per_connection
              - circuit_breakers.0.max_connections
              - circuit_breakers.0.max_pending_requests
              - circuit_breakers.0.max_requests
              - circuit_breakers.0.max_retries
            description: |
              Maximum requests for a single backend connection. This parameter
              is respected by both the HTTP/1.1 and HTTP/2 implementations. If
              not specified, there is no limit. Setting this parameter to 1
              will effectively disable keep alive.
          - !ruby/object:Api::Type::Integer
            name: 'maxConnections'
            default_value: 1024
            at_least_one_of:
              - circuit_breakers.0.connect_timeout
              - circuit_breakers.0.max_requests_per_connection
              - circuit_breakers.0.max_connections
              - circuit_breakers.0.max_pending_requests
              - circuit_breakers.0.max_requests
              - circuit_breakers.0.max_retries
            description: |
              The maximum number of connections to the backend cluster.
              Defaults to 1024.
          - !ruby/object:Api::Type::Integer
            name: 'maxPendingRequests'
            default_value: 1024
            at_least_one_of:
              - circuit_breakers.0.connect_timeout
              - circuit_breakers.0.max_requests_per_connection
              - circuit_breakers.0.max_connections
              - circuit_breakers.0.max_pending_requests
              - circuit_breakers.0.max_requests
              - circuit_breakers.0.max_retries
            description: |
              The maximum number of pending requests to the backend cluster.
              Defaults to 1024.
          - !ruby/object:Api::Type::Integer
            name: 'maxRequests'
            default_value: 1024
            at_least_one_of:
              - circuit_breakers.0.connect_timeout
              - circuit_breakers.0.max_requests_per_connection
              - circuit_breakers.0.max_connections
              - circuit_breakers.0.max_pending_requests
              - circuit_breakers.0.max_requests
              - circuit_breakers.0.max_retries
            description: |
              The maximum number of parallel requests to the backend cluster.
              Defaults to 1024.
          - !ruby/object:Api::Type::Integer
            name: 'maxRetries'
            default_value: 3
            at_least_one_of:
              - circuit_breakers.0.connect_timeout
              - circuit_breakers.0.max_requests_per_connection
              - circuit_breakers.0.max_connections
              - circuit_breakers.0.max_pending_requests
              - circuit_breakers.0.max_requests
              - circuit_breakers.0.max_retries
            description: |
              The maximum number of parallel retries to the backend cluster.
              Defaults to 3.
      - !ruby/object:Api::Type::NestedObject
        name: 'consistentHash'
        description: |
          Consistent Hash-based load balancing can be used to provide soft session
          affinity based on HTTP headers, cookies or other properties. This load balancing
          policy is applicable only for HTTP connections. The affinity to a particular
          destination host will be lost when one or more hosts are added/removed from the
          destination service. This field specifies parameters that control consistent
          hashing.
          This field only applies when all of the following are true -
            * `load_balancing_scheme` is set to INTERNAL_MANAGED
            * `protocol` is set to HTTP, HTTPS, or HTTP2
            * `locality_lb_policy` is set to MAGLEV or RING_HASH
        properties:
          - !ruby/object:Api::Type::NestedObject
            name: 'httpCookie'
            at_least_one_of:
              - consistent_hash.0.http_cookie
              - consistent_hash.0.http_header_name
              - consistent_hash.0.minimum_ring_size
            description: |
              Hash is based on HTTP Cookie. This field describes a HTTP cookie
              that will be used as the hash key for the consistent hash load
              balancer. If the cookie is not present, it will be generated.
              This field is applicable if the sessionAffinity is set to HTTP_COOKIE.
            properties:
              - !ruby/object:Api::Type::NestedObject
                name: 'ttl'
                at_least_one_of:
                  - consistent_hash.0.http_cookie.0.ttl
                  - consistent_hash.0.http_cookie.0.name
                  - consistent_hash.0.http_cookie.0.path
                description: |
                  Lifetime of the cookie.
                properties:
                  - !ruby/object:Api::Type::Integer
                    name: 'seconds'
                    required: true
                    description: |
                      Span of time at a resolution of a second.
                      Must be from 0 to 315,576,000,000 inclusive.
                  - !ruby/object:Api::Type::Integer
                    name: 'nanos'
                    description: |
                      Span of time that's a fraction of a second at nanosecond
                      resolution. Durations less than one second are represented
                      with a 0 seconds field and a positive nanos field. Must
                      be from 0 to 999,999,999 inclusive.
              - !ruby/object:Api::Type::String
                name: 'name'
                at_least_one_of:
                  - consistent_hash.0.http_cookie.0.ttl
                  - consistent_hash.0.http_cookie.0.name
                  - consistent_hash.0.http_cookie.0.path
                description: |
                  Name of the cookie.
              - !ruby/object:Api::Type::String
                name: 'path'
                at_least_one_of:
                  - consistent_hash.0.http_cookie.0.ttl
                  - consistent_hash.0.http_cookie.0.name
                  - consistent_hash.0.http_cookie.0.path
                description: |
                  Path to set for the cookie.
          - !ruby/object:Api::Type::String
            name: 'httpHeaderName'
            at_least_one_of:
              - consistent_hash.0.http_cookie
              - consistent_hash.0.http_header_name
              - consistent_hash.0.minimum_ring_size
            description: |
              The hash based on the value of the specified header field.
              This field is applicable if the sessionAffinity is set to HEADER_FIELD.
          - !ruby/object:Api::Type::Integer
            name: 'minimumRingSize'
            default_value: 1024
            at_least_one_of:
              - consistent_hash.0.http_cookie
              - consistent_hash.0.http_header_name
              - consistent_hash.0.minimum_ring_size
            description: |
              The minimum number of virtual nodes to use for the hash ring.
              Larger ring sizes result in more granular load
              distributions. If the number of hosts in the load balancing pool
              is larger than the ring size, each host will be assigned a single
              virtual node.
              Defaults to 1024.
      - !ruby/object:Api::Type::NestedObject
        name: 'cdnPolicy'
        description: 'Cloud CDN configuration for this BackendService.'
        properties:
          - !ruby/object:Api::Type::NestedObject
            name: 'cacheKeyPolicy'
            description: 'The CacheKeyPolicy for this CdnPolicy.'
            at_least_one_of:
              - cdn_policy.0.cache_key_policy
              - cdn_policy.0.signed_url_cache_max_age_sec
            properties:
              - !ruby/object:Api::Type::Boolean
                name: 'includeHost'
                send_empty_value: true
                at_least_one_of:
                  - cdn_policy.0.cache_key_policy.0.include_host
                  - cdn_policy.0.cache_key_policy.0.include_protocol
                  - cdn_policy.0.cache_key_policy.0.include_query_string
                  - cdn_policy.0.cache_key_policy.0.query_string_blacklist
                  - cdn_policy.0.cache_key_policy.0.query_string_whitelist
                  - cdn_policy.0.cache_key_policy.0.include_named_cookies
                description: |
                  If true requests to different hosts will be cached separately.
              - !ruby/object:Api::Type::Boolean
                name: 'includeProtocol'
                send_empty_value: true
                at_least_one_of:
                  - cdn_policy.0.cache_key_policy.0.include_host
                  - cdn_policy.0.cache_key_policy.0.include_protocol
                  - cdn_policy.0.cache_key_policy.0.include_query_string
                  - cdn_policy.0.cache_key_policy.0.query_string_blacklist
                  - cdn_policy.0.cache_key_policy.0.query_string_whitelist
                  - cdn_policy.0.cache_key_policy.0.include_named_cookies
                description: |
                  If true, http and https requests will be cached separately.
              - !ruby/object:Api::Type::Boolean
                name: 'includeQueryString'
                send_empty_value: true
                at_least_one_of:
                  - cdn_policy.0.cache_key_policy.0.include_host
                  - cdn_policy.0.cache_key_policy.0.include_protocol
                  - cdn_policy.0.cache_key_policy.0.include_query_string
                  - cdn_policy.0.cache_key_policy.0.query_string_blacklist
                  - cdn_policy.0.cache_key_policy.0.query_string_whitelist
                  - cdn_policy.0.cache_key_policy.0.include_named_cookies
                description: |
                  If true, include query string parameters in the cache key
                  according to query_string_whitelist and
                  query_string_blacklist. If neither is set, the entire query
                  string will be included.

                  If false, the query string will be excluded from the cache
                  key entirely.
              - !ruby/object:Api::Type::Array
                name: 'queryStringBlacklist'
                send_empty_value: true
                at_least_one_of:
                  - cdn_policy.0.cache_key_policy.0.include_host
                  - cdn_policy.0.cache_key_policy.0.include_protocol
                  - cdn_policy.0.cache_key_policy.0.include_query_string
                  - cdn_policy.0.cache_key_policy.0.query_string_blacklist
                  - cdn_policy.0.cache_key_policy.0.query_string_whitelist
                  - cdn_policy.0.cache_key_policy.0.include_named_cookies
                description: |
                  Names of query string parameters to exclude in cache keys.

                  All other parameters will be included. Either specify
                  query_string_whitelist or query_string_blacklist, not both.
                  '&' and '=' will be percent encoded and not treated as
                  delimiters.
                item_type: Api::Type::String
              - !ruby/object:Api::Type::Array
                send_empty_value: true
                name: 'queryStringWhitelist'
                at_least_one_of:
                  - cdn_policy.0.cache_key_policy.0.include_host
                  - cdn_policy.0.cache_key_policy.0.include_protocol
                  - cdn_policy.0.cache_key_policy.0.include_query_string
                  - cdn_policy.0.cache_key_policy.0.query_string_blacklist
                  - cdn_policy.0.cache_key_policy.0.query_string_whitelist
                  - cdn_policy.0.cache_key_policy.0.include_named_cookies
                description: |
                  Names of query string parameters to include in cache keys.

                  All other parameters will be excluded. Either specify
                  query_string_whitelist or query_string_blacklist, not both.
                  '&' and '=' will be percent encoded and not treated as
                  delimiters.
                item_type: Api::Type::String
              - !ruby/object:Api::Type::Array
                name: 'includeNamedCookies'
                send_empty_value: true
                at_least_one_of:
                  - cdn_policy.0.cache_key_policy.0.include_host
                  - cdn_policy.0.cache_key_policy.0.include_protocol
                  - cdn_policy.0.cache_key_policy.0.include_query_string
                  - cdn_policy.0.cache_key_policy.0.query_string_blacklist
                  - cdn_policy.0.cache_key_policy.0.query_string_whitelist
                  - cdn_policy.0.cache_key_policy.0.include_named_cookies
                description: |
                  Names of cookies to include in cache keys.
                item_type: Api::Type::String
          - !ruby/object:Api::Type::Integer
            name: 'signedUrlCacheMaxAgeSec'
            default_value: 3600
            at_least_one_of:
              - cdn_policy.0.cache_key_policy
              - cdn_policy.0.signed_url_cache_max_age_sec
            description: |
              Maximum number of seconds the response to a signed URL request
              will be considered fresh, defaults to 1hr (3600s). After this
              time period, the response will be revalidated before
              being served.

              When serving responses to signed URL requests, Cloud CDN will
              internally behave as though all responses from this backend had a
              "Cache-Control: public, max-age=[TTL]" header, regardless of any
              existing Cache-Control header. The actual headers served in
              responses will not be altered.
          - !ruby/object:Api::Type::Integer
            name: 'defaultTtl'
            description: |
              Specifies the default TTL for cached content served by this origin for responses
              that do not have an existing valid TTL (max-age or s-max-age).
          - !ruby/object:Api::Type::Integer
            name: 'maxTtl'
            description: |
              Specifies the maximum allowed TTL for cached content served by this origin.
          - !ruby/object:Api::Type::Integer
            name: 'clientTtl'
            description: |
              Specifies the maximum allowed TTL for cached content served by this origin.
          - !ruby/object:Api::Type::Boolean
            name: 'negativeCaching'
            send_empty_value: true
            description: |
              Negative caching allows per-status code TTLs to be set, in order to apply fine-grained caching for common errors or redirects.
          - !ruby/object:Api::Type::Array
            name: 'negativeCachingPolicy'
            description: |
              Sets a cache TTL for the specified HTTP status code. negativeCaching must be enabled to configure negativeCachingPolicy.
              Omitting the policy and leaving negativeCaching enabled will use Cloud CDN's default cache TTLs.
            item_type: !ruby/object:Api::Type::NestedObject
              properties:
                - !ruby/object:Api::Type::Integer
                  name: 'code'
                  description: |
                    The HTTP status code to define a TTL against. Only HTTP status codes 300, 301, 308, 404, 405, 410, 421, 451 and 501
                    can be specified as values, and you cannot specify a status code more than once.
                - !ruby/object:Api::Type::Integer
                  name: 'ttl'
                  min_version: beta
                  description: |
                    The TTL (in seconds) for which to cache responses with the corresponding status code. The maximum allowed value is 1800s
                    (30 minutes), noting that infrequently accessed objects may be evicted from the cache before the defined TTL.
          - !ruby/object:Api::Type::Enum
            name: 'cacheMode'
            description: |
              Specifies the cache setting for all responses from this backend.
              The possible values are: USE_ORIGIN_HEADERS, FORCE_CACHE_ALL and CACHE_ALL_STATIC
            values:
              - :USE_ORIGIN_HEADERS
              - :FORCE_CACHE_ALL
              - :CACHE_ALL_STATIC
          - !ruby/object:Api::Type::Integer
            name: 'serveWhileStale'
            send_empty_value: true
            description: |
              Serve existing content from the cache (if available) when revalidating content with the origin, or when an error is encountered when refreshing the cache.

      - !ruby/object:Api::Type::NestedObject
        name: 'connectionDraining'
        description: |
          Settings for connection draining
        properties:
          - !ruby/object:Api::Type::Integer
            name: 'drainingTimeoutSec'
            default_value: 300
            description: |
              Time for which instance will be drained (not accept new
              connections, but still work to finish started).
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: |
          Creation timestamp in RFC3339 text format.
        output: true
      # customRequestHeaders only supported for EXTERNAL load balancing
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource.
      - !ruby/object:Api::Type::NestedObject
        name: 'failoverPolicy'
        description: |
          Policy for failovers.
        properties:
          - !ruby/object:Api::Type::Boolean
            name: 'disableConnectionDrainOnFailover'
            at_least_one_of:
              - failover_policy.0.disable_connection_drain_on_failover
              - failover_policy.0.drop_traffic_if_unhealthy
              - failover_policy.0.failover_ratio
            description: |
              On failover or failback, this field indicates whether connection drain
              will be honored. Setting this to true has the following effect: connections
              to the old active pool are not drained. Connections to the new active pool
              use the timeout of 10 min (currently fixed). Setting to false has the
              following effect: both old and new connections will have a drain timeout
              of 10 min.
              This can be set to true only if the protocol is TCP.
              The default is false.
          - !ruby/object:Api::Type::Boolean
            name: 'dropTrafficIfUnhealthy'
            at_least_one_of:
              - failover_policy.0.disable_connection_drain_on_failover
              - failover_policy.0.drop_traffic_if_unhealthy
              - failover_policy.0.failover_ratio
            description: |
              This option is used only when no healthy VMs are detected in the primary
              and backup instance groups. When set to true, traffic is dropped. When
              set to false, new connections are sent across all VMs in the primary group.
              The default is false.
          - !ruby/object:Api::Type::Double
            name: 'failoverRatio'
            at_least_one_of:
              - failover_policy.0.disable_connection_drain_on_failover
              - failover_policy.0.drop_traffic_if_unhealthy
              - failover_policy.0.failover_ratio
            description: |
              The value of the field must be in [0, 1]. If the ratio of the healthy
              VMs in the primary backend is at or below this number, traffic arriving
              at the load-balanced IP will be directed to the failover backend.
              In case where 'failoverRatio' is not set or all the VMs in the backup
              backend are unhealthy, the traffic will be directed back to the primary
              backend in the "force" mode, where traffic will be spread to the healthy
              VMs with the best effort, or to all VMs when no VM is healthy.
              This field is only used with l4 load balancing.
      - !ruby/object:Api::Type::Boolean
        name: 'enableCDN'
        description: |
          If true, enable Cloud CDN for this RegionBackendService.
      - !ruby/object:Api::Type::Fingerprint
        name: 'fingerprint'
        output: true
        description: |
          Fingerprint of this resource. A hash of the contents stored in this
          object. This field is used in optimistic locking.
      - !ruby/object:Api::Type::Array
        name: 'healthChecks'
        item_type: Api::Type::String
        min_size: 1
        max_size: 1
        description: |
           The set of URLs to HealthCheck resources for health checking
           this RegionBackendService. Currently at most one health
           check can be specified.

           A health check must be specified unless the backend service uses an internet
           or serverless NEG as a backend.
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::NestedObject
        name: 'iap'
        description: Settings for enabling Cloud Identity Aware Proxy
        properties:
          - !ruby/object:Api::Type::Boolean
            name: 'enabled'
            description: Enables IAP.
          - !ruby/object:Api::Type::String
            name: 'oauth2ClientId'
            required: true
            description: |
              OAuth2 Client ID for IAP
          - !ruby/object:Api::Type::String
            name: 'oauth2ClientSecret'
            required: true
            description: |
              OAuth2 Client Secret for IAP
          - !ruby/object:Api::Type::String
            name: 'oauth2ClientSecretSha256'
            output: true
            description: |
              OAuth2 Client Secret SHA-256 for IAP
      - !ruby/object:Api::Type::Enum
        name: 'loadBalancingScheme'
        input: true
        description: |
          Indicates what kind of load balancing this regional backend service
          will be used for. A backend service created for one type of load
          balancing cannot be used with the other(s). For more information, refer to
          [Choosing a load balancer](https://cloud.google.com/load-balancing/docs/backend-service).
        default_value: :INTERNAL
        values:
          - :EXTERNAL
          - :EXTERNAL_MANAGED
          - :INTERNAL
          - :INTERNAL_MANAGED
      - !ruby/object:Api::Type::Enum
        name: 'localityLbPolicy'
        values:
          - :ROUND_ROBIN
          - :LEAST_REQUEST
          - :RING_HASH
          - :RANDOM
          - :ORIGINAL_DESTINATION
          - :MAGLEV
        description: |
          The load balancing algorithm used within the scope of the locality.
          The possible values are:

          * `ROUND_ROBIN`: This is a simple policy in which each healthy backend
                           is selected in round robin order.

          * `LEAST_REQUEST`: An O(1) algorithm which selects two random healthy
                             hosts and picks the host which has fewer active requests.

          * `RING_HASH`: The ring/modulo hash load balancer implements consistent
                         hashing to backends. The algorithm has the property that the
                         addition/removal of a host from a set of N hosts only affects
                         1/N of the requests.

          * `RANDOM`: The load balancer selects a random healthy host.

          * `ORIGINAL_DESTINATION`: Backend host is selected based on the client
                                    connection metadata, i.e., connections are opened
                                    to the same address as the destination address of
                                    the incoming connection before the connection
                                    was redirected to the load balancer.

          * `MAGLEV`: used as a drop in replacement for the ring hash load balancer.
                      Maglev is not as stable as ring hash but has faster table lookup
                      build times and host selection times. For more information about
                      Maglev, refer to https://ai.google/research/pubs/pub44824


          This field is applicable to either:

          * A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
            and loadBalancingScheme set to INTERNAL_MANAGED.
          * A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.


          If session_affinity is not NONE, and this field is not set to MAGLEV or RING_HASH,
          session affinity settings will not take effect.

          Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
          by a URL map that is bound to target gRPC proxy that has validate_for_proxyless
          field set to true.
      - !ruby/object:Api::Type::String
        name: 'name'
        required: true
        input: true
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
      - !ruby/object:Api::Type::NestedObject
        name: 'outlierDetection'
        description: |
          Settings controlling eviction of unhealthy hosts from the load balancing pool.
          This field is applicable only when the `load_balancing_scheme` is set
          to INTERNAL_MANAGED and the `protocol` is set to HTTP, HTTPS, or HTTP2.
        properties:
          - !ruby/object:Api::Type::NestedObject
            name: 'baseEjectionTime'
            at_least_one_of:
              - outlier_detection.0.base_ejection_time
              - outlier_detection.0.consecutive_errors
              - outlier_detection.0.consecutive_gateway_failure
              - outlier_detection.0.enforcing_consecutive_errors
              - outlier_detection.0.enforcing_consecutive_gateway_failure
              - outlier_detection.0.enforcing_success_rate
              - outlier_detection.0.interval
              - outlier_detection.0.max_ejection_percent
              - outlier_detection.0.success_rate_minimum_hosts
              - outlier_detection.0.success_rate_request_volume
              - outlier_detection.0.success_rate_stdev_factor
            description: |
              The base time that a host is ejected for. The real time is equal to the base
              time multiplied by the number of times the host has been ejected. Defaults to
              30000ms or 30s.
            properties:
              - !ruby/object:Api::Type::Integer
                name: 'seconds'
                required: true
                description: |
                  Span of time at a resolution of a second. Must be from 0 to 315,576,000,000
                  inclusive.
              - !ruby/object:Api::Type::Integer
                name: 'nanos'
                description: |
                  Span of time that's a fraction of a second at nanosecond resolution. Durations
                  less than one second are represented with a 0 `seconds` field and a positive
                  `nanos` field. Must be from 0 to 999,999,999 inclusive.
          - !ruby/object:Api::Type::Integer
            name: 'consecutiveErrors'
            default_value: 5
            at_least_one_of:
              - outlier_detection.0.base_ejection_time
              - outlier_detection.0.consecutive_errors
              - outlier_detection.0.consecutive_gateway_failure
              - outlier_detection.0.enforcing_consecutive_errors
              - outlier_detection.0.enforcing_consecutive_gateway_failure
              - outlier_detection.0.enforcing_success_rate
              - outlier_detection.0.interval
              - outlier_detection.0.max_ejection_percent
              - outlier_detection.0.success_rate_minimum_hosts
              - outlier_detection.0.success_rate_request_volume
              - outlier_detection.0.success_rate_stdev_factor
            description: |
              Number of errors before a host is ejected from the connection pool. When the
              backend host is accessed over HTTP, a 5xx return code qualifies as an error.
              Defaults to 5.
          - !ruby/object:Api::Type::Integer
            name: 'consecutiveGatewayFailure'
            default_value: 5
            at_least_one_of:
              - outlier_detection.0.base_ejection_time
              - outlier_detection.0.consecutive_errors
              - outlier_detection.0.consecutive_gateway_failure
              - outlier_detection.0.enforcing_consecutive_errors
              - outlier_detection.0.enforcing_consecutive_gateway_failure
              - outlier_detection.0.enforcing_success_rate
              - outlier_detection.0.interval
              - outlier_detection.0.max_ejection_percent
              - outlier_detection.0.success_rate_minimum_hosts
              - outlier_detection.0.success_rate_request_volume
              - outlier_detection.0.success_rate_stdev_factor
            description: |
              The number of consecutive gateway failures (502, 503, 504 status or connection
              errors that are mapped to one of those status codes) before a consecutive
              gateway failure ejection occurs. Defaults to 5.
          - !ruby/object:Api::Type::Integer
            name: 'enforcingConsecutiveErrors'
            default_value: 100
            at_least_one_of:
              - outlier_detection.0.base_ejection_time
              - outlier_detection.0.consecutive_errors
              - outlier_detection.0.consecutive_gateway_failure
              - outlier_detection.0.enforcing_consecutive_errors
              - outlier_detection.0.enforcing_consecutive_gateway_failure
              - outlier_detection.0.enforcing_success_rate
              - outlier_detection.0.interval
              - outlier_detection.0.max_ejection_percent
              - outlier_detection.0.success_rate_minimum_hosts
              - outlier_detection.0.success_rate_request_volume
              - outlier_detection.0.success_rate_stdev_factor
            description: |
              The percentage chance that a host will be actually ejected when an outlier
              status is detected through consecutive 5xx. This setting can be used to disable
              ejection or to ramp it up slowly. Defaults to 100.
          - !ruby/object:Api::Type::Integer
            name: 'enforcingConsecutiveGatewayFailure'
            default_value: 0
            at_least_one_of:
              - outlier_detection.0.base_ejection_time
              - outlier_detection.0.consecutive_errors
              - outlier_detection.0.consecutive_gateway_failure
              - outlier_detection.0.enforcing_consecutive_errors
              - outlier_detection.0.enforcing_consecutive_gateway_failure
              - outlier_detection.0.enforcing_success_rate
              - outlier_detection.0.interval
              - outlier_detection.0.max_ejection_percent
              - outlier_detection.0.success_rate_minimum_hosts
              - outlier_detection.0.success_rate_request_volume
              - outlier_detection.0.success_rate_stdev_factor
            description: |
              The percentage chance that a host will be actually ejected when an outlier
              status is detected through consecutive gateway failures. This setting can be
              used to disable ejection or to ramp it up slowly. Defaults to 0.
          - !ruby/object:Api::Type::Integer
            name: 'enforcingSuccessRate'
            default_value: 100
            at_least_one_of:
              - outlier_detection.0.base_ejection_time
              - outlier_detection.0.consecutive_errors
              - outlier_detection.0.consecutive_gateway_failure
              - outlier_detection.0.enforcing_consecutive_errors
              - outlier_detection.0.enforcing_consecutive_gateway_failure
              - outlier_detection.0.enforcing_success_rate
              - outlier_detection.0.interval
              - outlier_detection.0.max_ejection_percent
              - outlier_detection.0.success_rate_minimum_hosts
              - outlier_detection.0.success_rate_request_volume
              - outlier_detection.0.success_rate_stdev_factor
            description: |
              The percentage chance that a host will be actually ejected when an outlier
              status is detected through success rate statistics. This setting can be used to
              disable ejection or to ramp it up slowly. Defaults to 100.
          - !ruby/object:Api::Type::NestedObject
            name: 'interval'
            at_least_one_of:
              - outlier_detection.0.base_ejection_time
              - outlier_detection.0.consecutive_errors
              - outlier_detection.0.consecutive_gateway_failure
              - outlier_detection.0.enforcing_consecutive_errors
              - outlier_detection.0.enforcing_consecutive_gateway_failure
              - outlier_detection.0.enforcing_success_rate
              - outlier_detection.0.interval
              - outlier_detection.0.max_ejection_percent
              - outlier_detection.0.success_rate_minimum_hosts
              - outlier_detection.0.success_rate_request_volume
              - outlier_detection.0.success_rate_stdev_factor
            description: |
              Time interval between ejection sweep analysis. This can result in both new
              ejections as well as hosts being returned to service. Defaults to 10 seconds.
            properties:
              - !ruby/object:Api::Type::Integer
                name: 'seconds'
                required: true
                description: |
                  Span of time at a resolution of a second. Must be from 0 to 315,576,000,000
                  inclusive.
              - !ruby/object:Api::Type::Integer
                name: 'nanos'
                description: |
                  Span of time that's a fraction of a second at nanosecond resolution. Durations
                  less than one second are represented with a 0 `seconds` field and a positive
                  `nanos` field. Must be from 0 to 999,999,999 inclusive.
          - !ruby/object:Api::Type::Integer
            name: 'maxEjectionPercent'
            default_value: 10
            at_least_one_of:
              - outlier_detection.0.base_ejection_time
              - outlier_detection.0.consecutive_errors
              - outlier_detection.0.consecutive_gateway_failure
              - outlier_detection.0.enforcing_consecutive_errors
              - outlier_detection.0.enforcing_consecutive_gateway_failure
              - outlier_detection.0.enforcing_success_rate
              - outlier_detection.0.interval
              - outlier_detection.0.max_ejection_percent
              - outlier_detection.0.success_rate_minimum_hosts
              - outlier_detection.0.success_rate_request_volume
              - outlier_detection.0.success_rate_stdev_factor
            description: |
              Maximum percentage of hosts in the load balancing pool for the backend service
              that can be ejected. Defaults to 10%.
          - !ruby/object:Api::Type::Integer
            name: 'successRateMinimumHosts'
            default_value: 5
            at_least_one_of:
              - outlier_detection.0.base_ejection_time
              - outlier_detection.0.consecutive_errors
              - outlier_detection.0.consecutive_gateway_failure
              - outlier_detection.0.enforcing_consecutive_errors
              - outlier_detection.0.enforcing_consecutive_gateway_failure
              - outlier_detection.0.enforcing_success_rate
              - outlier_detection.0.interval
              - outlier_detection.0.max_ejection_percent
              - outlier_detection.0.success_rate_minimum_hosts
              - outlier_detection.0.success_rate_request_volume
              - outlier_detection.0.success_rate_stdev_factor
            description: |
              The number of hosts in a cluster that must have enough request volume to detect
              success rate outliers. If the number of hosts is less than this setting, outlier
              detection via success rate statistics is not performed for any host in the
              cluster. Defaults to 5.
          - !ruby/object:Api::Type::Integer
            name: 'successRateRequestVolume'
            default_value: 100
            at_least_one_of:
              - outlier_detection.0.base_ejection_time
              - outlier_detection.0.consecutive_errors
              - outlier_detection.0.consecutive_gateway_failure
              - outlier_detection.0.enforcing_consecutive_errors
              - outlier_detection.0.enforcing_consecutive_gateway_failure
              - outlier_detection.0.enforcing_success_rate
              - outlier_detection.0.interval
              - outlier_detection.0.max_ejection_percent
              - outlier_detection.0.success_rate_minimum_hosts
              - outlier_detection.0.success_rate_request_volume
              - outlier_detection.0.success_rate_stdev_factor
            description: |
              The minimum number of total requests that must be collected in one interval (as
              defined by the interval duration above) to include this host in success rate
              based outlier detection. If the volume is lower than this setting, outlier
              detection via success rate statistics is not performed for that host. Defaults
              to 100.
          - !ruby/object:Api::Type::Integer
            name: 'successRateStdevFactor'
            default_value: 1900
            at_least_one_of:
              - outlier_detection.0.base_ejection_time
              - outlier_detection.0.consecutive_errors
              - outlier_detection.0.consecutive_gateway_failure
              - outlier_detection.0.enforcing_consecutive_errors
              - outlier_detection.0.enforcing_consecutive_gateway_failure
              - outlier_detection.0.enforcing_success_rate
              - outlier_detection.0.interval
              - outlier_detection.0.max_ejection_percent
              - outlier_detection.0.success_rate_minimum_hosts
              - outlier_detection.0.success_rate_request_volume
              - outlier_detection.0.success_rate_stdev_factor
            description: |
              This factor is used to determine the ejection threshold for success rate outlier
              ejection. The ejection threshold is the difference between the mean success
              rate, and the product of this factor and the standard deviation of the mean
              success rate: mean - (stdev * success_rate_stdev_factor). This factor is divided
              by a thousand to get a double. That is, if the desired factor is 1.9, the
              runtime value should be 1900. Defaults to 1900.
      - !ruby/object:Api::Type::String
        name: 'portName'
        description: |
          A named port on a backend instance group representing the port for
          communication to the backend VMs in that group. Required when the
          loadBalancingScheme is EXTERNAL, EXTERNAL_MANAGED, INTERNAL_MANAGED, or INTERNAL_SELF_MANAGED
          and the backends are instance groups. The named port must be defined on each
          backend instance group. This parameter has no meaning if the backends are NEGs. API sets a
          default of "http" if not given.
          Must be omitted when the loadBalancingScheme is INTERNAL (Internal TCP/UDP Load Balancing).
      - !ruby/object:Api::Type::Enum
        name: 'protocol'
        description: |
          The protocol this RegionBackendService uses to communicate with backends.
          The default is HTTP. **NOTE**: HTTP2 is only valid for beta HTTP/2 load balancer
          types and may result in errors if used with the GA API.
        # This is removed to avoid breaking terraform, as default values cannot be
        # unspecified. Providers should include this as needed via overrides
        # default_value: :TCP
        values:
          - :HTTP
          - :HTTPS
          - :HTTP2
          - :SSL
          - :TCP
          - :UDP
          - :GRPC
          - :UNSPECIFIED
      - !ruby/object:Api::Type::Enum
        name: 'sessionAffinity'
        description: |
          Type of session affinity to use. The default is NONE. Session affinity is
          not applicable if the protocol is UDP.
        values:
          - :NONE
          - :CLIENT_IP
          - :CLIENT_IP_PORT_PROTO
          - :CLIENT_IP_PROTO
          - :GENERATED_COOKIE
          - :HEADER_FIELD
          - :HTTP_COOKIE
          - :CLIENT_IP_NO_DESTINATION
      - !ruby/object:Api::Type::NestedObject
        name: 'connectionTrackingPolicy'
        min_version: 'beta'
        description: |
          Connection Tracking configuration for this BackendService.
          This is available only for Layer 4 Internal Load Balancing and
          Network Load Balancing.
        properties:
          - !ruby/object:Api::Type::Integer
            name: 'idleTimeoutSec'
            description: |
              Specifies how long to keep a Connection Tracking entry while there is
              no matching traffic (in seconds).

              For L4 ILB the minimum(default) is 10 minutes and maximum is 16 hours.

              For NLB the minimum(default) is 60 seconds and the maximum is 16 hours.
          - !ruby/object:Api::Type::Enum
            name: 'trackingMode'
            description: |
              Specifies the key used for connection tracking. There are two options:
              `PER_CONNECTION`: The Connection Tracking is performed as per the
              Connection Key (default Hash Method) for the specific protocol.

              `PER_SESSION`: The Connection Tracking is performed as per the
              configured Session Affinity. It matches the configured Session Affinity.
            default_value: :PER_CONNECTION
            values:
              - :PER_CONNECTION
              - :PER_SESSION
          - !ruby/object:Api::Type::Enum
            name: 'connectionPersistenceOnUnhealthyBackends'
            description: |
              Specifies connection persistence when backends are unhealthy.

              If set to `DEFAULT_FOR_PROTOCOL`, the existing connections persist on
              unhealthy backends only for connection-oriented protocols (TCP and SCTP)
              and only if the Tracking Mode is PER_CONNECTION (default tracking mode)
              or the Session Affinity is configured for 5-tuple. They do not persist
              for UDP.

              If set to `NEVER_PERSIST`, after a backend becomes unhealthy, the existing
              connections on the unhealthy backend are never persisted on the unhealthy
              backend. They are always diverted to newly selected healthy backends
              (unless all backends are unhealthy).

              If set to `ALWAYS_PERSIST`, existing connections always persist on
              unhealthy backends regardless of protocol and session affinity. It is
              generally not recommended to use this mode overriding the default.
            default_value: :DEFAULT_FOR_PROTOCOL
            values:
              - :DEFAULT_FOR_PROTOCOL
              - :NEVER_PERSIST
              - :ALWAYS_PERSIST
      - !ruby/object:Api::Type::Integer
        name: 'timeoutSec'
        description: |
          How many seconds to wait for the backend before considering it a
          failed request. Default is 30 seconds. Valid range is [1, 86400].
      - !ruby/object:Api::Type::NestedObject
        name: 'logConfig'
        description: |
          This field denotes the logging options for the load balancer traffic served by this backend service.
          If logging is enabled, logs will be exported to Stackdriver.
        properties:
          - !ruby/object:Api::Type::Boolean
            name: 'enable'
            at_least_one_of:
              - log_config.0.enable
              - log_config.0.sample_rate
            description: |
              Whether to enable logging for the load balancer traffic served by this backend service.
          - !ruby/object:Api::Type::Double
            name: 'sampleRate'
            at_least_one_of:
              - log_config.0.enable
              - log_config.0.sample_rate
            description: |
              This field can only be specified if logging is enabled for this backend service. The value of
              the field must be in [0, 1]. This configures the sampling rate of requests to the load balancer
              where 1.0 means all logged requests are reported and 0.0 means no logged requests are reported.
              The default value is 1.0.
      - !ruby/object:Api::Type::ResourceRef
        resource: 'Network'
        name: 'network'
        imports: 'selfLink'
        description: |
          The URL of the network to which this backend service belongs.
          This field can only be specified when the load balancing scheme is set to INTERNAL.
      - !ruby/object:Api::Type::NestedObject
        name: 'subsetting'
        min_version: beta
        description: |
          Subsetting configuration for this BackendService. Currently this is applicable only for Internal TCP/UDP load balancing and Internal HTTP(S) load balancing.
        properties:
          - !ruby/object:Api::Type::Enum
            name: 'policy'
            values:
              - :CONSISTENT_HASH_SUBSETTING
            required: true
            description: |
              The algorithm used for subsetting.
  - !ruby/object:Api::Resource
    name: 'BackendServiceSignedUrlKey'
    kind: 'compute#BackendServiceSignedUrlKey'
    input: true
    base_url: projects/{{project}}/global/backendServices/{{backend_service}}
    create_url: projects/{{project}}/global/backendServices/{{backend_service}}/addSignedUrlKey
    create_verb: :POST
    delete_url: projects/{{project}}/global/backendServices/{{backend_service}}/deleteSignedUrlKey?keyName={{name}}
    delete_verb: :POST
    self_link: projects/{{project}}/global/backendServices/{{backend_service}}
    identity:
      - name
    nested_query: !ruby/object:Api::Resource::NestedQuery
      keys:
        - cdnPolicy
        - signedUrlKeyNames
      is_list_of_ids: true
    description: |
      A key for signing Cloud CDN signed URLs for Backend Services.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Using Signed URLs': 'https://cloud.google.com/cdn/docs/using-signed-urls/'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/backendServices'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'backendService'
        resource: 'BackendService'
        imports: 'name'
        description: |
          The backend service this signed URL key belongs.
        required: true
        input: true
    properties:
      - !ruby/object:Api::Type::String
        name: 'name'
        api_name: 'keyName'
        description: |
          Name of the signed URL key.
        required: true
        input: true
      - !ruby/object:Api::Type::String
        name: 'keyValue'
        description: |
          128-bit key value used for signing the URL. The key value must be a
          valid RFC 4648 Section 5 base64url encoded string.
        required: true
        input: true
  - !ruby/object:Api::Resource
    name: 'DiskType'
    kind: 'compute#diskType'
    base_url: projects/{{project}}/zones/{{zone}}/diskTypes
    collection_url_key: 'items'
    # TODO(nelsonjr): Search all documentation for references of using URL (like
    # the description below) and replace with the proper reference to the
    # corresponding type.
    description: |
      Represents a DiskType resource. A DiskType resource represents the type
      of disk to use, such as a pd-ssd, pd-balanced or pd-standard. To reference a disk
      type, use the disk type's full or partial URL.
    # TODO(nelsonjr): Temporarily make DiskType virtual so no tests gets
    # triggered for create. Implement support for read only objects, and delete
    # the virtual tag
    # | readonly: true
    readonly: true
    has_self_link: true
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'zone'
        resource: 'Zone'
        imports: 'name'
        description: 'A reference to the zone where the disk type resides.'
        required: true
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::Integer
        name: 'defaultDiskSizeGb'
        description: 'Server-defined default disk size in GB.'
        output: true
      - !ruby/object:Api::Type::NestedObject
        name: 'deprecated'
        description: 'The deprecation status associated with this disk type.'
        output: true
        properties:
          - !ruby/object:Api::Type::Time
            name: 'deleted'
            description: |
              An optional RFC3339 timestamp on or after which the deprecation state
              of this resource will be changed to DELETED.
            output: true
          - !ruby/object:Api::Type::Time
            name: 'deprecated'
            description: |
              An optional RFC3339 timestamp on or after which the deprecation state
              of this resource will be changed to DEPRECATED.
            output: true
          - !ruby/object:Api::Type::Time
            name: 'obsolete'
            description: |
              An optional RFC3339 timestamp on or after which the deprecation state
              of this resource will be changed to OBSOLETE.
            output: true
          - !ruby/object:Api::Type::String
            name: 'replacement'
            description: |
              The URL of the suggested replacement for a deprecated resource. The
              suggested replacement resource must be the same kind of resource as
              the deprecated resource.
            output: true
          - !ruby/object:Api::Type::Enum
            name: 'state'
            description: |
              The deprecation state of this resource. This can be DEPRECATED,
              OBSOLETE, or DELETED. Operations which create a new resource using a
              DEPRECATED resource will return successfully, but with a warning
              indicating the deprecated resource and recommending its replacement.
              Operations which use OBSOLETE or DELETED resources will be rejected
              and result in an error.
            values:
              - :DEPRECATED
              - :OBSOLETE
              - :DELETED
            output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional description of this resource.'
        output: true
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: 'Name of the resource.'
      - !ruby/object:Api::Type::String
        name: 'validDiskSize'
        description: |
          An optional textual description of the valid disk size, such as
          "10GB-10TB".
        output: true
  - !ruby/object:Api::Resource
    name: 'RegionDiskResourcePolicyAttachment'
    input: true
    base_url: projects/{{project}}/regions/{{region}}/disks/{{disk}}
    create_verb: :POST
    create_url: projects/{{project}}/regions/{{region}}/disks/{{disk}}/addResourcePolicies
    delete_verb: :POST
    delete_url: projects/{{project}}/regions/{{region}}/disks/{{disk}}/removeResourcePolicies
    self_link: projects/{{project}}/regions/{{region}}/disks/{{disk}}
    nested_query: !ruby/object:Api::Resource::NestedQuery
      keys:
        - resourcePolicies
      is_list_of_ids: true
    identity:
      - name
    description: |
      Disk resource policies define a schedule for taking snapshots and a
      retention period for these snapshots.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'disk'
        resource: 'Disk'
        imports: 'name'
        description: |
          The name of the regional disk in which the resource policies are attached to.
        required: true
        url_param_only: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'name'
        description: 'A reference to the region where the disk resides.'
        required: true
        url_param_only: true
    properties:
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          The resource policy to be attached to the disk for scheduling snapshot
          creation. Do not specify the self link.
        required: true
  - !ruby/object:Api::Resource
    name: 'DiskResourcePolicyAttachment'
    input: true
    base_url: projects/{{project}}/zones/{{zone}}/disks/{{disk}}
    create_verb: :POST
    create_url: projects/{{project}}/zones/{{zone}}/disks/{{disk}}/addResourcePolicies
    delete_verb: :POST
    delete_url: projects/{{project}}/zones/{{zone}}/disks/{{disk}}/removeResourcePolicies
    self_link: projects/{{project}}/zones/{{zone}}/disks/{{disk}}
    nested_query: !ruby/object:Api::Resource::NestedQuery
      keys:
        - resourcePolicies
      is_list_of_ids: true
    identity:
      - name
    description: |
      Disk resource policies define a schedule for taking snapshots and a
      retention period for these snapshots.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/zones/{{zone}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'disk'
        resource: 'Disk'
        imports: 'name'
        description: |
          The name of the disk in which the resource policies are attached to.
        required: true
        url_param_only: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'zone'
        resource: 'Zone'
        imports: 'name'
        description: 'A reference to the zone where the disk resides.'
        required: true
        url_param_only: true
    properties:
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          The resource policy to be attached to the disk for scheduling snapshot
          creation. Do not specify the self link.
        required: true
  - !ruby/object:Api::Resource
    name: 'Disk'
    kind: 'compute#disk'
    input: true
    base_url: projects/{{project}}/zones/{{zone}}/disks
    collection_url_key: 'items'
    has_self_link: true
    description: |
      Persistent disks are durable storage devices that function similarly to
      the physical disks in a desktop or a server. Compute Engine manages the
      hardware behind these devices to ensure data redundancy and optimize
      performance for you. Persistent disks are available as either standard
      hard disk drives (HDD) or solid-state drives (SSD).

      Persistent disks are located independently from your virtual machine
      instances, so you can detach or move persistent disks to keep your data
      even after you delete your instances. Persistent disk performance scales
      automatically with size, so you can resize your existing persistent disks
      or add more persistent disks to an instance to meet your performance and
      storage space requirements.

      Add a persistent disk to your instance when you need reliable and
      affordable storage with consistent performance characteristics.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Adding a persistent disk':
          'https://cloud.google.com/compute/docs/disks/add-persistent-disk'
      api: 'https://cloud.google.com/compute/docs/reference/v1/disks'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/zones/{{zone}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'zone'
        resource: 'Zone'
        imports: 'name'
        description: 'A reference to the zone where the disk resides.'
        required: true
      - !ruby/object:Api::Type::NestedObject
        name: 'sourceImageEncryptionKey'
        description: |
          The customer-supplied encryption key of the source image. Required if
          the source image is protected by a customer-supplied encryption key.
        properties:
          - !ruby/object:Api::Type::String
            name: 'rawKey'
            description: |
              Specifies a 256-bit customer-supplied encryption key, encoded in
              RFC 4648 base64 to either encrypt or decrypt this resource.
          - !ruby/object:Api::Type::String
            name: 'sha256'
            description: |
              The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied
              encryption key that protects this resource.
            output: true
          - !ruby/object:Api::Type::String
            # TODO(chrisst) Change to ResourceRef once KMS is in Magic Modules
            name: 'kmsKeyName'
            description: |
              The name of the encryption key that is stored in Google Cloud KMS.
          - !ruby/object:Api::Type::String
            name: 'kmsKeyServiceAccount'
            description: |
              The service account used for the encryption request for the given KMS key.
              If absent, the Compute Engine Service Agent service account is used.
        input: true
      - !ruby/object:Api::Type::String
        name: 'sourceImageId'
        description: |
          The ID value of the image used to create this disk. This value
          identifies the exact image that was used to create this persistent
          disk. For example, if you created the persistent disk from an image
          that was later deleted and recreated under the same name, the source
          image ID would identify the exact version of the image that was used.
        output: true
      - !ruby/object:Api::Type::NestedObject
        name: 'diskEncryptionKey'
        description: |
          Encrypts the disk using a customer-supplied encryption key.

          After you encrypt a disk with a customer-supplied key, you must
          provide the same key if you use the disk later (e.g. to create a disk
          snapshot or an image, or to attach the disk to a virtual machine).

          Customer-supplied encryption keys do not protect access to metadata of
          the disk.

          If you do not provide an encryption key when creating the disk, then
          the disk will be encrypted using an automatically generated key and
          you do not need to provide a key to use the disk later.
        properties:
          - !ruby/object:Api::Type::String
            name: 'rawKey'
            description: |
              Specifies a 256-bit customer-supplied encryption key, encoded in
              RFC 4648 base64 to either encrypt or decrypt this resource.
          - !ruby/object:Api::Type::String
            name: 'sha256'
            description: |
              The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied
              encryption key that protects this resource.
            output: true
          - !ruby/object:Api::Type::String
            # TODO(chrisst) Change to ResourceRef once KMS is in Magic Modules
            name: 'kmsKeyName'
            description: |
              The name of the encryption key that is stored in Google Cloud KMS.
              Your project's Compute Engine System service account
              (`service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com`) must have
              `roles/cloudkms.cryptoKeyEncrypterDecrypter` to use this feature.
          - !ruby/object:Api::Type::String
            name: 'kmsKeyServiceAccount'
            description: |
              The service account used for the encryption request for the given KMS key.
              If absent, the Compute Engine Service Agent service account is used.
        input: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'sourceSnapshot'
        resource: 'Snapshot'
        imports: 'selfLink'
        description: |
          The source snapshot used to create this disk. You can provide this as
          a partial or full URL to the resource. If the snapshot is in another
          project than this disk, you must supply a full URL. For example, the
          following are valid values:

          * `https://www.googleapis.com/compute/v1/projects/project/global/snapshots/snapshot`
          * `projects/project/global/snapshots/snapshot`
          * `global/snapshots/snapshot`
      - !ruby/object:Api::Type::NestedObject
        name: 'sourceSnapshotEncryptionKey'
        description: |
          The customer-supplied encryption key of the source snapshot. Required
          if the source snapshot is protected by a customer-supplied encryption
          key.
        properties:
          - !ruby/object:Api::Type::String
            name: 'rawKey'
            description: |
              Specifies a 256-bit customer-supplied encryption key, encoded in
              RFC 4648 base64 to either encrypt or decrypt this resource.
          - !ruby/object:Api::Type::String
            # TODO(chrisst) Change to ResourceRef once KMS is in Magic Modules
            name: 'kmsKeyName'
            description: |
              The name of the encryption key that is stored in Google Cloud KMS.
          - !ruby/object:Api::Type::String
            name: 'sha256'
            description: |
              The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied
              encryption key that protects this resource.
            output: true
          - !ruby/object:Api::Type::String
            name: 'kmsKeyServiceAccount'
            description: |
              The service account used for the encryption request for the given KMS key.
              If absent, the Compute Engine Service Agent service account is used.
        input: true
      - !ruby/object:Api::Type::String
        name: 'sourceSnapshotId'
        description: |
          The unique ID of the snapshot used to create this disk. This value
          identifies the exact snapshot that was used to create this persistent
          disk. For example, if you created the persistent disk from a snapshot
          that was later deleted and recreated under the same name, the source
          snapshot ID would identify the exact version of the snapshot that was
          used.
        output: true
    properties:
      - !ruby/object:Api::Type::Fingerprint
        name: 'labelFingerprint'
        description: |
          The fingerprint used for optimistic locking of this resource.  Used
          internally during updates.
        update_url: 'projects/{{project}}/zones/{{zone}}/disks/{{name}}/setLabels'
        update_verb: :POST
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource. Provide this property when
          you create the resource.
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::Time
        name: 'lastAttachTimestamp'
        description: 'Last attach timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::Time
        name: 'lastDetachTimestamp'
        description: 'Last detach timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::KeyValuePairs
        name: 'labels'
        description: |
          Labels to apply to this disk.  A list of key->value pairs.
        update_verb: :POST
        update_url: 'projects/{{project}}/zones/{{zone}}/disks/{{name}}/setLabels'
      - !ruby/object:Api::Type::Array
        name: 'licenses'
        description: 'Any applicable publicly visible licenses.'
        item_type: Api::Type::String
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        input: true
        required: true
      - !ruby/object:Api::Type::Integer
        name: 'sizeGb'
        description: |
          Size of the persistent disk, specified in GB. You can specify this
          field when creating a persistent disk using the sourceImage or
          sourceSnapshot parameter, or specify it alone to create an empty
          persistent disk.

          If you specify this field along with sourceImage or sourceSnapshot,
          the value of sizeGb must not be less than the size of the sourceImage
          or the size of the snapshot.
        update_verb: :POST
        update_url: 'projects/{{project}}/zones/{{zone}}/disks/{{name}}/resize'
      - !ruby/object:Api::Type::Array
        name: 'users'
        description: |
          Links to the users of the disk (attached instances) in form:
          project/zones/zone/instances/instance
        item_type: !ruby/object:Api::Type::ResourceRef
          name: 'user'
          resource: 'Instance'
          imports: 'selfLink'
          description: 'A reference to a user of this disk'
        output: true
      - !ruby/object:Api::Type::Integer
        name: 'physicalBlockSizeBytes'
        description: |
          Physical block size of the persistent disk, in bytes. If not present
          in a request, a default value is used. Currently supported sizes
          are 4096 and 16384, other sizes may be added in the future.
          If an unsupported value is requested, the error message will list
          the supported values for the caller's project.
      - !ruby/object:Api::Type::String
        name: 'interface'
        min_version: 'beta'
        # interface is removed using url_param_only to preserve schema definition
        # and prevent sending or reading in API requests
        url_param_only: true
        default_value: 'SCSI'
        deprecation_message: This field is no longer in use, disk interfaces will be automatically determined on attachment. To resolve this issue, remove this field from your config.
        description: |
          Specifies the disk interface to use for attaching this disk, which is either SCSI or NVME. The default is SCSI.
      - !ruby/object:Api::Type::String
        name: 'sourceDisk'
        description: |
          The source disk used to create this disk. You can provide this as a partial or full URL to the resource.
          For example, the following are valid values:

          * https://www.googleapis.com/compute/v1/projects/{project}/zones/{zone}/disks/{disk}
          * https://www.googleapis.com/compute/v1/projects/{project}/regions/{region}/disks/{disk}
          * projects/{project}/zones/{zone}/disks/{disk}
          * projects/{project}/regions/{region}/disks/{disk}
          * zones/{zone}/disks/{disk}
          * regions/{region}/disks/{disk}
      - !ruby/object:Api::Type::String
        name: 'sourceDiskId'
        description: |
          The ID value of the disk used to create this image. This value may
          be used to determine whether the image was taken from the current
          or a previous instance of a given disk name.
        output: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'type'
        resource: 'DiskType'
        imports: 'selfLink'
        description: |
          URL of the disk type resource describing which disk type to use to
          create the disk. Provide this when creating the disk.
      - !ruby/object:Api::Type::String
        name: 'sourceImage'
        description: |
          The source image used to create this disk. If the source image is
          deleted, this field will not be set.

          To create a disk with one of the public operating system images,
          specify the image by its family name. For example, specify
          family/debian-11 to use the latest Debian 11 image:

          projects/debian-cloud/global/images/family/debian-11

          Alternatively, use a specific version of a public operating system
          image:

          projects/debian-cloud/global/images/debian-11-bullseye-vYYYYMMDD

          To create a disk with a private image that you created, specify the
          image name in the following format:

          global/images/my-private-image

          You can also specify a private image by its image family, which
          returns the latest version of the image in that family. Replace the
          image name with family/family-name:

          global/images/family/my-private-family
        input: true
      - !ruby/object:Api::Type::Array
        name: 'resourcePolicies'
        min_version: beta
        description: 'Resource policies applied to this disk for automatic snapshot creations.'
        item_type: !ruby/object:Api::Type::ResourceRef
          name: 'resourcePolicy'
          resource: 'ResourcePolicy'
          imports: 'selfLink'
          description: 'A resource policy applied to this disk for automatic snapshot creations.'
      - !ruby/object:Api::Type::Boolean
        name: 'multiWriter'
        description: |
          Indicates whether or not the disk can be read/write attached to more than one instance.
        min_version: beta
      - !ruby/object:Api::Type::Integer
        name: 'provisionedIops'
        description: |
          Indicates how many IOPS must be provisioned for the disk.
  - !ruby/object:Api::Resource
    name: 'Firewall'
    kind: 'compute#firewall'
    base_url: projects/{{project}}/global/firewalls
    collection_url_key: 'items'
    update_verb: :PATCH
    has_self_link: true
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation': 'https://cloud.google.com/vpc/docs/firewalls'
      api: 'https://cloud.google.com/compute/docs/reference/v1/firewalls'
    description: |
      Each network has its own firewall controlling access to and from the
      instances.

      All traffic to instances, even from other instances, is blocked by the
      firewall unless firewall rules are created to allow it.

      The default network has automatically created firewall rules that are
      shown in default firewall rules. No manually created network has
      automatically created firewall rules except for a default "allow" rule for
      outgoing traffic and a default "deny" for incoming traffic. For all
      networks except the default network, you must create any firewall rules
      you need.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      # TODO(nelsonjr): [nice to have] Make the format here simpler to use, in
      # the form of # 22/tcp, [12345-23456]/tcp. It requires a conversion
      # function to the # final JSON format expected by the API for this
      # proposal to work.
      - !ruby/object:Api::Type::Array
        name: 'allowed'
        description: |
          The list of ALLOW rules specified by this firewall. Each rule
          specifies a protocol and port-range tuple that describes a permitted
          connection.
        exactly_one_of:
          - allow
          - deny
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            # IPProtocol has to be string, instead of Enum because user can
            # specify the protocol by number as well.
            - !ruby/object:Api::Type::String
              name: 'ip_protocol'
              description: |
                The IP protocol to which this rule applies. The protocol type is
                required when creating a firewall rule. This value can either be
                one of the following well known protocol strings (tcp, udp,
                icmp, esp, ah, sctp, ipip, all), or the IP protocol number.
              api_name: 'IPProtocol'
              required: true
            - !ruby/object:Api::Type::Array
              item_type: Api::Type::String
              name: 'ports'
              description: |
                An optional list of ports to which this rule applies. This field
                is only applicable for UDP or TCP protocol. Each entry must be
                either an integer or a range. If not specified, this rule
                applies to connections through any port.

                Example inputs include: ["22"], ["80","443"], and
                ["12345-12349"].
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::Array
        name: 'denied'
        exactly_one_of:
          - allow
          - deny
        description: |
          The list of DENY rules specified by this firewall. Each rule specifies
          a protocol and port-range tuple that describes a denied connection.
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            # IPProtocol has to be string, instead of Enum because user can
            # specify the protocol by number as well.
            - !ruby/object:Api::Type::String
              name: 'ip_protocol'
              description: |
                The IP protocol to which this rule applies. The protocol type is
                required when creating a firewall rule. This value can either be
                one of the following well known protocol strings (tcp, udp,
                icmp, esp, ah, sctp, ipip, all), or the IP protocol number.
              api_name: 'IPProtocol'
              required: true
            - !ruby/object:Api::Type::Array
              item_type: Api::Type::String
              name: 'ports'
              description: |
                An optional list of ports to which this rule applies. This field
                is only applicable for UDP or TCP protocol. Each entry must be
                either an integer or a range. If not specified, this rule
                applies to connections through any port.

                Example inputs include: ["22"], ["80","443"], and
                ["12345-12349"].
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource. Provide this property when
          you create the resource.
      - !ruby/object:Api::Type::Array
        name: 'destinationRanges'
        description: |
          If destination ranges are specified, the firewall will apply only to
          traffic that has destination IP address in these ranges. These ranges
          must be expressed in CIDR format. Only IPv4 is supported.
        item_type: Api::Type::String
        conflicts:
          - source_ranges
          - source_tags
      - !ruby/object:Api::Type::Enum
        name: 'direction'
        description: |
          Direction of traffic to which this firewall applies; default is
          INGRESS. Note: For INGRESS traffic, it is NOT supported to specify
          destinationRanges; For EGRESS traffic, it is NOT supported to specify
          `source_ranges` OR `source_tags`. For INGRESS traffic, one of `source_ranges`,
          `source_tags` or `source_service_accounts` is required.
        values:
          - :INGRESS
          - :EGRESS
      - !ruby/object:Api::Type::Boolean
        name: 'disabled'
        description: |
          Denotes whether the firewall rule is disabled, i.e not applied to the
          network it is associated with. When set to true, the firewall rule is
          not enforced and the network behaves as if it did not exist. If this
          is unspecified, the firewall rule will be enabled.
        send_empty_value: true
      - !ruby/object:Api::Type::NestedObject
        name: 'logConfig'
        description: |
          This field denotes the logging options for a particular firewall rule.
          If logging is enabled, logs will be exported to Cloud Logging.
        properties:
          - !ruby/object:Api::Type::Boolean
            name: 'enable'
            description: |
              This field denotes whether to enable logging for a particular
              firewall rule. If logging is enabled, logs will be exported to
              Stackdriver.
          - !ruby/object:Api::Type::Enum
            name: 'metadata'
            description: |
              This field denotes whether to include or exclude metadata for firewall logs.
            values:
              - :EXCLUDE_ALL_METADATA
              - :INCLUDE_ALL_METADATA
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        required: true
        input: true
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
      - !ruby/object:Api::Type::ResourceRef
        name: 'network'
        resource: 'Network'
        imports: 'selfLink'
        required: true
        description: |
          URL of the network resource for this firewall rule. If not specified
          when creating a firewall rule, the default network is used:

            global/networks/default

          If you choose to specify this property, you can specify the network as
          a full or partial URL. For example, the following are all valid URLs:

            https://www.googleapis.com/compute/v1/projects/myproject/global/
                networks/my-network
            projects/myproject/global/networks/my-network
            global/networks/default
      - !ruby/object:Api::Type::Integer
        name: 'priority'
        description: |
          Priority for this rule. This is an integer between 0 and 65535, both
          inclusive. When not specified, the value assumed is 1000. Relative
          priorities determine precedence of conflicting rules. Lower value of
          priority implies higher precedence (eg, a rule with priority 0 has
          higher precedence than a rule with priority 1). DENY rules take
          precedence over ALLOW rules having equal priority.
        default_value: 1000
        send_empty_value: true
      - !ruby/object:Api::Type::Array
        name: 'sourceRanges'
        description: |
          If source ranges are specified, the firewall will apply only to
          traffic that has source IP address in these ranges. These ranges must
          be expressed in CIDR format. One or both of sourceRanges and
          sourceTags may be set. If both properties are set, the firewall will
          apply to traffic that has source IP address within sourceRanges OR the
          source IP that belongs to a tag listed in the sourceTags property. The
          connection does not need to match both properties for the firewall to
          apply. Only IPv4 is supported. For INGRESS traffic, one of `source_ranges`,
          `source_tags` or `source_service_accounts` is required.
        conflicts:
          - destination_ranges
        item_type: Api::Type::String
      - !ruby/object:Api::Type::Array
        name: 'sourceServiceAccounts'
        description: |
          If source service accounts are specified, the firewall will apply only
          to traffic originating from an instance with a service account in this
          list. Source service accounts cannot be used to control traffic to an
          instance's external IP address because service accounts are associated
          with an instance, not an IP address. sourceRanges can be set at the
          same time as sourceServiceAccounts. If both are set, the firewall will
          apply to traffic that has source IP address within sourceRanges OR the
          source IP belongs to an instance with service account listed in
          sourceServiceAccount. The connection does not need to match both
          properties for the firewall to apply. sourceServiceAccounts cannot be
          used at the same time as sourceTags or targetTags. For INGRESS traffic,
          one of `source_ranges`, `source_tags` or `source_service_accounts` is required.
        item_type: Api::Type::String
        max_size: 10
        conflicts:
          - source_tags
          - target_tags
      - !ruby/object:Api::Type::Array
        name: 'sourceTags'
        description: |
          If source tags are specified, the firewall will apply only to traffic
          with source IP that belongs to a tag listed in source tags. Source
          tags cannot be used to control traffic to an instance's external IP
          address. Because tags are associated with an instance, not an IP
          address. One or both of sourceRanges and sourceTags may be set. If
          both properties are set, the firewall will apply to traffic that has
          source IP address within sourceRanges OR the source IP that belongs to
          a tag listed in the sourceTags property. The connection does not need
          to match both properties for the firewall to apply. For INGRESS traffic,
          one of `source_ranges`, `source_tags` or `source_service_accounts` is required.
        item_type: Api::Type::String
        conflicts:
          - source_service_accounts
          - destination_ranges
          - target_service_accounts
      - !ruby/object:Api::Type::Array
        name: 'targetServiceAccounts'
        description: |
          A list of service accounts indicating sets of instances located in the
          network that may make network connections as specified in allowed[].
          targetServiceAccounts cannot be used at the same time as targetTags or
          sourceTags. If neither targetServiceAccounts nor targetTags are
          specified, the firewall rule applies to all instances on the specified
          network.
        item_type: Api::Type::String
        max_size: 10
        conflicts:
          - source_tags
          - target_tags
      - !ruby/object:Api::Type::Array
        name: 'targetTags'
        description: |
          A list of instance tags indicating sets of instances located in the
          network that may make network connections as specified in allowed[].
          If no targetTags are specified, the firewall rule applies to all
          instances on the specified network.
        item_type: Api::Type::String
        conflicts:
          - source_service_accounts
          - target_service_accounts
  - !ruby/object:Api::Resource
    name: 'ForwardingRule'
    kind: 'compute#forwardingRule'
    base_url: projects/{{project}}/regions/{{region}}/forwardingRules
    collection_url_key: 'items'
    has_self_link: true
    description: |
      A ForwardingRule resource. A ForwardingRule resource specifies which pool
      of target virtual machines to forward a packet to if it matches the given
      [IPAddress, IPProtocol, portRange] tuple.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation':
          'https://cloud.google.com/compute/docs/load-balancing/network/forwarding-rules'
      api: 'https://cloud.google.com/compute/docs/reference/v1/forwardingRules'
    input: true
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'name'
        description: |
          A reference to the region where the regional forwarding rule resides.
          This field is not applicable to global forwarding rules.
        required: true
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::Boolean
        name: 'isMirroringCollector'
        description: |
            Indicates whether or not this load balancer can be used
            as a collector for packet mirroring. To prevent mirroring loops,
            instances behind this load balancer will not have their traffic
            mirrored even if a PacketMirroring rule applies to them. This
            can only be set to true for load balancers that have their
            loadBalancingScheme set to INTERNAL.
      - !ruby/object:Api::Type::String
        name: 'pscConnectionId'
        description: 'The PSC connection id of the PSC Forwarding Rule.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'pscConnectionStatus'
        description: 'The PSC connection status of the PSC Forwarding Rule. Possible
            values: STATUS_UNSPECIFIED, PENDING, ACCEPTED, REJECTED, CLOSED'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource. Provide this property when
          you create the resource.
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      # This is a multi-resource resource reference (Address, GlobalAddress)
      - !ruby/object:Api::Type::String
        name: 'IPAddress'
        description: |
          The IP address that this forwarding rule serves. When a client sends
          traffic to this IP address, the forwarding rule directs the traffic to
          the target that you specify in the forwarding rule. The
          loadBalancingScheme and the forwarding rule's target determine the
          type of IP address that you can use. For detailed information, refer
          to [IP address specifications](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts#ip_address_specifications).

          An address can be specified either by a literal IP address or a
          reference to an existing Address resource. If you don't specify a
          reserved IP address, an ephemeral IP address is assigned.

          The value must be set to 0.0.0.0 when the target is a targetGrpcProxy
          that has validateForProxyless field set to true.

          For Private Service Connect forwarding rules that forward traffic to
          Google APIs, IP address must be provided.
      - !ruby/object:Api::Type::Enum
        name: 'IPProtocol'
        description: |
          The IP protocol to which this rule applies.

          When the load balancing scheme is INTERNAL, only TCP and UDP are
          valid.
        values:
          - :TCP
          - :UDP
          - :ESP
          - :AH
          - :SCTP
          - :ICMP
          - :L3_DEFAULT
      # This is a multi-resource resource reference (BackendService (global), RegionBackendService)
      # We have custom expands that manage this.
      - !ruby/object:Api::Type::ResourceRef
        name: 'backendService'
        resource: 'BackendService'
        imports: 'selfLink'
        description: |
          A BackendService to receive the matched traffic. This is used only
          for INTERNAL load balancing.
      - !ruby/object:Api::Type::Enum
        name: 'loadBalancingScheme'
        description: |
          This signifies what the ForwardingRule will be used for and can be
          EXTERNAL, EXTERNAL_MANAGED, INTERNAL, or INTERNAL_MANAGED. EXTERNAL is used for Classic
          Cloud VPN gateways, protocol forwarding to VMs from an external IP address,
          and HTTP(S), SSL Proxy, TCP Proxy, and Network TCP/UDP load balancers.
          INTERNAL is used for protocol forwarding to VMs from an internal IP address,
          and internal TCP/UDP load balancers.
          EXTERNAL_MANAGED is used for regional external HTTP(S) load balancers.
          INTERNAL_MANAGED is used for internal HTTP(S) load balancers.
        values:
          - :EXTERNAL
          - :EXTERNAL_MANAGED
          - :INTERNAL
          - :INTERNAL_MANAGED
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource; provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        required: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'network'
        resource: 'Network'
        imports: 'selfLink'
        description: |
          For internal load balancing, this field identifies the network that
          the load balanced IP should belong to for this Forwarding Rule. If
          this field is not specified, the default network will be used.
          This field is only used for INTERNAL load balancing.
      # TODO(nelsonjr): When implementing new types enable converting the
      # manifest input from a single value to a range of form NN-NN. The API
      # accepts a single value, e.g. '80', but the API stores and returns
      # '80-80'. This causes idempotency false positive.
      - !ruby/object:Api::Type::String
        name: 'portRange'
        description: |
          This field is used along with the target field for TargetHttpProxy,
          TargetHttpsProxy, TargetSslProxy, TargetTcpProxy, TargetVpnGateway,
          TargetPool, TargetInstance.

          Applicable only when IPProtocol is TCP, UDP, or SCTP, only packets
          addressed to ports in the specified range will be forwarded to target.
          Forwarding rules with the same [IPAddress, IPProtocol] pair must have
          disjoint port ranges.

          Some types of forwarding target have constraints on the acceptable
          ports:

          * TargetHttpProxy: 80, 8080
          * TargetHttpsProxy: 443
          * TargetTcpProxy: 25, 43, 110, 143, 195, 443, 465, 587, 700, 993, 995,
                            1883, 5222
          * TargetSslProxy: 25, 43, 110, 143, 195, 443, 465, 587, 700, 993, 995,
                            1883, 5222
          * TargetVpnGateway: 500, 4500
      - !ruby/object:Api::Type::Array
        name: 'ports'
        max_size: 5
        description: |
          This field is used along with internal load balancing and network
          load balancer when the forwarding rule references a backend service
          and when protocol is not L3_DEFAULT.

          A single port or a comma separated list of ports can be configured.
          Only packets addressed to these ports will be forwarded to the backends
          configured with this forwarding rule.

          You can only use one of ports and portRange, or allPorts.
          The three are mutually exclusive.

          You may specify a maximum of up to 5 ports, which can be non-contiguous.
        item_type: Api::Type::String
      - !ruby/object:Api::Type::ResourceRef
        name: 'subnetwork'
        resource: 'Subnetwork'
        imports: 'selfLink'
        description: |
          The subnetwork that the load balanced IP should belong to for this
          Forwarding Rule.  This field is only used for INTERNAL load balancing.

