cloudPlatformScope _requester organizationsprojects locations addressGroupsfirewallEndpoints operationssecurityProfileGroupssecurityProfilesaddItems cloneItemscreatedeletegetlistlistReferencespatch removeItemscancelauthorizationPolicies authzPoliciesbackendAuthenticationConfigsclientTlsPoliciesdnsThreatDetectorsfirewallEndpointAssociationsgatewaySecurityPoliciesinterceptDeploymentGroupsinterceptDeployments"interceptEndpointGroupAssociationsinterceptEndpointGroupsmirroringDeploymentGroupsmirroringDeployments"mirroringEndpointGroupAssociationsmirroringEndpointGroupsserverTlsPoliciestlsInspectionPoliciesurlLists getIamPolicy setIamPolicytestIamPermissionsrulesitems requestIdtoJsoncapacity createTime descriptionlabelsnamepurposeselfLinktype updateTimeactionprotocolcustomProvider httpRulestargetfromtowhen notSourcessourcesipBlocks principals resourcesvaluelengthprefix principalprincipalSelectoriamServiceAccount tagValueIdSetidscontainsexact ignoreCasesuffix notOperations headerSethostsmethodspathsheadersauthzExtensioncloudIaploadBalancingSchemeclientCertificateetag trustConfigwellKnownRootspluginInstanceserverValidationCasnisourceAddressGroupinterceptEndpointGroupmirroringEndpointGrouphttpHeaderMatchportsexcludedNetworksproviderassociatedNetworks associationsbillingProjectIdendpointSettings reconciling satisfiesPzi satisfiesPzsstatedisabledfirewallEndpointnetworktlsInspectionPolicyjumboFramesEnabledapplicationMatcher basicProfileenabledprioritysessionMatchertlsInspectionEnabledcertificateProviderInstance grpcEndpoint targetUriauditLogConfigsservice conditionmembersrole auditConfigsbindings etagAsBytesversionpolicy updateMask headerName regexMatchforwardingRuleinterceptDeploymentGroupconnectedEndpointGroupsnestedDeploymentsconnectedDeploymentGrouplocationsDetailsaddressGroupReferences nextPageTokenfirewallPolicy rulePrioritysecurityPolicy unreachablegatewaySecurityPolicyRulesclientValidationCaclientValidationModeclientValidationTrustConfigmirroringDeploymentGroupconnectedDeploymentGroupsdoneerrormetadataresponse destinationscustomInterceptProfilecustomMirroringProfilethreatPreventionProfile dataPathId allowOpen mtlsPolicyserverCertificateseveritythreatIdantivirusOverridesseverityOverridesthreatOverridescaPoolcustomTlsFeaturesexcludePublicCaSet minTlsVersiontlsFeatureProfilevaluesNetworkSecurityApiOrganizationsResourceOrganizationsLocationsResource+OrganizationsLocationsAddressGroupsResource/OrganizationsLocationsFirewallEndpointsResource(OrganizationsLocationsOperationsResource3OrganizationsLocationsSecurityProfileGroupsResource.OrganizationsLocationsSecurityProfilesResourceProjectsResourceProjectsLocationsResource&ProjectsLocationsAddressGroupsResource.ProjectsLocationsAuthorizationPoliciesResource&ProjectsLocationsAuthzPoliciesResource5ProjectsLocationsBackendAuthenticationConfigsResource*ProjectsLocationsClientTlsPoliciesResource+ProjectsLocationsDnsThreatDetectorsResource5ProjectsLocationsFirewallEndpointAssociationsResource*ProjectsLocationsFirewallEndpointsResource0ProjectsLocationsGatewaySecurityPoliciesResource5ProjectsLocationsGatewaySecurityPoliciesRulesResource2ProjectsLocationsInterceptDeploymentGroupsResource-ProjectsLocationsInterceptDeploymentsResource;ProjectsLocationsInterceptEndpointGroupAssociationsResource0ProjectsLocationsInterceptEndpointGroupsResource2ProjectsLocationsMirroringDeploymentGroupsResource-ProjectsLocationsMirroringDeploymentsResource;ProjectsLocationsMirroringEndpointGroupAssociationsResource0ProjectsLocationsMirroringEndpointGroupsResource#ProjectsLocationsOperationsResource*ProjectsLocationsServerTlsPoliciesResource.ProjectsLocationsTlsInspectionPoliciesResource!ProjectsLocationsUrlListsResourceAddAddressGroupItemsRequest AddressGroupAntivirusOverrideAuthorizationPolicy AuthzPolicyAuthzPolicyAuthzRuleAuthzPolicyAuthzRuleFrom%AuthzPolicyAuthzRuleFromRequestSourceAuthzPolicyAuthzRuleHeaderMatchAuthzPolicyAuthzRuleIpBlockAuthzPolicyAuthzRulePrincipal#AuthzPolicyAuthzRuleRequestResource0AuthzPolicyAuthzRuleRequestResourceTagValueIdSetAuthzPolicyAuthzRuleStringMatchAuthzPolicyAuthzRuleTo&AuthzPolicyAuthzRuleToRequestOperation/AuthzPolicyAuthzRuleToRequestOperationHeaderSetAuthzPolicyCustomProvider'AuthzPolicyCustomProviderAuthzExtension!AuthzPolicyCustomProviderCloudIapAuthzPolicyTargetBackendAuthenticationConfigCancelOperationRequestCertificateProviderInstanceClientTlsPolicyCloneAddressGroupItemsRequestCustomInterceptProfileCustomMirroringProfile DestinationDnsThreatDetectorEmptyExprFirewallEndpointFirewallEndpointAssociation$FirewallEndpointAssociationReference FirewallEndpointEndpointSettingsGatewaySecurityPolicyGatewaySecurityPolicyRule/GoogleCloudNetworksecurityV1CertificateProvider(GoogleCloudNetworksecurityV1GrpcEndpointGoogleIamV1AuditConfigGoogleIamV1AuditLogConfigGoogleIamV1BindingGoogleIamV1PolicyGoogleIamV1SetIamPolicyRequest$GoogleIamV1TestIamPermissionsRequest%GoogleIamV1TestIamPermissionsResponseHttpHeaderMatchInterceptDeploymentInterceptDeploymentGroup.InterceptDeploymentGroupConnectedEndpointGroup"InterceptDeploymentGroupDeploymentInterceptEndpointGroup!InterceptEndpointGroupAssociation(InterceptEndpointGroupAssociationDetails0InterceptEndpointGroupAssociationLocationDetails.InterceptEndpointGroupConnectedDeploymentGroupInterceptLocation"ListAddressGroupReferencesResponse7ListAddressGroupReferencesResponseAddressGroupReferenceListAddressGroupsResponse!ListAuthorizationPoliciesResponseListAuthzPoliciesResponse(ListBackendAuthenticationConfigsResponseListClientTlsPoliciesResponseListDnsThreatDetectorsResponse(ListFirewallEndpointAssociationsResponseListFirewallEndpointsResponse#ListGatewaySecurityPoliciesResponse&ListGatewaySecurityPolicyRulesResponse%ListInterceptDeploymentGroupsResponse ListInterceptDeploymentsResponse.ListInterceptEndpointGroupAssociationsResponse#ListInterceptEndpointGroupsResponseListLocationsResponse%ListMirroringDeploymentGroupsResponse ListMirroringDeploymentsResponse.ListMirroringEndpointGroupAssociationsResponse#ListMirroringEndpointGroupsResponseListOperationsResponse!ListSecurityProfileGroupsResponseListSecurityProfilesResponseListServerTlsPoliciesResponse!ListTlsInspectionPoliciesResponseListUrlListsResponseLocation MTLSPolicyMirroringDeploymentMirroringDeploymentGroup.MirroringDeploymentGroupConnectedEndpointGroup"MirroringDeploymentGroupDeploymentMirroringEndpointGroup!MirroringEndpointGroupAssociation(MirroringEndpointGroupAssociationDetails0MirroringEndpointGroupAssociationLocationDetails.MirroringEndpointGroupConnectedDeploymentGroupMirroringLocation OperationRemoveAddressGroupItemsRequestRuleSecurityProfileSecurityProfileGroupServerTlsPolicySeverityOverrideSourceStatusThreatOverrideThreatPreventionProfileTlsInspectionPolicyUrlList ValidationCAApiRequestErrorDetailedApiRequestError ApiRequesterClientStringrootUrl servicePathrequestHeaders$fieldsFuturejsonencodeListUri encodeFullrequestbody queryParamsfromJsonMapdynamicaddressGroupId requestIdpageSize pageTokenreturnPartialSuccessintbool updateMaskfirewallEndpointIdfilterorderBysecurityProfileGroupIdetagsecurityProfileIdextraLocationTypesoptions_requestedPolicyVersionauthorizationPolicyId authzPolicyIdbackendAuthenticationConfigIdclientTlsPolicyIddnsThreatDetectorIdfirewallEndpointAssociationIdgatewaySecurityPolicyIdgatewaySecurityPolicyRuleIdinterceptDeploymentGroupIdinterceptDeploymentId#interceptEndpointGroupAssociationIdinterceptEndpointGroupIdmirroringDeploymentGroupIdmirroringDeploymentId#mirroringEndpointGroupAssociationIdmirroringEndpointGroupIdserverTlsPolicyIdtlsInspectionPolicyIdforce urlListIditemsmapvaluetoListcapacity createTime descriptionlabelsMapEntrykeynamepurposeselfLinktype updateTimeactionprotocolrulesthecustomProvider containsKey httpRulestargetfromtowhen notSourcessourcesipBlocks principals resourceslengthprefix principalprincipalSelectoriamServiceAccount tagValueIdSetidscontainsexact ignoreCasesuffix notOperations operations headerSethostsmethodspathsheadersauthzExtensioncloudIap$EmptyloadBalancingSchemeclientCertificate trustConfigwellKnownRootspluginInstanceserverValidationCasnisourceAddressGroupinterceptEndpointGroupmirroringEndpointGrouphttpHeaderMatchportsexcludedNetworksprovider$Expr DeprecatedassociatedNetworks associationsbillingProjectIdendpointSettings reconciling satisfiesPzi satisfiesPzsstatedisabledfirewallEndpointnetworktlsInspectionPolicyjumboFramesEnabledapplicationMatcher basicProfileenabledprioritysessionMatchertlsInspectionEnabledcertificateProviderInstance grpcEndpoint targetUriauditLogConfigsservice$AuditLogConfig conditionmembersrolebase64decode replaceAll auditConfigsbindingsversionpolicy$TestIamPermissionsRequest00$PermissionsResponse headerName regexMatchforwardingRuleinterceptDeploymentGroupconnectedEndpointGroups locationsnestedDeploymentsconnectedDeploymentGrouplocationsDetails($EndpointGroupAssociationLocationDetails $Location02addressGroupReferences nextPageTokenfirewallPolicy rulePrioritysecurityPolicy addressGroups unreachableauthorizationPolicies authzPoliciesbackendAuthenticationConfigsclientTlsPoliciesdnsThreatDetectorsfirewallEndpointAssociationsfirewallEndpointsgatewaySecurityPoliciesgatewaySecurityPolicyRulesinterceptDeploymentGroupsinterceptDeployments"interceptEndpointGroupAssociationsinterceptEndpointGroupsmirroringDeploymentGroupsmirroringDeployments"mirroringEndpointGroupAssociationsmirroringEndpointGroupssecurityProfileGroupssecurityProfilesserverTlsPoliciestlsInspectionPoliciesurlLists $Location00clientValidationCaclientValidationModeclientValidationTrustConfigmirroringDeploymentGroupconnectedDeploymentGroupsObjectdoneerrormetadataresponse destinationscustomInterceptProfilecustomMirroringProfilethreatPreventionProfile dataPathId allowOpen mtlsPolicyserverCertificateseverity $Status00threatIdantivirusOverridesseverityOverridesthreatOverridescaPoolcustomTlsFeaturesexcludePublicCaSet minTlsVersiontlsFeatureProfilevalues{1"0uQR^=jApiRequestErrorDetailedApiRequestError:package:_discoveryapis_commons/_discoveryapis_commons.dartasync dart:asyncconvert dart:convert$69core9 dart:coreAcommons:package:_discoveryapis_commons/_discoveryapis_commons.darthttppackage:http/http.dart../shared.dart../src/user_agent.dart-e`GHmЀ)[ʂ*`aǂ˃7`Ԅ I/bۆUɇ LΈ J̉ 9pى#?@ӊ9lm؋#[\֍.Hٍ+578V134[ȐRґDc56tƒ;VW}ғؔ%\EU[֕:oܖ3s.:H[|ԘؘٙDJdj!?ٚjw}Μ)Tt˝ @GHȝԝnrs `9ѠE/zʣi=CȤΥ,2ڥ/Ker-i#/=PqxɨͨΨbƪ`J5ѭ X^:GMӮ )CP̰ @Aq} 9?Y_W]TsTzT{TTTUUU)UJUQUUUUUV V VZVuVvVVVVWWWDWWWX-X\XbXXYJYYZ2ZZ[[m[[[\\ \0\6\\\\] ]B]`]z]]]]^^R^^^^_._5_6______`` `]`a`b``````aBaHaab0b}bcchcddSdddddeeemezeeff(f@f\fvfffg4g;g<gsgtgggggh9h=h>hghmhhhhi&i,iwiiiijjj"jsjjjkk kMkkkkkkkl l,l3lYlllllllmmCmmmmmnnQnnnoooQoaogooopp pZppppqq(qDq^qkqqrrRrrrrsssLsXsesssssttt$t*tYt_tytttu"u(usuvv]vvwHwwx3xkxqxyy]yyyz3zCzIzmzszzz{({]{~{{{{|||D|||}4};}<}s}t}}}}}}~K~O~Q~R~~~~U[C.~7U"(y0Tl8?@ VZ[$kq6<!'x<qxy%rvw+1KQ9IOsy.c(/0gh*./v|+v|l Q4:#062Ns K29:W^bde#>?:` TdjI~,\HOPa +2*Zi"s .F]w&-.ef+/0ekTr$*Y_Is'./fg:AEFM'7=z<B6CI!9Uo|6krs :Ax06PV)G=-3W]GhV :FUhHI28RX:@/W]9FL+Oiv-N %8Y`±µ¶U~-3ĀĨĮ 39Ŋŗŝ#E]tƎƛ=DE|}ǭǹBFGw}ȗȝYw$*TZʫʸʾDiˁ˛˨$%\]̙̦̍+267z͚̀͠4nιο \Ϭeu{ви mѢ#=JҊ9@AӐӑ4lswxԲԸ \Վ:@֎(io׺KX^د":Wq~ٮ-bijڡڢ!(y}ۀۙegh܊ܴܳ,zݼ4lޒ!_ߧDDeG>%Z}P <]V$X(.] -3l !Q]j/5 j17B,MS;KQ<q2LY;w+7Del 56|f06%v2?o9:jvKQ,]{ &JP:`Bw~ ,MT"(BHk&,waL7ou  Q ^ d    & @ a }     _     $ % U a o       & , F L   BH0}hSmz(@\v4;<st9=>lr#Ajw}%=WdIUb%+{ Y;kV/5  & , }   !,!F!S!!!"'"\"c"d"""""####J########$A$$$$%0%6%%&&&i&&&&&'3'9''''(#(S(m((((()-)k)))**R*Y*Z*****+++G++++++++,,,c,,,,-K--.1.7.....//>/D////0.0q000001,1j111112>2?2o2{22223 3'3+3,3d3j333344I4g4445J5561667 7m7778H889,9o9u9999::Q:^:d::; ;%;=;Y;v;;;< > >9>?>Y>_>>??7?{????@@ @]@j@p@@AAIAiAAABB5B<B=BBBBBBC CCdChCiCCCD%D+DZD`DzDDDE-EYEwEEF FF"FNFTFFFG G>GnGGGGH HMHHHHHIII"I5IVI]IIIIIJJJ\JJKJKPKKKKKL LYLLLLM8MHMNMMMMMNIN~NNOO0O=OmOOOOOPEPFPvPPPPPQQ>QEQIQKQLQQQQRRR`RfRRRRS SMSSST2TTTUUUU>UDUUUUV.VPVqVVVVW WJWWWWWWX XWXXXXXXXXY.Y2Y3Y_YeYYYZ&Z3ZQZZZZ[[([.[[[[\\:\R\l\y\\\\]-].]^]j]z]]]]]^,^2^L^R^^^__g_m____``S```f``aa-aGaTaaaabb b9bEbRbsbzbbbbbcc"crc}ccccddPd|ddde:eeffjfggUggh.h4hhhhhii%i+i|iiij+jEjRjjjk&k[kbkckkkkkll"lIllllllllm9mmmmnKnQnno"oFoLooooop@pMpSppqq+qCq_qyqqrr@rur|r}rrrs ss#sDsKssssstt t9t?tYt_ttuugumuv vYvvvw:wJwPwtwzwwwx/xdxxxxxyy2yryyyyz%z&zVzbzqzzzz{{{B{H{{{{{|||a|v||}}\}b}}}}}~F~S~Y~~;Wq~#*+xy%]dhiM &@F&D7='qV+9Lmt$MN&,FL'-~2mY,2V\Fh.n'./{|RVW{Vt WA-~AQW{6k(d %FMFW XhnO$Y`a +cjno %+s"flP7#SAG1a}bs01amz  HNhn/u{DYio ^(D^kRHTa28gmB`C-~j1}DJ&39-Jdq\ /PWCio !qP`fM!QLXfyš¡  SYà@ĎĔ8Mŝ+1|ƌƒ)6<Ǎ >Ztȁȱ&-.?ɉɊɺJʂʉʍʏʐ1Rmn˿P̵̗E͔8>ΉΙΟ'-~ϳHboП->kѠѧѨѹLXfyҚҡ-PVpv.Lԟԥaqw՛աV֋֭Cpץ׬׭!1RYتخد06ن٫ \bڭڽP]c۴2LYܙ >JWxݰ>D^dާ fl߼K"28{6k_'7`9qx|}#=C1)y_ouT"/_RS*.01d9?ntci X cpv;UyFWx6BPc )/06%v L .5/y0@Fpv+`9@AxyGNRS WlNT8m ;)/IeJ[IUb4:TZ  Q W    , |      4 :     $ X r      K    EQ^7=lrDbJ(.y n0=m!()`a8<=}.4NT-K&,}Fr%Zab .5\4"(W]w}1]{  $ * j p   !%!Z!!!" ""I"""""#!#"#R#^#l####$$!$%$'$($\$$$$$%4%:%i%o%%%%&2&8&y&&&'4'D'J'v'|'''(1(f(((() ))F))))*)*0*1******+++/+g+n+r+s++++,,",k,q,,,,,-I-V-\--.1.q.....//"/2/S/Z/////000I0g001111C1I1111232Z2r2223333M3N3~3333344%4)4*4j4p4445'5-5y5556$6m666667$7*7{77788I8c8{88889<9x999:::7:C:P:q:x:::::;; ;O;U;o;u;;<*<0<<==n==>>>$>P>V>>>? ?@?i?????@@T@@@@AAA8ADASAfAAAAAAAAB9BbBcBBBBC*C0C_CeCCCCCDMDDDE-E{EFFbFGGQGGH%H+HvHHHHIIIIkIIIJJ5JQJkJxJJK6KGKtKKKKKLL7L`LaLLLLLLM7M;M<MpMvMMMMN5N;NNO#OpOP P[PPQFQ~QQQQR RR`RmRsRRSS3SOSiSvSST'T.T/TfTgTTTTTU,U0U1UmUsUUUUV2V8VVVVVW&W3W9WWWXX"X/XoXXXXXYY Y-YNYUYYYYYZZ Z$Z*ZnZZZZ[!['[w[[\\&\,\w\\\\]']4]:]]]^^2^L^d^^^^__P___````(`Q`z`{`````a*abaiamanaaaaaab3bQbbbcCccd*dzdeefeeefAffg$gggmggggghIhVh\hhii,iDi`i}iiijjPjjjjkkk4k@kOkbkkkkkkll>l?lllllm m&m@mFmsmmnnWnnno%otop p\ppqHqqqr r0r6rZr`rrrssJslssssst t<t|tttu#uXu_u`uuuuuvv/v6vvvvvvvwwwgwmwxxUxxy=yyz)zxzz{{{{;{A{{{{|+|M|e||||}$}Y}`}a}}}}}~~ ~^~b~c~~~~~~FL/<B -m+LSy"cl !l|$u+C_y/m67gs?Etz8>&s^I$sIY_>s*ZJQR aeghYZFLflFLZ| ^kq<VYj,-]iw6<V\,z \io/IV  ;GWx +1LR:GM0=}".;\c7=?Ec:@*d~W./_kx]c[/5k>D.Or>}".=Pqx78q.4NT Y_7=&,}C]j$5`,?`gf} ioKX^8E*6Fgn¿$tPVġıķBOUŦ "<IƉƾ.:GhoǞ*0JPȠ\z(.aʩ-3~ˎ˔,9?̐4Pjwͷ1fmnβγ$`ϘϟϣϤ#=CЍФa/z_eӰANTԥ":Wq~ծ-bij֢֡!(y}׀׻<WXؚؠ!qٳHژڵڻ Yیےn{܁)Oiݖݲ Iޑޢ=DEVߥߦ$+|.L@syUbh(D^k#$[\!%&NTzTr#)\bLz.56mn ELPQ2t%bh+zE#n~(. #=Uq A XY=DHIkq=WIO &n "(sh5O\G|;BGbc &sNAtzVci2Lt'ev %opFJKgmPV'-x    m       _       @ L \ }       ( . H N    Z `     FSY :G,8Efm?E_e+qwY_5; Y9?)`zH{+`ghy .5k,2LR8VEx~ ZntP]c  + C _ |   !!O!!!!"""3"?"N"a""""""#%#N#O####$ $$5$;$j$p$$$%%c%i%&&T&^&d&''5';'''''(($(*({(()))Q)m)))**1*h*y**++$+%+6+F+o++++++,,$,u,y,z,,,,,,--<---.9.l.r...../N/[/a//0 0!0=0W0d001111T1U111112222B2H2n2t2223V3t3344.444p4v4445+5`555566K6R6S6666666737k7r7v7w7777788H889 99A9~9999:G:::;;_;;<5<;<<<<<=<=I=O==>>4>M>g>>>>??5?k??@@!@"@3@C@l@@@@@AA AQAAAAAAAABBB4B:BBC CBC`CCD D]DDDE%EdEEEEEF"F(FyFFFGG3GbGzGGGGH HJHHHIII9I:IjIvIIIIJJJJJQJzJ{JJJK(K.KTKZKKKKLL?LLLM"M7M=MMNNN_NoNuNNNNOOTOOOOPP0PJPWPPQ QQDQQQQQRRRLRXRfRyRRRRRSSSDSJSdSjSST TTaTTTU5UEUKUoUuUUUV*V_VVVVVWWXWWWWWWX XX:XAXXXXXXXY YY\YYZ)Z/ZzZZZZ[[%[+[|[[[\\\\\\\\\]] ]];]B]n]]]]]]^^!^;^A^^__J_P____`2`8``aaaYaab8bvb|bbbcc!crcccd dEd_dxddddde-e`eeffEfLfMf^fffffgggVgggggggghh"h<hBhhhi'iEiiij7jjjpjkkPkhknkkkkklJlWl]llmm(m@m\mymmmnnLnnnnnoo0o<oKo^ooooooppBpCpypppppq$q*qYq_qyqqrrWr]rrsssgssst;tKtQtut{tttu0ueuuuuvv*v7vgvvww*wfwwwwxxx4x@xNxaxxxxxyyy-y3yMySyyyzzNzzz{"{2{8{\{b{{{||L|n||||} }E}z}}}}}}~~'~.~~~~~~~~~M &q$u W6=k :@KQ39Z={"(yNh6iNUVg!(c*0JP9WK~h bouBZv*fJVex.WX)/^d~V\O#39]cMoE5jqr +LSEcRgtz":Vp}.56mn378Z`Om MS=f~!"YZ,378qwVDJ{ \-kFV\R #?YfM!"R^k  )/U[_S$j-3W]Gh1q!()`a8<>? ()gm<{b`$u0_y"b F{ÂÃÔä-9GZ{Ă"(BH|ŚGƗ+1U[ǬǹǿEgțȵ>sz{ɲɳ 'x|}ʠʦ<˴+1|̌̒%28͉; '4tΩΰα%2SZϑ;A[aЦ!gmџOUҥ+1vӽUԓԙCI՚էխ3x֒֫ `דCx؀ؑء*6Cdkٯ=Crxڒژi۠۾kܻ<݃FV\ހކ;pߑ+8h#X_`osuv)DE ^59lrN[a -Gr%iz,yzPTUv|kqBH$17-:z*+[gw!GMgm9%v;Smz./_kx MSy/b#T5lrG%5;y4i$>K2n  :FSt{EKzRE`'-QW Ab.n%&]^59;<h 5 ;   # q   ^ y       5 v |      T a g   /Gan^_156^dFLfl ]msNGNOHLM!'Zx  DJ489iuGMBHsy8lQagS  ? Y f  !!S!!!!"""M"N"~"""""###*#.#0#1#d#####$9$?$n$t$$$%%c%i%& &X&&&&&' ''c'p'v''((;(U(y((())F)W)x)))***6*B*P*c*****+ ++)+/+++,0,6,,,,,---%-v----. .L......./ /./5///////0/0y000101@1F1p1v1112+2`22223393@3A3x3y3333344G4N4R4S444445 55W5l5566N6T66787788m89 9;99999:):/::::;;I;e;;;;4>:>T>Z>>? ?Q?W???