          If the network specified is in auto subnet mode, this field is
          optional. However, if the network is in custom subnet mode, a
          subnetwork must be specified.
      # This is a multi-resource resource reference (TargetHttp(s)Proxy,
      # TargetSslProxy, TargetTcpProxy, TargetVpnGateway, TargetPool,
      # TargetInstance)
      - !ruby/object:Api::Type::String
        name: 'target'
        description: |
          The URL of the target resource to receive the matched traffic.
          The target must live in the same region as the forwarding rule.
          The forwarded traffic must be of a type appropriate to the target
          object.
        update_verb: :POST
        update_url:
          'projects/{{project}}/regions/{{region}}/forwardingRules/{{name}}/setTarget'
      - !ruby/object:Api::Type::Boolean
        name: 'allowGlobalAccess'
        description: |
          If true, clients can access ILB from all regions.
          Otherwise only allows from the local region the ILB is located at.
        send_empty_value: true
        update_verb: :PATCH
        update_url:  projects/{{project}}/regions/{{region}}/forwardingRules/{{name}}
      - !ruby/object:Api::Type::KeyValuePairs
        name: 'labels'
        description: |
          Labels to apply to this forwarding rule.  A list of key->value pairs.
        update_verb: :POST
        update_url: 'projects/{{project}}/regions/{{region}}/forwardingRules/{{name}}/setLabels'
        min_version: beta
      - !ruby/object:Api::Type::Fingerprint
        name: 'labelFingerprint'
        description: |
          The fingerprint used for optimistic locking of this resource.  Used
          internally during updates.
        update_url: 'projects/{{project}}/regions/{{region}}/forwardingRules/{{name}}/setLabels'
        update_verb: :POST
        min_version: beta
      # While this field doesn't appear in the resource definition in the docs,
      # it's present in Get and Insert, and the resource has no Update/Patch call.
      - !ruby/object:Api::Type::Boolean
        name: 'allPorts'
        description: |
          This field can be used with internal load balancer or network load balancer
          when the forwarding rule references a backend service, or with the target
          field when it references a TargetInstance. Set this to true to
          allow packets addressed to any ports to be forwarded to the backends configured
          with this forwarding rule. This can be used when the protocol is TCP/UDP, and it
          must be set to true when the protocol is set to L3_DEFAULT.
          Cannot be set if port or portRange are set.
      - !ruby/object:Api::Type::Enum
        name: 'networkTier'
        description: |
          The networking tier used for configuring this address. If this field is not
          specified, it is assumed to be PREMIUM.
        values:
          - :PREMIUM
          - :STANDARD
        input: true
      - !ruby/object:Api::Type::Array
        name: 'serviceDirectoryRegistrations'
        description: |
          Service Directory resources to register this forwarding rule with. Currently,
          only supports a single Service Directory resource.  
        min_size: 0
        max_size: 1
        input: true         
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::String
              name: 'namespace'
              description: |
                Service Directory namespace to register the forwarding rule under.
              input: true
            - !ruby/object:Api::Type::String
              name: 'service'
              description: |
                Service Directory service to register the forwarding rule under.
              input: true
      - !ruby/object:Api::Type::String
        name: 'serviceLabel'
        description: |
          An optional prefix to the service name for this Forwarding Rule.
          If specified, will be the first label of the fully qualified service
          name.

          The label must be 1-63 characters long, and comply with RFC1035.
          Specifically, the label must be 1-63 characters long and match the
          regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the first
          character must be a lowercase letter, and all following characters
          must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.

          This field is only used for INTERNAL load balancing.
      - !ruby/object:Api::Type::String
        name: 'serviceName'
        description: |
          The internal fully qualified service name for this Forwarding Rule.
          This field is only used for INTERNAL load balancing.
        output: true
  - !ruby/object:Api::Resource
    name: 'GlobalAddress'
    kind: 'compute#address'
    base_url: projects/{{project}}/global/addresses
    collection_url_key: 'items'
    has_self_link: true
    description: |
      Represents a Global Address resource. Global addresses are used for
      HTTP(S) load balancing.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Reserving a Static External IP Address':
          'https://cloud.google.com/compute/docs/ip-addresses/reserve-static-external-ip-address'
      api: 'https://cloud.google.com/compute/docs/reference/v1/globalAddresses'
    input: true
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      - !ruby/object:Api::Type::String
        name: 'address'
        description: |
         The IP address or beginning of the address range represented by this
         resource. This can be supplied as an input to reserve a specific
         address or omitted to allow GCP to choose a valid one for you.
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: |
         Creation timestamp in RFC3339 text format.
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource.
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: |
          The unique identifier for the resource. This identifier is defined by
          the server.
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035.  Specifically, the name must be 1-63 characters long and
          match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means
          the first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        required: true
      - !ruby/object:Api::Type::KeyValuePairs
        name: 'labels'
        description: |
          Labels to apply to this address.  A list of key->value pairs.
        update_verb: :POST
        update_url: 'projects/{{project}}/global/addresses/{{name}}/setLabels'
        min_version: beta
      - !ruby/object:Api::Type::Fingerprint
        name: 'labelFingerprint'
        description: |
          The fingerprint used for optimistic locking of this resource.  Used
          internally during updates.
        update_url: 'projects/{{project}}/global/addresses/{{name}}/setLabels'
        update_verb: :POST
        min_version: beta
      - !ruby/object:Api::Type::Enum
        name: 'ipVersion'
        description: |
          The IP Version that will be used by this address. The default value is `IPV4`.
        values:
          - :IPV4
          - :IPV6
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'selfLink'
        description: |
          A reference to the region where the regional address resides.
        output: true
      - !ruby/object:Api::Type::Integer
        name: 'prefixLength'
        description: |
          The prefix length of the IP range. If not present, it means the
          address field is a single IP address.

          This field is not applicable to addresses with addressType=EXTERNAL,
          or addressType=INTERNAL when purpose=PRIVATE_SERVICE_CONNECT
      - !ruby/object:Api::Type::Enum
        name: 'addressType'
        description: |
          The type of the address to reserve.

          * EXTERNAL indicates public/external single IP address.
          * INTERNAL indicates internal IP ranges belonging to some network.
        values:
        - :EXTERNAL
        - :INTERNAL
        default_value: :EXTERNAL
      - !ruby/object:Api::Type::String
        name: 'purpose'
        description: |
          The purpose of the resource. Possible values include:

          * VPC_PEERING - for peer networks

          * PRIVATE_SERVICE_CONNECT - for ([Beta](https://terraform.io/docs/providers/google/guides/provider_versions.html) only) Private Service Connect networks
      - !ruby/object:Api::Type::ResourceRef
        name: 'network'
        resource: 'Network'
        imports: 'selfLink'
        description: |
          The URL of the network in which to reserve the IP range. The IP range
          must be in RFC1918 space. The network cannot be deleted if there are
          any reserved IP ranges referring to it.

          This should only be set when using an Internal address.
      # status is not useful for state convergence
      # users[] is not useful for state convergence
  - !ruby/object:Api::Resource
    name: 'GlobalForwardingRule'
    kind: 'compute#forwardingRule'
    base_url: projects/{{project}}/global/forwardingRules
    input: true
    has_self_link: true
    collection_url_key: 'items'
    description: |
      Represents a GlobalForwardingRule resource. Global forwarding rules are
      used to forward traffic to the correct load balancer for HTTP load
      balancing. Global forwarding rules can only be used for HTTP load
      balancing.

      For more information, see
      https://cloud.google.com/compute/docs/load-balancing/http/
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource. Provide this property when
          you create the resource.
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      # This is a multi-resource resource reference (Address, GlobalAddress)
      - !ruby/object:Api::Type::String
        name: 'IPAddress'
        description: |
          The IP address that this forwarding rule serves. When a client sends
          traffic to this IP address, the forwarding rule directs the traffic to
          the target that you specify in the forwarding rule. The
          loadBalancingScheme and the forwarding rule's target determine the
          type of IP address that you can use. For detailed information, refer
          to [IP address specifications](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts#ip_address_specifications).

          An address can be specified either by a literal IP address or a
          reference to an existing Address resource. If you don't specify a
          reserved IP address, an ephemeral IP address is assigned.

          The value must be set to 0.0.0.0 when the target is a targetGrpcProxy
          that has validateForProxyless field set to true.

          For Private Service Connect forwarding rules that forward traffic to
          Google APIs, IP address must be provided.
      - !ruby/object:Api::Type::Enum
        name: 'IPProtocol'
        description: |
          The IP protocol to which this rule applies. When the load balancing scheme is
          INTERNAL_SELF_MANAGED, only TCP is valid. This field must not be set if the
          global address is configured as a purpose of PRIVATE_SERVICE_CONNECT
          and addressType of INTERNAL
        values:
          - :TCP
          - :UDP
          - :ESP
          - :AH
          - :SCTP
          - :ICMP
      - !ruby/object:Api::Type::Enum
        name: 'ipVersion'
        description: |
          The IP Version that will be used by this global forwarding rule.
        values:
          - :IPV4
          - :IPV6
      - !ruby/object:Api::Type::KeyValuePairs
        name: 'labels'
        description: |
          Labels to apply to this forwarding rule.  A list of key->value pairs.
        update_verb: :POST
        update_url: 'projects/{{project}}/global/forwardingRules/{{name}}/setLabels'
        min_version: beta
      - !ruby/object:Api::Type::Fingerprint
        name: 'labelFingerprint'
        description: |
          The fingerprint used for optimistic locking of this resource.  Used
          internally during updates.
        update_url: 'projects/{{project}}/global/forwardingRules/{{name}}/setLabels'
        update_verb: :POST
        min_version: beta
      - !ruby/object:Api::Type::Enum
        name: 'loadBalancingScheme'
        description: |
          This signifies what the GlobalForwardingRule will be used for.
          The value of INTERNAL_SELF_MANAGED means that this will be used for
          Internal Global HTTP(S) LB. The value of EXTERNAL means that this
          will be used for External Global Load Balancing (HTTP(S) LB,
          External TCP/UDP LB, SSL Proxy). The value of EXTERNAL_MANAGED means
          that this will be used for Global external HTTP(S) load balancers.

          ([Beta](https://terraform.io/docs/providers/google/guides/provider_versions.html) only) Note: This field must be set "" if the global address is
          configured as a purpose of PRIVATE_SERVICE_CONNECT and addressType of INTERNAL.
        default_value: :EXTERNAL
        values:
          - :EXTERNAL
          - :EXTERNAL_MANAGED
          - :INTERNAL_SELF_MANAGED
      - !ruby/object:Api::Type::Array
        name: 'metadataFilters'
        description: |
          Opaque filter criteria used by Loadbalancer to restrict routing
          configuration to a limited set xDS compliant clients. In their xDS
          requests to Loadbalancer, xDS clients present node metadata. If a
          match takes place, the relevant routing configuration is made available
          to those proxies.

          For each metadataFilter in this list, if its filterMatchCriteria is set
          to MATCH_ANY, at least one of the filterLabels must match the
          corresponding label provided in the metadata. If its filterMatchCriteria
          is set to MATCH_ALL, then all of its filterLabels must match with
          corresponding labels in the provided metadata.

          metadataFilters specified here can be overridden by those specified in
          the UrlMap that this ForwardingRule references.

          metadataFilters only applies to Loadbalancers that have their
          loadBalancingScheme set to INTERNAL_SELF_MANAGED.
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
          - !ruby/object:Api::Type::Enum
            name: 'filterMatchCriteria'
            description: |
              Specifies how individual filterLabel matches within the list of
              filterLabels contribute towards the overall metadataFilter match.

              MATCH_ANY - At least one of the filterLabels must have a matching
              label in the provided metadata.
              MATCH_ALL - All filterLabels must have matching labels in the
              provided metadata.
            required: true
            values:
              - :MATCH_ANY
              - :MATCH_ALL
          - !ruby/object:Api::Type::Array
            name: 'filterLabels'
            description: |
              The list of label value pairs that must match labels in the
              provided metadata based on filterMatchCriteria

              This list must not be empty and can have at the most 64 entries.
            min_size: 1
            max_size: 64
            required: true
            item_type: !ruby/object:Api::Type::NestedObject
              properties:
              - !ruby/object:Api::Type::String
                name: 'name'
                description: |
                  Name of the metadata label. The length must be between
                  1 and 1024 characters, inclusive.
                required: true
              - !ruby/object:Api::Type::String
                name: 'value'
                description: |
                  The value that the label must match. The value has a maximum
                  length of 1024 characters.
                required: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource; provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        required: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'network'
        resource: 'Network'
        imports: 'selfLink'
        description: |
          This field is not used for external load balancing.
          For INTERNAL_SELF_MANAGED load balancing, this field
          identifies the network that the load balanced IP should belong to
          for this global forwarding rule. If this field is not specified,
          the default network will be used.
      # TODO(nelsonjr): When implementing new types enable converting the
      # manifest input from a single value to a range of form NN-NN. The API
      # accepts a single value, e.g. '80', but the API stores and returns
      # '80-80'. This causes idempotency false positive.
      - !ruby/object:Api::Type::String
        name: 'portRange'
        description: |
          This field is used along with the target field for TargetHttpProxy,
          TargetHttpsProxy, TargetSslProxy, TargetTcpProxy, TargetVpnGateway,
          TargetPool, TargetInstance.

          Applicable only when IPProtocol is TCP, UDP, or SCTP, only packets
          addressed to ports in the specified range will be forwarded to target.
          Forwarding rules with the same [IPAddress, IPProtocol] pair must have
          disjoint port ranges.

          Some types of forwarding target have constraints on the acceptable
          ports:

          * TargetHttpProxy: 80, 8080
          * TargetHttpsProxy: 443
          * TargetTcpProxy: 25, 43, 110, 143, 195, 443, 465, 587, 700, 993, 995,
                            1883, 5222
          * TargetSslProxy: 25, 43, 110, 143, 195, 443, 465, 587, 700, 993, 995,
                            1883, 5222
          * TargetVpnGateway: 500, 4500
      # This is a multi-resource resource reference (TargetHttp(s)Proxy,
      # TargetSslProxy, TargetTcpProxy, TargetVpnGateway, TargetPool,
      # TargetInstance)
      - !ruby/object:Api::Type::String
        name: 'target'
        required: true
        description: |
          The URL of the target resource to receive the matched traffic.
          The forwarded traffic must be of a type appropriate to the target object.
          For INTERNAL_SELF_MANAGED load balancing, only HTTP and HTTPS targets
          are valid.

          ([Beta](https://terraform.io/docs/providers/google/guides/provider_versions.html) only) For global address with a purpose of PRIVATE_SERVICE_CONNECT and
          addressType of INTERNAL, only "all-apis" and "vpc-sc" are valid.
        update_verb: :POST
        update_url: 'projects/{{project}}/global/forwardingRules/{{name}}/setTarget'
  - !ruby/object:Api::Resource
    name: 'HttpHealthCheck'
    kind: 'compute#httpHealthCheck'
    base_url: projects/{{project}}/global/httpHealthChecks
    collection_url_key: 'items'
    has_self_link: true
    description: |
      An HttpHealthCheck resource. This resource defines a template for how
      individual VMs should be checked for health, via HTTP.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Adding Health Checks': 'https://cloud.google.com/compute/docs/load-balancing/health-checks#legacy_health_checks'
      api: 'https://cloud.google.com/compute/docs/reference/v1/httpHealthChecks'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      - !ruby/object:Api::Type::Integer
        name: 'checkIntervalSec'
        description: |
          How often (in seconds) to send a health check. The default value is 5
          seconds.
        default_value: 5
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource. Provide this property when
          you create the resource.
      - !ruby/object:Api::Type::Integer
        name: 'healthyThreshold'
        description: |
          A so-far unhealthy instance will be marked healthy after this many
          consecutive successes. The default value is 2.
      - !ruby/object:Api::Type::String
        name: 'host'
        description: |
          The value of the host header in the HTTP health check request. If
          left empty (default value), the public IP on behalf of which this
          health check is performed will be used.
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: |
          The unique identifier for the resource. This identifier is defined by
          the server.
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035.  Specifically, the name must be 1-63 characters long and
          match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means
          the first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the
          last character, which cannot be a dash.
        required: true
        input: true
      - !ruby/object:Api::Type::Integer
        name: 'port'
        description: |
          The TCP port number for the HTTP health check request.
          The default value is 80.
      - !ruby/object:Api::Type::String
        name: 'requestPath'
        description: |
          The request path of the HTTP health check request.
          The default value is /.
      - !ruby/object:Api::Type::Integer
        name: 'timeoutSec'
        description: |
          How long (in seconds) to wait before claiming failure.
          The default value is 5 seconds.  It is invalid for timeoutSec to have
          greater value than checkIntervalSec.
      - !ruby/object:Api::Type::Integer
        name: 'unhealthyThreshold'
        description: |
          A so-far healthy instance will be marked unhealthy after this many
          consecutive failures. The default value is 2.
  - !ruby/object:Api::Resource
    name: 'HttpsHealthCheck'
    kind: 'compute#httpsHealthCheck'
    base_url: projects/{{project}}/global/httpsHealthChecks
    collection_url_key: 'items'
    has_self_link: true
    description: |
      An HttpsHealthCheck resource. This resource defines a template for how
      individual VMs should be checked for health, via HTTPS.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Adding Health Checks': 'https://cloud.google.com/compute/docs/load-balancing/health-checks#legacy_health_checks'
      api: 'https://cloud.google.com/compute/docs/reference/v1/httpsHealthChecks'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      - !ruby/object:Api::Type::Integer
        name: 'checkIntervalSec'
        description: |
          How often (in seconds) to send a health check. The default value is 5
          seconds.
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource. Provide this property when
          you create the resource.
      - !ruby/object:Api::Type::Integer
        name: 'healthyThreshold'
        description: |
          A so-far unhealthy instance will be marked healthy after this many
          consecutive successes. The default value is 2.
      - !ruby/object:Api::Type::String
        name: 'host'
        description: |
          The value of the host header in the HTTPS health check request. If
          left empty (default value), the public IP on behalf of which this
          health check is performed will be used.
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: |
          The unique identifier for the resource. This identifier is defined by
          the server.
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035.  Specifically, the name must be 1-63 characters long and
          match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means
          the first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the
          last character, which cannot be a dash.
        required: true
        input: true
      - !ruby/object:Api::Type::Integer
        name: 'port'
        description: |
          The TCP port number for the HTTPS health check request.
          The default value is 443.
      - !ruby/object:Api::Type::String
        name: 'requestPath'
        description: |
          The request path of the HTTPS health check request.
          The default value is /.
      - !ruby/object:Api::Type::Integer
        name: 'timeoutSec'
        description: |
          How long (in seconds) to wait before claiming failure.
          The default value is 5 seconds.  It is invalid for timeoutSec to have
          greater value than checkIntervalSec.
      - !ruby/object:Api::Type::Integer
        name: 'unhealthyThreshold'
        description: |
          A so-far healthy instance will be marked unhealthy after this many
          consecutive failures. The default value is 2.
  - !ruby/object:Api::Resource
    name: 'HealthCheck'
    kind: 'compute#healthCheck'
    base_url: projects/{{project}}/global/healthChecks
    collection_url_key: 'items'
    has_self_link: true
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation': 'https://cloud.google.com/load-balancing/docs/health-checks'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/healthChecks'
    description: |
      Health Checks determine whether instances are responsive and able to do work.
      They are an important part of a comprehensive load balancing configuration,
      as they enable monitoring instances behind load balancers.

      Health Checks poll instances at a specified interval. Instances that
      do not respond successfully to some number of probes in a row are marked
      as unhealthy. No new connections are sent to unhealthy instances,
      though existing connections will continue. The health check will
      continue to poll unhealthy instances. If an instance later responds
      successfully to some number of consecutive probes, it is marked
      healthy again and can receive new connections.

      ~>**NOTE**: Legacy HTTP(S) health checks must be used for target pool-based network
      load balancers. See the [official guide](https://cloud.google.com/load-balancing/docs/health-check-concepts#selecting_hc)
      for choosing a type of health check.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      - !ruby/object:Api::Type::Integer
        name: 'checkIntervalSec'
        description: |
          How often (in seconds) to send a health check. The default value is 5
          seconds.
        default_value: 5
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource. Provide this property when
          you create the resource.
        send_empty_value: true
      - !ruby/object:Api::Type::Integer
        name: 'healthyThreshold'
        description: |
          A so-far unhealthy instance will be marked healthy after this many
          consecutive successes. The default value is 2.
        default_value: 2
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: |
          The unique identifier for the resource. This identifier is defined by
          the server.
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        required: true
        input: true
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035.  Specifically, the name must be 1-63 characters long and
          match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means
          the first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the
          last character, which cannot be a dash.
      - !ruby/object:Api::Type::Integer
        name: 'timeoutSec'
        description: |
          How long (in seconds) to wait before claiming failure.
          The default value is 5 seconds.  It is invalid for timeoutSec to have
          greater value than checkIntervalSec.
        default_value: 5
      - !ruby/object:Api::Type::Integer
        name: 'unhealthyThreshold'
        description: |
          A so-far healthy instance will be marked unhealthy after this many
          consecutive failures. The default value is 2.
        default_value: 2
      - !ruby/object:Api::Type::Enum
        name: 'type'
        description: |
          Specifies the type of the healthCheck, either TCP, SSL, HTTP or
          HTTPS. If not specified, the default is TCP. Exactly one of the
          protocol-specific health check field must be specified, which must
          match type field.
        values:
          - :TCP
          - :SSL
          - :HTTP
          - :HTTPS
          - :HTTP2
      - !ruby/object:Api::Type::NestedObject
        name: 'httpHealthCheck'
        exactly_one_of:
          - http_health_check
          - https_health_check
          - http2_health_check
          - tcp_health_check
          - ssl_health_check
          - grpc_health_check
        properties:
            - !ruby/object:Api::Type::String
              name: 'host'
              at_least_one_of:
                - http_health_check.0.host
                - http_health_check.0.request_path
                - http_health_check.0.response
                - http_health_check.0.port
                - http_health_check.0.port_name
                - http_health_check.0.proxy_header
                - http_health_check.0.port_specification
              description: |
                The value of the host header in the HTTP health check request.
                If left empty (default value), the public IP on behalf of which this health
                check is performed will be used.
            - !ruby/object:Api::Type::String
              name: 'requestPath'
              at_least_one_of:
                - http_health_check.0.host
                - http_health_check.0.request_path
                - http_health_check.0.response
                - http_health_check.0.port
                - http_health_check.0.port_name
                - http_health_check.0.proxy_header
                - http_health_check.0.port_specification
              description: |
                The request path of the HTTP health check request.
                The default value is /.
              default_value: "/"
            - !ruby/object:Api::Type::String
              name: 'response'
              at_least_one_of:
                - http_health_check.0.host
                - http_health_check.0.request_path
                - http_health_check.0.response
                - http_health_check.0.port
                - http_health_check.0.port_name
                - http_health_check.0.proxy_header
                - http_health_check.0.port_specification
              description: |
                The bytes to match against the beginning of the response data. If left empty
                (the default value), any response will indicate health. The response data
                can only be ASCII.
            - !ruby/object:Api::Type::Integer
              name: 'port'
              at_least_one_of:
                - http_health_check.0.host
                - http_health_check.0.request_path
                - http_health_check.0.response
                - http_health_check.0.port
                - http_health_check.0.port_name
                - http_health_check.0.proxy_header
                - http_health_check.0.port_specification
              description: |
                The TCP port number for the HTTP health check request.
                The default value is 80.
            - !ruby/object:Api::Type::String
              name: 'portName'
              at_least_one_of:
                - http_health_check.0.host
                - http_health_check.0.request_path
                - http_health_check.0.response
                - http_health_check.0.port
                - http_health_check.0.port_name
                - http_health_check.0.proxy_header
                - http_health_check.0.port_specification
              description: |
                Port name as defined in InstanceGroup#NamedPort#name. If both port and
                port_name are defined, port takes precedence.
            - !ruby/object:Api::Type::Enum
              name: 'proxyHeader'
              at_least_one_of:
                - http_health_check.0.host
                - http_health_check.0.request_path
                - http_health_check.0.response
                - http_health_check.0.port
                - http_health_check.0.port_name
                - http_health_check.0.proxy_header
                - http_health_check.0.port_specification
              description: |
                Specifies the type of proxy header to append before sending data to the
                backend.
              values:
                - :NONE
                - :PROXY_V1
              default_value: :NONE
            - !ruby/object:Api::Type::Enum
              name: 'portSpecification'
              at_least_one_of:
                - http_health_check.0.host
                - http_health_check.0.request_path
                - http_health_check.0.response
                - http_health_check.0.port
                - http_health_check.0.port_name
                - http_health_check.0.proxy_header
                - http_health_check.0.port_specification
              description: |
                Specifies how port is selected for health checking, can be one of the
                following values:

                  * `USE_FIXED_PORT`: The port number in `port` is used for health checking.

                  * `USE_NAMED_PORT`: The `portName` is used for health checking.

                  * `USE_SERVING_PORT`: For NetworkEndpointGroup, the port specified for each
                  network endpoint is used for health checking. For other backends, the
                  port or named port specified in the Backend Service is used for health
                  checking.

                If not specified, HTTP health check follows behavior specified in `port` and
                `portName` fields.
              values:
                - :USE_FIXED_PORT
                - :USE_NAMED_PORT
                - :USE_SERVING_PORT
      - !ruby/object:Api::Type::NestedObject
        name: 'httpsHealthCheck'
        exactly_one_of:
          - http_health_check
          - https_health_check
          - http2_health_check
          - tcp_health_check
          - ssl_health_check
          - grpc_health_check
        properties:
            - !ruby/object:Api::Type::String
              name: 'host'
              at_least_one_of:
                - https_health_check.0.host
                - https_health_check.0.request_path
                - https_health_check.0.response
                - https_health_check.0.port
                - https_health_check.0.port_name
                - https_health_check.0.proxy_header
                - https_health_check.0.port_specification
              description: |
                The value of the host header in the HTTPS health check request.
                If left empty (default value), the public IP on behalf of which this health
                check is performed will be used.
            - !ruby/object:Api::Type::String
              name: 'requestPath'
              at_least_one_of:
                - https_health_check.0.host
                - https_health_check.0.request_path
                - https_health_check.0.response
                - https_health_check.0.port
                - https_health_check.0.port_name
                - https_health_check.0.proxy_header
                - https_health_check.0.port_specification
              description: |
                The request path of the HTTPS health check request.
                The default value is /.
              default_value: "/"
            - !ruby/object:Api::Type::String
              name: 'response'
              at_least_one_of:
                - https_health_check.0.host
                - https_health_check.0.request_path
                - https_health_check.0.response
                - https_health_check.0.port
                - https_health_check.0.port_name
                - https_health_check.0.proxy_header
                - https_health_check.0.port_specification
              description: |
                The bytes to match against the beginning of the response data. If left empty
                (the default value), any response will indicate health. The response data
                can only be ASCII.
            - !ruby/object:Api::Type::Integer
              name: 'port'
              at_least_one_of:
                - https_health_check.0.host
                - https_health_check.0.request_path
                - https_health_check.0.response
                - https_health_check.0.port
                - https_health_check.0.port_name
                - https_health_check.0.proxy_header
                - https_health_check.0.port_specification
              description: |
                The TCP port number for the HTTPS health check request.
                The default value is 443.
            - !ruby/object:Api::Type::String
              name: 'portName'
              at_least_one_of:
                - https_health_check.0.host
                - https_health_check.0.request_path
                - https_health_check.0.response
                - https_health_check.0.port
                - https_health_check.0.port_name
                - https_health_check.0.proxy_header
                - https_health_check.0.port_specification
              description: |
                Port name as defined in InstanceGroup#NamedPort#name. If both port and
                port_name are defined, port takes precedence.
            - !ruby/object:Api::Type::Enum
              name: 'proxyHeader'
              at_least_one_of:
                - https_health_check.0.host
                - https_health_check.0.request_path
                - https_health_check.0.response
                - https_health_check.0.port
                - https_health_check.0.port_name
                - https_health_check.0.proxy_header
                - https_health_check.0.port_specification
              description: |
                Specifies the type of proxy header to append before sending data to the
                backend.
              values:
                - :NONE
                - :PROXY_V1
              default_value: :NONE
            - !ruby/object:Api::Type::Enum
              name: 'portSpecification'
              at_least_one_of:
                - https_health_check.0.host
                - https_health_check.0.request_path
                - https_health_check.0.response
                - https_health_check.0.port
                - https_health_check.0.port_name
                - https_health_check.0.proxy_header
                - https_health_check.0.port_specification
              description: |
                Specifies how port is selected for health checking, can be one of the
                following values:

                  * `USE_FIXED_PORT`: The port number in `port` is used for health checking.

                  * `USE_NAMED_PORT`: The `portName` is used for health checking.

                  * `USE_SERVING_PORT`: For NetworkEndpointGroup, the port specified for each
                  network endpoint is used for health checking. For other backends, the
                  port or named port specified in the Backend Service is used for health
                  checking.

                If not specified, HTTPS health check follows behavior specified in `port` and
                `portName` fields.
              values:
                - :USE_FIXED_PORT
                - :USE_NAMED_PORT
                - :USE_SERVING_PORT
      - !ruby/object:Api::Type::NestedObject
        name: 'tcpHealthCheck'
        exactly_one_of:
          - http_health_check
          - https_health_check
          - http2_health_check
          - tcp_health_check
          - ssl_health_check
          - grpc_health_check
        properties:
            - !ruby/object:Api::Type::String
              name: 'request'
              at_least_one_of:
                - tcp_health_check.0.request
                - tcp_health_check.0.response
                - tcp_health_check.0.port
                - tcp_health_check.0.port_name
                - tcp_health_check.0.proxy_header
                - tcp_health_check.0.port_specification
              description: |
                The application data to send once the TCP connection has been
                established (default value is empty). If both request and response are
                empty, the connection establishment alone will indicate health. The request
                data can only be ASCII.
            - !ruby/object:Api::Type::String
              name: 'response'
              at_least_one_of:
                - tcp_health_check.0.request
                - tcp_health_check.0.response
                - tcp_health_check.0.port
                - tcp_health_check.0.port_name
                - tcp_health_check.0.proxy_header
                - tcp_health_check.0.port_specification
              description: |
                The bytes to match against the beginning of the response data. If left empty
                (the default value), any response will indicate health. The response data
                can only be ASCII.
            - !ruby/object:Api::Type::Integer
              name: 'port'
              at_least_one_of:
                - tcp_health_check.0.request
                - tcp_health_check.0.response
                - tcp_health_check.0.port
                - tcp_health_check.0.port_name
                - tcp_health_check.0.proxy_header
                - tcp_health_check.0.port_specification
              description: |
                The TCP port number for the TCP health check request.
                The default value is 443.
            - !ruby/object:Api::Type::String
              name: 'portName'
              at_least_one_of:
                - tcp_health_check.0.request
                - tcp_health_check.0.response
                - tcp_health_check.0.port
                - tcp_health_check.0.port_name
                - tcp_health_check.0.proxy_header
                - tcp_health_check.0.port_specification
              description: |
                Port name as defined in InstanceGroup#NamedPort#name. If both port and
                port_name are defined, port takes precedence.
            - !ruby/object:Api::Type::Enum
              name: 'proxyHeader'
              at_least_one_of:
                - tcp_health_check.0.request
                - tcp_health_check.0.response
                - tcp_health_check.0.port
                - tcp_health_check.0.port_name
                - tcp_health_check.0.proxy_header
                - tcp_health_check.0.port_specification
              description: |
                Specifies the type of proxy header to append before sending data to the
                backend.
              values:
                - :NONE
                - :PROXY_V1
              default_value: :NONE
            - !ruby/object:Api::Type::Enum
              name: 'portSpecification'
              at_least_one_of:
                - tcp_health_check.0.request
                - tcp_health_check.0.response
                - tcp_health_check.0.port
                - tcp_health_check.0.port_name
                - tcp_health_check.0.proxy_header
                - tcp_health_check.0.port_specification
              description: |
                Specifies how port is selected for health checking, can be one of the
                following values:

                  * `USE_FIXED_PORT`: The port number in `port` is used for health checking.

                  * `USE_NAMED_PORT`: The `portName` is used for health checking.

                  * `USE_SERVING_PORT`: For NetworkEndpointGroup, the port specified for each
                  network endpoint is used for health checking. For other backends, the
                  port or named port specified in the Backend Service is used for health
                  checking.

                If not specified, TCP health check follows behavior specified in `port` and
                `portName` fields.
              values:
                - :USE_FIXED_PORT
                - :USE_NAMED_PORT
                - :USE_SERVING_PORT
      - !ruby/object:Api::Type::NestedObject
        name: 'sslHealthCheck'
        exactly_one_of:
          - http_health_check
          - https_health_check
          - http2_health_check
          - tcp_health_check
          - ssl_health_check
          - grpc_health_check
        properties:
            - !ruby/object:Api::Type::String
              name: 'request'
              at_least_one_of:
                - ssl_health_check.0.request
                - ssl_health_check.0.response
                - ssl_health_check.0.port
                - ssl_health_check.0.port_name
                - ssl_health_check.0.proxy_header
                - ssl_health_check.0.port_specification
              description: |
                The application data to send once the SSL connection has been
                established (default value is empty). If both request and response are
                empty, the connection establishment alone will indicate health. The request
                data can only be ASCII.
            - !ruby/object:Api::Type::String
              name: 'response'
              at_least_one_of:
                - ssl_health_check.0.request
                - ssl_health_check.0.response
                - ssl_health_check.0.port
                - ssl_health_check.0.port_name
                - ssl_health_check.0.proxy_header
                - ssl_health_check.0.port_specification
              description: |
                The bytes to match against the beginning of the response data. If left empty
                (the default value), any response will indicate health. The response data
                can only be ASCII.
            - !ruby/object:Api::Type::Integer
              name: 'port'
              at_least_one_of:
                - ssl_health_check.0.request
                - ssl_health_check.0.response
                - ssl_health_check.0.port
                - ssl_health_check.0.port_name
                - ssl_health_check.0.proxy_header
                - ssl_health_check.0.port_specification
              description: |
                The TCP port number for the SSL health check request.
                The default value is 443.
            - !ruby/object:Api::Type::String
              name: 'portName'
              at_least_one_of:
                - ssl_health_check.0.request
                - ssl_health_check.0.response
                - ssl_health_check.0.port
                - ssl_health_check.0.port_name
                - ssl_health_check.0.proxy_header
                - ssl_health_check.0.port_specification
              description: |
                Port name as defined in InstanceGroup#NamedPort#name. If both port and
                port_name are defined, port takes precedence.
            - !ruby/object:Api::Type::Enum
              name: 'proxyHeader'
              at_least_one_of:
                - ssl_health_check.0.request
                - ssl_health_check.0.response
                - ssl_health_check.0.port
                - ssl_health_check.0.port_name
                - ssl_health_check.0.proxy_header
                - ssl_health_check.0.port_specification
              description: |
                Specifies the type of proxy header to append before sending data to the
                backend.
              values:
                - :NONE
                - :PROXY_V1
              default_value: :NONE
            - !ruby/object:Api::Type::Enum
              name: 'portSpecification'
              at_least_one_of:
                - ssl_health_check.0.request
                - ssl_health_check.0.response
                - ssl_health_check.0.port
                - ssl_health_check.0.port_name
                - ssl_health_check.0.proxy_header
                - ssl_health_check.0.port_specification
              description: |
                Specifies how port is selected for health checking, can be one of the
                following values:

                  * `USE_FIXED_PORT`: The port number in `port` is used for health checking.

                  * `USE_NAMED_PORT`: The `portName` is used for health checking.

                  * `USE_SERVING_PORT`: For NetworkEndpointGroup, the port specified for each
                  network endpoint is used for health checking. For other backends, the
                  port or named port specified in the Backend Service is used for health
                  checking.

                If not specified, SSL health check follows behavior specified in `port` and
                `portName` fields.
              values:
                - :USE_FIXED_PORT
                - :USE_NAMED_PORT
                - :USE_SERVING_PORT
      - !ruby/object:Api::Type::NestedObject
        name: 'http2HealthCheck'
        exactly_one_of:
          - http_health_check
          - https_health_check
          - http2_health_check
          - tcp_health_check
          - ssl_health_check
          - grpc_health_check
        properties:
            - !ruby/object:Api::Type::String
              name: 'host'
              at_least_one_of:
                - http2_health_check.0.host
                - http2_health_check.0.request_path
                - http2_health_check.0.response
                - http2_health_check.0.port
                - http2_health_check.0.port_name
                - http2_health_check.0.proxy_header
                - http2_health_check.0.port_specification
              description: |
                The value of the host header in the HTTP2 health check request.
                If left empty (default value), the public IP on behalf of which this health
                check is performed will be used.
            - !ruby/object:Api::Type::String
              name: 'requestPath'
              at_least_one_of:
                - http2_health_check.0.host
                - http2_health_check.0.request_path
                - http2_health_check.0.response
                - http2_health_check.0.port
                - http2_health_check.0.port_name
                - http2_health_check.0.proxy_header
                - http2_health_check.0.port_specification
              description: |
                The request path of the HTTP2 health check request.
                The default value is /.
              default_value: "/"
            - !ruby/object:Api::Type::String
              name: 'response'
              at_least_one_of:
                - http2_health_check.0.host
                - http2_health_check.0.request_path
                - http2_health_check.0.response
                - http2_health_check.0.port
                - http2_health_check.0.port_name
                - http2_health_check.0.proxy_header
                - http2_health_check.0.port_specification
              description: |
                The bytes to match against the beginning of the response data. If left empty
                (the default value), any response will indicate health. The response data
                can only be ASCII.
            - !ruby/object:Api::Type::Integer
              name: 'port'
              at_least_one_of:
                - http2_health_check.0.host
                - http2_health_check.0.request_path
                - http2_health_check.0.response
                - http2_health_check.0.port
                - http2_health_check.0.port_name
                - http2_health_check.0.proxy_header
                - http2_health_check.0.port_specification
              description: |
                The TCP port number for the HTTP2 health check request.
                The default value is 443.
            - !ruby/object:Api::Type::String
              name: 'portName'
              at_least_one_of:
                - http2_health_check.0.host
                - http2_health_check.0.request_path
                - http2_health_check.0.response
                - http2_health_check.0.port
                - http2_health_check.0.port_name
                - http2_health_check.0.proxy_header
                - http2_health_check.0.port_specification
              description: |
                Port name as defined in InstanceGroup#NamedPort#name. If both port and
                port_name are defined, port takes precedence.
            - !ruby/object:Api::Type::Enum
              name: 'proxyHeader'
              at_least_one_of:
                - http2_health_check.0.host
                - http2_health_check.0.request_path
                - http2_health_check.0.response
                - http2_health_check.0.port
                - http2_health_check.0.port_name
                - http2_health_check.0.proxy_header
                - http2_health_check.0.port_specification
              description: |
                Specifies the type of proxy header to append before sending data to the
                backend.
              values:
                - :NONE
                - :PROXY_V1
              default_value: :NONE
            - !ruby/object:Api::Type::Enum
              name: 'portSpecification'
              at_least_one_of:
                - http2_health_check.0.host
                - http2_health_check.0.request_path
                - http2_health_check.0.response
                - http2_health_check.0.port
                - http2_health_check.0.port_name
                - http2_health_check.0.proxy_header
                - http2_health_check.0.port_specification
              description: |
                Specifies how port is selected for health checking, can be one of the
                following values:

                  * `USE_FIXED_PORT`: The port number in `port` is used for health checking.

                  * `USE_NAMED_PORT`: The `portName` is used for health checking.

                  * `USE_SERVING_PORT`: For NetworkEndpointGroup, the port specified for each
                  network endpoint is used for health checking. For other backends, the
                  port or named port specified in the Backend Service is used for health
                  checking.

                If not specified, HTTP2 health check follows behavior specified in `port` and
                `portName` fields.
              values:
                - :USE_FIXED_PORT
                - :USE_NAMED_PORT
                - :USE_SERVING_PORT
      - !ruby/object:Api::Type::NestedObject
        name: 'grpcHealthCheck'
        exactly_one_of:
          - http_health_check
          - https_health_check
          - http2_health_check
          - tcp_health_check
          - ssl_health_check
          - grpc_health_check
        properties:
            - !ruby/object:Api::Type::Integer
              name: 'port'
              at_least_one_of:
                - grpc_health_check.0.port
                - grpc_health_check.0.port_name
                - grpc_health_check.0.port_specification
                - grpc_health_check.0.grpc_service_name
              description: |
                The port number for the health check request.
                Must be specified if portName and portSpecification are not set
                or if port_specification is USE_FIXED_PORT. Valid values are 1 through 65535.
            - !ruby/object:Api::Type::String
              name: 'portName'
              at_least_one_of:
                - grpc_health_check.0.port
                - grpc_health_check.0.port_name
                - grpc_health_check.0.port_specification
                - grpc_health_check.0.grpc_service_name
              description: |
                Port name as defined in InstanceGroup#NamedPort#name. If both port and
                port_name are defined, port takes precedence.
            - !ruby/object:Api::Type::Enum
              name: 'portSpecification'
              at_least_one_of:
                - grpc_health_check.0.port
                - grpc_health_check.0.port_name
                - grpc_health_check.0.port_specification
                - grpc_health_check.0.grpc_service_name
              description: |
                Specifies how port is selected for health checking, can be one of the
                following values:

                  * `USE_FIXED_PORT`: The port number in `port` is used for health checking.

                  * `USE_NAMED_PORT`: The `portName` is used for health checking.

                  * `USE_SERVING_PORT`: For NetworkEndpointGroup, the port specified for each
                  network endpoint is used for health checking. For other backends, the
                  port or named port specified in the Backend Service is used for health
                  checking.

                If not specified, gRPC health check follows behavior specified in `port` and
                `portName` fields.
              values:
                - :USE_FIXED_PORT
                - :USE_NAMED_PORT
                - :USE_SERVING_PORT
            - !ruby/object:Api::Type::String
              name: 'grpcServiceName'
              at_least_one_of:
                - grpc_health_check.0.port
                - grpc_health_check.0.port_name
                - grpc_health_check.0.port_specification
                - grpc_health_check.0.grpc_service_name
              description: |
                The gRPC service name for the health check.
                The value of grpcServiceName has the following meanings by convention:
                  - Empty serviceName means the overall status of all services at the backend.
                  - Non-empty serviceName means the health of that gRPC service, as defined by the owner of the service.
                The grpcServiceName can only be ASCII.
      - !ruby/object:Api::Type::NestedObject
        name: 'logConfig'
        description: |
          Configure logging on this health check.
        properties:
            - !ruby/object:Api::Type::Boolean
              name: 'enable'
              description: |
                Indicates whether or not to export logs. This is false by default,
                which means no health check logging will be done.
              default_value: false
  - !ruby/object:Api::Resource
    name: 'InstanceTemplate'
    kind: 'compute#instanceTemplate'
    input: true
    base_url: projects/{{project}}/global/instanceTemplates
    collection_url_key: 'items'
    has_self_link: true
    description: |
      Defines an Instance Template resource that provides configuration settings
      for your virtual machine instances. Instance templates are not tied to the
      lifetime of an instance and can be used and reused as to deploy virtual
      machines. You can also use different templates to create different virtual
      machine configurations. Instance templates are required when you create a
      managed instance group.

      Tip: Disks should be set to autoDelete=true
      so that leftover disks are not left behind on machine deletion.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource. Provide this property when
          you create the resource.
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: |
          The unique identifier for the resource. This identifier
          is defined by the server.
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. The name is 1-63 characters long
          and complies with RFC1035.
        required: true
      - !ruby/object:Api::Type::NestedObject
        name: 'properties'
        description: 'The instance properties for this instance template.'
        properties:
          - !ruby/object:Api::Type::Boolean
            name: 'canIpForward'
            description: |
              Enables instances created based on this template to send packets
              with source IP addresses other than their own and receive packets
              with destination IP addresses other than their own. If these
              instances will be used as an IP gateway or it will be set as the
              next-hop in a Route resource, specify true. If unsure, leave this
              set to false.
          - !ruby/object:Api::Type::String
            name: 'description'
            description: |
              An optional text description for the instances that are created
              from this instance template.
          - !ruby/object:Api::Type::Array
            name: 'disks'
            description: |
              An array of disks that are associated with the instances that are
              created from this template.
            item_type: !ruby/object:Api::Type::NestedObject
              properties:
                - !ruby/object:Api::Type::Array
                  name: 'licenses'
                  description: Any applicable license URI.
                  item_type: Api::Type::String
                  output: true
                - !ruby/object:Api::Type::Boolean
                  name: 'autoDelete'
                  description: |
                    Specifies whether the disk will be auto-deleted when the
                    instance is deleted (but not when the disk is detached from
                    the instance).

                    Tip: Disks should be set to autoDelete=true
                    so that leftover disks are not left behind on machine
                    deletion.
                - !ruby/object:Api::Type::Boolean
                  name: 'boot'
                  description: |
                    Indicates that this is a boot disk. The virtual machine will
                    use the first partition of the disk for its root filesystem.
                - !ruby/object:Api::Type::String
                  name: 'deviceName'
                  description: |
                    Specifies a unique device name of your choice that is
                    reflected into the /dev/disk/by-id/google-* tree of a Linux
                    operating system running within the instance. This name can
                    be used to reference the device for mounting, resizing, and
                    so on, from within the instance.
                - !ruby/object:Api::Type::NestedObject
                  name: 'diskEncryptionKey'
                  description: |
                    Encrypts or decrypts a disk using a customer-supplied
                    encryption key.
                  properties:
                    - !ruby/object:Api::Type::String
                      name: 'rawKey'
                      description: |
                        Specifies a 256-bit customer-supplied encryption key,
                        encoded in RFC 4648 base64 to either encrypt or decrypt
                        this resource.
                    - !ruby/object:Api::Type::String
                      name: 'rsaEncryptedKey'
                      description: |
                        Specifies an RFC 4648 base64 encoded, RSA-wrapped
                        2048-bit customer-supplied encryption key to either
                        encrypt or decrypt this resource.
                    - !ruby/object:Api::Type::String
                      name: 'sha256'
                      description: |
                        The RFC 4648 base64 encoded SHA-256 hash of the
                        customer-supplied encryption key that protects this
                        resource.
                      output: true
                - !ruby/object:Api::Type::Integer
                  name: 'index'
                  description: |
                    Assigns a zero-based index to this disk, where 0 is
                    reserved for the boot disk. For example, if you have many
                    disks attached to an instance, each disk would have a
                    unique index number. If not specified, the server will
                    choose an appropriate value.
                - !ruby/object:Api::Type::NestedObject
                  name: 'initializeParams'
                  description: |
                    Specifies the parameters for a new disk that will be
                    created alongside the new instance. Use initialization
                    parameters to create boot disks or local SSDs attached to
                    the new instance.
                  input: true
                  properties:
                    - !ruby/object:Api::Type::String
                      name: 'diskName'
                      description: |
                        Specifies the disk name. If not specified, the default
                        is to use the name of the instance.
                    - !ruby/object:Api::Type::Integer
                      name: 'diskSizeGb'
                      description: Specifies the size of the disk in base-2 GB.
                    # diskStorageType - deprecated
                    - !ruby/object:Api::Type::ResourceRef
                      name: 'diskType'
                      description: |
                        Reference to a disk type.
                        Specifies the disk type to use to create the instance.
                        If not specified, the default is pd-standard.
                      resource: 'DiskType'
                      imports: 'selfLink'
                    - !ruby/object:Api::Type::String
                      name: 'sourceImage'
                      description: |
                        The source image to create this disk. When creating a
                        new instance, one of initializeParams.sourceImage or
                        disks.source is required.  To create a disk with one of
                        the public operating system images, specify the image
                        by its family name.
                    - !ruby/object:Api::Type::NestedObject
                      name: 'sourceImageEncryptionKey'
                      description: |
                        The customer-supplied encryption key of the source
                        image. Required if the source image is protected by a
                        customer-supplied encryption key.

                        Instance templates do not store customer-supplied
                        encryption keys, so you cannot create disks for
                        instances in a managed instance group if the source
                        images are encrypted with your own keys.
                      properties:
                        - !ruby/object:Api::Type::String
                          name: 'rawKey'
                          description: |
                            Specifies a 256-bit customer-supplied encryption
                            key, encoded in RFC 4648 base64 to either encrypt
                            or decrypt this resource.
                        - !ruby/object:Api::Type::String
                          name: 'sha256'
                          description: |
                            The RFC 4648 base64 encoded SHA-256 hash of the
                            customer-supplied encryption key that protects this
                            resource.
                          output: true
                - !ruby/object:Api::Type::Enum
                  name: 'interface'
                  description: |
                    Specifies the disk interface to use for attaching this
                    disk, which is either SCSI or NVME. The default is SCSI.
                    Persistent disks must always use SCSI and the request will
                    fail if you attempt to attach a persistent disk in any
                    other format than SCSI.
                  values:
                    - :SCSI
                    - :NVME
              # Ignoring kind - It's a constant and we don't need it.
              # TODO(alexstephen): Place in licenses - it's a Array of
              # ResourceRefs
                - !ruby/object:Api::Type::Enum
                  name: 'mode'
                  description: |
                    The mode in which to attach this disk, either READ_WRITE or
                    READ_ONLY. If not specified, the default is to attach the
                    disk in READ_WRITE mode.
                  values:
                    - :READ_WRITE
                    - :READ_ONLY
                # This is the name, not selfLink of a disk.
                - !ruby/object:Api::Type::ResourceRef
                  name: 'source'
                  resource: 'Disk'
                  imports: 'name'
                  description: |
                    Reference to a disk. When creating a new instance,
                    one of initializeParams.sourceImage or disks.source is required.

                    If desired, you can also attach existing non-root
                    persistent disks using this property. This field is only
                    applicable for persistent disks.

                    Note that for InstanceTemplate, specify the disk name, not
                    the URL for the disk.
                - !ruby/object:Api::Type::Enum
                  name: 'type'
                  description: |
                    Specifies the type of the disk, either SCRATCH or
                    PERSISTENT. If not specified, the default is PERSISTENT.
                  values:
                    - :SCRATCH
                    - :PERSISTENT
          - !ruby/object:Api::Type::KeyValuePairs
            name: 'labels'
            description: Labels to apply to this address.  A list of key->value pairs.
          # This machineType seems to be the shortname.
          # This is because machineType selfLinks are zone specific.
          - !ruby/object:Api::Type::ResourceRef
            name: 'machineType'
            description: |
              The machine type to use in the VM instance template.
            # InstanceTemplates take a name. Instances take a self-link
            required: true
            resource: 'MachineType'
            imports: 'name'
          - !ruby/object:Api::Type::String
            name: 'minCpuPlatform'
            description: |
              Specifies a minimum CPU platform for the VM instance. Applicable
              values are the friendly names of CPU platforms
          # TODO(nelsonjr): Implement updating metadata *after* resource is created.

          # Expose instance 'metadata' as a simple name/value pair hash. However the API
          # defines metadata as a NestedObject with the following layout:
          #
          # metadata {
          #   fingerprint: 'hash-of-last-metadata'
          #   items: [
          #     {
          #       key: 'metadata1-key'
          #       value: 'metadata1-value'
          #     },
          #     ...
          #   ]
          # }
          #
          # Fingerprint is an optimistic locking mechanism for updates, which requires
          # adding the 'fingerprint' of the last metadata to allow update.
          #
          # To comply with the API please add an encoder: and decoder: to the provider.
          - !ruby/object:Api::Type::KeyValuePairs
            name: 'metadata'
            description: |
              The metadata key/value pairs to assign to instances that are
              created from this template. These pairs can consist of custom
              metadata or predefined keys.
          - !ruby/object:Api::Type::Array
            name: 'guestAccelerators'
            description: |
              List of the type and count of accelerator cards attached to the
              instance
            item_type: !ruby/object:Api::Type::NestedObject
               properties:
                - !ruby/object:Api::Type::Integer
                  name: 'acceleratorCount'
                  description: |
                    The number of the guest accelerator cards exposed to this
                    instance.
                # TODO(alexstephen): Change to ResourceRef once AcceleratorType is
                # created.
                - !ruby/object:Api::Type::String
                  name: 'acceleratorType'
                  description: |
                    Full or partial URL of the accelerator type resource to expose
                    to this instance.
          - !ruby/object:Api::Type::Array
            name: 'networkInterfaces'
            description: |
              An array of configurations for this interface. This specifies
              how this interface is configured to interact with other
              network services, such as connecting to the internet. Only
              one network interface is supported per instance.
            item_type: !ruby/object:Api::Type::NestedObject
              properties:
                - !ruby/object:Api::Type::Array
                 name: 'accessConfigs'
                 description: |
                   An array of configurations for this interface. Currently, only
                   one access config, ONE_TO_ONE_NAT, is supported. If there are no
                   accessConfigs specified, then this instance will have no
                   external internet access.
                 item_type: !ruby/object:Api::Type::NestedObject
                   properties:
                     # 'kind' is not needed for object convergence
                     - !ruby/object:Api::Type::String
                       name: 'name'
                       description: |
                         The name of this access configuration. The
                         default and recommended name is External NAT but you can
                         use any arbitrary string you would like. For example, My
                         external IP or Network Access.
                       required: true
                     - !ruby/object:Api::Type::ResourceRef
                       name: 'natIP'
                       resource: 'Address'
                       imports: 'address'
                       description: |
                         Reference to an address.
                         An external IP address associated with this instance.
                         Specify an unused static external IP address available to
                         the project or leave this field undefined to use an IP
                         from a shared ephemeral IP address pool. If you specify a
                         static external IP address, it must live in the same
                         region as the zone of the instance.
                     - !ruby/object:Api::Type::Enum
                       name: 'type'
                       description: |
                         The type of configuration. The default and only option is
                         ONE_TO_ONE_NAT.
                       values:
                         - :ONE_TO_ONE_NAT
                       required: true
                     - !ruby/object:Api::Type::Boolean
                       name: 'setPublicPtr'
                       description: |
                         Specifies whether a public DNS PTR record should be
                         created to map the external IP address of the instance
                         to a DNS domain name.
                     - !ruby/object:Api::Type::String
                       name: 'publicPtrDomainName'
                       description: |
                         The DNS domain name for the public PTR record. You can
                         set this field only if the setPublicPtr field is
                         enabled.
                     - !ruby/object:Api::Type::Enum
                       name: 'networkTier'
                       description: |
                         This signifies the networking tier used for configuring
                         this access configuration. If an AccessConfig is
                         specified without a valid external IP address, an
                         ephemeral IP will be created with this networkTier. If an
                         AccessConfig with a valid external IP address is
                         specified, it must match that of the networkTier
                         associated with the Address resource owning that IP.
                       values:
                         - :PREMIUM
                         - :STANDARD
                - !ruby/object:Api::Type::Array
                  name: 'aliasIpRanges'
                  description: |
                    An array of alias IP ranges for this network interface. Can
                    only be specified for network interfaces on subnet-mode
                    networks.
                  item_type: !ruby/object:Api::Type::NestedObject
                    properties:
                      - !ruby/object:Api::Type::String
                        name: 'ipCidrRange'
                        description: |
                          The IP CIDR range represented by this alias IP range.
                          This IP CIDR range must belong to the specified
                          subnetwork and cannot contain IP addresses reserved by
                          system or used by other network interfaces. This range
                          may be a single IP address (e.g. 10.2.3.4), a netmask
                          (e.g. /24) or a CIDR format string (e.g. 10.1.2.0/24).
                      - !ruby/object:Api::Type::String
                        name: 'subnetworkRangeName'
                        description: |
                          Optional subnetwork secondary range name specifying
                          the secondary range from which to allocate the IP
                          CIDR range for this alias IP range. If left
                          unspecified, the primary range of the subnetwork will
                          be used.
                - !ruby/object:Api::Type::String
                  name: 'name'
                  description: |
                    The name of the network interface, generated by the
                    server. For network devices, these are eth0, eth1, etc
                  output: true
                - !ruby/object:Api::Type::ResourceRef
                  name: 'network'
                  resource: 'Network'
                  imports: 'selfLink'
                  description: |
                    Specifies the title of an existing network.  When creating
                    an instance, if neither the network nor the subnetwork is specified,
                    the default network global/networks/default is used; if the network
                    is not specified but the subnetwork is specified, the network is
                    inferred.
                - !ruby/object:Api::Type::String
                  name: 'networkIP'
                  description: |
                    An IPv4 internal network address to assign to the
                    instance for this network interface. If not specified
                    by the user, an unused internal IP is assigned by the
                    system.
                - !ruby/object:Api::Type::ResourceRef
                  name: 'subnetwork'
                  resource: 'Subnetwork'
                  imports: 'selfLink'
                  description: |
                    Reference to a VPC network.
                    If the network resource is in legacy mode, do not
                    provide this property.  If the network is in auto
                    subnet mode, providing the subnetwork is optional. If
                    the network is in custom subnet mode, then this field
                    should be specified.
                # networkInterfaces.kind is not necessary for convergence.
          - !ruby/object:Api::Type::NestedObject
            name: 'scheduling'
            description: Sets the scheduling options for this instance.
            properties:
              - !ruby/object:Api::Type::Boolean
                name: 'automaticRestart'
                description: |
                  Specifies whether the instance should be automatically restarted
                  if it is terminated by Compute Engine (not terminated by a user).
                  You can only set the automatic restart option for standard
                  instances. Preemptible instances cannot be automatically
                  restarted.
              - !ruby/object:Api::Type::String
                name: 'onHostMaintenance'
                description: |
                  Defines the maintenance behavior for this instance. For standard
                  instances, the default behavior is MIGRATE. For preemptible
                  instances, the default and only possible behavior is TERMINATE.
                  For more information, see Setting Instance Scheduling Options.
              - !ruby/object:Api::Type::Boolean
                name: 'preemptible'
                description: |
                  Defines whether the instance is preemptible. This can only be set
                  during instance creation, it cannot be set or changed after the
                  instance has been created.
          - !ruby/object:Api::Type::Array
            name: 'serviceAccounts'
            description: |
              A list of service accounts, with their specified scopes, authorized
              for this instance. Only one service account per VM instance is
              supported.
            item_type: !ruby/object:Api::Type::NestedObject
              properties:
                - !ruby/object:Api::Type::String
                  name: 'email'
                  description: Email address of the service account.
                - !ruby/object:Api::Type::Array
                  name: scopes
                  description: |
                    The list of scopes to be made available for this service
                    account.
                  item_type: Api::Type::String
          - !ruby/object:Api::Type::NestedObject
            name: 'tags'
            description: |
              A list of tags to apply to this instance. Tags are used to identify
              valid sources or targets for network firewalls and are specified by
              the client during instance creation. The tags can be later modified
              by the setTags method. Each tag within the list must comply with
              RFC1035.
            properties:
              # TODO(alexstephen) Investigate bytes type
              - !ruby/object:Api::Type::String
                name: 'fingerprint'
                description: |
                  Specifies a fingerprint for this request, which is essentially a
                  hash of the metadata's contents and used for optimistic locking.
                  The fingerprint is initially generated by Compute Engine and
                  changes after every request to modify or update metadata. You
                  must always provide an up-to-date fingerprint hash in order to
                  update or change metadata.
              - !ruby/object:Api::Type::Array
                name: 'items'
                description: |
                  An array of tags. Each tag must be 1-63 characters long, and
                  comply with RFC1035.
                item_type: Api::Type::String
  - !ruby/object:Api::Resource
    name: 'License'
    kind: 'compute#license'
    base_url: /projects/{{project}}/global/licenses
    collection_url_key: 'items'
    readonly: true
    has_self_link: true
    description: |
      A License resource represents a software license. Licenses are used to
      track software usage in images, persistent disks, snapshots, and virtual
      machine instances.
    properties:
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. The name is 1-63 characters long
          and complies with RFC1035.
        output: true
      - !ruby/object:Api::Type::Boolean
        name: 'chargesUseFee'
        description: |
          If true, the customer will be charged license fee for
          running software that contains this license on an instance.
        output: true
  - !ruby/object:Api::Resource
    name: 'Image'
    kind: 'compute#image'
    base_url: projects/{{project}}/global/images
    input: true
    has_self_link: true
    collection_url_key: 'items'
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation': 'https://cloud.google.com/compute/docs/images'
      api: 'https://cloud.google.com/compute/docs/reference/v1/images'
    description: |
      Represents an Image resource.

      Google Compute Engine uses operating system images to create the root
      persistent disks for your instances. You specify an image when you create
      an instance. Images contain a boot loader, an operating system, and a
      root file system. Linux operating system images are also capable of
      running containers on Compute Engine.

      Images can be either public or custom.

      Public images are provided and maintained by Google, open-source
      communities, and third-party vendors. By default, all projects have
      access to these images and can use them to create instances.  Custom
      images are available only to your project. You can create a custom image
      from root persistent disks and other images. Then, use the custom image
      to create an instance.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      - !ruby/object:Api::Type::Integer
        name: 'archiveSizeBytes'
        description: |
          Size of the image tar.gz archive stored in Google Cloud Storage (in
          bytes).
        output: true
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::NestedObject
        name: 'deprecated'
        description: The deprecation status associated with this image.
        output: true
        properties:
          - !ruby/object:Api::Type::Time
            name: 'deleted'
            description: |
              An optional RFC3339 timestamp on or after which the state of this
              resource is intended to change to DELETED. This is only
              informational and the status will not change unless the client
              explicitly changes it.
          - !ruby/object:Api::Type::Time
            name: 'deprecated'
            description: |
              An optional RFC3339 timestamp on or after which the state of this
              resource is intended to change to DEPRECATED. This is only
              informational and the status will not change unless the client
              explicitly changes it.
          - !ruby/object:Api::Type::Time
            name: 'obsolete'
            description: |
              An optional RFC3339 timestamp on or after which the state of this
              resource is intended to change to OBSOLETE. This is only
              informational and the status will not change unless the client
              explicitly changes it.
          - !ruby/object:Api::Type::String
            name: 'replacement'
            description: |
              The URL of the suggested replacement for a deprecated resource.
              The suggested replacement resource must be the same kind of
              resource as the deprecated resource.
          - !ruby/object:Api::Type::Enum
            name: 'state'
            description: |
              The deprecation state of this resource. This can be DEPRECATED,
              OBSOLETE, or DELETED. Operations which create a new resource
              using a DEPRECATED resource will return successfully, but with a
              warning indicating the deprecated resource and recommending its
              replacement. Operations which use OBSOLETE or DELETED resources
              will be rejected and result in an error.
            values:
              - :DEPRECATED
              - :OBSOLETE
              - :DELETED
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource. Provide this property when
          you create the resource.
      - !ruby/object:Api::Type::Integer
        name: 'diskSizeGb'
        description: |
          Size of the image when restored onto a persistent disk (in GB).
      # TODO(alexstephen): Build family support.
      # Families use a different API
      - !ruby/object:Api::Type::String
        name: 'family'
        description: |
          The name of the image family to which this image belongs. You can
          create disks by specifying an image family instead of a specific
          image name. The image family always returns its latest image that is
          not deprecated. The name of the image family must comply with
          RFC1035.
      - !ruby/object:Api::Type::Array
        name: 'guestOsFeatures'
        description: |
            A list of features to enable on the guest operating system.
            Applicable only for bootable images.
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::Enum
              name: 'type'
              required: true
              description: |
                The type of supported feature. Read [Enabling guest operating system features](https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features) to see a list of available options.
              values:
                - :MULTI_IP_SUBNET
                - :SECURE_BOOT
                - :SEV_CAPABLE
                - :UEFI_COMPATIBLE
                - :VIRTIO_SCSI_MULTIQUEUE
                - :WINDOWS
                - :GVNIC
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: |
          The unique identifier for the resource. This identifier
          is defined by the server.
        output: true
      - !ruby/object:Api::Type::NestedObject
        name: 'imageEncryptionKey'
        description: |
          Encrypts the image using a customer-supplied encryption key.

          After you encrypt an image with a customer-supplied key, you must
          provide the same key if you use the image later (e.g. to create a
          disk from the image)
        properties:
          - !ruby/object:Api::Type::String
            name: 'rawKey'
            description: |
              Specifies a 256-bit customer-supplied encryption key, encoded in
              RFC 4648 base64 to either encrypt or decrypt this resource.
          - !ruby/object:Api::Type::String
            name: 'sha256'
            description: |
              The RFC 4648 base64 encoded SHA-256 hash of the
              customer-supplied encryption key that protects this resource.
            output: true
          - !ruby/object:Api::Type::String
            # TODO(chrisst) Change to ResourceRef once KMS is in Magic Modules
            name: 'kmsKeyName'
            min_version: beta
            description: |
              The name of the encryption key that is stored in Google Cloud KMS.
      - !ruby/object:Api::Type::KeyValuePairs
        name: 'labels'
        description: Labels to apply to this Image.
        update_verb: :POST
        update_url: 'projects/{{project}}/global/images/{{name}}/setLabels'
      - !ruby/object:Api::Type::Fingerprint
        name: 'labelFingerprint'
        description: |
          The fingerprint used for optimistic locking of this resource. Used
          internally during updates.
        update_url: 'projects/{{project}}/global/images/{{name}}/setLabels'
        update_verb: :POST
      - !ruby/object:Api::Type::Array
        name: 'licenses'
        description: Any applicable license URI.
        item_type: !ruby/object:Api::Type::ResourceRef
          name: 'license'
          description: 'An applicable license URI'
          resource: 'License'
          imports: 'selfLink'
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource; provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and
          match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means
          the first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the
          last character, which cannot be a dash.
        required: true
      - !ruby/object:Api::Type::NestedObject
        name: 'rawDisk'
        description: The parameters of the raw disk image.
        properties:
          - !ruby/object:Api::Type::Enum
            name: 'containerType'
            description: |
              The format used to encode and transmit the block device, which
              should be TAR. This is just a container and transmission format
              and not a runtime format. Provided by the client when the disk
              image is created.
            values:
              - :TAR
          - !ruby/object:Api::Type::String
            name: 'sha1Checksum'
            description: |
              An optional SHA1 checksum of the disk image before unpackaging.
              This is provided by the client when the disk image is created.
          # TODO(alexstephen): Figure out cross-module ResourceRefs
          - !ruby/object:Api::Type::String
            name: 'source'
            required: true
            description: |
              The full Google Cloud Storage URL where disk storage is stored
              You must provide either this property or the sourceDisk property
              but not both.
      - !ruby/object:Api::Type::ResourceRef
        name: 'sourceDisk'
        description: |
          The source disk to create this image based on.
          You must provide either this property or the
          rawDisk.source property but not both to create an image.
        resource: 'Disk'
        imports: 'selfLink'
      - !ruby/object:Api::Type::NestedObject
        name: 'sourceDiskEncryptionKey'
        description: |
          The customer-supplied encryption key of the source disk. Required if
          the source disk is protected by a customer-supplied encryption key.
        properties:
          - !ruby/object:Api::Type::String
            name: 'rawKey'
            description: |
              Specifies a 256-bit customer-supplied encryption key, encoded in
              RFC 4648 base64 to either encrypt or decrypt this resource.
          - !ruby/object:Api::Type::String
            name: 'sha256'
            description: |
              The RFC 4648 base64 encoded SHA-256 hash of the
              customer-supplied encryption key that protects this resource.
            output: true
          - !ruby/object:Api::Type::String
            # TODO(chrisst) Change to ResourceRef once KMS is in Magic Modules
            name: 'kmsKeyName'
            min_version: beta
            description: |
              The name of the encryption key that is stored in Google Cloud KMS.
      - !ruby/object:Api::Type::String
        name: 'sourceDiskId'
        description: |
          The ID value of the disk used to create this image. This value may
          be used to determine whether the image was taken from the current
          or a previous instance of a given disk name.
      - !ruby/object:Api::Type::ResourceRef
        name: 'sourceImage'
        description: |
          URL of the source image used to create this image. In order to create an image, you must provide the full or partial
          URL of one of the following:

          * The selfLink URL
          * This property
          * The rawDisk.source URL
          * The sourceDisk URL
        resource: 'Image'
        imports: 'selfLink'
      - !ruby/object:Api::Type::ResourceRef
        name: 'sourceSnapshot'
        description: |
          URL of the source snapshot used to create this image.

          In order to create an image, you must provide the full or partial URL of one of the following:

          * The selfLink URL
          * This property
          * The sourceImage URL
          * The rawDisk.source URL
          * The sourceDisk URL
        resource: 'Snapshot'
        imports: 'selfLink'
      - !ruby/object:Api::Type::Enum
        name: 'sourceType'
        description: |
          The type of the image used to create this disk. The default and
          only value is RAW
        values:
          - :RAW
      - !ruby/object:Api::Type::String
        name: 'selfLink'
        exclude: true
        description: |
          The self link of the image
      - !ruby/object:Api::Type::Enum
        name: 'status'
        output: true
        exclude: true
        description: |
          The status of the image. Either `READY` `PENDING` or `FAILED`.
        values:
          - :READY
          - :PENDING
          - :FAILED
      # State is not applicable for state convergence.
  - !ruby/object:Api::Resource
    name: 'Instance'
    kind: 'compute#instance'
    base_url: projects/{{project}}/zones/{{zone}}/instances
    collection_url_key: 'items'
    input: true
    has_self_link: true
    description: |
       An instance is a virtual machine (VM) hosted on Google's infrastructure.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/zones/{{zone}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'zone'
        resource: 'Zone'
        imports: 'name'
        description: 'A reference to the zone where the machine resides.'
        required: true
    properties:
      - !ruby/object:Api::Type::Boolean
        name: 'canIpForward'
        description: |
          Allows this instance to send and receive packets with non-matching
          destination or source IPs. This is required if you plan to use this
          instance to forward routes.
      - !ruby/object:Api::Type::String
        name: 'cpuPlatform'
        description: The CPU platform used by this instance.
        output: true
      - !ruby/object:Api::Type::String
        name: 'creationTimestamp'
        description: Creation timestamp in RFC3339 text format.
        output: true
      - !ruby/object:Api::Type::Boolean
        name: 'deletionProtection'
        description: Whether the resource should be protected against deletion.
        # The code for this update is custom because MM doesn't support
        # sending empty bodies + the new option as a request parameter.
        update_verb: :POST
        update_url: /projects/{{project}}/zones/{{zone}}/instances/{resourceId}/setDeletionProtection
      - !ruby/object:Api::Type::Array
        name: 'disks'
        description: |
          An array of disks that are associated with the instances that are
          created from this template.
        input: true
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::Boolean
              name: 'autoDelete'
              description: |
                Specifies whether the disk will be auto-deleted when the
                instance is deleted (but not when the disk is detached from
                the instance).

                Tip: Disks should be set to autoDelete=true
                so that leftover disks are not left behind on machine
                deletion.
            - !ruby/object:Api::Type::Boolean
              name: 'boot'
              description: |
                Indicates that this is a boot disk. The virtual machine will
                use the first partition of the disk for its root filesystem.
            - !ruby/object:Api::Type::String
              name: 'deviceName'
              description: |
                Specifies a unique device name of your choice that is
                reflected into the /dev/disk/by-id/google-* tree of a Linux
                operating system running within the instance. This name can
                be used to reference the device for mounting, resizing, and
                so on, from within the instance.
            - !ruby/object:Api::Type::NestedObject
              name: 'diskEncryptionKey'
              description: |
                Encrypts or decrypts a disk using a customer-supplied
                encryption key.
              properties:
                - !ruby/object:Api::Type::String
                  name: 'rawKey'
                  description: |
                    Specifies a 256-bit customer-supplied encryption key,
                    encoded in RFC 4648 base64 to either encrypt or decrypt
                    this resource.
                - !ruby/object:Api::Type::String
                  name: 'rsaEncryptedKey'
                  description: |
                    Specifies an RFC 4648 base64 encoded, RSA-wrapped
                    2048-bit customer-supplied encryption key to either
                    encrypt or decrypt this resource.
                - !ruby/object:Api::Type::String
                  name: 'sha256'
                  description: |
                    The RFC 4648 base64 encoded SHA-256 hash of the
                    customer-supplied encryption key that protects this
                    resource.
                  output: true
            - !ruby/object:Api::Type::Integer
              name: 'index'
              description: |
                Assigns a zero-based index to this disk, where 0 is
                reserved for the boot disk. For example, if you have many
                disks attached to an instance, each disk would have a
                unique index number. If not specified, the server will
                choose an appropriate value.
            - !ruby/object:Api::Type::NestedObject
              name: 'initializeParams'
              description: |
                Specifies the parameters for a new disk that will be
                created alongside the new instance. Use initialization
                parameters to create boot disks or local SSDs attached to
                the new instance.
              input: true
              properties:
                - !ruby/object:Api::Type::String
                  name: 'diskName'
                  description: |
                    Specifies the disk name. If not specified, the default
                    is to use the name of the instance.
                - !ruby/object:Api::Type::Integer
                  name: 'diskSizeGb'
                  description: Specifies the size of the disk in base-2 GB.
                # diskStorageType - deprecated
                - !ruby/object:Api::Type::ResourceRef
                  name: 'diskType'
                  description: |
                    Reference to a disk type.
                    Specifies the disk type to use to create the instance.
                    If not specified, the default is pd-standard.
                  resource: 'DiskType'
                  imports: 'selfLink'
                - !ruby/object:Api::Type::String
                  name: 'sourceImage'
                  description: |
                    The source image to create this disk. When creating a
                    new instance, one of initializeParams.sourceImage or
                    disks.source is required.  To create a disk with one of
                    the public operating system images, specify the image
                    by its family name.
                - !ruby/object:Api::Type::NestedObject
                  name: 'sourceImageEncryptionKey'
                  description: |
                    The customer-supplied encryption key of the source
                    image. Required if the source image is protected by a
                    customer-supplied encryption key.

                    Instance templates do not store customer-supplied
                    encryption keys, so you cannot create disks for
                    instances in a managed instance group if the source
                    images are encrypted with your own keys.
                  properties:
                    - !ruby/object:Api::Type::String
                      name: 'rawKey'
                      description: |
                        Specifies a 256-bit customer-supplied encryption
                        key, encoded in RFC 4648 base64 to either encrypt
                        or decrypt this resource.
                    - !ruby/object:Api::Type::String
                      name: 'sha256'
                      description: |
                        The RFC 4648 base64 encoded SHA-256 hash of the
                        customer-supplied encryption key that protects this
                        resource.
                      output: true
            - !ruby/object:Api::Type::Enum
              name: 'interface'
              description: |
                Specifies the disk interface to use for attaching this
                disk, which is either SCSI or NVME. The default is SCSI.
                Persistent disks must always use SCSI and the request will
                fail if you attempt to attach a persistent disk in any
                other format than SCSI.
              values:
                - :SCSI
                - :NVME
          # Ignoring kind - It's a constant and we don't need it.
          # TODO(alexstephen): Place in licenses - it's a Array of
          # ResourceRefs
            - !ruby/object:Api::Type::Enum
              name: 'mode'
              description: |
                The mode in which to attach this disk, either READ_WRITE or
                READ_ONLY. If not specified, the default is to attach the
                disk in READ_WRITE mode.
              values:
                - :READ_WRITE
                - :READ_ONLY
            # This is the name, not selfLink of a disk.
            - !ruby/object:Api::Type::ResourceRef
              name: 'source'
              resource: 'Disk'
              imports: 'selfLink'
              description: |
                Reference to a disk. When creating a new instance,
                one of initializeParams.sourceImage or disks.source is required.

                If desired, you can also attach existing non-root
                persistent disks using this property. This field is only
                applicable for persistent disks.
            - !ruby/object:Api::Type::Enum
              name: 'type'
              description: |
                Specifies the type of the disk, either SCRATCH or
                PERSISTENT. If not specified, the default is PERSISTENT.
              values:
                - :SCRATCH
                - :PERSISTENT
            - !ruby/object:Api::Type::Array
              name: 'licenses'
              description: 'Any applicable publicly visible licenses.'
              item_type: Api::Type::String
              output: true
      - !ruby/object:Api::Type::Array
        name: 'guestAccelerators'
        description: |
          List of the type and count of accelerator cards attached to the
          instance
        item_type: !ruby/object:Api::Type::NestedObject
           properties:
            - !ruby/object:Api::Type::Integer
              name: 'acceleratorCount'
              description: |
                The number of the guest accelerator cards exposed to this
                instance.
            # TODO(alexstephen): Change to ResourceRef once AcceleratorType is
            # created.
            - !ruby/object:Api::Type::String
              name: 'acceleratorType'
              description: |
                Full or partial URL of the accelerator type resource to expose
                to this instance.
      - !ruby/object:Api::Type::String
        name: 'hostname'
        description: |
          The hostname of the instance to be created. The specified hostname
          must be RFC1035 compliant. If hostname is not specified, the default
          hostname is [INSTANCE_NAME].c.[PROJECT_ID].internal when using the
          global DNS, and [INSTANCE_NAME].[ZONE].c.[PROJECT_ID].internal when
          using zonal DNS.
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: |
          The unique identifier for the resource. This identifier is defined by
          the server.
        output: true
      - !ruby/object:Api::Type::Fingerprint
        name: 'labelFingerprint'
        description: |
          The fingerprint used for optimistic locking of this resource.  Used
          internally during updates.
        update_url: 'projects/{{project}}/zones/{{zone}}/instances/{{name}}/setLabels'
        update_verb: :POST
      - !ruby/object:Api::Type::KeyValuePairs
        name: 'labels'
        description: |
          Labels to apply to this instance.  A list of key->value pairs.
        update_verb: :POST
        update_url: 'projects/{{project}}/zones/{{zone}}/instances/{{name}}/setLabels'
      # TODO(nelsonjr): Implement updating metadata *after* resource is created.

      # Expose instance 'metadata' as a simple name/value pair hash. However the API
      # defines metadata as a NestedObject with the following layout:
      #
      # metadata {
      #   fingerprint: 'hash-of-last-metadata'
      #   items: [
      #     {
      #       key: 'metadata1-key'
      #       value: 'metadata1-value'
      #     },
      #     ...
      #   ]
      # }
      #
      # Fingerprint is an optimistic locking mechanism for updates, which requires
      # adding the 'fingerprint' of the last metadata to allow update.
      #
      # To comply with the API please add an encoder: and decoder: to the provider.
      - !ruby/object:Api::Type::KeyValuePairs
        name: 'metadata'
        description: |
          The metadata key/value pairs to assign to instances that are
          created from this template. These pairs can consist of custom
          metadata or predefined keys.
      - !ruby/object:Api::Type::ResourceRef
        name: 'machineType'
        resource: 'MachineType'
        imports: 'selfLink'
        description: 'A reference to a machine type which defines VM kind.'
        update_url: projects/{{project}}/zones/{{zone}}/instances/{{name}}/setMachineType
        update_verb: :POST
      # TODO(alexstephen): Add metadata
      - !ruby/object:Api::Type::String
        name: 'minCpuPlatform'
        description: |
          Specifies a minimum CPU platform for the VM instance. Applicable
          values are the friendly names of CPU platforms
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          The name of the resource, provided by the client when initially
          creating the resource. The resource name must be 1-63 characters long,
          and comply with RFC1035. Specifically, the name must be 1-63
          characters long and match the regular expression
          `[a-z]([-a-z0-9]*[a-z0-9])?` which means the first character must be a
          lowercase letter, and all following characters must be a dash,
          lowercase letter, or digit, except the last character, which cannot
          be a dash.
      - !ruby/object:Api::Type::Array
        name: 'networkInterfaces'
        description: |
          An array of configurations for this interface. This specifies
          how this interface is configured to interact with other
          network services, such as connecting to the internet. Only
          one network interface is supported per instance.
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::Array
             name: 'accessConfigs'
             description: |
               An array of configurations for this interface. Currently, only
               one access config, ONE_TO_ONE_NAT, is supported. If there are no
               accessConfigs specified, then this instance will have no
               external internet access.
             item_type: !ruby/object:Api::Type::NestedObject
               properties:
                 # 'kind' is not needed for object convergence
                 - !ruby/object:Api::Type::String
                   name: 'name'
                   description: |
                     The name of this access configuration. The
                     default and recommended name is External NAT but you can
                     use any arbitrary string you would like. For example, My
                     external IP or Network Access.
                   required: true
                 - !ruby/object:Api::Type::ResourceRef
                   name: 'natIP'
                   resource: 'Address'
                   imports: 'address'
                   description: |
                     Reference to an address.
                     An external IP address associated with this instance.
                     Specify an unused static external IP address available to
                     the project or leave this field undefined to use an IP
                     from a shared ephemeral IP address pool. If you specify a
                     static external IP address, it must live in the same
                     region as the zone of the instance.
                 - !ruby/object:Api::Type::Enum
                   name: 'type'
                   description: |
                     The type of configuration. The default and only option is
                     ONE_TO_ONE_NAT.
                   values:
                     - :ONE_TO_ONE_NAT
                   required: true
                 - !ruby/object:Api::Type::Boolean
                   name: 'setPublicPtr'
                   description: |
                     Specifies whether a public DNS PTR record should be
                     created to map the external IP address of the instance
                     to a DNS domain name.
                 - !ruby/object:Api::Type::String
                   name: 'publicPtrDomainName'
                   description: |
                     The DNS domain name for the public PTR record. You can
                     set this field only if the setPublicPtr field is
                     enabled.
                 - !ruby/object:Api::Type::Enum
                   name: 'networkTier'
                   description: |
                     This signifies the networking tier used for configuring
                     this access configuration. If an AccessConfig is
                     specified without a valid external IP address, an
                     ephemeral IP will be created with this networkTier. If an
                     AccessConfig with a valid external IP address is
                     specified, it must match that of the networkTier
                     associated with the Address resource owning that IP.
                   values:
                     - :PREMIUM
                     - :STANDARD
            - !ruby/object:Api::Type::Array
              name: 'aliasIpRanges'
              description: |
                An array of alias IP ranges for this network interface. Can
                only be specified for network interfaces on subnet-mode
                networks.
              item_type: !ruby/object:Api::Type::NestedObject
                properties:
                  - !ruby/object:Api::Type::String
                    name: 'ipCidrRange'
                    description: |
                      The IP CIDR range represented by this alias IP range.
                      This IP CIDR range must belong to the specified
                      subnetwork and cannot contain IP addresses reserved by
                      system or used by other network interfaces. This range
                      may be a single IP address (e.g. 10.2.3.4), a netmask
                      (e.g. /24) or a CIDR format string (e.g. 10.1.2.0/24).
                  - !ruby/object:Api::Type::String
                    name: 'subnetworkRangeName'
                    description: |
                      Optional subnetwork secondary range name specifying
                      the secondary range from which to allocate the IP
                      CIDR range for this alias IP range. If left
                      unspecified, the primary range of the subnetwork will
                      be used.
            - !ruby/object:Api::Type::String
              name: 'name'
              description: |
                The name of the network interface, generated by the
                server. For network devices, these are eth0, eth1, etc
              output: true
            - !ruby/object:Api::Type::ResourceRef
              name: 'network'
              resource: 'Network'
              imports: 'selfLink'
              description: |
                Specifies the title of an existing network.  When creating
                an instance, if neither the network nor the subnetwork is specified,
                the default network global/networks/default is used; if the network
                is not specified but the subnetwork is specified, the network is
                inferred.
            - !ruby/object:Api::Type::String
              name: 'networkIP'
              description: |
                An IPv4 internal network address to assign to the
                instance for this network interface. If not specified
                by the user, an unused internal IP is assigned by the
                system.
            - !ruby/object:Api::Type::ResourceRef
              name: 'subnetwork'
              resource: 'Subnetwork'
              imports: 'selfLink'
              description: |
                Reference to a VPC network.
                If the network resource is in legacy mode, do not
                provide this property.  If the network is in auto
                subnet mode, providing the subnetwork is optional. If
                the network is in custom subnet mode, then this field
                should be specified.
            # networkInterfaces.kind is not necessary for convergence.
      - !ruby/object:Api::Type::NestedObject
        name: 'scheduling'
        description: Sets the scheduling options for this instance.
        properties:
          - !ruby/object:Api::Type::Boolean
            name: 'automaticRestart'
            description: |
              Specifies whether the instance should be automatically restarted
              if it is terminated by Compute Engine (not terminated by a user).
              You can only set the automatic restart option for standard
              instances. Preemptible instances cannot be automatically
              restarted.
          - !ruby/object:Api::Type::String
            name: 'onHostMaintenance'
            description: |
              Defines the maintenance behavior for this instance. For standard
              instances, the default behavior is MIGRATE. For preemptible
              instances, the default and only possible behavior is TERMINATE.
              For more information, see Setting Instance Scheduling Options.
          - !ruby/object:Api::Type::Boolean
            name: 'preemptible'
            description: |
              Defines whether the instance is preemptible. This can only be set
              during instance creation, it cannot be set or changed after the
              instance has been created.
      - !ruby/object:Api::Type::Array
        name: 'serviceAccounts'
        description: |
          A list of service accounts, with their specified scopes, authorized
          for this instance. Only one service account per VM instance is
          supported.
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::String
              name: 'email'
              description: Email address of the service account.
            - !ruby/object:Api::Type::Array
              name: scopes
              description: |
                The list of scopes to be made available for this service
                account.
              item_type: Api::Type::String
      - !ruby/object:Api::Type::NestedObject
        name: 'shieldedInstanceConfig'
        description: Configuration for various parameters related to shielded instances.
        # The code for this update method is custom because MM does not support
        # sending just the nested properties
        update_verb: :PATCH
        update_url: projects/{{project}}/instances/{{name}}/updateShieldedInstanceConfig
        properties:
          - !ruby/object:Api::Type::Boolean
            name: 'enableSecureBoot'
            description: Defines whether the instance has Secure Boot enabled.
            update_verb: :PATCH
            update_url: projects/{{project}}/instances/{{name}}/updateShieldedInstanceConfig
          - !ruby/object:Api::Type::Boolean
            name: 'enableVtpm'
            description: Defines whether the instance has the vTPM enabled
            update_verb: :PATCH
            update_url: projects/{{project}}/instances/{{name}}/updateShieldedInstanceConfig
          - !ruby/object:Api::Type::Boolean
            name: 'enableIntegrityMonitoring'
            description: Defines whether the instance has integrity monitoring enabled.
            update_verb: :PATCH
            update_url: projects/{{project}}/instances/{{name}}/updateShieldedInstanceConfig
      - !ruby/object:Api::Type::NestedObject
        name: 'confidentialInstanceConfig'
        description: 'Configuration for confidential computing (requires setting the machine type to any of the n2d-* types and a boot disk of type pd-ssd).'
        properties:
          - !ruby/object:Api::Type::Boolean
            name: 'enableConfidentialCompute'
            description: Enables confidential computing
      - !ruby/object:Api::Type::Enum
        name: 'status'
        description: |
          The status of the instance. One of the following values:
          PROVISIONING, STAGING, RUNNING, STOPPING, SUSPENDING, SUSPENDED,
          and TERMINATED.

          As a user, use RUNNING to keep a machine "on" and TERMINATED to
          turn a machine off
        # GCP API shows this as output: true.
        # This is incorrect because you can make actions on the Instance (start, stop)
        # In an idempotent world, the best way to express these actions is to
        # change the status value.
        output: false
        values:
          - :PROVISIONING
          - :STAGING
          - :RUNNING
          - :STOPPING
          - :SUSPENDING
          - :SUSPENDED
          - :TERMINATED
      - !ruby/object:Api::Type::String
        name: 'statusMessage'
        description: An optional, human-readable explanation of the status.
        output: true
      - !ruby/object:Api::Type::NestedObject
        name: 'tags'
        description: |
          A list of tags to apply to this instance. Tags are used to identify
          valid sources or targets for network firewalls and are specified by
          the client during instance creation. The tags can be later modified
          by the setTags method. Each tag within the list must comply with
          RFC1035.
        properties:
          # TODO(alexstephen) Investigate bytes type
          - !ruby/object:Api::Type::String
            name: 'fingerprint'
            description: |
              Specifies a fingerprint for this request, which is essentially a
              hash of the metadata's contents and used for optimistic locking.
              The fingerprint is initially generated by Compute Engine and
              changes after every request to modify or update metadata. You
              must always provide an up-to-date fingerprint hash in order to
              update or change metadata.
          - !ruby/object:Api::Type::Array
            name: 'items'
            description: |
              An array of tags. Each tag must be 1-63 characters long, and
              comply with RFC1035.
            item_type: Api::Type::String
  - !ruby/object:Api::Resource
    name: 'InstanceGroup'
    kind: 'compute#instanceGroup'
    base_url: projects/{{project}}/zones/{{zone}}/instanceGroups
    collection_url_key: 'items'
    has_self_link: true
    description: |
      Represents an Instance Group resource. Instance groups are self-managed
      and can contain identical or different instances. Instance groups do not
      use an instance template. Unlike managed instance groups, you must create
      and add instances to an instance group manually.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/zones/{{zone}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    input: true
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'zone'
        resource: 'Zone'
        imports: 'name'
        description: 'A reference to the zone where the instance group resides.'
        required: true
      - !ruby/object:Api::Type::Array
        name: 'instances'
        description: |
          The list of instances associated with this InstanceGroup.
          All instances must be created before being added to an InstanceGroup.
          All instances not in this list will be removed from the InstanceGroup
          and will not be deleted.
          Only the full identifier of the instance will be returned.
        exclude: true
        item_type: !ruby/object:Api::Type::ResourceRef
          name: 'instance'
          description: 'An instance being added to the InstanceGroup'
          resource: 'Instance'
          imports: 'selfLink'
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource. Provide this property when
          you create the resource.
      # 'fingerprint' not applicable to state convergence.
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'A unique identifier for this instance group.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          The name of the instance group.
          The name must be 1-63 characters long, and comply with RFC1035.
      - !ruby/object:Api::Type::Array
        name: 'namedPorts'
        description: |
          Assigns a name to a port number.
          For example: {name: "http", port: 80}.

          This allows the system to reference ports by the assigned name
          instead of a port number. Named ports can also contain multiple
          ports.

          For example: [{name: "http", port: 80},{name: "http", port: 8080}]

          Named ports apply to all instances in this instance group.
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::String
              name: 'name'
              description: |
                The name for this named port.
                The name must be 1-63 characters long, and comply with RFC1035.
            - !ruby/object:Api::Type::Integer
              name: 'port'
              description: |
                The port number, which can be a value between 1 and 65535.
      - !ruby/object:Api::Type::ResourceRef
        name: 'network'
        resource: 'Network'
        imports: 'selfLink'
        description: |
          The network to which all instances in the instance group belong.
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'selfLink'
        description: |
          The region where the instance group is located
          (for regional resources).
      - !ruby/object:Api::Type::ResourceRef
        name: 'subnetwork'
        resource: 'Subnetwork'
        imports: 'selfLink'
        description: |
          The subnetwork to which all instances in the instance group belong.
  - !ruby/object:Api::Resource
    name: 'InstanceGroupManager'
    kind: 'compute#instanceGroupManager'
    base_url: projects/{{project}}/zones/{{zone}}/instanceGroupManagers
    collection_url_key: 'items'
    has_self_link: true
    description: |
      Creates a managed instance group using the information that you specify in
      the request. After the group is created, it schedules an action to create
      instances in the group using the specified instance template. This
      operation is marked as DONE when the group is created even if the
      instances in the group have not yet been created. You must separately
      verify the status of the individual instances.

      A managed instance group can have up to 1000 VM instances per group.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/zones/{{zone}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'zone'
        resource: 'Zone'
        imports: 'name'
        description: 'The zone the managed instance group resides.'
        required: true
    properties:
      - !ruby/object:Api::Type::String
        name: 'baseInstanceName'
        description: |
          The base instance name to use for instances in this group. The value
          must be 1-58 characters long. Instances are named by appending a
          hyphen and a random four-character string to the base instance name.
          The base instance name must comply with RFC1035.
        required: true
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: |
          The creation timestamp for this managed instance group in RFC3339
          text format.
        output: true
      - !ruby/object:Api::Type::NestedObject
        name: 'currentActions'
        description: |
          The list of instance actions and the number of instances in this
          managed instance group that are scheduled for each of those actions.
        properties:
          - !ruby/object:Api::Type::Integer
            name: 'abandoning'
            description: |
              The total number of instances in the managed instance group that
              are scheduled to be abandoned. Abandoning an instance removes it
              from the managed instance group without deleting it.
            output: true
          - !ruby/object:Api::Type::Integer
            name: 'creating'
            description: |
              The number of instances in the managed instance group that are
              scheduled to be created or are currently being created. If the
              group fails to create any of these instances, it tries again until
              it creates the instance successfully.

              If you have disabled creation retries, this field will not be
              populated; instead, the creatingWithoutRetries field will be
              populated.
            output: true
          - !ruby/object:Api::Type::Integer
            name: 'creatingWithoutRetries'
            description: |
              The number of instances that the managed instance group will
              attempt to create. The group attempts to create each instance only
              once. If the group fails to create any of these instances, it
              decreases the group's targetSize value accordingly.
            output: true
          - !ruby/object:Api::Type::Integer
            name: 'deleting'
            description: |
              The number of instances in the managed instance group that are
              scheduled to be deleted or are currently being deleted.
            output: true
          - !ruby/object:Api::Type::Integer
            name: 'none'
            description: |
              The number of instances in the managed instance group that are
              running and have no scheduled actions.
            output: true
          - !ruby/object:Api::Type::Integer
            name: 'recreating'
            description: |
              The number of instances in the managed instance group that are
              scheduled to be recreated or are currently being being recreated.
              Recreating an instance deletes the existing root persistent disk
              and creates a new disk from the image that is defined in the
              instance template.
            output: true
          - !ruby/object:Api::Type::Integer
            name: 'refreshing'
            description: |
              The number of instances in the managed instance group that are
              being reconfigured with properties that do not require a restart
              or a recreate action. For example, setting or removing target
              pools for the instance.
            output: true
          - !ruby/object:Api::Type::Integer
            name: 'restarting'
            description: |
              The number of instances in the managed instance group that are
              scheduled to be restarted or are currently being restarted.
            output: true
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource. Provide this property when
          you create the resource.
        input: true
      # fingerprint ignored as it is an internal locking detail
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'A unique identifier for this resource'
        output: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'instanceGroup'
        resource: 'InstanceGroup'
        imports: 'selfLink'
        description: 'The instance group being managed'
        output: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'instanceTemplate'
        resource: 'InstanceTemplate'
        imports: 'selfLink'
        description: |
          The instance template that is specified for this managed instance
          group. The group uses this template to create all new instances in the
          managed instance group.
        required: true
      # kind is internal transport detail
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          The name of the managed instance group. The name must be 1-63
          characters long, and comply with RFC1035.
        required: true
      # TODO(nelsonjr): Make namedPorts a NameValue(name[string], port[integer])
      - !ruby/object:Api::Type::Array
        name: 'namedPorts'
        description:
          Named ports configured for the Instance Groups complementary to this
          Instance Group Manager.
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::String
              name: 'name'
              description: |
                The name for this named port. The name must be 1-63 characters
                long, and comply with RFC1035.
            - !ruby/object:Api::Type::Integer
              name: 'port'
              description:
                The port number, which can be a value between 1 and 65535.
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'selfLink'
        description: |
          The region this managed instance group resides
          (for regional resources).
        output: true
      - !ruby/object:Api::Type::Array
        name: 'targetPools'
        description: |
          TargetPool resources to which instances in the instanceGroup field are
          added. The target pools automatically apply to all of the instances in
          the managed instance group.
        item_type: !ruby/object:Api::Type::ResourceRef
          name: 'targetPool'
          description: 'The targetPool to receive managed instances.'
          resource: 'TargetPool'
          imports: 'selfLink'
      - !ruby/object:Api::Type::Integer
        name: 'targetSize'
        description: |
          The target number of running instances for this managed instance
          group. Deleting or abandoning instances reduces this number. Resizing
          the group changes this number.
  - !ruby/object:Api::Resource
    name: 'InstanceGroupNamedPort'
    base_url:  'projects/{{project}}/zones/{{zone}}/instanceGroups/{{group}}'
    self_link: 'projects/{{project}}/zones/{{zone}}/instanceGroups/{{group}}'
    input: true
    description: |
      Mange the named ports setting for a managed instance group without
      managing the group as whole. This resource is primarily intended for use
      with GKE-generated groups that shouldn't otherwise be managed by other
      tools.
    create_verb: :POST
    create_url: 'projects/{{project}}/zones/{{zone}}/instanceGroups/{{group}}/setNamedPorts'
    delete_verb: :POST
    delete_url: 'projects/{{project}}/zones/{{zone}}/instanceGroups/{{group}}/setNamedPorts'
    identity:
      - port
      - name
    nested_query: !ruby/object:Api::Resource::NestedQuery
      modify_by_patch: true
      keys:
        - namedPorts
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation': 'https://cloud.google.com/compute/docs/instance-groups/'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/instanceGroup'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/zones/{{zone}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'group'
        resource: 'InstanceGroup'
        imports: 'name'
        required: true
        url_param_only: true
        description: |
          The name of the instance group.
      - !ruby/object:Api::Type::ResourceRef
        name: 'zone'
        resource: 'Zone'
        imports: 'name'
        required: true
        url_param_only: true
        description: |
          The zone of the instance group.
    properties:
      - !ruby/object:Api::Type::String
        name: 'name'
        required: true
        description: |
          The name for this named port. The name must be 1-63 characters
          long, and comply with RFC1035.
      - !ruby/object:Api::Type::Integer
        name: 'port'
        required: true
        description:
          The port number, which can be a value between 1 and 65535.
  - !ruby/object:Api::Resource
    name: 'RegionInstanceGroupManager'
    kind: 'compute#instanceGroupManager'
    base_url: projects/{{project}}/regions/{{region}}/instanceGroupManagers
    collection_url_key: 'items'
    has_self_link: true
    description: |
      Creates a managed instance group using the information that you specify in
      the request. After the group is created, it schedules an action to create
      instances in the group using the specified instance template. This
      operation is marked as DONE when the group is created even if the
      instances in the group have not yet been created. You must separately
      verify the status of the individual instances.

      A managed instance group can have up to 1000 VM instances per group.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'name'
        description: 'The region the managed instance group resides.'
        required: true
    properties:
      - !ruby/object:Api::Type::String
        name: 'baseInstanceName'
        description: |
          The base instance name to use for instances in this group. The value
          must be 1-58 characters long. Instances are named by appending a
          hyphen and a random four-character string to the base instance name.
          The base instance name must comply with RFC1035.
        required: true
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: |
          The creation timestamp for this managed instance group in RFC3339
          text format.
        output: true
      - !ruby/object:Api::Type::NestedObject
        name: 'currentActions'
        description: |
          The list of instance actions and the number of instances in this
          managed instance group that are scheduled for each of those actions.
        properties:
          - !ruby/object:Api::Type::Integer
            name: 'abandoning'
            description: |
              The total number of instances in the managed instance group that
              are scheduled to be abandoned. Abandoning an instance removes it
              from the managed instance group without deleting it.
            output: true
          - !ruby/object:Api::Type::Integer
            name: 'creating'
            description: |
              The number of instances in the managed instance group that are
              scheduled to be created or are currently being created. If the
              group fails to create any of these instances, it tries again until
              it creates the instance successfully.

              If you have disabled creation retries, this field will not be
              populated; instead, the creatingWithoutRetries field will be
              populated.
            output: true
          - !ruby/object:Api::Type::Integer
            name: 'creatingWithoutRetries'
            description: |
              The number of instances that the managed instance group will
              attempt to create. The group attempts to create each instance only
              once. If the group fails to create any of these instances, it
              decreases the group's targetSize value accordingly.
            output: true
          - !ruby/object:Api::Type::Integer
            name: 'deleting'
            description: |
              The number of instances in the managed instance group that are
              scheduled to be deleted or are currently being deleted.
            output: true
          - !ruby/object:Api::Type::Integer
            name: 'none'
            description: |
              The number of instances in the managed instance group that are
              running and have no scheduled actions.
            output: true
          - !ruby/object:Api::Type::Integer
            name: 'recreating'
            description: |
              The number of instances in the managed instance group that are
              scheduled to be recreated or are currently being being recreated.
              Recreating an instance deletes the existing root persistent disk
              and creates a new disk from the image that is defined in the
              instance template.
            output: true
          - !ruby/object:Api::Type::Integer
            name: 'refreshing'
            description: |
              The number of instances in the managed instance group that are
              being reconfigured with properties that do not require a restart
              or a recreate action. For example, setting or removing target
              pools for the instance.
            output: true
          - !ruby/object:Api::Type::Integer
            name: 'restarting'
            description: |
              The number of instances in the managed instance group that are
              scheduled to be restarted or are currently being restarted.
            output: true
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource. Provide this property when
          you create the resource.
        input: true
      # fingerprint ignored as it is an internal locking detail
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'A unique identifier for this resource'
        output: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'instanceGroup'
        resource: 'InstanceGroup'
        imports: 'selfLink'
        description: 'The instance group being managed'
        output: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'instanceTemplate'
        resource: 'InstanceTemplate'
        imports: 'selfLink'
        description: |
          The instance template that is specified for this managed instance
          group. The group uses this template to create all new instances in the
          managed instance group.
        required: true
      # kind is internal transport detail
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          The name of the managed instance group. The name must be 1-63
          characters long, and comply with RFC1035.
        required: true
      # TODO(nelsonjr): Make namedPorts a NameValue(name[string], port[integer])
      - !ruby/object:Api::Type::Array
        name: 'namedPorts'
        description:
          Named ports configured for the Instance Groups complementary to this
          Instance Group Manager.
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::String
              name: 'name'
              description: |
                The name for this named port. The name must be 1-63 characters
                long, and comply with RFC1035.
            - !ruby/object:Api::Type::Integer
              name: 'port'
              description:
                The port number, which can be a value between 1 and 65535.
      - !ruby/object:Api::Type::Array
        name: 'targetPools'
        description: |
          TargetPool resources to which instances in the instanceGroup field are
          added. The target pools automatically apply to all of the instances in
          the managed instance group.
        item_type: !ruby/object:Api::Type::ResourceRef
          name: 'targetPool'
          description: 'The targetPool to receive managed instances.'
          resource: 'TargetPool'
          imports: 'selfLink'
      - !ruby/object:Api::Type::Integer
        name: 'targetSize'
        description: |
          The target number of running instances for this managed instance
          group. Deleting or abandoning instances reduces this number. Resizing
          the group changes this number.
      - !ruby/object:Api::Type::Array
        name: 'autoHealingPolicies'
        description: |
          The autohealing policy for this managed instance group
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::String
              name: 'healthCheck'
              description: |
                The URL for the health check that signals autohealing.
            - !ruby/object:Api::Type::Integer
              name: 'initialDelaySec'
              description: |
                The number of seconds that the managed instance group waits
                before it applies autohealing policies to new instances or recently recreated instances
  - !ruby/object:Api::Resource
    name: 'InterconnectAttachment'
    kind: 'compute#interconnectAttachment'
    base_url: 'projects/{{project}}/regions/{{region}}/interconnectAttachments'
    collection_url_key: 'items'
    update_verb: :PATCH
    has_self_link: true
    description: |
      Represents an InterconnectAttachment (VLAN attachment) resource. For more
      information, see Creating VLAN Attachments.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'selfLink'
        required: true
        description: |
          Region where the regional interconnect attachment resides.
    properties:
      - !ruby/object:Api::Type::Boolean
        name: 'adminEnabled'
        send_empty_value: true
        default_value: true
        description: |
          Whether the VLAN attachment is enabled or disabled.  When using
          PARTNER type this will Pre-Activate the interconnect attachment
      - !ruby/object:Api::Type::String
        name: 'cloudRouterIpAddress'
        description: |
          IPv4 address + prefix length to be configured on Cloud Router
          Interface for this interconnect attachment.
        output: true
      - !ruby/object:Api::Type::String
        name: 'customerRouterIpAddress'
        description: |
          IPv4 address + prefix length to be configured on the customer
          router subinterface for this interconnect attachment.
        output: true
      - !ruby/object:Api::Type::String
        name: 'interconnect'
        input: true
        description: |
          URL of the underlying Interconnect object that this attachment's
          traffic will traverse through. Required if type is DEDICATED, must not
          be set if type is PARTNER.
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource.
      - !ruby/object:Api::Type::String
        name: 'mtu'
        description: |
          Maximum Transmission Unit (MTU), in bytes, of packets passing through
          this interconnect attachment. Currently, only 1440 and 1500 are allowed. If not specified, the value will default to 1440.
      - !ruby/object:Api::Type::Enum
        name: 'bandwidth'
        description: |
          Provisioned bandwidth capacity for the interconnect attachment.
          For attachments of type DEDICATED, the user can set the bandwidth.
          For attachments of type PARTNER, the Google Partner that is operating the interconnect must set the bandwidth.
          Output only for PARTNER type, mutable for PARTNER_PROVIDER and DEDICATED,
          Defaults to BPS_10G
        values:
          - :BPS_50M
          - :BPS_100M
          - :BPS_200M
          - :BPS_300M
          - :BPS_400M
          - :BPS_500M
          - :BPS_1G
          - :BPS_2G
          - :BPS_5G
          - :BPS_10G
          - :BPS_20G
          - :BPS_50G
      - !ruby/object:Api::Type::String
        name: 'edgeAvailabilityDomain'
        input: true
        description: |
          Desired availability domain for the attachment. Only available for type
          PARTNER, at creation time. For improved reliability, customers should
          configure a pair of attachments with one per availability domain. The
          selected availability domain will be provided to the Partner via the
          pairing key so that the provisioned circuit will lie in the specified
          domain. If not specified, the value will default to AVAILABILITY_DOMAIN_ANY.
      - !ruby/object:Api::Type::String
        name: 'pairingKey'
        description: |
          [Output only for type PARTNER. Not present for DEDICATED]. The opaque
          identifier of an PARTNER attachment used to initiate provisioning with
          a selected partner. Of the form "XXXXX/region/domain"
        output: true
      - !ruby/object:Api::Type::String
        name: 'partnerAsn'
        description: |
          [Output only for type PARTNER. Not present for DEDICATED]. Optional
          BGP ASN for the router that should be supplied by a layer 3 Partner if
          they configured BGP on behalf of the customer.
        output: true
      - !ruby/object:Api::Type::NestedObject
        name: 'privateInterconnectInfo'
        description: |
          Information specific to an InterconnectAttachment. This property
          is populated if the interconnect that this is attached to is of type DEDICATED.
        output: true
        properties:
          - !ruby/object:Api::Type::Integer
            name: tag8021q
            description: |
              802.1q encapsulation tag to be used for traffic between
              Google and the customer, going to and from this network and region.
            output: true
      - !ruby/object:Api::Type::Enum
        name: 'type'
        input: true
        description: |
          The type of InterconnectAttachment you wish to create. Defaults to
          DEDICATED.
        values:
          - :DEDICATED
          - :PARTNER
          - :PARTNER_PROVIDER
      - !ruby/object:Api::Type::Enum
        name: 'state'
        description: |
          [Output Only] The current state of this attachment's functionality.
        values:
          - :ACTIVE
          - :DEFUNCT
          - :PARTNER_REQUEST_RECEIVED
          - :PENDING_CUSTOMER
          - :PENDING_PARTNER
          - :STATE_UNSPECIFIED
        output: true
      - !ruby/object:Api::Type::String
        name: 'googleReferenceId'
        description: |
          Google reference ID, to be used when raising support tickets with
          Google or otherwise to debug backend connectivity issues.
        output: true
      - !ruby/object:Api::Type::String
        name: 'operationalStatus'
        description: |
          The current status of whether or not this interconnect attachment
          is functional.
        output: true
        exclude: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'router'
        resource: 'Router'
        imports: 'selfLink'
        description: |
          URL of the cloud router to be used for dynamic routing. This router must be in
          the same region as this InterconnectAttachment. The InterconnectAttachment will
          automatically connect the Interconnect to the network & region within which the
          Cloud Router is configured.
        required: true
        input: true
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: |
          Creation timestamp in RFC3339 text format.
        output: true
      - !ruby/object:Api::Type::String
        name: 'id'
        description: |
          The unique identifier for the resource. This identifier is
          defined by the server.
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is created. The
          name must be 1-63 characters long, and comply with RFC1035. Specifically, the
          name must be 1-63 characters long and match the regular expression
          `[a-z]([-a-z0-9]*[a-z0-9])?` which means the first character must be a
          lowercase letter, and all following characters must be a dash, lowercase
          letter, or digit, except the last character, which cannot be a dash.
        required: true
        input: true
      - !ruby/object:Api::Type::Array
        name: candidateSubnets
        input: true
        description: |
          Up to 16 candidate prefixes that can be used to restrict the allocation
          of cloudRouterIpAddress and customerRouterIpAddress for this attachment.
          All prefixes must be within link-local address space (169.254.0.0/16)
          and must be /29 or shorter (/28, /27, etc). Google will attempt to select
          an unused /29 from the supplied candidate prefix(es). The request will
          fail if all possible /29s are in use on Google's edge. If not supplied,
          Google will randomly select an unused /29 from all of link-local space.
        item_type: Api::Type::String
      - !ruby/object:Api::Type::Integer
        name: vlanTag8021q
        input: true
        description: |
          The IEEE 802.1Q VLAN tag for this attachment, in the range 2-4094. When
          using PARTNER type this will be managed upstream.
      - !ruby/object:Api::Type::Array
        name: 'ipsecInternalAddresses'
        description: |
          URL of addresses that have been reserved for the interconnect
          attachment, Used only for interconnect attachment that has the
          encryption option as IPSEC.

          The addresses must be RFC 1918 IP address ranges. When creating HA
          VPN gateway over the interconnect attachment, if the attachment is
          configured to use an RFC 1918 IP address, then the VPN gateway's IP
          address will be allocated from the IP address range specified
          here.

          For example, if the HA VPN gateway's interface 0 is paired to this
          interconnect attachment, then an RFC 1918 IP address for the VPN
          gateway interface 0 will be allocated from the IP address specified
          for this interconnect attachment.

          If this field is not specified for interconnect attachment that has
          encryption option as IPSEC, later on when creating HA VPN gateway on
          this interconnect attachment, the HA VPN gateway's IP address will be
          allocated from regional external IP address pool.
        input: true
        item_type: !ruby/object:Api::Type::ResourceRef
          name: 'ipsecInternalAddress'
          resource: 'Address'
          imports: 'selfLink'
          description: |
            URL of an address that has been reserved for the interconnect
            attachment.
      - !ruby/object:Api::Type::Enum
        name: 'encryption'
        description: |
          Indicates the user-supplied encryption option of this interconnect
          attachment:

          NONE is the default value, which means that the attachment carries
          unencrypted traffic. VMs can send traffic to, or receive traffic
          from, this type of attachment.

          IPSEC indicates that the attachment carries only traffic encrypted by
          an IPsec device such as an HA VPN gateway. VMs cannot directly send
          traffic to, or receive traffic from, such an attachment. To use
          IPsec-encrypted Cloud Interconnect create the attachment using this
          option.

          Not currently available publicly.
        input: true
        values:
          - :NONE
          - :IPSEC
        default_value: :NONE
  - !ruby/object:Api::Resource
    name: 'MachineImage'
    kind: 'compute#machineImage'
    base_url: projects/{{project}}/global/machineImages
    collection_url_key: 'items'
    input: true
    has_self_link: true
    description: |
      Represents a Machine Image resource. Machine images store all the configuration,
      metadata, permissions, and data from one or more disks required to create a
      Virtual machine (VM) instance.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation': 'https://cloud.google.com/compute/docs/machine-images'
      api: 'https://cloud.google.com/compute/docs/reference/rest/beta/machineImages'
    min_version: beta
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      - !ruby/object:Api::Type::String
        name: name
        description: 'Name of the resource.'
        required: true
      - !ruby/object:Api::Type::String
        name: description
        description: 'A text description of the resource.'
      - !ruby/object:Api::Type::ResourceRef
        name: sourceInstance
        description: 'The source instance used to create the machine image. You can provide this as a partial or full URL to the resource.'
        resource: 'Instance'
        imports: 'selfLink'
        required: true
      - !ruby/object:Api::Type::Array
        name: 'storageLocations'
        description: |
          The regional or multi-regional Cloud Storage bucket location where the machine image is stored.
        item_type: Api::Type::String
        output: true
      - !ruby/object:Api::Type::Boolean
        name: guestFlush
        description: |
          Specify this to create an application consistent machine image by informing the OS to prepare for the snapshot process.
          Currently only supported on Windows instances using the Volume Shadow Copy Service (VSS).
      - !ruby/object:Api::Type::NestedObject
        name: 'machineImageEncryptionKey'
        description: |
          Encrypts the machine image using a customer-supplied encryption key.

          After you encrypt a machine image with a customer-supplied key, you must
          provide the same key if you use the machine image later (e.g. to create a
          instance from the image)
        properties:
          - !ruby/object:Api::Type::String
            name: 'rawKey'
            description: |
              Specifies a 256-bit customer-supplied encryption key, encoded in
              RFC 4648 base64 to either encrypt or decrypt this resource.
          - !ruby/object:Api::Type::String
            name: 'sha256'
            description: |
              The RFC 4648 base64 encoded SHA-256 hash of the
              customer-supplied encryption key that protects this resource.
            output: true
          - !ruby/object:Api::Type::String
            name: 'kmsKeyName'
            description: |
              The name of the encryption key that is stored in Google Cloud KMS.
          - !ruby/object:Api::Type::String
            name: 'kmsKeyServiceAccount'
            description: |
              The service account used for the encryption request for the given KMS key.
              If absent, the Compute Engine Service Agent service account is used.
  - !ruby/object:Api::Resource
    name: 'MachineType'
    kind: 'compute#machineType'
    base_url: projects/{{project}}/zones/{{zone}}/machineTypes
    collection_url_key: 'items'
    has_self_link: true
    readonly: true
    description: |
      Represents a MachineType resource. Machine types determine the virtualized
      hardware specifications of your virtual machine instances, such as the
      amount of memory or number of virtual CPUs.
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::NestedObject
        name: 'deprecated'
        description: 'The deprecation status associated with this machine type.'
        properties:
          - !ruby/object:Api::Type::Time
            name: 'deleted'
            description: |
              An optional RFC3339 timestamp on or after which the state of this
              resource is intended to change to DELETED. This is only
              informational and the status will not change unless the client
              explicitly changes it.
            output: true
          - !ruby/object:Api::Type::Time
            name: 'deprecated'
            description: |
              An optional RFC3339 timestamp on or after which the state of this
              resource is intended to change to DEPRECATED. This is only
              informational and the status will not change unless the client
              explicitly changes it.
            output: true
          - !ruby/object:Api::Type::Time
            name: 'obsolete'
            description: |
              An optional RFC3339 timestamp on or after which the state of this
              resource is intended to change to OBSOLETE. This is only
              informational and the status will not change unless the client
              explicitly changes it.
            output: true
          - !ruby/object:Api::Type::String
            name: 'replacement'
            description: |
              The URL of the suggested replacement for a deprecated resource.
              The suggested replacement resource must be the same kind of
              resource as the deprecated resource.
            output: true
          - !ruby/object:Api::Type::Enum
            name: 'state'
            description: |
              The deprecation state of this resource. This can be DEPRECATED,
              OBSOLETE, or DELETED. Operations which create a new resource
              using a DEPRECATED resource will return successfully, but with a
              warning indicating the deprecated resource and recommending its
              replacement. Operations which use OBSOLETE or DELETED resources
              will be rejected and result in an error.
            values:
              - :DEPRECATED
              - :OBSOLETE
              - :DELETED
            output: true
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional textual description of the resource.'
        output: true
      - !ruby/object:Api::Type::Integer
        name: 'guestCpus'
        description: |
          The number of virtual CPUs that are available to the instance.
        output: true
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::Boolean
        name: 'isSharedCpu'
        description: |
          Whether this machine type has a shared CPU. See Shared-core machine
          types for more information.
        output: true
      - !ruby/object:Api::Type::Integer
        name: 'maximumPersistentDisks'
        description: 'Maximum persistent disks allowed.'
        output: true
      - !ruby/object:Api::Type::Integer
        name: 'maximumPersistentDisksSizeGb'
        description: 'Maximum total persistent disks size (GB) allowed.'
        output: true
      - !ruby/object:Api::Type::Integer
        name: 'memoryMb'
        description: |
          The amount of physical memory available to the instance, defined in
          MB.
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: 'Name of the resource.'
      - !ruby/object:Api::Type::ResourceRef
        name: 'zone'
        resource: 'Zone'
        imports: 'name'
        description: 'The zone the machine type is defined.'
        required: true
  - !ruby/object:Api::Resource
    name: 'Network'
    kind: 'compute#network'
    base_url: projects/{{project}}/global/networks
    collection_url_key: 'items'
    input: true
    has_self_link: true
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation': 'https://cloud.google.com/vpc/docs/vpc'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/networks'
    description: |
      Manages a VPC network or legacy network resource on GCP.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource. The resource must be
          recreated to modify this field.
        input: true
      - !ruby/object:Api::Type::String
        name: 'gateway_ipv4'
        # We override this in api.yaml so that the name is more aesthetic
        api_name: 'gatewayIPv4'
        output: true
        description: |
          The gateway address for default routing out of the network. This value
          is selected by GCP.
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        input: true
        required: true
      - !ruby/object:Api::Type::Array
        # TODO: Change subnetworks to ResourceRef
        name: 'subnetworks'
        description: |
          Server-defined fully-qualified URLs for all subnetworks in this
          network.
        item_type: Api::Type::String
        output: true
      - !ruby/object:Api::Type::Boolean
        name: 'autoCreateSubnetworks'
        description: |
          When set to `true`, the network is created in "auto subnet mode" and
          it will create a subnet for each region automatically across the
          `10.128.0.0/9` address range.

          When set to `false`, the network is created in "custom subnet mode" so
          the user can explicitly connect subnetwork resources.
        input: true
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::NestedObject
        name: 'routingConfig'
        update_verb: :PATCH
        update_url:  projects/{{project}}/global/networks/{{name}}
        description: |
          The network-level routing configuration for this network. Used by Cloud
          Router to determine what type of network-wide routing behavior to
          enforce.
        properties:
        - !ruby/object:Api::Type::Enum
          name: 'routingMode'
          required: true
          description: |
            The network-wide routing mode to use. If set to `REGIONAL`, this
            network's cloud routers will only advertise routes with subnetworks
            of this network in the same region as the router. If set to `GLOBAL`,
            this network's cloud routers will advertise routes with all
            subnetworks of this network, across regions.
          values:
            - :REGIONAL
            - :GLOBAL
      - !ruby/object:Api::Type::Array
        name: 'peerings'
        # This is only used in InSpec, handled via fine-grained in Terraform
        exclude: true
        output: true
        description: |
          Peerings for a network
        item_type: !ruby/object:Api::Type::NestedObject
          name: subnetworks
          description: The subnetworks that should be mirrored.
          properties:
            - !ruby/object:Api::Type::String
              name: 'name'
              description: |
                Name of the peering.
            - !ruby/object:Api::Type::String
              name: 'state'
              description: |
                State of the peering.
            - !ruby/object:Api::Type::String
              name: 'stateDetails'
              description: |
                Details about the current state of the peering.
            - !ruby/object:Api::Type::String
              name: 'network'
              description: |
                URL of the peer network
            - !ruby/object:Api::Type::Boolean
              name: 'exportCustomRoutes'
              description: |
                Whether to export the custom routes to the peer network.
            - !ruby/object:Api::Type::Boolean
              name: 'importCustomRoutes'
              description: |
                Whether to import the custom routes to the peer network.
            - !ruby/object:Api::Type::Integer
              name: 'peerMtu'
              description: |
                Maximum Transmission Unit in bytes.
      - !ruby/object:Api::Type::Integer
        name: 'mtu'
        description: |
          Maximum Transmission Unit in bytes. The minimum value for this field is 1460
          and the maximum value is 1500 bytes.
        input: true
      - !ruby/object:Api::Type::Boolean
        name: 'enableUlaInternalIpv6'
        description: |
          Enable ULA internal ipv6 on this network. Enabling this feature will assign 
          a /48 from google defined ULA prefix fd20::/20.
        input: true
      - !ruby/object:Api::Type::String
        name: 'internalIpv6Range'
        description: |
          When enabling ula internal ipv6, caller optionally can specify the /48 range 
          they want from the google defined ULA prefix fd20::/20. The input must be a 
          valid /48 ULA IPv6 address and must be within the fd20::/20. Operation will 
          fail if the speficied /48 is already in used by another resource. 
          If the field is not speficied, then a /48 range will be randomly allocated from fd20::/20 and returned via this field.
        input: true
  - !ruby/object:Api::Resource
    name: 'NetworkEndpoint'
    kind: 'compute#networkEndpoint'
    base_url:  'projects/{{project}}/zones/{{zone}}/networkEndpointGroups/{{network_endpoint_group}}'
    description: |
      A Network endpoint represents a IP address and port combination that is
      part of a specific network endpoint group (NEG). NEGs are zonal
      collections of these endpoints for GCP resources within a
      single subnet. **NOTE**: Network endpoints cannot be created outside of a
      network endpoint group.
    input: true
    create_verb: :POST
    create_url: projects/{{project}}/zones/{{zone}}/networkEndpointGroups/{{network_endpoint_group}}/attachNetworkEndpoints
    delete_verb: :POST
    delete_url: projects/{{project}}/zones/{{zone}}/networkEndpointGroups/{{network_endpoint_group}}/detachNetworkEndpoints
    read_verb: :POST
    self_link: projects/{{project}}/zones/{{zone}}/networkEndpointGroups/{{network_endpoint_group}}/listNetworkEndpoints
    identity:
      - instance
      - ipAddress
      - port
    nested_query: !ruby/object:Api::Resource::NestedQuery
      keys:
        - items
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation': 'https://cloud.google.com/load-balancing/docs/negs/'
      api: 'https://cloud.google.com/compute/docs/reference/rest/beta/networkEndpointGroups'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/zones/{{zone}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'zone'
        resource: 'Zone'
        imports: 'name'
        description: |
          Zone where the containing network endpoint group is located.
        required: true
        url_param_only: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'networkEndpointGroup'
        resource: 'NetworkEndpointGroup'
        imports: 'name'
        description: |
          The network endpoint group this endpoint is part of.
        required: true
        url_param_only: true
    properties:
      - !ruby/object:Api::Type::ResourceRef
        name: 'instance'
        resource: 'Instance'
        imports: 'name'
        description: |
          The name for a specific VM instance that the IP address belongs to.
          This is required for network endpoints of type GCE_VM_IP_PORT.
          The instance must be in the same zone of network endpoint group.
      - !ruby/object:Api::Type::Integer
        name: 'port'
        description: |
          Port number of network endpoint.
      - !ruby/object:Api::Type::String
        name: 'ipAddress'
        description: |
          IPv4 address of network endpoint. The IP address must belong
          to a VM in GCE (either the primary IP or as part of an aliased IP
          range).
        required: true
  - !ruby/object:Api::Resource
    name: 'NetworkEndpointGroup'
    kind: 'compute#networkEndpointGroup'
    base_url: 'projects/{{project}}/zones/{{zone}}/networkEndpointGroups'
    input: true
    has_self_link: true
    collection_url_key: 'items'
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation': 'https://cloud.google.com/load-balancing/docs/negs/'
      api: 'https://cloud.google.com/compute/docs/reference/rest/beta/networkEndpointGroups'
    description: |
      Network endpoint groups (NEGs) are zonal resources that represent
      collections of IP address and port combinations for GCP resources within a
      single subnet. Each IP address and port combination is called a network
      endpoint.

      Network endpoint groups can be used as backends in backend services for
      HTTP(S), TCP proxy, and SSL proxy load balancers. You cannot use NEGs as a
      backend with internal load balancers. Because NEG backends allow you to
      specify IP addresses and ports, you can distribute traffic in a granular
      fashion among applications or containers running within VM instances.

      Recreating a network endpoint group that's in use by another resource will give a
      `resourceInUseByAnotherResource` error. Use `lifecycle.create_before_destroy`
      to avoid this type of error.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/zones/{{zone}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'zone'
        resource: 'Zone'
        imports: 'name'
        description: |
          Zone where the network endpoint group is located.
        required: true
    properties:
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource; provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        required: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource. Provide this property when
          you create the resource.
      - !ruby/object:Api::Type::Enum
        name: 'networkEndpointType'
        description: |
          Type of network endpoints in this network endpoint group.
          NON_GCP_PRIVATE_IP_PORT is used for hybrid connectivity network
          endpoint groups (see https://cloud.google.com/load-balancing/docs/hybrid).
          Note that NON_GCP_PRIVATE_IP_PORT can only be used with Backend Services
          that 1) have the following load balancing schemes: EXTERNAL, EXTERNAL_MANAGED,
          INTERNAL_MANAGED, and INTERNAL_SELF_MANAGED and 2) support the RATE or
          CONNECTION balancing modes.

          Possible values include: GCE_VM_IP, GCE_VM_IP_PORT, and NON_GCP_PRIVATE_IP_PORT.
        values:
          - :GCE_VM_IP
          - :GCE_VM_IP_PORT
          - :NON_GCP_PRIVATE_IP_PORT
        default_value: :GCE_VM_IP_PORT
      - !ruby/object:Api::Type::Integer
        name: 'size'
        description: Number of network endpoints in the network endpoint group.
        output: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'network'
        resource: 'Network'
        imports: 'selfLink'
        description: |
          The network to which all network endpoints in the NEG belong.
          Uses "default" project network if unspecified.
        required: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'subnetwork'
        resource: 'Subnetwork'
        imports: 'selfLink'
        description: |
          Optional subnetwork to which all network endpoints in the NEG belong.
      - !ruby/object:Api::Type::Integer
        name: 'defaultPort'
        description: |
          The default port used if the port number is not specified in the
          network endpoint.
  - !ruby/object:Api::Resource
    name: 'GlobalNetworkEndpoint'
    kind: 'compute#networkEndpoint'
    base_url:  'projects/{{project}}/global/networkEndpointGroups/{{global_network_endpoint_group}}'
    description: |
      A Global Network endpoint represents a IP address and port combination that exists outside of GCP.
      **NOTE**: Global network endpoints cannot be created outside of a
      global network endpoint group.
    input: true
    create_verb: :POST
    create_url: projects/{{project}}/global/networkEndpointGroups/{{global_network_endpoint_group}}/attachNetworkEndpoints
    delete_verb: :POST
    delete_url: projects/{{project}}/global/networkEndpointGroups/{{global_network_endpoint_group}}/detachNetworkEndpoints
    read_verb: :POST
    self_link: projects/{{project}}/global/networkEndpointGroups/{{global_network_endpoint_group}}/listNetworkEndpoints
    identity:
      - ipAddress
      - fqdn
      - port
    nested_query: !ruby/object:Api::Resource::NestedQuery
      keys:
        - items
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation': 'https://cloud.google.com/load-balancing/docs/negs/'
      api: 'https://cloud.google.com/compute/docs/reference/rest/beta/networkEndpointGroups'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'globalNetworkEndpointGroup'
        resource: 'GlobalNetworkEndpointGroup'
        imports: 'name'
        description: |
          The global network endpoint group this endpoint is part of.
        required: true
        url_param_only: true
    properties:
      - !ruby/object:Api::Type::Integer
        name: 'port'
        description: |
          Port number of the external endpoint.
        required: true
      - !ruby/object:Api::Type::String
        name: 'ipAddress'
        description: |
          IPv4 address external endpoint.
      - !ruby/object:Api::Type::String
        name: 'fqdn'
        at_least_one_of:
          - fqdn
          - ip_address
        description: |
          Fully qualified domain name of network endpoint.
          This can only be specified when network_endpoint_type of the NEG is INTERNET_FQDN_PORT.
  - !ruby/object:Api::Resource
    name: 'GlobalNetworkEndpointGroup'
    kind: 'compute#networkEndpointGroup'
    base_url: 'projects/{{project}}/global/networkEndpointGroups'
    input: true
    has_self_link: true
    collection_url_key: 'items'
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation': 'https://cloud.google.com/load-balancing/docs/negs/internet-neg-concepts'
      api: 'https://cloud.google.com/compute/docs/reference/rest/beta/networkEndpointGroups'
    description: |
      A global network endpoint group contains endpoints that reside outside of Google Cloud.
      Currently a global network endpoint group can only support a single endpoint.

      Recreating a global network endpoint group that's in use by another resource will give a
      `resourceInUseByAnotherResource` error. Use `lifecycle.create_before_destroy`
      to avoid this type of error.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource; provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        required: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource. Provide this property when
          you create the resource.
      - !ruby/object:Api::Type::Enum
        name: 'networkEndpointType'
        required: true
        description: |
          Type of network endpoints in this network endpoint group.
        values:
          - :INTERNET_IP_PORT
          - :INTERNET_FQDN_PORT
      - !ruby/object:Api::Type::Integer
        name: 'defaultPort'
        description: |
          The default port used if the port number is not specified in the
          network endpoint.
  - !ruby/object:Api::Resource
    name: 'RegionNetworkEndpointGroup'
    kind: 'compute#networkEndpointGroup'
    base_url: 'projects/{{project}}/regions/{{region}}/networkEndpointGroups'
    input: true
    has_self_link: true
    collection_url_key: 'items'
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation': 'https://cloud.google.com/load-balancing/docs/negs/serverless-neg-concepts'
      api: 'https://cloud.google.com/compute/docs/reference/rest/beta/regionNetworkEndpointGroups'
    description: |
      A regional NEG that can support Serverless Products.

      Recreating a region network endpoint group that's in use by another resource will give a
      `resourceInUseByAnotherResource` error. Use `lifecycle.create_before_destroy`
      to avoid this type of error.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'name'
        description: |
          A reference to the region where the Serverless NEGs Reside.
        required: true
    properties:
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource; provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        required: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource. Provide this property when
          you create the resource.
      - !ruby/object:Api::Type::Enum
        name: 'networkEndpointType'
        description: |
          Type of network endpoints in this network endpoint group. Defaults to SERVERLESS
        values:
          - :SERVERLESS
          - :PRIVATE_SERVICE_CONNECT
        default_value: :SERVERLESS
      - !ruby/object:Api::Type::String
        name: 'pscTargetService'
        description: |
          The target service url used to set up private service connection to
          a Google API or a PSC Producer Service Attachment.
      - !ruby/object:Api::Type::ResourceRef
        name: 'network'
        resource: 'Network'
        imports: 'selfLink'
        description: |
          This field is only used for PSC.
          The URL of the network to which all network endpoints in the NEG belong. Uses
          "default" project network if unspecified.
      - !ruby/object:Api::Type::ResourceRef
        name: 'subnetwork'
        resource: 'Subnetwork'
        imports: 'selfLink'
        description: |
          This field is only used for PSC.
          Optional URL of the subnetwork to which all network endpoints in the NEG belong.
      - !ruby/object:Api::Type::NestedObject
        name: 'cloudRun'
        conflicts:
          - cloud_function
          - app_engine
          - serverless_deployment
        description: |
          Only valid when networkEndpointType is "SERVERLESS".
          Only one of cloud_run, app_engine, cloud_function or serverless_deployment may be set.
        properties:
          - !ruby/object:Api::Type::String
            name: 'service'
            at_least_one_of:
              - cloud_run.0.service
              - cloud_run.0.url_mask
            description: |
              Cloud Run service is the main resource of Cloud Run.
              The service must be 1-63 characters long, and comply with RFC1035.
              Example value: "run-service".
          - !ruby/object:Api::Type::String
            name: 'tag'
            description: |
              Cloud Run tag represents the "named-revision" to provide
              additional fine-grained traffic routing information.
              The tag must be 1-63 characters long, and comply with RFC1035.
              Example value: "revision-0010".
          - !ruby/object:Api::Type::String
            name: 'urlMask'
            at_least_one_of:
              - cloud_run.0.service
              - cloud_run.0.url_mask
            description: |
              A template to parse service and tag fields from a request URL.
              URL mask allows for routing to multiple Run services without having
              to create multiple network endpoint groups and backend services.

              For example, request URLs "foo1.domain.com/bar1" and "foo1.domain.com/bar2"
              an be backed by the same Serverless Network Endpoint Group (NEG) with
              URL mask ".domain.com/". The URL mask will parse them to { service="bar1", tag="foo1" }
              and { service="bar2", tag="foo2" } respectively.
      - !ruby/object:Api::Type::NestedObject
        name: 'appEngine'
        conflicts:
          - cloud_run
          - cloud_function
          - serverless_deployment
        allow_empty_object: true
        description: |
          Only valid when networkEndpointType is "SERVERLESS".
          Only one of cloud_run, app_engine, cloud_function or serverless_deployment may be set.
        properties:
          - !ruby/object:Api::Type::String
            name: 'service'
            description: |
              Optional serving service.
              The service name must be 1-63 characters long, and comply with RFC1035.
              Example value: "default", "my-service".
          - !ruby/object:Api::Type::String
            name: 'version'
            description: |
              Optional serving version.
              The version must be 1-63 characters long, and comply with RFC1035.
              Example value: "v1", "v2".
          - !ruby/object:Api::Type::String
            name: 'urlMask'
            description: |
              A template to parse service and version fields from a request URL.
              URL mask allows for routing to multiple App Engine services without
              having to create multiple Network Endpoint Groups and backend services.

              For example, the request URLs "foo1-dot-appname.appspot.com/v1" and
              "foo1-dot-appname.appspot.com/v2" can be backed by the same Serverless NEG with
              URL mask "-dot-appname.appspot.com/". The URL mask will parse
              them to { service = "foo1", version = "v1" } and { service = "foo1", version = "v2" } respectively.
      - !ruby/object:Api::Type::NestedObject
        name: 'cloudFunction'
        conflicts:
          - cloud_run
          - app_engine
          - serverless_deployment
        description: |
          Only valid when networkEndpointType is "SERVERLESS".
          Only one of cloud_run, app_engine, cloud_function or serverless_deployment may be set.
        properties:
          - !ruby/object:Api::Type::String
            name: 'function'
            at_least_one_of:
              - cloud_function.0.function
              - cloud_function.0.url_mask
            description: |
              A user-defined name of the Cloud Function.
              The function name is case-sensitive and must be 1-63 characters long.
              Example value: "func1".
          - !ruby/object:Api::Type::String
            name: 'urlMask'
            at_least_one_of:
              - cloud_function.0.function
              - cloud_function.0.url_mask
            description: |
              A template to parse function field from a request URL. URL mask allows
              for routing to multiple Cloud Functions without having to create
              multiple Network Endpoint Groups and backend services.

              For example, request URLs "mydomain.com/function1" and "mydomain.com/function2"
              can be backed by the same Serverless NEG with URL mask "/". The URL mask
              will parse them to { function = "function1" } and { function = "function2" } respectively.
      - !ruby/object:Api::Type::NestedObject
        name: 'serverlessDeployment'
        min_version: beta
        conflicts:
          - cloud_run
          - cloud_function
          - app_engine
        allow_empty_object: true
        description: |
          Only valid when networkEndpointType is "SERVERLESS".
          Only one of cloudRun, appEngine, cloudFunction or serverlessDeployment may be set.
        properties:
          - !ruby/object:Api::Type::String
            name: 'platform'
            required: true
            # Docs (https://cloud.google.com/compute/docs/reference/rest/beta/regionNetworkEndpointGroups) say support is offered for:
            # API Gateway: apigateway.googleapis.com, App Engine: appengine.googleapis.com,
            # Cloud Functions: cloudfunctions.googleapis.com, Cloud Run: run.googleapis.com
            # However, only API Gateway is currently supported
            description: |
              The platform of the NEG backend target(s). Possible values:
              API Gateway: apigateway.googleapis.com
          - !ruby/object:Api::Type::String
            name: 'resource'
            description: |
              The user-defined name of the workload/instance. This value must be provided explicitly or in the urlMask.
              The resource identified by this value is platform-specific and is as follows: API Gateway: The gateway ID, App Engine: The service name,
              Cloud Functions: The function name, Cloud Run: The service name
          - !ruby/object:Api::Type::String
            name: 'version'
            description: |
              The optional resource version. The version identified by this value is platform-specific and is follows:
              API Gateway: Unused, App Engine: The service version, Cloud Functions: Unused, Cloud Run: The service tag
          - !ruby/object:Api::Type::String
            name: 'urlMask'
            required: false
            description: |
              A template to parse platform-specific fields from a request URL. URL mask allows for routing to multiple resources
              on the same serverless platform without having to create multiple Network Endpoint Groups and backend resources.
              The fields parsed by this template are platform-specific and are as follows: API Gateway: The gateway ID,
              App Engine: The service and version, Cloud Functions: The function name, Cloud Run: The service and tag
  - !ruby/object:Api::Resource
    name: 'NodeGroup'
    kind: 'compute#NodeGroup'
    base_url: projects/{{project}}/zones/{{zone}}/nodeGroups
    create_url: projects/{{project}}/zones/{{zone}}/nodeGroups?initialNodeCount={{size}}
    has_self_link: true
    description: |
      Represents a NodeGroup resource to manage a group of sole-tenant nodes.
    input: true
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Sole-Tenant Nodes': 'https://cloud.google.com/compute/docs/nodes/'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/nodeGroups'
    collection_url_key: 'items'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/zones/{{zone}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'zone'
        resource: 'Zone'
        imports: 'selfLink'
        required: true
        description: |
          Zone where this node group is located
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: |
          Creation timestamp in RFC3339 text format.
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional textual description of the resource.
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource.
      - !ruby/object:Api::Type::ResourceRef
        name: 'nodeTemplate'
        resource: 'NodeTemplate'
        imports: 'selfLink'
        required: true
        description: |
          The URL of the node template to which this node group belongs.
        update_verb: :POST
        update_url: 'projects/{{project}}/zones/{{zone}}/nodeGroups/{{name}}/setNodeTemplate'
      - !ruby/object:Api::Type::Integer
        name: 'size'
        description: |
          The total number of nodes in the node group.
        input: true
        send_empty_value: true
      - !ruby/object:Api::Type::Integer
        name: 'initialSize'
        description: |
          The initial number of nodes in the node group. One of `initial_size` or `size` must be specified.
        url_param_only: true
        exactly_one_of:
          - size
          - initial_size
      - !ruby/object:Api::Type::String
        name: 'maintenancePolicy'
        description: |
          Specifies how to handle instances when a node in the group undergoes maintenance. Set to one of: DEFAULT, RESTART_IN_PLACE, or MIGRATE_WITHIN_NODE_GROUP. The default value is DEFAULT.
        default_value: DEFAULT
      - !ruby/object:Api::Type::NestedObject
        name: 'maintenanceWindow'
        description: |
          contains properties for the timeframe of maintenance
        properties:
          - !ruby/object:Api::Type::String
            name: 'startTime'
            required: true
            description: |
              instances.start time of the window. This must be in UTC format that resolves to one of 00:00, 04:00, 08:00, 12:00, 16:00, or 20:00. For example, both 13:00-5 and 08:00 are valid.
      - !ruby/object:Api::Type::NestedObject
        name: 'autoscalingPolicy'
        description: |
          If you use sole-tenant nodes for your workloads, you can use the node
          group autoscaler to automatically manage the sizes of your node groups.
        properties:
          - !ruby/object:Api::Type::Enum
            name: 'mode'
            required: true
            description: |
              The autoscaling mode. Set to one of the following:
                - OFF: Disables the autoscaler.
                - ON: Enables scaling in and scaling out.
                - ONLY_SCALE_OUT: Enables only scaling out.
                You must use this mode if your node groups are configured to
                restart their hosted VMs on minimal servers.
            values:
              - :OFF
              - :ON
              - :ONLY_SCALE_OUT
          - !ruby/object:Api::Type::Integer
            name: 'minNodes'
            description: |
              Minimum size of the node group. Must be less
              than or equal to max-nodes. The default value is 0.
          - !ruby/object:Api::Type::Integer
            name: 'maxNodes'
            description: |
              Maximum size of the node group. Set to a value less than or equal
              to 100 and greater than or equal to min-nodes.
            required: true
  - !ruby/object:Api::Resource
    name: 'NetworkPeeringRoutesConfig'
    base_url:  'projects/{{project}}/global/networks/{{network}}'
    self_link: 'projects/{{project}}/global/networks/{{network}}'
    description: |
      Manage a network peering's route settings without managing the peering as
      a whole. This resource is primarily intended for use with GCP-generated
      peerings that shouldn't otherwise be managed by other tools. Deleting this
      resource is a no-op and the peering will not be modified.
    create_verb: :PATCH
    create_url: 'projects/{{project}}/global/networks/{{network}}/updatePeering'
    update_verb: :PATCH
    update_url: 'projects/{{project}}/global/networks/{{network}}/updatePeering'
    identity:
      - peering
    nested_query: !ruby/object:Api::Resource::NestedQuery
      keys:
        - peerings
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation': 'https://cloud.google.com/vpc/docs/vpc-peering'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/networks/updatePeering'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'network'
        resource: 'Network'
        imports: 'name'
        description: |
          The name of the primary network for the peering.
        required: true
        url_param_only: true
    properties:
      - !ruby/object:Api::Type::String
        name: 'peering'
        # renamed to make it clear that this is an existing peering
        api_name: 'name'
        required: true
        description: |
          Name of the peering.
      - !ruby/object:Api::Type::Boolean
        name: 'exportCustomRoutes'
        required: true
        description: |
          Whether to export the custom routes to the peer network.
      - !ruby/object:Api::Type::Boolean
        name: 'importCustomRoutes'
        required: true
        description: |
          Whether to import the custom routes to the peer network.
  - !ruby/object:Api::Resource
    name: 'NodeTemplate'
    kind: 'compute#nodeTemplate'
    base_url: projects/{{project}}/regions/{{region}}/nodeTemplates
    has_self_link: true
    description: |
      Represents a NodeTemplate resource. Node templates specify properties
      for creating sole-tenant nodes, such as node type, vCPU and memory
      requirements, node affinity labels, and region.
    input: true
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Sole-Tenant Nodes': 'https://cloud.google.com/compute/docs/nodes/'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/nodeTemplates'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    collection_url_key: 'items'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'selfLink'
        required: true
        description: |
          Region where nodes using the node template will be created
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional textual description of the resource.'
      - !ruby/object:Api::Type::String
        name: 'name'
        description: 'Name of the resource.'
      - !ruby/object:Api::Type::KeyValuePairs
        name: 'nodeAffinityLabels'
        description: |
          Labels to use for node affinity, which will be used in
          instance scheduling.
      - !ruby/object:Api::Type::String
        name: 'nodeType'
        description: |
          Node type to use for nodes group that are created from this template.
          Only one of nodeTypeFlexibility and nodeType can be specified.
        conflicts:
          - node_type_flexibility
      - !ruby/object:Api::Type::NestedObject
        name: 'nodeTypeFlexibility'
        description: |
          Flexible properties for the desired node type. Node groups that
          use this node template will create nodes of a type that matches
          these properties. Only one of nodeTypeFlexibility and nodeType can
          be specified.
        conflicts:
          - node_type
        properties:
          - !ruby/object:Api::Type::String
            name: cpus
            at_least_one_of:
              - node_type_flexibility.0.cpus
              - node_type_flexibility.0.memory
            description: |
               Number of virtual CPUs to use.
          - !ruby/object:Api::Type::String
            name: memory
            at_least_one_of:
              - node_type_flexibility.0.cpus
              - node_type_flexibility.0.memory
            description: |
              Physical memory available to the node, defined in MB.
          - !ruby/object:Api::Type::String
            name: localSsd
            description: |
              Use local SSD
            output: true
      - !ruby/object:Api::Type::NestedObject
        name: 'serverBinding'
        description: |
          The server binding policy for nodes using this template. Determines
          where the nodes should restart following a maintenance event.
        properties:
          - !ruby/object:Api::Type::Enum
            name: 'type'
            required: true
            description: |
              Type of server binding policy. If `RESTART_NODE_ON_ANY_SERVER`,
              nodes using this template will restart on any physical server
              following a maintenance event.

              If `RESTART_NODE_ON_MINIMAL_SERVER`, nodes using this template
              will restart on the same physical server following a maintenance
              event, instead of being live migrated to or restarted on a new
              physical server. This option may be useful if you are using
              software licenses tied to the underlying server characteristics
              such as physical sockets or cores, to avoid the need for
              additional licenses when maintenance occurs. However, VMs on such
              nodes will experience outages while maintenance is applied.
            values:
              - :RESTART_NODE_ON_ANY_SERVER
              - :RESTART_NODE_ON_MINIMAL_SERVERS
      - !ruby/object:Api::Type::Enum
        name: 'cpuOvercommitType'
        description: |
          CPU overcommit.
        values:
          - :ENABLED
          - :NONE
        default_value: :NONE
  - !ruby/object:Api::Resource
    name: 'OrganizationSecurityPolicy'
    min_version: beta
    base_url: 'locations/global/securityPolicies?parentId={{parent}}'
    self_link: 'locations/global/securityPolicies/{{id}}'
    create_url: 'locations/global/securityPolicies?parentId={{parent}}'
    update_verb: :PATCH
    description: |
      Organization security policies are used to control incoming/outgoing traffic.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Creating a firewall policy':
          'https://cloud.google.com/vpc/docs/using-firewall-policies#create-policy'
      api: 'https://cloud.google.com/compute/docs/reference/rest/beta/organizationSecurityPolicies'
    parameters:
      - !ruby/object:Api::Type::String
        name: parent
        description: |
          The parent of this OrganizationSecurityPolicy in the Cloud Resource Hierarchy.
          Format: organizations/{organization_id} or folders/{folder_id}
        required: true
        input: true
    properties:
      - !ruby/object:Api::Type::String
        name: displayName
        description: |
          A textual name of the security policy.
        input: true
        required: true
      - !ruby/object:Api::Type::String
        name: description
        description: |
          A textual description for the organization security policy.
      - !ruby/object:Api::Type::Fingerprint
        name: 'fingerprint'
        description: |
          Fingerprint of this resource. This field is used internally during
          updates of this resource.
        output: true
      - !ruby/object:Api::Type::String
        name: id
        description: |
          The unique identifier for the resource. This identifier is defined by the server.
        output: true
      - !ruby/object:Api::Type::Enum
        name: type
        description: |
          The type indicates the intended use of the security policy.
          For organization security policies, the only supported type
          is "FIREWALL".
        input: true
        values:
          - :FIREWALL
        default_value: :FIREWALL
  - !ruby/object:Api::Resource
    name: 'OrganizationSecurityPolicyAssociation'
    min_version: beta
    base_url: 'locations/global/securityPolicies/{{policy_id}}'
    self_link: 'locations/global/securityPolicies/{{policy_id}}/getAssociation?name={{name}}'
    create_url: 'locations/global/securityPolicies/{{policy_id}}/addAssociation'
    delete_verb: :POST
    delete_url: 'locations/global/securityPolicies/{{policy_id}}/removeAssociation?name={{name}}'
    description: |
      An association for the OrganizationSecurityPolicy.
    input: true
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Associating a policy with the organization or folder':
          'https://cloud.google.com/vpc/docs/using-firewall-policies#associate'
      api: 'https://cloud.google.com/compute/docs/reference/rest/beta/organizationSecurityPolicies/addAssociation'
    parameters:
      - !ruby/object:Api::Type::String
        name: 'policyId'
        description: |
          The security policy ID of the association.
        required: true
        url_param_only: true
        api_name: 'securityPolicyId'
    properties:
      - !ruby/object:Api::Type::String
        name: name
        description: |
          The name for an association.
        required: true
      - !ruby/object:Api::Type::String
        name: 'attachmentId'
        description: |
          The resource that the security policy is attached to.
        required: true
      - !ruby/object:Api::Type::String
        name: 'displayName'
        description: |
          The display name of the security policy of the association.
        output: true
  - !ruby/object:Api::Resource
    name: 'OrganizationSecurityPolicyRule'
    min_version: beta
    base_url: 'locations/global/securityPolicies/{{policy_id}}'
    self_link: 'locations/global/securityPolicies/{{policy_id}}/getRule?priority={{priority}}'
    create_url: 'locations/global/securityPolicies/{{policy_id}}/addRule?priority={{priority}}'
    update_verb: :POST
    update_url: 'locations/global/securityPolicies/{{policy_id}}/patchRule?priority={{priority}}'
    delete_verb: :POST
    delete_url: 'locations/global/securityPolicies/{{policy_id}}/removeRule?priority={{priority}}'
    description: |
      A rule for the OrganizationSecurityPolicy.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Creating firewall rules':
          'https://cloud.google.com/vpc/docs/using-firewall-policies#create-rules'
      api: 'https://cloud.google.com/compute/docs/reference/rest/beta/organizationSecurityPolicies/addRule'
    parameters:
      - !ruby/object:Api::Type::String
        name: policyId
        description: |
          The ID of the OrganizationSecurityPolicy this rule applies to.
        required: true
        input: true
        url_param_only: true
    properties:
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          A description of the rule.
      - !ruby/object:Api::Type::Integer
        name: 'priority'
        description: |
          An integer indicating the priority of a rule in the list. The priority must be a value
          between 0 and 2147483647. Rules are evaluated from highest to lowest priority where 0 is the
          highest priority and 2147483647 is the lowest prority.
        required: true
        input: true
      - !ruby/object:Api::Type::NestedObject
        name: 'match'
        description:
          A match condition that incoming traffic is evaluated against. If it evaluates to true,
          the corresponding 'action' is enforced.
        required: true
        properties:
          - !ruby/object:Api::Type::String
            name: 'description'
            description: |
              A description of the rule.
          - !ruby/object:Api::Type::Enum
            name: 'versionedExpr'
            description: |
              Preconfigured versioned expression. For organization security policy rules,
              the only supported type is "FIREWALL".
            values:
              - :FIREWALL
            default_value: :FIREWALL
          - !ruby/object:Api::Type::NestedObject
            name: 'config'
            description:
              The configuration options for matching the rule.
            required: true
            properties:
            - !ruby/object:Api::Type::Array
              name: 'srcIpRanges'
              description: |
                Source IP address range in CIDR format. Required for
                INGRESS rules.
              item_type: Api::Type::String
              exactly_one_of:
                - match.0.config.0.src_ip_ranges
                - match.0.config.0.dest_ip_ranges
            - !ruby/object:Api::Type::Array
              name: 'destIpRanges'
              description: |
                Destination IP address range in CIDR format. Required for
                EGRESS rules.
              item_type: Api::Type::String
              exactly_one_of:
                - match.0.config.0.src_ip_ranges
                - match.0.config.0.dest_ip_ranges
            - !ruby/object:Api::Type::Array
              name: 'layer4Config'
              api_name: 'layer4Configs'
              description: |
                Pairs of IP protocols and ports that the rule should match.
              required: true
              item_type: !ruby/object:Api::Type::NestedObject
                properties:
                  - !ruby/object:Api::Type::String
                    name: 'ipProtocol'
                    description: |
                      The IP protocol to which this rule applies. The protocol
                      type is required when creating a firewall rule.
                      This value can either be one of the following well
                      known protocol strings (tcp, udp, icmp, esp, ah, ipip, sctp),
                      or the IP protocol number.
                    required: true
                  - !ruby/object:Api::Type::Array
                    item_type: Api::Type::String
                    name: 'ports'
                    description: |
                      An optional list of ports to which this rule applies. This field
                      is only applicable for UDP or TCP protocol. Each entry must be
                      either an integer or a range. If not specified, this rule
                      applies to connections through any port.

                      Example inputs include: ["22"], ["80","443"], and
                      ["12345-12349"].
      - !ruby/object:Api::Type::String
        name: 'action'
        description: |
          The Action to perform when the client connection triggers the rule. Can currently be either
          "allow", "deny" or "goto_next".
        required: true
      - !ruby/object:Api::Type::Boolean
        name: 'preview'
        description: |
          If set to true, the specified action is not enforced.
      - !ruby/object:Api::Type::Enum
        name: 'direction'
        description: |
          The direction in which this rule applies. If unspecified an INGRESS rule is created.
        values:
        - :INGRESS
        - :EGRESS
      - !ruby/object:Api::Type::Array
        name: 'targetResources'
        description: |
          A list of network resource URLs to which this rule applies.
          This field allows you to control which network's VMs get
          this rule. If this field is left blank, all VMs
          within the organization will receive the rule.
        item_type: Api::Type::String
      - !ruby/object:Api::Type::Boolean
        name: 'enableLogging'
        description: |
          Denotes whether to enable logging for a particular rule.
          If logging is enabled, logs will be exported to the
          configured export destination in Stackdriver.
        send_empty_value: true
      - !ruby/object:Api::Type::Array
        name: 'targetServiceAccounts'
        description: |
          A list of service accounts indicating the sets of
          instances that are applied with this rule.
        item_type: Api::Type::String
  - !ruby/object:Api::Resource
    name: 'PacketMirroring'
    base_url: projects/{{project}}/regions/{{region}}/packetMirrorings
    update_verb: :PATCH
    self_link: projects/{{project}}/regions/{{region}}/packetMirrorings/{{name}}
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Using Packet Mirroring': 'https://cloud.google.com/vpc/docs/using-packet-mirroring#creating'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/packetMirrorings'
    description: |
      Packet Mirroring mirrors traffic to and from particular VM instances.
      You can use the collected traffic to help you detect security threats
      and monitor application performance.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'

    properties:
      - !ruby/object:Api::Type::String
        name: name
        description: The name of the packet mirroring rule
        required: true
      - !ruby/object:Api::Type::String
        name: description
        description: A human-readable description of the rule.
        input: true
      - !ruby/object:Api::Type::String
        name: region
        description: The region where this rule is active.
        required: true
      - !ruby/object:Api::Type::NestedObject
        name: network
        input: true
        description: |
            Specifies the mirrored VPC network. Only packets in this network
            will be mirrored. All mirrored VMs should have a NIC in the given
            network. All mirrored subnetworks should belong to the given network.
        properties:
          - !ruby/object:Api::Type::ResourceRef
            name: url
            description: The full self_link URL of the network where this rule is active.
            resource: 'Network'
            imports: 'selfLink'
            required: true
            input: true
        required: true
      - !ruby/object:Api::Type::Integer
        name: priority
        description: |
            Since only one rule can be active at a time, priority is
            used to break ties in the case of two rules that apply to
            the same instances.
        required: true
      - !ruby/object:Api::Type::NestedObject
        name: collectorIlb
        description: |
            The Forwarding Rule resource (of type loadBalancingScheme=INTERNAL)
            that will be used as collector for mirrored traffic. The
            specified forwarding rule must have isMirroringCollector
            set to true.
        required: true
        properties:
          - !ruby/object:Api::Type::ResourceRef
            name: url
            required: true
            resource: 'ForwardingRule'
            imports: 'selfLink'
            description: The URL of the forwarding rule.
      - !ruby/object:Api::Type::NestedObject
        name: filter
        description: |
            A filter for mirrored traffic.  If unset, all traffic is mirrored.
        properties:
          - !ruby/object:Api::Type::Array
            name: ipProtocols
            api_name: 'IPProtocols'
            description: |
                Protocols that apply as a filter on mirrored traffic.
            item_type: Api::Type::String
            name: ipProtocols
            description: Possible IP protocols including tcp, udp, icmp and esp
          - !ruby/object:Api::Type::Array
            name: cidrRanges
            description: |
                IP CIDR ranges that apply as a filter on the source (ingress) or
                destination (egress) IP in the IP header. Only IPv4 is supported.
            item_type: Api::Type::String
          - !ruby/object:Api::Type::Enum
            name: direction
            description: Direction of traffic to mirror.
            values:
              - :INGRESS
              - :EGRESS
              - :BOTH
            default_value: :BOTH
      - !ruby/object:Api::Type::NestedObject
        name: mirroredResources
        required: true
        description: |
            A means of specifying which resources to mirror.
        properties:
          - !ruby/object:Api::Type::Array
            name: subnetworks
            at_least_one_of:
                - mirrored_resources.0.subnetworks
                - mirrored_resources.0.instances
                - mirrored_resources.0.tags
            description: |
                All instances in one of these subnetworks will be mirrored.
            item_type: !ruby/object:Api::Type::NestedObject
              name: subnetworks
              description: The subnetworks that should be mirrored.  Specify at most 5.
              properties:
                - !ruby/object:Api::Type::ResourceRef
                  name: url
                  resource: 'Subnetwork'
                  imports: 'selfLink'
                  description: The URL of the subnetwork where this rule should be active.
                  required: true
          - !ruby/object:Api::Type::Array
            name: instances
            description: |
                All the listed instances will be mirrored.  Specify at most 50.
            at_least_one_of:
                - mirrored_resources.0.subnetworks
                - mirrored_resources.0.instances
                - mirrored_resources.0.tags
            item_type: !ruby/object:Api::Type::NestedObject
              name: instances
              description: The instances that should be mirrored.
              properties:
                - !ruby/object:Api::Type::ResourceRef
                  name: url
                  resource: 'Instance'
                  imports: 'selfLink'
                  description: The URL of the instances where this rule should be active.
                  required: true
          - !ruby/object:Api::Type::Array
            name: tags
            at_least_one_of:
                - mirrored_resources.0.subnetworks
                - mirrored_resources.0.instances
                - mirrored_resources.0.tags
            description: |
                All instances with these tags will be mirrored.
            item_type: Api::Type::String

  - !ruby/object:Api::Resource
    name: 'PerInstanceConfig'
    base_url:  'projects/{{project}}/zones/{{zone}}/instanceGroupManagers/{{instance_group_manager}}'
    description: |
      A config defined for a single managed instance that belongs to an instance group manager. It preserves the instance name
      across instance group manager operations and can define stateful disks or metadata that are unique to the instance.
    create_verb: :POST
    create_url: projects/{{project}}/zones/{{zone}}/instanceGroupManagers/{{instance_group_manager}}/createInstances
    update_verb: :POST
    update_url: projects/{{project}}/zones/{{zone}}/instanceGroupManagers/{{instance_group_manager}}/updatePerInstanceConfigs
    delete_verb: :POST
    delete_url: projects/{{project}}/zones/{{zone}}/instanceGroupManagers/{{instance_group_manager}}/deletePerInstanceConfigs
    read_verb: :POST
    self_link: projects/{{project}}/zones/{{zone}}/instanceGroupManagers/{{instance_group_manager}}/listPerInstanceConfigs
    identity:
      - name
    nested_query: !ruby/object:Api::Resource::NestedQuery
      keys:
        - items
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation': 'https://cloud.google.com/compute/docs/instance-groups/stateful-migs#per-instance_configs'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/instanceGroupManagers'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/zones/{{zone}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'zone'
        resource: 'Zone'
        imports: 'name'
        description: |
          Zone where the containing instance group manager is located
        required: true
        url_param_only: true
        input: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'instanceGroupManager'
        resource: 'InstanceGroupManager'
        imports: 'name'
        description: |
          The instance group manager this instance config is part of.
        required: true
        url_param_only: true
        input: true
    properties:
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          The name for this per-instance config and its corresponding instance.
        required: true
        input: true
      - !ruby/object:Api::Type::NestedObject
        name: 'preservedState'
        description: 'The preserved state for this instance.'
        properties:
          - !ruby/object:Api::Type::KeyValuePairs
            name: 'metadata'
            description: |
              Preserved metadata defined for this instance. This is a list of key->value pairs.
          - !ruby/object:Api::Type::Array
            name: 'disk'
            api_name: disks
            description: |
              Stateful disks for the instance.
            item_type: !ruby/object:Api::Type::NestedObject
              properties:
                - !ruby/object:Api::Type::String
                  name: deviceName
                  required: true
                  description: |
                    A unique device name that is reflected into the /dev/ tree of a Linux operating system running within the instance.
                - !ruby/object:Api::Type::String
                  name: source
                  required: true
                  description: |
                    The URI of an existing persistent disk to attach under the specified device-name in the format
                    `projects/project-id/zones/zone/disks/disk-name`.
                - !ruby/object:Api::Type::Enum
                  name: mode
                  description: |
                    The mode of the disk.
                  values:
                    - :READ_ONLY
                    - :READ_WRITE
                  default_value: :READ_WRITE
                - !ruby/object:Api::Type::Enum
                  name: deleteRule
                  description: |
                    A value that prescribes what should happen to the stateful disk when the VM instance is deleted.
                    The available options are `NEVER` and `ON_PERMANENT_INSTANCE_DELETION`.
                    `NEVER` - detach the disk when the VM is deleted, but do not delete the disk.
                    `ON_PERMANENT_INSTANCE_DELETION` will delete the stateful disk when the VM is permanently
                    deleted from the instance group.
                  values:
                    - :NEVER
                    - :ON_PERMANENT_INSTANCE_DELETION
                  default_value: :NEVER
  - !ruby/object:Api::Resource
    name: 'RegionPerInstanceConfig'
    base_url:  'projects/{{project}}/regions/{{region}}/instanceGroupManagers/{{region_instance_group_manager}}'
    description: |
      A config defined for a single managed instance that belongs to an instance group manager. It preserves the instance name
      across instance group manager operations and can define stateful disks or metadata that are unique to the instance.
      This resource works with regional instance group managers.
    create_verb: :POST
    create_url: projects/{{project}}/regions/{{region}}/instanceGroupManagers/{{region_instance_group_manager}}/createInstances
    update_verb: :POST
    update_url: projects/{{project}}/regions/{{region}}/instanceGroupManagers/{{region_instance_group_manager}}/updatePerInstanceConfigs
    delete_verb: :POST
    delete_url: projects/{{project}}/regions/{{region}}/instanceGroupManagers/{{region_instance_group_manager}}/deletePerInstanceConfigs
    read_verb: :POST
    self_link: projects/{{project}}/regions/{{region}}/instanceGroupManagers/{{region_instance_group_manager}}/listPerInstanceConfigs
    identity:
      - name
    nested_query: !ruby/object:Api::Resource::NestedQuery
      keys:
        - items
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation': 'https://cloud.google.com/compute/docs/instance-groups/stateful-migs#per-instance_configs'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/instanceGroupManagers'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'name'
        description: |
          Region where the containing instance group manager is located
        required: true
        url_param_only: true
        input: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'regionInstanceGroupManager'
        resource: 'RegionInstanceGroupManager'
        imports: 'name'
        description: |
          The region instance group manager this instance config is part of.
        required: true
        url_param_only: true
        input: true
    properties:
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          The name for this per-instance config and its corresponding instance.
        required: true
        input: true
      - !ruby/object:Api::Type::NestedObject
        name: 'preservedState'
        description: 'The preserved state for this instance.'
        update_verb: :POST
        properties:
          - !ruby/object:Api::Type::KeyValuePairs
            name: 'metadata'
            description: |
              Preserved metadata defined for this instance. This is a list of key->value pairs.
          - !ruby/object:Api::Type::Array
            name: 'disk'
            api_name: disks
            description: |
              Stateful disks for the instance.
            item_type: !ruby/object:Api::Type::NestedObject
              properties:
                - !ruby/object:Api::Type::String
                  name: deviceName
                  required: true
                  description: |
                    A unique device name that is reflected into the /dev/ tree of a Linux operating system running within the instance.
                - !ruby/object:Api::Type::String
                  name: source
                  required: true
                  description: |
                    The URI of an existing persistent disk to attach under the specified device-name in the format
                    `projects/project-id/zones/zone/disks/disk-name`.
                - !ruby/object:Api::Type::Enum
                  name: mode
                  description: |
                    The mode of the disk.
                  values:
                    - :READ_ONLY
                    - :READ_WRITE
                  default_value: :READ_WRITE
                - !ruby/object:Api::Type::Enum
                  name: deleteRule
                  description: |
                    A value that prescribes what should happen to the stateful disk when the VM instance is deleted.
                    The available options are `NEVER` and `ON_PERMANENT_INSTANCE_DELETION`.
                    `NEVER` - detach the disk when the VM is deleted, but do not delete the disk.
                    `ON_PERMANENT_INSTANCE_DELETION` will delete the stateful disk when the VM is permanently
                    deleted from the instance group.
                  values:
                    - :NEVER
                    - :ON_PERMANENT_INSTANCE_DELETION
                  default_value: :NEVER
  - !ruby/object:Api::Resource
    name: 'ProjectInfo'
    base_url: projects
    self_link: projects/{{project}}
    readonly: true
    description: |
      Information about the project specifically for compute.
    properties:
      - !ruby/object:Api::Type::String
        name: name
        description: The name of this project
      - !ruby/object:Api::Type::NestedObject
        name: 'commonInstanceMetadata'
        description: 'Metadata shared for all instances in this project'
        properties:
          - !ruby/object:Api::Type::Array
            name: 'items'
            description: |
              Array of key/values
            item_type: !ruby/object:Api::Type::NestedObject
              properties:
                - !ruby/object:Api::Type::String
                  name: 'key'
                  description: 'Key of the metadata key/value pair'
                - !ruby/object:Api::Type::String
                  name: 'value'
                  description: 'Value of the metadata key/value pair'
      - !ruby/object:Api::Type::Array
        name: 'enabledFeatures'
        description: |
          Restricted features enabled for use on this project
        item_type: Api::Type::String
      - !ruby/object:Api::Type::String
        name: defaultServiceAccount
        description: Default service account used by VMs in this project
      - !ruby/object:Api::Type::String
        name: xpnProjectStatus
        description: The role this project has in a shared VPC configuration.
      - !ruby/object:Api::Type::String
        name: defaultNetworkTier
        description: The default network tier used for configuring resources in this project
      - !ruby/object:Api::Type::Array
        name: 'quotas'
        description: |
          Quotas applied to this project
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::String
              name: 'metric'
              description: 'Name of the quota metric'
            - !ruby/object:Api::Type::String
              name: 'limit'
              description: 'Quota limit for this metric'
            - !ruby/object:Api::Type::String
              name: 'usage'
              description: 'Current usage of this metric'
            - !ruby/object:Api::Type::String
              name: 'owner'
              description: Owning resource. This is the resource on which this quota is applied.
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
  - !ruby/object:Api::Resource
    name: 'Region'
    kind: 'compute#region'
    base_url: projects/{{project}}/regions
    collection_url_key: 'items'
    has_self_link: true
    readonly: true
    description: |
      Represents a Region resource. A region is a specific geographical
      location where you can run your resources. Each region has one or more
      zones
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::NestedObject
        name: 'deprecated'
        description: 'The deprecation state of this resource.'
        output: true
        properties:
          - !ruby/object:Api::Type::Time
            name: 'deleted'
            description: |
              An optional RFC3339 timestamp on or after which the deprecation state
              of this resource will be changed to DELETED.
          - !ruby/object:Api::Type::Time
            name: 'deprecated'
            description: |
              An optional RFC3339 timestamp on or after which the deprecation state
              of this resource will be changed to DEPRECATED.
            output: true
          - !ruby/object:Api::Type::Time
            name: 'obsolete'
            description: |
              An optional RFC3339 timestamp on or after which the deprecation state
              of this resource will be changed to OBSOLETE.
            output: true
          - !ruby/object:Api::Type::String
            name: 'replacement'
            description: |
              The URL of the suggested replacement for a deprecated resource. The
              suggested replacement resource must be the same kind of resource as
              the deprecated resource.
            output: true
          - !ruby/object:Api::Type::Enum
            name: 'state'
            description: |
              The deprecation state of this resource. This can be DEPRECATED,
              OBSOLETE, or DELETED. Operations which create a new resource using a
              DEPRECATED resource will return successfully, but with a warning
              indicating the deprecated resource and recommending its replacement.
              Operations which use OBSOLETE or DELETED resources will be rejected
              and result in an error.
            values:
              - :DEPRECATED
              - :OBSOLETE
              - :DELETED
            output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional description of this resource.'
        output: true
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: 'Name of the resource.'
      - !ruby/object:Api::Type::Array
        name: 'quotas'
        description: 'Quotas assigned to this region.'
        output: true
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::String
              name: 'metric'
              description: 'Name of the quota metric.'
              output: true
            - !ruby/object:Api::Type::Double
              name: 'limit'
              description: 'Quota limit for this metric.'
              output: true
            - !ruby/object:Api::Type::Double
              name: 'usage'
              description: 'Current usage of this metric.'
              output: true
            - !ruby/object:Api::Type::String
              name: 'owner'
              description: 'Owning resource. This is the resource on which this quota is applied.'
              output: true
      - !ruby/object:Api::Type::Enum
        name: 'status'
        description: |
          Status of the region, either UP or DOWN.
        values:
          - :UP
          - :DOWN
        output: true
      - !ruby/object:Api::Type::Array
        name: 'zones'
        description: 'List of zones within the region'
        item_type: Api::Type::String
        output: true
  - !ruby/object:Api::Resource
    name: 'RegionAutoscaler'
    kind: 'compute#autoscaler'
    base_url: projects/{{project}}/regions/{{region}}/autoscalers
    update_url: projects/{{project}}/regions/{{region}}/autoscalers?autoscaler={{name}}
    collection_url_key: 'items'
    has_self_link: true
    description: |
      Represents an Autoscaler resource.

      Autoscalers allow you to automatically scale virtual machine instances in
      managed instance groups according to an autoscaling policy that you
      define.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Autoscaling Groups of Instances': 'https://cloud.google.com/compute/docs/autoscaler/'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/regionAutoscalers'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'name'
        description: |
          URL of the region where the instance group resides.
        required: true
        input: true
    properties:
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'Unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. The name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        required: true
        input: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource.
      - !ruby/object:Api::Type::NestedObject
        name: 'autoscalingPolicy'
        description: |
          The configuration parameters for the autoscaling algorithm. You can
          define one or more of the policies for an autoscaler: cpuUtilization,
          customMetricUtilizations, and loadBalancingUtilization.

          If none of these are specified, the default will be to autoscale based
          on cpuUtilization to 0.6 or 60%.
        required: true
        properties:
          - !ruby/object:Api::Type::Integer
            name: 'minNumReplicas'
            description: |
              The minimum number of replicas that the autoscaler can scale down
              to. This cannot be less than 0. If not provided, autoscaler will
              choose a default value depending on maximum number of instances
              allowed.
            send_empty_value: true
          - !ruby/object:Api::Type::Integer
            name: 'maxNumReplicas'
            description: |
              The maximum number of instances that the autoscaler can scale up
              to. This is required when creating or updating an autoscaler. The
              maximum number of replicas should not be lower than minimal number
              of replicas.
            required: true
          - !ruby/object:Api::Type::Integer
            name: 'coolDownPeriodSec'
            description: |
              The number of seconds that the autoscaler should wait before it
              starts collecting information from a new instance. This prevents
              the autoscaler from collecting information when the instance is
              initializing, during which the collected usage would not be
              reliable. The default time autoscaler waits is 60 seconds.

              Virtual machine initialization times might vary because of
              numerous factors. We recommend that you test how long an
              instance may take to initialize. To do this, create an instance
              and time the startup process.
            default_value: 60
          - !ruby/object:Api::Type::Enum
            name: 'mode'
            default_value: :ON
            description: |
              Defines operating mode for this policy.
            values:
              - :OFF
              - :ONLY_UP
              - :ON
          - !ruby/object:Api::Type::NestedObject
            name: 'scaleDownControl'
            min_version: beta
            description: |
              Defines scale down controls to reduce the risk of response latency
              and outages due to abrupt scale-in events
            properties:
            - !ruby/object:Api::Type::NestedObject
              name: 'maxScaledDownReplicas'
              at_least_one_of:
                - autoscaling_policy.0.scale_down_control.0.max_scaled_down_replicas
                - autoscaling_policy.0.scale_down_control.0.time_window_sec
              properties:
              - !ruby/object:Api::Type::Integer
                name: 'fixed'
                at_least_one_of:
                  - autoscaling_policy.0.scale_down_control.0.max_scaled_down_replicas.0.fixed
                  - autoscaling_policy.0.scale_down_control.0.max_scaled_down_replicas.0.percent
                description: |
                  Specifies a fixed number of VM instances. This must be a positive
                  integer.
              - !ruby/object:Api::Type::Integer
                name: 'percent'
                at_least_one_of:
                  - autoscaling_policy.0.scale_down_control.0.max_scaled_down_replicas.0.fixed
                  - autoscaling_policy.0.scale_down_control.0.max_scaled_down_replicas.0.percent
                description: |
                  Specifies a percentage of instances between 0 to 100%, inclusive.
                  For example, specify 80 for 80%.
            - !ruby/object:Api::Type::Integer
              name: 'timeWindowSec'
              at_least_one_of:
                - autoscaling_policy.0.scale_down_control.0.max_scaled_down_replicas
                - autoscaling_policy.0.scale_down_control.0.time_window_sec
              description: |
                How long back autoscaling should look when computing recommendations
                to include directives regarding slower scale down, as described above.
          - !ruby/object:Api::Type::NestedObject
            name: 'scaleInControl'
            description: |
              Defines scale in controls to reduce the risk of response latency
              and outages due to abrupt scale-in events
            properties:
            - !ruby/object:Api::Type::NestedObject
              name: 'maxScaledInReplicas'
              at_least_one_of:
                - autoscaling_policy.0.scale_in_control.0.max_scaled_in_replicas
                - autoscaling_policy.0.scale_in_control.0.time_window_sec
              properties:
              - !ruby/object:Api::Type::Integer
                name: 'fixed'
                at_least_one_of:
                  - autoscaling_policy.0.scale_in_control.0.max_scaled_in_replicas.0.fixed
                  - autoscaling_policy.0.scale_in_control.0.max_scaled_in_replicas.0.percent
                description: |
                  Specifies a fixed number of VM instances. This must be a positive
                  integer.
              - !ruby/object:Api::Type::Integer
                name: 'percent'
                at_least_one_of:
                  - autoscaling_policy.0.scale_in_control.0.max_scaled_in_replicas.0.fixed
                  - autoscaling_policy.0.scale_in_control.0.max_scaled_in_replicas.0.percent
                description: |
                  Specifies a percentage of instances between 0 to 100%, inclusive.
                  For example, specify 80 for 80%.
            - !ruby/object:Api::Type::Integer
              name: 'timeWindowSec'
              at_least_one_of:
                - autoscaling_policy.0.scale_in_control.0.max_scaled_in_replicas
                - autoscaling_policy.0.scale_in_control.0.time_window_sec
              description: |
                How long back autoscaling should look when computing recommendations
                to include directives regarding slower scale down, as described above.
          - !ruby/object:Api::Type::NestedObject
            name: 'cpuUtilization'
            description: |
              Defines the CPU utilization policy that allows the autoscaler to
              scale based on the average CPU utilization of a managed instance
              group.
            properties:
            - !ruby/object:Api::Type::Double
              name: 'utilizationTarget'
              description: |
                The target CPU utilization that the autoscaler should maintain.
                Must be a float value in the range (0, 1]. If not specified, the
                default is 0.6.

                If the CPU level is below the target utilization, the autoscaler
                scales down the number of instances until it reaches the minimum
                number of instances you specified or until the average CPU of
                your instances reaches the target utilization.

                If the average CPU is above the target utilization, the autoscaler
                scales up until it reaches the maximum number of instances you
                specified or until the average utilization reaches the target
                utilization.
            - !ruby/object:Api::Type::String
              name: 'predictiveMethod'
              default_value: NONE
              description: |
                Indicates whether predictive autoscaling based on CPU metric is enabled. Valid values are:

                - NONE (default). No predictive method is used. The autoscaler scales the group to meet current demand based on real-time metrics.

                - OPTIMIZE_AVAILABILITY. Predictive autoscaling improves availability by monitoring daily and weekly load patterns and scaling out ahead of anticipated demand.
          - !ruby/object:Api::Type::Array
            name: 'customMetricUtilizations'
            description: |
              Configuration parameters of autoscaling based on a custom metric.
            item_type: !ruby/object:Api::Type::NestedObject
              properties:
              - !ruby/object:Api::Type::String
                name: 'metric'
                description: |
                  The identifier (type) of the Stackdriver Monitoring metric.
                  The metric cannot have negative values.

                  The metric must have a value type of INT64 or DOUBLE.
                required: true
              - !ruby/object:Api::Type::Double
                name: 'singleInstanceAssignment'
                min_version: beta
                description: |
                  If scaling is based on a per-group metric value that represents the
                  total amount of work to be done or resource usage, set this value to
                  an amount assigned for a single instance of the scaled group.
                  The autoscaler will keep the number of instances proportional to the
                  value of this metric, the metric itself should not change value due
                  to group resizing.

                  For example, a good metric to use with the target is
                  `pubsub.googleapis.com/subscription/num_undelivered_messages`
                  or a custom metric exporting the total number of requests coming to
                  your instances.

                  A bad example would be a metric exporting an average or median
                  latency, since this value can't include a chunk assignable to a
                  single instance, it could be better used with utilization_target
                  instead.
              - !ruby/object:Api::Type::Double
                name: 'utilizationTarget'
                description: |
                  The target value of the metric that autoscaler should
                  maintain. This must be a positive value. A utilization
                  metric scales number of virtual machines handling requests
                  to increase or decrease proportionally to the metric.

                  For example, a good metric to use as a utilizationTarget is
                  www.googleapis.com/compute/instance/network/received_bytes_count.
                  The autoscaler will work to keep this value constant for each
                  of the instances.
              - !ruby/object:Api::Type::Enum
                name: 'utilizationTargetType'
                description: |
                  Defines how target utilization value is expressed for a
                  Stackdriver Monitoring metric.
                values:
                  - :GAUGE
                  - :DELTA_PER_SECOND
                  - :DELTA_PER_MINUTE
              - !ruby/object:Api::Type::String
                name: 'filter'
                description: |
                  A filter string to be used as the filter string for
                  a Stackdriver Monitoring TimeSeries.list API call.
                  This filter is used to select a specific TimeSeries for
                  the purpose of autoscaling and to determine whether the metric
                  is exporting per-instance or per-group data.

                  You can only use the AND operator for joining selectors.
                  You can only use direct equality comparison operator (=) without
                  any functions for each selector.
                  You can specify the metric in both the filter string and in the
                  metric field. However, if specified in both places, the metric must
                  be identical.

                  The monitored resource type determines what kind of values are
                  expected for the metric. If it is a gce_instance, the autoscaler
                  expects the metric to include a separate TimeSeries for each
                  instance in a group. In such a case, you cannot filter on resource
                  labels.

                  If the resource type is any other value, the autoscaler expects
                  this metric to contain values that apply to the entire autoscaled
                  instance group and resource label filtering can be performed to
                  point autoscaler at the correct TimeSeries to scale upon.
                  This is called a per-group metric for the purpose of autoscaling.

                  If not specified, the type defaults to gce_instance.

                  You should provide a filter that is selective enough to pick just
                  one TimeSeries for the autoscaled group or for each of the instances
                  (if you are using gce_instance resource type). If multiple
                  TimeSeries are returned upon the query execution, the autoscaler
                  will sum their respective values to obtain its scaling value.
                min_version: beta
          - !ruby/object:Api::Type::NestedObject
            name: 'loadBalancingUtilization'
            description: |
              Configuration parameters of autoscaling based on a load balancer.
            properties:
            - !ruby/object:Api::Type::Double
              name: 'utilizationTarget'
              description: |
                Fraction of backend capacity utilization (set in HTTP(s) load
                balancing configuration) that autoscaler should maintain. Must
                be a positive float value. If not defined, the default is 0.8.
          - !ruby/object:Api::Type::Map
            name: 'scalingSchedules'
            description: |
              Scaling schedules defined for an autoscaler. Multiple schedules can be set on an autoscaler and they can overlap.
            key_name: name
            key_description: |
              A name for the schedule.
            value_type: !ruby/object:Api::Type::NestedObject
              name: scalingSchedule
              properties:
                - !ruby/object:Api::Type::Integer
                  name: 'minRequiredReplicas'
                  description: |
                    Minimum number of VM instances that autoscaler will recommend in time intervals starting according to schedule.
                  required: true
                  send_empty_value: true
                - !ruby/object:Api::Type::String
                  name: 'schedule'
                  description: |
                    The start timestamps of time intervals when this scaling schedule should provide a scaling signal. This field uses the extended cron format (with an optional year field).
                  required: true
                - !ruby/object:Api::Type::String
                  name: 'timeZone'
                  default_value: UTC
                  description: |
                    The time zone to be used when interpreting the schedule. The value of this field must be a time zone name from the tz database: http://en.wikipedia.org/wiki/Tz_database.
                - !ruby/object:Api::Type::Integer
                  name: 'durationSec'
                  description: |
                    The duration of time intervals (in seconds) for which this scaling schedule will be running. The minimum allowed value is 300.
                  required: true
                - !ruby/object:Api::Type::Boolean
                  name: 'disabled'
                  description: |
                    A boolean value that specifies if a scaling schedule can influence autoscaler recommendations. If set to true, then a scaling schedule has no effect.
                  default_value: false
                - !ruby/object:Api::Type::String
                  name: 'description'
                  description: |
                    A description of a scaling schedule.
      - !ruby/object:Api::Type::String
        name: 'target'
        # TODO(#303): resourceref once RegionIGM exists
        # resource: 'RegionInstanceGroupManager'
        # imports: 'selfLink'
        description: |
          URL of the managed instance group that this autoscaler will scale.
        required: true
  - !ruby/object:Api::Resource
    name: 'RegionDiskType'
    kind: 'compute#diskType'
    base_url: projects/{{project}}/regions/{{region}}/diskTypes
    collection_url_key: 'items'
    description: |
      Represents a regional DiskType resource. A DiskType resource represents
      the type of disk to use, such as a pd-ssd, pd-balanced or pd-standard. To reference a
      disk type, use the disk type's full or partial URL.
    readonly: true
    has_self_link: true
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'name'
        description: 'A reference to the region where the disk type resides.'
        required: true
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::Integer
        name: 'defaultDiskSizeGb'
        description: 'Server-defined default disk size in GB.'
        output: true
      - !ruby/object:Api::Type::NestedObject
        name: 'deprecated'
        description: 'The deprecation status associated with this disk type.'
        output: true
        properties:
          - !ruby/object:Api::Type::Time
            name: 'deleted'
            description: |
              An optional RFC3339 timestamp on or after which the deprecation state
              of this resource will be changed to DELETED.
            output: true
          - !ruby/object:Api::Type::Time
            name: 'deprecated'
            description: |
              An optional RFC3339 timestamp on or after which the deprecation state
              of this resource will be changed to DEPRECATED.
            output: true
          - !ruby/object:Api::Type::Time
            name: 'obsolete'
            description: |
              An optional RFC3339 timestamp on or after which the deprecation state
              of this resource will be changed to OBSOLETE.
            output: true
          - !ruby/object:Api::Type::String
            name: 'replacement'
            description: |
              The URL of the suggested replacement for a deprecated resource. The
              suggested replacement resource must be the same kind of resource as
              the deprecated resource.
            output: true
          - !ruby/object:Api::Type::Enum
            name: 'state'
            description: |
              The deprecation state of this resource. This can be DEPRECATED,
              OBSOLETE, or DELETED. Operations which create a new resource using a
              DEPRECATED resource will return successfully, but with a warning
              indicating the deprecated resource and recommending its replacement.
              Operations which use OBSOLETE or DELETED resources will be rejected
              and result in an error.
            values:
              - :DEPRECATED
              - :OBSOLETE
              - :DELETED
            output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional description of this resource.'
        output: true
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: 'Name of the resource.'
      - !ruby/object:Api::Type::String
        name: 'validDiskSize'
        description: |
          An optional textual description of the valid disk size, such as
          "10GB-10TB".
        output: true
  - !ruby/object:Api::Resource
    name: 'RegionDisk'
    kind: 'compute#disk'
    input: true
    base_url: projects/{{project}}/regions/{{region}}/disks
    collection_url_key: 'items'
    has_self_link: true
    description: |
      Persistent disks are durable storage devices that function similarly to
      the physical disks in a desktop or a server. Compute Engine manages the
      hardware behind these devices to ensure data redundancy and optimize
      performance for you. Persistent disks are available as either standard
      hard disk drives (HDD) or solid-state drives (SSD).

      Persistent disks are located independently from your virtual machine
      instances, so you can detach or move persistent disks to keep your data
      even after you delete your instances. Persistent disk performance scales
      automatically with size, so you can resize your existing persistent disks
      or add more persistent disks to an instance to meet your performance and
      storage space requirements.

      Add a persistent disk to your instance when you need reliable and
      affordable storage with consistent performance characteristics.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Adding or Resizing Regional Persistent Disks':
          'https://cloud.google.com/compute/docs/disks/regional-persistent-disk'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/regionDisks'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'name'
        description: 'A reference to the region where the disk resides.'
        required: true
      - !ruby/object:Api::Type::NestedObject
        name: 'diskEncryptionKey'
        description: |
          Encrypts the disk using a customer-supplied encryption key.

          After you encrypt a disk with a customer-supplied key, you must
          provide the same key if you use the disk later (e.g. to create a disk
          snapshot or an image, or to attach the disk to a virtual machine).

          Customer-supplied encryption keys do not protect access to metadata of
          the disk.

          If you do not provide an encryption key when creating the disk, then
          the disk will be encrypted using an automatically generated key and
          you do not need to provide a key to use the disk later.
        properties:
          - !ruby/object:Api::Type::String
            name: 'rawKey'
            description: |
              Specifies a 256-bit customer-supplied encryption key, encoded in
              RFC 4648 base64 to either encrypt or decrypt this resource.
          - !ruby/object:Api::Type::String
            name: 'sha256'
            description: |
              The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied
              encryption key that protects this resource.
            output: true
          - !ruby/object:Api::Type::String
            # TODO(chrisst) Change to ResourceRef once KMS is in Magic Modules
            name: 'kmsKeyName'
            description: |
              The name of the encryption key that is stored in Google Cloud KMS.
        input: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'sourceSnapshot'
        resource: 'Snapshot'
        imports: 'selfLink'
        description: |
          The source snapshot used to create this disk. You can provide this as
          a partial or full URL to the resource. For example, the following are
          valid values:

          * `https://www.googleapis.com/compute/v1/projects/project/global/snapshots/snapshot`
          * `projects/project/global/snapshots/snapshot`
          * `global/snapshots/snapshot`
      - !ruby/object:Api::Type::NestedObject
        name: 'sourceSnapshotEncryptionKey'
        description: |
          The customer-supplied encryption key of the source snapshot. Required
          if the source snapshot is protected by a customer-supplied encryption
          key.
        properties:
          - !ruby/object:Api::Type::String
            name: 'rawKey'
            description: |
              Specifies a 256-bit customer-supplied encryption key, encoded in
              RFC 4648 base64 to either encrypt or decrypt this resource.
          - !ruby/object:Api::Type::String
            # TODO(chrisst) Change to ResourceRef once KMS is in Magic Modules
            name: 'kmsKeyName'
            min_version: beta
            description: |
              The name of the encryption key that is stored in Google Cloud KMS.
          - !ruby/object:Api::Type::String
            name: 'sha256'
            description: |
              The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied
              encryption key that protects this resource.
            output: true
        input: true
      - !ruby/object:Api::Type::String
        name: 'sourceSnapshotId'
        description: |
          The unique ID of the snapshot used to create this disk. This value
          identifies the exact snapshot that was used to create this persistent
          disk. For example, if you created the persistent disk from a snapshot
          that was later deleted and recreated under the same name, the source
          snapshot ID would identify the exact version of the snapshot that was
          used.
        output: true
    properties:
      - !ruby/object:Api::Type::Fingerprint
        name: 'labelFingerprint'
        description: |
          The fingerprint used for optimistic locking of this resource.  Used
          internally during updates.
        update_url: 'projects/{{project}}/regions/{{region}}/disks/{{name}}/setLabels'
        update_verb: :POST
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource. Provide this property when
          you create the resource.
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::Time
        name: 'lastAttachTimestamp'
        description: 'Last attach timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::Time
        name: 'lastDetachTimestamp'
        description: 'Last detach timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::KeyValuePairs
        name: 'labels'
        description: |
          Labels to apply to this disk.  A list of key->value pairs.
        update_verb: :POST
        update_url: 'projects/{{project}}/regions/{{region}}/disks/{{name}}/setLabels'
      - !ruby/object:Api::Type::Array
        name: 'licenses'
        description: 'Any applicable publicly visible licenses.'
        item_type: Api::Type::String
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        input: true
        required: true
      - !ruby/object:Api::Type::Integer
        name: 'sizeGb'
        description: |
          Size of the persistent disk, specified in GB. You can specify this
          field when creating a persistent disk using the sourceImage or
          sourceSnapshot parameter, or specify it alone to create an empty
          persistent disk.

          If you specify this field along with sourceImage or sourceSnapshot,
          the value of sizeGb must not be less than the size of the sourceImage
          or the size of the snapshot.
        update_verb: :POST
        update_url: 'projects/{{project}}/regions/{{region}}/disks/{{name}}/resize'
      - !ruby/object:Api::Type::Array
        name: 'users'
        description: |
          Links to the users of the disk (attached instances) in form:
          project/zones/zone/instances/instance
        item_type: !ruby/object:Api::Type::ResourceRef
          name: 'user'
          resource: 'Instance'
          imports: 'selfLink'
          description: 'A reference to a user of this disk'
        output: true
      - !ruby/object:Api::Type::Integer
        name: 'physicalBlockSizeBytes'
        description: |
          Physical block size of the persistent disk, in bytes. If not present
          in a request, a default value is used. Currently supported sizes
          are 4096 and 16384, other sizes may be added in the future.
          If an unsupported value is requested, the error message will list
          the supported values for the caller's project.
      - !ruby/object:Api::Type::Array
        name: 'replicaZones'
        description: 'URLs of the zones where the disk should be replicated to.'
        min_size: 2
        max_size: 2
        required: true
        item_type: !ruby/object:Api::Type::ResourceRef
          name: 'zone'
          resource: 'Zone'
          imports: 'selfLink'
          description: |
            A reference to a zone where the disk should be replicated to.
      - !ruby/object:Api::Type::ResourceRef
        name: 'type'
        resource: 'RegionDiskType'
        imports: 'selfLink'
        description: |
          URL of the disk type resource describing which disk type to use to
          create the disk. Provide this when creating the disk.
      - !ruby/object:Api::Type::String
        name: 'interface'
        min_version: 'beta'
        # interface is removed using url_param_only to preserve schema definition
        # and prevent sending or reading in API requests
        url_param_only: true
        default_value: 'SCSI'
        deprecation_message: This field is no longer in use, disk interfaces will be automatically determined on attachment. To resolve this issue, remove this field from your config.
        description: |
          Specifies the disk interface to use for attaching this disk, which is either SCSI or NVME. The default is SCSI.
      - !ruby/object:Api::Type::String
        name: 'sourceDisk'
        description: |
          The source disk used to create this disk. You can provide this as a partial or full URL to the resource.
          For example, the following are valid values:

          * https://www.googleapis.com/compute/v1/projects/{project}/zones/{zone}/disks/{disk}
          * https://www.googleapis.com/compute/v1/projects/{project}/regions/{region}/disks/{disk}
          * projects/{project}/zones/{zone}/disks/{disk}
          * projects/{project}/regions/{region}/disks/{disk}
          * zones/{zone}/disks/{disk}
          * regions/{region}/disks/{disk}
      - !ruby/object:Api::Type::String
        name: 'sourceDiskId'
        description: |
          The ID value of the disk used to create this image. This value may
          be used to determine whether the image was taken from the current
          or a previous instance of a given disk name.
        output: true
  - !ruby/object:Api::Resource
    name: 'RegionUrlMap'
    kind: 'compute#urlMap'
    base_url: projects/{{project}}/regions/{{region}}/urlMaps
    collection_url_key: 'items'
    has_self_link: true
    description: |
      UrlMaps are used to route requests to a backend service based on rules
      that you define for the host and path of an incoming URL.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'name'
        description: 'A reference to the region where the url map resides.'
        required: true
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'defaultService'
        exactly_one_of:
          - default_service
          - default_url_redirect
          - default_route_action.0.weighted_backend_services
        resource: 'RegionBackendService'
        imports: 'selfLink'
        description: |
          The full or partial URL of the defaultService resource to which traffic is directed if
          none of the hostRules match. If defaultRouteAction is additionally specified, advanced
          routing actions like URL Rewrites, etc. take effect prior to sending the request to the
          backend. However, if defaultService is specified, defaultRouteAction cannot contain any
          weightedBackendServices. Conversely, if routeAction specifies any
          weightedBackendServices, service must not be specified.  Only one of defaultService,
          defaultUrlRedirect or defaultRouteAction.weightedBackendService must be set.
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource. Provide this property when
          you create the resource.
      # 'fingerprint' used internally for object consistency.
      - !ruby/object:Api::Type::Array
        name: 'hostRules'
        description: 'The list of HostRules to use against the URL.'
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::String
              name: 'description'
              description: |
                An optional description of this HostRule. Provide this property
                when you create the resource.
            - !ruby/object:Api::Type::Array
              name: 'hosts'
              required: true
              item_type: Api::Type::String
              description: |
                The list of host patterns to match. They must be valid
                hostnames, except * will match any string of ([a-z0-9-.]*). In
                that case, * must be the first character and must be followed in
                the pattern by either - or ..
            - !ruby/object:Api::Type::String
              name: 'pathMatcher'
              required: true
              description: |
                The name of the PathMatcher to use to match the path portion of
                the URL if the hostRule matches the URL's host portion.
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::Fingerprint
        name: 'fingerprint'
        description: |
          Fingerprint of this resource. This field is used internally during
          updates of this resource.
      - !ruby/object:Api::Type::String
        name: 'name'
        required: true
        input: true
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
      - !ruby/object:Api::Type::Array
        name: 'pathMatchers'
        description: 'The list of named PathMatchers to use against the URL.'
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::ResourceRef
              name: 'defaultService'
              # TODO: (mbang) won't work for array path matchers yet, uncomment here once they are supported.
              # (github.com/hashicorp/terraform-plugin-sdk/issues/470)
              # TODO: add defaultRouteAction.weightedBackendService here once they are supported.
              # exactly_one_of:
              #   - path_matchers.0.default_service
              #   - path_matchers.0.default_url_redirect
              resource: 'RegionBackendService'
              imports: 'selfLink'
              description: |
                A reference to a RegionBackendService resource. This will be used if
                none of the pathRules defined by this PathMatcher is matched by
                the URL's path portion.
            - !ruby/object:Api::Type::String
              name: 'description'
              description: 'An optional description of this resource.'
            - !ruby/object:Api::Type::String
              name: 'name'
              required: true
              description: |
                The name to which this PathMatcher is referred by the HostRule.
            - !ruby/object:Api::Type::Array
              name: 'routeRules'
              description: |
                The list of ordered HTTP route rules. Use this list instead of pathRules when
                advanced route matching and routing actions are desired. The order of specifying
                routeRules matters: the first rule that matches will cause its specified routing
                action to take effect. Within a given pathMatcher, only one of pathRules or
                routeRules must be set. routeRules are not supported in UrlMaps intended for
                External load balancers.
              item_type: !ruby/object:Api::Type::NestedObject
                properties:
                  - !ruby/object:Api::Type::Integer
                    name: 'priority'
                    required: true
                    description: |
                      For routeRules within a given pathMatcher, priority determines the order
                      in which load balancer will interpret routeRules. RouteRules are evaluated
                      in order of priority, from the lowest to highest number. The priority of
                      a rule decreases as its number increases (1, 2, 3, N+1). The first rule
                      that matches the request is applied.

                      You cannot configure two or more routeRules with the same priority.
                      Priority for each rule must be set to a number between 0 and
                      2147483647 inclusive.

                      Priority numbers can have gaps, which enable you to add or remove rules
                      in the future without affecting the rest of the rules. For example,
                      1, 2, 3, 4, 5, 9, 12, 16 is a valid series of priority numbers to which
                      you could add rules numbered from 6 to 8, 10 to 11, and 13 to 15 in the
                      future without any impact on existing rules.
                  - !ruby/object:Api::Type::ResourceRef
                    name: 'service'
                    resource: 'RegionBackendService'
                    imports: 'selfLink'
                    description: |
                      The region backend service resource to which traffic is
                      directed if this rule is matched. If routeAction is additionally specified,
                      advanced routing actions like URL Rewrites, etc. take effect prior to sending
                      the request to the backend. However, if service is specified, routeAction cannot
                      contain any weightedBackendService s. Conversely, if routeAction specifies any
                      weightedBackendServices, service must not be specified. Only one of urlRedirect,
                      service or routeAction.weightedBackendService must be set.
                  - !ruby/object:Api::Type::NestedObject
                    name: 'headerAction'
                    description: |
                      Specifies changes to request and response headers that need to take effect for
                      the selected backendService. The headerAction specified here are applied before
                      the matching pathMatchers[].headerAction and after pathMatchers[].routeRules[].r
                      outeAction.weightedBackendService.backendServiceWeightAction[].headerAction
                    properties:
                      - !ruby/object:Api::Type::Array
                        name: 'requestHeadersToAdd'
                        description: |
                          Headers to add to a matching request prior to forwarding the request to the
                          backendService.
                        item_type: !ruby/object:Api::Type::NestedObject
                          properties:
                            - !ruby/object:Api::Type::String
                              name: 'headerName'
                              required: true
                              description: |
                                The name of the header.
                            - !ruby/object:Api::Type::String
                              name: 'headerValue'
                              required: true
                              description: |
                                The value of the header to add.
                            - !ruby/object:Api::Type::Boolean
                              name: 'replace'
                              required: true
                              description: |
                                If false, headerValue is appended to any values that already exist for the
                                header. If true, headerValue is set for the header, discarding any values that
                                were set for that header.
                      - !ruby/object:Api::Type::Array
                        name: 'requestHeadersToRemove'
                        item_type: Api::Type::String
                        description: |
                          A list of header names for headers that need to be removed from the request
                          prior to forwarding the request to the backendService.
                      - !ruby/object:Api::Type::Array
                        name: 'responseHeadersToAdd'
                        description: |
                          Headers to add the response prior to sending the response back to the client.
                        item_type: !ruby/object:Api::Type::NestedObject
                          properties:
                            - !ruby/object:Api::Type::String
                              name: 'headerName'
                              required: true
                              description: |
                                The name of the header.
                            - !ruby/object:Api::Type::String
                              name: 'headerValue'
                              required: true
                              description: |
                                The value of the header to add.
                            - !ruby/object:Api::Type::Boolean
                              name: 'replace'
                              required: true
                              description: |
                                If false, headerValue is appended to any values that already exist for the
                                header. If true, headerValue is set for the header, discarding any values that
                                were set for that header.
                      - !ruby/object:Api::Type::Array
                        name: 'responseHeadersToRemove'
                        item_type: Api::Type::String
                        description: |
                          A list of header names for headers that need to be removed from the response
                          prior to sending the response back to the client.
                  - !ruby/object:Api::Type::Array
                    name: 'matchRules'
                    description: |
                      The rules for determining a match.
                    item_type: !ruby/object:Api::Type::NestedObject
                      properties:
                        - !ruby/object:Api::Type::String
                          name: 'fullPathMatch'
                          description: |
                            For satisfying the matchRule condition, the path of the request must exactly
                            match the value specified in fullPathMatch after removing any query parameters
                            and anchor that may be part of the original URL. FullPathMatch must be between 1
                            and 1024 characters. Only one of prefixMatch, fullPathMatch or regexMatch must
                            be specified.
                        - !ruby/object:Api::Type::Array
                          name: 'headerMatches'
                          description: |
                            Specifies a list of header match criteria, all of which must match corresponding
                            headers in the request.
                          item_type: !ruby/object:Api::Type::NestedObject
                            properties:
                              - !ruby/object:Api::Type::String
                                name: 'exactMatch'
                                description: |
                                  The value should exactly match contents of exactMatch. Only one of exactMatch,
                                  prefixMatch, suffixMatch, regexMatch, presentMatch or rangeMatch must be set.
                              - !ruby/object:Api::Type::String
                                name: 'headerName'
                                required: true
                                description: |
                                  The name of the HTTP header to match. For matching against the HTTP request's
                                  authority, use a headerMatch with the header name ":authority". For matching a
                                  request's method, use the headerName ":method".
                              - !ruby/object:Api::Type::Boolean
                                name: 'invertMatch'
                                default_value: false
                                description: |
                                  If set to false, the headerMatch is considered a match if the match criteria
                                  above are met. If set to true, the headerMatch is considered a match if the
                                  match criteria above are NOT met. Defaults to false.
                              - !ruby/object:Api::Type::String
                                name: 'prefixMatch'
                                description: |
                                  The value of the header must start with the contents of prefixMatch. Only one of
                                  exactMatch, prefixMatch, suffixMatch, regexMatch, presentMatch or rangeMatch
                                  must be set.
                              - !ruby/object:Api::Type::Boolean
                                name: 'presentMatch'
                                description: |
                                  A header with the contents of headerName must exist. The match takes place
                                  whether or not the request's header has a value or not. Only one of exactMatch,
                                  prefixMatch, suffixMatch, regexMatch, presentMatch or rangeMatch must be set.
                              - !ruby/object:Api::Type::NestedObject
                                name: 'rangeMatch'
                                description: |
                                  The header value must be an integer and its value must be in the range specified
                                  in rangeMatch. If the header does not contain an integer, number or is empty,
                                  the match fails. For example for a range [-5, 0]

                                  * -3 will match
                                  * 0 will not match
                                  * 0.25 will not match
                                  * -3someString will not match.

                                  Only one of exactMatch, prefixMatch, suffixMatch, regexMatch, presentMatch or
                                  rangeMatch must be set.
                                properties:
                                  - !ruby/object:Api::Type::Integer
                                    name: 'rangeEnd'
                                    required: true
                                    description: |
                                      The end of the range (exclusive).
                                  - !ruby/object:Api::Type::Integer
                                    name: 'rangeStart'
                                    required: true
                                    description: |
                                      The start of the range (inclusive).
                              - !ruby/object:Api::Type::String
                                name: 'regexMatch'
                                description: |
                                  The value of the header must match the regular expression specified in
                                  regexMatch. For regular expression grammar, please see:
                                  en.cppreference.com/w/cpp/regex/ecmascript  For matching against a port
                                  specified in the HTTP request, use a headerMatch with headerName set to PORT and
                                  a regular expression that satisfies the RFC2616 Host header's port specifier.
                                  Only one of exactMatch, prefixMatch, suffixMatch, regexMatch, presentMatch or
                                  rangeMatch must be set.
                              - !ruby/object:Api::Type::String
                                name: 'suffixMatch'
                                description: |
                                  The value of the header must end with the contents of suffixMatch. Only one of
                                  exactMatch, prefixMatch, suffixMatch, regexMatch, presentMatch or rangeMatch
                                  must be set.
                        - !ruby/object:Api::Type::Boolean
                          name: 'ignoreCase'
                          default_value: false
                          description: |
                            Specifies that prefixMatch and fullPathMatch matches are case sensitive.
                            Defaults to false.
                        - !ruby/object:Api::Type::Array
                          name: 'metadataFilters'
                          description: |
                            Opaque filter criteria used by Loadbalancer to restrict routing configuration to
                            a limited set xDS compliant clients. In their xDS requests to Loadbalancer, xDS
                            clients present node metadata. If a match takes place, the relevant routing
                            configuration is made available to those proxies. For each metadataFilter in
                            this list, if its filterMatchCriteria is set to MATCH_ANY, at least one of the
                            filterLabels must match the corresponding label provided in the metadata. If its
                            filterMatchCriteria is set to MATCH_ALL, then all of its filterLabels must match
                            with corresponding labels in the provided metadata. metadataFilters specified
                            here can be overrides those specified in ForwardingRule that refers to this
                            UrlMap. metadataFilters only applies to Loadbalancers that have their
                            loadBalancingScheme set to INTERNAL_SELF_MANAGED.
                          item_type: !ruby/object:Api::Type::NestedObject
                            properties:
                              - !ruby/object:Api::Type::Array
                                name: 'filterLabels'
                                min_size: 1
                                max_size: 64
                                required: true
                                description: |
                                  The list of label value pairs that must match labels in the provided metadata
                                  based on filterMatchCriteria  This list must not be empty and can have at the
                                  most 64 entries.
                                item_type: !ruby/object:Api::Type::NestedObject
                                  properties:
                                    - !ruby/object:Api::Type::String
                                      name: 'name'
                                      required: true
                                      description: |
                                        Name of metadata label. The name can have a maximum length of 1024 characters
                                        and must be at least 1 character long.
                                    - !ruby/object:Api::Type::String
                                      name: 'value'
                                      required: true
                                      description: |
                                        The value of the label must match the specified value. value can have a maximum
                                        length of 1024 characters.
                              - !ruby/object:Api::Type::Enum
                                name: 'filterMatchCriteria'
                                required: true
                                description: |
                                  Specifies how individual filterLabel matches within the list of filterLabels
                                  contribute towards the overall metadataFilter match. Supported values are:

                                  * MATCH_ANY: At least one of the filterLabels must have a matching label in the
                                  provided metadata.
                                  * MATCH_ALL: All filterLabels must have matching labels in
                                  the provided metadata.
                                values:
                                  - :MATCH_ALL
                                  - :MATCH_ANY
                        - !ruby/object:Api::Type::String
                          name: 'prefixMatch'
                          description: |
                            For satisfying the matchRule condition, the request's path must begin with the
                            specified prefixMatch. prefixMatch must begin with a /. The value must be
                            between 1 and 1024 characters. Only one of prefixMatch, fullPathMatch or
                            regexMatch must be specified.
                        - !ruby/object:Api::Type::Array
                          name: 'queryParameterMatches'
                          description: |
                            Specifies a list of query parameter match criteria, all of which must match
                            corresponding query parameters in the request.
                          item_type: !ruby/object:Api::Type::NestedObject
                            properties:
                              - !ruby/object:Api::Type::String
                                name: 'exactMatch'
                                description: |
                                  The queryParameterMatch matches if the value of the parameter exactly matches
                                  the contents of exactMatch. Only one of presentMatch, exactMatch and regexMatch
                                  must be set.
                              - !ruby/object:Api::Type::String
                                name: 'name'
                                required: true
                                description: |
                                  The name of the query parameter to match. The query parameter must exist in the
                                  request, in the absence of which the request match fails.
                              - !ruby/object:Api::Type::Boolean
                                name: 'presentMatch'
                                description: |
                                  Specifies that the queryParameterMatch matches if the request contains the query
                                  parameter, irrespective of whether the parameter has a value or not. Only one of
                                  presentMatch, exactMatch and regexMatch must be set.
                              - !ruby/object:Api::Type::String
                                name: 'regexMatch'
                                description: |
                                  The queryParameterMatch matches if the value of the parameter matches the
                                  regular expression specified by regexMatch. For the regular expression grammar,
                                  please see en.cppreference.com/w/cpp/regex/ecmascript  Only one of presentMatch,
                                  exactMatch and regexMatch must be set.
                        - !ruby/object:Api::Type::String
                          name: 'regexMatch'
                          description: |
                            For satisfying the matchRule condition, the path of the request must satisfy the
                            regular expression specified in regexMatch after removing any query parameters
                            and anchor supplied with the original URL. For regular expression grammar please
                            see en.cppreference.com/w/cpp/regex/ecmascript  Only one of prefixMatch,
                            fullPathMatch or regexMatch must be specified.
                  - !ruby/object:Api::Type::NestedObject
                    name: 'routeAction'
                    description: |
                      In response to a matching matchRule, the load balancer performs advanced routing
                      actions like URL rewrites, header transformations, etc. prior to forwarding the
                      request to the selected backend. If  routeAction specifies any
                      weightedBackendServices, service must not be set. Conversely if service is set,
                      routeAction cannot contain any  weightedBackendServices. Only one of routeAction
                      or urlRedirect must be set.
                    properties:
                      - !ruby/object:Api::Type::NestedObject
                        name: 'corsPolicy'
                        description: |
                          The specification for allowing client side cross-origin requests. Please see W3C
                          Recommendation for Cross Origin Resource Sharing
                        properties:
                          - !ruby/object:Api::Type::Boolean
                            name: 'allowCredentials'
                            default_value: false
                            description: |
                              In response to a preflight request, setting this to true indicates that the
                              actual request can include user credentials. This translates to the Access-
                              Control-Allow-Credentials header. Defaults to false.
                          - !ruby/object:Api::Type::Array
                            name: 'allowHeaders'
                            item_type: Api::Type::String
                            description: |
                              Specifies the content for the Access-Control-Allow-Headers header.
                          - !ruby/object:Api::Type::Array
                            name: 'allowMethods'
                            item_type: Api::Type::String
                            description: |
                              Specifies the content for the Access-Control-Allow-Methods header.
                          - !ruby/object:Api::Type::Array
                            name: 'allowOriginRegexes'
                            item_type: Api::Type::String
                            description: |
                              Specifies the regular expression patterns that match allowed origins. For
                              regular expression grammar please see en.cppreference.com/w/cpp/regex/ecmascript
                              An origin is allowed if it matches either allow_origins or allow_origin_regex.
                          - !ruby/object:Api::Type::Array
                            name: 'allowOrigins'
                            item_type: Api::Type::String
                            description: |
                              Specifies the list of origins that will be allowed to do CORS requests. An
                              origin is allowed if it matches either allow_origins or allow_origin_regex.
                          - !ruby/object:Api::Type::Boolean
                            name: 'disabled'
                            default_value: false
                            description: |
                              If true, specifies the CORS policy is disabled.
                              which indicates that the CORS policy is in effect. Defaults to false.
                          - !ruby/object:Api::Type::Array
                            name: 'exposeHeaders'
                            item_type: Api::Type::String
                            description: |
                              Specifies the content for the Access-Control-Expose-Headers header.
                          - !ruby/object:Api::Type::Integer
                            name: 'maxAge'
                            description: |
                              Specifies how long the results of a preflight request can be cached. This
                              translates to the content for the Access-Control-Max-Age header.
                      - !ruby/object:Api::Type::NestedObject
                        name: 'faultInjectionPolicy'
                        description: |
                          The specification for fault injection introduced into traffic to test the
                          resiliency of clients to backend service failure. As part of fault injection,
                          when clients send requests to a backend service, delays can be introduced by
                          Loadbalancer on a percentage of requests before sending those request to the
                          backend service. Similarly requests from clients can be aborted by the
                          Loadbalancer for a percentage of requests. timeout and retry_policy will be
                          ignored by clients that are configured with a fault_injection_policy.
                        properties:
                          - !ruby/object:Api::Type::NestedObject
                            name: 'abort'
                            description: |
                              The specification for how client requests are aborted as part of fault
                              injection.
                            properties:
                              - !ruby/object:Api::Type::Integer
                                name: 'httpStatus'
                                description: |
                                  The HTTP status code used to abort the request. The value must be between 200
                                  and 599 inclusive.
                              - !ruby/object:Api::Type::Double
                                name: 'percentage'
                                description: |
                                  The percentage of traffic (connections/operations/requests) which will be
                                  aborted as part of fault injection. The value must be between 0.0 and 100.0
                                  inclusive.
                          - !ruby/object:Api::Type::NestedObject
                            name: 'delay'
                            description: |
                              The specification for how client requests are delayed as part of fault
                              injection, before being sent to a backend service.
                            properties:
                              - !ruby/object:Api::Type::NestedObject
                                name: 'fixedDelay'
                                description: |
                                  Specifies the value of the fixed delay interval.
                                properties:
                                  - !ruby/object:Api::Type::Integer
                                    name: 'nanos'
                                    description: |
                                      Span of time that's a fraction of a second at nanosecond resolution. Durations
                                      less than one second are represented with a 0 `seconds` field and a positive
                                      `nanos` field. Must be from 0 to 999,999,999 inclusive.
                                  - !ruby/object:Api::Type::String
                                    name: 'seconds'
                                    required: true
                                    description: |
                                      Span of time at a resolution of a second. Must be from 0 to 315,576,000,000
                                      inclusive.
                              - !ruby/object:Api::Type::Double
                                name: 'percentage'
                                description: |
                                  The percentage of traffic (connections/operations/requests) on which delay will
                                  be introduced as part of fault injection. The value must be between 0.0 and
                                  100.0 inclusive.
                      - !ruby/object:Api::Type::NestedObject
                        name: 'requestMirrorPolicy'
                        description: |
                          Specifies the policy on how requests intended for the route's backends are
                          shadowed to a separate mirrored backend service. Loadbalancer does not wait for
                          responses from the shadow service. Prior to sending traffic to the shadow
                          service, the host / authority header is suffixed with -shadow.
                        properties:
                          - !ruby/object:Api::Type::ResourceRef
                            name: 'backendService'
                            required: true
                            resource: 'RegionBackendService'
                            imports: 'selfLink'
                            description: |
                              The RegionBackendService resource being mirrored to.
                      - !ruby/object:Api::Type::NestedObject
                        name: 'retryPolicy'
                        description: |
                          Specifies the retry policy associated with this route.
                        properties:
                          - !ruby/object:Api::Type::Integer
                            name: 'numRetries'
                            required: true
                            description: |
                              Specifies the allowed number retries. This number must be > 0.
                          - !ruby/object:Api::Type::NestedObject
                            name: 'perTryTimeout'
                            description: |
                              Specifies a non-zero timeout per retry attempt.
                            properties:
                              - !ruby/object:Api::Type::Integer
                                name: 'nanos'
                                description: |
                                  Span of time that's a fraction of a second at nanosecond resolution. Durations
                                  less than one second are represented with a 0 `seconds` field and a positive
                                  `nanos` field. Must be from 0 to 999,999,999 inclusive.
                              - !ruby/object:Api::Type::String
                                name: 'seconds'
                                required: true
                                description: |
                                  Span of time at a resolution of a second. Must be from 0 to 315,576,000,000
                                  inclusive.
                          - !ruby/object:Api::Type::Array
                            name: 'retryConditions'
                            item_type: Api::Type::String
                            description: |
                              Specifies one or more conditions when this retry rule applies. Valid values are:

                              * 5xx: Loadbalancer will attempt a retry if the backend service responds with
                                any 5xx response code, or if the backend service does not respond at all,
                                example: disconnects, reset, read timeout, connection failure, and refused
                                streams.
                              * gateway-error: Similar to 5xx, but only applies to response codes
                                502, 503 or 504.
                              * connect-failure: Loadbalancer will retry on failures
                                connecting to backend services, for example due to connection timeouts.
                              * retriable-4xx: Loadbalancer will retry for retriable 4xx response codes.
                                Currently the only retriable error supported is 409.
                              * refused-stream: Loadbalancer will retry if the backend service resets the stream with a
                                REFUSED_STREAM error code. This reset type indicates that it is safe to retry.
                              * cancelled: Loadbalancer will retry if the gRPC status code in the response
                                header is set to cancelled
                              * deadline-exceeded: Loadbalancer will retry if the
                                gRPC status code in the response header is set to deadline-exceeded
                              * resource-exhausted: Loadbalancer will retry if the gRPC status code in the response
                                header is set to resource-exhausted
                              * unavailable: Loadbalancer will retry if the gRPC status code in
                                the response header is set to unavailable
                      - !ruby/object:Api::Type::NestedObject
                        name: 'timeout'
                        description: |
                          Specifies the timeout for the selected route. Timeout is computed from the time
                          the request is has been fully processed (i.e. end-of-stream) up until the
                          response has been completely processed. Timeout includes all retries. If not
                          specified, the default value is 15 seconds.
                        properties:
                          - !ruby/object:Api::Type::Integer
                            name: 'nanos'
                            description: |
                              Span of time that's a fraction of a second at nanosecond resolution. Durations
                              less than one second are represented with a 0 `seconds` field and a positive
                              `nanos` field. Must be from 0 to 999,999,999 inclusive.
                          - !ruby/object:Api::Type::String
                            name: 'seconds'
                            required: true
                            description: |
                              Span of time at a resolution of a second. Must be from 0 to 315,576,000,000
                              inclusive.
                      - !ruby/object:Api::Type::NestedObject
                        name: 'urlRewrite'
                        description: |
                          The spec to modify the URL of the request, prior to forwarding the request to
                          the matched service
                        properties:
                          - !ruby/object:Api::Type::String
                            name: 'hostRewrite'
                            description: |
                              Prior to forwarding the request to the selected service, the request's host
                              header is replaced with contents of hostRewrite. The value must be between 1 and
                              255 characters.
                          - !ruby/object:Api::Type::String
                            name: 'pathPrefixRewrite'
                            description: |
                              Prior to forwarding the request to the selected backend service, the matching
                              portion of the request's path is replaced by pathPrefixRewrite. The value must
                              be between 1 and 1024 characters.
                      - !ruby/object:Api::Type::Array
                        name: 'weightedBackendServices'
                        description: |
                          A list of weighted backend services to send traffic to when a route match
                          occurs. The weights determine the fraction of traffic that flows to their
                          corresponding backend service. If all traffic needs to go to a single backend
                          service, there must be one  weightedBackendService with weight set to a non 0
                          number. Once a backendService is identified and before forwarding the request to
                          the backend service, advanced routing actions like Url rewrites and header
                          transformations are applied depending on additional settings specified in this
                          HttpRouteAction.
                        item_type: !ruby/object:Api::Type::NestedObject
                          properties:
                            - !ruby/object:Api::Type::ResourceRef
                              name: 'backendService'
                              required: true
                              resource: 'RegionBackendService'
                              imports: 'selfLink'
                              description: |
                                The default RegionBackendService resource. Before
                                forwarding the request to backendService, the loadbalancer applies any relevant
                                headerActions specified as part of this backendServiceWeight.
                            - !ruby/object:Api::Type::NestedObject
                              name: 'headerAction'
                              description: |
                                Specifies changes to request and response headers that need to take effect for
                                the selected backendService. headerAction specified here take effect before
                                headerAction in the enclosing HttpRouteRule, PathMatcher and UrlMap.
                              properties:
                                - !ruby/object:Api::Type::Array
                                  name: 'requestHeadersToAdd'
                                  description: |
                                    Headers to add to a matching request prior to forwarding the request to the
                                    backendService.
                                  item_type: !ruby/object:Api::Type::NestedObject
                                    properties:
                                      - !ruby/object:Api::Type::String
                                        name: 'headerName'
                                        required: true
                                        description: |
                                          The name of the header.
                                      - !ruby/object:Api::Type::String
                                        name: 'headerValue'
                                        required: true
                                        description: |
                                          The value of the header to add.
                                      - !ruby/object:Api::Type::Boolean
                                        name: 'replace'
                                        required: true
                                        description: |
                                          If false, headerValue is appended to any values that already exist for the
                                          header. If true, headerValue is set for the header, discarding any values that
                                          were set for that header.
                                - !ruby/object:Api::Type::Array
                                  name: 'requestHeadersToRemove'
                                  item_type: Api::Type::String
                                  description: |
                                    A list of header names for headers that need to be removed from the request
                                    prior to forwarding the request to the backendService.
                                - !ruby/object:Api::Type::Array
                                  name: 'responseHeadersToAdd'
                                  description: |
                                    Headers to add the response prior to sending the response back to the client.
                                  item_type: !ruby/object:Api::Type::NestedObject
                                    properties:
                                      - !ruby/object:Api::Type::String
                                        name: 'headerName'
                                        required: true
                                        description: |
                                          The name of the header.
                                      - !ruby/object:Api::Type::String
                                        name: 'headerValue'
                                        required: true
                                        description: |
                                          The value of the header to add.
                                      - !ruby/object:Api::Type::Boolean
                                        name: 'replace'
                                        required: true
                                        description: |
                                          If false, headerValue is appended to any values that already exist for the
                                          header. If true, headerValue is set for the header, discarding any values that
                                          were set for that header.
                                - !ruby/object:Api::Type::Array
                                  name: 'responseHeadersToRemove'
                                  item_type: Api::Type::String
                                  description: |
                                    A list of header names for headers that need to be removed from the response
                                    prior to sending the response back to the client.
                            - !ruby/object:Api::Type::Integer
                              name: 'weight'
                              required: true
                              description: |
                                Specifies the fraction of traffic sent to backendService, computed as weight /
                                (sum of all weightedBackendService weights in routeAction) . The selection of a
                                backend service is determined only for new traffic. Once a user's request has
                                been directed to a backendService, subsequent requests will be sent to the same
                                backendService as determined by the BackendService's session affinity policy.
                                The value must be between 0 and 1000
                  - !ruby/object:Api::Type::NestedObject
                    name: 'urlRedirect'
                    description: |
                      When this rule is matched, the request is redirected to a URL specified by
                      urlRedirect. If urlRedirect is specified, service or routeAction must not be
                      set.
                    properties:
                      - !ruby/object:Api::Type::String
                        name: 'hostRedirect'
                        description: |
                          The host that will be used in the redirect response instead of the one
                          that was supplied in the request. The value must be between 1 and 255
                          characters.
                      - !ruby/object:Api::Type::Boolean
                        name: 'httpsRedirect'
                        default_value: false
                        description: |
                          If set to true, the URL scheme in the redirected request is set to https.
                          If set to false, the URL scheme of the redirected request will remain the
                          same as that of the request. This must only be set for UrlMaps used in
                          TargetHttpProxys. Setting this true for TargetHttpsProxy is not
                          permitted. The default is set to false.
                      - !ruby/object:Api::Type::String
                        name: 'pathRedirect'
                        description: |
                          The path that will be used in the redirect response instead of the one
                          that was supplied in the request. pathRedirect cannot be supplied
                          together with prefixRedirect. Supply one alone or neither. If neither is
                          supplied, the path of the original request will be used for the redirect.
                          The value must be between 1 and 1024 characters.
                      - !ruby/object:Api::Type::String
                        name: 'prefixRedirect'
                        description: |
                          The prefix that replaces the prefixMatch specified in the
                          HttpRouteRuleMatch, retaining the remaining portion of the URL before
                          redirecting the request. prefixRedirect cannot be supplied together with
                          pathRedirect. Supply one alone or neither. If neither is supplied, the
                          path of the original request will be used for the redirect. The value
                          must be between 1 and 1024 characters.
                      - !ruby/object:Api::Type::Enum
                        name: 'redirectResponseCode'
                        description: |
                          The HTTP Status code to use for this RedirectAction. Supported values are:

                          * MOVED_PERMANENTLY_DEFAULT, which is the default value and corresponds to 301.

                          * FOUND, which corresponds to 302.

                          * SEE_OTHER which corresponds to 303.

                          * TEMPORARY_REDIRECT, which corresponds to 307. In this case, the request method
                          will be retained.

                          * PERMANENT_REDIRECT, which corresponds to 308. In this case,
                          the request method will be retained.
                        skip_docs_values: true
                        values:
                          - :FOUND
                          - :MOVED_PERMANENTLY_DEFAULT
                          - :PERMANENT_REDIRECT
                          - :SEE_OTHER
                          - :TEMPORARY_REDIRECT
                      - !ruby/object:Api::Type::Boolean
                        name: 'stripQuery'
                        default_value: false
                        description: |
                          If set to true, any accompanying query portion of the original URL is
                          removed prior to redirecting the request. If set to false, the query
                          portion of the original URL is retained. The default value is false.
            - !ruby/object:Api::Type::Array
              name: 'pathRules'
              description: |
                The list of path rules. Use this list instead of routeRules when routing based
                on simple path matching is all that's required. The order by which path rules
                are specified does not matter. Matches are always done on the longest-path-first
                basis. For example: a pathRule with a path /a/b/c/* will match before /a/b/*
                irrespective of the order in which those paths appear in this list. Within a
                given pathMatcher, only one of pathRules or routeRules must be set.
              item_type: !ruby/object:Api::Type::NestedObject
                properties:
                  - !ruby/object:Api::Type::ResourceRef
                    name: 'service'
                    resource: 'RegionBackendService'
                    imports: 'selfLink'
                    description: |
                      The region backend service resource to which traffic is
                      directed if this rule is matched. If routeAction is additionally specified,
                      advanced routing actions like URL Rewrites, etc. take effect prior to sending
                      the request to the backend. However, if service is specified, routeAction cannot
                      contain any weightedBackendService s. Conversely, if routeAction specifies any
                      weightedBackendServices, service must not be specified. Only one of urlRedirect,
                      service or routeAction.weightedBackendService must be set.
                  - !ruby/object:Api::Type::Array
                    name: 'paths'
                    required: true
                    item_type: Api::Type::String
                    description: |
                      The list of path patterns to match. Each must start with / and the only place a
                      \* is allowed is at the end following a /. The string fed to the path matcher
                      does not include any text after the first ? or #, and those chars are not
                      allowed here.
                  - !ruby/object:Api::Type::NestedObject
                    name: 'routeAction'
                    description: |
                      In response to a matching path, the load balancer performs advanced routing
                      actions like URL rewrites, header transformations, etc. prior to forwarding the
                      request to the selected backend. If routeAction specifies any
                      weightedBackendServices, service must not be set. Conversely if service is set,
                      routeAction cannot contain any  weightedBackendServices. Only one of routeAction
                      or urlRedirect must be set.
                    properties:
                      - !ruby/object:Api::Type::NestedObject
                        name: 'corsPolicy'
                        description: |
                          The specification for allowing client side cross-origin requests. Please see W3C
                          Recommendation for Cross Origin Resource Sharing
                        properties:
                          - !ruby/object:Api::Type::Boolean
                            name: 'allowCredentials'
                            default_value: false
                            description: |
                              In response to a preflight request, setting this to true indicates that the
                              actual request can include user credentials. This translates to the Access-
                              Control-Allow-Credentials header. Defaults to false.
                          - !ruby/object:Api::Type::Array
                            name: 'allowHeaders'
                            item_type: Api::Type::String
                            description: |
                              Specifies the content for the Access-Control-Allow-Headers header.
                          - !ruby/object:Api::Type::Array
                            name: 'allowMethods'
                            item_type: Api::Type::String
                            description: |
                              Specifies the content for the Access-Control-Allow-Methods header.
                          - !ruby/object:Api::Type::Array
                            name: 'allowOriginRegexes'
                            item_type: Api::Type::String
                            description: |
                              Specifies the regular expression patterns that match allowed origins. For
                              regular expression grammar please see en.cppreference.com/w/cpp/regex/ecmascript
                              An origin is allowed if it matches either allow_origins or allow_origin_regex.
                          - !ruby/object:Api::Type::Array
                            name: 'allowOrigins'
                            item_type: Api::Type::String
                            description: |
                              Specifies the list of origins that will be allowed to do CORS requests. An
                              origin is allowed if it matches either allow_origins or allow_origin_regex.
                          - !ruby/object:Api::Type::Boolean
                            name: 'disabled'
                            required: true
                            description: |
                              If true, specifies the CORS policy is disabled.
                          - !ruby/object:Api::Type::Array
                            name: 'exposeHeaders'
                            item_type: Api::Type::String
                            description: |
                              Specifies the content for the Access-Control-Expose-Headers header.
                          - !ruby/object:Api::Type::Integer
                            name: 'maxAge'
                            description: |
                              Specifies how long the results of a preflight request can be cached. This
                              translates to the content for the Access-Control-Max-Age header.
                      - !ruby/object:Api::Type::NestedObject
                        name: 'faultInjectionPolicy'
                        description: |
                          The specification for fault injection introduced into traffic to test the
                          resiliency of clients to backend service failure. As part of fault injection,
                          when clients send requests to a backend service, delays can be introduced by
                          Loadbalancer on a percentage of requests before sending those request to the
                          backend service. Similarly requests from clients can be aborted by the
                          Loadbalancer for a percentage of requests. timeout and retry_policy will be
                          ignored by clients that are configured with a fault_injection_policy.
                        properties:
                          - !ruby/object:Api::Type::NestedObject
                            name: 'abort'
                            description: |
                              The specification for how client requests are aborted as part of fault
                              injection.
                            properties:
                              - !ruby/object:Api::Type::Integer
                                name: 'httpStatus'
                                required: true
                                description: |
                                  The HTTP status code used to abort the request. The value must be between 200
                                  and 599 inclusive.
                              - !ruby/object:Api::Type::Double
                                name: 'percentage'
                                required: true
                                description: |
                                  The percentage of traffic (connections/operations/requests) which will be
                                  aborted as part of fault injection. The value must be between 0.0 and 100.0
                                  inclusive.
                          - !ruby/object:Api::Type::NestedObject
                            name: 'delay'
                            description: |
                              The specification for how client requests are delayed as part of fault
                              injection, before being sent to a backend service.
                            properties:
                              - !ruby/object:Api::Type::NestedObject
                                name: 'fixedDelay'
                                required: true
                                description: |
                                  Specifies the value of the fixed delay interval.
                                properties:
                                  - !ruby/object:Api::Type::Integer
                                    name: 'nanos'
                                    description: |
                                      Span of time that's a fraction of a second at nanosecond resolution. Durations
                                      less than one second are represented with a 0 `seconds` field and a positive
                                      `nanos` field. Must be from 0 to 999,999,999 inclusive.
                                  - !ruby/object:Api::Type::String
                                    name: 'seconds'
                                    required: true
                                    description: |
                                      Span of time at a resolution of a second. Must be from 0 to 315,576,000,000
                                      inclusive.
                              - !ruby/object:Api::Type::Double
                                name: 'percentage'
                                required: true
                                description: |
                                  The percentage of traffic (connections/operations/requests) on which delay will
                                  be introduced as part of fault injection. The value must be between 0.0 and
                                  100.0 inclusive.
                      - !ruby/object:Api::Type::NestedObject
                        name: 'requestMirrorPolicy'
                        description: |
                          Specifies the policy on how requests intended for the route's backends are
                          shadowed to a separate mirrored backend service. Loadbalancer does not wait for
                          responses from the shadow service. Prior to sending traffic to the shadow
                          service, the host / authority header is suffixed with -shadow.
                        properties:
                          - !ruby/object:Api::Type::ResourceRef
                            name: 'backendService'
                            required: true
                            resource: 'RegionBackendService'
                            imports: 'selfLink'
                            description: |
                              The RegionBackendService resource being mirrored to.
                      - !ruby/object:Api::Type::NestedObject
                        name: 'retryPolicy'
                        description: |
                          Specifies the retry policy associated with this route.
                        properties:
                          - !ruby/object:Api::Type::Integer
                            name: 'numRetries'
                            description: |
                              Specifies the allowed number retries. This number must be > 0.
                          - !ruby/object:Api::Type::NestedObject
                            name: 'perTryTimeout'
                            description: |
                              Specifies a non-zero timeout per retry attempt.
                            properties:
                              - !ruby/object:Api::Type::Integer
                                name: 'nanos'
                                description: |
                                  Span of time that's a fraction of a second at nanosecond resolution. Durations
                                  less than one second are represented with a 0 `seconds` field and a positive
                                  `nanos` field. Must be from 0 to 999,999,999 inclusive.
                              - !ruby/object:Api::Type::String
                                name: 'seconds'
                                required: true
                                description: |
                                  Span of time at a resolution of a second. Must be from 0 to 315,576,000,000
                                  inclusive.
                          - !ruby/object:Api::Type::Array
                            name: 'retryConditions'
                            item_type: Api::Type::String
                            description: |
                              Specifies one or more conditions when this retry rule applies. Valid values are:

                              - 5xx: Loadbalancer will attempt a retry if the backend service responds with
                              any 5xx response code, or if the backend service does not respond at all,
                              example: disconnects, reset, read timeout, connection failure, and refused
                              streams.
                              - gateway-error: Similar to 5xx, but only applies to response codes
                              502, 503 or 504.
                              - connect-failure: Loadbalancer will retry on failures
                              connecting to backend services, for example due to connection timeouts.
                              - retriable-4xx: Loadbalancer will retry for retriable 4xx response codes.
                              Currently the only retriable error supported is 409.
                              - refused-stream: Loadbalancer will retry if the backend service resets the stream with a
                              REFUSED_STREAM error code. This reset type indicates that it is safe to retry.
                              - cancelled: Loadbalancer will retry if the gRPC status code in the response
                              header is set to cancelled
                              - deadline-exceeded: Loadbalancer will retry if the
                              gRPC status code in the response header is set to deadline-exceeded
                              - resource-exhausted: Loadbalancer will retry if the gRPC status code in the response
                              header is set to resource-exhausted
                              - unavailable: Loadbalancer will retry if
                              the gRPC status code in the response header is set to unavailable
                      - !ruby/object:Api::Type::NestedObject
                        name: 'timeout'
                        description: |
                          Specifies the timeout for the selected route. Timeout is computed from the time
                          the request is has been fully processed (i.e. end-of-stream) up until the
                          response has been completely processed. Timeout includes all retries. If not
                          specified, the default value is 15 seconds.
                        properties:
                          - !ruby/object:Api::Type::Integer
                            name: 'nanos'
                            description: |
                              Span of time that's a fraction of a second at nanosecond resolution. Durations
                              less than one second are represented with a 0 `seconds` field and a positive
                              `nanos` field. Must be from 0 to 999,999,999 inclusive.
                          - !ruby/object:Api::Type::String
                            name: 'seconds'
                            required: true
                            description: |
                              Span of time at a resolution of a second. Must be from 0 to 315,576,000,000
                              inclusive.
                      - !ruby/object:Api::Type::NestedObject
                        name: 'urlRewrite'
                        description: |
                          The spec to modify the URL of the request, prior to forwarding the request to
                          the matched service
                        properties:
                          - !ruby/object:Api::Type::String
                            name: 'hostRewrite'
                            description: |
                              Prior to forwarding the request to the selected service, the request's host
                              header is replaced with contents of hostRewrite. The value must be between 1 and
                              255 characters.
                          - !ruby/object:Api::Type::String
                            name: 'pathPrefixRewrite'
                            description: |
                              Prior to forwarding the request to the selected backend service, the matching
                              portion of the request's path is replaced by pathPrefixRewrite. The value must
                              be between 1 and 1024 characters.
                      - !ruby/object:Api::Type::Array
                        name: 'weightedBackendServices'
                        description: |
                          A list of weighted backend services to send traffic to when a route match
                          occurs. The weights determine the fraction of traffic that flows to their
                          corresponding backend service. If all traffic needs to go to a single backend
                          service, there must be one  weightedBackendService with weight set to a non 0
                          number. Once a backendService is identified and before forwarding the request to
                          the backend service, advanced routing actions like Url rewrites and header
                          transformations are applied depending on additional settings specified in this
                          HttpRouteAction.
                        item_type: !ruby/object:Api::Type::NestedObject
                          properties:
                            - !ruby/object:Api::Type::ResourceRef
                              name: 'backendService'
                              required: true
                              resource: 'RegionBackendService'
                              imports: 'selfLink'
                              description: |
                                The default RegionBackendService resource. Before
                                forwarding the request to backendService, the loadbalancer applies any relevant
                                headerActions specified as part of this backendServiceWeight.
                            - !ruby/object:Api::Type::NestedObject
                              name: 'headerAction'
                              description: |
                                Specifies changes to request and response headers that need to take effect for
                                the selected backendService. headerAction specified here take effect before
                                headerAction in the enclosing HttpRouteRule, PathMatcher and UrlMap.
                              properties:
                                - !ruby/object:Api::Type::Array
                                  name: 'requestHeadersToAdd'
                                  description: |
                                    Headers to add to a matching request prior to forwarding the request to the
                                    backendService.
                                  item_type: !ruby/object:Api::Type::NestedObject
                                    properties:
                                      - !ruby/object:Api::Type::String
                                        name: 'headerName'
                                        required: true
                                        description: |
                                          The name of the header.
                                      - !ruby/object:Api::Type::String
                                        name: 'headerValue'
                                        required: true
                                        description: |
                                          The value of the header to add.
                                      - !ruby/object:Api::Type::Boolean
                                        name: 'replace'
                                        required: true
                                        description: |
                                          If false, headerValue is appended to any values that already exist for the
                                          header. If true, headerValue is set for the header, discarding any values that
                                          were set for that header.
                                - !ruby/object:Api::Type::Array
                                  name: 'requestHeadersToRemove'
                                  item_type: Api::Type::String
                                  description: |
                                    A list of header names for headers that need to be removed from the request
                                    prior to forwarding the request to the backendService.
                                - !ruby/object:Api::Type::Array
                                  name: 'responseHeadersToAdd'
                                  description: |
                                    Headers to add the response prior to sending the response back to the client.
                                  item_type: !ruby/object:Api::Type::NestedObject
                                    properties:
                                      - !ruby/object:Api::Type::String
                                        name: 'headerName'
                                        required: true
                                        description: |
                                          The name of the header.
                                      - !ruby/object:Api::Type::String
                                        name: 'headerValue'
                                        required: true
                                        description: |
                                          The value of the header to add.
                                      - !ruby/object:Api::Type::Boolean
                                        name: 'replace'
                                        required: true
                                        description: |
                                          If false, headerValue is appended to any values that already exist for the
                                          header. If true, headerValue is set for the header, discarding any values that
                                          were set for that header.
                                - !ruby/object:Api::Type::Array
                                  name: 'responseHeadersToRemove'
                                  item_type: Api::Type::String
                                  description: |
                                    A list of header names for headers that need to be removed from the response
                                    prior to sending the response back to the client.
                            - !ruby/object:Api::Type::Integer
                              name: 'weight'
                              required: true
                              description: |
                                Specifies the fraction of traffic sent to backendService, computed as weight /
                                (sum of all weightedBackendService weights in routeAction) . The selection of a
                                backend service is determined only for new traffic. Once a user's request has
                                been directed to a backendService, subsequent requests will be sent to the same
                                backendService as determined by the BackendService's session affinity policy.
                                The value must be between 0 and 1000
                  - !ruby/object:Api::Type::NestedObject
                    name: 'urlRedirect'
                    description: |
                      When a path pattern is matched, the request is redirected to a URL specified
                      by urlRedirect. If urlRedirect is specified, service or routeAction must not
                      be set.
                    properties:
                      - !ruby/object:Api::Type::String
                        name: 'hostRedirect'
                        description: |
                          The host that will be used in the redirect response instead of the one
                          that was supplied in the request. The value must be between 1 and 255
                          characters.
                      - !ruby/object:Api::Type::Boolean
                        name: 'httpsRedirect'
                        default_value: false
                        description: |
                          If set to true, the URL scheme in the redirected request is set to https.
                          If set to false, the URL scheme of the redirected request will remain the
                          same as that of the request. This must only be set for UrlMaps used in
                          TargetHttpProxys. Setting this true for TargetHttpsProxy is not
                          permitted. The default is set to false.
                      - !ruby/object:Api::Type::String
                        name: 'pathRedirect'
                        description: |
                          The path that will be used in the redirect response instead of the one
                          that was supplied in the request. pathRedirect cannot be supplied
                          together with prefixRedirect. Supply one alone or neither. If neither is
                          supplied, the path of the original request will be used for the redirect.
                          The value must be between 1 and 1024 characters.
                      - !ruby/object:Api::Type::String
                        name: 'prefixRedirect'
                        description: |
                          The prefix that replaces the prefixMatch specified in the
                          HttpRouteRuleMatch, retaining the remaining portion of the URL before
                          redirecting the request. prefixRedirect cannot be supplied together with
                          pathRedirect. Supply one alone or neither. If neither is supplied, the
                          path of the original request will be used for the redirect. The value
                          must be between 1 and 1024 characters.
                      - !ruby/object:Api::Type::Enum
                        name: 'redirectResponseCode'
                        description: |
                          The HTTP Status code to use for this RedirectAction. Supported values are:

                          * MOVED_PERMANENTLY_DEFAULT, which is the default value and corresponds to 301.

                          * FOUND, which corresponds to 302.

                          * SEE_OTHER which corresponds to 303.

                          * TEMPORARY_REDIRECT, which corresponds to 307. In this case, the request method
                          will be retained.

                          * PERMANENT_REDIRECT, which corresponds to 308. In this case,
                          the request method will be retained.
                        skip_docs_values: true
                        values:
                          - :FOUND
                          - :MOVED_PERMANENTLY_DEFAULT
                          - :PERMANENT_REDIRECT
                          - :SEE_OTHER
                          - :TEMPORARY_REDIRECT
                      - !ruby/object:Api::Type::Boolean
                        name: 'stripQuery'
                        description: |
                          If set to true, any accompanying query portion of the original URL is removed
                          prior to redirecting the request. If set to false, the query portion of the
                          original URL is retained.
            - !ruby/object:Api::Type::NestedObject
              name: 'defaultUrlRedirect'
              # TODO: (mbang) won't work for array path matchers yet, uncomment here once they are supported.
              # (github.com/hashicorp/terraform-plugin-sdk/issues/470)
              # TODO: add defaultRouteAction.weightedBackendService here once they are supported.
              # exactly_one_of:
              #   - path_matchers.0.default_service
              #   - path_matchers.0.default_url_redirect
              description: |
                When none of the specified hostRules match, the request is redirected to a URL specified
                by defaultUrlRedirect. If defaultUrlRedirect is specified, defaultService or
                defaultRouteAction must not be set.
              properties:
                - !ruby/object:Api::Type::String
                  name: 'hostRedirect'
                  description: |
                    The host that will be used in the redirect response instead of the one that was
                    supplied in the request. The value must be between 1 and 255 characters.
                - !ruby/object:Api::Type::Boolean
                  name: 'httpsRedirect'
                  default_value: false
                  description: |
                    If set to true, the URL scheme in the redirected request is set to https. If set to
                    false, the URL scheme of the redirected request will remain the same as that of the
                    request. This must only be set for UrlMaps used in TargetHttpProxys. Setting this
                    true for TargetHttpsProxy is not permitted. The default is set to false.
                - !ruby/object:Api::Type::String
                  name: 'pathRedirect'
                  description: |
                    The path that will be used in the redirect response instead of the one that was
                    supplied in the request. pathRedirect cannot be supplied together with
                    prefixRedirect. Supply one alone or neither. If neither is supplied, the path of the
                    original request will be used for the redirect. The value must be between 1 and 1024
                    characters.
                - !ruby/object:Api::Type::String
                  name: 'prefixRedirect'
                  description: |
                    The prefix that replaces the prefixMatch specified in the HttpRouteRuleMatch,
                    retaining the remaining portion of the URL before redirecting the request.
                    prefixRedirect cannot be supplied together with pathRedirect. Supply one alone or
                    neither. If neither is supplied, the path of the original request will be used for
                    the redirect. The value must be between 1 and 1024 characters.
                - !ruby/object:Api::Type::Enum
                  name: 'redirectResponseCode'
                  description: |
                    The HTTP Status code to use for this RedirectAction. Supported values are:

                    * MOVED_PERMANENTLY_DEFAULT, which is the default value and corresponds to 301.

                    * FOUND, which corresponds to 302.

                    * SEE_OTHER which corresponds to 303.

                    * TEMPORARY_REDIRECT, which corresponds to 307. In this case, the request method
                    will be retained.

                    * PERMANENT_REDIRECT, which corresponds to 308. In this case,
                    the request method will be retained.
                  skip_docs_values: true
                  values:
                    - :FOUND
                    - :MOVED_PERMANENTLY_DEFAULT
                    - :PERMANENT_REDIRECT
                    - :SEE_OTHER
                    - :TEMPORARY_REDIRECT
                - !ruby/object:Api::Type::Boolean
                  name: 'stripQuery'
                  description: |
                    If set to true, any accompanying query portion of the original URL is removed prior
                    to redirecting the request. If set to false, the query portion of the original URL is
                    retained.
      - !ruby/object:Api::Type::Array
        name: 'tests'
        description: |
          The list of expected URL mappings. Requests to update this UrlMap will
          succeed only if all of the test cases pass.
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::String
              name: 'description'
              description: 'Description of this test case.'
            - !ruby/object:Api::Type::String
              name: 'host'
              required: true
              description: 'Host portion of the URL.'
            - !ruby/object:Api::Type::String
              name: 'path'
              required: true
              description: 'Path portion of the URL.'
            - !ruby/object:Api::Type::ResourceRef
              name: 'service'
              required: true
              resource: 'RegionBackendService'
              imports: 'selfLink'
              description:
                A reference to expected RegionBackendService resource the given URL
                should be mapped to.
      - !ruby/object:Api::Type::NestedObject
        name: 'defaultUrlRedirect'
        exactly_one_of:
          - default_service
          - default_url_redirect
          - default_route_action.0.weighted_backend_services
        description: |
          When none of the specified hostRules match, the request is redirected to a URL specified
          by defaultUrlRedirect. If defaultUrlRedirect is specified, defaultService or
          defaultRouteAction must not be set.
        properties:
          - !ruby/object:Api::Type::String
            name: 'hostRedirect'
            description: |
              The host that will be used in the redirect response instead of the one that was
              supplied in the request. The value must be between 1 and 255 characters.
          - !ruby/object:Api::Type::Boolean
            name: 'httpsRedirect'
            default_value: false
            description: |
              If set to true, the URL scheme in the redirected request is set to https. If set to
              false, the URL scheme of the redirected request will remain the same as that of the
              request. This must only be set for UrlMaps used in TargetHttpProxys. Setting this
              true for TargetHttpsProxy is not permitted. The default is set to false.
          - !ruby/object:Api::Type::String
            name: 'pathRedirect'
            description: |
              The path that will be used in the redirect response instead of the one that was
              supplied in the request. pathRedirect cannot be supplied together with
              prefixRedirect. Supply one alone or neither. If neither is supplied, the path of the
              original request will be used for the redirect. The value must be between 1 and 1024
              characters.
          - !ruby/object:Api::Type::String
            name: 'prefixRedirect'
            description: |
              The prefix that replaces the prefixMatch specified in the HttpRouteRuleMatch,
              retaining the remaining portion of the URL before redirecting the request.
              prefixRedirect cannot be supplied together with pathRedirect. Supply one alone or
              neither. If neither is supplied, the path of the original request will be used for
              the redirect. The value must be between 1 and 1024 characters.
          - !ruby/object:Api::Type::Enum
            name: 'redirectResponseCode'
            description: |
              The HTTP Status code to use for this RedirectAction. Supported values are:

              * MOVED_PERMANENTLY_DEFAULT, which is the default value and corresponds to 301.

              * FOUND, which corresponds to 302.

              * SEE_OTHER which corresponds to 303.

              * TEMPORARY_REDIRECT, which corresponds to 307. In this case, the request method
              will be retained.

              * PERMANENT_REDIRECT, which corresponds to 308. In this case,
              the request method will be retained.
            skip_docs_values: true
            values:
              - :FOUND
              - :MOVED_PERMANENTLY_DEFAULT
              - :PERMANENT_REDIRECT
              - :SEE_OTHER
              - :TEMPORARY_REDIRECT
          - !ruby/object:Api::Type::Boolean
            name: 'stripQuery'
            description: |
              If set to true, any accompanying query portion of the original URL is removed prior
              to redirecting the request. If set to false, the query portion of the original URL is
              retained.
      - !ruby/object:Api::Type::NestedObject
        name: 'defaultRouteAction'
        description: |
          defaultRouteAction takes effect when none of the hostRules match. The load balancer performs advanced routing actions, such as URL rewrites and header transformations, before forwarding the request to the selected backend. If defaultRouteAction specifies any weightedBackendServices, defaultService must not be set. Conversely if defaultService is set, defaultRouteAction cannot contain any weightedBackendServices.
          Only one of defaultRouteAction or defaultUrlRedirect must be set.
          URL maps for Classic external HTTP(S) load balancers only support the urlRewrite action within defaultRouteAction.
          defaultRouteAction has no effect when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.
        properties:
          - !ruby/object:Api::Type::Array
            name: 'weightedBackendServices'
            description : |
              A list of weighted backend services to send traffic to when a route match occurs. The weights determine the fraction of traffic that flows to their corresponding backend service. If all traffic needs to go to a single backend service, there must be one weightedBackendService with weight set to a non-zero number.
              After a backend service is identified and before forwarding the request to the backend service, advanced routing actions such as URL rewrites and header transformations are applied depending on additional settings specified in this HttpRouteAction.
            exactly_one_of:
              - default_service
              - default_url_redirect
              - default_route_action.0.weighted_backend_services
            item_type: !ruby/object:Api::Type::NestedObject
              properties:
                - !ruby/object:Api::Type::ResourceRef
                  name: 'backendService'
                  resource: 'RegionBackendService'
                  imports: 'selfLink'
                  description: |
                    The full or partial URL to the default BackendService resource. Before forwarding the request to backendService, the load balancer applies any relevant headerActions specified as part of this backendServiceWeight.
                - !ruby/object:Api::Type::Integer
                  name: 'weight'
                  description: |
                    Specifies the fraction of traffic sent to a backend service, computed as weight / (sum of all weightedBackendService weights in routeAction) .
                    The selection of a backend service is determined only for new traffic. Once a user's request has been directed to a backend service, subsequent requests are sent to the same backend service as determined by the backend service's session affinity policy.
                    The value must be from 0 to 1000.
                - !ruby/object:Api::Type::NestedObject
                  name: 'headerAction'
                  description: |
                    Specifies changes to request and response headers that need to take effect for the selected backendService.
                    headerAction specified here take effect before headerAction in the enclosing HttpRouteRule, PathMatcher and UrlMap.
                    headerAction is not supported for load balancers that have their loadBalancingScheme set to EXTERNAL.
                    Not supported when the URL map is bound to a target gRPC proxy that has validateForProxyless field set to true.
                  properties:
                    - !ruby/object:Api::Type::Array
                      name: 'requestHeadersToRemove'
                      item_type: Api::Type::String
                      description: |
                        A list of header names for headers that need to be removed from the request before forwarding the request to the backendService.
                    - !ruby/object:Api::Type::Array
                      name: 'requestHeadersToAdd'
                      description: |
                        Headers to add to a matching request before forwarding the request to the backendService.
                      item_type: !ruby/object:Api::Type::NestedObject
                        properties:
                          - !ruby/object:Api::Type::String
                            name: 'headerName'
                            description: 'The name of the header.'
                          - !ruby/object:Api::Type::String
                            name: 'headerValue'
                            description: 'The value of the header to add.'
                          - !ruby/object:Api::Type::Boolean
                            name: 'replace'
                            description: |
                              If false, headerValue is appended to any values that already exist for the header. If true, headerValue is set for the header, discarding any values that were set for that header.
                              The default value is false.
                            default_value: false
                    - !ruby/object:Api::Type::Array
                      name: 'responseHeadersToRemove'
                      item_type: Api::Type::String
                      description: |
                        A list of header names for headers that need to be removed from the response before sending the response back to the client.
                    - !ruby/object:Api::Type::Array
                      name: 'responseHeadersToAdd'
                      description: |
                        Headers to add the response before sending the response back to the client.
                      item_type: !ruby/object:Api::Type::NestedObject
                        properties:
                          - !ruby/object:Api::Type::String
                            name: 'headerName'
                            description: 'The name of the header.'
                          - !ruby/object:Api::Type::String
                            name: 'headerValue'
                            description: 'The value of the header to add.'
                          - !ruby/object:Api::Type::Boolean
                            name: 'replace'
                            description: |
                              If false, headerValue is appended to any values that already exist for the header. If true, headerValue is set for the header, discarding any values that were set for that header.
                              The default value is false.
                            default_value: false
          - !ruby/object:Api::Type::NestedObject
            name: 'retryPolicy'
            description : |
              Specifies the retry policy associated with this route.
            properties:
              - !ruby/object:Api::Type::Array
                name: 'retryConditions'
                item_type: Api::Type::String
                description: |
                  Specifies one or more conditions when this retry policy applies.
                  Valid values are listed below. Only the following codes are supported when the URL map is bound to target gRPC proxy that has validateForProxyless field set to true: cancelled, deadline-exceeded, internal, resource-exhausted, unavailable.
                    - 5xx : retry is attempted if the instance or endpoint responds with any 5xx response code, or if the instance or endpoint does not respond at all. For example, disconnects, reset, read timeout, connection failure, and refused streams.
                    - gateway-error : Similar to 5xx, but only applies to response codes 502, 503 or 504.
                    - connect-failure : a retry is attempted on failures connecting to the instance or endpoint. For example, connection timeouts.
                    - retriable-4xx : a retry is attempted if the instance or endpoint responds with a 4xx response code. The only error that you can retry is error code 409.
                    - refused-stream : a retry is attempted if the instance or endpoint resets the stream with a REFUSED_STREAM error code. This reset type indicates that it is safe to retry.
                    - cancelled : a retry is attempted if the gRPC status code in the response header is set to cancelled.
                    - deadline-exceeded : a retry is attempted if the gRPC status code in the response header is set to deadline-exceeded.
                    - internal :  a retry is attempted if the gRPC status code in the response header is set to internal.
                    - resource-exhausted : a retry is attempted if the gRPC status code in the response header is set to resource-exhausted.
                    - unavailable : a retry is attempted if the gRPC status code in the response header is set to unavailable.
              - !ruby/object:Api::Type::Integer
                name: 'numRetries'
                description: |
                  Specifies the allowed number retries. This number must be > 0. If not specified, defaults to 1.
                default_value: 1
              - !ruby/object:Api::Type::NestedObject
                name: 'perTryTimeout'
                description: |
                  Specifies a non-zero timeout per retry attempt.

                  If not specified, will use the timeout set in HttpRouteAction. If timeout in HttpRouteAction is not set,
                  will use the largest timeout among all backend services associated with the route.
                properties:
                  - !ruby/object:Api::Type::String
                    name: 'seconds'
                    description: |
                      Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive.
                      Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
                  - !ruby/object:Api::Type::Integer
                    name: 'nanos'
                    description: |
                      Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are
                      represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
          - !ruby/object:Api::Type::NestedObject
            name: 'requestMirrorPolicy'
            description: |
              Specifies the policy on how requests intended for the route's backends are shadowed to a separate mirrored backend service.
              The load balancer does not wait for responses from the shadow service. Before sending traffic to the shadow service, the host / authority header is suffixed with -shadow.
              Not supported when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.
            properties:
              - !ruby/object:Api::Type::ResourceRef
                name: 'backendService'
                resource: 'RegionBackendService'
                imports: 'selfLink'
                description: |
                  The full or partial URL to the RegionBackendService resource being mirrored to.
                  The backend service configured for a mirroring policy must reference backends that are of the same type as the original backend service matched in the URL map.
                  Serverless NEG backends are not currently supported as a mirrored backend service.
  - !ruby/object:Api::Resource
    name: 'RegionHealthCheck'
    kind: 'compute#healthCheck'
    base_url: projects/{{project}}/regions/{{region}}/healthChecks
    collection_url_key: 'items'
    has_self_link: true
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation': 'https://cloud.google.com/load-balancing/docs/health-checks'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/regionHealthChecks'
    description: |
      Health Checks determine whether instances are responsive and able to do work.
      They are an important part of a comprehensive load balancing configuration,
      as they enable monitoring instances behind load balancers.

      Health Checks poll instances at a specified interval. Instances that
      do not respond successfully to some number of probes in a row are marked
      as unhealthy. No new connections are sent to unhealthy instances,
      though existing connections will continue. The health check will
      continue to poll unhealthy instances. If an instance later responds
      successfully to some number of consecutive probes, it is marked
      healthy again and can receive new connections.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'selfLink'
        input: true
        description: |
          The region where the regional health check resides.
    properties:
      - !ruby/object:Api::Type::Integer
        name: 'checkIntervalSec'
        description: |
          How often (in seconds) to send a health check. The default value is 5
          seconds.
        default_value: 5
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource. Provide this property when
          you create the resource.
        send_empty_value: true
      - !ruby/object:Api::Type::Integer
        name: 'healthyThreshold'
        description: |
          A so-far unhealthy instance will be marked healthy after this many
          consecutive successes. The default value is 2.
        default_value: 2
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: |
          The unique identifier for the resource. This identifier is defined by
          the server.
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        required: true
        input: true
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035.  Specifically, the name must be 1-63 characters long and
          match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means
          the first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the
          last character, which cannot be a dash.
      - !ruby/object:Api::Type::Integer
        name: 'unhealthyThreshold'
        description: |
          A so-far healthy instance will be marked unhealthy after this many
          consecutive failures. The default value is 2.
        default_value: 2
      - !ruby/object:Api::Type::Integer
        name: 'timeoutSec'
        description: |
          How long (in seconds) to wait before claiming failure.
          The default value is 5 seconds.  It is invalid for timeoutSec to have
          greater value than checkIntervalSec.
        default_value: 5
      - !ruby/object:Api::Type::Enum
        name: 'type'
        description: |
          Specifies the type of the healthCheck, either TCP, SSL, HTTP or
          HTTPS. If not specified, the default is TCP. Exactly one of the
          protocol-specific health check field must be specified, which must
          match type field.
        values:
          - :TCP
          - :SSL
          - :HTTP
          - :HTTPS
          - :HTTP2
      - !ruby/object:Api::Type::NestedObject
        name: 'httpHealthCheck'
        exactly_one_of:
          - http_health_check
          - https_health_check
          - http2_health_check
          - tcp_health_check
          - ssl_health_check
          - grpc_health_check
        properties:
            - !ruby/object:Api::Type::String
              name: 'host'
              at_least_one_of:
                - http_health_check.0.host
                - http_health_check.0.request_path
                - http_health_check.0.response
                - http_health_check.0.port
                - http_health_check.0.port_name
                - http_health_check.0.proxy_header
                - http_health_check.0.port_specification
              description: |
                The value of the host header in the HTTP health check request.
                If left empty (default value), the public IP on behalf of which this health
                check is performed will be used.
            - !ruby/object:Api::Type::String
              name: 'requestPath'
              at_least_one_of:
                - http_health_check.0.host
                - http_health_check.0.request_path
                - http_health_check.0.response
                - http_health_check.0.port
                - http_health_check.0.port_name
                - http_health_check.0.proxy_header
                - http_health_check.0.port_specification
              description: |
                The request path of the HTTP health check request.
                The default value is /.
              default_value: "/"
            - !ruby/object:Api::Type::String
              name: 'response'
              at_least_one_of:
                - http_health_check.0.host
                - http_health_check.0.request_path
                - http_health_check.0.response
                - http_health_check.0.port
                - http_health_check.0.port_name
                - http_health_check.0.proxy_header
                - http_health_check.0.port_specification
              description: |
                The bytes to match against the beginning of the response data. If left empty
                (the default value), any response will indicate health. The response data
                can only be ASCII.
            - !ruby/object:Api::Type::Integer
              name: 'port'
              at_least_one_of:
                - http_health_check.0.host
                - http_health_check.0.request_path
                - http_health_check.0.response
                - http_health_check.0.port
                - http_health_check.0.port_name
                - http_health_check.0.proxy_header
                - http_health_check.0.port_specification
              description: |
                The TCP port number for the HTTP health check request.
                The default value is 80.
            - !ruby/object:Api::Type::String
              name: 'portName'
              at_least_one_of:
                - http_health_check.0.host
                - http_health_check.0.request_path
                - http_health_check.0.response
                - http_health_check.0.port
                - http_health_check.0.port_name
                - http_health_check.0.proxy_header
                - http_health_check.0.port_specification
              description: |
                Port name as defined in InstanceGroup#NamedPort#name. If both port and
                port_name are defined, port takes precedence.
            - !ruby/object:Api::Type::Enum
              name: 'proxyHeader'
              at_least_one_of:
                - http_health_check.0.host
                - http_health_check.0.request_path
                - http_health_check.0.response
                - http_health_check.0.port
                - http_health_check.0.port_name
                - http_health_check.0.proxy_header
                - http_health_check.0.port_specification
              description: |
                Specifies the type of proxy header to append before sending data to the
                backend.
              values:
                - :NONE
                - :PROXY_V1
              default_value: :NONE
            - !ruby/object:Api::Type::Enum
              name: 'portSpecification'
              at_least_one_of:
                - http_health_check.0.host
                - http_health_check.0.request_path
                - http_health_check.0.response
                - http_health_check.0.port
                - http_health_check.0.port_name
                - http_health_check.0.proxy_header
                - http_health_check.0.port_specification
              description: |
                Specifies how port is selected for health checking, can be one of the
                following values:

                  * `USE_FIXED_PORT`: The port number in `port` is used for health checking.

                  * `USE_NAMED_PORT`: The `portName` is used for health checking.

                  * `USE_SERVING_PORT`: For NetworkEndpointGroup, the port specified for each
                  network endpoint is used for health checking. For other backends, the
                  port or named port specified in the Backend Service is used for health
                  checking.

                If not specified, HTTP health check follows behavior specified in `port` and
                `portName` fields.
              values:
                - :USE_FIXED_PORT
                - :USE_NAMED_PORT
                - :USE_SERVING_PORT
      - !ruby/object:Api::Type::NestedObject
        name: 'httpsHealthCheck'
        exactly_one_of:
          - http_health_check
          - https_health_check
          - http2_health_check
          - tcp_health_check
          - ssl_health_check
          - grpc_health_check
        properties:
            - !ruby/object:Api::Type::String
              name: 'host'
              at_least_one_of:
                - https_health_check.0.host
                - https_health_check.0.request_path
                - https_health_check.0.response
                - https_health_check.0.port
                - https_health_check.0.port_name
                - https_health_check.0.proxy_header
                - https_health_check.0.port_specification
              description: |
                The value of the host header in the HTTPS health check request.
                If left empty (default value), the public IP on behalf of which this health
                check is performed will be used.
            - !ruby/object:Api::Type::String
              name: 'requestPath'
              at_least_one_of:
                - https_health_check.0.host
                - https_health_check.0.request_path
                - https_health_check.0.response
                - https_health_check.0.port
                - https_health_check.0.port_name
                - https_health_check.0.proxy_header
                - https_health_check.0.port_specification
              description: |
                The request path of the HTTPS health check request.
                The default value is /.
              default_value: "/"
            - !ruby/object:Api::Type::String
              name: 'response'
              at_least_one_of:
                - https_health_check.0.host
                - https_health_check.0.request_path
                - https_health_check.0.response
                - https_health_check.0.port
                - https_health_check.0.port_name
                - https_health_check.0.proxy_header
                - https_health_check.0.port_specification
              description: |
                The bytes to match against the beginning of the response data. If left empty
                (the default value), any response will indicate health. The response data
                can only be ASCII.
            - !ruby/object:Api::Type::Integer
              name: 'port'
              at_least_one_of:
                - https_health_check.0.host
                - https_health_check.0.request_path
                - https_health_check.0.response
                - https_health_check.0.port
                - https_health_check.0.port_name
                - https_health_check.0.proxy_header
                - https_health_check.0.port_specification
              description: |
                The TCP port number for the HTTPS health check request.
                The default value is 443.
            - !ruby/object:Api::Type::String
              name: 'portName'
              at_least_one_of:
                - https_health_check.0.host
                - https_health_check.0.request_path
                - https_health_check.0.response
                - https_health_check.0.port
                - https_health_check.0.port_name
                - https_health_check.0.proxy_header
                - https_health_check.0.port_specification
              description: |
                Port name as defined in InstanceGroup#NamedPort#name. If both port and
                port_name are defined, port takes precedence.
            - !ruby/object:Api::Type::Enum
              name: 'proxyHeader'
              at_least_one_of:
                - https_health_check.0.host
                - https_health_check.0.request_path
                - https_health_check.0.response
                - https_health_check.0.port
                - https_health_check.0.port_name
                - https_health_check.0.proxy_header
                - https_health_check.0.port_specification
              description: |
                Specifies the type of proxy header to append before sending data to the
                backend.
              values:
                - :NONE
                - :PROXY_V1
              default_value: :NONE
            - !ruby/object:Api::Type::Enum
              name: 'portSpecification'
              at_least_one_of:
                - https_health_check.0.host
                - https_health_check.0.request_path
                - https_health_check.0.response
                - https_health_check.0.port
                - https_health_check.0.port_name
                - https_health_check.0.proxy_header
                - https_health_check.0.port_specification
              description: |
                Specifies how port is selected for health checking, can be one of the
                following values:

                  * `USE_FIXED_PORT`: The port number in `port` is used for health checking.

                  * `USE_NAMED_PORT`: The `portName` is used for health checking.

                  * `USE_SERVING_PORT`: For NetworkEndpointGroup, the port specified for each
                  network endpoint is used for health checking. For other backends, the
                  port or named port specified in the Backend Service is used for health
                  checking.

                If not specified, HTTPS health check follows behavior specified in `port` and
                `portName` fields.
              values:
                - :USE_FIXED_PORT
                - :USE_NAMED_PORT
                - :USE_SERVING_PORT
      - !ruby/object:Api::Type::NestedObject
        name: 'tcpHealthCheck'
        exactly_one_of:
          - http_health_check
          - https_health_check
          - http2_health_check
          - tcp_health_check
          - ssl_health_check
          - grpc_health_check
        properties:
            - !ruby/object:Api::Type::String
              name: 'request'
              at_least_one_of:
                - tcp_health_check.0.request
                - tcp_health_check.0.response
                - tcp_health_check.0.port
                - tcp_health_check.0.port_name
                - tcp_health_check.0.proxy_header
                - tcp_health_check.0.port_specification
              description: |
                The application data to send once the TCP connection has been
                established (default value is empty). If both request and response are
                empty, the connection establishment alone will indicate health. The request
                data can only be ASCII.
            - !ruby/object:Api::Type::String
              name: 'response'
              at_least_one_of:
                - tcp_health_check.0.request
                - tcp_health_check.0.response
                - tcp_health_check.0.port
                - tcp_health_check.0.port_name
                - tcp_health_check.0.proxy_header
                - tcp_health_check.0.port_specification
              description: |
                The bytes to match against the beginning of the response data. If left empty
                (the default value), any response will indicate health. The response data
                can only be ASCII.
            - !ruby/object:Api::Type::Integer
              name: 'port'
              at_least_one_of:
                - tcp_health_check.0.request
                - tcp_health_check.0.response
                - tcp_health_check.0.port
                - tcp_health_check.0.port_name
                - tcp_health_check.0.proxy_header
                - tcp_health_check.0.port_specification
              description: |
                The TCP port number for the TCP health check request.
                The default value is 80.
            - !ruby/object:Api::Type::String
              name: 'portName'
              at_least_one_of:
                - tcp_health_check.0.request
                - tcp_health_check.0.response
                - tcp_health_check.0.port
                - tcp_health_check.0.port_name
                - tcp_health_check.0.proxy_header
                - tcp_health_check.0.port_specification
              description: |
                Port name as defined in InstanceGroup#NamedPort#name. If both port and
                port_name are defined, port takes precedence.
            - !ruby/object:Api::Type::Enum
              name: 'proxyHeader'
              at_least_one_of:
                - tcp_health_check.0.request
                - tcp_health_check.0.response
                - tcp_health_check.0.port
                - tcp_health_check.0.port_name
                - tcp_health_check.0.proxy_header
                - tcp_health_check.0.port_specification
              description: |
                Specifies the type of proxy header to append before sending data to the
                backend.
              values:
                - :NONE
                - :PROXY_V1
              default_value: :NONE
            - !ruby/object:Api::Type::Enum
              name: 'portSpecification'
              at_least_one_of:
                - tcp_health_check.0.request
                - tcp_health_check.0.response
                - tcp_health_check.0.port
                - tcp_health_check.0.port_name
                - tcp_health_check.0.proxy_header
                - tcp_health_check.0.port_specification
              description: |
                Specifies how port is selected for health checking, can be one of the
                following values:

                  * `USE_FIXED_PORT`: The port number in `port` is used for health checking.

                  * `USE_NAMED_PORT`: The `portName` is used for health checking.

                  * `USE_SERVING_PORT`: For NetworkEndpointGroup, the port specified for each
                  network endpoint is used for health checking. For other backends, the
                  port or named port specified in the Backend Service is used for health
                  checking.

                If not specified, TCP health check follows behavior specified in `port` and
                `portName` fields.
              values:
                - :USE_FIXED_PORT
                - :USE_NAMED_PORT
                - :USE_SERVING_PORT
      - !ruby/object:Api::Type::NestedObject
        name: 'sslHealthCheck'
        exactly_one_of:
          - http_health_check
          - https_health_check
          - http2_health_check
          - tcp_health_check
          - ssl_health_check
          - grpc_health_check
        properties:
            - !ruby/object:Api::Type::String
              name: 'request'
              at_least_one_of:
                - ssl_health_check.0.request
                - ssl_health_check.0.response
                - ssl_health_check.0.port
                - ssl_health_check.0.port_name
                - ssl_health_check.0.proxy_header
                - ssl_health_check.0.port_specification
              description: |
                The application data to send once the SSL connection has been
                established (default value is empty). If both request and response are
                empty, the connection establishment alone will indicate health. The request
                data can only be ASCII.
            - !ruby/object:Api::Type::String
              name: 'response'
              at_least_one_of:
                - ssl_health_check.0.request
                - ssl_health_check.0.response
                - ssl_health_check.0.port
                - ssl_health_check.0.port_name
                - ssl_health_check.0.proxy_header
                - ssl_health_check.0.port_specification
              description: |
                The bytes to match against the beginning of the response data. If left empty
                (the default value), any response will indicate health. The response data
                can only be ASCII.
            - !ruby/object:Api::Type::Integer
              name: 'port'
              at_least_one_of:
                - ssl_health_check.0.request
                - ssl_health_check.0.response
                - ssl_health_check.0.port
                - ssl_health_check.0.port_name
                - ssl_health_check.0.proxy_header
                - ssl_health_check.0.port_specification
              description: |
                The TCP port number for the SSL health check request.
                The default value is 443.
            - !ruby/object:Api::Type::String
              name: 'portName'
              at_least_one_of:
                - ssl_health_check.0.request
                - ssl_health_check.0.response
                - ssl_health_check.0.port
                - ssl_health_check.0.port_name
                - ssl_health_check.0.proxy_header
                - ssl_health_check.0.port_specification
              description: |
                Port name as defined in InstanceGroup#NamedPort#name. If both port and
                port_name are defined, port takes precedence.
            - !ruby/object:Api::Type::Enum
              name: 'proxyHeader'
              at_least_one_of:
                - ssl_health_check.0.request
                - ssl_health_check.0.response
                - ssl_health_check.0.port
                - ssl_health_check.0.port_name
                - ssl_health_check.0.proxy_header
                - ssl_health_check.0.port_specification
              description: |
                Specifies the type of proxy header to append before sending data to the
                backend.
              values:
                - :NONE
                - :PROXY_V1
              default_value: :NONE
            - !ruby/object:Api::Type::Enum
              name: 'portSpecification'
              at_least_one_of:
                - ssl_health_check.0.request
                - ssl_health_check.0.response
                - ssl_health_check.0.port
                - ssl_health_check.0.port_name
                - ssl_health_check.0.proxy_header
                - ssl_health_check.0.port_specification
              description: |
                Specifies how port is selected for health checking, can be one of the
                following values:

                  * `USE_FIXED_PORT`: The port number in `port` is used for health checking.

                  * `USE_NAMED_PORT`: The `portName` is used for health checking.

                  * `USE_SERVING_PORT`: For NetworkEndpointGroup, the port specified for each
                  network endpoint is used for health checking. For other backends, the
                  port or named port specified in the Backend Service is used for health
                  checking.

                If not specified, SSL health check follows behavior specified in `port` and
                `portName` fields.
              values:
                - :USE_FIXED_PORT
                - :USE_NAMED_PORT
                - :USE_SERVING_PORT
      - !ruby/object:Api::Type::NestedObject
        name: 'http2HealthCheck'
        exactly_one_of:
          - http_health_check
          - https_health_check
          - http2_health_check
          - tcp_health_check
          - ssl_health_check
          - grpc_health_check
        properties:
            - !ruby/object:Api::Type::String
              name: 'host'
              at_least_one_of:
                - http2_health_check.0.host
                - http2_health_check.0.request_path
                - http2_health_check.0.response
                - http2_health_check.0.port
                - http2_health_check.0.port_name
                - http2_health_check.0.proxy_header
                - http2_health_check.0.port_specification
              description: |
                The value of the host header in the HTTP2 health check request.
                If left empty (default value), the public IP on behalf of which this health
                check is performed will be used.
            - !ruby/object:Api::Type::String
              name: 'requestPath'
              at_least_one_of:
                - http2_health_check.0.host
                - http2_health_check.0.request_path
                - http2_health_check.0.response
                - http2_health_check.0.port
                - http2_health_check.0.port_name
                - http2_health_check.0.proxy_header
                - http2_health_check.0.port_specification
              description: |
                The request path of the HTTP2 health check request.
                The default value is /.
              default_value: "/"
            - !ruby/object:Api::Type::String
              name: 'response'
              at_least_one_of:
                - http2_health_check.0.host
                - http2_health_check.0.request_path
                - http2_health_check.0.response
                - http2_health_check.0.port
                - http2_health_check.0.port_name
                - http2_health_check.0.proxy_header
                - http2_health_check.0.port_specification
              description: |
                The bytes to match against the beginning of the response data. If left empty
                (the default value), any response will indicate health. The response data
                can only be ASCII.
            - !ruby/object:Api::Type::Integer
              name: 'port'
              at_least_one_of:
                - http2_health_check.0.host
                - http2_health_check.0.request_path
                - http2_health_check.0.response
                - http2_health_check.0.port
                - http2_health_check.0.port_name
                - http2_health_check.0.proxy_header
                - http2_health_check.0.port_specification
              description: |
                The TCP port number for the HTTP2 health check request.
                The default value is 443.
            - !ruby/object:Api::Type::String
              name: 'portName'
              at_least_one_of:
                - http2_health_check.0.host
                - http2_health_check.0.request_path
                - http2_health_check.0.response
                - http2_health_check.0.port
                - http2_health_check.0.port_name
                - http2_health_check.0.proxy_header
                - http2_health_check.0.port_specification
              description: |
                Port name as defined in InstanceGroup#NamedPort#name. If both port and
                port_name are defined, port takes precedence.
            - !ruby/object:Api::Type::Enum
              name: 'proxyHeader'
              at_least_one_of:
                - http2_health_check.0.host
                - http2_health_check.0.request_path
                - http2_health_check.0.response
                - http2_health_check.0.port
                - http2_health_check.0.port_name
                - http2_health_check.0.proxy_header
                - http2_health_check.0.port_specification
              description: |
                Specifies the type of proxy header to append before sending data to the
                backend.
              values:
                - :NONE
                - :PROXY_V1
              default_value: :NONE
            - !ruby/object:Api::Type::Enum
              name: 'portSpecification'
              at_least_one_of:
                - http2_health_check.0.host
                - http2_health_check.0.request_path
                - http2_health_check.0.response
                - http2_health_check.0.port
                - http2_health_check.0.port_name
                - http2_health_check.0.proxy_header
                - http2_health_check.0.port_specification
              description: |
                Specifies how port is selected for health checking, can be one of the
                following values:

                  * `USE_FIXED_PORT`: The port number in `port` is used for health checking.

                  * `USE_NAMED_PORT`: The `portName` is used for health checking.

                  * `USE_SERVING_PORT`: For NetworkEndpointGroup, the port specified for each
                  network endpoint is used for health checking. For other backends, the
                  port or named port specified in the Backend Service is used for health
                  checking.

                If not specified, HTTP2 health check follows behavior specified in `port` and
                `portName` fields.
              values:
                - :USE_FIXED_PORT
                - :USE_NAMED_PORT
                - :USE_SERVING_PORT
      - !ruby/object:Api::Type::NestedObject
        name: 'grpcHealthCheck'
        exactly_one_of:
          - http_health_check
          - https_health_check
          - http2_health_check
          - tcp_health_check
          - ssl_health_check
          - grpc_health_check
        properties:
            - !ruby/object:Api::Type::Integer
              name: 'port'
              at_least_one_of:
                - grpc_health_check.0.port
                - grpc_health_check.0.port_name
                - grpc_health_check.0.port_specification
                - grpc_health_check.0.grpc_service_name
              description: |
                The port number for the health check request.
                Must be specified if portName and portSpecification are not set
                or if port_specification is USE_FIXED_PORT. Valid values are 1 through 65535.
            - !ruby/object:Api::Type::String
              name: 'portName'
              at_least_one_of:
                - grpc_health_check.0.port
                - grpc_health_check.0.port_name
                - grpc_health_check.0.port_specification
                - grpc_health_check.0.grpc_service_name
              description: |
                Port name as defined in InstanceGroup#NamedPort#name. If both port and
                port_name are defined, port takes precedence.
            - !ruby/object:Api::Type::Enum
              name: 'portSpecification'
              at_least_one_of:
                - grpc_health_check.0.port
                - grpc_health_check.0.port_name
                - grpc_health_check.0.port_specification
                - grpc_health_check.0.grpc_service_name
              description: |
                Specifies how port is selected for health checking, can be one of the
                following values:

                  * `USE_FIXED_PORT`: The port number in `port` is used for health checking.

                  * `USE_NAMED_PORT`: The `portName` is used for health checking.

                  * `USE_SERVING_PORT`: For NetworkEndpointGroup, the port specified for each
                  network endpoint is used for health checking. For other backends, the
                  port or named port specified in the Backend Service is used for health
                  checking.

                If not specified, gRPC health check follows behavior specified in `port` and
                `portName` fields.
              values:
                - :USE_FIXED_PORT
                - :USE_NAMED_PORT
                - :USE_SERVING_PORT
            - !ruby/object:Api::Type::String
              name: 'grpcServiceName'
              at_least_one_of:
                - grpc_health_check.0.port
                - grpc_health_check.0.port_name
                - grpc_health_check.0.port_specification
                - grpc_health_check.0.grpc_service_name
              description: |
                The gRPC service name for the health check.
                The value of grpcServiceName has the following meanings by convention:

                * Empty serviceName means the overall status of all services at the backend.
                * Non-empty serviceName means the health of that gRPC service, as defined by the owner of the service.

                The grpcServiceName can only be ASCII.
      - !ruby/object:Api::Type::NestedObject
        name: 'logConfig'
        description: |
          Configure logging on this health check.
        properties:
            - !ruby/object:Api::Type::Boolean
              name: 'enable'
              description: |
                Indicates whether or not to export logs. This is false by default,
                which means no health check logging will be done.
              default_value: false
  - !ruby/object:Api::Resource
    name: 'ResourcePolicy'
    kind: 'compute#resourcePolicy'
    base_url: projects/{{project}}/regions/{{region}}/resourcePolicies
    input: true
    has_self_link: true
    collection_url_key: 'items'
    description: |
      A policy that can be attached to a resource to specify or schedule actions on that resource.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: region
        resource: Region
        imports: name
        description: Region where resource policy resides.
        input: true
        required: true
    properties:
      - !ruby/object:Api::Type::String
        name: 'name'
        required: true
        description: |
          The name of the resource, provided by the client when initially creating
          the resource. The resource name must be 1-63 characters long, and comply
          with RFC1035. Specifically, the name must be 1-63 characters long and
          match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])`? which means the
          first character must be a lowercase letter, and all following characters
          must be a dash, lowercase letter, or digit, except the last character,
          which cannot be a dash.
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource. Provide this property when you create the resource.
      - !ruby/object:Api::Type::NestedObject
        name: 'snapshotSchedulePolicy'
        conflicts:
          - 'group_placement_policy'
          - 'instance_schedule_policy'
        description: |
          Policy for creating snapshots of persistent disks.
        properties:
          - !ruby/object:Api::Type::NestedObject
            name: 'schedule'
            description: |
              Contains one of an `hourlySchedule`, `dailySchedule`, or `weeklySchedule`.
            required: true
            properties:
              - !ruby/object:Api::Type::NestedObject
                name: 'hourlySchedule'
                description: |
                  The policy will execute every nth hour starting at the specified time.
                exactly_one_of:
                  - snapshot_schedule_policy.0.schedule.0.hourly_schedule
                  - snapshot_schedule_policy.0.schedule.0.daily_schedule
                  - snapshot_schedule_policy.0.schedule.0.weekly_schedule
                properties:
                  - !ruby/object:Api::Type::Integer
                    name: 'hoursInCycle'
                    description: |
                      The number of hours between snapshots.
                    required: true
                  - !ruby/object:Api::Type::String
                    name: 'startTime'
                    description: |
                      Time within the window to start the operations.
                      It must be in an hourly format "HH:MM",
                      where HH : [00-23] and MM : [00] GMT.
                      eg: 21:00
                    required: true
              - !ruby/object:Api::Type::NestedObject
                name: 'dailySchedule'
                description: |
                  The policy will execute every nth day at the specified time.
                exactly_one_of:
                  - snapshot_schedule_policy.0.schedule.0.hourly_schedule
                  - snapshot_schedule_policy.0.schedule.0.daily_schedule
                  - snapshot_schedule_policy.0.schedule.0.weekly_schedule
                properties:
                  - !ruby/object:Api::Type::Integer
                    name: 'daysInCycle'
                    description: |
                      The number of days between snapshots.
                    required: true
                  - !ruby/object:Api::Type::String
                    name: 'startTime'
                    description: |
                      This must be in UTC format that resolves to one of
                      00:00, 04:00, 08:00, 12:00, 16:00, or 20:00. For example,
                      both 13:00-5 and 08:00 are valid.
                    required: true
              - !ruby/object:Api::Type::NestedObject
                name: 'weeklySchedule'
                description: |
                  Allows specifying a snapshot time for each day of the week.
                exactly_one_of:
                  - snapshot_schedule_policy.0.schedule.0.hourly_schedule
                  - snapshot_schedule_policy.0.schedule.0.daily_schedule
                  - snapshot_schedule_policy.0.schedule.0.weekly_schedule
                properties:
                  - !ruby/object:Api::Type::Array
                    name: 'dayOfWeeks'
                    description: |
                      May contain up to seven (one for each day of the week) snapshot times.
                    required: true
                    min_size: 1
                    max_size: 7
                    item_type: !ruby/object:Api::Type::NestedObject
                      properties:
                        - !ruby/object:Api::Type::String
                          name: 'startTime'
                          description: |
                            Time within the window to start the operations.
                            It must be in format "HH:MM", where HH : [00-23] and MM : [00-00] GMT.
                          required: true
                        - !ruby/object:Api::Type::Enum
                          name: 'day'
                          description: |
                            The day of the week to create the snapshot. e.g. MONDAY
                          required: true
                          values:
                            - :MONDAY
                            - :TUESDAY
                            - :WEDNESDAY
                            - :THURSDAY
                            - :FRIDAY
                            - :SATURDAY
                            - :SUNDAY
          - !ruby/object:Api::Type::NestedObject
            name: 'retentionPolicy'
            description: |
              Retention policy applied to snapshots created by this resource policy.
            properties:
              - !ruby/object:Api::Type::Integer
                name: 'maxRetentionDays'
                description: |
                  Maximum age of the snapshot that is allowed to be kept.
                required: true
              - !ruby/object:Api::Type::Enum
                name: 'onSourceDiskDelete'
                description: |
                  Specifies the behavior to apply to scheduled snapshots when
                  the source disk is deleted.
                default_value: :KEEP_AUTO_SNAPSHOTS
                values:
                  - :KEEP_AUTO_SNAPSHOTS
                  - :APPLY_RETENTION_POLICY
          - !ruby/object:Api::Type::NestedObject
            name: 'snapshotProperties'
            description: |
              Properties with which the snapshots are created, such as labels.
            properties:
              - !ruby/object:Api::Type::KeyValuePairs
                name: 'labels'
                at_least_one_of:
                  - snapshot_schedule_policy.0.snapshot_properties.0.labels
                  - snapshot_schedule_policy.0.snapshot_properties.0.storage_locations
                  - snapshot_schedule_policy.0.snapshot_properties.0.guest_flush
                description: |
                  A set of key-value pairs.
              - !ruby/object:Api::Type::Array
                name: 'storageLocations'
                at_least_one_of:
                  - snapshot_schedule_policy.0.snapshot_properties.0.labels
                  - snapshot_schedule_policy.0.snapshot_properties.0.storage_locations
                  - snapshot_schedule_policy.0.snapshot_properties.0.guest_flush
                max_size: 1
                description: |
                  Cloud Storage bucket location to store the auto snapshot
                  (regional or multi-regional)
                item_type: Api::Type::String
              - !ruby/object:Api::Type::Boolean
                name: 'guestFlush'
                send_empty_value: true
                at_least_one_of:
                  - snapshot_schedule_policy.0.snapshot_properties.0.labels
                  - snapshot_schedule_policy.0.snapshot_properties.0.storage_locations
                  - snapshot_schedule_policy.0.snapshot_properties.0.guest_flush
                description: |
                  Whether to perform a 'guest aware' snapshot.
              - !ruby/object:Api::Type::String
                name: 'chainName'
                description: |
                  Creates the new snapshot in the snapshot chain labeled with the 
                  specified name. The chain name must be 1-63 characters long and comply 
                  with RFC1035.
      - !ruby/object:Api::Type::NestedObject
        name: 'groupPlacementPolicy'
        conflicts:
          - 'instance_schedule_policy'
          - 'snapshot_schedule_policy'
        description: |
          Resource policy for instances used for placement configuration.
        properties:
          - !ruby/object:Api::Type::Integer
            name: 'vmCount'
            description: |
              Number of VMs in this placement group. Google does not recommend that you use this field
              unless you use a compact policy and you want your policy to work only if it contains this
              exact number of VMs.
          - !ruby/object:Api::Type::Integer
            name: 'availabilityDomainCount'
            description: |
              The number of availability domains instances will be spread across. If two instances are in different
              availability domain, they will not be put in the same low latency network
          - !ruby/object:Api::Type::Enum
            name: 'collocation'
            description: |
              Collocation specifies whether to place VMs inside the same availability domain on the same low-latency network.
              Specify `COLLOCATED` to enable collocation. Can only be specified with `vm_count`. If compute instances are created
              with a COLLOCATED policy, then exactly `vm_count` instances must be created at the same time with the resource policy
              attached.
            values:
              - :COLLOCATED
      - !ruby/object:Api::Type::NestedObject
        name: 'instanceSchedulePolicy'
        conflicts:
          - 'snapshot_schedule_policy'
          - 'group_placement_policy'
        description: |
          Resource policy for scheduling instance operations.
        properties:
          - !ruby/object:Api::Type::NestedObject
            name: 'vmStartSchedule'
            at_least_one_of:
              - instance_schedule_policy.0.vm_start_schedule
              - instance_schedule_policy.0.vm_stop_schedule
            description: |
              Specifies the schedule for starting instances.
            properties:
              - !ruby/object:Api::Type::String
                name: 'schedule'
                description: |
                  Specifies the frequency for the operation, using the unix-cron format.
                required: true
          - !ruby/object:Api::Type::NestedObject
            name: 'vmStopSchedule'
            at_least_one_of:
              - instance_schedule_policy.0.vm_start_schedule
              - instance_schedule_policy.0.vm_stop_schedule
            description: |
              Specifies the schedule for stopping instances.
            properties:
              - !ruby/object:Api::Type::String
                name: 'schedule'
                description: |
                  Specifies the frequency for the operation, using the unix-cron format.
                required: true
          - !ruby/object:Api::Type::String
            name: 'timeZone'
            description: |
              Specifies the time zone to be used in interpreting the schedule. The value of this field must be a time zone name
              from the tz database: http://en.wikipedia.org/wiki/Tz_database.
            required: true
          - !ruby/object:Api::Type::String
            name: 'startTime'
            description: |
              The start time of the schedule. The timestamp is an RFC3339 string.
          - !ruby/object:Api::Type::String
            name: 'expirationTime'
            description: |
              The expiration time of the schedule. The timestamp is an RFC3339 string.
  - !ruby/object:Api::Resource
    name: 'Route'
    kind: 'compute#route'
    base_url: projects/{{project}}/global/routes
    collection_url_key: 'items'
    input: true
    has_self_link: true
    description: |
      Represents a Route resource.

      A route is a rule that specifies how certain packets should be handled by
      the virtual network. Routes are associated with virtual machines by tag,
      and the set of routes for a particular virtual machine is called its
      routing table. For each packet leaving a virtual machine, the system
      searches that virtual machine's routing table for a single best matching
      route.

      Routes match packets by destination IP address, preferring smaller or more
      specific ranges over larger ones. If there is a tie, the system selects
      the route with the smallest priority value. If there is still a tie, it
      uses the layer three and four packet headers to select just one of the
      remaining matching routes. The packet is then forwarded as specified by
      the next_hop field of the winning route -- either to another virtual
      machine destination, a virtual machine gateway or a Compute
      Engine-operated gateway. Packets that do not match any route in the
      sending virtual machine's routing table will be dropped.

      A Route resource must have exactly one specification of either
      nextHopGateway, nextHopInstance, nextHopIp, nextHopVpnTunnel, or
      nextHopIlb.

    references: !ruby/object:Api::Resource::ReferenceLinks
          guides:
            'Using Routes': 'https://cloud.google.com/vpc/docs/using-routes'
          api: 'https://cloud.google.com/compute/docs/reference/rest/v1/routes'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      - !ruby/object:Api::Type::String
        name: 'destRange'
        description: |
          The destination range of outgoing packets that this route applies to.
          Only IPv4 is supported.
        required: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource. Provide this property
          when you create the resource.
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035.  Specifically, the name must be 1-63 characters long and
          match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means
          the first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the
          last character, which cannot be a dash.
        required: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'network'
        resource: 'Network'
        imports: 'selfLink'
        description: 'The network that this route applies to.'
        input: true
        required: true
      - !ruby/object:Api::Type::Integer
        name: 'priority'
        description: |
          The priority of this route. Priority is used to break ties in cases
          where there is more than one matching route of equal prefix length.

          In the case of two routes with equal prefix length, the one with the
          lowest-numbered priority value wins.

          Default value is 1000. Valid range is 0 through 65535.
        input: true
      - !ruby/object:Api::Type::Array
        name: 'tags'
        description: 'A list of instance tags to which this route applies.'
        item_type: Api::Type::String
        input: true
      - !ruby/object:Api::Type::String
        name: 'nextHopGateway'
        input: true
        exactly_one_of:
          - next_hop_gateway
          - next_hop_instance
          - next_hop_ip
          - next_hop_vpn_tunnel
          - next_hop_ilb
        description: |
          URL to a gateway that should handle matching packets.

          Currently, you can only specify the internet gateway, using a full or
          partial valid URL:

          * https://www.googleapis.com/compute/v1/projects/project/
          global/gateways/default-internet-gateway
          * projects/project/global/gateways/default-internet-gateway
          * global/gateways/default-internet-gateway
      - !ruby/object:Api::Type::ResourceRef
        name: 'nextHopInstance'
        resource: 'Instance'
        imports: 'selfLink'
        input: true
        exactly_one_of:
          - next_hop_gateway
          - next_hop_instance
          - next_hop_ip
          - next_hop_vpn_tunnel
          - next_hop_ilb
        description: |
          URL to an instance that should handle matching packets.
          You can specify this as a full or partial URL. For example:

          * https://www.googleapis.com/compute/v1/projects/project/zones/zone/
          instances/instance
          * projects/project/zones/zone/instances/instance
          * zones/zone/instances/instance
      - !ruby/object:Api::Type::String
        name: 'nextHopIp'
        description: |
          Network IP address of an instance that should handle matching packets.
        input: true
        exactly_one_of:
          - next_hop_gateway
          - next_hop_instance
          - next_hop_ip
          - next_hop_vpn_tunnel
          - next_hop_ilb
      - !ruby/object:Api::Type::ResourceRef
        name: 'nextHopVpnTunnel'
        resource: 'VpnTunnel'
        imports: 'selfLink'
        input: true
        exactly_one_of:
          - next_hop_gateway
          - next_hop_instance
          - next_hop_ip
          - next_hop_vpn_tunnel
          - next_hop_ilb
        description: |
          URL to a VpnTunnel that should handle matching packets.
      - !ruby/object:Api::Type::String
        name: 'nextHopNetwork'
        output: true
        description: |
          URL to a Network that should handle matching packets.
      - !ruby/object:Api::Type::String
        name: 'nextHopIlb'
        description: |
          The IP address or URL to a forwarding rule of type
          loadBalancingScheme=INTERNAL that should handle matching
          packets.

          With the GA provider you can only specify the forwarding
          rule as a partial or full URL. For example, the following
          are all valid values:
          * 10.128.0.56
          * https://www.googleapis.com/compute/v1/projects/project/regions/region/forwardingRules/forwardingRule
          * regions/region/forwardingRules/forwardingRule

          When the beta provider, you can also specify the IP address
          of a forwarding rule from the same VPC or any peered VPC.

          Note that this can only be used when the destinationRange is
          a public (non-RFC 1918) IP CIDR range.
        input: true
        exactly_one_of:
          - next_hop_gateway
          - next_hop_instance
          - next_hop_ip
          - next_hop_vpn_tunnel
          - next_hop_ilb
  - !ruby/object:Api::Resource
    name: 'Router'
    kind: 'compute#router'
    base_url: projects/{{project}}/regions/{{region}}/routers
    collection_url_key: 'items'
    # Since Terraform has separate resources for router, router interface, and
    # router peer, calling PUT on the router will delete the interface and peer.
    # Use patch instead.
    update_verb: :PATCH
    has_self_link: true
    description: |
      Represents a Router resource.
    references: !ruby/object:Api::Resource::ReferenceLinks
          guides:
            'Google Cloud Router': 'https://cloud.google.com/router/docs/'
          api: 'https://cloud.google.com/compute/docs/reference/rest/v1/routers'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: region
        resource: Region
        imports: name
        description: Region where the router resides.
        input: true
        required: true
    properties:
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: name
        description: |
          Name of the resource. The name must be 1-63 characters long, and
          comply with RFC1035. Specifically, the name must be 1-63 characters
          long and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?`
          which means the first character must be a lowercase letter, and all
          following characters must be a dash, lowercase letter, or digit,
          except the last character, which cannot be a dash.
        input: true
        required: true
      - !ruby/object:Api::Type::String
        name: description
        description: |
          An optional description of this resource.
        send_empty_value: true
      - !ruby/object:Api::Type::ResourceRef
        name: network
        resource: Network
        imports: 'selfLink'
        description: |
          A reference to the network to which this router belongs.
        required: true
        input: true
      # TODO: Figure out the story for interfaces/bgpPeers. Right
      # now in Terraform we have three separate resources: router,
      # router_interface, and router_peer. Decide whether we want to keep that
      # pattern for the other providers, keep it unique for Terraform, or add
      # these fields to the Terraform resource (and then within that, decide
      # whether to deprecate router_interface and router_peer or leave them
      # alone).
      - !ruby/object:Api::Type::NestedObject
        name: bgp
        description: |
          BGP information specific to this router.
        send_empty_value: true
        properties:
          - !ruby/object:Api::Type::Integer
            name: asn
            description: |
              Local BGP Autonomous System Number (ASN). Must be an RFC6996
              private ASN, either 16-bit or 32-bit. The value will be fixed for
              this router resource. All VPN tunnels that link to this router
              will have the same local ASN.
            required: true
          - !ruby/object:Api::Type::Enum
            name: advertiseMode
            description: |
              User-specified flag to indicate which mode to use for advertisement.
            values:
              - :DEFAULT
              - :CUSTOM
            default_value: :DEFAULT
          - !ruby/object:Api::Type::Array
            name: advertisedGroups
            description: |
              User-specified list of prefix groups to advertise in custom mode.
              This field can only be populated if advertiseMode is CUSTOM and
              is advertised to all peers of the router. These groups will be
              advertised in addition to any specified prefixes. Leave this field
              blank to advertise no custom groups.

              This enum field has the one valid value: ALL_SUBNETS
            item_type: Api::Type::String # TODO(#324): enum?
            send_empty_value: true
          - !ruby/object:Api::Type::Array
            name: advertisedIpRanges
            description: |
              User-specified list of individual IP ranges to advertise in
              custom mode. This field can only be populated if advertiseMode
              is CUSTOM and is advertised to all peers of the router. These IP
              ranges will be advertised in addition to any specified groups.
              Leave this field blank to advertise no custom IP ranges.
            send_empty_value: true
            item_type: !ruby/object:Api::Type::NestedObject
                properties:
                  - !ruby/object:Api::Type::String
                    name: range
                    required: true
                    description: |
                      The IP range to advertise. The value must be a
                      CIDR-formatted string.
                    send_empty_value: true
                  - !ruby/object:Api::Type::String
                    name: description
                    description: |
                      User-specified description for the IP range.
                    send_empty_value: true
          - !ruby/object:Api::Type::Integer
            name: keepaliveInterval
            description: |
              The interval in seconds between BGP keepalive messages that are sent to the peer.
              Hold time is three times the interval at which keepalive messages are sent, and the hold time is the
              maximum number of seconds allowed to elapse between successive keepalive messages that BGP receives from a peer.
              BGP will use the smaller of either the local hold time value or the peer's hold time value as the hold time for
              the BGP connection between the two peers. If set, this value must be between 20 and 60. The default is 20.
            default_value: 20
      - !ruby/object:Api::Type::Boolean
        name: encryptedInterconnectRouter
        input: true
        description: |
          Field to indicate if a router is dedicated to use with encrypted
          Interconnect Attachment (IPsec-encrypted Cloud Interconnect feature).

          Not currently available publicly.
  - !ruby/object:Api::Resource
    name: 'RouterNat'
    base_url: projects/{{project}}/regions/{{region}}/routers/{{router}}
    self_link: projects/{{project}}/regions/{{region}}/routers/{{router}}
    create_url: projects/{{project}}/regions/{{region}}/routers/{{router}}
    update_url: projects/{{project}}/regions/{{region}}/routers/{{router}}
    delete_url: projects/{{project}}/regions/{{region}}/routers/{{router}}
    create_verb: :PATCH
    update_verb: :PATCH
    delete_verb: :PATCH
    identity:
      - name
    collection_url_key: nats
    nested_query: !ruby/object:Api::Resource::NestedQuery
      modify_by_patch: true
      keys:
        - nats
    description: |
      A NAT service created in a router.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Google Cloud Router': 'https://cloud.google.com/router/docs/'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/routers'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{regions}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'router'
        resource: 'Router'
        imports: 'name'
        description: |
          The name of the Cloud Router in which this NAT will be configured.
        required: true
        input: true
        url_param_only: true
      - !ruby/object:Api::Type::ResourceRef
        name: region
        resource: Region
        imports: name
        description: Region where the router and NAT reside.
        input: true
        required: true
        url_param_only: true
    properties:
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the NAT service. The name must be 1-63 characters long and
          comply with RFC1035.
        required: true
        input: true
      - !ruby/object:Api::Type::Enum
        name: 'natIpAllocateOption'
        required: true
        description: |
          How external IPs should be allocated for this NAT. Valid values are
          `AUTO_ONLY` for only allowing NAT IPs allocated by Google Cloud
          Platform, or `MANUAL_ONLY` for only user-allocated NAT IP addresses.
        values:
          - :MANUAL_ONLY
          - :AUTO_ONLY
      - !ruby/object:Api::Type::Array
        name: 'natIps'
        description: |
          Self-links of NAT IPs. Only valid if natIpAllocateOption
          is set to MANUAL_ONLY.
        send_empty_value: true
        item_type: !ruby/object:Api::Type::ResourceRef
          name: 'address'
          resource: 'Address'
          imports: 'selfLink'
          description: 'A reference to an address associated with this NAT'
      - !ruby/object:Api::Type::Array
        name: 'drainNatIps'
        description: |
          A list of URLs of the IP resources to be drained. These IPs must be
          valid static external IPs that have been assigned to the NAT.
        send_empty_value: true
        item_type: !ruby/object:Api::Type::ResourceRef
          name: 'address'
          resource: 'Address'
          imports: 'selfLink'
          description: 'A reference to an address associated with this NAT'
      - !ruby/object:Api::Type::Enum
        name: 'sourceSubnetworkIpRangesToNat'
        required: true
        description: |
          How NAT should be configured per Subnetwork.
          If `ALL_SUBNETWORKS_ALL_IP_RANGES`, all of the
          IP ranges in every Subnetwork are allowed to Nat.
          If `ALL_SUBNETWORKS_ALL_PRIMARY_IP_RANGES`, all of the primary IP
          ranges in every Subnetwork are allowed to Nat.
          `LIST_OF_SUBNETWORKS`: A list of Subnetworks are allowed to Nat
          (specified in the field subnetwork below). Note that if this field
          contains ALL_SUBNETWORKS_ALL_IP_RANGES or
          ALL_SUBNETWORKS_ALL_PRIMARY_IP_RANGES, then there should not be any
          other RouterNat section in any Router for this network in this region.
        values:
          - :ALL_SUBNETWORKS_ALL_IP_RANGES
          - :ALL_SUBNETWORKS_ALL_PRIMARY_IP_RANGES
          - :LIST_OF_SUBNETWORKS
      - !ruby/object:Api::Type::Array
        name: subnetwork
        api_name: 'subnetworks'
        send_empty_value: true
        description: |
          One or more subnetwork NAT configurations. Only used if
          `source_subnetwork_ip_ranges_to_nat` is set to `LIST_OF_SUBNETWORKS`
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::ResourceRef
              name: 'name'
              resource: 'Subnetwork'
              imports: 'selfLink'
              description: 'Self-link of subnetwork to NAT'
              required: true
            - !ruby/object:Api::Type::Array
              name: 'sourceIpRangesToNat'
              description: |
                List of options for which source IPs in the subnetwork
                should have NAT enabled. Supported values include:
                `ALL_IP_RANGES`, `LIST_OF_SECONDARY_IP_RANGES`,
                `PRIMARY_IP_RANGE`.
              required: true
              min_size: 1
              item_type: Api::Type::String
            - !ruby/object:Api::Type::Array
              name: 'secondaryIpRangeNames'
              description: |
                List of the secondary ranges of the subnetwork that are allowed
                to use NAT. This can be populated only if
                `LIST_OF_SECONDARY_IP_RANGES` is one of the values in
                sourceIpRangesToNat
              item_type: Api::Type::String
      - !ruby/object:Api::Type::Integer
        name: minPortsPerVm
        description: |
          Minimum number of ports allocated to a VM from this NAT.
      - !ruby/object:Api::Type::Integer
        name: maxPortsPerVm
        description: |
          Maximum number of ports allocated to a VM from this NAT.
          This field can only be set when enableDynamicPortAllocation is enabled.
      - !ruby/object:Api::Type::Boolean
        name: enableDynamicPortAllocation
        description: |
          Enable Dynamic Port Allocation.
          If minPortsPerVm is set, minPortsPerVm must be set to a power of two greater than or equal to 32.
          If minPortsPerVm is not set, a minimum of 32 ports will be allocated to a VM from this NAT config.
          If maxPortsPerVm is set, maxPortsPerVm must be set to a power of two greater than minPortsPerVm.
          If maxPortsPerVm is not set, a maximum of 65536 ports will be allocated to a VM from this NAT config.

          Mutually exclusive with enableEndpointIndependentMapping.
      - !ruby/object:Api::Type::Integer
        name: udpIdleTimeoutSec
        description: |
          Timeout (in seconds) for UDP connections. Defaults to 30s if not set.
        default_value: 30
      - !ruby/object:Api::Type::Integer
        name: icmpIdleTimeoutSec
        description: |
          Timeout (in seconds) for ICMP connections. Defaults to 30s if not set.
        default_value: 30
      - !ruby/object:Api::Type::Integer
        name: tcpEstablishedIdleTimeoutSec
        description: |
          Timeout (in seconds) for TCP established connections.
          Defaults to 1200s if not set.
        default_value: 1200
      - !ruby/object:Api::Type::Integer
        name: tcpTransitoryIdleTimeoutSec
        description: |
          Timeout (in seconds) for TCP transitory connections.
          Defaults to 30s if not set.
        default_value: 30
      - !ruby/object:Api::Type::NestedObject
        name: logConfig
        description: |
          Configuration for logging on NAT
        send_empty_value: true
        properties:
          - !ruby/object:Api::Type::Boolean
            name: 'enable'
            description: |
              Indicates whether or not to export logs.
            required: true
          - !ruby/object:Api::Type::Enum
            name: 'filter'
            description: |
              Specifies the desired filtering of logs on this NAT.
            required: true
            values:
              - :ERRORS_ONLY
              - :TRANSLATIONS_ONLY
              - :ALL
      - !ruby/object:Api::Type::Array
        name: rules
        description: 'A list of rules associated with this NAT.'
        send_empty_value: true
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::Integer
              name: 'ruleNumber'
              description: |
                An integer uniquely identifying a rule in the list.
                The rule number must be a positive value between 0 and 65000, and must be unique among rules within a NAT.
              required: true
              send_empty_value: true
            - !ruby/object:Api::Type::String
              name: 'description'
              description: 'An optional description of this rule.'
            - !ruby/object:Api::Type::String
              name: 'match'
              description: |
                CEL expression that specifies the match condition that egress traffic from a VM is evaluated against.
                If it evaluates to true, the corresponding action is enforced.

                The following examples are valid match expressions for public NAT:

                "inIpRange(destination.ip, '1.1.0.0/16') || inIpRange(destination.ip, '2.2.0.0/16')"

                "destination.ip == '1.1.0.1' || destination.ip == '8.8.8.8'"

                The following example is a valid match expression for private NAT:

                "nexthop.hub == 'https://networkconnectivity.googleapis.com/v1alpha1/projects/my-project/global/hub/hub-1'"
              required: true
            - !ruby/object:Api::Type::NestedObject
              name: 'action'
              description: 'The action to be enforced for traffic that matches this rule.'
              properties:
                - !ruby/object:Api::Type::Array
                  name: 'sourceNatActiveIps'
                  description: |
                    A list of URLs of the IP resources used for this NAT rule.
                    These IP addresses must be valid static external IP addresses assigned to the project.
                    This field is used for public NAT.
                  item_type: !ruby/object:Api::Type::ResourceRef
                    name: 'address'
                    resource: 'Address'
                    imports: 'selfLink'
                    description: 'A reference to an address associated with this NAT'
                - !ruby/object:Api::Type::Array
                  name: 'sourceNatDrainIps'
                  description: |
                    A list of URLs of the IP resources to be drained.
                    These IPs must be valid static external IPs that have been assigned to the NAT.
                    These IPs should be used for updating/patching a NAT rule only.
                    This field is used for public NAT.
                  item_type: !ruby/object:Api::Type::ResourceRef
                    name: 'address'
                    resource: 'Address'
                    imports: 'selfLink'
                    description: 'A reference to an address associated with this NAT'
      - !ruby/object:Api::Type::Boolean
        name: enableEndpointIndependentMapping
        description: |
          Specifies if endpoint independent mapping is enabled. This is enabled by default. For more information
          see the [official documentation](https://cloud.google.com/nat/docs/overview#specs-rfcs).
        default_value: true
        send_empty_value: true
  - !ruby/object:Api::Resource
    name: 'RouterBgpPeer'
    base_url: projects/{{project}}/regions/{{region}}/routers/{{router}}
    self_link: projects/{{project}}/regions/{{region}}/routers/{{router}}
    create_verb: :PATCH
    update_verb: :PATCH
    delete_verb: :PATCH
    identity:
      - name
    nested_query: !ruby/object:Api::Resource::NestedQuery
      modify_by_patch: true
      keys:
        - bgpPeers
    description: |
      BGP information that must be configured into the routing stack to
      establish BGP peering. This information must specify the peer ASN
      and either the interface name, IP address, or peer IP address.
      Please refer to RFC4273.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Google Cloud Router': 'https://cloud.google.com/router/docs/'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/routers'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{regions}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'router'
        resource: 'Router'
        imports: 'name'
        description: |
          The name of the Cloud Router in which this BgpPeer will be configured.
        required: true
        input: true
        url_param_only: true
      - !ruby/object:Api::Type::ResourceRef
        name: region
        resource: Region
        imports: name
        description: Region where the router and BgpPeer reside.
        input: true
        required: true
        url_param_only: true
    properties:
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of this BGP peer. The name must be 1-63 characters long,
          and comply with RFC1035. Specifically, the name must be 1-63 characters
          long and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which
          means the first character must be a lowercase letter, and all
          following characters must be a dash, lowercase letter, or digit,
          except the last character, which cannot be a dash.
        required: true
        input: true
      - !ruby/object:Api::Type::String
        name: 'interfaceName'
        description: |
          Name of the interface the BGP peer is associated with.
        required: true
        input: true
      - !ruby/object:Api::Type::String
        name: 'ipAddress'
        description: |
          IP address of the interface inside Google Cloud Platform.
          Only IPv4 is supported.
      - !ruby/object:Api::Type::String
        name: 'peerIpAddress'
        description: |
          IP address of the BGP interface outside Google Cloud Platform.
          Only IPv4 is supported.
        required: true
      - !ruby/object:Api::Type::Integer
        name: 'peerAsn'
        description: |
          Peer BGP Autonomous System Number (ASN).
          Each BGP interface may use a different value.
        required: true
      - !ruby/object:Api::Type::Integer
        name: 'advertisedRoutePriority'
        description: |
          The priority of routes advertised to this BGP peer.
          Where there is more than one matching route of maximum
          length, the routes with the lowest priority value win.
        send_empty_value: true
      - !ruby/object:Api::Type::Enum
        name: advertiseMode
        description: |
          User-specified flag to indicate which mode to use for advertisement.
          Valid values of this enum field are: `DEFAULT`, `CUSTOM`
        values:
          - :DEFAULT
          - :CUSTOM
        default_value: :DEFAULT
      - !ruby/object:Api::Type::Array
        name: advertisedGroups
        description: |
          User-specified list of prefix groups to advertise in custom
          mode, which can take one of the following options:

          * `ALL_SUBNETS`: Advertises all available subnets, including peer VPC subnets.
          * `ALL_VPC_SUBNETS`: Advertises the router's own VPC subnets.
          * `ALL_PEER_VPC_SUBNETS`: Advertises peer subnets of the router's VPC network.


          Note that this field can only be populated if advertiseMode is `CUSTOM`
          and overrides the list defined for the router (in the "bgp" message).
          These groups are advertised in addition to any specified prefixes.
          Leave this field blank to advertise no custom groups.
        send_empty_value: true
        item_type: Api::Type::String
      - !ruby/object:Api::Type::Array
        name: advertisedIpRanges
        description: |
          User-specified list of individual IP ranges to advertise in
          custom mode. This field can only be populated if advertiseMode
          is `CUSTOM` and is advertised to all peers of the router. These IP
          ranges will be advertised in addition to any specified groups.
          Leave this field blank to advertise no custom IP ranges.
        send_empty_value: true
        item_type: !ruby/object:Api::Type::NestedObject
            properties:
              - !ruby/object:Api::Type::String
                name: range
                required: true
                description: |
                  The IP range to advertise. The value must be a
                  CIDR-formatted string.
              - !ruby/object:Api::Type::String
                name: description
                description: |
                  User-specified description for the IP range.
                send_empty_value: true
      - !ruby/object:Api::Type::String
        name: 'managementType'
        description: |
          The resource that configures and manages this BGP peer.

          * `MANAGED_BY_USER` is the default value and can be managed by
          you or other users
          * `MANAGED_BY_ATTACHMENT` is a BGP peer that is configured and
          managed by Cloud Interconnect, specifically by an
          InterconnectAttachment of type PARTNER. Google automatically
          creates, updates, and deletes this type of BGP peer when the
          PARTNER InterconnectAttachment is created, updated,
          or deleted.
        output: true
      - !ruby/object:Api::Type::NestedObject
        name: bfd
        description: |
          BFD configuration for the BGP peering.
        properties:
          - !ruby/object:Api::Type::Enum
            name: sessionInitializationMode
            description: |
              The BFD session initialization mode for this BGP peer.
              If set to `ACTIVE`, the Cloud Router will initiate the BFD session
              for this BGP peer. If set to `PASSIVE`, the Cloud Router will wait
              for the peer router to initiate the BFD session for this BGP peer.
              If set to `DISABLED`, BFD is disabled for this BGP peer.
            values:
              - :ACTIVE
              - :DISABLED
              - :PASSIVE
            required: true
          - !ruby/object:Api::Type::Integer
            name: minTransmitInterval
            description: |
              The minimum interval, in milliseconds, between BFD control packets
              transmitted to the peer router. The actual value is negotiated
              between the two routers and is equal to the greater of this value
              and the corresponding receive interval of the other router. If set,
              this value must be between 1000 and 30000.
            default_value: 1000
          - !ruby/object:Api::Type::Integer
            name: minReceiveInterval
            description: |
              The minimum interval, in milliseconds, between BFD control packets
              received from the peer router. The actual value is negotiated
              between the two routers and is equal to the greater of this value
              and the transmit interval of the other router. If set, this value
              must be between 1000 and 30000.
            default_value: 1000
          - !ruby/object:Api::Type::Integer
            name: multiplier
            description: |
              The number of consecutive BFD packets that must be missed before
              BFD declares that a peer is unavailable. If set, the value must
              be a value between 5 and 16.
            default_value: 5
      - !ruby/object:Api::Type::Boolean
        name: 'enable'
        description: |
          The status of the BGP peer connection. If set to false, any active session
          with the peer is terminated and all associated routing information is removed.
          If set to true, the peer connection can be established with routing information.
          The default is true.
        default_value: true
  - !ruby/object:Api::Resource
    name: 'SecurityPolicy'
    kind: 'compute#securityPolicy'
    base_url: projects/{{project}}/global/securityPolicies
    collection_url_key: 'items'
    has_self_link: true
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation': 'https://cloud.google.com/armor/docs/security-policy-concepts'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/securityPolicies'
    description: |
      Represents a Cloud Armor Security Policy resource.
    properties:
      - !ruby/object:Api::Type::String
        name: 'name'
        description: 'Name of the security policy.'
        required: true
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::Array
        name: 'rules'
        description: |
          A list of rules that belong to this policy.
          There must always be a default rule (rule with priority 2147483647 and match "*").
          If no rules are provided when creating a security policy, a default rule with action "allow" will be added.
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::String
              name: 'description'
              description: |
                A description of the rule.
            - !ruby/object:Api::Type::Integer
              name: 'priority'
              description: |
                An integer indicating the priority of a rule in the list. The priority must be a value
                between 0 and 2147483647. Rules are evaluated from highest to lowest priority where 0 is the
                highest priority and 2147483647 is the lowest prority.
            - !ruby/object:Api::Type::String
              name: 'action'
              description: |
                The Action to preform when the client connection triggers the rule. Can currently be either
                "allow" or "deny()" where valid values for status are 403, 404, and 502.
            - !ruby/object:Api::Type::Boolean
              name: 'preview'
              description: |
                If set to true, the specified action is not enforced.
            - !ruby/object:Api::Type::NestedObject
              name: 'match'
              description:
                A match condition that incoming traffic is evaluated against. If it evaluates to true,
                the corresponding 'action' is enforced.
              properties:
                - !ruby/object:Api::Type::String
                  name: 'description'
                  description: |
                    A description of the rule.
                - !ruby/object:Api::Type::NestedObject
                  name: 'expr'
                  description:
                    User defined CEVAL expression. A CEVAL expression is used to specify match criteria such as origin.ip,
                    source.region_code and contents in the request header.
                  properties:
                    - !ruby/object:Api::Type::String
                      name: 'expression'
                      description: |
                        Textual representation of an expression in Common Expression Language syntax.
                    - !ruby/object:Api::Type::String
                      name: 'title'
                      description: |
                        Optional. Title for the expression, i.e. a short string describing its purpose.
                        This can be used e.g. in UIs which allow to enter the expression.
                    - !ruby/object:Api::Type::String
                      name: 'description'
                      description: |
                        Optional. Description of the expression. This is a longer text which describes the expression,
                        e.g. when hovered over it in a UI.
                    - !ruby/object:Api::Type::String
                      name: 'location'
                      description: |
                        Optional. String indicating the location of the expression for error reporting,
                        e.g. a file name and a position in the file.
                - !ruby/object:Api::Type::String
                  name: 'versionedExpr'
                  description: |
                    Preconfigured versioned expression. If this field is specified, config must also be specified.
                    Available preconfigured expressions along with their requirements are: `SRC_IPS_V1` - must specify
                    the corresponding srcIpRange field in config.
                - !ruby/object:Api::Type::NestedObject
                  name: 'config'
                  description:
                    The configuration options available when specifying versionedExpr. This field must be specified
                    if versionedExpr is specified and cannot be specified if versionedExpr is not specified.
                  properties:
                    - !ruby/object:Api::Type::Array
                      name: 'srcIpRanges'
                      description: |
                        CIDR IP address range.
                      item_type: Api::Type::String
  - !ruby/object:Api::Resource
    name: 'Snapshot'
    kind: 'compute#snapshot'
    input: true
    base_url: projects/{{project}}/global/snapshots
    create_url: projects/{{project}}/zones/{{zone}}/disks/{{sourceDisk}}/createSnapshot
    collection_url_key: 'items'
    has_self_link: true
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation': 'https://cloud.google.com/compute/docs/disks/create-snapshots'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/snapshots'
    iam_policy: !ruby/object:Api::Resource::IamPolicy
      exclude: false
      parent_resource_attribute: 'name'
      import_format: ["projects/{{project}}/global/snapshots/{{name}}", "{{name}}"]      
    description: |
      Represents a Persistent Disk Snapshot resource.

      Use snapshots to back up data from your persistent disks. Snapshots are
      different from public images and custom images, which are used primarily
      to create instances or configure instance templates. Snapshots are useful
      for periodic backup of the data on your persistent disks. You can create
      snapshots from persistent disks even while they are attached to running
      instances.

      Snapshots are incremental, so you can create regular snapshots on a
      persistent disk faster and at a much lower cost than if you regularly
      created a full image of the disk.
    # 'createSnapshot' is a zonal operation while 'snapshot.delete' is a global
    # operation. we'll leave the object as global operation and use the disk's
    # zonal operation for the create action.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        full_url: 'selfLink'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'sourceDisk'
        resource: 'Disk'
        imports: 'name'
        description: 'A reference to the disk used to create this snapshot.'
        input: true
        required: true
      # ignore_read in providers - this is only used in Create
      - !ruby/object:Api::Type::ResourceRef
        name: 'zone'
        resource: 'Zone'
        imports: 'name'
        description: 'A reference to the zone where the disk is hosted.'
        input: true
      - !ruby/object:Api::Type::NestedObject
        name: 'snapshotEncryptionKey'
        description: |
          The customer-supplied encryption key of the snapshot. Required if the
          source snapshot is protected by a customer-supplied encryption key.
        properties:
          - !ruby/object:Api::Type::String
            name: 'rawKey'
            description: |
              Specifies a 256-bit customer-supplied encryption key, encoded in
              RFC 4648 base64 to either encrypt or decrypt this resource.
          - !ruby/object:Api::Type::String
            name: 'sha256'
            description: |
              The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied
              encryption key that protects this resource.
            output: true
          - !ruby/object:Api::Type::String
            # TODO(chrisst) Change to ResourceRef once KMS is in Magic Modules
            name: 'kmsKeyName'
            description: |
              The name of the encryption key that is stored in Google Cloud KMS.
          - !ruby/object:Api::Type::String
            name: 'kmsKeyServiceAccount'
            description: |
              The service account used for the encryption request for the given KMS key.
              If absent, the Compute Engine Service Agent service account is used.
      - !ruby/object:Api::Type::NestedObject
        # ignore_read in providers - this is only used in Create
        name: 'sourceDiskEncryptionKey'
        description: |
          The customer-supplied encryption key of the source snapshot. Required
          if the source snapshot is protected by a customer-supplied encryption
          key.
        properties:
          - !ruby/object:Api::Type::String
            name: 'rawKey'
            description: |
              Specifies a 256-bit customer-supplied encryption key, encoded in
              RFC 4648 base64 to either encrypt or decrypt this resource.
          # The docs list this field but it is never returned.
          - !ruby/object:Api::Type::String
            name: 'sha256'
            exclude: true
            output: true
            description: |
              The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied
              encryption key that protects this resource.
          - !ruby/object:Api::Type::String
            # TODO(chrisst) Change to ResourceRef once KMS is in Magic Modules
            name: 'kmsKeyName'
            description: |
              The name of the encryption key that is stored in Google Cloud KMS.
          - !ruby/object:Api::Type::String
            name: 'kmsKeyServiceAccount'
            description: |
              The service account used for the encryption request for the given KMS key.
              If absent, the Compute Engine Service Agent service account is used.
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      # 'status' not useful for object convergence.
      - !ruby/object:Api::Type::Integer
        name: 'diskSizeGb'
        description: 'Size of the snapshot, specified in GB.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'chainName'
        description: |
          Creates the new snapshot in the snapshot chain labeled with the 
          specified name. The chain name must be 1-63 characters long and 
          comply with RFC1035. This is an uncommon option only for advanced 
          service owners who needs to create separate snapshot chains, for 
          example, for chargeback tracking.  When you describe your snapshot 
          resource, this field is visible only if it has a non-empty value.
      - !ruby/object:Api::Type::String
        name: 'name'
        required: true
        input: true
        description: |
          Name of the resource; provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
      - !ruby/object:Api::Type::String
        name: 'description'
        input: true
        description: 'An optional description of this resource.'
      # 'sourceDiskId' not useful for object convergence.
      - !ruby/object:Api::Type::Integer
        name: 'storageBytes'
        description: |
          A size of the storage used by the snapshot. As snapshots share
          storage, this number is expected to change with snapshot
          creation/deletion.
        output: true
      # 'storageBytesStatus' not useful for object convergence.
      - !ruby/object:Api::Type::Array
        name: 'storageLocations'
        description: |
          Cloud Storage bucket storage location of the snapshot (regional or multi-regional).
        item_type: Api::Type::String
      - !ruby/object:Api::Type::Array
        name: 'licenses'
        output: true
        description: |
          A list of public visible licenses that apply to this snapshot. This
          can be because the original image had licenses attached (such as a
          Windows image).  snapshotEncryptionKey nested object Encrypts the
          snapshot using a customer-supplied encryption key.
        item_type: !ruby/object:Api::Type::ResourceRef
          name: 'license'
          resource: 'License'
          imports: 'selfLink'
          description: 'A reference to a license associated with this snapshot'
      - !ruby/object:Api::Type::KeyValuePairs
        name: 'labels'
        description: Labels to apply to this Snapshot.
        update_verb: :POST
        update_url: 'projects/{{project}}/global/snapshots/{{name}}/setLabels'
      - !ruby/object:Api::Type::Fingerprint
        name: 'labelFingerprint'
        description: |
          The fingerprint used for optimistic locking of this resource. Used
          internally during updates.
        update_url: 'projects/{{project}}/global/snapshots/{{name}}/setLabels'
        update_verb: :POST
  - !ruby/object:Api::Resource
    name: 'SslCertificate'
    kind: 'compute#sslCertificate'
    base_url: projects/{{project}}/global/sslCertificates
    collection_url_key: 'items'
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation': 'https://cloud.google.com/load-balancing/docs/ssl-certificates'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/sslCertificates'
    input: true
    has_self_link: true
    description: |
      An SslCertificate resource, used for HTTPS load balancing. This resource
      provides a mechanism to upload an SSL key and certificate to
      the load balancer to serve secure connections from the user.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      - !ruby/object:Api::Type::String
        name: 'certificate'
        description: |
          The certificate in PEM format.
          The certificate chain must be no greater than 5 certs long.
          The chain must include at least one intermediate cert.
        required: true
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional description of this resource.'
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
      - !ruby/object:Api::Type::String
        name: 'privateKey'
        description: 'The write-only private key in PEM format.'
        required: true
        input: true
  - !ruby/object:Api::Resource
    # This is intentionally out of alphabetic order because it represents the same
    # GCP resource as the preceding certificate object.
    name: 'ManagedSslCertificate'
    kind: 'compute#sslCertificate'
    base_url: projects/{{project}}/global/sslCertificates
    collection_url_key: 'items'
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation': 'https://cloud.google.com/load-balancing/docs/ssl-certificates'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/sslCertificates'
    input: true
    has_self_link: true
    description: |
      An SslCertificate resource, used for HTTPS load balancing.  This resource
      represents a certificate for which the certificate secrets are created and
      managed by Google.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
        timeouts: !ruby/object:Api::Timeouts
          insert_minutes: 30
          update_minutes: 30
          # Deletes can take 20-30 minutes to complete, since they depend
          # on the provisioning process either succeeding or failing completely.
          delete_minutes: 30
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional description of this resource.'
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
      - !ruby/object:Api::Type::NestedObject
        name: 'managed'
        description: |
          Properties relevant to a managed certificate.  These will be used if the
          certificate is managed (as indicated by a value of `MANAGED` in `type`).
        properties:
          - !ruby/object:Api::Type::Array
            name: 'domains'
            description: |
              Domains for which a managed SSL certificate will be valid.  Currently,
              there can be up to 100 domains in this list.
            max_size: 100
            item_type: Api::Type::String
            required: true
      - !ruby/object:Api::Type::Enum
        name: 'type'
        description: |
          Enum field whose value is always `MANAGED` - used to signal to the API
          which type this is.
        values:
          - :MANAGED
        default_value: :MANAGED
      - !ruby/object:Api::Type::Array
        name: 'subjectAlternativeNames'
        description: |
          Domains associated with the certificate via Subject Alternative Name.
        item_type: Api::Type::String
        output: true
      - !ruby/object:Api::Type::Time
        name: 'expireTime'
        description: |
          Expire time of the certificate.
        output: true
  - !ruby/object:Api::Resource
    name: 'RegionSslCertificate'
    kind: 'compute#sslCertificate'
    base_url: projects/{{project}}/regions/{{region}}/sslCertificates
    collection_url_key: 'items'
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation': 'https://cloud.google.com/load-balancing/docs/ssl-certificates'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/regionSslCertificates'
    input: true
    has_self_link: true
    description: |
      A RegionSslCertificate resource, used for HTTPS load balancing. This resource
      provides a mechanism to upload an SSL key and certificate to
      the load balancer to serve secure connections from the user.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'name'
        required: true
        input: true
        description: |
          The region where the regional ssl certificate resides.
    properties:
      - !ruby/object:Api::Type::String
        name: 'certificate'
        description: |
          The certificate in PEM format.
          The certificate chain must be no greater than 5 certs long.
          The chain must include at least one intermediate cert.
        required: true
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional description of this resource.'
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
      - !ruby/object:Api::Type::String
        name: 'privateKey'
        description: 'The write-only private key in PEM format.'
        required: true
        input: true
  - !ruby/object:Api::Resource
    name: 'Reservation'
    base_url: projects/{{project}}/zones/{{zone}}/reservations
    update_verb: :PATCH
    update_url: projects/{{project}}/zones/{{zone}}/reservations/{{name}}
    update_mask: true
    collection_url_key: 'items'
    has_self_link: true
    description: |
      Represents a reservation resource. A reservation ensures that capacity is
      held in a specific zone even if the reserved VMs are not running.

      Reservations apply only to Compute Engine, Cloud Dataproc, and Google
      Kubernetes Engine VM usage.Reservations do not apply to `f1-micro` or
      `g1-small` machine types, preemptible VMs, sole tenant nodes, or other
      services not listed above
      like Cloud SQL and Dataflow.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Reserving zonal resources': 'https://cloud.google.com/compute/docs/instances/reserving-zonal-resources'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/reservations'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/zones/{{zone}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'zone'
        resource: 'Zone'
        imports: 'name'
        description: |
          The zone where the reservation is made.
        required: true
        input: true
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        output: true
        description: |
          Creation timestamp in RFC3339 text format.
      - !ruby/object:Api::Type::String
        name: 'description'
        input: true
        description: |
          An optional description of this resource.
      - !ruby/object:Api::Type::Integer
        name: 'id'
        output: true
        description: |
          The unique identifier for the resource.
      - !ruby/object:Api::Type::String
        name: 'name'
        required: true
        input: true
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
      - !ruby/object:Api::Type::String
        name: 'commitment'
        output: true
        description: |
          Full or partial URL to a parent commitment. This field displays for
          reservations that are tied to a commitment.
      - !ruby/object:Api::Type::Boolean
        name: 'specificReservationRequired'
        input: true
        # Not a hard API default, but this should help avoid a unset/true/false
        # trinary.
        default_value: false
        description: |
          When set to true, only VMs that target this reservation by name can
          consume this reservation. Otherwise, it can be consumed by VMs with
          affinity for any reservation. Defaults to false.
      - !ruby/object:Api::Type::String
        name: 'status'
        output: true
        description: |
          The status of the reservation.
      - !ruby/object:Api::Type::NestedObject
        name: 'shareSettings'
        description: |
          The share setting for reservations.
        properties:
          - !ruby/object:Api::Type::Enum
            name: 'shareType'
            values:
              - :LOCAL
              - :SPECIFIC_PROJECTS
            description: |
              Type of sharing for this shared-reservation
          - !ruby/object:Api::Type::Map
            name: 'projectMap'
            description: |
              A map of project number and project config. This is only valid when shareType's value is SPECIFIC_PROJECTS.
            key_name: id
            key_description: |
              The project id/number which is deleting or adding to the project list.
            value_type: !ruby/object:Api::Type::NestedObject
              name: projectConfig
              properties:
                - !ruby/object:Api::Type::String
                  name: 'projectId'
                  description: |
                    The project id/number should be the same as the key of this project config in the project map.
      - !ruby/object:Api::Type::NestedObject
        name: 'specificReservation'
        required: true
        description: |
          Reservation for instances with specific machine shapes.
        update_verb: :POST
        update_url: 'projects/{{project}}/zones/{{zone}}/reservations/{{name}}/resize'
        properties:
          - !ruby/object:Api::Type::Integer
            name: 'count'
            required: true
            description: |
             The number of resources that are allocated.
          - !ruby/object:Api::Type::Integer
            name: 'inUseCount'
            output: true
            description: |
              How many instances are in use.
          - !ruby/object:Api::Type::NestedObject
            name: 'instanceProperties'
            required: true
            input: true
            description: |
              The instance properties for the reservation.
            properties:
              - !ruby/object:Api::Type::String
                name: 'machineType'
                required: true
                input: true
                description: |
                  The name of the machine type to reserve.
              - !ruby/object:Api::Type::String
                name: 'minCpuPlatform'
                input: true
                description: |
                  The minimum CPU platform for the reservation. For example,
                  `"Intel Skylake"`. See
                  the CPU platform availability reference](https://cloud.google.com/compute/docs/instances/specify-min-cpu-platform#availablezones)
                  for information on available CPU platforms.
              - !ruby/object:Api::Type::Array
                name: 'guestAccelerators'
                description: |
                  Guest accelerator type and count.
                input: true
                item_type: !ruby/object:Api::Type::NestedObject
                  properties:
                    - !ruby/object:Api::Type::String
                      name: 'acceleratorType'
                      required: true
                      input: true
                      description: |
                        The full or partial URL of the accelerator type to
                        attach to this instance. For example:
                        `projects/my-project/zones/us-central1-c/acceleratorTypes/nvidia-tesla-p100`

                        If you are creating an instance template, specify only the accelerator name.
                    - !ruby/object:Api::Type::Integer
                      name: 'acceleratorCount'
                      required: true
                      input: true
                      description: |
                        The number of the guest accelerator cards exposed to
                        this instance.
              - !ruby/object:Api::Type::Array
                name: 'localSsds'
                input: true
                description: |
                  The amount of local ssd to reserve with each instance. This
                  reserves disks of type `local-ssd`.
                item_type: !ruby/object:Api::Type::NestedObject
                  properties:
                    - !ruby/object:Api::Type::Enum
                      name: 'interface'
                      input: true
                      default_value: :SCSI
                      values:
                        - :SCSI
                        - :NVME
                      description: |
                        The disk interface to use for attaching this disk.
                    - !ruby/object:Api::Type::Integer
                      name: 'diskSizeGb'
                      required: true
                      input: true
                      description: |
                       The size of the disk in base-2 GB.
  - !ruby/object:Api::Resource
    name: 'ServiceAttachment'
    kind: 'compute#ServiceAttachment'
    base_url: projects/{{project}}/regions/{{region}}/serviceAttachments
    has_self_link: true
    update_verb: :PATCH
    description: |
      Represents a ServiceAttachment resource.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Configuring Private Service Connect to access services': 'https://cloud.google.com/vpc/docs/configure-private-service-connect-services'
      api: 'https://cloud.google.com/compute/docs/reference/beta/serviceAttachments'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'name'
        description: |
          URL of the region where the resource resides.
        required: true
        input: true
    properties:
      - !ruby/object:Api::Type::String
        name: 'name'
        required: true
        description: |
          Name of the resource. The name must be 1-63 characters long, and
          comply with RFC1035. Specifically, the name must be 1-63 characters
          long and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?`
          which means the first character must be a lowercase letter, and all
          following characters must be a dash, lowercase letter, or digit,
          except the last character, which cannot be a dash.
        input: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource.
      - !ruby/object:Api::Type::Fingerprint
        name: 'fingerprint'
        description: |
          Fingerprint of this resource. This field is used internally during
          updates of this resource.
      - !ruby/object:Api::Type::String
        name: 'connectionPreference'
        required: true
        description: |
          The connection preference to use for this service attachment. Valid
          values include "ACCEPT_AUTOMATIC", "ACCEPT_MANUAL".
      - !ruby/object:Api::Type::Array
        name: 'connectedEndpoints'
        output: true
        description: |
          An array of the consumer forwarding rules connected to this service
          attachment.
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
          - !ruby/object:Api::Type::String
            name: 'endpoint'
            output: true
            description: |
              The URL of the consumer forwarding rule.
          - !ruby/object:Api::Type::String
            name: 'status'
            output: true
            description: |
              The status of the connection from the consumer forwarding rule to
              this service attachment.
      - !ruby/object:Api::Type::ResourceRef
        name: targetService
        required: true
        input: true
        resource: 'ForwardingRule'
        imports: 'selfLink'
        description: |
          The URL of a forwarding rule that represents the service identified by
          this service attachment.
      - !ruby/object:Api::Type::Array
        name: 'natSubnets'
        required: true
        send_empty_value: true
        description: |
          An array of subnets that is provided for NAT in this service attachment.
        item_type: !ruby/object:Api::Type::ResourceRef
          name: 'subnet'
          resource: 'Subnetwork'
          imports: 'selfLink'
          description: |
            A subnet that is provided for NAT in this service attachment.
      - !ruby/object:Api::Type::Boolean
        name: 'enableProxyProtocol'
        required: true
        input: true
        description: |
          If true, enable the proxy protocol which is for supplying client TCP/IP
          address data in TCP connections that traverse proxies on their way to
          destination servers.
      - !ruby/object:Api::Type::Array
        name: 'domainNames'
        input: true
        item_type: Api::Type::String
        description: |
          If specified, the domain name will be used during the integration between
          the PSC connected endpoints and the Cloud DNS. For example, this is a
          valid domain name: "p.mycompany.com.". Current max number of domain names
          supported is 1.
      - !ruby/object:Api::Type::Array
        name: 'consumerRejectLists'
        item_type: Api::Type::String
        send_empty_value: true
        description: |
          An array of projects that are not allowed to connect to this service
          attachment.
      - !ruby/object:Api::Type::Array
        name: 'consumerAcceptLists'
        description: |
          An array of projects that are allowed to connect to this service
          attachment.
        send_empty_value: true
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
          - !ruby/object:Api::Type::String
            name: 'projectIdOrNum'
            required: true
            description: |
              A project that is allowed to connect to this service attachment.
          - !ruby/object:Api::Type::Integer
            name: 'connectionLimit'
            required: true
            description: |
              The number of consumer forwarding rules the consumer project can
              create.
  - !ruby/object:Api::Resource
    name: 'SslPolicy'
    kind: 'compute#sslPolicy'
    base_url: projects/{{project}}/global/sslPolicies
    collection_url_key: 'items'
    update_verb: :PATCH
    has_self_link: true
    description: |
      Represents a SSL policy. SSL policies give you the ability to control the
      features of SSL that your SSL proxy or HTTPS load balancer negotiates.
    references: !ruby/object:Api::Resource::ReferenceLinks
          guides:
            'Using SSL Policies': 'https://cloud.google.com/compute/docs/load-balancing/ssl-policies'
          api: 'https://cloud.google.com/compute/docs/reference/rest/v1/sslPolicies'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional description of this resource.'
        input: true
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        input: true
        required: true
        # TODO: profile, minTlsVersion, enabledFeatures, customFeatures, fingerprint, warnings, kind
      - !ruby/object:Api::Type::Enum
        name: 'profile'
        description: |
          Profile specifies the set of SSL features that can be used by the
          load balancer when negotiating SSL with clients. If using `CUSTOM`,
          the set of SSL features to enable must be specified in the
          `customFeatures` field.
        values:
          - :COMPATIBLE
          - :MODERN
          - :RESTRICTED
          - :CUSTOM
      - !ruby/object:Api::Type::Enum
        name: 'minTlsVersion'
        description: |
          The minimum version of SSL protocol that can be used by the clients
          to establish a connection with the load balancer.
        values:
          - :TLS_1_0
          - :TLS_1_1
          - :TLS_1_2
      - !ruby/object:Api::Type::Array
        name: 'enabledFeatures'
        description: 'The list of features enabled in the SSL policy.'
        output: true
        item_type: Api::Type::String
      - !ruby/object:Api::Type::Array
        name: 'customFeatures'
        description: |
          A list of features enabled when the selected profile is CUSTOM. The
          method returns the set of features that can be specified in this
          list. This field must be empty if the profile is not CUSTOM.
        item_type: Api::Type::String
      - !ruby/object:Api::Type::String
        name: 'fingerprint'
        description: |
          Fingerprint of this resource. A hash of the contents stored in this
          object. This field is used in optimistic locking.
        output: true
      - !ruby/object:Api::Type::Array
        name: 'warnings'
        description: |
          If potential misconfigurations are detected for this SSL policy, this
          field will be populated with warning messages.
        output: true
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::String
              name: 'code'
              description: 'A warning code, if applicable.'
              output: true
            - !ruby/object:Api::Type::String
              name: 'message'
              description: 'A human-readable description of the warning code.'
              output: true
  - !ruby/object:Api::Resource
    name: 'RegionSslPolicy'
    kind: 'compute#sslPolicy'
    base_url: projects/{{project}}/regions/{{region}}/sslPolicies
    collection_url_key: 'items'
    update_verb: :PATCH
    has_self_link: true
    min_version: beta
    description: |
      Represents a Regional SSL policy. SSL policies give you the ability to control the
      features of SSL that your SSL proxy or HTTPS load balancer negotiates.
    references: !ruby/object:Api::Resource::ReferenceLinks
          guides:
            'Using SSL Policies': 'https://cloud.google.com/compute/docs/load-balancing/ssl-policies'
          api: 'https://cloud.google.com/compute/docs/reference/rest/beta/regionSslPolicies'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'name'
        required: true
        input: true
        description: |
          The region where the regional SSL policy resides.
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional description of this resource.'
        input: true
      - !ruby/object:Api::Type::String
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        input: true
        required: true
      - !ruby/object:Api::Type::Enum
        name: 'profile'
        description: |
          Profile specifies the set of SSL features that can be used by the
          load balancer when negotiating SSL with clients. If using `CUSTOM`,
          the set of SSL features to enable must be specified in the
          `customFeatures` field.
        values:
          - :COMPATIBLE
          - :MODERN
          - :RESTRICTED
          - :CUSTOM
      - !ruby/object:Api::Type::Enum
        name: 'minTlsVersion'
        description: |
          The minimum version of SSL protocol that can be used by the clients
          to establish a connection with the load balancer.
        values:
          - :TLS_1_0
          - :TLS_1_1
          - :TLS_1_2
      - !ruby/object:Api::Type::Array
        name: 'enabledFeatures'
        description: 'The list of features enabled in the SSL policy.'
        output: true
        item_type: Api::Type::String
      - !ruby/object:Api::Type::Array
        name: 'customFeatures'
        description: |
          A list of features enabled when the selected profile is CUSTOM. The
          method returns the set of features that can be specified in this
          list. This field must be empty if the profile is not CUSTOM.
        item_type: Api::Type::String
      - !ruby/object:Api::Type::Fingerprint
        name: 'fingerprint'
        description: |
          Fingerprint of this resource. A hash of the contents stored in this
          object. This field is used in optimistic locking.
        output: true
      - !ruby/object:Api::Type::Array
        name: 'warnings'
        description: |
          If potential misconfigurations are detected for this SSL policy, this
          field will be populated with warning messages.
        output: true
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::String
              name: 'code'
              description: 'A warning code, if applicable.'
              output: true
            - !ruby/object:Api::Type::String
              name: 'message'
              description: 'A human-readable description of the warning code.'
              output: true
  - !ruby/object:Api::Resource
    name: 'Subnetwork'
    kind: 'compute#subnetwork'
    base_url: projects/{{project}}/regions/{{region}}/subnetworks
    collection_url_key: 'items'
    input: true
    has_self_link: true
    description: |
      A VPC network is a virtual version of the traditional physical networks
      that exist within and between physical data centers. A VPC network
      provides connectivity for your Compute Engine virtual machine (VM)
      instances, Container Engine containers, App Engine Flex services, and
      other network-related resources.

      Each GCP project contains one or more VPC networks. Each VPC network is a
      global entity spanning all GCP regions. This global VPC network allows VM
      instances and other resources to communicate with each other via internal,
      private IP addresses.

      Each VPC network is subdivided into subnets, and each subnet is contained
      within a single region. You can have more than one subnet in a region for
      a given VPC network. Each subnet has a contiguous private RFC1918 IP
      space. You create instances, containers, and the like in these subnets.
      When you create an instance, you must create it in a subnet, and the
      instance draws its internal IP address from that subnet.

      Virtual machine (VM) instances in a VPC network can communicate with
      instances in all other subnets of the same VPC network, regardless of
      region, using their RFC1918 private IP addresses. You can isolate portions
      of the network, even entire subnets, using firewall rules.
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource. Provide this property when
          you create the resource. This field can be set only at resource
          creation time.
      - !ruby/object:Api::Type::String
        name: 'gatewayAddress'
        description: |
          The gateway address for default routes to reach destination addresses
          outside this subnetwork.
        output: true
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'ipCidrRange'
        description: |
          The range of internal addresses that are owned by this subnetwork.
          Provide this property when you create the subnetwork. For example,
          10.0.0.0/8 or 192.168.0.0/16. Ranges must be unique and
          non-overlapping within a network. Only IPv4 is supported.
        required: true
        update_verb: :POST
        update_url: 'projects/{{project}}/regions/{{region}}/subnetworks/{{name}}/expandIpCidrRange'
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          The name of the resource, provided by the client when initially
          creating the resource. The name must be 1-63 characters long, and
          comply with RFC1035. Specifically, the name must be 1-63 characters
          long and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which
          means the first character must be a lowercase letter, and all
          following characters must be a dash, lowercase letter, or digit,
          except the last character, which cannot be a dash.
        required: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'network'
        resource: 'Network'
        imports: 'selfLink'
        description: |
          The network this subnet belongs to.
          Only networks that are in the distributed mode can have subnetworks.
        input: true
        required: true
      - !ruby/object:Api::Type::String
        name: 'purpose'
        input: true
        description: |
          The purpose of the resource. A subnetwork with purpose set to
          INTERNAL_HTTPS_LOAD_BALANCER is a user-created subnetwork that is
          reserved for Internal HTTP(S) Load Balancing.

          If set to INTERNAL_HTTPS_LOAD_BALANCER you must also set the `role` field.
      - !ruby/object:Api::Type::Enum
        name: 'role'
        update_verb: :PATCH
        update_url: projects/{{project}}/regions/{{region}}/subnetworks/{{name}}
        update_id: 'role'
        fingerprint_name: 'fingerprint'
        values:
          - :ACTIVE
          - :BACKUP
        description: |
          The role of subnetwork. Currently, this field is only used when
          purpose = INTERNAL_HTTPS_LOAD_BALANCER. The value can be set to ACTIVE
          or BACKUP. An ACTIVE subnetwork is one that is currently being used
          for Internal HTTP(S) Load Balancing. A BACKUP subnetwork is one that
          is ready to be promoted to ACTIVE or is currently draining.
      - !ruby/object:Api::Type::Array
        name: 'secondaryIpRanges'
        description: |
          An array of configurations for secondary IP ranges for VM instances
          contained in this subnetwork. The primary IP of such VM must belong
          to the primary ipCidrRange of the subnetwork. The alias IPs may belong
          to either primary or secondary ranges.
        update_verb: :PATCH
        update_url:  projects/{{project}}/regions/{{region}}/subnetworks/{{name}}
        update_id: 'secondaryIpRanges'
        fingerprint_name: 'fingerprint'
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::String
              name: 'rangeName'
              required: true
              description: |
                The name associated with this subnetwork secondary range, used
                when adding an alias IP range to a VM instance. The name must
                be 1-63 characters long, and comply with RFC1035. The name
                must be unique within the subnetwork.
            - !ruby/object:Api::Type::String
              name: 'ipCidrRange'
              required: true
              description: |
                The range of IP addresses belonging to this subnetwork secondary
                range. Provide this property when you create the subnetwork.
                Ranges must be unique and non-overlapping with all primary and
                secondary IP ranges within a network. Only IPv4 is supported.
      - !ruby/object:Api::Type::Boolean
        name: 'privateIpGoogleAccess'
        description: |
          When enabled, VMs in this subnetwork without external IP addresses can
          access Google APIs and services by using Private Google Access.
        update_verb: :POST
        update_url: 'projects/{{project}}/regions/{{region}}/subnetworks/{{name}}/setPrivateIpGoogleAccess'
      - !ruby/object:Api::Type::String
        name: 'privateIpv6GoogleAccess'
        update_verb: :PATCH
        update_url:  projects/{{project}}/regions/{{region}}/subnetworks/{{name}}
        description: The private IPv6 google access type for the VMs in this subnet.
        fingerprint_name: 'fingerprint'
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'name'
        description: |
          The GCP region for this subnetwork.
        required: true
        input: true
      - !ruby/object:Api::Type::NestedObject
        name: 'logConfig'
        update_verb: :PATCH
        update_url:  projects/{{project}}/regions/{{region}}/subnetworks/{{name}}
        fingerprint_name: 'fingerprint'
        update_id: 'logConfig'
        description: |
          Denotes the logging options for the subnetwork flow logs. If logging is enabled
          logs will be exported to Stackdriver. This field cannot be set if the `purpose` of this
          subnetwork is `INTERNAL_HTTPS_LOAD_BALANCER`
        properties:
          - !ruby/object:Api::Type::Boolean
            name: 'enable'
            description: If logging is enabled for this subnetwork
          - !ruby/object:Api::Type::Enum
            name: 'aggregationInterval'
            at_least_one_of:
              - log_config.0.aggregation_interval
              - log_config.0.flow_sampling
              - log_config.0.metadata
              - log_config.0.filterExpr
            description: |
              Can only be specified if VPC flow logging for this subnetwork is enabled.
              Toggles the aggregation interval for collecting flow logs. Increasing the
              interval time will reduce the amount of generated flow logs for long
              lasting connections. Default is an interval of 5 seconds per connection.
            values:
              - :INTERVAL_5_SEC
              - :INTERVAL_30_SEC
              - :INTERVAL_1_MIN
              - :INTERVAL_5_MIN
              - :INTERVAL_10_MIN
              - :INTERVAL_15_MIN
            default_value: :INTERVAL_5_SEC
          - !ruby/object:Api::Type::Double
            name: 'flowSampling'
            at_least_one_of:
              - log_config.0.aggregation_interval
              - log_config.0.flow_sampling
              - log_config.0.metadata
              - log_config.0.filterExpr
            description: |
              Can only be specified if VPC flow logging for this subnetwork is enabled.
              The value of the field must be in [0, 1]. Set the sampling rate of VPC
              flow logs within the subnetwork where 1.0 means all collected logs are
              reported and 0.0 means no logs are reported. Default is 0.5 which means
              half of all collected logs are reported.
            default_value: 0.5
          - !ruby/object:Api::Type::Enum
            name: 'metadata'
            at_least_one_of:
              - log_config.0.aggregation_interval
              - log_config.0.flow_sampling
              - log_config.0.metadata
              - log_config.0.filterExpr
            description: |
              Can only be specified if VPC flow logging for this subnetwork is enabled.
              Configures whether metadata fields should be added to the reported VPC
              flow logs.
            values:
              - :EXCLUDE_ALL_METADATA
              - :INCLUDE_ALL_METADATA
              - :CUSTOM_METADATA
            default_value: :INCLUDE_ALL_METADATA
          - !ruby/object:Api::Type::Array
            name: 'metadataFields'
            description: |
              List of metadata fields that should be added to reported logs.
              Can only be specified if VPC flow logs for this subnetwork is enabled and "metadata" is set to CUSTOM_METADATA.
            item_type: Api::Type::String
          - !ruby/object:Api::Type::String
            name: 'filterExpr'
            at_least_one_of:
              - log_config.0.aggregation_interval
              - log_config.0.flow_sampling
              - log_config.0.metadata
              - log_config.0.filterExpr
            description: |
              Export filter used to define which VPC flow logs should be logged, as as CEL expression. See
              https://cloud.google.com/vpc/docs/flow-logs#filtering for details on how to format this field.
              The default value is 'true', which evaluates to include everything.
            default_value: "true"
      - !ruby/object:Api::Type::Enum
        name: 'stackType'
        update_verb: :PATCH
        update_url: projects/{{project}}/regions/{{region}}/subnetworks/{{name}}
        fingerprint_name: 'fingerprint'
        values:
          - :IPV4_ONLY
          - :IPV4_IPV6
        description: |
          The stack type for this subnet to identify whether the IPv6 feature is enabled or not.
          If not specified IPV4_ONLY will be used.
      - !ruby/object:Api::Type::Enum
        name: 'ipv6AccessType'
        values:
          - :EXTERNAL
          - :INTERNAL
        description: |
          The access type of IPv6 address this subnet holds. It's immutable and can only be specified during creation
          or the first time the subnet is updated into IPV4_IPV6 dual stack. If the ipv6_type is EXTERNAL then this subnet
          cannot enable direct path.
      - !ruby/object:Api::Type::String
        name: 'ipv6CidrRange'
        output: true
        description: |
          The range of internal IPv6 addresses that are owned by this subnetwork.
      - !ruby/object:Api::Type::String
        name: 'externalIpv6Prefix'
        output: true
        description: |
          The range of external IPv6 addresses that are owned by this subnetwork.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Private Google Access':
          'https://cloud.google.com/vpc/docs/configure-private-google-access'
        'Cloud Networking':
          'https://cloud.google.com/vpc/docs/using-vpc'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/subnetworks'
  - !ruby/object:Api::Resource
    name: 'TargetHttpProxy'
    kind: 'compute#targetHttpProxy'
    base_url: projects/{{project}}/global/targetHttpProxies
    collection_url_key: 'items'
    has_self_link: true
    input: true
    description: |
      Represents a TargetHttpProxy resource, which is used by one or more global
      forwarding rule to route incoming HTTP requests to a URL map.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation':
          'https://cloud.google.com/compute/docs/load-balancing/http/target-proxies'
      api: 'https://cloud.google.com/compute/docs/reference/v1/targetHttpProxies'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional description of this resource.'
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        required: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'urlMap'
        resource: 'UrlMap'
        imports: 'selfLink'
        description: |
          A reference to the UrlMap resource that defines the mapping from URL
          to the BackendService.
        required: true
        update_verb: :POST
        update_url: 'projects/{{project}}/targetHttpProxies/{{name}}/setUrlMap'
      - !ruby/object:Api::Type::Boolean
        name: 'proxyBind'
        description: |
          This field only applies when the forwarding rule that references
          this target proxy has a loadBalancingScheme set to INTERNAL_SELF_MANAGED.
  - !ruby/object:Api::Resource
    name: 'TargetHttpsProxy'
    kind: 'compute#targetHttpsProxy'
    base_url: projects/{{project}}/global/targetHttpsProxies
    collection_url_key: 'items'
    has_self_link: true
    input: true
    description: |
      Represents a TargetHttpsProxy resource, which is used by one or more
      global forwarding rule to route incoming HTTPS requests to a URL map.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation': 'https://cloud.google.com/compute/docs/load-balancing/http/target-proxies'
      api: 'https://cloud.google.com/compute/docs/reference/v1/targetHttpsProxies'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional description of this resource.'
        input: true
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        input: true
        required: true
      - !ruby/object:Api::Type::Enum
        name: 'quicOverride'
        description: |
          Specifies the QUIC override policy for this resource. This determines
          whether the load balancer will attempt to negotiate QUIC with clients
          or not. Can specify one of NONE, ENABLE, or DISABLE. If NONE is
          specified, uses the QUIC policy with no user overrides, which is
          equivalent to DISABLE.
        values:
          - :NONE
          - :ENABLE
          - :DISABLE
        update_verb: :POST
        update_url:
          'projects/{{project}}/global/targetHttpsProxies/{{name}}/setQuicOverride'
      - !ruby/object:Api::Type::Array
        name: 'sslCertificates'
        description: |
          A list of SslCertificate resources that are used to authenticate
          connections between users and the load balancer. At least one SSL
          certificate must be specified.
        exactly_one_of:
          - sslCertificates
          - certificateMap
        update_verb: :POST
        update_url:
          'projects/{{project}}/targetHttpsProxies/{{name}}/setSslCertificates'
        item_type: !ruby/object:Api::Type::ResourceRef
          name: 'sslCertificate'
          resource: 'SslCertificate'
          imports: 'selfLink'
          description: 'The SSL certificates used by this TargetHttpsProxy'
      - !ruby/object:Api::Type::String
        name: 'certificateMap'
        description: |
          A reference to the CertificateMap resource uri that identifies a certificate map 
          associated with the given target proxy. This field can only be set for global target proxies.
          Accepted format is `//certificatemanager.googleapis.com/projects/{project}/locations/{location}/certificateMaps/{resourceName}`.
        exactly_one_of:
          - sslCertificates
          - certificateMap
        update_verb: :POST
        update_url:
          'projects/{{project}}/global/targetHttpsProxies/{{name}}/setCertificateMap'
      - !ruby/object:Api::Type::ResourceRef
        name: 'sslPolicy'
        resource: 'SslPolicy'
        imports: 'selfLink'
        description: |
          A reference to the SslPolicy resource that will be associated with
          the TargetHttpsProxy resource. If not set, the TargetHttpsProxy
          resource will not have any SSL policy configured.
        update_verb: :POST
        update_url:
          'projects/{{project}}/global/targetHttpsProxies/{{name}}/setSslPolicy'
      - !ruby/object:Api::Type::ResourceRef
        name: 'urlMap'
        resource: 'UrlMap'
        imports: 'selfLink'
        description: |
          A reference to the UrlMap resource that defines the mapping from URL
          to the BackendService.
        required: true
        update_verb: :POST
        update_url: 'projects/{{project}}/targetHttpsProxies/{{name}}/setUrlMap'
      - !ruby/object:Api::Type::Boolean
        name: 'proxyBind'
        description: |
          This field only applies when the forwarding rule that references
          this target proxy has a loadBalancingScheme set to INTERNAL_SELF_MANAGED.
  - !ruby/object:Api::Resource
    name: 'RegionTargetHttpProxy'
    base_url: projects/{{project}}/regions/{{region}}/targetHttpProxies
    has_self_link: true
    input: true
    description: |
      Represents a RegionTargetHttpProxy resource, which is used by one or more
      forwarding rules to route incoming HTTP requests to a URL map.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation':
          'https://cloud.google.com/compute/docs/load-balancing/http/target-proxies'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/regionTargetHttpProxies'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'name'
        required: true
        input: true
        description: |
          The region where the regional proxy resides.
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional description of this resource.'
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        required: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'urlMap'
        resource: 'RegionUrlMap'
        imports: 'selfLink'
        description: |
          A reference to the RegionUrlMap resource that defines the mapping from URL
          to the BackendService.
        required: true
        update_verb: :POST
        update_url: 'projects/{{project}}/regions/{{region}}/targetHttpProxies/{{name}}/setUrlMap'
  - !ruby/object:Api::Resource
    name: 'RegionTargetHttpsProxy'
    base_url: projects/{{project}}/regions/{{region}}/targetHttpsProxies
    has_self_link: true
    input: true
    description: |
      Represents a RegionTargetHttpsProxy resource, which is used by one or more
      forwarding rules to route incoming HTTPS requests to a URL map.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation': 'https://cloud.google.com/compute/docs/load-balancing/http/target-proxies'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/regionTargetHttpsProxies'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'name'
        input: true
        required: true
        description: |
          The region where the regional proxy resides.
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional description of this resource.'
        input: true
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        input: true
        required: true
     # This field is present in the schema but as of 2019 Sep 23 attempting to set it fails with
     # a 400 "QUIC override is supported only with global TargetHttpsProxy". jamessynge@ said in an
     # email sent on 2019 Sep 20 that support for this "is probably far in the future."
     #- !ruby/object:Api::Type::Enum
     #  name: 'quicOverride'
     #  description: |
     #    Specifies the QUIC override policy for this resource. This determines
     #    whether the load balancer will attempt to negotiate QUIC with clients
     #    or not. Can specify one of NONE, ENABLE, or DISABLE. If NONE is
     #    specified, uses the QUIC policy with no user overrides, which is
     #    equivalent to DISABLE. Not specifying this field is equivalent to
     #    specifying NONE.
     #  values:
     #    - :NONE
     #    - :ENABLE
     #    - :DISABLE
     #  update_verb: :POST
     #  update_url:
     #    'projects/{{project}}/regions/{{region}}/targetHttpsProxies/{{name}}/setQuicOverride'
      - !ruby/object:Api::Type::Array
        name: 'sslCertificates'
        description: |
          A list of RegionSslCertificate resources that are used to authenticate
          connections between users and the load balancer. Currently, exactly
          one SSL certificate must be specified.
        required: true
        update_verb: :POST
        update_url:
          'projects/{{project}}/regions/{{region}}/targetHttpsProxies/{{name}}/setSslCertificates'
        item_type: !ruby/object:Api::Type::ResourceRef
          name: 'sslCertificate'
          resource: 'RegionSslCertificate'
          imports: 'selfLink'
          description: 'The SSL certificates used by this TargetHttpsProxy'
      - !ruby/object:Api::Type::ResourceRef
        name: 'sslPolicy'
        resource: 'RegionSslPolicy'
        imports: 'selfLink'
        min_version: beta 
        description: |
          A reference to the Region SslPolicy resource that will be associated with
          the TargetHttpsProxy resource. If not set, the TargetHttpsProxy
          resource will not have any SSL policy configured.
     # 2022 May 28 - setSslPolicy method not yet listed
     # https://cloud.google.com/compute/docs/reference/rest/beta/regionTargetHttpsProxies
     #  update_verb: :POST
     #  update_url:
     #    'projects/{{project}}/regions/{{region}}/targetHttpsProxies/{{name}}/setSslPolicy'
      - !ruby/object:Api::Type::ResourceRef
        name: 'urlMap'
        resource: 'RegionUrlMap'
        imports: 'selfLink'
        description: |
          A reference to the RegionUrlMap resource that defines the mapping from URL
          to the RegionBackendService.
        required: true
        update_verb: :POST
        update_url: 'projects/{{project}}/regions/{{region}}/targetHttpsProxies/{{name}}/setUrlMap'
  - !ruby/object:Api::Resource
    name: 'RegionTargetTcpProxy'
    base_url: projects/{{project}}/regions/{{region}}/targetTcpProxies
    has_self_link: true
    input: true
    description: |
      Represents a RegionTargetTcpProxy resource, which is used by one or more
      forwarding rules to route incoming TCP requests to a regional TCP proxy load
      balancer.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation':
          'https://cloud.google.com/load-balancing/docs/tcp/internal-proxy'
      api: 'https://cloud.google.com/compute/docs/reference/rest/beta/targetTcpProxies'
    min_version: beta
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'name'
        required: true
        input: true
        description: |
          The region where the regional proxy resides.
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional description of this resource.'
        input: true
      - !ruby/object:Api::Type::Integer
        name: 'proxyId'
        api_name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        input: true
        required: true
      - !ruby/object:Api::Type::Enum
        name: 'proxyHeader'
        description: |
          Specifies the type of proxy header to append before sending data to
          the backend.
        values:
          - :NONE
          - :PROXY_V1
        default_value: :NONE
      - !ruby/object:Api::Type::ResourceRef
        name: 'service'
        resource: 'RegionBackendService'
        imports: 'selfLink'
        description: |
          A reference to the BackendService resource.
        required: true
      - !ruby/object:Api::Type::Boolean
        name: 'proxyBind'
        description: |
          This field only applies when the forwarding rule that references
          this target proxy has a loadBalancingScheme set to INTERNAL_SELF_MANAGED.
  - !ruby/object:Api::Resource
    name: 'TargetInstance'
    kind: 'compute#targetInstance'
    base_url: projects/{{project}}/zones/{{zone}}/targetInstances
    collection_url_key: 'items'
    has_self_link: true
    input: true
    description: |
      Represents a TargetInstance resource which defines an endpoint instance
      that terminates traffic of certain protocols. In particular, they are used
      in Protocol Forwarding, where forwarding rules can send packets to a
      non-NAT'ed target instance. Each target instance contains a single
      virtual machine instance that receives and handles traffic from the
      corresponding forwarding rules.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Using Protocol Forwarding': 'https://cloud.google.com/compute/docs/protocol-forwarding'
      api: 'https://cloud.google.com/compute/docs/reference/v1/targetInstances'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/zones/{{zone}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'zone'
        resource: 'Zone'
        imports: 'name'
        description: |
          URL of the zone where the target instance resides.
        required: true
        input: true
    properties:
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        required: true
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'network'
        description: 'The URL of the network this target instance uses to forward traffic. If not specified, the traffic will be forwarded to the network that the default network interface belongs to.'
        input: true
        min_version: beta
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional description of this resource.'
      - !ruby/object:Api::Type::ResourceRef
        name: 'instance'
        resource: 'Instance'
        imports: 'selfLink'
        description: |
          A URL to the virtual machine instance that handles traffic for this
          target instance. Accepts self-links or the partial paths with format
          `projects/project/zones/zone/instances/instance' or
          `zones/zone/instances/instance`
        required: true
        input: true
      - !ruby/object:Api::Type::Enum
        name: 'natPolicy'
        description: |
          NAT option controlling how IPs are NAT'ed to the instance.
          Currently only NO_NAT (default value) is supported.
        input: true
        default_value: :NO_NAT
        values:
          - :NO_NAT
  - !ruby/object:Api::Resource
    name: 'TargetPool'
    kind: 'compute#targetPool'
    base_url: projects/{{project}}/regions/{{region}}/targetPools
    collection_url_key: 'items'
    description: 'Represents a TargetPool resource, used for Load Balancing.'
    has_self_link: true
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Official Documentation':
          'https://cloud.google.com/compute/docs/load-balancing/network/target-pools'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/targetPools'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'name'
        description: 'The region where the target pool resides.'
        required: true
    properties:
      - !ruby/object:Api::Type::ResourceRef
        name: 'backupPool'
        resource: 'TargetPool'
        imports: 'selfLink'
        input: true
        description: |
          This field is applicable only when the containing target pool is
          serving a forwarding rule as the primary pool, and its failoverRatio
          field is properly set to a value between [0, 1].

          backupPool and failoverRatio together define the fallback behavior of
          the primary target pool: if the ratio of the healthy instances in the
          primary pool is at or below failoverRatio, traffic arriving at the
          load-balanced IP will be directed to the backup pool.

          In case where failoverRatio and backupPool are not set, or all the
          instances in the backup pool are unhealthy, the traffic will be
          directed back to the primary pool in the "force" mode, where traffic
          will be spread to the healthy instances with the best effort, or to
          all instances when no instance is healthy.
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional description of this resource.'
      - !ruby/object:Api::Type::Double
        name: 'failoverRatio'
        description: |
          This field is applicable only when the containing target pool is
          serving a forwarding rule as the primary pool (i.e., not as a backup
          pool to some other target pool). The value of the field must be in
          [0, 1].

          If set, backupPool must also be set. They together define the fallback
          behavior of the primary target pool: if the ratio of the healthy
          instances in the primary pool is at or below this number, traffic
          arriving at the load-balanced IP will be directed to the backup pool.

          In case where failoverRatio is not set or all the instances in the
          backup pool are unhealthy, the traffic will be directed back to the
          primary pool in the "force" mode, where traffic will be spread to the
          healthy instances with the best effort, or to all instances when no
          instance is healthy.
      - !ruby/object:Api::Type::ResourceRef
        name: 'healthCheck'
        resource: 'HttpHealthCheck'
        imports: 'selfLink'
        description: |
          A reference to a HttpHealthCheck resource.

          A member instance in this pool is considered healthy if and only if
          the health checks pass. If not specified it means all member instances
          will be considered healthy at all times.
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::Array
        name: 'instances'
        description: |
          A list of virtual machine instances serving this pool.

          They must live in zones contained in the same region as this pool.
        item_type: !ruby/object:Api::Type::ResourceRef
          name: 'instance'
          description: 'The instance being served by this pool.'
          resource: 'Instance'
          imports: 'selfLink'
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        input: true
        required: true
      - !ruby/object:Api::Type::Enum
        name: 'sessionAffinity'
        description: |
          Session affinity option. Must be one of these values:

          * NONE: Connections from the same client IP may go to any instance in
            the pool.
          * CLIENT_IP: Connections from the same client IP will go to the same
            instance in the pool while that instance remains healthy.
          * CLIENT_IP_PROTO: Connections from the same client IP with the same
            IP protocol will go to the same instance in the pool while that
            instance remains healthy.
        input: true
        values:
          - :NONE
          - :CLIENT_IP
          - :CLIENT_IP_PROTO
  - !ruby/object:Api::Resource
    name: 'TargetSslProxy'
    kind: 'compute#targetSslProxy'
    base_url: projects/{{project}}/global/targetSslProxies
    collection_url_key: 'items'
    input: true
    has_self_link: true
    description: |
      Represents a TargetSslProxy resource, which is used by one or more
      global forwarding rule to route incoming SSL requests to a backend
      service.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Setting Up SSL proxy for Google Cloud Load Balancing': 'https://cloud.google.com/compute/docs/load-balancing/tcp-ssl/'
      api: 'https://cloud.google.com/compute/docs/reference/v1/targetSslProxies'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional description of this resource.'
        input: true
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        input: true
        required: true
      - !ruby/object:Api::Type::Enum
        name: 'proxyHeader'
        description: |
          Specifies the type of proxy header to append before sending data to
          the backend.
        values:
          - :NONE
          - :PROXY_V1
        update_verb: :POST
        update_url: 'projects/{{project}}/global/targetSslProxies/{{name}}/setProxyHeader'
      - !ruby/object:Api::Type::ResourceRef
        name: 'service'
        resource: 'BackendService'
        imports: 'selfLink'
        description: |
          A reference to the BackendService resource.
        required: true
        update_verb: :POST
        update_url: 'projects/{{project}}/global/targetSslProxies/{{name}}/setBackendService'
      - !ruby/object:Api::Type::Array
        name: 'sslCertificates'
        description: |
          A list of SslCertificate resources that are used to authenticate
          connections between users and the load balancer. At least one
          SSL certificate must be specified.
        exactly_one_of:
          - sslCertificates
          - certificateMap
        update_verb: :POST
        update_url: 'projects/{{project}}/global/targetSslProxies/{{name}}/setSslCertificates'
        item_type: !ruby/object:Api::Type::ResourceRef
          name: 'sslCertificate'
          resource: 'SslCertificate'
          imports: 'selfLink'
          description: 'The SSL certificates used by this TargetSslProxy'
      - !ruby/object:Api::Type::String
        name: 'certificateMap'
        description: |
          A reference to the CertificateMap resource uri that identifies a certificate map
          associated with the given target proxy. This field can only be set for global target proxies.
          Accepted format is `//certificatemanager.googleapis.com/projects/{project}/locations/{location}/certificateMaps/{resourceName}`.
        exactly_one_of:
          - sslCertificates
          - certificateMap
        update_verb: :POST
        update_url:
          'projects/{{project}}/global/targetSslProxies/{{name}}/setCertificateMap'
      - !ruby/object:Api::Type::ResourceRef
        name: 'sslPolicy'
        resource: 'SslPolicy'
        imports: 'selfLink'
        description: |
          A reference to the SslPolicy resource that will be associated with
          the TargetSslProxy resource. If not set, the TargetSslProxy
          resource will not have any SSL policy configured.
        update_verb: :POST
        update_url:
          'projects/{{project}}/global/targetSslProxies/{{name}}/setSslPolicy'
  - !ruby/object:Api::Resource
    name: 'TargetTcpProxy'
    kind: 'compute#targetTcpProxy'
    base_url: projects/{{project}}/global/targetTcpProxies
    collection_url_key: 'items'
    input: true
    has_self_link: true
    description: |
      Represents a TargetTcpProxy resource, which is used by one or more
      global forwarding rule to route incoming TCP requests to a Backend
      service.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Setting Up TCP proxy for Google Cloud Load Balancing':
          'https://cloud.google.com/compute/docs/load-balancing/tcp-ssl/tcp-proxy'
      api: 'https://cloud.google.com/compute/docs/reference/v1/targetTcpProxies'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional description of this resource.'
        input: true
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035. Specifically, the name must be 1-63 characters long and match
          the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means the
          first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        input: true
        required: true
      - !ruby/object:Api::Type::Enum
        name: 'proxyHeader'
        description: |
          Specifies the type of proxy header to append before sending data to
          the backend.
        values:
          - :NONE
          - :PROXY_V1
        update_verb: :POST
        update_url: 'projects/{{project}}/global/targetTcpProxies/{{name}}/setProxyHeader'
      - !ruby/object:Api::Type::ResourceRef
        name: 'service'
        resource: 'BackendService'
        imports: 'selfLink'
        description: |
          A reference to the BackendService resource.
        required: true
        update_verb: :POST
        update_url: 'projects/{{project}}/global/targetTcpProxies/{{name}}/setBackendService'
      - !ruby/object:Api::Type::Boolean
        name: 'proxyBind'
        description: |
          This field only applies when the forwarding rule that references
          this target proxy has a loadBalancingScheme set to INTERNAL_SELF_MANAGED.
  - !ruby/object:Api::Resource
    name: 'TargetVpnGateway'
    kind: 'compute#targetVpnGateway'
    base_url: projects/{{project}}/regions/{{region}}/targetVpnGateways
    collection_url_key: 'items'
    input: true
    has_self_link: true
    description: |
      Represents a VPN gateway running in GCP. This virtual device is managed
      by Google, but used only by you.
    references: !ruby/object:Api::Resource::ReferenceLinks
      api: https://cloud.google.com/compute/docs/reference/rest/v1/targetVpnGateways
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'name'
        description: |
          The region this gateway should sit in.
        required: true
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional description of this resource.'
        input: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035.  Specifically, the name must be 1-63 characters long and
          match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means
          the first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        required: true
        input: true
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'network'
        resource: 'Network'
        imports: 'selfLink'
        description: |
          The network this VPN gateway is accepting traffic for.
        required: true
        input: true
      - !ruby/object:Api::Type::Array
        name: 'tunnels'
        description: |
          A list of references to VpnTunnel resources associated with this VPN gateway.
        item_type: !ruby/object:Api::Type::ResourceRef
          name: 'tunnel'
          resource: 'VpnTunnel'
          imports: 'selfLink'
          description: |
            A VpnTunnel resource associated with this VPN gateway.
        output: true
      - !ruby/object:Api::Type::Array
        name: 'forwardingRules'
        description: |
          A list of references to the ForwardingRule resources associated with this VPN
          gateway.
        item_type: !ruby/object:Api::Type::ResourceRef
          name: 'forwardingRule'
          resource: 'ForwardingRule'
          imports: 'selfLink'
          description: |
            A ForwardingRule resource associated with this VPN gateway.
        output: true
        # status is not useful for state convergence
  - !ruby/object:Api::Resource
    name: 'VpnGateway'
    kind: 'compute#vpnGateway'
    base_url: projects/{{project}}/regions/{{region}}/vpnGateways
    collection_url_key: 'items'
    input: true
    has_self_link: true
    description: |
      Represents a VPN gateway running in GCP. This virtual device is managed
      by Google, but used only by you. This type of VPN Gateway allows for the creation
      of VPN solutions with higher availability than classic Target VPN Gateways.
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Choosing a VPN': https://cloud.google.com/vpn/docs/how-to/choosing-a-vpn
        'Cloud VPN Overview': 'https://cloud.google.com/vpn/docs/concepts/overview'
      api: https://cloud.google.com/compute/docs/reference/rest/v1/vpnGateways
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'name'
        description: |
          The region this gateway should sit in.
        required: true
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional description of this resource.'
        input: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035.  Specifically, the name must be 1-63 characters long and
          match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means
          the first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        required: true
        input: true
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'network'
        resource: 'Network'
        imports: 'selfLink'
        description: |
          The network this VPN gateway is accepting traffic for.
        required: true
        input: true
      - !ruby/object:Api::Type::Array
        name: 'vpnInterfaces'
        description: |
          A list of interfaces on this VPN gateway.
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::Integer
              name: 'id'
              description: 'The numeric ID of this VPN gateway interface.'
            - !ruby/object:Api::Type::String
              name: 'ipAddress'
              description: 'The external IP address for this VPN gateway interface.'
              output: true
            - !ruby/object:Api::Type::ResourceRef
              name: 'interconnectAttachment'
              resource: 'InterconnectAttachment'
              imports: 'selfLink'
              description: |
                  URL of the interconnect attachment resource. When the value
                  of this field is present, the VPN Gateway will be used for
                  IPsec-encrypted Cloud Interconnect; all Egress or Ingress
                  traffic for this VPN Gateway interface will go through the
                  specified interconnect attachment resource.

                  Not currently available publicly.
              input: true
  - !ruby/object:Api::Resource
    name: 'ExternalVpnGateway'
    kind: 'compute#externalVpnGateway'
    base_url: projects/{{project}}/global/externalVpnGateways
    collection_url_key: 'items'
    input: true
    has_self_link: true
    description: |
      Represents a VPN gateway managed outside of GCP.
    references: !ruby/object:Api::Resource::ReferenceLinks
      api: https://cloud.google.com/compute/docs/reference/rest/v1/externalVpnGateways
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional description of this resource.'
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource is
          created. The name must be 1-63 characters long, and comply with
          RFC1035.  Specifically, the name must be 1-63 characters long and
          match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which means
          the first character must be a lowercase letter, and all following
          characters must be a dash, lowercase letter, or digit, except the last
          character, which cannot be a dash.
        required: true
      - !ruby/object:Api::Type::Enum
        name: 'redundancyType'
        description: |
          Indicates the redundancy type of this external VPN gateway
        values:
          - :FOUR_IPS_REDUNDANCY
          - :SINGLE_IP_INTERNALLY_REDUNDANT
          - :TWO_IPS_REDUNDANCY
      - !ruby/object:Api::Type::Array
        name: 'interfaces'
        description: |
          A list of interfaces on this external VPN gateway.
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::Integer
              name: 'id'
              send_empty_value: true
              description: |
                The numeric ID for this interface. Allowed values are based on the redundancy type
                of this external VPN gateway
                * `0 - SINGLE_IP_INTERNALLY_REDUNDANT`
                * `0, 1 - TWO_IPS_REDUNDANCY`
                * `0, 1, 2, 3 - FOUR_IPS_REDUNDANCY`
            - !ruby/object:Api::Type::String
              name: 'ipAddress'
              description: |
                IP address of the interface in the external VPN gateway.
                Only IPv4 is supported. This IP address can be either from
                your on-premise gateway or another Cloud provider's VPN gateway,
                it cannot be an IP address from Google Compute Engine.
  - !ruby/object:Api::Resource
    name: 'UrlMap'
    kind: 'compute#urlMap'
    base_url: projects/{{project}}/global/urlMaps
    collection_url_key: 'items'
    has_self_link: true
    description: |
      UrlMaps are used to route requests to a backend service based on rules
      that you define for the host and path of an incoming URL.
    references: !ruby/object:Api::Resource::ReferenceLinks
      api: https://cloud.google.com/compute/docs/reference/rest/v1/urlMaps
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'defaultService'
        exactly_one_of:
          - default_service
          - default_url_redirect
          - default_route_action.0.weighted_backend_services
        resource: 'BackendService'
        imports: 'selfLink'
        description: |
          The full or partial URL of the defaultService resource to which traffic is directed if
          none of the hostRules match. If defaultRouteAction is additionally specified, advanced
          routing actions like URL Rewrites, etc. take effect prior to sending the request to the
          backend. However, if defaultService is specified, defaultRouteAction cannot contain any
          weightedBackendServices. Conversely, if routeAction specifies any
          weightedBackendServices, service must not be specified. Only one of defaultService,
          defaultUrlRedirect or defaultRouteAction.weightedBackendService must be set.
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource. Provide this property when you create
          the resource.
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::Fingerprint
        name: 'fingerprint'
        description: |
          Fingerprint of this resource. A hash of the contents stored in this object. This
          field is used in optimistic locking.
      - !ruby/object:Api::Type::NestedObject
        name: 'headerAction'
        description: |
          Specifies changes to request and response headers that need to take effect for
          the selected backendService. The headerAction specified here take effect after
          headerAction specified under pathMatcher.
        properties:
          - !ruby/object:Api::Type::Array
            name: 'requestHeadersToAdd'
            at_least_one_of:
              - header_action.0.request_headers_to_add
              - header_action.0.request_headers_to_remove
              - header_action.0.response_headers_to_add
              - header_action.0.response_headers_to_remove
            description: |
              Headers to add to a matching request prior to forwarding the request to the
              backendService.
            item_type: !ruby/object:Api::Type::NestedObject
              properties:
                - !ruby/object:Api::Type::String
                  name: 'headerName'
                  required: true
                  description: |
                    The name of the header.
                - !ruby/object:Api::Type::String
                  name: 'headerValue'
                  required: true
                  description: |
                    The value of the header to add.
                - !ruby/object:Api::Type::Boolean
                  name: 'replace'
                  required: true
                  description: |
                    If false, headerValue is appended to any values that already exist for the
                    header. If true, headerValue is set for the header, discarding any values that
                    were set for that header.
          - !ruby/object:Api::Type::Array
            name: 'requestHeadersToRemove'
            item_type: Api::Type::String
            at_least_one_of:
              - header_action.0.request_headers_to_add
              - header_action.0.request_headers_to_remove
              - header_action.0.response_headers_to_add
              - header_action.0.response_headers_to_remove
            description: |
              A list of header names for headers that need to be removed from the request
              prior to forwarding the request to the backendService.
          - !ruby/object:Api::Type::Array
            name: 'responseHeadersToAdd'
            at_least_one_of:
              - header_action.0.request_headers_to_add
              - header_action.0.request_headers_to_remove
              - header_action.0.response_headers_to_add
              - header_action.0.response_headers_to_remove
            description: |
              Headers to add the response prior to sending the response back to the client.
            item_type: !ruby/object:Api::Type::NestedObject
              properties:
                - !ruby/object:Api::Type::String
                  name: 'headerName'
                  required: true
                  description: |
                    The name of the header.
                - !ruby/object:Api::Type::String
                  name: 'headerValue'
                  required: true
                  description: |
                    The value of the header to add.
                - !ruby/object:Api::Type::Boolean
                  name: 'replace'
                  required: true
                  description: |
                    If false, headerValue is appended to any values that already exist for the
                    header. If true, headerValue is set for the header, discarding any values that
                    were set for that header.
          - !ruby/object:Api::Type::Array
            name: 'responseHeadersToRemove'
            item_type: Api::Type::String
            at_least_one_of:
              - header_action.0.request_headers_to_add
              - header_action.0.request_headers_to_remove
              - header_action.0.response_headers_to_add
              - header_action.0.response_headers_to_remove
            description: |
              A list of header names for headers that need to be removed from the response
              prior to sending the response back to the client.
      - !ruby/object:Api::Type::Array
        name: 'hostRules'
        description: |
          The list of HostRules to use against the URL.
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::String
              name: 'description'
              description: |
                An optional description of this resource. Provide this property when you create
                the resource.
            - !ruby/object:Api::Type::Array
              name: 'hosts'
              required: true
              item_type: Api::Type::String
              description: |
                The list of host patterns to match. They must be valid hostnames, except * will
                match any string of ([a-z0-9-.]*). In that case, * must be the first character
                and must be followed in the pattern by either - or ..
            - !ruby/object:Api::Type::String
              name: 'pathMatcher'
              required: true
              description: |
                The name of the PathMatcher to use to match the path portion of the URL if the
                hostRule matches the URL's host portion.
      - !ruby/object:Api::Type::String
        name: 'name'
        required: true
        input: true
        description: |
          Name of the resource. Provided by the client when the resource is created. The
          name must be 1-63 characters long, and comply with RFC1035. Specifically, the
          name must be 1-63 characters long and match the regular expression
          `[a-z]([-a-z0-9]*[a-z0-9])?` which means the first character must be a lowercase
          letter, and all following characters must be a dash, lowercase letter, or digit,
          except the last character, which cannot be a dash.
      - !ruby/object:Api::Type::Array
        name: 'pathMatchers'
        description: |
          The list of named PathMatchers to use against the URL.
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::ResourceRef
              name: 'defaultService'
              # TODO: (mbang) won't work for array path matchers yet, uncomment here once they are supported.
              # (github.com/hashicorp/terraform-plugin-sdk/issues/470)
              # exactly_one_of:
              #   - path_matchers.0.default_service
              #   - path_matchers.0.default_url_redirect
              #   - path_matchers.0.default_route_action.0.weighted_backend_services
              resource: 'BackendService'
              imports: 'selfLink'
              description: |
                The full or partial URL to the BackendService resource. This will be used if none
                of the pathRules or routeRules defined by this PathMatcher are matched. For example,
                the following are all valid URLs to a BackendService resource:
                  - https://www.googleapis.com/compute/v1/projects/project/global/backendServices/backendService
                  - compute/v1/projects/project/global/backendServices/backendService
                  - global/backendServices/backendService
                If defaultRouteAction is additionally specified, advanced routing actions like URL
                Rewrites, etc. take effect prior to sending the request to the backend. However, if
                defaultService is specified, defaultRouteAction cannot contain any
                weightedBackendServices. Conversely, if defaultRouteAction specifies any
                weightedBackendServices, defaultService must not be specified.
                Only one of defaultService, defaultUrlRedirect or
                defaultRouteAction.weightedBackendService must be set. Authorization requires one
                or more of the following Google IAM permissions on the
                specified resource defaultService:
                  - compute.backendBuckets.use
                  - compute.backendServices.use
            - !ruby/object:Api::Type::String
              name: 'description'
              description: |
                An optional description of this resource. Provide this property when you create
                the resource.
            - !ruby/object:Api::Type::NestedObject
              name: 'headerAction'
              description: |
                Specifies changes to request and response headers that need to take effect for
                the selected backendService. HeaderAction specified here are applied after the
                matching HttpRouteRule HeaderAction and before the HeaderAction in the UrlMap
              properties:
                - !ruby/object:Api::Type::Array
                  name: 'requestHeadersToAdd'
                  description: |
                    Headers to add to a matching request prior to forwarding the request to the
                    backendService.
                  item_type: !ruby/object:Api::Type::NestedObject
                    properties:
                      - !ruby/object:Api::Type::String
                        name: 'headerName'
                        required: true
                        description: |
                          The name of the header.
                      - !ruby/object:Api::Type::String
                        name: 'headerValue'
                        required: true
                        description: |
                          The value of the header to add.
                      - !ruby/object:Api::Type::Boolean
                        name: 'replace'
                        required: true
                        description: |
                          If false, headerValue is appended to any values that already exist for the
                          header. If true, headerValue is set for the header, discarding any values that
                          were set for that header.
                - !ruby/object:Api::Type::Array
                  name: 'requestHeadersToRemove'
                  item_type: Api::Type::String
                  description: |
                    A list of header names for headers that need to be removed from the request
                    prior to forwarding the request to the backendService.
                - !ruby/object:Api::Type::Array
                  name: 'responseHeadersToAdd'
                  description: |
                    Headers to add the response prior to sending the response back to the client.
                  item_type: !ruby/object:Api::Type::NestedObject
                    properties:
                      - !ruby/object:Api::Type::String
                        name: 'headerName'
                        required: true
                        description: |
                          The name of the header.
                      - !ruby/object:Api::Type::String
                        name: 'headerValue'
                        required: true
                        description: |
                          The value of the header to add.
                      - !ruby/object:Api::Type::Boolean
                        name: 'replace'
                        required: true
                        description: |
                          If false, headerValue is appended to any values that already exist for the
                          header. If true, headerValue is set for the header, discarding any values that
                          were set for that header.
                - !ruby/object:Api::Type::Array
                  name: 'responseHeadersToRemove'
                  item_type: Api::Type::String
                  description: |
                    A list of header names for headers that need to be removed from the response
                    prior to sending the response back to the client.
            - !ruby/object:Api::Type::String
              name: 'name'
              required: true
              description: |
                The name to which this PathMatcher is referred by the HostRule.
            - !ruby/object:Api::Type::Array
              name: 'pathRules'
              description: |
                The list of path rules. Use this list instead of routeRules when routing based
                on simple path matching is all that's required. The order by which path rules
                are specified does not matter. Matches are always done on the longest-path-first
                basis. For example: a pathRule with a path /a/b/c/* will match before /a/b/*
                irrespective of the order in which those paths appear in this list. Within a
                given pathMatcher, only one of pathRules or routeRules must be set.
              item_type: !ruby/object:Api::Type::NestedObject
                properties:
                  - !ruby/object:Api::Type::ResourceRef
                    name: 'service'
                    resource: 'BackendService'
                    imports: 'selfLink'
                    description: |
                      The backend service resource to which traffic is
                      directed if this rule is matched. If routeAction is additionally specified,
                      advanced routing actions like URL Rewrites, etc. take effect prior to sending
                      the request to the backend. However, if service is specified, routeAction cannot
                      contain any weightedBackendService s. Conversely, if routeAction specifies any
                      weightedBackendServices, service must not be specified. Only one of urlRedirect,
                      service or routeAction.weightedBackendService must be set.
                  - !ruby/object:Api::Type::Array
                    name: 'paths'
                    required: true
                    item_type: Api::Type::String
                    description: |
                      The list of path patterns to match. Each must start with / and the only place a
                      \* is allowed is at the end following a /. The string fed to the path matcher
                      does not include any text after the first ? or #, and those chars are not
                      allowed here.
                  - !ruby/object:Api::Type::NestedObject
                    name: 'routeAction'
                    description: |
                      In response to a matching path, the load balancer performs advanced routing
                      actions like URL rewrites, header transformations, etc. prior to forwarding the
                      request to the selected backend. If routeAction specifies any
                      weightedBackendServices, service must not be set. Conversely if service is set,
                      routeAction cannot contain any  weightedBackendServices. Only one of routeAction
                      or urlRedirect must be set.
                    properties:
                      - !ruby/object:Api::Type::NestedObject
                        name: 'corsPolicy'
                        description: |
                          The specification for allowing client side cross-origin requests. Please see W3C
                          Recommendation for Cross Origin Resource Sharing
                        properties:
                          - !ruby/object:Api::Type::Boolean
                            name: 'allowCredentials'
                            default_value: false
                            description: |
                              In response to a preflight request, setting this to true indicates that the
                              actual request can include user credentials. This translates to the Access-
                              Control-Allow-Credentials header. Defaults to false.
                          - !ruby/object:Api::Type::Array
                            name: 'allowHeaders'
                            item_type: Api::Type::String
                            description: |
                              Specifies the content for the Access-Control-Allow-Headers header.
                          - !ruby/object:Api::Type::Array
                            name: 'allowMethods'
                            item_type: Api::Type::String
                            description: |
                              Specifies the content for the Access-Control-Allow-Methods header.
                          - !ruby/object:Api::Type::Array
                            name: 'allowOriginRegexes'
                            item_type: Api::Type::String
                            description: |
                              Specifies the regular expression patterns that match allowed origins. For
                              regular expression grammar please see en.cppreference.com/w/cpp/regex/ecmascript
                              An origin is allowed if it matches either allow_origins or allow_origin_regex.
                          - !ruby/object:Api::Type::Array
                            name: 'allowOrigins'
                            item_type: Api::Type::String
                            description: |
                              Specifies the list of origins that will be allowed to do CORS requests. An
                              origin is allowed if it matches either allow_origins or allow_origin_regex.
                          - !ruby/object:Api::Type::Boolean
                            name: 'disabled'
                            required: true
                            description: |
                              If true, specifies the CORS policy is disabled.
                          - !ruby/object:Api::Type::Array
                            name: 'exposeHeaders'
                            item_type: Api::Type::String
                            description: |
                              Specifies the content for the Access-Control-Expose-Headers header.
                          - !ruby/object:Api::Type::Integer
                            name: 'maxAge'
                            description: |
                              Specifies how long the results of a preflight request can be cached. This
                              translates to the content for the Access-Control-Max-Age header.
                      - !ruby/object:Api::Type::NestedObject
                        name: 'faultInjectionPolicy'
                        description: |
                          The specification for fault injection introduced into traffic to test the
                          resiliency of clients to backend service failure. As part of fault injection,
                          when clients send requests to a backend service, delays can be introduced by
                          Loadbalancer on a percentage of requests before sending those request to the
                          backend service. Similarly requests from clients can be aborted by the
                          Loadbalancer for a percentage of requests. timeout and retry_policy will be
                          ignored by clients that are configured with a fault_injection_policy.
                        properties:
                          - !ruby/object:Api::Type::NestedObject
                            name: 'abort'
                            description: |
                              The specification for how client requests are aborted as part of fault
                              injection.
                            properties:
                              - !ruby/object:Api::Type::Integer
                                name: 'httpStatus'
                                required: true
                                description: |
                                  The HTTP status code used to abort the request. The value must be between 200
                                  and 599 inclusive.
                              - !ruby/object:Api::Type::Double
                                name: 'percentage'
                                required: true
                                description: |
                                  The percentage of traffic (connections/operations/requests) which will be
                                  aborted as part of fault injection. The value must be between 0.0 and 100.0
                                  inclusive.
                          - !ruby/object:Api::Type::NestedObject
                            name: 'delay'
                            description: |
                              The specification for how client requests are delayed as part of fault
                              injection, before being sent to a backend service.
                            properties:
                              - !ruby/object:Api::Type::NestedObject
                                name: 'fixedDelay'
                                required: true
                                description: |
                                  Specifies the value of the fixed delay interval.
                                properties:
                                  - !ruby/object:Api::Type::Integer
                                    name: 'nanos'
                                    description: |
                                      Span of time that's a fraction of a second at nanosecond resolution. Durations
                                      less than one second are represented with a 0 `seconds` field and a positive
                                      `nanos` field. Must be from 0 to 999,999,999 inclusive.
                                  - !ruby/object:Api::Type::String
                                    name: 'seconds'
                                    required: true
                                    description: |
                                      Span of time at a resolution of a second. Must be from 0 to 315,576,000,000
                                      inclusive.
                              - !ruby/object:Api::Type::Double
                                name: 'percentage'
                                required: true
                                description: |
                                  The percentage of traffic (connections/operations/requests) on which delay will
                                  be introduced as part of fault injection. The value must be between 0.0 and
                                  100.0 inclusive.
                      - !ruby/object:Api::Type::NestedObject
                        name: 'requestMirrorPolicy'
                        description: |
                          Specifies the policy on how requests intended for the route's backends are
                          shadowed to a separate mirrored backend service. Loadbalancer does not wait for
                          responses from the shadow service. Prior to sending traffic to the shadow
                          service, the host / authority header is suffixed with -shadow.
                        properties:
                          - !ruby/object:Api::Type::ResourceRef
                            name: 'backendService'
                            required: true
                            resource: 'BackendService'
                            imports: 'selfLink'
                            description: |
                              The BackendService resource being mirrored to.
                      - !ruby/object:Api::Type::NestedObject
                        name: 'retryPolicy'
                        description: |
                          Specifies the retry policy associated with this route.
                        properties:
                          - !ruby/object:Api::Type::Integer
                            name: 'numRetries'
                            description: |
                              Specifies the allowed number retries. This number must be > 0.
                          - !ruby/object:Api::Type::NestedObject
                            name: 'perTryTimeout'
                            description: |
                              Specifies a non-zero timeout per retry attempt.
                            properties:
                              - !ruby/object:Api::Type::Integer
                                name: 'nanos'
                                description: |
                                  Span of time that's a fraction of a second at nanosecond resolution. Durations
                                  less than one second are represented with a 0 `seconds` field and a positive
                                  `nanos` field. Must be from 0 to 999,999,999 inclusive.
                              - !ruby/object:Api::Type::String
                                name: 'seconds'
                                required: true
                                description: |
                                  Span of time at a resolution of a second. Must be from 0 to 315,576,000,000
                                  inclusive.
                          - !ruby/object:Api::Type::Array
                            name: 'retryConditions'
                            item_type: Api::Type::String
                            description: |
                              Specifies one or more conditions when this retry rule applies. Valid values are:

                              * 5xx: Loadbalancer will attempt a retry if the backend service responds with
                              any 5xx response code, or if the backend service does not respond at all,
                              example: disconnects, reset, read timeout, connection failure, and refused
                              streams.
                              * gateway-error: Similar to 5xx, but only applies to response codes
                              502, 503 or 504.
                              * connect-failure: Loadbalancer will retry on failures
                              connecting to backend services, for example due to connection timeouts.
                              * retriable-4xx: Loadbalancer will retry for retriable 4xx response codes.
                              Currently the only retriable error supported is 409.
                              * refused-stream: Loadbalancer will retry if the backend service resets the stream with a
                              REFUSED_STREAM error code. This reset type indicates that it is safe to retry.
                              * cancelled: Loadbalancer will retry if the gRPC status code in the response
                              header is set to cancelled
                              * deadline-exceeded: Loadbalancer will retry if the
                              gRPC status code in the response header is set to deadline-exceeded
                              * resource-exhausted: Loadbalancer will retry if the gRPC status code in the response
                              header is set to resource-exhausted
                              * unavailable: Loadbalancer will retry if
                              the gRPC status code in the response header is set to unavailable
                      - !ruby/object:Api::Type::NestedObject
                        name: 'timeout'
                        description: |
                          Specifies the timeout for the selected route. Timeout is computed from the time
                          the request is has been fully processed (i.e. end-of-stream) up until the
                          response has been completely processed. Timeout includes all retries. If not
                          specified, the default value is 15 seconds.
                        properties:
                          - !ruby/object:Api::Type::Integer
                            name: 'nanos'
                            description: |
                              Span of time that's a fraction of a second at nanosecond resolution. Durations
                              less than one second are represented with a 0 `seconds` field and a positive
                              `nanos` field. Must be from 0 to 999,999,999 inclusive.
                          - !ruby/object:Api::Type::String
                            name: 'seconds'
                            required: true
                            description: |
                              Span of time at a resolution of a second. Must be from 0 to 315,576,000,000
                              inclusive.
                      - !ruby/object:Api::Type::NestedObject
                        name: 'urlRewrite'
                        description: |
                          The spec to modify the URL of the request, prior to forwarding the request to
                          the matched service
                        properties:
                          - !ruby/object:Api::Type::String
                            name: 'hostRewrite'
                            description: |
                              Prior to forwarding the request to the selected service, the request's host
                              header is replaced with contents of hostRewrite. The value must be between 1 and
                              255 characters.
                          - !ruby/object:Api::Type::String
                            name: 'pathPrefixRewrite'
                            description: |
                              Prior to forwarding the request to the selected backend service, the matching
                              portion of the request's path is replaced by pathPrefixRewrite. The value must
                              be between 1 and 1024 characters.
                      - !ruby/object:Api::Type::Array
                        name: 'weightedBackendServices'
                        description: |
                          A list of weighted backend services to send traffic to when a route match
                          occurs. The weights determine the fraction of traffic that flows to their
                          corresponding backend service. If all traffic needs to go to a single backend
                          service, there must be one  weightedBackendService with weight set to a non 0
                          number. Once a backendService is identified and before forwarding the request to
                          the backend service, advanced routing actions like Url rewrites and header
                          transformations are applied depending on additional settings specified in this
                          HttpRouteAction.
                        item_type: !ruby/object:Api::Type::NestedObject
                          properties:
                            - !ruby/object:Api::Type::ResourceRef
                              name: 'backendService'
                              required: true
                              resource: 'BackendService'
                              imports: 'selfLink'
                              description: |
                                The default BackendService resource. Before
                                forwarding the request to backendService, the loadbalancer applies any relevant
                                headerActions specified as part of this backendServiceWeight.
                            - !ruby/object:Api::Type::NestedObject
                              name: 'headerAction'
                              description: |
                                Specifies changes to request and response headers that need to take effect for
                                the selected backendService. headerAction specified here take effect before
                                headerAction in the enclosing HttpRouteRule, PathMatcher and UrlMap.
                              properties:
                                - !ruby/object:Api::Type::Array
                                  name: 'requestHeadersToAdd'
                                  description: |
                                    Headers to add to a matching request prior to forwarding the request to the
                                    backendService.
                                  item_type: !ruby/object:Api::Type::NestedObject
                                    properties:
                                      - !ruby/object:Api::Type::String
                                        name: 'headerName'
                                        required: true
                                        description: |
                                          The name of the header.
                                      - !ruby/object:Api::Type::String
                                        name: 'headerValue'
                                        required: true
                                        description: |
                                          The value of the header to add.
                                      - !ruby/object:Api::Type::Boolean
                                        name: 'replace'
                                        required: true
                                        description: |
                                          If false, headerValue is appended to any values that already exist for the
                                          header. If true, headerValue is set for the header, discarding any values that
                                          were set for that header.
                                - !ruby/object:Api::Type::Array
                                  name: 'requestHeadersToRemove'
                                  item_type: Api::Type::String
                                  description: |
                                    A list of header names for headers that need to be removed from the request
                                    prior to forwarding the request to the backendService.
                                - !ruby/object:Api::Type::Array
                                  name: 'responseHeadersToAdd'
                                  description: |
                                    Headers to add the response prior to sending the response back to the client.
                                  item_type: !ruby/object:Api::Type::NestedObject
                                    properties:
                                      - !ruby/object:Api::Type::String
                                        name: 'headerName'
                                        required: true
                                        description: |
                                          The name of the header.
                                      - !ruby/object:Api::Type::String
                                        name: 'headerValue'
                                        required: true
                                        description: |
                                          The value of the header to add.
                                      - !ruby/object:Api::Type::Boolean
                                        name: 'replace'
                                        required: true
                                        description: |
                                          If false, headerValue is appended to any values that already exist for the
                                          header. If true, headerValue is set for the header, discarding any values that
                                          were set for that header.
                                - !ruby/object:Api::Type::Array
                                  name: 'responseHeadersToRemove'
                                  item_type: Api::Type::String
                                  description: |
                                    A list of header names for headers that need to be removed from the response
                                    prior to sending the response back to the client.
                            - !ruby/object:Api::Type::Integer
                              name: 'weight'
                              required: true
                              description: |
                                Specifies the fraction of traffic sent to backendService, computed as weight /
                                (sum of all weightedBackendService weights in routeAction) . The selection of a
                                backend service is determined only for new traffic. Once a user's request has
                                been directed to a backendService, subsequent requests will be sent to the same
                                backendService as determined by the BackendService's session affinity policy.
                                The value must be between 0 and 1000
                  - !ruby/object:Api::Type::NestedObject
                    name: 'urlRedirect'
                    description: |
                      When a path pattern is matched, the request is redirected to a URL specified
                      by urlRedirect. If urlRedirect is specified, service or routeAction must not
                      be set.
                    properties:
                      - !ruby/object:Api::Type::String
                        name: 'hostRedirect'
                        description: |
                          The host that will be used in the redirect response instead of the one
                          that was supplied in the request. The value must be between 1 and 255
                          characters.
                      - !ruby/object:Api::Type::Boolean
                        name: 'httpsRedirect'
                        default_value: false
                        description: |
                          If set to true, the URL scheme in the redirected request is set to https.
                          If set to false, the URL scheme of the redirected request will remain the
                          same as that of the request. This must only be set for UrlMaps used in
                          TargetHttpProxys. Setting this true for TargetHttpsProxy is not
                          permitted. The default is set to false.
                      - !ruby/object:Api::Type::String
                        name: 'pathRedirect'
                        description: |
                          The path that will be used in the redirect response instead of the one
                          that was supplied in the request. pathRedirect cannot be supplied
                          together with prefixRedirect. Supply one alone or neither. If neither is
                          supplied, the path of the original request will be used for the redirect.
                          The value must be between 1 and 1024 characters.
                      - !ruby/object:Api::Type::String
                        name: 'prefixRedirect'
                        description: |
                          The prefix that replaces the prefixMatch specified in the
                          HttpRouteRuleMatch, retaining the remaining portion of the URL before
                          redirecting the request. prefixRedirect cannot be supplied together with
                          pathRedirect. Supply one alone or neither. If neither is supplied, the
                          path of the original request will be used for the redirect. The value
                          must be between 1 and 1024 characters.
                      - !ruby/object:Api::Type::Enum
                        name: 'redirectResponseCode'
                        description: |
                          The HTTP Status code to use for this RedirectAction. Supported values are:

                          * MOVED_PERMANENTLY_DEFAULT, which is the default value and corresponds to 301.

                          * FOUND, which corresponds to 302.

                          * SEE_OTHER which corresponds to 303.

                          * TEMPORARY_REDIRECT, which corresponds to 307. In this case, the request method
                          will be retained.

                          * PERMANENT_REDIRECT, which corresponds to 308. In this case,
                          the request method will be retained.
                        skip_docs_values: true
                        values:
                          - :FOUND
                          - :MOVED_PERMANENTLY_DEFAULT
                          - :PERMANENT_REDIRECT
                          - :SEE_OTHER
                          - :TEMPORARY_REDIRECT
                      - !ruby/object:Api::Type::Boolean
                        name: 'stripQuery'
                        description: |
                          If set to true, any accompanying query portion of the original URL is
                          removed prior to redirecting the request. If set to false, the query
                          portion of the original URL is retained.
            - !ruby/object:Api::Type::Array
              name: 'routeRules'
              description: |
                The list of ordered HTTP route rules. Use this list instead of pathRules when
                advanced route matching and routing actions are desired. The order of specifying
                routeRules matters: the first rule that matches will cause its specified routing
                action to take effect. Within a given pathMatcher, only one of pathRules or
                routeRules must be set. routeRules are not supported in UrlMaps intended for
                External load balancers.
              item_type: !ruby/object:Api::Type::NestedObject
                properties:
                  - !ruby/object:Api::Type::Integer
                    name: 'priority'
                    required: true
                    description: |
                      For routeRules within a given pathMatcher, priority determines the order
                      in which load balancer will interpret routeRules. RouteRules are evaluated
                      in order of priority, from the lowest to highest number. The priority of
                      a rule decreases as its number increases (1, 2, 3, N+1). The first rule
                      that matches the request is applied.

                      You cannot configure two or more routeRules with the same priority.
                      Priority for each rule must be set to a number between 0 and
                      2147483647 inclusive.

                      Priority numbers can have gaps, which enable you to add or remove rules
                      in the future without affecting the rest of the rules. For example,
                      1, 2, 3, 4, 5, 9, 12, 16 is a valid series of priority numbers to which
                      you could add rules numbered from 6 to 8, 10 to 11, and 13 to 15 in the
                      future without any impact on existing rules.
                  - !ruby/object:Api::Type::ResourceRef
                    name: 'service'
                    resource: 'BackendService'
                    imports: 'selfLink'
                    description: |
                      The backend service resource to which traffic is
                      directed if this rule is matched. If routeAction is additionally specified,
                      advanced routing actions like URL Rewrites, etc. take effect prior to sending
                      the request to the backend. However, if service is specified, routeAction cannot
                      contain any weightedBackendService s. Conversely, if routeAction specifies any
                      weightedBackendServices, service must not be specified. Only one of urlRedirect,
                      service or routeAction.weightedBackendService must be set.
                  - !ruby/object:Api::Type::NestedObject
                    name: 'headerAction'
                    description: |
                      Specifies changes to request and response headers that need to take effect for
                      the selected backendService. The headerAction specified here are applied before
                      the matching pathMatchers[].headerAction and after pathMatchers[].routeRules[].r
                      outeAction.weightedBackendService.backendServiceWeightAction[].headerAction
                    properties:
                      - !ruby/object:Api::Type::Array
                        name: 'requestHeadersToAdd'
                        description: |
                          Headers to add to a matching request prior to forwarding the request to the
                          backendService.
                        item_type: !ruby/object:Api::Type::NestedObject
                          properties:
                            - !ruby/object:Api::Type::String
                              name: 'headerName'
                              required: true
                              description: |
                                The name of the header.
                            - !ruby/object:Api::Type::String
                              name: 'headerValue'
                              required: true
                              description: |
                                The value of the header to add.
                            - !ruby/object:Api::Type::Boolean
                              name: 'replace'
                              required: true
                              description: |
                                If false, headerValue is appended to any values that already exist for the
                                header. If true, headerValue is set for the header, discarding any values that
                                were set for that header.
                      - !ruby/object:Api::Type::Array
                        name: 'requestHeadersToRemove'
                        item_type: Api::Type::String
                        description: |
                          A list of header names for headers that need to be removed from the request
                          prior to forwarding the request to the backendService.
                      - !ruby/object:Api::Type::Array
                        name: 'responseHeadersToAdd'
                        description: |
                          Headers to add the response prior to sending the response back to the client.
                        item_type: !ruby/object:Api::Type::NestedObject
                          properties:
                            - !ruby/object:Api::Type::String
                              name: 'headerName'
                              required: true
                              description: |
                                The name of the header.
                            - !ruby/object:Api::Type::String
                              name: 'headerValue'
                              required: true
                              description: |
                                The value of the header to add.
                            - !ruby/object:Api::Type::Boolean
                              name: 'replace'
                              required: true
                              description: |
                                If false, headerValue is appended to any values that already exist for the
                                header. If true, headerValue is set for the header, discarding any values that
                                were set for that header.
                      - !ruby/object:Api::Type::Array
                        name: 'responseHeadersToRemove'
                        item_type: Api::Type::String
                        description: |
                          A list of header names for headers that need to be removed from the response
                          prior to sending the response back to the client.
                  - !ruby/object:Api::Type::Array
                    name: 'matchRules'
                    description: |
                      The rules for determining a match.
                    item_type: !ruby/object:Api::Type::NestedObject
                      properties:
                        - !ruby/object:Api::Type::String
                          name: 'fullPathMatch'
                          description: |
                            For satisfying the matchRule condition, the path of the request must exactly
                            match the value specified in fullPathMatch after removing any query parameters
                            and anchor that may be part of the original URL. FullPathMatch must be between 1
                            and 1024 characters. Only one of prefixMatch, fullPathMatch or regexMatch must
                            be specified.
                        - !ruby/object:Api::Type::Array
                          name: 'headerMatches'
                          description: |
                            Specifies a list of header match criteria, all of which must match corresponding
                            headers in the request.
                          item_type: !ruby/object:Api::Type::NestedObject
                            properties:
                              - !ruby/object:Api::Type::String
                                name: 'exactMatch'
                                description: |
                                  The value should exactly match contents of exactMatch. Only one of exactMatch,
                                  prefixMatch, suffixMatch, regexMatch, presentMatch or rangeMatch must be set.
                              - !ruby/object:Api::Type::String
                                name: 'headerName'
                                required: true
                                description: |
                                  The name of the HTTP header to match. For matching against the HTTP request's
                                  authority, use a headerMatch with the header name ":authority". For matching a
                                  request's method, use the headerName ":method".
                              - !ruby/object:Api::Type::Boolean
                                name: 'invertMatch'
                                default_value: false
                                description: |
                                  If set to false, the headerMatch is considered a match if the match criteria
                                  above are met. If set to true, the headerMatch is considered a match if the
                                  match criteria above are NOT met. Defaults to false.
                              - !ruby/object:Api::Type::String
                                name: 'prefixMatch'
                                description: |
                                  The value of the header must start with the contents of prefixMatch. Only one of
                                  exactMatch, prefixMatch, suffixMatch, regexMatch, presentMatch or rangeMatch
                                  must be set.
                              - !ruby/object:Api::Type::Boolean
                                name: 'presentMatch'
                                description: |
                                  A header with the contents of headerName must exist. The match takes place
                                  whether or not the request's header has a value or not. Only one of exactMatch,
                                  prefixMatch, suffixMatch, regexMatch, presentMatch or rangeMatch must be set.
                              - !ruby/object:Api::Type::NestedObject
                                name: 'rangeMatch'
                                description: |
                                  The header value must be an integer and its value must be in the range specified
                                  in rangeMatch. If the header does not contain an integer, number or is empty,
                                  the match fails. For example for a range [-5, 0]   - -3 will match.  - 0 will
                                  not match.  - 0.25 will not match.  - -3someString will not match.   Only one of
                                  exactMatch, prefixMatch, suffixMatch, regexMatch, presentMatch or rangeMatch
                                  must be set.
                                properties:
                                  - !ruby/object:Api::Type::Integer
                                    name: 'rangeEnd'
                                    required: true
                                    description: |
                                      The end of the range (exclusive).
                                  - !ruby/object:Api::Type::Integer
                                    name: 'rangeStart'
                                    required: true
                                    description: |
                                      The start of the range (inclusive).
                              - !ruby/object:Api::Type::String
                                name: 'regexMatch'
                                description: |
                                  The value of the header must match the regular expression specified in
                                  regexMatch. For regular expression grammar, please see:
                                  en.cppreference.com/w/cpp/regex/ecmascript  For matching against a port
                                  specified in the HTTP request, use a headerMatch with headerName set to PORT and
                                  a regular expression that satisfies the RFC2616 Host header's port specifier.
                                  Only one of exactMatch, prefixMatch, suffixMatch, regexMatch, presentMatch or
                                  rangeMatch must be set.
                              - !ruby/object:Api::Type::String
                                name: 'suffixMatch'
                                description: |
                                  The value of the header must end with the contents of suffixMatch. Only one of
                                  exactMatch, prefixMatch, suffixMatch, regexMatch, presentMatch or rangeMatch
                                  must be set.
                        - !ruby/object:Api::Type::Boolean
                          name: 'ignoreCase'
                          default_value: false
                          description: |
                            Specifies that prefixMatch and fullPathMatch matches are case sensitive.
                            Defaults to false.
                        - !ruby/object:Api::Type::Array
                          name: 'metadataFilters'
                          description: |
                            Opaque filter criteria used by Loadbalancer to restrict routing configuration to
                            a limited set xDS compliant clients. In their xDS requests to Loadbalancer, xDS
                            clients present node metadata. If a match takes place, the relevant routing
                            configuration is made available to those proxies. For each metadataFilter in
                            this list, if its filterMatchCriteria is set to MATCH_ANY, at least one of the
                            filterLabels must match the corresponding label provided in the metadata. If its
                            filterMatchCriteria is set to MATCH_ALL, then all of its filterLabels must match
                            with corresponding labels in the provided metadata. metadataFilters specified
                            here can be overrides those specified in ForwardingRule that refers to this
                            UrlMap. metadataFilters only applies to Loadbalancers that have their
                            loadBalancingScheme set to INTERNAL_SELF_MANAGED.
                          item_type: !ruby/object:Api::Type::NestedObject
                            properties:
                              - !ruby/object:Api::Type::Array
                                name: 'filterLabels'
                                min_size: 1
                                max_size: 64
                                required: true
                                description: |
                                  The list of label value pairs that must match labels in the provided metadata
                                  based on filterMatchCriteria  This list must not be empty and can have at the
                                  most 64 entries.
                                item_type: !ruby/object:Api::Type::NestedObject
                                  properties:
                                    - !ruby/object:Api::Type::String
                                      name: 'name'
                                      required: true
                                      description: |
                                        Name of metadata label. The name can have a maximum length of 1024 characters
                                        and must be at least 1 character long.
                                    - !ruby/object:Api::Type::String
                                      name: 'value'
                                      required: true
                                      description: |
                                        The value of the label must match the specified value. value can have a maximum
                                        length of 1024 characters.
                              - !ruby/object:Api::Type::Enum
                                name: 'filterMatchCriteria'
                                required: true
                                description: |
                                  Specifies how individual filterLabel matches within the list of filterLabels
                                  contribute towards the overall metadataFilter match. Supported values are:
                                    - MATCH_ANY: At least one of the filterLabels must have a matching label in the
                                  provided metadata.
                                    - MATCH_ALL: All filterLabels must have matching labels in
                                  the provided metadata.
                                values:
                                  - :MATCH_ALL
                                  - :MATCH_ANY
                        - !ruby/object:Api::Type::String
                          name: 'prefixMatch'
                          description: |
                            For satisfying the matchRule condition, the request's path must begin with the
                            specified prefixMatch. prefixMatch must begin with a /. The value must be
                            between 1 and 1024 characters. Only one of prefixMatch, fullPathMatch or
                            regexMatch must be specified.
                        - !ruby/object:Api::Type::Array
                          name: 'queryParameterMatches'
                          description: |
                            Specifies a list of query parameter match criteria, all of which must match
                            corresponding query parameters in the request.
                          item_type: !ruby/object:Api::Type::NestedObject
                            properties:
                              - !ruby/object:Api::Type::String
                                name: 'exactMatch'
                                description: |
                                  The queryParameterMatch matches if the value of the parameter exactly matches
                                  the contents of exactMatch. Only one of presentMatch, exactMatch and regexMatch
                                  must be set.
                              - !ruby/object:Api::Type::String
                                name: 'name'
                                required: true
                                description: |
                                  The name of the query parameter to match. The query parameter must exist in the
                                  request, in the absence of which the request match fails.
                              - !ruby/object:Api::Type::Boolean
                                name: 'presentMatch'
                                description: |
                                  Specifies that the queryParameterMatch matches if the request contains the query
                                  parameter, irrespective of whether the parameter has a value or not. Only one of
                                  presentMatch, exactMatch and regexMatch must be set.
                              - !ruby/object:Api::Type::String
                                name: 'regexMatch'
                                description: |
                                  The queryParameterMatch matches if the value of the parameter matches the
                                  regular expression specified by regexMatch. For the regular expression grammar,
                                  please see en.cppreference.com/w/cpp/regex/ecmascript  Only one of presentMatch,
                                  exactMatch and regexMatch must be set.
                        - !ruby/object:Api::Type::String
                          name: 'regexMatch'
                          description: |
                            For satisfying the matchRule condition, the path of the request must satisfy the
                            regular expression specified in regexMatch after removing any query parameters
                            and anchor supplied with the original URL. For regular expression grammar please
                            see en.cppreference.com/w/cpp/regex/ecmascript  Only one of prefixMatch,
                            fullPathMatch or regexMatch must be specified.
                  - !ruby/object:Api::Type::NestedObject
                    name: 'routeAction'
                    description: |
                      In response to a matching matchRule, the load balancer performs advanced routing
                      actions like URL rewrites, header transformations, etc. prior to forwarding the
                      request to the selected backend. If  routeAction specifies any
                      weightedBackendServices, service must not be set. Conversely if service is set,
                      routeAction cannot contain any  weightedBackendServices. Only one of routeAction
                      or urlRedirect must be set.
                    properties:
                      - !ruby/object:Api::Type::NestedObject
                        name: 'corsPolicy'
                        description: |
                          The specification for allowing client side cross-origin requests. Please see W3C
                          Recommendation for Cross Origin Resource Sharing
                        properties:
                          - !ruby/object:Api::Type::Boolean
                            name: 'allowCredentials'
                            default_value: false
                            description: |
                              In response to a preflight request, setting this to true indicates that the
                              actual request can include user credentials. This translates to the Access-
                              Control-Allow-Credentials header. Defaults to false.
                          - !ruby/object:Api::Type::Array
                            name: 'allowHeaders'
                            item_type: Api::Type::String
                            description: |
                              Specifies the content for the Access-Control-Allow-Headers header.
                          - !ruby/object:Api::Type::Array
                            name: 'allowMethods'
                            item_type: Api::Type::String
                            description: |
                              Specifies the content for the Access-Control-Allow-Methods header.
                          - !ruby/object:Api::Type::Array
                            name: 'allowOriginRegexes'
                            item_type: Api::Type::String
                            description: |
                              Specifies the regular expression patterns that match allowed origins. For
                              regular expression grammar please see en.cppreference.com/w/cpp/regex/ecmascript
                              An origin is allowed if it matches either allow_origins or allow_origin_regex.
                          - !ruby/object:Api::Type::Array
                            name: 'allowOrigins'
                            item_type: Api::Type::String
                            description: |
                              Specifies the list of origins that will be allowed to do CORS requests. An
                              origin is allowed if it matches either allow_origins or allow_origin_regex.
                          - !ruby/object:Api::Type::Boolean
                            name: 'disabled'
                            default_value: false
                            description: |
                              If true, specifies the CORS policy is disabled.
                              which indicates that the CORS policy is in effect. Defaults to false.
                          - !ruby/object:Api::Type::Array
                            name: 'exposeHeaders'
                            item_type: Api::Type::String
                            description: |
                              Specifies the content for the Access-Control-Expose-Headers header.
                          - !ruby/object:Api::Type::Integer
                            name: 'maxAge'
                            description: |
                              Specifies how long the results of a preflight request can be cached. This
                              translates to the content for the Access-Control-Max-Age header.
                      - !ruby/object:Api::Type::NestedObject
                        name: 'faultInjectionPolicy'
                        description: |
                          The specification for fault injection introduced into traffic to test the
                          resiliency of clients to backend service failure. As part of fault injection,
                          when clients send requests to a backend service, delays can be introduced by
                          Loadbalancer on a percentage of requests before sending those request to the
                          backend service. Similarly requests from clients can be aborted by the
                          Loadbalancer for a percentage of requests. timeout and retry_policy will be
                          ignored by clients that are configured with a fault_injection_policy.
                        properties:
                          - !ruby/object:Api::Type::NestedObject
                            name: 'abort'
                            description: |
                              The specification for how client requests are aborted as part of fault
                              injection.
                            properties:
                              - !ruby/object:Api::Type::Integer
                                name: 'httpStatus'
                                description: |
                                  The HTTP status code used to abort the request. The value must be between 200
                                  and 599 inclusive.
                              - !ruby/object:Api::Type::Double
                                name: 'percentage'
                                description: |
                                  The percentage of traffic (connections/operations/requests) which will be
                                  aborted as part of fault injection. The value must be between 0.0 and 100.0
                                  inclusive.
                          - !ruby/object:Api::Type::NestedObject
                            name: 'delay'
                            description: |
                              The specification for how client requests are delayed as part of fault
                              injection, before being sent to a backend service.
                            properties:
                              - !ruby/object:Api::Type::NestedObject
                                name: 'fixedDelay'
                                description: |
                                  Specifies the value of the fixed delay interval.
                                properties:
                                  - !ruby/object:Api::Type::Integer
                                    name: 'nanos'
                                    description: |
                                      Span of time that's a fraction of a second at nanosecond resolution. Durations
                                      less than one second are represented with a 0 `seconds` field and a positive
                                      `nanos` field. Must be from 0 to 999,999,999 inclusive.
                                  - !ruby/object:Api::Type::String
                                    name: 'seconds'
                                    required: true
                                    description: |
                                      Span of time at a resolution of a second. Must be from 0 to 315,576,000,000
                                      inclusive.
                              - !ruby/object:Api::Type::Double
                                name: 'percentage'
                                description: |
                                  The percentage of traffic (connections/operations/requests) on which delay will
                                  be introduced as part of fault injection. The value must be between 0.0 and
                                  100.0 inclusive.
                      - !ruby/object:Api::Type::NestedObject
                        name: 'requestMirrorPolicy'
                        description: |
                          Specifies the policy on how requests intended for the route's backends are
                          shadowed to a separate mirrored backend service. Loadbalancer does not wait for
                          responses from the shadow service. Prior to sending traffic to the shadow
                          service, the host / authority header is suffixed with -shadow.
                        properties:
                          - !ruby/object:Api::Type::ResourceRef
                            name: 'backendService'
                            required: true
                            resource: 'BackendService'
                            imports: 'selfLink'
                            description: |
                              The BackendService resource being mirrored to.
                      - !ruby/object:Api::Type::NestedObject
                        name: 'retryPolicy'
                        description: |
                          Specifies the retry policy associated with this route.
                        properties:
                          - !ruby/object:Api::Type::Integer
                            name: 'numRetries'
                            required: true
                            description: |
                              Specifies the allowed number retries. This number must be > 0.
                          - !ruby/object:Api::Type::NestedObject
                            name: 'perTryTimeout'
                            description: |
                              Specifies a non-zero timeout per retry attempt.
                              If not specified, will use the timeout set in HttpRouteAction. If timeout in HttpRouteAction
                              is not set, will use the largest timeout among all backend services associated with the route.
                            properties:
                              - !ruby/object:Api::Type::Integer
                                name: 'nanos'
                                description: |
                                  Span of time that's a fraction of a second at nanosecond resolution. Durations
                                  less than one second are represented with a 0 `seconds` field and a positive
                                  `nanos` field. Must be from 0 to 999,999,999 inclusive.
                              - !ruby/object:Api::Type::String
                                name: 'seconds'
                                required: true
                                description: |
                                  Span of time at a resolution of a second. Must be from 0 to 315,576,000,000
                                  inclusive.
                          - !ruby/object:Api::Type::Array
                            name: 'retryConditions'
                            item_type: Api::Type::String
                            description: |
                              Specfies one or more conditions when this retry rule applies. Valid values are:

                              * 5xx: Loadbalancer will attempt a retry if the backend service responds with
                                any 5xx response code, or if the backend service does not respond at all,
                                example: disconnects, reset, read timeout, connection failure, and refused
                                streams.
                              * gateway-error: Similar to 5xx, but only applies to response codes
                                502, 503 or 504.
                              * connect-failure: Loadbalancer will retry on failures
                                connecting to backend services, for example due to connection timeouts.
                              * retriable-4xx: Loadbalancer will retry for retriable 4xx response codes.
                                Currently the only retriable error supported is 409.
                              * refused-stream: Loadbalancer will retry if the backend service resets the stream with a
                                REFUSED_STREAM error code. This reset type indicates that it is safe to retry.
                              * cancelled: Loadbalancer will retry if the gRPC status code in the response
                                header is set to cancelled
                              * deadline-exceeded: Loadbalancer will retry if the
                                gRPC status code in the response header is set to deadline-exceeded
                              * resource-exhausted: Loadbalancer will retry if the gRPC status code in the response
                                header is set to resource-exhausted
                              * unavailable: Loadbalancer will retry if the gRPC status code in
                                the response header is set to unavailable
                      - !ruby/object:Api::Type::NestedObject
                        name: 'timeout'
                        description: |
                          Specifies the timeout for the selected route. Timeout is computed from the time
                          the request is has been fully processed (i.e. end-of-stream) up until the
                          response has been completely processed. Timeout includes all retries. If not
                          specified, the default value is 15 seconds.
                        properties:
                          - !ruby/object:Api::Type::Integer
                            name: 'nanos'
                            description: |
                              Span of time that's a fraction of a second at nanosecond resolution. Durations
                              less than one second are represented with a 0 `seconds` field and a positive
                              `nanos` field. Must be from 0 to 999,999,999 inclusive.
                          - !ruby/object:Api::Type::String
                            name: 'seconds'
                            required: true
                            description: |
                              Span of time at a resolution of a second. Must be from 0 to 315,576,000,000
                              inclusive.
                      - !ruby/object:Api::Type::NestedObject
                        name: 'urlRewrite'
                        description: |
                          The spec to modify the URL of the request, prior to forwarding the request to
                          the matched service
                        properties:
                          - !ruby/object:Api::Type::String
                            name: 'hostRewrite'
                            description: |
                              Prior to forwarding the request to the selected service, the request's host
                              header is replaced with contents of hostRewrite. The value must be between 1 and
                              255 characters.
                          - !ruby/object:Api::Type::String
                            name: 'pathPrefixRewrite'
                            description: |
                              Prior to forwarding the request to the selected backend service, the matching
                              portion of the request's path is replaced by pathPrefixRewrite. The value must
                              be between 1 and 1024 characters.
                      - !ruby/object:Api::Type::Array
                        name: 'weightedBackendServices'
                        description: |
                          A list of weighted backend services to send traffic to when a route match
                          occurs. The weights determine the fraction of traffic that flows to their
                          corresponding backend service. If all traffic needs to go to a single backend
                          service, there must be one  weightedBackendService with weight set to a non 0
                          number. Once a backendService is identified and before forwarding the request to
                          the backend service, advanced routing actions like Url rewrites and header
                          transformations are applied depending on additional settings specified in this
                          HttpRouteAction.
                        item_type: !ruby/object:Api::Type::NestedObject
                          properties:
                            - !ruby/object:Api::Type::ResourceRef
                              name: 'backendService'
                              required: true
                              resource: 'BackendService'
                              imports: 'selfLink'
                              description: |
                                The default BackendService resource. Before
                                forwarding the request to backendService, the loadbalancer applies any relevant
                                headerActions specified as part of this backendServiceWeight.
                            - !ruby/object:Api::Type::NestedObject
                              name: 'headerAction'
                              description: |
                                Specifies changes to request and response headers that need to take effect for
                                the selected backendService. headerAction specified here take effect before
                                headerAction in the enclosing HttpRouteRule, PathMatcher and UrlMap.
                              properties:
                                - !ruby/object:Api::Type::Array
                                  name: 'requestHeadersToAdd'
                                  description: |
                                    Headers to add to a matching request prior to forwarding the request to the
                                    backendService.
                                  item_type: !ruby/object:Api::Type::NestedObject
                                    properties:
                                      - !ruby/object:Api::Type::String
                                        name: 'headerName'
                                        required: true
                                        description: |
                                          The name of the header.
                                      - !ruby/object:Api::Type::String
                                        name: 'headerValue'
                                        required: true
                                        description: |
                                          The value of the header to add.
                                      - !ruby/object:Api::Type::Boolean
                                        name: 'replace'
                                        required: true
                                        description: |
                                          If false, headerValue is appended to any values that already exist for the
                                          header. If true, headerValue is set for the header, discarding any values that
                                          were set for that header.
                                - !ruby/object:Api::Type::Array
                                  name: 'requestHeadersToRemove'
                                  item_type: Api::Type::String
                                  description: |
                                    A list of header names for headers that need to be removed from the request
                                    prior to forwarding the request to the backendService.
                                - !ruby/object:Api::Type::Array
                                  name: 'responseHeadersToAdd'
                                  description: |
                                    Headers to add the response prior to sending the response back to the client.
                                  item_type: !ruby/object:Api::Type::NestedObject
                                    properties:
                                      - !ruby/object:Api::Type::String
                                        name: 'headerName'
                                        required: true
                                        description: |
                                          The name of the header.
                                      - !ruby/object:Api::Type::String
                                        name: 'headerValue'
                                        required: true
                                        description: |
                                          The value of the header to add.
                                      - !ruby/object:Api::Type::Boolean
                                        name: 'replace'
                                        required: true
                                        description: |
                                          If false, headerValue is appended to any values that already exist for the
                                          header. If true, headerValue is set for the header, discarding any values that
                                          were set for that header.
                                - !ruby/object:Api::Type::Array
                                  name: 'responseHeadersToRemove'
                                  item_type: Api::Type::String
                                  description: |
                                    A list of header names for headers that need to be removed from the response
                                    prior to sending the response back to the client.
                            - !ruby/object:Api::Type::Integer
                              name: 'weight'
                              required: true
                              description: |
                                Specifies the fraction of traffic sent to backendService, computed as weight /
                                (sum of all weightedBackendService weights in routeAction) . The selection of a
                                backend service is determined only for new traffic. Once a user's request has
                                been directed to a backendService, subsequent requests will be sent to the same
                                backendService as determined by the BackendService's session affinity policy.
                                The value must be between 0 and 1000
                  - !ruby/object:Api::Type::NestedObject
                    name: 'urlRedirect'
                    description: |
                      When this rule is matched, the request is redirected to a URL specified by
                      urlRedirect. If urlRedirect is specified, service or routeAction must not be
                      set.
                    properties:
                      - !ruby/object:Api::Type::String
                        name: 'hostRedirect'
                        description: |
                          The host that will be used in the redirect response instead of the one that was
                          supplied in the request. The value must be between 1 and 255 characters.
                      - !ruby/object:Api::Type::Boolean
                        name: 'httpsRedirect'
                        default_value: false
                        description: |
                          If set to true, the URL scheme in the redirected request is set to https. If set
                          to false, the URL scheme of the redirected request will remain the same as that
                          of the request. This must only be set for UrlMaps used in TargetHttpProxys.
                          Setting this true for TargetHttpsProxy is not permitted. Defaults to false.
                      - !ruby/object:Api::Type::String
                        name: 'pathRedirect'
                        description: |
                          The path that will be used in the redirect response instead of the one that was
                          supplied in the request. Only one of pathRedirect or prefixRedirect must be
                          specified. The value must be between 1 and 1024 characters.
                      - !ruby/object:Api::Type::String
                        name: 'prefixRedirect'
                        description: |
                          The prefix that replaces the prefixMatch specified in the HttpRouteRuleMatch,
                          retaining the remaining portion of the URL before redirecting the request.
                      - !ruby/object:Api::Type::Enum
                        name: 'redirectResponseCode'
                        description: |
                          The HTTP Status code to use for this RedirectAction. Supported values are:

                          * MOVED_PERMANENTLY_DEFAULT, which is the default value and corresponds to 301.

                          * FOUND, which corresponds to 302.

                          * SEE_OTHER which corresponds to 303.

                          * TEMPORARY_REDIRECT, which corresponds to 307. In this case, the request method will be retained.

                          * PERMANENT_REDIRECT, which corresponds to 308. In this case, the request method will be retained.
                        skip_docs_values: true
                        values:
                          - :FOUND
                          - :MOVED_PERMANENTLY_DEFAULT
                          - :PERMANENT_REDIRECT
                          - :SEE_OTHER
                          - :TEMPORARY_REDIRECT
                      - !ruby/object:Api::Type::Boolean
                        name: 'stripQuery'
                        default_value: false
                        description: |
                          If set to true, any accompanying query portion of the original URL is removed
                          prior to redirecting the request. If set to false, the query portion of the
                          original URL is retained. Defaults to false.
            - !ruby/object:Api::Type::NestedObject
              name: 'defaultUrlRedirect'
              # TODO: (mbang) won't work for array path matchers yet, uncomment here once they are supported.
              # (github.com/hashicorp/terraform-plugin-sdk/issues/470)
              # exactly_one_of:
              #   - path_matchers.0.default_service
              #   - path_matchers.0.default_url_redirect
              #   - path_matchers.0.default_route_action.0.weighted_backend_services
              description: |
                When none of the specified hostRules match, the request is redirected to a URL specified
                by defaultUrlRedirect. If defaultUrlRedirect is specified, defaultService or
                defaultRouteAction must not be set.
              properties:
                - !ruby/object:Api::Type::String
                  name: 'hostRedirect'
                  description: |
                    The host that will be used in the redirect response instead of the one that was
                    supplied in the request. The value must be between 1 and 255 characters.
                - !ruby/object:Api::Type::Boolean
                  name: 'httpsRedirect'
                  default_value: false
                  description: |
                    If set to true, the URL scheme in the redirected request is set to https. If set to
                    false, the URL scheme of the redirected request will remain the same as that of the
                    request. This must only be set for UrlMaps used in TargetHttpProxys. Setting this
                    true for TargetHttpsProxy is not permitted. The default is set to false.
                - !ruby/object:Api::Type::String
                  name: 'pathRedirect'
                  description: |
                    The path that will be used in the redirect response instead of the one that was
                    supplied in the request. pathRedirect cannot be supplied together with
                    prefixRedirect. Supply one alone or neither. If neither is supplied, the path of the
                    original request will be used for the redirect. The value must be between 1 and 1024
                    characters.
                - !ruby/object:Api::Type::String
                  name: 'prefixRedirect'
                  description: |
                    The prefix that replaces the prefixMatch specified in the HttpRouteRuleMatch,
                    retaining the remaining portion of the URL before redirecting the request.
                    prefixRedirect cannot be supplied together with pathRedirect. Supply one alone or
                    neither. If neither is supplied, the path of the original request will be used for
                    the redirect. The value must be between 1 and 1024 characters.
                - !ruby/object:Api::Type::Enum
                  name: 'redirectResponseCode'
                  description: |
                    The HTTP Status code to use for this RedirectAction. Supported values are:

                    * MOVED_PERMANENTLY_DEFAULT, which is the default value and corresponds to 301.

                    * FOUND, which corresponds to 302.

                    * SEE_OTHER which corresponds to 303.

                    * TEMPORARY_REDIRECT, which corresponds to 307. In this case, the request method
                    will be retained.

                    * PERMANENT_REDIRECT, which corresponds to 308. In this case,
                    the request method will be retained.
                  skip_docs_values: true
                  values:
                    - :FOUND
                    - :MOVED_PERMANENTLY_DEFAULT
                    - :PERMANENT_REDIRECT
                    - :SEE_OTHER
                    - :TEMPORARY_REDIRECT
                - !ruby/object:Api::Type::Boolean
                  name: 'stripQuery'
                  description: |
                    If set to true, any accompanying query portion of the original URL is removed prior
                    to redirecting the request. If set to false, the query portion of the original URL is
                    retained.
            - !ruby/object:Api::Type::NestedObject
              name: 'defaultRouteAction'
              # TODO: (mbang) conflicts also won't work for array path matchers yet, uncomment here once supported.
              # conflicts:
              #   - path_matcher.path_matcher.default_url_redirect
              description: |
                defaultRouteAction takes effect when none of the pathRules or routeRules match. The load balancer performs
                advanced routing actions like URL rewrites, header transformations, etc. prior to forwarding the request
                to the selected backend. If defaultRouteAction specifies any weightedBackendServices, defaultService must not be set.
                Conversely if defaultService is set, defaultRouteAction cannot contain any weightedBackendServices.

                Only one of defaultRouteAction or defaultUrlRedirect must be set.
              properties:
                - !ruby/object:Api::Type::Array
                  name: 'weightedBackendServices'
                  # TODO: (mbang) won't work for array path matchers yet, uncomment here once they are supported.
                  # (github.com/hashicorp/terraform-plugin-sdk/issues/470)
                  # exactly_one_of:
                  #   - path_matchers.0.default_service
                  #   - path_matchers.0.default_url_redirect
                  #   - path_matchers.0.default_route_action.0.weighted_backend_services
                  description: |
                    A list of weighted backend services to send traffic to when a route match occurs.
                    The weights determine the fraction of traffic that flows to their corresponding backend service.
                    If all traffic needs to go to a single backend service, there must be one weightedBackendService
                    with weight set to a non 0 number.

                    Once a backendService is identified and before forwarding the request to the backend service,
                    advanced routing actions like Url rewrites and header transformations are applied depending on
                    additional settings specified in this HttpRouteAction.
                  item_type: !ruby/object:Api::Type::NestedObject
                    properties:
                      - !ruby/object:Api::Type::ResourceRef
                        name: 'backendService'
                        resource: 'BackendService'
                        imports: 'selfLink'
                        description: |
                          The full or partial URL to the default BackendService resource. Before forwarding the
                          request to backendService, the loadbalancer applies any relevant headerActions
                          specified as part of this backendServiceWeight.
                      - !ruby/object:Api::Type::Integer
                        name: 'weight'
                        description: |
                          Specifies the fraction of traffic sent to backendService, computed as
                          weight / (sum of all weightedBackendService weights in routeAction) .

                          The selection of a backend service is determined only for new traffic. Once a user's request
                          has been directed to a backendService, subsequent requests will be sent to the same backendService
                          as determined by the BackendService's session affinity policy.

                          The value must be between 0 and 1000
                      - !ruby/object:Api::Type::NestedObject
                        name: 'headerAction'
                        description: |
                          Specifies changes to request and response headers that need to take effect for
                          the selected backendService.

                          headerAction specified here take effect before headerAction in the enclosing
                          HttpRouteRule, PathMatcher and UrlMap.
                        properties:
                          - !ruby/object:Api::Type::Array
                            name: 'requestHeadersToRemove'
                            description: |
                              A list of header names for headers that need to be removed from the request prior to
                              forwarding the request to the backendService.
                            item_type: Api::Type::String
                          - !ruby/object:Api::Type::Array
                            name: 'requestHeadersToAdd'
                            description: |
                              Headers to add to a matching request prior to forwarding the request to the backendService.
                            item_type: !ruby/object:Api::Type::NestedObject
                              properties:
                                - !ruby/object:Api::Type::String
                                  name: 'headerName'
                                  description: |
                                    The name of the header to add.
                                - !ruby/object:Api::Type::String
                                  name: 'headerValue'
                                  description: |
                                    The value of the header to add.
                                - !ruby/object:Api::Type::Boolean
                                  name: 'replace'
                                  description: |
                                    If false, headerValue is appended to any values that already exist for the header.
                                    If true, headerValue is set for the header, discarding any values that were set for that header.
                                  default_value: false
                          - !ruby/object:Api::Type::Array
                            name: 'responseHeadersToRemove'
                            description: |
                              A list of header names for headers that need to be removed from the response prior to sending the
                              response back to the client.
                            item_type: Api::Type::String
                          - !ruby/object:Api::Type::Array
                            name: 'responseHeadersToAdd'
                            description: |
                              Headers to add the response prior to sending the response back to the client.
                            item_type: !ruby/object:Api::Type::NestedObject
                              properties:
                                - !ruby/object:Api::Type::String
                                  name: 'headerName'
                                  description: |
                                    The name of the header to add.
                                - !ruby/object:Api::Type::String
                                  name: 'headerValue'
                                  description: |
                                    The value of the header to add.
                                - !ruby/object:Api::Type::Boolean
                                  name: 'replace'
                                  description: |
                                    If false, headerValue is appended to any values that already exist for the header.
                                    If true, headerValue is set for the header, discarding any values that were set for that header.
                                  default_value: false
                - !ruby/object:Api::Type::NestedObject
                  name: 'urlRewrite'
                  description: |
                    The spec to modify the URL of the request, prior to forwarding the request to the matched service.
                  properties:
                    - !ruby/object:Api::Type::String
                      name: 'pathPrefixRewrite'
                      description: |
                        Prior to forwarding the request to the selected backend service, the matching portion of the
                        request's path is replaced by pathPrefixRewrite.

                        The value must be between 1 and 1024 characters.
                    - !ruby/object:Api::Type::String
                      name: 'hostRewrite'
                      description: |
                        Prior to forwarding the request to the selected service, the request's host header is replaced
                        with contents of hostRewrite.

                        The value must be between 1 and 255 characters.
                - !ruby/object:Api::Type::NestedObject
                  name: 'timeout'
                  description: |
                    Specifies the timeout for the selected route. Timeout is computed from the time the request has been
                    fully processed (i.e. end-of-stream) up until the response has been completely processed. Timeout includes all retries.

                    If not specified, will use the largest timeout among all backend services associated with the route.
                  properties:
                    - !ruby/object:Api::Type::String
                      name: 'seconds'
                      description: |
                        Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive.
                        Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
                    - !ruby/object:Api::Type::Integer
                      name: 'nanos'
                      description: |
                        Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are represented
                        with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
                - !ruby/object:Api::Type::NestedObject
                  name: 'retryPolicy'
                  description: |
                    Specifies the retry policy associated with this route.
                  properties:
                    - !ruby/object:Api::Type::Array
                      name: 'retryConditions'
                      description: |
                        Specfies one or more conditions when this retry rule applies. Valid values are:

                        * 5xx: Loadbalancer will attempt a retry if the backend service responds with any 5xx response code,
                          or if the backend service does not respond at all, example: disconnects, reset, read timeout,
                        * connection failure, and refused streams.
                        * gateway-error: Similar to 5xx, but only applies to response codes 502, 503 or 504.
                        * connect-failure: Loadbalancer will retry on failures connecting to backend services,
                          for example due to connection timeouts.
                        * retriable-4xx: Loadbalancer will retry for retriable 4xx response codes.
                          Currently the only retriable error supported is 409.
                        * refused-stream:Loadbalancer will retry if the backend service resets the stream with a REFUSED_STREAM error code.
                          This reset type indicates that it is safe to retry.
                        * cancelled: Loadbalancer will retry if the gRPC status code in the response header is set to cancelled
                        * deadline-exceeded: Loadbalancer will retry if the gRPC status code in the response header is set to deadline-exceeded
                        * resource-exhausted: Loadbalancer will retry if the gRPC status code in the response header is set to resource-exhausted
                        * unavailable: Loadbalancer will retry if the gRPC status code in the response header is set to unavailable
                      item_type: Api::Type::String
                    - !ruby/object:Api::Type::Integer
                      name: 'numRetries'
                      description: |
                        Specifies the allowed number retries. This number must be > 0. If not specified, defaults to 1.
                      default_value: 1
                    - !ruby/object:Api::Type::NestedObject
                      name: 'perTryTimeout'
                      description: |
                        Specifies a non-zero timeout per retry attempt.

                        If not specified, will use the timeout set in HttpRouteAction. If timeout in HttpRouteAction is not set,
                        will use the largest timeout among all backend services associated with the route.
                      properties:
                        - !ruby/object:Api::Type::String
                          name: 'seconds'
                          description: |
                            Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive.
                            Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
                        - !ruby/object:Api::Type::Integer
                          name: 'nanos'
                          description: |
                            Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are
                            represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
                - !ruby/object:Api::Type::NestedObject
                  name: 'requestMirrorPolicy'
                  description: |
                    Specifies the policy on how requests intended for the route's backends are shadowed to a separate mirrored backend service.
                    Loadbalancer does not wait for responses from the shadow service. Prior to sending traffic to the shadow service,
                    the host / authority header is suffixed with -shadow.
                  properties:
                    - !ruby/object:Api::Type::ResourceRef
                      name: 'backendService'
                      resource: 'BackendService'
                      imports: 'selfLink'
                      description: |
                        The full or partial URL to the BackendService resource being mirrored to.
                      required: true
                - !ruby/object:Api::Type::NestedObject
                  name: 'corsPolicy'
                  description: |
                    The specification for allowing client side cross-origin requests. Please see
                    [W3C Recommendation for Cross Origin Resource Sharing](https://www.w3.org/TR/cors/)
                  properties:
                    - !ruby/object:Api::Type::Array
                      name: 'allowOrigins'
                      description: |
                        Specifies the list of origins that will be allowed to do CORS requests.
                        An origin is allowed if it matches either an item in allowOrigins or an item in allowOriginRegexes.
                      item_type: Api::Type::String
                    - !ruby/object:Api::Type::Array
                      name: 'allowOriginRegexes'
                      description: |
                        Specifies the regular expression patterns that match allowed origins. For regular expression grammar
                        please see en.cppreference.com/w/cpp/regex/ecmascript
                        An origin is allowed if it matches either an item in allowOrigins or an item in allowOriginRegexes.
                      item_type: Api::Type::String
                    - !ruby/object:Api::Type::Array
                      name: 'allowMethods'
                      description: |
                        Specifies the content for the Access-Control-Allow-Methods header.
                      item_type: Api::Type::String
                    - !ruby/object:Api::Type::Array
                      name: 'allowHeaders'
                      description: |
                        Specifies the content for the Access-Control-Allow-Headers header.
                      item_type: Api::Type::String
                    - !ruby/object:Api::Type::Array
                      name: 'exposeHeaders'
                      description: |
                        Specifies the content for the Access-Control-Expose-Headers header.
                      item_type: Api::Type::String
                    - !ruby/object:Api::Type::Integer
                      name: 'maxAge'
                      description: |
                        Specifies how long results of a preflight request can be cached in seconds.
                        This translates to the Access-Control-Max-Age header.
                    - !ruby/object:Api::Type::Boolean
                      name: 'allowCredentials'
                      description: |
                        In response to a preflight request, setting this to true indicates that the actual request can include user credentials.
                        This translates to the Access-Control-Allow-Credentials header.
                      default_value: false
                    - !ruby/object:Api::Type::Boolean
                      name: 'disabled'
                      description: |
                        If true, specifies the CORS policy is disabled. The default value is false, which indicates that the CORS policy is in effect.
                      default_value: false
                - !ruby/object:Api::Type::NestedObject
                  name: 'faultInjectionPolicy'
                  description: |
                    The specification for fault injection introduced into traffic to test the resiliency of clients to backend service failure.
                    As part of fault injection, when clients send requests to a backend service, delays can be introduced by Loadbalancer on a
                    percentage of requests before sending those request to the backend service. Similarly requests from clients can be aborted
                    by the Loadbalancer for a percentage of requests.

                    timeout and retryPolicy will be ignored by clients that are configured with a faultInjectionPolicy.
                  properties:
                    - !ruby/object:Api::Type::NestedObject
                      name: 'delay'
                      description: |
                        The specification for how client requests are delayed as part of fault injection, before being sent to a backend service.
                      properties:
                        - !ruby/object:Api::Type::NestedObject
                          name: 'fixedDelay'
                          description: |
                            Specifies the value of the fixed delay interval.
                          properties:
                            - !ruby/object:Api::Type::String
                              name: 'seconds'
                              description: |
                                Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive.
                                Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
                            - !ruby/object:Api::Type::Integer
                              name: 'nanos'
                              description: |
                                Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are
                                represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
                        - !ruby/object:Api::Type::Double
                          name: 'percentage'
                          description: |
                            The percentage of traffic (connections/operations/requests) on which delay will be introduced as part of fault injection.
                            The value must be between 0.0 and 100.0 inclusive.
                    - !ruby/object:Api::Type::NestedObject
                      name: 'abort'
                      description: |
                        The specification for how client requests are aborted as part of fault injection.
                      properties:
                        - !ruby/object:Api::Type::Integer
                          name: 'httpStatus'
                          description: |
                            The HTTP status code used to abort the request.
                            The value must be between 200 and 599 inclusive.
                        - !ruby/object:Api::Type::Double
                          name: 'percentage'
                          description: |
                            The percentage of traffic (connections/operations/requests) which will be aborted as part of fault injection.
                            The value must be between 0.0 and 100.0 inclusive.
      - !ruby/object:Api::Type::Array
        name: 'tests'
        description: |
          The list of expected URL mapping tests. Request to update this UrlMap will
          succeed only if all of the test cases pass. You can specify a maximum of 100
          tests per UrlMap.
        item_type: !ruby/object:Api::Type::NestedObject
          properties:
            - !ruby/object:Api::Type::String
              name: 'description'
              description: |
                Description of this test case.
            - !ruby/object:Api::Type::String
              name: 'host'
              required: true
              description: |
                Host portion of the URL.
            - !ruby/object:Api::Type::String
              name: 'path'
              required: true
              description: |
                Path portion of the URL.
            - !ruby/object:Api::Type::ResourceRef
              name: 'service'
              resource: 'BackendService'
              imports: 'selfLink'
              required: true
              description: |
                Expected BackendService resource the given URL should be mapped to.
      - !ruby/object:Api::Type::NestedObject
        name: 'defaultUrlRedirect'
        exactly_one_of:
          - default_service
          - default_url_redirect
          - default_route_action.0.weighted_backend_services
        conflicts:
          - default_route_action
        description: |
          When none of the specified hostRules match, the request is redirected to a URL specified
          by defaultUrlRedirect. If defaultUrlRedirect is specified, defaultService or
          defaultRouteAction must not be set.
        properties:
          - !ruby/object:Api::Type::String
            name: 'hostRedirect'
            description: |
              The host that will be used in the redirect response instead of the one that was
              supplied in the request. The value must be between 1 and 255 characters.
          - !ruby/object:Api::Type::Boolean
            name: 'httpsRedirect'
            default_value: false
            description: |
              If set to true, the URL scheme in the redirected request is set to https. If set to
              false, the URL scheme of the redirected request will remain the same as that of the
              request. This must only be set for UrlMaps used in TargetHttpProxys. Setting this
              true for TargetHttpsProxy is not permitted. The default is set to false.
          - !ruby/object:Api::Type::String
            name: 'pathRedirect'
            description: |
              The path that will be used in the redirect response instead of the one that was
              supplied in the request. pathRedirect cannot be supplied together with
              prefixRedirect. Supply one alone or neither. If neither is supplied, the path of the
              original request will be used for the redirect. The value must be between 1 and 1024
              characters.
          - !ruby/object:Api::Type::String
            name: 'prefixRedirect'
            description: |
              The prefix that replaces the prefixMatch specified in the HttpRouteRuleMatch,
              retaining the remaining portion of the URL before redirecting the request.
              prefixRedirect cannot be supplied together with pathRedirect. Supply one alone or
              neither. If neither is supplied, the path of the original request will be used for
              the redirect. The value must be between 1 and 1024 characters.
          - !ruby/object:Api::Type::Enum
            name: 'redirectResponseCode'
            description: |
              The HTTP Status code to use for this RedirectAction. Supported values are:

              * MOVED_PERMANENTLY_DEFAULT, which is the default value and corresponds to 301.

              * FOUND, which corresponds to 302.

              * SEE_OTHER which corresponds to 303.

              * TEMPORARY_REDIRECT, which corresponds to 307. In this case, the request method
              will be retained.

              * PERMANENT_REDIRECT, which corresponds to 308. In this case,
              the request method will be retained.
            skip_docs_values: true
            values:
              - :FOUND
              - :MOVED_PERMANENTLY_DEFAULT
              - :PERMANENT_REDIRECT
              - :SEE_OTHER
              - :TEMPORARY_REDIRECT
          - !ruby/object:Api::Type::Boolean
            name: 'stripQuery'
            description: |
              If set to true, any accompanying query portion of the original URL is removed prior
              to redirecting the request. If set to false, the query portion of the original URL is
              retained. The default is set to false.
      - !ruby/object:Api::Type::NestedObject
        name: 'defaultRouteAction'
        conflicts:
          - default_url_redirect
        description: |
          defaultRouteAction takes effect when none of the hostRules match. The load balancer performs advanced routing actions
          like URL rewrites, header transformations, etc. prior to forwarding the request to the selected backend.
          If defaultRouteAction specifies any weightedBackendServices, defaultService must not be set. Conversely if defaultService
          is set, defaultRouteAction cannot contain any weightedBackendServices.

          Only one of defaultRouteAction or defaultUrlRedirect must be set.
        properties:
          - !ruby/object:Api::Type::Array
            name: 'weightedBackendServices'
            exactly_one_of:
              - default_service
              - default_url_redirect
              - default_route_action.0.weighted_backend_services
            description: |
              A list of weighted backend services to send traffic to when a route match occurs.
              The weights determine the fraction of traffic that flows to their corresponding backend service.
              If all traffic needs to go to a single backend service, there must be one weightedBackendService
              with weight set to a non 0 number.

              Once a backendService is identified and before forwarding the request to the backend service,
              advanced routing actions like Url rewrites and header transformations are applied depending on
              additional settings specified in this HttpRouteAction.
            at_least_one_of:
              - default_route_action.0.weighted_backend_services
              - default_route_action.0.url_rewrite
              - default_route_action.0.timeout
              - default_route_action.0.retry_policy
              - default_route_action.0.request_mirror_policy
              - default_route_action.0.cors_policy
              - default_route_action.0.fault_injection_policy
            item_type: !ruby/object:Api::Type::NestedObject
              properties:
                - !ruby/object:Api::Type::ResourceRef
                  name: 'backendService'
                  resource: 'BackendService'
                  imports: 'selfLink'
                  description: |
                    The full or partial URL to the default BackendService resource. Before forwarding the
                    request to backendService, the loadbalancer applies any relevant headerActions
                    specified as part of this backendServiceWeight.
                - !ruby/object:Api::Type::Integer
                  name: 'weight'
                  description: |
                    Specifies the fraction of traffic sent to backendService, computed as
                    weight / (sum of all weightedBackendService weights in routeAction) .

                    The selection of a backend service is determined only for new traffic. Once a user's request
                    has been directed to a backendService, subsequent requests will be sent to the same backendService
                    as determined by the BackendService's session affinity policy.

                    The value must be between 0 and 1000
                - !ruby/object:Api::Type::NestedObject
                  name: 'headerAction'
                  description: |
                    Specifies changes to request and response headers that need to take effect for
                    the selected backendService.

                    headerAction specified here take effect before headerAction in the enclosing
                    HttpRouteRule, PathMatcher and UrlMap.
                  properties:
                    - !ruby/object:Api::Type::Array
                      name: 'requestHeadersToRemove'
                      description: |
                        A list of header names for headers that need to be removed from the request prior to
                        forwarding the request to the backendService.
                      item_type: Api::Type::String
                    - !ruby/object:Api::Type::Array
                      name: 'requestHeadersToAdd'
                      description: |
                        Headers to add to a matching request prior to forwarding the request to the backendService.
                      item_type: !ruby/object:Api::Type::NestedObject
                        properties:
                          - !ruby/object:Api::Type::String
                            name: 'headerName'
                            description: |
                              The name of the header to add.
                          - !ruby/object:Api::Type::String
                            name: 'headerValue'
                            description: |
                              The value of the header to add.
                          - !ruby/object:Api::Type::Boolean
                            name: 'replace'
                            description: |
                              If false, headerValue is appended to any values that already exist for the header.
                              If true, headerValue is set for the header, discarding any values that were set for that header.
                            default_value: false
                    - !ruby/object:Api::Type::Array
                      name: 'responseHeadersToRemove'
                      description: |
                        A list of header names for headers that need to be removed from the response prior to sending the
                        response back to the client.
                      item_type: Api::Type::String
                    - !ruby/object:Api::Type::Array
                      name: 'responseHeadersToAdd'
                      description: |
                        Headers to add the response prior to sending the response back to the client.
                      item_type: !ruby/object:Api::Type::NestedObject
                        properties:
                          - !ruby/object:Api::Type::String
                            name: 'headerName'
                            description: |
                              The name of the header to add.
                          - !ruby/object:Api::Type::String
                            name: 'headerValue'
                            description: |
                              The value of the header to add.
                          - !ruby/object:Api::Type::Boolean
                            name: 'replace'
                            description: |
                              If false, headerValue is appended to any values that already exist for the header.
                              If true, headerValue is set for the header, discarding any values that were set for that header.
                            default_value: false
          - !ruby/object:Api::Type::NestedObject
            name: 'urlRewrite'
            description: |
              The spec to modify the URL of the request, prior to forwarding the request to the matched service.
            at_least_one_of:
              - default_route_action.0.weighted_backend_services
              - default_route_action.0.url_rewrite
              - default_route_action.0.timeout
              - default_route_action.0.retry_policy
              - default_route_action.0.request_mirror_policy
              - default_route_action.0.cors_policy
              - default_route_action.0.fault_injection_policy
            properties:
              - !ruby/object:Api::Type::String
                name: 'pathPrefixRewrite'
                description: |
                  Prior to forwarding the request to the selected backend service, the matching portion of the
                  request's path is replaced by pathPrefixRewrite.

                  The value must be between 1 and 1024 characters.
                at_least_one_of:
                  - default_route_action.0.url_rewrite.0.path_prefix_rewrite
                  - default_route_action.0.url_rewrite.0.host_rewrite
              - !ruby/object:Api::Type::String
                name: 'hostRewrite'
                description: |
                  Prior to forwarding the request to the selected service, the request's host header is replaced
                  with contents of hostRewrite.

                  The value must be between 1 and 255 characters.
                at_least_one_of:
                  - default_route_action.0.url_rewrite.0.path_prefix_rewrite
                  - default_route_action.0.url_rewrite.0.host_rewrite
          - !ruby/object:Api::Type::NestedObject
            name: 'timeout'
            description: |
              Specifies the timeout for the selected route. Timeout is computed from the time the request has been
              fully processed (i.e. end-of-stream) up until the response has been completely processed. Timeout includes all retries.

              If not specified, will use the largest timeout among all backend services associated with the route.
            at_least_one_of:
              - default_route_action.0.weighted_backend_services
              - default_route_action.0.url_rewrite
              - default_route_action.0.timeout
              - default_route_action.0.retry_policy
              - default_route_action.0.request_mirror_policy
              - default_route_action.0.cors_policy
              - default_route_action.0.fault_injection_policy
            properties:
              - !ruby/object:Api::Type::String
                name: 'seconds'
                description: |
                  Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive.
                  Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
                at_least_one_of:
                  - default_route_action.0.timeout.0.seconds
                  - default_route_action.0.timeout.0.nanos
              - !ruby/object:Api::Type::Integer
                name: 'nanos'
                description: |
                  Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are represented
                  with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
                at_least_one_of:
                  - default_route_action.0.timeout.0.seconds
                  - default_route_action.0.timeout.0.nanos
          - !ruby/object:Api::Type::NestedObject
            name: 'retryPolicy'
            description: |
              Specifies the retry policy associated with this route.
            at_least_one_of:
              - default_route_action.0.weighted_backend_services
              - default_route_action.0.url_rewrite
              - default_route_action.0.timeout
              - default_route_action.0.retry_policy
              - default_route_action.0.request_mirror_policy
              - default_route_action.0.cors_policy
              - default_route_action.0.fault_injection_policy
            properties:
              - !ruby/object:Api::Type::Array
                name: 'retryConditions'
                description: |
                  Specfies one or more conditions when this retry rule applies. Valid values are:

                  * 5xx: Loadbalancer will attempt a retry if the backend service responds with any 5xx response code,
                    or if the backend service does not respond at all, example: disconnects, reset, read timeout,
                  * connection failure, and refused streams.
                  * gateway-error: Similar to 5xx, but only applies to response codes 502, 503 or 504.
                  * connect-failure: Loadbalancer will retry on failures connecting to backend services,
                    for example due to connection timeouts.
                  * retriable-4xx: Loadbalancer will retry for retriable 4xx response codes.
                    Currently the only retriable error supported is 409.
                  * refused-stream:Loadbalancer will retry if the backend service resets the stream with a REFUSED_STREAM error code.
                    This reset type indicates that it is safe to retry.
                  * cancelled: Loadbalancer will retry if the gRPC status code in the response header is set to cancelled
                  * deadline-exceeded: Loadbalancer will retry if the gRPC status code in the response header is set to deadline-exceeded
                  * resource-exhausted: Loadbalancer will retry if the gRPC status code in the response header is set to resource-exhausted
                  * unavailable: Loadbalancer will retry if the gRPC status code in the response header is set to unavailable
                at_least_one_of:
                  - default_route_action.0.retry_policy.0.retry_conditions
                  - default_route_action.0.retry_policy.0.num_retries
                  - default_route_action.0.retry_policy.0.per_try_timeout
                item_type: Api::Type::String
              - !ruby/object:Api::Type::Integer
                name: 'numRetries'
                description: |
                  Specifies the allowed number retries. This number must be > 0. If not specified, defaults to 1.
                at_least_one_of:
                  - default_route_action.0.retry_policy.0.retry_conditions
                  - default_route_action.0.retry_policy.0.num_retries
                  - default_route_action.0.retry_policy.0.per_try_timeout
                default_value: 1
              - !ruby/object:Api::Type::NestedObject
                name: 'perTryTimeout'
                description: |
                  Specifies a non-zero timeout per retry attempt.

                  If not specified, will use the timeout set in HttpRouteAction. If timeout in HttpRouteAction is not set,
                  will use the largest timeout among all backend services associated with the route.
                at_least_one_of:
                  - default_route_action.0.retry_policy.0.retry_conditions
                  - default_route_action.0.retry_policy.0.num_retries
                  - default_route_action.0.retry_policy.0.per_try_timeout
                properties:
                  - !ruby/object:Api::Type::String
                    name: 'seconds'
                    description: |
                      Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive.
                      Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
                    at_least_one_of:
                      - default_route_action.0.retry_policy.0.per_try_timeout.0.seconds
                      - default_route_action.0.retry_policy.0.per_try_timeout.0.nanos
                  - !ruby/object:Api::Type::Integer
                    name: 'nanos'
                    description: |
                      Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are
                      represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
                    at_least_one_of:
                      - default_route_action.0.retry_policy.0.per_try_timeout.0.seconds
                      - default_route_action.0.retry_policy.0.per_try_timeout.0.nanos
          - !ruby/object:Api::Type::NestedObject
            name: 'requestMirrorPolicy'
            description: |
              Specifies the policy on how requests intended for the route's backends are shadowed to a separate mirrored backend service.
              Loadbalancer does not wait for responses from the shadow service. Prior to sending traffic to the shadow service,
              the host / authority header is suffixed with -shadow.
            at_least_one_of:
              - default_route_action.0.weighted_backend_services
              - default_route_action.0.url_rewrite
              - default_route_action.0.timeout
              - default_route_action.0.retry_policy
              - default_route_action.0.request_mirror_policy
              - default_route_action.0.cors_policy
              - default_route_action.0.fault_injection_policy
            properties:
              - !ruby/object:Api::Type::ResourceRef
                name: 'backendService'
                resource: 'BackendService'
                imports: 'selfLink'
                description: |
                  The full or partial URL to the BackendService resource being mirrored to.
                required: true
          - !ruby/object:Api::Type::NestedObject
            name: 'corsPolicy'
            description: |
              The specification for allowing client side cross-origin requests. Please see
              [W3C Recommendation for Cross Origin Resource Sharing](https://www.w3.org/TR/cors/)
            at_least_one_of:
              - default_route_action.0.weighted_backend_services
              - default_route_action.0.url_rewrite
              - default_route_action.0.timeout
              - default_route_action.0.retry_policy
              - default_route_action.0.request_mirror_policy
              - default_route_action.0.cors_policy
              - default_route_action.0.fault_injection_policy
            properties:
              - !ruby/object:Api::Type::Array
                name: 'allowOrigins'
                description: |
                  Specifies the list of origins that will be allowed to do CORS requests.
                  An origin is allowed if it matches either an item in allowOrigins or an item in allowOriginRegexes.
                at_least_one_of:
                  - default_route_action.0.cors_policy.0.allow_origins
                  - default_route_action.0.cors_policy.0.allow_origin_regexes
                  - default_route_action.0.cors_policy.0.allow_methods
                  - default_route_action.0.cors_policy.0.allow_headers
                  - default_route_action.0.cors_policy.0.expose_headers
                  - default_route_action.0.cors_policy.0.max_age
                  - default_route_action.0.cors_policy.0.allow_credentials
                  - default_route_action.0.cors_policy.0.disabled
                item_type: Api::Type::String
              - !ruby/object:Api::Type::Array
                name: 'allowOriginRegexes'
                description: |
                  Specifies the regular expression patterns that match allowed origins. For regular expression grammar
                  please see en.cppreference.com/w/cpp/regex/ecmascript
                  An origin is allowed if it matches either an item in allowOrigins or an item in allowOriginRegexes.
                at_least_one_of:
                  - default_route_action.0.cors_policy.0.allow_origins
                  - default_route_action.0.cors_policy.0.allow_origin_regexes
                  - default_route_action.0.cors_policy.0.allow_methods
                  - default_route_action.0.cors_policy.0.allow_headers
                  - default_route_action.0.cors_policy.0.expose_headers
                  - default_route_action.0.cors_policy.0.max_age
                  - default_route_action.0.cors_policy.0.allow_credentials
                  - default_route_action.0.cors_policy.0.disabled
                item_type: Api::Type::String
              - !ruby/object:Api::Type::Array
                name: 'allowMethods'
                description: |
                  Specifies the content for the Access-Control-Allow-Methods header.
                at_least_one_of:
                  - default_route_action.0.cors_policy.0.allow_origins
                  - default_route_action.0.cors_policy.0.allow_origin_regexes
                  - default_route_action.0.cors_policy.0.allow_methods
                  - default_route_action.0.cors_policy.0.allow_headers
                  - default_route_action.0.cors_policy.0.expose_headers
                  - default_route_action.0.cors_policy.0.max_age
                  - default_route_action.0.cors_policy.0.allow_credentials
                  - default_route_action.0.cors_policy.0.disabled
                item_type: Api::Type::String
              - !ruby/object:Api::Type::Array
                name: 'allowHeaders'
                description: |
                  Specifies the content for the Access-Control-Allow-Headers header.
                at_least_one_of:
                  - default_route_action.0.cors_policy.0.allow_origins
                  - default_route_action.0.cors_policy.0.allow_origin_regexes
                  - default_route_action.0.cors_policy.0.allow_methods
                  - default_route_action.0.cors_policy.0.allow_headers
                  - default_route_action.0.cors_policy.0.expose_headers
                  - default_route_action.0.cors_policy.0.max_age
                  - default_route_action.0.cors_policy.0.allow_credentials
                  - default_route_action.0.cors_policy.0.disabled
                item_type: Api::Type::String
              - !ruby/object:Api::Type::Array
                name: 'exposeHeaders'
                description: |
                  Specifies the content for the Access-Control-Expose-Headers header.
                at_least_one_of:
                  - default_route_action.0.cors_policy.0.allow_origins
                  - default_route_action.0.cors_policy.0.allow_origin_regexes
                  - default_route_action.0.cors_policy.0.allow_methods
                  - default_route_action.0.cors_policy.0.allow_headers
                  - default_route_action.0.cors_policy.0.expose_headers
                  - default_route_action.0.cors_policy.0.max_age
                  - default_route_action.0.cors_policy.0.allow_credentials
                  - default_route_action.0.cors_policy.0.disabled
                item_type: Api::Type::String
              - !ruby/object:Api::Type::Integer
                name: 'maxAge'
                description: |
                  Specifies how long results of a preflight request can be cached in seconds.
                  This translates to the Access-Control-Max-Age header.
                at_least_one_of:
                  - default_route_action.0.cors_policy.0.allow_origins
                  - default_route_action.0.cors_policy.0.allow_origin_regexes
                  - default_route_action.0.cors_policy.0.allow_methods
                  - default_route_action.0.cors_policy.0.allow_headers
                  - default_route_action.0.cors_policy.0.expose_headers
                  - default_route_action.0.cors_policy.0.max_age
                  - default_route_action.0.cors_policy.0.allow_credentials
                  - default_route_action.0.cors_policy.0.disabled
              - !ruby/object:Api::Type::Boolean
                name: 'allowCredentials'
                description: |
                  In response to a preflight request, setting this to true indicates that the actual request can include user credentials.
                  This translates to the Access-Control-Allow-Credentials header.
                default_value: false
                at_least_one_of:
                  - default_route_action.0.cors_policy.0.allow_origins
                  - default_route_action.0.cors_policy.0.allow_origin_regexes
                  - default_route_action.0.cors_policy.0.allow_methods
                  - default_route_action.0.cors_policy.0.allow_headers
                  - default_route_action.0.cors_policy.0.expose_headers
                  - default_route_action.0.cors_policy.0.max_age
                  - default_route_action.0.cors_policy.0.allow_credentials
                  - default_route_action.0.cors_policy.0.disabled
              - !ruby/object:Api::Type::Boolean
                name: 'disabled'
                description: |
                  If true, specifies the CORS policy is disabled. The default value is false, which indicates that the CORS policy is in effect.
                default_value: false
                at_least_one_of:
                  - default_route_action.0.cors_policy.0.allow_origins
                  - default_route_action.0.cors_policy.0.allow_origin_regexes
                  - default_route_action.0.cors_policy.0.allow_methods
                  - default_route_action.0.cors_policy.0.allow_headers
                  - default_route_action.0.cors_policy.0.expose_headers
                  - default_route_action.0.cors_policy.0.max_age
                  - default_route_action.0.cors_policy.0.allow_credentials
                  - default_route_action.0.cors_policy.0.disabled
          - !ruby/object:Api::Type::NestedObject
            name: 'faultInjectionPolicy'
            description: |
              The specification for fault injection introduced into traffic to test the resiliency of clients to backend service failure.
              As part of fault injection, when clients send requests to a backend service, delays can be introduced by Loadbalancer on a
              percentage of requests before sending those request to the backend service. Similarly requests from clients can be aborted
              by the Loadbalancer for a percentage of requests.

              timeout and retryPolicy will be ignored by clients that are configured with a faultInjectionPolicy.
            at_least_one_of:
              - default_route_action.0.weighted_backend_services
              - default_route_action.0.url_rewrite
              - default_route_action.0.timeout
              - default_route_action.0.retry_policy
              - default_route_action.0.request_mirror_policy
              - default_route_action.0.cors_policy
              - default_route_action.0.fault_injection_policy
            properties:
              - !ruby/object:Api::Type::NestedObject
                name: 'delay'
                description: |
                  The specification for how client requests are delayed as part of fault injection, before being sent to a backend service.
                at_least_one_of:
                  - default_route_action.0.fault_injection_policy.0.delay
                  - default_route_action.0.fault_injection_policy.0.abort
                properties:
                  - !ruby/object:Api::Type::NestedObject
                    name: 'fixedDelay'
                    description: |
                      Specifies the value of the fixed delay interval.
                    at_least_one_of:
                      - default_route_action.0.fault_injection_policy.0.delay.0.fixed_delay
                      - default_route_action.0.fault_injection_policy.0.delay.0.percentage
                    properties:
                      - !ruby/object:Api::Type::String
                        name: 'seconds'
                        description: |
                          Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive.
                          Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
                        at_least_one_of:
                          - default_route_action.0.fault_injection_policy.0.delay.0.fixed_delay.0.seconds
                          - default_route_action.0.fault_injection_policy.0.delay.0.fixed_delay.0.nanos
                      - !ruby/object:Api::Type::Integer
                        name: 'nanos'
                        description: |
                          Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are
                          represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
                        at_least_one_of:
                          - default_route_action.0.fault_injection_policy.0.delay.0.fixed_delay.0.seconds
                          - default_route_action.0.fault_injection_policy.0.delay.0.fixed_delay.0.nanos
                  - !ruby/object:Api::Type::Double
                    name: 'percentage'
                    description: |
                      The percentage of traffic (connections/operations/requests) on which delay will be introduced as part of fault injection.
                      The value must be between 0.0 and 100.0 inclusive.
                    at_least_one_of:
                      - default_route_action.0.fault_injection_policy.0.delay.0.fixed_delay
                      - default_route_action.0.fault_injection_policy.0.delay.0.percentage
              - !ruby/object:Api::Type::NestedObject
                name: 'abort'
                description: |
                  The specification for how client requests are aborted as part of fault injection.
                at_least_one_of:
                  - default_route_action.0.fault_injection_policy.0.delay
                  - default_route_action.0.fault_injection_policy.0.abort
                properties:
                  - !ruby/object:Api::Type::Integer
                    name: 'httpStatus'
                    description: |
                      The HTTP status code used to abort the request.
                      The value must be between 200 and 599 inclusive.
                    at_least_one_of:
                      - default_route_action.0.fault_injection_policy.0.abort.0.http_status
                      - default_route_action.0.fault_injection_policy.0.abort.0.percentage
                  - !ruby/object:Api::Type::Double
                    name: 'percentage'
                    description: |
                      The percentage of traffic (connections/operations/requests) which will be aborted as part of fault injection.
                      The value must be between 0.0 and 100.0 inclusive.
                    at_least_one_of:
                      - default_route_action.0.fault_injection_policy.0.abort.0.http_status
                      - default_route_action.0.fault_injection_policy.0.abort.0.percentage
  - !ruby/object:Api::Resource
    name: 'VpnTunnel'
    kind: 'compute#vpnTunnel'
    description: 'VPN tunnel resource.'
    input: true
    base_url: projects/{{project}}/regions/{{region}}/vpnTunnels
    collection_url_key: 'items'
    has_self_link: true
    references: !ruby/object:Api::Resource::ReferenceLinks
      guides:
        'Cloud VPN Overview': 'https://cloud.google.com/vpn/docs/concepts/overview'
        'Networks and Tunnel Routing': 'https://cloud.google.com/vpn/docs/concepts/choosing-networks-routing'
      api: 'https://cloud.google.com/compute/docs/reference/rest/v1/vpnTunnels'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/regions/{{region}}/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    parameters:
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'name'
        description: 'The region where the tunnel is located.'
        required: true
    properties:
      - !ruby/object:Api::Type::String
        name: 'id'
        description: 'The unique identifier for the resource. This identifier is defined by the server.'
        output: true
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. The name must be 1-63 characters long, and
          comply with RFC1035. Specifically, the name must be 1-63
          characters long and match the regular expression
          `[a-z]([-a-z0-9]*[a-z0-9])?` which means the first character
          must be a lowercase letter, and all following characters must
          be a dash, lowercase letter, or digit,
          except the last character, which cannot be a dash.
        required: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: |
          An optional description of this resource.
        input: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'targetVpnGateway'
        description: |
          URL of the Target VPN gateway with which this VPN tunnel is
          associated.
        resource: 'TargetVpnGateway'
        imports: 'selfLink'
        input: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'vpnGateway'
        description: |
          URL of the VPN gateway with which this VPN tunnel is associated.
          This must be used if a High Availability VPN gateway resource is created.
        resource: 'VpnGateway'
        imports: 'selfLink'
        input: true
      - !ruby/object:Api::Type::Integer
        name: 'vpnGatewayInterface'
        description: |
          The interface ID of the VPN gateway with which this VPN tunnel is associated.
        input: true
        send_empty_value: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'peerExternalGateway'
        resource: 'ExternalVpnGateway'
        imports: 'selfLink'
        input: true
        conflicts:
          - peer_gcp_gateway
        description: |
          URL of the peer side external VPN gateway to which this VPN tunnel is connected.
      - !ruby/object:Api::Type::Integer
        name: 'peerExternalGatewayInterface'
        description: |
          The interface ID of the external VPN gateway to which this VPN tunnel is connected.
        send_empty_value: true
      - !ruby/object:Api::Type::ResourceRef
        name: 'peerGcpGateway'
        conflicts:
          - peer_external_gateway
        description: |
          URL of the peer side HA GCP VPN gateway to which this VPN tunnel is connected.
          If provided, the VPN tunnel will automatically use the same vpn_gateway_interface
          ID in the peer GCP VPN gateway.
        resource: 'VpnGateway'
        imports: 'selfLink'
      - !ruby/object:Api::Type::ResourceRef
        name: 'router'
        description: |
          URL of router resource to be used for dynamic routing.
        resource: 'Router'
        imports: 'selfLink'
        input: true
      - !ruby/object:Api::Type::String
        name: 'peerIp'
        description: |
          IP address of the peer VPN gateway. Only IPv4 is supported.
      - !ruby/object:Api::Type::String
        name: 'sharedSecret'
        description: |
          Shared secret used to set the secure session between the Cloud VPN
          gateway and the peer VPN gateway.
        required: true
      - !ruby/object:Api::Type::String
        name: 'sharedSecretHash'
        description: |
          Hash of the shared secret.
        output: true
      - !ruby/object:Api::Type::Integer
        name: 'ikeVersion'
        description: |
          IKE protocol version to use when establishing the VPN tunnel with
          peer VPN gateway.
          Acceptable IKE versions are 1 or 2. Default version is 2.
        default_value: 2
      - !ruby/object:Api::Type::Array
        name: 'localTrafficSelector'
        description: |
          Local traffic selector to use when establishing the VPN tunnel with
          peer VPN gateway. The value should be a CIDR formatted string,
          for example `192.168.0.0/16`. The ranges should be disjoint.
          Only IPv4 is supported.
        item_type: Api::Type::String
      - !ruby/object:Api::Type::Array
        name: 'remoteTrafficSelector'
        description: |
          Remote traffic selector to use when establishing the VPN tunnel with
          peer VPN gateway. The value should be a CIDR formatted string,
          for example `192.168.0.0/16`. The ranges should be disjoint.
          Only IPv4 is supported.
        item_type: Api::Type::String
      - !ruby/object:Api::Type::KeyValuePairs
        name: 'labels'
        description: Labels to apply to this VpnTunnel.
        update_verb: :POST
        update_url: 'projects/{{project}}/regions/{{region}}/vpnTunnels/{{name}}/setLabels'
        min_version: beta
      - !ruby/object:Api::Type::Fingerprint
        name: 'labelFingerprint'
        description: |
          The fingerprint used for optimistic locking of this resource.  Used
          internally during updates.
        update_url: 'projects/{{project}}/regions/{{region}}/vpnTunnels/{{name}}/setLabels'
        update_verb: :POST
        min_version: beta
      - !ruby/object:Api::Type::String
        exclude: true
        name: 'detailedStatus'
        output: true
        description: 'Detailed status message for the VPN tunnel.'
  - !ruby/object:Api::Resource
    name: 'Zone'
    kind: 'compute#zone'
    base_url: projects/{{project}}/zones
    collection_url_key: 'items'
    has_self_link: true
    readonly: true
    description: 'Represents a Zone resource.'
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::NestedObject
        name: 'deprecated'
        description: 'The deprecation status associated with this machine type.'
        properties:
          - !ruby/object:Api::Type::Time
            name: 'deleted'
            description: |
              An optional RFC3339 timestamp on or after which the state of this
              resource is intended to change to DELETED. This is only
              informational and the status will not change unless the client
              explicitly changes it.
            output: true
          - !ruby/object:Api::Type::Time
            name: 'deprecated'
            description: |
              An optional RFC3339 timestamp on or after which the state of this
              resource is intended to change to DEPRECATED. This is only
              informational and the status will not change unless the client
              explicitly changes it.
            output: true
          - !ruby/object:Api::Type::Time
            name: 'obsolete'
            description: |
              An optional RFC3339 timestamp on or after which the state of this
              resource is intended to change to OBSOLETE. This is only
              informational and the status will not change unless the client
              explicitly changes it.
            output: true
          - !ruby/object:Api::Type::String
            name: 'replacement'
            description: |
              The URL of the suggested replacement for a deprecated resource.
              The suggested replacement resource must be the same kind of
              resource as the deprecated resource.
            output: true
          - !ruby/object:Api::Type::Enum
            name: 'state'
            description: |
              The deprecation state of this resource. This can be DEPRECATED,
              OBSOLETE, or DELETED. Operations which create a new resource
              using a DEPRECATED resource will return successfully, but with a
              warning indicating the deprecated resource and recommending its
              replacement. Operations which use OBSOLETE or DELETED resources
              will be rejected and result in an error.
            values:
              - :DEPRECATED
              - :OBSOLETE
              - :DELETED
            output: true
        output: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional textual description of the resource.'
        output: true
      - !ruby/object:Api::Type::Integer
        name: 'id'
        description: 'The unique identifier for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: 'Name of the resource.'
      - !ruby/object:Api::Type::ResourceRef
        name: 'region'
        resource: 'Region'
        imports: 'selfLink'
        description: 'The region where the zone is located.'
        output: true
      - !ruby/object:Api::Type::Enum
        name: 'status'
        description: 'The status of the zone.'
        values:
          - :UP
          - :DOWN
        output: true
      - !ruby/object:Api::Type::Array
        name: 'availableCpuPlatforms'
        description: 'The available CPU platforms in this zone'
        item_type: Api::Type::String
        output: true
  - !ruby/object:Api::Resource
    name: 'TargetGrpcProxy'
    kind: 'compute#targetGrpcProxy'
    base_url: projects/{{project}}/global/targetGrpcProxies
    collection_url_key: 'items'
    update_verb: :PATCH
    has_self_link: true
    description: |
      Represents a Target gRPC Proxy resource. A target gRPC proxy is a component
      of load balancers intended for load balancing gRPC traffic. Global forwarding
      rules reference a target gRPC proxy. The Target gRPC Proxy references
      a URL map which specifies how traffic routes to gRPC backend services.
    references: !ruby/object:Api::Resource::ReferenceLinks
          guides:
            'Using Target gRPC Proxies': 'https://cloud.google.com/traffic-director/docs/proxyless-overview'
          api: 'https://cloud.google.com/compute/docs/reference/rest/v1/targetGrpcProxies'
    async: !ruby/object:Api::OpAsync
      operation: !ruby/object:Api::OpAsync::Operation
        kind: 'compute#operation'
        path: 'name'
        base_url: 'projects/{{project}}/global/operations/{{op_id}}'
        wait_ms: 1000
      result: !ruby/object:Api::OpAsync::Result
        path: 'targetLink'
      status: !ruby/object:Api::OpAsync::Status
        path: 'status'
        complete: 'DONE'
        allowed:
          - 'PENDING'
          - 'RUNNING'
          - 'DONE'
      error: !ruby/object:Api::OpAsync::Error
        path: 'error/errors'
        message: 'message'
    properties:
      - !ruby/object:Api::Type::Time
        name: 'creationTimestamp'
        description: 'Creation timestamp in RFC3339 text format.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'name'
        description: |
          Name of the resource. Provided by the client when the resource
          is created. The name must be 1-63 characters long, and comply
          with RFC1035. Specifically, the name must be 1-63 characters long
          and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` which
          means the first character must be a lowercase letter, and all
          following characters must be a dash, lowercase letter, or digit,
          except the last character, which cannot be a dash.
        input: true
        required: true
      - !ruby/object:Api::Type::String
        name: 'description'
        description: 'An optional description of this resource.'
      - !ruby/object:Api::Type::String
        name: 'selfLinkWithId'
        description: 'Server-defined URL with id for the resource.'
        output: true
      - !ruby/object:Api::Type::String
        name: 'urlMap'
        description: |
          URL to the UrlMap resource that defines the mapping from URL to
          the BackendService. The protocol field in the BackendService
          must be set to GRPC.
        input: true
        update_id: 'urlMap'
        fingerprint_name: 'fingerprint'
      - !ruby/object:Api::Type::Boolean
        name: 'validateForProxyless'
        input: true
        description: |
          If true, indicates that the BackendServices referenced by
          the urlMap may be accessed by gRPC applications without using
          a sidecar proxy. This will enable configuration checks on urlMap
          and its referenced BackendServices to not allow unsupported features.
          A gRPC application must use "xds:///" scheme in the target URI
          of the service it is connecting to. If false, indicates that the
          BackendServices referenced by the urlMap will be accessed by gRPC
          applications via a sidecar proxy. In this case, a gRPC application
          must not use "xds:///" scheme in the target URI of the service
          it is connecting to
      - !ruby/object:Api::Type::Fingerprint
        name: 'fingerprint'
        description: |
          Fingerprint of this resource. A hash of the contents stored in
          this object. This field is used in optimistic locking. This field
          will be ignored when inserting a TargetGrpcProxy. An up-to-date
          fingerprint must be provided in order to patch/update the
          TargetGrpcProxy; otherwise, the request will fail with error
          412 conditionNotMet. To see the latest fingerprint, make a get()
          request to retrieve the TargetGrpcProxy. A base64-encoded string.