@,@|@@@A6AvAB B4B:BBBBBC*C7C=CCCDD)DEDjDDDEEKEEEEEEFNFOFFFFFFG+G2G6G7GqGwGGGGHH6HyHHHI3IIJJ]JcJJJJJK?KLKRKKKLL.LKLeLrLLM!MVM]M^MMMMMMNNNmNqNrNNOO.O4OcOiOOOOP6PbPPPQQ)Q/Q[QaQQQRRKR{RRRRSSZSSSSSTT!T/TBTcTjTTTTTUU"UiUV VWV]VVVVWWWfWWWWXIXYX_XXXYY YZYYZ Z'ZAZNZ~ZZZZ[ [V[W[[[[[[\\O\V\Z\\\]\\\] ]'](]q]w]]]]^^^^^^_C___``/`5`Y`_```aaIakaaaaab%bebbbcccc'crcsccccccdIdMdNdzddddeeaeeef"fbfffffgggmgzgghh(h@hVhph}hhi'i.i/ifigiiiiij,j0j1jejkjjjjkIkgkkllllHlNlllmm8mamymmmnnnnTnUnnnnnno'o.o2o3ovo|ooop%pVppppq*qzqqqr=rMrSrrrrrsJssssttt,tlttuu"u#u4uuuuuuuv(v`vgvkvlvvvvvwwHwwx x(xtxzxyyfyyyzGzWz]zzzzz{<{q{{{{|||?|||||}2}3}c}o}~}}}~ ~~~~;~d~e~~~~4:TZ!'w%+vk '4dde;?@`f.msO\b "<I.:JkrcK[a>s6=>uv6:;qwD"rCI3^xQBN[|#)X^x~8q"s DJ&39 *DQ5<=tuLPRS39#n]17GabD[HLNONTg/0sy5;K`a'@Afl:OP(7I\k&a)mx !VCm )Q^{<Qry}AGWy dEw8Ut  =>kw8\ U$*:\*ABu{  TZj06F[\zn &ABZkNVa7E\Bb~ .G\s.Bqwf·PáCĒ0iũ6RijƝƣƶMǘǞǮ&BCȓș8u{ɋɹɺ2w}ʍʻʼdjzˏːGM`{|̝̲̌&;ABiuͦMΝέ2E}ϻAЅАн[kѸ;kҕһ?Leӆӯ 8Y`dfgԝԺ'(]csՑՒ@օ֋ְֱ֛'O׀=؁ؑإ )A]ٓٗٙٚ4:ڊ+,ci۵Pܠ,-jkݟݫ?}ގޜ޳Aߐߞߵ߾߿:w{}~.LRgW6HI78bu&9x$7x"5|+OwIq "LM(`"@mqst,2BYZ8ABs0VQWg<BRtK9eB)w^D|2;<mk%+;qr _`PM Dz f:45uv+BKL}TZ@FPs  J a b     6 7 [ n ~        8 g      ; _ }      & G ` y      (.}12rxXST%o.x'U} :syGDJ!'7Z[#qEFq >#6yRi+<Jajk -Lc~  J P  !8!n!t!!!!""K"W"""##.#<#S#\#]######$"$2$T$$$$$%4%5%k%q%&&O&&&&' ' 'P'Q'''((^(n((()6)F)Z)c)d)))*0*4*6*7*w*{****+J+o+u+++++,,,V,b,,,,,--C-i-m-o-p---.9....//:/;///0#0)0u00011*1s112M2233+3,3|3333344 464B4445 555H5555666666b6677 7[778H889"9F999:&:w::::; ; ;=;C;V;q;r;;;;;;;<<<>h>??E?K?[?w?x?????@!@C@@@AEAAB2BBBBC C'C<CRCaCrCCCCCCDDDVDDDEGEEEEF7FxFFFFGG;GWGwGGGHH"HQHrHHHHHIIEILIPIRISIIIIIJBJJJK"KsKKKLL LL8L9LoLpLLLMMNM~MMMMNNNUNuNNOO O5O;OKOOOOOOOP'P-P=PYPZPPPPPQQQ$QzQQQQQRR"RcRiRyRRRSSS)S/S?SSSTSSSSSSSTTT(T7TTTbTwT}T~TTTU?UjUUUVV>VVVW WRWeWWWWX X4XmXvXwXXYY0YPYlYYYYZ"ZCZfZZZZZ[[[[[>[d[[[\:\\]"]r]^^]^^^^^^^_ _/_0_|_}___`B`K`L`}``a,a0a2a3aaaabb bqbbbbcc9c:clcxcccddDddddddee7e`efeef ff,fSfTffffgg&g'gXggggghh(hKhQhhi6iVi\iliiiijjhjjjkk&k'kNkTkkkkkll l1l7lGlelfllllmmHm_mmnn&n:nlnnnoo+o4o5ofoooopppEp`pwp~ppppqqqfqqqqqrrrLrerkrrrrrs=sJsPs`sssssssttt3t9tItkttttuuu1uLuMucuxuuuuuuuvvvTvvvw2wvwwwxx%x&xWxxxxyy;yHyiyyyyzz z zzz]z~zz{"{A{Y{Z{{{||O||}.}r}~ ~U~~9%>6&'x~<=ms%GM]yzLM_e} 9:Y_r  Bi,-EK^yz $5DZq4g~SdrB!1EJ(12c#M?]6Y!8Y`dfg-3jp06Ftu67q*QuG]^ ()I^qUabJy8`@^ 8Qfi ]cvbcJf:@^dhi Q<BRno :sy(.>bc=RXY 7Hd,_&Hj'-=_34Z`s)?@\bFLg|}8>NmnABhn,;Ng,i;m2;<m#Ea&W| 6k2j FGBY_`M[R~)Z…‹;<Àûü9=?@uydųOƜ8~fȲB{|ɾ Mefʦʧ':w˵'(Y̭̋=A̓R·ΈhϸPИа msѺ WҧDӊFԖԭ%sYր,ג׿A؃٧eڍ0},y_݈'Cޒo6!j  QW-b-9k)\s#?T=#m9mE`<{aTnQ<="qZC6Nl_N+|b+@AWn1k&\-67h(EZu|$uAG56p|*>w59;<q;<o Vrx ;#9?Ojk  L U V       ! g    . L h        : @ u {     > D j p    CIou KL^d$*;PQ+`fy&o)y`@VW1G` Y6;j0` (P]~ 5Xo\}56ioOUe   W ] p     !D!w!}!!!!!"""Z"^"""#%#+#Q#W#r###$$$f$$$$$$$%$%*%=%_%%&&R&h&i&&&&&'''3'U'j'''''''(((#($(X(d(((()E))))* *E***++-+b++++,,I,\,,,,--I-----.%.g....//Q/s////0+0L0o000011)1@1a1h1l1n1o112!2l2r22222333Q333333334(4S4445555K5Q5d5566S667)7q788\88888959A9n99999::?:C:E:F:::;3;;;;;<>#>3>O>P>>>>?!?'?B?k?l?????@@@S@@@@AAAMAAAB BB%B?B@BoBuBBBBCCjCCDD7DqDDECEEEFKFFFGGGGGMG~GGGGGGHHH3HVHgHvHHHHHHHI2IEIIIIJJUJJK KK.KgKKLLSLLLMM7MpMyMzMMNNCNmNNNOO5O]OjOOOPPMPfP{PPPPPPPQ1QYQ]QQRDRRRRSS S3SNSOSSSTTT4T[T\TTTTTU/U5UyUUUUUVVNVVVVVVWJWKW]WcWXXEXKX\XqXrXXXY YY-YEYFYYYZZ\ZbZuZZZZZ[[)[z[[[\@\X\\]@]]]^7^^^^__ _>_D_W_r_s_____```0`F`V`k`q`r```aEaaabb-bbbbbbcc-cFccccdd<doddeeeeKeseeef-fIfkffffg gBg[gzgggghh2h9h=h?h@hzhhi@iFiliriiiiijj'j-j@jXjYjjjjjk>kKkklllllmmNm]mmnJnsnnnnnnnno3o?oloooop p%pGpepppppqqBqpqqqqr*r0rCrnrorrss+s1sDsYsZssstt6tIt~ttttuu(u)uZuuuuuuvv;v<vsvvw1wKwLwwwxxAx_x`xxxxxyyyaytyyz#z8zFz]zzzz{{E{R{{{{{{{|#|Y|x|y|||}!}@}A}}}}}}}~~%~1~r~~~~(X8?CEF}Bgm0WXvBU8r%S} Hr,QW5MST5s#aEg Krs]pR?m "#ii +,W~LX~\qJajk@M%Kt"r  CO*8O-:i 9mn'NOr ReM Dr$+/12cA_`5;< NK~JtLr$%Pwx$0v 1p/e CJNPQ,-~"@Al R^Rgy @W`a,9t?r-3InUl1p/wDgnrtuTU9:dVm1pyz,k-ef,JKvS_3DRi¨,56gã=dćĎĒĔĕ ?oŕŖ)\z{ƮDP|$f{ȍȨ"Qɂɰɽ5<@BCyʥciˬ&H`fg̦̲'eͧͼ(12cΥBIMOPφϤ<Z[КЛ!MыќѪ  ;aҏCzӼӽ PԃԡԢP\վWl~֙Yׇה;dؕaٔٲٳ+Jbx~ڻ&]ۛ۬ۺJ}ܔܝܞ 9cpݥ>uާHNߑC[ab,COXY%v BGef;x$6Q ;H8VW"h/DZ`a)V7NWX =^Int  ;uv$c:KYpyz$K@ek,\].r,56g*1578se%+{  /GcyJ]>q'Q^$NCabD\|!o-gXPm9befNe  & 4 K T U      6 Y v }         W ]    9 :     G t  m S oHY_*VWfI\Mr'c cjnpq26*0C^_M  X^n5;agM6<%KQdS ) q !!\!!!!!"/"5"H"c"d"|"""""###)#>#D#E#t###$5$$$$%5%b%%&& & &>&f&&&'$'@'j''''((*(C((((((((()L)x)|))*$***=*z****++++4+5+n+t+++++,/,5,E,s,t,,,,,---S----...G.M.`.t..///O///////060p0v0001 1&1'1X1^111122:2v23333X3^333333444.4?4S4b4~44444455535p555696R6d6667C777788N8_8m8889 9P99999:0:_::::;;=;g;;;;>>>>>W>>?? ?F?L?_?t?u???@0@1@b@~@@@@@AA<AAAAAAABB4B}BCC7CCDDnDE ENEdEeEEEEFFKFTFUFFFFFFFGCGGGGH(HUHtHHHIIISI`IfIyIIIJJ J>JDJWJrJsJJJJJKKKiKoKKKKL LZL`LLLLLLLMMkMMMMMNNPNVNNNNOO O8O>OdOjO}OOP3PKPPPQ7QqQR RSRRSSZSSSSSST'T-T>T`TTTTTU9U?UpUvUUUUUUVV&V7VZViVVVVVVVVW4WGWWWWXX*XiXXXY2YKY]YxYYZ<ZZZZ[[R[[[[[\"\N\\\]]J]f]]]]]^$^c^^^^__5_L_a______`` `W``a2a\aaaaaaabHbNb^bbbbccc1c\c]cccd!d'd:dNdddde7eeeeeeeeffNffffggg>gDggggggh)hchihhhi i'i(i_ieixiijjjVjjjk@kkl"l1llmmGm]m^mmmmmn n n1nFnWnknnnnnnoo o oGoSoop p+paptpppqqqaqtqqrr1r?rVrrss@sosssst t+tQtttuu-uKusuuuuvv?vTvovvvvvvvwwCwwwxx xx2x3x^xxxxxxxy#y)y<y^yyyzzQzz{{Q{{{|E||} }!}"}O}^}p}}}}}~~7~f~o~p~~~~?CEF HJABTes4imop"8J^opOCtu:f{| W@%VW-L.Bo5Qo )>[bfhiRXB-|PVf6i6mqst)x*+\b>DTrsIlz[_ab/0mMStzBsy _3gh-o!':UVj(7LRS~>nIyA [I%e)Emz 0E^s?Qn)PQ 5;NijC+YZlr%+<QR 9:Sh&;ABr~YJ%^ghAi-Ub9Ng|+OSA`xT8$/GH{0^_ W£;NhiÕÛ 45syc{)*>Rg}ƎƣƲ!VǏ^iȝ 0]ɟN^rʫʴʵ 4^~˦ -Lm̩̐/6:<=|͕ͳ͹.|Ή'fϷ &6XЗ/Kє&AҌmӸQԙ1Հ "#UVւ֎ֿ/Osת׮װױ/5؄ FL\ـفٻcگ*0@fgۓ۔۶)@xܫ!I݈݌ݎݏ"&oUqr߲,2BdO0byz=P -}*?@{|ENO&*,-} ?@[6Rlrs BC >|%[%,023{c  ;<ms^,-|G-z8>Nop@+GM];YZv|X^n> #E O>45UBH[vw+G]rxyd0oW`a:rDQj  5 J y        J Z           Q W q     1 2 c i |           - B S Y Z }   *c@j4Unuy{|(yReA~#3G2;<m3X_cew/// Network Security API - v1 /// /// For more information, see /// /// Create an instance of [NetworkSecurityApi] to access these resources: /// /// - [OrganizationsResource] /// - [OrganizationsLocationsResource] /// - [OrganizationsLocationsAddressGroupsResource] /// - [OrganizationsLocationsFirewallEndpointsResource] /// - [OrganizationsLocationsOperationsResource] /// - [OrganizationsLocationsSecurityProfileGroupsResource] /// - [OrganizationsLocationsSecurityProfilesResource] /// - [ProjectsResource] /// - [ProjectsLocationsResource] /// - [ProjectsLocationsAddressGroupsResource] /// - [ProjectsLocationsAuthorizationPoliciesResource] /// - [ProjectsLocationsAuthzPoliciesResource] /// - [ProjectsLocationsBackendAuthenticationConfigsResource] /// - [ProjectsLocationsClientTlsPoliciesResource] /// - [ProjectsLocationsDnsThreatDetectorsResource] /// - [ProjectsLocationsFirewallEndpointAssociationsResource] /// - [ProjectsLocationsFirewallEndpointsResource] /// - [ProjectsLocationsGatewaySecurityPoliciesResource] /// - [ProjectsLocationsGatewaySecurityPoliciesRulesResource] /// - [ProjectsLocationsInterceptDeploymentGroupsResource] /// - [ProjectsLocationsInterceptDeploymentsResource] /// - [ProjectsLocationsInterceptEndpointGroupAssociationsResource] /// - [ProjectsLocationsInterceptEndpointGroupsResource] /// - [ProjectsLocationsMirroringDeploymentGroupsResource] /// - [ProjectsLocationsMirroringDeploymentsResource] /// - [ProjectsLocationsMirroringEndpointGroupAssociationsResource] /// - [ProjectsLocationsMirroringEndpointGroupsResource] /// - [ProjectsLocationsOperationsResource] /// - [ProjectsLocationsServerTlsPoliciesResource] /// - [ProjectsLocationsTlsInspectionPoliciesResource] /// - [ProjectsLocationsUrlListsResource]#9@=j,22>LL?X bÍʍˍ׎2)r/// See, edit, configure, and delete your Google Cloud data and see the email /// address for your Google Account.y^%yM،>mms')IsX%sa88>8VWWlz88Vx]%x =vJ44\:3LANc% #YY~/// Adds items to an address group. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [addressGroup] - Required. A name of the AddressGroup to add items to. /// Must be in the format `projects|organization / * /// /locations/{location}/addressGroups / * `. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/addressGroups/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.--%KXXdxxۘۅ/// Clones items from one address group to another. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [addressGroup] - Required. A name of the AddressGroup to clone items to. /// Must be in the format `projects|organization / * /// /locations/{location}/addressGroups / * `. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/addressGroups/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.ޥ33@OO\uuW҆/// Creates a new address group in a given project and location. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent resource of the AddressGroup. Must be in /// the format `projects / * /locations/{location}`. /// Value must have pattern `^organizations/\[^/\]+/locations/\[^/\]+$`. /// /// [addressGroupId] - Required. Short name of the AddressGroup resource to be /// created. This value should be 1-63 characters long, containing only /// letters, numbers, hyphens, and underscores, and should not start with a /// number. E.g. "authz_policy". /// /// [requestId] - Optional. An optional request ID to identify requests. /// Specify a unique request ID so that if you must retry your request, the /// server will know to ignore the request if it has already been completed. /// The server will guarantee that for at least 60 minutes since the first /// request. For example, consider a situation where you make an initial /// request and the request times out. If you make the request again with the /// same request ID, the server can check if original operation with the same /// request ID was received, and if so, will ignore the second request. This /// prevents clients from accidentally creating duplicate commitments. The /// request ID must be a valid UUID with the exception that zero UUID is not /// supported (00000000-0000-0000-0000-000000000000). /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.--:ШЈ9/// Deletes an address group. /// /// Request parameters: /// /// [name] - Required. A name of the AddressGroup to delete. Must be in the /// format `projects / * /locations/{location}/addressGroups / * `. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/addressGroups/\[^/\]+$`. /// /// [requestId] - Optional. An optional request ID to identify requests. /// Specify a unique request ID so that if you must retry your request, the /// server will know to ignore the request if it has already been completed. /// The server will guarantee that for at least 60 minutes since the first /// request. For example, consider a situation where you make an initial /// request and the request times out. If you make the request again with the /// same request ID, the server can check if original operation with the same /// request ID was received, and if so, will ignore the second request. This /// prevents clients from accidentally creating duplicate commitments. The /// request ID must be a valid UUID with the exception that zero UUID is not /// supported (00000000-0000-0000-0000-000000000000). /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error. /// Gets details of a single address group. /// /// Request parameters: /// /// [name] - Required. A name of the AddressGroup to get. Must be in the /// format `projects / * /locations/{location}/addressGroups / * `. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/addressGroups/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [AddressGroup]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.º޺ĵća/// Lists address groups in a given project and location. /// /// Request parameters: /// /// [parent] - Required. The project and location from which the AddressGroups /// should be listed, specified in the format `projects / * /// /locations/{location}`. /// Value must have pattern `^organizations/\[^/\]+/locations/\[^/\]+$`. /// /// [pageSize] - Maximum number of AddressGroups to return per call. /// /// [pageToken] - The value returned by the last `ListAddressGroupsResponse` /// Indicates that this is a continuation of a prior `ListAddressGroups` call, /// and that the system should return the next page of data. /// /// [returnPartialSuccess] - Optional. If true, allow partial responses for /// multi-regional Aggregated List requests. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListAddressGroupsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.BBBBBBBBBCCCƽƇBo/// Lists references of an address group. /// /// Request parameters: /// /// [addressGroup] - Required. A name of the AddressGroup to clone items to. /// Must be in the format `projects|organization / * /// /locations/{location}/addressGroups / * `. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/addressGroups/\[^/\]+$`. /// /// [pageSize] - The maximum number of references to return. If unspecified, /// server will pick an appropriate default. Server may return fewer items /// than requested. A caller should only rely on response's next_page_token to /// determine if there are more AddressGroupUsers left to be queried. /// /// [pageToken] - The next_page_token value returned from a previous List /// request, if any. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListAddressGroupReferencesResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.MHMHMUMbMbMnMzMzMMMMMMMElElM=j/// Updates parameters of an address group. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Required. Name of the AddressGroup resource. It matches pattern /// `projects / * /locations/{location}/addressGroups/`. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/addressGroups/\[^/\]+$`. /// /// [requestId] - Optional. An optional request ID to identify requests. /// Specify a unique request ID so that if you must retry your request, the /// server will know to ignore the request if it has already been completed. /// The server will guarantee that for at least 60 minutes since the first /// request. For example, consider a situation where you make an initial /// request and the request times out. If you make the request again with the /// same request ID, the server can check if original operation with the same /// request ID was received, and if so, will ignore the second request. This /// prevents clients from accidentally creating duplicate commitments. The /// request ID must be a valid UUID with the exception that zero UUID is not /// supported (00000000-0000-0000-0000-000000000000). /// /// [updateMask] - Optional. Field mask is used to specify the fields to be /// overwritten in the AddressGroup resource by the update. The fields /// specified in the update_mask are relative to the resource, not the full /// request. A field will be overwritten if it is in the mask. If the user /// does not provide a mask then all fields will be overwritten. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.S_S_&S~SSSSSSPPSN/// Removes items from an address group. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [addressGroup] - Required. A name of the AddressGroup to remove items /// from. Must be in the format `projects|organization / * /// /locations/{location}/addressGroups / * `. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/addressGroups/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.CV V<V=V=VRVkV`VmV V gUU%U]F]F]W]d]d]p]~]~]]]]]]]VxVx]:c/// Creates a new FirewallEndpoint in a given project and location. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. Value for parent. /// Value must have pattern `^organizations/\[^/\]+/locations/\[^/\]+$`. /// /// [firewallEndpointId] - Required. Id of the requesting object. If /// auto-generating Id server-side, remove this field and firewall_endpoint_id /// from the method_signature of Create RPC. /// /// [requestId] - Optional. An optional request ID to identify requests. /// Specify a unique request ID so that if you must retry your request, the /// server will know to ignore the request if it has already been completed. /// The server will guarantee that for at least 60 minutes since the first /// request. For example, consider a situation where you make an initial /// request and the request times out. If you make the request again with the /// same request ID, the server can check if original operation with the same /// request ID was received, and if so, will ignore the second request. This /// prevents clients from accidentally creating duplicate commitments. The /// request ID must be a valid UUID with the exception that zero UUID is not /// supported (00000000-0000-0000-0000-000000000000). /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.f,f,f8fDfDfQf`f`fm`d`df g/// Deletes a single Endpoint. /// /// Request parameters: /// /// [name] - Required. Name of the resource /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/firewallEndpoints/\[^/\]+$`. /// /// [requestId] - Optional. An optional request ID to identify requests. /// Specify a unique request ID so that if you must retry your request, the /// server will know to ignore the request if it has already been completed. /// The server will guarantee that for at least 60 minutes after the first /// request. For example, consider a situation where you make an initial /// request and the request times out. If you make the request again with the /// same request ID, the server can check if original operation with the same /// request ID was received, and if so, will ignore the second request. This /// prevents clients from accidentally creating duplicate commitments. The /// request ID must be a valid UUID with the exception that zero UUID is not /// supported (00000000-0000-0000-0000-000000000000). /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.jjjjjjh@h@[jɂE/// Gets details of a single Endpoint. /// /// Request parameters: /// /// [name] - Required. Name of the resource /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/firewallEndpoints/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [FirewallEndpoint]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.ppppppppqqqqq,q,q9qHqHqUllcp/// Lists FirewallEndpoints in a given project and location. /// /// Request parameters: /// /// [parent] - Required. Parent value for ListEndpointsRequest /// Value must have pattern `^organizations/\[^/\]+/locations/\[^/\]+$`. /// /// [filter] - Optional. Filtering results /// /// [orderBy] - Hint for how to order the results /// /// [pageSize] - Optional. Requested page size. Server may return fewer items /// than requested. If unspecified, server will pick an appropriate default. /// /// [pageToken] - A token identifying a page of results the server should /// return. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListFirewallEndpointsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.{{{{{{{{{{{{{{{ttH{w /// Update a single Endpoint. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Immutable. Identifier. Name of resource. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/firewallEndpoints/\[^/\]+$`. /// /// [requestId] - Optional. An optional request ID to identify requests. /// Specify a unique request ID so that if you must retry your request, the /// server will know to ignore the request if it has already been completed. /// The server will guarantee that for at least 60 minutes since the first /// request. For example, consider a situation where you make an initial /// request and the request times out. If you make the request again with the /// same request ID, the server can check if original operation with the same /// request ID was received, and if so, will ignore the second request. This /// prevents clients from accidentally creating duplicate commitments. The /// request ID must be a valid UUID with the exception that zero UUID is not /// supported (00000000-0000-0000-0000-000000000000). /// /// [updateMask] - Required. Field mask is used to specify the fields to be /// overwritten in the Endpoint resource by the update. The fields specified /// in the update_mask are relative to the resource, not the full request. A /// field will be overwritten if it is in the mask. If the user does not /// provide a mask then all fields will be overwritten. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.UUU~~~~~~~~`~~%~44KXXdpp}F(/// Starts asynchronous cancellation on a long-running operation. /// /// The server makes a best effort to cancel the operation, but success is not /// guaranteed. If the server doesn't support this method, it returns /// `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation /// or other methods to check whether the cancellation succeeded or whether /// the operation completed despite cancellation. On successful cancellation, /// the operation is not deleted; instead, it becomes an operation with an /// Operation.error value with a google.rpc.Status.code of `1`, corresponding /// to `Code.CANCELLED`. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - The name of the operation resource to be cancelled. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/operations/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Empty]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.]]Ã%/// Deletes a long-running operation. /// /// This method indicates that the client is no longer interested in the /// operation result. It does not cancel the operation. If the server doesn't /// support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. /// /// Request parameters: /// /// [name] - The name of the operation resource to be deleted. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/operations/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Empty]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.yy}/// Gets the latest state of a long-running operation. /// /// Clients can use this method to poll the operation result at intervals as /// recommended by the API service. /// /// Request parameters: /// /// [name] - The name of the operation resource. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/operations/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.(66CRR]ww110J/// Lists operations that match the specified filter in the request. /// /// If the server doesn't support this method, it returns `UNIMPLEMENTED`. /// /// Request parameters: /// /// [name] - The name of the operation's parent resource. /// Value must have pattern `^organizations/\[^/\]+/locations/\[^/\]+$`. /// /// [filter] - The standard list filter. /// /// [pageSize] - The standard list page size. /// /// [pageToken] - The standard list page token. /// /// [returnPartialSuccess] - When set to `true`, operations that are reachable /// are returned as normal, and those that are unreachable are returned in the /// ListOperationsResponse.unreachable field. This can only be `true` when /// reading across collections. For example, when `parent` is set to /// `"projects/example/locations/-"`. This field is not supported by default /// and will result in an `UNIMPLEMENTED` error if set unless explicitly /// documented otherwise in service or product specific documentation. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListOperationsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.~R~R~X4)6p%# AAE /// Creates a new SecurityProfileGroup in a given organization and location. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent resource of the SecurityProfileGroup. Must /// be in the format `projects|organizations / * /locations/{location}`. /// Value must have pattern `^organizations/\[^/\]+/locations/\[^/\]+$`. /// /// [securityProfileGroupId] - Required. Short name of the /// SecurityProfileGroup resource to be created. This value should be 1-63 /// characters long, containing only letters, numbers, hyphens, and /// underscores, and should not start with a number. E.g. /// "security_profile_group1". /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.22>JJWaan&U/// Deletes a single SecurityProfileGroup. /// /// Request parameters: /// /// [name] - Required. A name of the SecurityProfileGroup to delete. Must be /// in the format `projects|organizations / * /// /locations/{location}/securityProfileGroups/{security_profile_group}`. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/securityProfileGroups/\[^/\]+$`. /// /// [etag] - Optional. If client provided etag is out of date, delete will /// return FAILED_PRECONDITION error. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.ww22n/// Gets details of a single SecurityProfileGroup. /// /// Request parameters: /// /// [name] - Required. A name of the SecurityProfileGroup to get. Must be in /// the format `projects|organizations / * /// /locations/{location}/securityProfileGroups/{security_profile_group}`. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/securityProfileGroups/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [SecurityProfileGroup]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error. %%/==JYYfHHrR/// Lists SecurityProfileGroups in a given organization and location. /// /// Request parameters: /// /// [parent] - Required. The project or organization and location from which /// the SecurityProfileGroups should be listed, specified in the format /// `projects|organizations / * /locations/{location}`. /// Value must have pattern `^organizations/\[^/\]+/locations/\[^/\]+$`. /// /// [pageSize] - Optional. Maximum number of SecurityProfileGroups to return /// per call. /// /// [pageToken] - Optional. The value returned by the last /// `ListSecurityProfileGroupsResponse` Indicates that this is a continuation /// of a prior `ListSecurityProfileGroups` call, and that the system should /// return the next page of data. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListSecurityProfileGroupsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.ll&aT/// Updates the parameters of a single SecurityProfileGroup. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Immutable. Identifier. Name of the SecurityProfileGroup resource. /// It matches pattern `projects|organizations / * /// /locations/{location}/securityProfileGroups/{security_profile_group}`. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/securityProfileGroups/\[^/\]+$`. /// /// [updateMask] - Required. Field mask is used to specify the fields to be /// overwritten in the SecurityProfileGroup resource by the update. The fields /// specified in the update_mask are relative to the resource, not the full /// request. A field will be overwritten if it is in the mask. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.eekKyzzKKf<!%<!//<SS`/// Creates a new SecurityProfile in a given organization and location. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent resource of the SecurityProfile. Must be /// in the format `projects|organizations / * /locations/{location}`. /// Value must have pattern `^organizations/\[^/\]+/locations/\[^/\]+$`. /// /// [securityProfileId] - Required. Short name of the SecurityProfile resource /// to be created. This value should be 1-63 characters long, containing only /// letters, numbers, hyphens, and underscores, and should not start with a /// number. E.g. "security_profile1". /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.IIUaanxxƅ¸¸=>/// Deletes a single SecurityProfile. /// /// Request parameters: /// /// [name] - Required. A name of the SecurityProfile to delete. Must be in the /// format `projects|organizations / * /// /locations/{location}/securityProfiles/{security_profile_id}`. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/securityProfiles/\[^/\]+$`. /// /// [etag] - Optional. If client provided etag is out of date, delete will /// return FAILED_PRECONDITION error. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.mmy˅˅˒IId/// Gets details of a single SecurityProfile. /// /// Request parameters: /// /// [name] - Required. A name of the SecurityProfile to get. Must be in the /// format `projects|organizations / * /// /locations/{location}/securityProfiles/{security_profile_id}`. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/securityProfiles/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [SecurityProfile]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error. ''499=τ4/// Lists SecurityProfiles in a given organization and location. /// /// Request parameters: /// /// [parent] - Required. The project or organization and location from which /// the SecurityProfiles should be listed, specified in the format /// `projects|organizations / * /locations/{location}`. /// Value must have pattern `^organizations/\[^/\]+/locations/\[^/\]+$`. /// /// [pageSize] - Optional. Maximum number of SecurityProfiles to return per /// call. /// /// [pageToken] - Optional. The value returned by the last /// `ListSecurityProfilesResponse` Indicates that this is a continuation of a /// prior `ListSecurityProfiles` call, and that the system should return the /// next page of data. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListSecurityProfilesResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error. &&2>>K[[hzz5/// Updates the parameters of a single SecurityProfile. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Immutable. Identifier. Name of the SecurityProfile resource. It /// matches pattern `projects|organizations / * /// /locations/{location}/securityProfiles/{security_profile}`. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/securityProfiles/\[^/\]+$`. /// /// [updateMask] - Required. Field mask is used to specify the fields to be /// overwritten in the SecurityProfile resource by the update. The fields /// specified in the update_mask are relative to the resource, not the full /// request. A field will be overwritten if it is in the mask. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.蠖 011F[P] D۶ۛ%۶WۀۀۆMܧ܌%ܧܶܶu..aݾݾu66r݀ aaߑ耤$JᫀII{ր㏀''`ŀRR BlA疀&&fL::FMMZ6/// Gets information about a location. /// /// Request parameters: /// /// [name] - Resource name for the location. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Location]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.* '66C?/// Lists information about the supported locations for this service. /// /// This method can be called in two ways: * **List all public locations:** /// Use the path `GET /v1/locations`. * **List project-visible locations:** /// Use the path `GET /v1/projects/{project_id}/locations`. This may include /// public locations as well as private or other locations specifically /// visible to the project. /// /// Request parameters: /// /// [name] - The resource that owns the locations collection, if applicable. /// Value must have pattern `^projects/\[^/\]+$`. /// /// [extraLocationTypes] - Optional. Do not use this field. It is unsupported /// and is ignored unless explicitly documented otherwise. This is primarily /// for internal usage. /// /// [filter] - A filter to narrow down results to a preferred subset. The /// filtering language accepts strings like `"displayName=tokyo"`, and is /// documented in more detail in \[AIP-160\](https://google.aip.dev/160). /// /// [pageSize] - The maximum number of results to return. If not set, the /// service selects a default. /// /// [pageToken] - A page token received from the `next_page_token` field in /// the response. Send that page token to receive the subsequent page. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListLocationsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.hhsn8^__t88^)%) #)ył/// Adds items to an address group. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [addressGroup] - Required. A name of the AddressGroup to add items to. /// Must be in the format `projects|organization / * /// /locations/{location}/addressGroups / * `. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/addressGroups/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.dd%T/// Clones items from one address group to another. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [addressGroup] - Required. A name of the AddressGroup to clone items to. /// Must be in the format `projects|organization / * /// /locations/{location}/addressGroups / * `. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/addressGroups/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.    * * 6 D D Q e e r   R /// Creates a new address group in a given project and location. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent resource of the AddressGroup. Must be in /// the format `projects / * /locations/{location}`. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [addressGroupId] - Required. Short name of the AddressGroup resource to be /// created. This value should be 1-63 characters long, containing only /// letters, numbers, hyphens, and underscores, and should not start with a /// number. E.g. "authz_policy". /// /// [requestId] - Optional. An optional request ID to identify requests. /// Specify a unique request ID so that if you must retry your request, the /// server will know to ignore the request if it has already been completed. /// The server will guarantee that for at least 60 minutes since the first /// request. For example, consider a situation where you make an initial /// request and the request times out. If you make the request again with the /// same request ID, the server can check if original operation with the same /// request ID was received, and if so, will ignore the second request. This /// prevents clients from accidentally creating duplicate commitments. The /// request ID must be a valid UUID with the exception that zero UUID is not /// supported (00000000-0000-0000-0000-000000000000). /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.,,8DDQ``m  : /// Deletes a single address group. /// /// Request parameters: /// /// [name] - Required. A name of the AddressGroup to delete. Must be in the /// format `projects / * /locations/{location}/addressGroups / * `. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/addressGroups/\[^/\]+$`. /// /// [requestId] - Optional. An optional request ID to identify requests. /// Specify a unique request ID so that if you must retry your request, the /// server will know to ignore the request if it has already been completed. /// The server will guarantee that for at least 60 minutes since the first /// request. For example, consider a situation where you make an initial /// request and the request times out. If you make the request again with the /// same request ID, the server can check if original operation with the same /// request ID was received, and if so, will ignore the second request. This /// prevents clients from accidentally creating duplicate commitments. The /// request ID must be a valid UUID with the exception that zero UUID is not /// supported (00000000-0000-0000-0000-000000000000). /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.))5AAN@@ /// Gets details of a single address group. /// /// Request parameters: /// /// [name] - Required. A name of the AddressGroup to get. Must be in the /// format `projects / * /locations/{location}/addressGroups / * `. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/addressGroups/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [AddressGroup]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.   !!(! !0!0!= Ԇy/// Gets the access control policy for a resource. /// /// Returns an empty policy if the resource exists and does not have a policy /// set. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy is being /// requested. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/addressGroups/\[^/\]+$`. /// /// [options_requestedPolicyVersion] - Optional. The maximum policy version /// that will be used to format the policy. Valid values are 0, 1, and 3. /// Requests specifying an invalid value will be rejected. Requests for /// policies with any conditional role bindings must specify version 3. /// Policies with no conditional role bindings may specify any valid value or /// leave the field unset. The policy in the response might use the policy /// version that you specified, or it might use a lower policy version. For /// example, if you specify version 3, but the policy has no conditional role /// bindings, the response uses version 1. To learn which resources support /// conditions in their IAM policies, see the /// [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleIamV1Policy]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.(W(W(c(q(q({(((((((((##(M\/// Lists address groups in a given project and location. /// /// Request parameters: /// /// [parent] - Required. The project and location from which the AddressGroups /// should be listed, specified in the format `projects / * /// /locations/{location}`. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [pageSize] - Maximum number of AddressGroups to return per call. /// /// [pageToken] - The value returned by the last `ListAddressGroupsResponse` /// Indicates that this is a continuation of a prior `ListAddressGroups` call, /// and that the system should return the next page of data. /// /// [returnPartialSuccess] - Optional. If true, allow partial responses for /// multi-regional Aggregated List requests. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListAddressGroupsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.0u0u0000000000++0aj/// Lists references of an address group. /// /// Request parameters: /// /// [addressGroup] - Required. A name of the AddressGroup to clone items to. /// Must be in the format `projects|organization / * /// /locations/{location}/addressGroups / * `. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/addressGroups/\[^/\]+$`. /// /// [pageSize] - The maximum number of references to return. If unspecified, /// server will pick an appropriate default. Server may return fewer items /// than requested. A caller should only rely on response's next_page_token to /// determine if there are more AddressGroupUsers left to be queried. /// /// [pageToken] - The next_page_token value returned from a previous List /// request, if any. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListAddressGroupReferencesResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.;;;;););5;A;A;N;];];j;z;z;3.3.;o/// Updates the parameters of a single address group. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Required. Name of the AddressGroup resource. It matches pattern /// `projects / * /locations/{location}/addressGroups/`. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/addressGroups/\[^/\]+$`. /// /// [requestId] - Optional. An optional request ID to identify requests. /// Specify a unique request ID so that if you must retry your request, the /// server will know to ignore the request if it has already been completed. /// The server will guarantee that for at least 60 minutes since the first /// request. For example, consider a situation where you make an initial /// request and the request times out. If you make the request again with the /// same request ID, the server can check if original operation with the same /// request ID was received, and if so, will ignore the second request. This /// prevents clients from accidentally creating duplicate commitments. The /// request ID must be a valid UUID with the exception that zero UUID is not /// supported (00000000-0000-0000-0000-000000000000). /// /// [updateMask] - Optional. Field mask is used to specify the fields to be /// overwritten in the AddressGroup resource by the update. The fields /// specified in the update_mask are relative to the resource, not the full /// request. A field will be overwritten if it is in the mask. If the user /// does not provide a mask then all fields will be overwritten. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.A!A!&A@AMAMAYAmAmAz==ۅA/// Removes items from an address group. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [addressGroup] - Required. A name of the AddressGroup to remove items /// from. Must be in the format `projects|organization / * /// /locations/{location}/addressGroups / * `. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/addressGroups/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.GrGr&GGGGGGGCkCk[G`/// Sets the access control policy on the specified resource. /// /// Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, /// and `PERMISSION_DENIED` errors. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy is being /// specified. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/addressGroups/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleIamV1Policy]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.NN,NNNO OOO'IIʇ~N}/// Returns permissions that a caller has on the specified resource. /// /// If the resource does not exist, this will return an empty set of /// permissions, not a `NOT_FOUND` error. Note: This operation is designed to /// be used for building permission-aware UIs and command-line tools, not for /// authorization checking. This operation may "fail open" without warning. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy detail is being /// requested. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/addressGroups/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleIamV1TestIamPermissionsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.ZmQQQQQR RRQQfQQ%QVTVTVhVuVuVVV"VVVVRRVH/// Creates a new AuthorizationPolicy in a given project and location. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent resource of the AuthorizationPolicy. Must /// be in the format `projects/{project}/locations/{location}`. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [authorizationPolicyId] - Required. Short name of the AuthorizationPolicy /// resource to be created. This value should be 1-63 characters long, /// containing only letters, numbers, hyphens, and underscores, and should not /// start with a number. E.g. "authz_policy". /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.\>\>\J\V\V\cY5Y5\2/// Deletes a single AuthorizationPolicy. /// /// Request parameters: /// /// [name] - Required. A name of the AuthorizationPolicy to delete. Must be in /// the format `projects/{project}/locations/{location}/authorizationPolicies /// / * `. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/authorizationPolicies/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.aaa%a1a1a>]]a/// Gets details of a single AuthorizationPolicy. /// /// Request parameters: /// /// [name] - Required. A name of the AuthorizationPolicy to get. Must be in /// the format `projects/{project}/locations/{location}/authorizationPolicies /// / * `. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/authorizationPolicies/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [AuthorizationPolicy]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.iiijj(j j/j/j<bb鉢iӆ/// Gets the access control policy for a resource. /// /// Returns an empty policy if the resource exists and does not have a policy /// set. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy is being /// requested. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/authorizationPolicies/\[^/\]+$`. /// /// [options_requestedPolicyVersion] - Optional. The maximum policy version /// that will be used to format the policy. Valid values are 0, 1, and 3. /// Requests specifying an invalid value will be rejected. Requests for /// policies with any conditional role bindings must specify version 3. /// Policies with no conditional role bindings may specify any valid value or /// leave the field unset. The policy in the response might use the policy /// version that you specified, or it might use a lower policy version. For /// example, if you specify version 3, but the policy has no conditional role /// bindings, the response uses version 1. To learn which resources support /// conditions in their IAM policies, see the /// [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleIamV1Policy]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.qqq!q/q/q9qGqGqTqcqcqpll5q /// Lists AuthorizationPolicies in a given project and location. /// /// Request parameters: /// /// [parent] - Required. The project and location from which the /// AuthorizationPolicies should be listed, specified in the format /// `projects/{project}/locations/{location}`. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [pageSize] - Maximum number of AuthorizationPolicies to return per call. /// /// [pageToken] - The value returned by the last /// `ListAuthorizationPoliciesResponse` Indicates that this is a continuation /// of a prior `ListAuthorizationPolicies` call, and that the system should /// return the next page of data. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListAuthorizationPoliciesResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.xxxxxxxxxxxxssȇ8x~g/// Updates the parameters of a single AuthorizationPolicy. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Required. Name of the AuthorizationPolicy resource. It matches /// pattern `projects/{project}/locations/{location}/authorizationPolicies/`. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/authorizationPolicies/\[^/\]+$`. /// /// [updateMask] - Optional. Field mask is used to specify the fields to be /// overwritten in the AuthorizationPolicy resource by the update. The fields /// specified in the update_mask are relative to the resource, not the full /// request. A field will be overwritten if it is in the mask. If the user /// does not provide a mask then all fields will be overwritten. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.&2??K[[h{{c/// Sets the access control policy on the specified resource. /// /// Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, /// and `PERMISSION_DENIED` errors. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy is being /// specified. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/authorizationPolicies/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleIamV1Policy]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.uu,kk]/// Returns permissions that a caller has on the specified resource. /// /// If the resource does not exist, this will return an empty set of /// permissions, not a `NOT_FOUND` error. Note: This operation is designed to /// be used for building permission-aware UIs and command-line tools, not for /// authorization checking. This operation may "fail open" without warning. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy detail is being /// requested. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/authorizationPolicies/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleIamV1TestIamPermissionsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.QLQLQRPvwwPP^A&%Allx`O/// Creates a new AuthzPolicy in a given project and location. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent resource of the `AuthzPolicy` resource. /// Must be in the format `projects/{project}/locations/{location}`. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [authzPolicyId] - Required. User-provided ID of the `AuthzPolicy` resource /// to be created. /// /// [requestId] - Optional. An optional request ID to identify requests. /// Specify a unique request ID so that if you must retry your request, the /// server can ignore the request if it has already been completed. The server /// guarantees that for at least 60 minutes since the first request. For /// example, consider a situation where you make an initial request and the /// request times out. If you make the request again with the same request ID, /// the server can check if original operation with the same request ID was /// received, and if so, ignores the second request. This prevents clients /// from accidentally creating duplicate commitments. The request ID must be a /// valid UUID with the exception that zero UUID is not supported /// (00000000-0000-0000-0000-000000000000). /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.YYH/// Deletes a single AuthzPolicy. /// /// Request parameters: /// /// [name] - Required. The name of the `AuthzPolicy` resource to delete. Must /// be in the format /// `projects/{project}/locations/{location}/authzPolicies/{authz_policy}`. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/authzPolicies/\[^/\]+$`. /// /// [requestId] - Optional. An optional request ID to identify requests. /// Specify a unique request ID so that if you must retry your request, the /// server can ignore the request if it has already been completed. The server /// guarantees that for at least 60 minutes after the first request. For /// example, consider a situation where you make an initial request and the /// request times out. If you make the request again with the same request ID, /// the server can check if original operation with the same request ID was /// received, and if so, ignores the second request. This prevents clients /// from accidentally creating duplicate commitments. The request ID must be a /// valid UUID with the exception that zero UUID is not supported /// (00000000-0000-0000-0000-000000000000). /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error./// Gets details of a single AuthzPolicy. /// /// Request parameters: /// /// [name] - Required. A name of the `AuthzPolicy` resource to get. Must be in /// the format /// `projects/{project}/locations/{location}/authzPolicies/{authz_policy}`. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/authzPolicies/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [AuthzPolicy]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.eeq(qqSy/// Gets the access control policy for a resource. /// /// Returns an empty policy if the resource exists and does not have a policy /// set. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy is being /// requested. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/authzPolicies/\[^/\]+$`. /// /// [options_requestedPolicyVersion] - Optional. The maximum policy version /// that will be used to format the policy. Valid values are 0, 1, and 3. /// Requests specifying an invalid value will be rejected. Requests for /// policies with any conditional role bindings must specify version 3. /// Policies with no conditional role bindings may specify any valid value or /// leave the field unset. The policy in the response might use the policy /// version that you specified, or it might use a lower policy version. For /// example, if you specify version 3, but the policy has no conditional role /// bindings, the response uses version 1. To learn which resources support /// conditions in their IAM policies, see the /// [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleIamV1Policy]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.,,9HHUI/// Lists AuthzPolicies in a given project and location. /// /// Request parameters: /// /// [parent] - Required. The project and location from which the `AuthzPolicy` /// resources are listed, specified in the following format: /// `projects/{project}/locations/{location}`. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [filter] - Optional. Filtering results. /// /// [orderBy] - Optional. Hint for how to order the results. /// /// [pageSize] - Optional. Requested page size. The server might return fewer /// items than requested. If unspecified, the server picks an appropriate /// default. /// /// [pageToken] - Optional. A token identifying a page of results that the /// server returns. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListAuthzPoliciesResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error. "11>NN[هr/// Updates the parameters of a single AuthzPolicy. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Required. Identifier. Name of the `AuthzPolicy` resource in the /// following format: /// `projects/{project}/locations/{location}/authzPolicies/{authz_policy}`. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/authzPolicies/\[^/\]+$`. /// /// [requestId] - Optional. An optional request ID to identify requests. /// Specify a unique request ID so that if you must retry your request, the /// server can ignore the request if it has already been completed. The server /// guarantees that for at least 60 minutes since the first request. For /// example, consider a situation where you make an initial request and the /// request times out. If you make the request again with the same request ID, /// the server can check if original operation with the same request ID was /// received, and if so, ignores the second request. This prevents clients /// from accidentally creating duplicate commitments. The request ID must be a /// valid UUID with the exception that zero UUID is not supported /// (00000000-0000-0000-0000-000000000000). /// /// [updateMask] - Required. Used to specify the fields to be overwritten in /// the `AuthzPolicy` resource by the update. The fields specified in the /// `update_mask` are relative to the resource, not the full request. A field /// is overwritten if it is in the mask. If the user does not specify a mask, /// then all fields are overwritten. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.& [/// Sets the access control policy on the specified resource. /// /// Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, /// and `PERMISSION_DENIED` errors. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy is being /// specified. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/authzPolicies/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleIamV1Policy]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.,5BBN^^k~}/// Returns permissions that a caller has on the specified resource. /// /// If the resource does not exist, this will return an empty set of /// permissions, not a `NOT_FOUND` error. Note: This operation is designed to /// be used for building permission-aware UIs and command-line tools, not for /// authorization checking. This operation may "fail open" without warning. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy detail is being /// requested. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/authzPolicies/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleIamV1TestIamPermissionsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.A/55JcXer%#*)LLYpp̈́/// Creates a new BackendAuthenticationConfig in a given project and location. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent resource of the /// BackendAuthenticationConfig. Must be in the format `projects / * /// /locations/{location}`. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [backendAuthenticationConfigId] - Required. Short name of the /// BackendAuthenticationConfig resource to be created. This value should be /// 1-63 characters long, containing only letters, numbers, hyphens, and /// underscores, and should not start with a number. E.g. /// "backend-auth-config". /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.ֱֱֽ֥c/// Deletes a single BackendAuthenticationConfig to /// BackendAuthenticationConfig. /// /// Request parameters: /// /// [name] - Required. A name of the BackendAuthenticationConfig to delete. /// Must be in the format `projects / * /// /locations/{location}/backendAuthenticationConfigs / * `. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/backendAuthenticationConfigs/\[^/\]+$`. /// /// [etag] - Optional. Etag of the resource. If this is provided, it must /// match the server's etag. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.*66CررA/// Gets details of a single BackendAuthenticationConfig to /// BackendAuthenticationConfig. /// /// Request parameters: /// /// [name] - Required. A name of the BackendAuthenticationConfig to get. Must /// be in the format `projects / * /// /locations/{location}/backendAuthenticationConfigs / * `. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/backendAuthenticationConfigs/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [BackendAuthenticationConfig]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error. ⤄@/// Lists BackendAuthenticationConfigs in a given project and location. /// /// Request parameters: /// /// [parent] - Required. The project and location from which the /// BackendAuthenticationConfigs should be listed, specified in the format /// `projects / * /locations/{location}`. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [pageSize] - Maximum number of BackendAuthenticationConfigs to return per /// call. /// /// [pageToken] - The value returned by the last /// `ListBackendAuthenticationConfigsResponse` Indicates that this is a /// continuation of a prior `ListBackendAuthenticationConfigs` call, and that /// the system should return the next page of data. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListBackendAuthenticationConfigsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.#  ꣄/// Updates the parameters of a single BackendAuthenticationConfig to /// BackendAuthenticationConfig. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Required. Name of the BackendAuthenticationConfig resource. It /// matches the pattern `projects / * /// /locations/{location}/backendAuthenticationConfigs/{backend_authentication_config}` /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/backendAuthenticationConfigs/\[^/\]+$`. /// /// [updateMask] - Optional. Field mask is used to specify the fields to be /// overwritten in the BackendAuthenticationConfig resource by the update. The /// fields specified in the update_mask are relative to the resource, not the /// full request. A field will be overwritten if it is in the mask. If the /// user does not provide a mask then all fields will be overwritten. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.ʐʐʖbf%""2??KYYf}}/// Creates a new ClientTlsPolicy in a given project and location. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent resource of the ClientTlsPolicy. Must be /// in the format `projects / * /locations/{location}`. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [clientTlsPolicyId] - Required. Short name of the ClientTlsPolicy resource /// to be created. This value should be 1-63 characters long, containing only /// letters, numbers, hyphens, and underscores, and should not start with a /// number. E.g. "client_mtls_policy". /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.ㄦł/// Deletes a single ClientTlsPolicy. /// /// Request parameters: /// /// [name] - Required. A name of the ClientTlsPolicy to delete. Must be in the /// format `projects / * /locations/{location}/clientTlsPolicies / * `. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/clientTlsPolicies/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error./// Gets details of a single ClientTlsPolicy. /// /// Request parameters: /// /// [name] - Required. A name of the ClientTlsPolicy to get. Must be in the /// format `projects / * /locations/{location}/clientTlsPolicies / * `. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/clientTlsPolicies/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ClientTlsPolicy]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.MMYii(sUU;}/// Gets the access control policy for a resource. /// /// Returns an empty policy if the resource exists and does not have a policy /// set. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy is being /// requested. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/clientTlsPolicies/\[^/\]+$`. /// /// [options_requestedPolicyVersion] - Optional. The maximum policy version /// that will be used to format the policy. Valid values are 0, 1, and 3. /// Requests specifying an invalid value will be rejected. Requests for /// policies with any conditional role bindings must specify version 3. /// Policies with no conditional role bindings may specify any valid value or /// leave the field unset. The policy in the response might use the policy /// version that you specified, or it might use a lower policy version. For /// example, if you specify version 3, but the policy has no conditional role /// bindings, the response uses version 1. To learn which resources support /// conditions in their IAM policies, see the /// [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleIamV1Policy]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error. \ \ h v v        R/// Lists ClientTlsPolicies in a given project and location. /// /// Request parameters: /// /// [parent] - Required. The project and location from which the /// ClientTlsPolicies should be listed, specified in the format `projects / * /// /locations/{location}`. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [pageSize] - Maximum number of ClientTlsPolicies to return per call. /// /// [pageToken] - The value returned by the last /// `ListClientTlsPoliciesResponse` Indicates that this is a continuation of a /// prior `ListClientTlsPolicies` call, and that the system should return the /// next page of data. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListClientTlsPoliciesResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error. '<m/// Updates the parameters of a single ClientTlsPolicy. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Required. Name of the ClientTlsPolicy resource. It matches the /// pattern /// `projects/{project}/locations/{location}/clientTlsPolicies/{client_tls_policy}` /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/clientTlsPolicies/\[^/\]+$`. /// /// [updateMask] - Optional. Field mask is used to specify the fields to be /// overwritten in the ClientTlsPolicy resource by the update. The fields /// specified in the update_mask are relative to the resource, not the full /// request. A field will be overwritten if it is in the mask. If the user /// does not provide a mask then all fields will be overwritten. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.JJ&ivv??_8/// Sets the access control policy on the specified resource. /// /// Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, /// and `PERMISSION_DENIED` errors. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy is being /// specified. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/clientTlsPolicies/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleIamV1Policy]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.!!,!!!!!!"!/// Returns permissions that a caller has on the specified resource. /// /// If the resource does not exist, this will return an empty set of /// permissions, not a `NOT_FOUND` error. Note: This operation is designed to /// be used for building permission-aware UIs and command-line tools, not for /// authorization checking. This operation may "fail open" without warning. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy detail is being /// requested. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/clientTlsPolicies/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleIamV1TestIamPermissionsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.117$$$$$$$$$$c$y$^%$y(((((((( ((()$$(H/// Creates a new DnsThreatDetector in a given project and location. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The value for the parent of the DnsThreatDetector /// resource. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [dnsThreatDetectorId] - Optional. The ID of the requesting /// DnsThreatDetector object. If this field is not supplied, the service /// generates an identifier. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [DnsThreatDetector]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.--. ...+u+u5-J/// Deletes a single DnsThreatDetector. /// /// Request parameters: /// /// [name] - Required. Name of the DnsThreatDetector resource. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/dnsThreatDetectors/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Empty]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.2^2^2j2v2v2//z2Ub/// Gets the details of a single DnsThreatDetector. /// /// Request parameters: /// /// [name] - Required. Name of the DnsThreatDetector resource. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/dnsThreatDetectors/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [DnsThreatDetector]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.8M8M8Y8g8g8q8888884,4,8C/// Lists DnsThreatDetectors in a given project and location. /// /// Request parameters: /// /// [parent] - Required. The parent value for `ListDnsThreatDetectorsRequest`. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [pageSize] - Optional. The requested page size. The server may return /// fewer items than requested. If unspecified, the server picks an /// appropriate default. /// /// [pageToken] - Optional. A page token received from a previous /// `ListDnsThreatDetectorsRequest` call. Provide this to retrieve the /// subsequent page. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListDnsThreatDetectorsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.?m?m??????????::?b/// Updates a single DnsThreatDetector. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Immutable. Identifier. Name of the DnsThreatDetector resource. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/dnsThreatDetectors/\[^/\]+$`. /// /// [updateMask] - Optional. The field mask is used to specify the fields to /// be overwritten in the DnsThreatDetector resource by the update. The fields /// specified in the update_mask are relative to the resource, not the full /// request. A field will be overwritten if it is in the mask. If the mask is /// not provided then all fields present in the request will be overwritten. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [DnsThreatDetector]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.$($($.BeBBBBBBBBeBerBVB;%BVII#IIIIJ J *JJ9J9JFJUJUJbBBۊ_I/// Creates a new FirewallEndpointAssociation in a given project and location. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. Value for parent. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [firewallEndpointAssociationId] - Optional. Id of the requesting object. /// If auto-generating Id server-side, remove this field and /// firewall_endpoint_association_id from the method_signature of Create RPC. /// /// [requestId] - Optional. An optional request ID to identify requests. /// Specify a unique request ID so that if you must retry your request, the /// server will know to ignore the request if it has already been completed. /// The server will guarantee that for at least 60 minutes since the first /// request. For example, consider a situation where you make an initial /// request and the request times out. If you make the request again with the /// same request ID, the server can check if original operation with the same /// request ID was received, and if so, will ignore the second request. This /// prevents clients from accidentally creating duplicate commitments. The /// request ID must be a valid UUID with the exception that zero UUID is not /// supported (00000000-0000-0000-0000-000000000000). /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.SSS+S7S7SDSSSSS`M>M>S/// Deletes a single FirewallEndpointAssociation. /// /// Request parameters: /// /// [name] - Required. Name of the resource /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/firewallEndpointAssociations/\[^/\]+$`. /// /// [requestId] - Optional. An optional request ID to identify requests. /// Specify a unique request ID so that if you must retry your request, the /// server will know to ignore the request if it has already been completed. /// The server will guarantee that for at least 60 minutes after the first /// request. For example, consider a situation where you make an initial /// request and the request times out. If you make the request again with the /// same request ID, the server can check if original operation with the same /// request ID was received, and if so, will ignore the second request. This /// prevents clients from accidentally creating duplicate commitments. The /// request ID must be a valid UUID with the exception that zero UUID is not /// supported (00000000-0000-0000-0000-000000000000). /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.WWXX X XU3U3Wi/// Gets details of a single FirewallEndpointAssociation. /// /// Request parameters: /// /// [name] - Required. Name of the resource /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/firewallEndpointAssociations/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [FirewallEndpointAssociation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.^^^^^^*^6^6^C^P^P^Z^h^h^u^^^YẎ]/// Lists Associations in a given project and location. /// /// Request parameters: /// /// [parent] - Required. Parent value for ListAssociationsRequest /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [filter] - Optional. Filtering results /// /// [orderBy] - Hint for how to order the results /// /// [pageSize] - Optional. Requested page size. Server may return fewer items /// than requested. If unspecified, server will pick an appropriate default. /// /// [pageToken] - A token identifying a page of results the server should /// return. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListFirewallEndpointAssociationsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.ii#i#i0i0i<iHiHiUididiqiiiapapnh'/// Update a single FirewallEndpointAssociation. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Immutable. Identifier. name of resource /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/firewallEndpointAssociations/\[^/\]+$`. /// /// [requestId] - Optional. An optional request ID to identify requests. /// Specify a unique request ID so that if you must retry your request, the /// server will know to ignore the request if it has already been completed. /// The server will guarantee that for at least 60 minutes since the first /// request. For example, consider a situation where you make an initial /// request and the request times out. If you make the request again with the /// same request ID, the server can check if original operation with the same /// request ID was received, and if so, will ignore the second request. This /// prevents clients from accidentally creating duplicate commitments. The /// request ID must be a valid UUID with the exception that zero UUID is not /// supported (00000000-0000-0000-0000-000000000000). /// /// [updateMask] - Required. Field mask is used to specify the fields to be /// overwritten in the Association resource by the update. The fields /// specified in the update_mask are relative to the resource, not the full /// request. A field will be overwritten if it is in the mask. If the user /// does not provide a mask then all fields will be overwritten. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.AABlAlklllllllllAlAbl2l%l2spspsssssssssssssllsd^/// Creates a new FirewallEndpoint in a given project and location. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. Value for parent. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [firewallEndpointId] - Required. Id of the requesting object. If /// auto-generating Id server-side, remove this field and firewall_endpoint_id /// from the method_signature of Create RPC. /// /// [requestId] - Optional. An optional request ID to identify requests. /// Specify a unique request ID so that if you must retry your request, the /// server will know to ignore the request if it has already been completed. /// The server will guarantee that for at least 60 minutes since the first /// request. For example, consider a situation where you make an initial /// request and the request times out. If you make the request again with the /// same request ID, the server can check if original operation with the same /// request ID was received, and if so, will ignore the second request. This /// prevents clients from accidentally creating duplicate commitments. The /// request ID must be a valid UUID with the exception that zero UUID is not /// supported (00000000-0000-0000-0000-000000000000). /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.|Q|Q|]|i|i|v|||vv|Eb/// Deletes a single Endpoint. /// /// Request parameters: /// /// [name] - Required. Name of the resource /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/firewallEndpoints/\[^/\]+$`. /// /// [requestId] - Optional. An optional request ID to identify requests. /// Specify a unique request ID so that if you must retry your request, the /// server will know to ignore the request if it has already been completed. /// The server will guarantee that for at least 60 minutes after the first /// request. For example, consider a situation where you make an initial /// request and the request times out. If you make the request again with the /// same request ID, the server can check if original operation with the same /// request ID was received, and if so, will ignore the second request. This /// prevents clients from accidentally creating duplicate commitments. The /// request ID must be a valid UUID with the exception that zero UUID is not /// supported (00000000-0000-0000-0000-000000000000). /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.  ~e~eV@/// Gets details of a single Endpoint. /// /// Request parameters: /// /// [name] - Required. Name of the resource /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/firewallEndpoints/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [FirewallEndpoint]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error. "//9GGTccp^؃/// Lists FirewallEndpoints in a given project and location. /// /// Request parameters: /// /// [parent] - Required. Parent value for ListEndpointsRequest /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [filter] - Optional. Filtering results /// /// [orderBy] - Hint for how to order the results /// /// [pageSize] - Optional. Requested page size. Server may return fewer items /// than requested. If unspecified, server will pick an appropriate default. /// /// [pageToken] - A token identifying a page of results the server should /// return. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListFirewallEndpointsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.!!C/// Update a single Endpoint. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Immutable. Identifier. Name of resource. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/firewallEndpoints/\[^/\]+$`. /// /// [requestId] - Optional. An optional request ID to identify requests. /// Specify a unique request ID so that if you must retry your request, the /// server will know to ignore the request if it has already been completed. /// The server will guarantee that for at least 60 minutes since the first /// request. For example, consider a situation where you make an initial /// request and the request times out. If you make the request again with the /// same request ID, the server can check if original operation with the same /// request ID was received, and if so, will ignore the second request. This /// prevents clients from accidentally creating duplicate commitments. The /// request ID must be a valid UUID with the exception that zero UUID is not /// supported (00000000-0000-0000-0000-000000000000). /// /// [updateMask] - Required. Field mask is used to specify the fields to be /// overwritten in the Endpoint resource by the update. The fields specified /// in the update_mask are relative to the resource, not the full request. A /// field will be overwritten if it is in the mask. If the user does not /// provide a mask then all fields will be overwritten. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.kk⨄k\\\h%̀3@@LZZ$gȇ>/// Creates a new GatewaySecurityPolicy in a given project and location. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent resource of the GatewaySecurityPolicy. /// Must be in the format `projects/{project}/locations/{location}`. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [gatewaySecurityPolicyId] - Required. Short name of the /// GatewaySecurityPolicy resource to be created. This value should be 1-63 /// characters long, containing only letters, numbers, hyphens, and /// underscores, and should not start with a number. E.g. /// "gateway_security_policy1". /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.'33@  /// Deletes a single GatewaySecurityPolicy. /// /// Request parameters: /// /// [name] - Required. A name of the GatewaySecurityPolicy to delete. Must be /// in the format /// `projects/{project}/locations/{location}/gatewaySecurityPolicies / * `. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/gatewaySecurityPolicies/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.'ׄ/// Gets details of a single GatewaySecurityPolicy. /// /// Request parameters: /// /// [name] - Required. A name of the GatewaySecurityPolicy to get. Must be in /// the format /// `projects/{project}/locations/{location}/gatewaySecurityPolicies / * `. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/gatewaySecurityPolicies/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GatewaySecurityPolicy]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.hhtԇG^#/// Lists GatewaySecurityPolicies in a given project and location. /// /// Request parameters: /// /// [parent] - Required. The project and location from which the /// GatewaySecurityPolicies should be listed, specified in the format /// `projects/{project}/locations/{location}`. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [pageSize] - Maximum number of GatewaySecurityPolicies to return per call. /// /// [pageToken] - The value returned by the last /// 'ListGatewaySecurityPoliciesResponse' Indicates that this is a /// continuation of a prior 'ListGatewaySecurityPolicies' call, and that the /// system should return the next page of data. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListGatewaySecurityPoliciesResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.SSivvH/// Updates the parameters of a single GatewaySecurityPolicy. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Required. Name of the resource. Name is of the form /// projects/{project}/locations/{location}/gatewaySecurityPolicies/{gateway_security_policy} /// gateway_security_policy should match the /// pattern:(^\[a-z\](\[a-z0-9-\]{0,61}\[a-z0-9\])?$). /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/gatewaySecurityPolicies/\[^/\]+$`. /// /// [updateMask] - Optional. Field mask is used to specify the fields to be /// overwritten in the GatewaySecurityPolicy resource by the update. The /// fields specified in the update_mask are relative to the resource, not the /// full request. A field will be overwritten if it is in the mask. If the /// user does not provide a mask then all fields will be overwritten. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.hhfn:ouu::r+%+! (&GGT ̃/// Creates a new GatewaySecurityPolicy in a given project and location. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent where this rule will be created. Format : /// projects/{project}/location/{location}/gatewaySecurityPolicies / * /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/gatewaySecurityPolicies/\[^/\]+$`. /// /// [gatewaySecurityPolicyRuleId] - The ID to use for the rule, which will /// become the final component of the rule's resource name. This value should /// be 4-63 characters, and valid characters are /a-z-/. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.  ""//// Deletes a single GatewaySecurityPolicyRule. /// /// Request parameters: /// /// [name] - Required. A name of the GatewaySecurityPolicyRule to delete. Must /// be in the format /// `projects/{project}/locations/{location}/gatewaySecurityPolicies/{gatewaySecurityPolicy}/rules /// / * `. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/gatewaySecurityPolicies/\[^/\]+/rules/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.&&3ƅ/// Gets details of a single GatewaySecurityPolicyRule. /// /// Request parameters: /// /// [name] - Required. The name of the GatewaySecurityPolicyRule to retrieve. /// Format: projects/{project}/location/{location}/gatewaySecurityPolicies / * /// /rules / * /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/gatewaySecurityPolicies/\[^/\]+/rules/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GatewaySecurityPolicyRule]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.  *88ETTa䇾/// Lists GatewaySecurityPolicyRules in a given project and location. /// /// Request parameters: /// /// [parent] - Required. The project, location and GatewaySecurityPolicy from /// which the GatewaySecurityPolicyRules should be listed, specified in the /// format /// `projects/{project}/locations/{location}/gatewaySecurityPolicies/{gatewaySecurityPolicy}`. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/gatewaySecurityPolicies/\[^/\]+$`. /// /// [pageSize] - Maximum number of GatewaySecurityPolicyRules to return per /// call. /// /// [pageToken] - The value returned by the last /// 'ListGatewaySecurityPolicyRulesResponse' Indicates that this is a /// continuation of a prior 'ListGatewaySecurityPolicyRules' call, and that /// the system should return the next page of data. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListGatewaySecurityPolicyRulesResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.!&&2>>K[[hϦϦ/// Updates the parameters of a single GatewaySecurityPolicyRule. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Required. Immutable. Name of the resource. ame is the full /// resource name so /// projects/{project}/locations/{location}/gatewaySecurityPolicies/{gateway_security_policy}/rules/{rule} /// rule should match the pattern: (^\[a-z\](\[a-z0-9-\]{0,61}\[a-z0-9\])?$). /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/gatewaySecurityPolicies/\[^/\]+/rules/\[^/\]+$`. /// /// [updateMask] - Optional. Field mask is used to specify the fields to be /// overwritten in the GatewaySecurityPolicy resource by the update. The /// fields specified in the update_mask are relative to the resource, not the /// full request. A field will be overwritten if it is in the mask. If the /// user does not provide a mask then all fields will be overwritten. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.С4MBOo׽%-- FSS_mm'zݚݚݧݶݶZZ%!r/// Creates a deployment group in a given project and location. /// /// See https://google.aip.dev/133. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent resource where this deployment group will /// be created. Format: projects/{project}/locations/{location} /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [interceptDeploymentGroupId] - Required. The ID to use for the new /// deployment group, which will become the final component of the deployment /// group's resource name. /// /// [requestId] - Optional. A unique identifier for this request. Must be a /// UUID4. This request is only idempotent if a `request_id` is provided. See /// https://google.aip.dev/155 for more details. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error. ,,9HHU>>*>8>8>E>Q>Q>^>k>k>u>>>>>>7y7y>/// Lists associations in a given project and location. /// /// See https://google.aip.dev/132. /// /// Request parameters: /// /// [parent] - Required. The parent, which owns this collection of /// associations. Example: `projects/123456789/locations/global`. See /// https://google.aip.dev/132 for more details. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [filter] - Optional. Filter expression. See /// https://google.aip.dev/160#filtering for more details. /// /// [orderBy] - Optional. Sort expression. See /// https://google.aip.dev/132#ordering for more details. /// /// [pageSize] - Optional. Requested page size. Server may return fewer items /// than requested. If unspecified, server will pick an appropriate default. /// See https://google.aip.dev/158 for more details. /// /// [pageToken] - Optional. A page token, received from a previous /// `ListInterceptEndpointGroups` call. Provide this to retrieve the /// subsequent page. When paginating, all other parameters provided to /// `ListInterceptEndpointGroups` must match the call that provided the page /// token. See https://google.aip.dev/158 for more details. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListInterceptEndpointGroupAssociationsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.G7G7)GYGfGfGrG~G~GGGGGGGAA}G,8/// Updates an association. /// /// See https://google.aip.dev/134. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Immutable. Identifier. The resource name of this endpoint group /// association, for example: /// `projects/123456789/locations/global/interceptEndpointGroupAssociations/my-eg-association`. /// See https://google.aip.dev/122 for more details. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/interceptEndpointGroupAssociations/\[^/\]+$`. /// /// [requestId] - Optional. A unique identifier for this request. Must be a /// UUID4. This request is only idempotent if a `request_id` is provided. See /// https://google.aip.dev/155 for more details. /// /// [updateMask] - Optional. The list of fields to update. Fields are /// specified relative to the association (e.g. `description`; *not* /// `intercept_endpoint_group_association.description`). See /// https://google.aip.dev/161 for more details. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.""5"J}JJJJJJJJ}J}hJnJS%JnOOOOOOOO%OPPP%P4P4PAJJ Oe/// Creates an endpoint group in a given project and location. /// /// See https://google.aip.dev/133. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent resource where this endpoint group will be /// created. Format: projects/{project}/locations/{location} /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [interceptEndpointGroupId] - Required. The ID to use for the endpoint /// group, which will become the final component of the endpoint group's /// resource name. /// /// [requestId] - Optional. A unique identifier for this request. Must be a /// UUID4. This request is only idempotent if a `request_id` is provided. See /// https://google.aip.dev/155 for more details. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.VVVVVVVVVRRVy7/// Deletes an endpoint group. /// /// See https://google.aip.dev/135. /// /// Request parameters: /// /// [name] - Required. The endpoint group to delete. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/interceptEndpointGroups/\[^/\]+$`. /// /// [requestId] - Optional. A unique identifier for this request. Must be a /// UUID4. This request is only idempotent if a `request_id` is provided. See /// https://google.aip.dev/155 for more details. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.[[[[[\XX[؂/// Gets a specific endpoint group. /// /// See https://google.aip.dev/131. /// /// Request parameters: /// /// [name] - Required. The name of the endpoint group to retrieve. Format: /// projects/{project}/locations/{location}/interceptEndpointGroups/{intercept_endpoint_group} /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/interceptEndpointGroups/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [InterceptEndpointGroup]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.dIdIdUdcdcdpd|d|dddddddddd]]d?/// Lists endpoint groups in a given project and location. /// /// See https://google.aip.dev/132. /// /// Request parameters: /// /// [parent] - Required. The parent, which owns this collection of endpoint /// groups. Example: `projects/123456789/locations/global`. See /// https://google.aip.dev/132 for more details. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [filter] - Optional. Filter expression. See /// https://google.aip.dev/160#filtering for more details. /// /// [orderBy] - Optional. Sort expression. See /// https://google.aip.dev/132#ordering for more details. /// /// [pageSize] - Optional. Requested page size. Server may return fewer items /// than requested. If unspecified, server will pick an appropriate default. /// See https://google.aip.dev/158 for more details. /// /// [pageToken] - Optional. A page token, received from a previous /// `ListInterceptEndpointGroups` call. Provide this to retrieve the /// subsequent page. When paginating, all other parameters provided to /// `ListInterceptEndpointGroups` must match the call that provided the page /// token. See https://google.aip.dev/158 for more details. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListInterceptEndpointGroupsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.mmmm,m,m8mDmDmQm`m`mmm}m}mgg>l/// Updates an endpoint group. /// /// See https://google.aip.dev/134. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Immutable. Identifier. The resource name of this endpoint group, /// for example: /// `projects/123456789/locations/global/interceptEndpointGroups/my-eg`. See /// https://google.aip.dev/122 for more details. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/interceptEndpointGroups/\[^/\]+$`. /// /// [requestId] - Optional. A unique identifier for this request. Must be a /// UUID4. This request is only idempotent if a `request_id` is provided. See /// https://google.aip.dev/155 for more details. /// /// [updateMask] - Optional. The list of fields to update. Fields are /// specified relative to the endpoint group (e.g. `description`; *not* /// `intercept_endpoint_group.description`). See https://google.aip.dev/161 /// for more details. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.JJJpEpwp}p}pppppEpEop6p%p6uu uuuuuu'uuuvvvv!pp%ur/// Creates a deployment group in a given project and location. /// /// See https://google.aip.dev/133. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent resource where this deployment group will /// be created. Format: projects/{project}/locations/{location} /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [mirroringDeploymentGroupId] - Required. The ID to use for the new /// deployment group, which will become the final component of the deployment /// group's resource name. /// /// [requestId] - Optional. A unique identifier for this request. Must be a /// UUID4. This request is only idempotent if a `request_id` is provided. See /// https://google.aip.dev/155 for more details. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.|r|r|~||||||xxᅡ|f>KZZg&/// Deletes a deployment. /// /// See https://google.aip.dev/135. /// /// Request parameters: /// /// [name] - Required. Name of the resource /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/mirroringDeployments/\[^/\]+$`. /// /// [requestId] - Optional. A unique identifier for this request. Must be a /// UUID4. This request is only idempotent if a `request_id` is provided. See /// https://google.aip.dev/155 for more details. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.jjv::a/// Gets a specific deployment. /// /// See https://google.aip.dev/131. /// /// Request parameters: /// /// [name] - Required. The name of the deployment to retrieve. Format: /// projects/{project}/locations/{location}/mirroringDeployments/{mirroring_deployment} /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/mirroringDeployments/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [MirroringDeployment]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.''4CCP::/// Lists deployments in a given project and location. /// /// See https://google.aip.dev/132. /// /// Request parameters: /// /// [parent] - Required. The parent, which owns this collection of /// deployments. Example: `projects/123456789/locations/us-central1-a`. See /// https://google.aip.dev/132 for more details. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [filter] - Optional. Filter expression. See /// https://google.aip.dev/160#filtering for more details. /// /// [orderBy] - Optional. Sort expression. See /// https://google.aip.dev/132#ordering for more details. /// /// [pageSize] - Optional. Requested page size. Server may return fewer items /// than requested. If unspecified, server will pick an appropriate default. /// See https://google.aip.dev/158 for more details. /// /// [pageToken] - Optional. A page token, received from a previous /// `ListMirroringDeployments` call. Provide this to retrieve the subsequent /// page. When paginating, all other parameters provided to /// `ListMirroringDeployments` must match the call that provided the page /// token. See https://google.aip.dev/158 for more details. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListMirroringDeploymentsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.ll,a/// Updates a deployment. /// /// See https://google.aip.dev/134. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Immutable. Identifier. The resource name of this deployment, for /// example: /// `projects/123456789/locations/us-central1-a/mirroringDeployments/my-dep`. /// See https://google.aip.dev/122 for more details. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/mirroringDeployments/\[^/\]+$`. /// /// [requestId] - Optional. A unique identifier for this request. Must be a /// UUID4. This request is only idempotent if a `request_id` is provided. See /// https://google.aip.dev/155 for more details. /// /// [updateMask] - Optional. The list of fields to update. Fields are /// specified relative to the deployment (e.g. `description`; *not* /// `mirroring_deployment.description`). See https://google.aip.dev/161 for /// more details. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.E x%44)Vcco}}0++(/// Creates an association in a given project and location. /// /// See https://google.aip.dev/133. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent resource where this association will be /// created. Format: projects/{project}/locations/{location} /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [mirroringEndpointGroupAssociationId] - Optional. The ID to use for the /// new association, which will become the final component of the endpoint /// group's resource name. If not provided, the server will generate a unique /// ID. /// /// [requestId] - Optional. A unique identifier for this request. Must be a /// UUID4. This request is only idempotent if a `request_id` is provided. See /// https://google.aip.dev/155 for more details. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.kkwȃȃȐȟȟȬڅ_[/// Updates an endpoint group. /// /// See https://google.aip.dev/134. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Immutable. Identifier. The resource name of this endpoint group, /// for example: /// `projects/123456789/locations/global/mirroringEndpointGroups/my-eg`. See /// https://google.aip.dev/122 for more details. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/mirroringEndpointGroups/\[^/\]+$`. /// /// [requestId] - Optional. A unique identifier for this request. Must be a /// UUID4. This request is only idempotent if a `request_id` is provided. See /// https://google.aip.dev/155 for more details. /// /// [updateMask] - Optional. The list of fields to update. Fields are /// specified relative to the endpoint group (e.g. `description`; *not* /// `mirroring_endpoint_group.description`). See https://google.aip.dev/161 /// for more details. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.vv|[j%&33?KKXA/// Starts asynchronous cancellation on a long-running operation. /// /// The server makes a best effort to cancel the operation, but success is not /// guaranteed. If the server doesn't support this method, it returns /// `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation /// or other methods to check whether the cancellation succeeded or whether /// the operation completed despite cancellation. On successful cancellation, /// the operation is not deleted; instead, it becomes an operation with an /// Operation.error value with a google.rpc.Status.code of `1`, corresponding /// to `Code.CANCELLED`. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - The name of the operation resource to be cancelled. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/operations/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Empty]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.88 /// Deletes a long-running operation. /// /// This method indicates that the client is no longer interested in the /// operation result. It does not cancel the operation. If the server doesn't /// support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. /// /// Request parameters: /// /// [name] - The name of the operation resource to be deleted. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/operations/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Empty]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.RR^eerOON/// Gets the latest state of a long-running operation. /// /// Clients can use this method to poll the operation result at intervals as /// recommended by the API service. /// /// Request parameters: /// /// [name] - The name of the operation resource. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/operations/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.      ) C C P+E/// Lists operations that match the specified filter in the request. /// /// If the server doesn't support this method, it returns `UNIMPLEMENTED`. /// /// Request parameters: /// /// [name] - The name of the operation's parent resource. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [filter] - The standard list filter. /// /// [pageSize] - The standard list page size. /// /// [pageToken] - The standard list page token. /// /// [returnPartialSuccess] - When set to `true`, operations that are reachable /// are returned as normal, and those that are unreachable are returned in the /// ListOperationsResponse.unreachable field. This can only be `true` when /// reading across collections. For example, when `parent` is set to /// `"projects/example/locations/-"`. This field is not supported by default /// and will result in an `UNIMPLEMENTED` error if set unless explicitly /// documented otherwise in service or product specific documentation. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListOperationsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.<<B##########b##f%#("("(2(?(?(K(Y(Y(f(}(}(##(/// Creates a new ServerTlsPolicy in a given project and location. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent resource of the ServerTlsPolicy. Must be /// in the format `projects / * /locations/{location}`. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [serverTlsPolicyId] - Required. Short name of the ServerTlsPolicy resource /// to be created. This value should be 1-63 characters long, containing only /// letters, numbers, hyphens, and underscores, and should not start with a /// number. E.g. "server_mtls_policy". /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.------**ㄦ-ł/// Deletes a single ServerTlsPolicy. /// /// Request parameters: /// /// [name] - Required. A name of the ServerTlsPolicy to delete. Must be in the /// format `projects / * /locations/{location}/serverTlsPolicies / * `. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/serverTlsPolicies/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.222222//2/// Gets details of a single ServerTlsPolicy. /// /// Request parameters: /// /// [name] - Required. A name of the ServerTlsPolicy to get. Must be in the /// format `projects / * /locations/{location}/serverTlsPolicies / * `. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/serverTlsPolicies/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ServerTlsPolicy]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.;M;M;Y;i;i(;s;;;4U4U;;}/// Gets the access control policy for a resource. /// /// Returns an empty policy if the resource exists and does not have a policy /// set. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy is being /// requested. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/serverTlsPolicies/\[^/\]+$`. /// /// [options_requestedPolicyVersion] - Optional. The maximum policy version /// that will be used to format the policy. Valid values are 0, 1, and 3. /// Requests specifying an invalid value will be rejected. Requests for /// policies with any conditional role bindings must specify version 3. /// Policies with no conditional role bindings may specify any valid value or /// leave the field unset. The policy in the response might use the policy /// version that you specified, or it might use a lower policy version. For /// example, if you specify version 3, but the policy has no conditional role /// bindings, the response uses version 1. To learn which resources support /// conditions in their IAM policies, see the /// [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleIamV1Policy]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.CCDDDDD-D-D:DIDIDTDnDnD{==>C/// Lists ServerTlsPolicies in a given project and location. /// /// Request parameters: /// /// [parent] - Required. The project and location from which the /// ServerTlsPolicies should be listed, specified in the format `projects / * /// /locations/{location}`. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [pageSize] - Maximum number of ServerTlsPolicies to return per call. /// /// [pageToken] - The value returned by the last /// `ListServerTlsPoliciesResponse` Indicates that this is a continuation of a /// prior `ListServerTlsPolicies` call, and that the system should return the /// next page of data. /// /// [returnPartialSuccess] - Optional. Setting this field to `true` will opt /// the request into returning the resources that are reachable, and into /// including the names of those that were unreachable in the /// \[ListServerTlsPoliciesResponse.unreachable\] field. This can only be /// `true` when reading across collections e.g. when `parent` is set to /// `"projects/example/locations/-"`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListServerTlsPoliciesResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.KKL LLL&L2L2L?LOLOL\G9G97Kh/// Updates the parameters of a single ServerTlsPolicy. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Required. Name of the ServerTlsPolicy resource. It matches the /// pattern `projects / * /// /locations/{location}/serverTlsPolicies/{server_tls_policy}` /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/serverTlsPolicies/\[^/\]+$`. /// /// [updateMask] - Optional. Field mask is used to specify the fields to be /// overwritten in the ServerTlsPolicy resource by the update. The fields /// specified in the update_mask are relative to the resource, not the full /// request. A field will be overwritten if it is in the mask. If the user /// does not provide a mask then all fields will be overwritten. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.RR&RRRRRRRNtNt_Rm/// Sets the access control policy on the specified resource. /// /// Replaces any existing policy. Can return `NOT_FOUND`, `INVALID_ARGUMENT`, /// and `PERMISSION_DENIED` errors. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy is being /// specified. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/serverTlsPolicies/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleIamV1Policy]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.YY,ZZZZZ+Z+Z8TTׇYń/// Returns permissions that a caller has on the specified resource. /// /// If the resource does not exist, this will return an empty set of /// permissions, not a `NOT_FOUND` error. Note: This operation is designed to /// be used for building permission-aware UIs and command-line tools, not for /// authorization checking. This operation may "fail open" without warning. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [resource] - REQUIRED: The resource for which the policy detail is being /// requested. See /// [Resource names](https://cloud.google.com/apis/design/resource_names) for /// the appropriate value for this field. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/serverTlsPolicies/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [GoogleIamV1TestIamPermissionsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.#1#1*#7\\\\]]]]\\f\\%\aoaoaaaaaa"aaaa]*]*"ac/// Creates a new TlsInspectionPolicy in a given project and location. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent resource of the TlsInspectionPolicy. Must /// be in the format `projects/{project}/locations/{location}`. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [tlsInspectionPolicyId] - Required. Short name of the TlsInspectionPolicy /// resource to be created. This value should be 1-63 characters long, /// containing only letters, numbers, hyphens, and underscores, and should not /// start with a number. E.g. "tls_inspection_policy1". /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.h,h,h8hDhDhOhZhZhgdPdPh /// Deletes a single TlsInspectionPolicy. /// /// Request parameters: /// /// [name] - Required. A name of the TlsInspectionPolicy to delete. Must be in /// the format /// `projects/{project}/locations/{location}/tlsInspectionPolicies/{tls_inspection_policy}`. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/tlsInspectionPolicies/\[^/\]+$`. /// /// [force] - If set to true, any rules for this TlsInspectionPolicy will also /// be deleted. (Otherwise, the request will only work if the /// TlsInspectionPolicy has no rules.) /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.mememqm}m}mj3j3m\/// Gets details of a single TlsInspectionPolicy. /// /// Request parameters: /// /// [name] - Required. A name of the TlsInspectionPolicy to get. Must be in /// the format /// `projects/{project}/locations/{location}/tlsInspectionPolicies/{tls_inspection_policy}`. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/tlsInspectionPolicies/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [TlsInspectionPolicy]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.ssssssssst t to5o55s/// Lists TlsInspectionPolicies in a given project and location. /// /// Request parameters: /// /// [parent] - Required. The project and location from which the /// TlsInspectionPolicies should be listed, specified in the format /// `projects/{project}/locations/{location}`. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [pageSize] - Maximum number of TlsInspectionPolicies to return per call. /// /// [pageToken] - The value returned by the last /// 'ListTlsInspectionPoliciesResponse' Indicates that this is a continuation /// of a prior 'ListTlsInspectionPolicies' call, and that the system should /// return the next page of data. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListTlsInspectionPoliciesResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.{{{{{{{{{{{{vnvn{/// Updates the parameters of a single TlsInspectionPolicy. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Required. Name of the resource. Name is of the form /// projects/{project}/locations/{location}/tlsInspectionPolicies/{tls_inspection_policy} /// tls_inspection_policy should match the /// pattern:(^\[a-z\](\[a-z0-9-\]{0,61}\[a-z0-9\])?$). /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/tlsInspectionPolicies/\[^/\]+$`. /// /// [updateMask] - Optional. Field mask is used to specify the fields to be /// overwritten in the TlsInspectionPolicy resource by the update. The fields /// specified in the update_mask are relative to the resource, not the full /// request. A field will be overwritten if it is in the mask. If the user /// does not provide a mask then all fields will be overwritten. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.\]\]\c~g~~~~~~~~g~gY~X~=%~X~~Ćz/// Creates a new UrlList in a given project and location. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent resource of the UrlList. Must be in the /// format `projects / * /locations/{location}`. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [urlListId] - Required. Short name of the UrlList resource to be created. /// This value should be 1-63 characters long, containing only letters, /// numbers, hyphens, and underscores, and should not start with a number. /// E.g. "url_list". /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.&&3BB/// Deletes a single UrlList. /// /// Request parameters: /// /// [name] - Required. A name of the UrlList to delete. Must be in the format /// `projects / * /locations/{location}/urlLists / * `. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/urlLists/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.ʄo/// Gets details of a single UrlList. /// /// Request parameters: /// /// [name] - Required. A name of the UrlList to get. Must be in the format /// `projects / * /locations/{location}/urlLists / * `. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/urlLists/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [UrlList]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.bbn||==X/// Lists UrlLists in a given project and location. /// /// Request parameters: /// /// [parent] - Required. The project and location from which the UrlLists /// should be listed, specified in the format /// `projects/{project}/locations/{location}`. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [pageSize] - Maximum number of UrlLists to return per call. /// /// [pageToken] - The value returned by the last `ListUrlListsResponse` /// Indicates that this is a continuation of a prior `ListUrlLists` call, and /// that the system should return the next page of data. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListUrlListsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error...;\ل/// Updates the parameters of a single UrlList. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Required. Name of the resource provided by the user. Name is of /// the form projects/{project}/locations/{location}/urlLists/{url_list} /// url_list should match the /// pattern:(^\[a-z\](\[a-z0-9-\]{0,61}\[a-z0-9\])?$). /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/urlLists/\[^/\]+$`. /// /// [updateMask] - Optional. Field mask is used to specify the fields to be /// overwritten in the UrlList resource by the update. The fields specified in /// the update_mask are relative to the resource, not the full request. A /// field will be overwritten if it is in the mask. If the user does not /// provide a mask then all fields will be overwritten. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.~~@~d dd:%  "B#APQWXlcsntO+/// List of items to add. /// /// Required.V]V*/// An optional request ID to identify requests. /// /// Specify a unique request ID so that if you must retry your request, the /// server will know to ignore the request if it has already been completed. /// The server will guarantee that for at least 60 minutes since the first /// request. For example, consider a situation where you make an initial /// request and the request times out. If you make the request again with the /// same request ID, the server can check if original operation with the same /// request ID was received, and if so, will ignore the second request. This /// prevents clients from accidentally creating duplicate commitments. The /// request ID must be a valid UUID with the exception that zero UUID is not /// supported (00000000-0000-0000-0000-000000000000). /// /// Optional.SS4/// Request used by the AddAddressGroupItems method.      ,, 1;; @MM R`` eoot#9.P@N;ASWX^nipv~qw!   "$'u3j1)E8C39HLMSb^ripdjuyz; L3/// Capacity of the Address Group /// /// Required.vcvE/// The timestamp when the resource was created. /// /// Output only.[@CS97"#+/08:<?ЍKЂМИЬУЪОФЯгдкw i3(1#)6:;>X?CDLPQyёчѧјѥѓљѪѮѯѵDD|P aD#a/// Can be one of `ALLOW`, `DENY`, `CUSTOM`. /// /// When the action is `CUSTOM`, `customProvider` must be specified. When the /// action is `ALLOW`, only requests matching the policy will be allowed. When /// the action is `DENY`, only requests matching the policy will be denied. /// When a request arrives, the policies are evaluated in the following order: /// 1. If there is a `CUSTOM` policy that matches the request, the `CUSTOM` /// policy is evaluated using the custom authorization providers and the /// request is denied if the provider rejects the request. 2. If there are any /// `DENY` policies that match the request, the request is denied. 3. If there /// are no `ALLOW` policies for the resource or if any of the `ALLOW` policies /// match the request, the request is allowed. 4. Else the request is denied /// by default if none of the configured AuthzPolicies with `ALLOW` action /// match the request. /// /// Required. /// Possible string values are: /// - "AUTHZ_ACTION_UNSPECIFIED" : Unspecified action. /// - "ALLOW" : Allow request to pass through to the backend. /// - "DENY" : Deny the request and return a HTTP 404 to the client. /// - "CUSTOM" : Delegate the authorization decision to an external /// authorization engine.lcE/// The timestamp when the resource was created. /// /// Output only.ԁˀ/// Required if the action is `CUSTOM`. /// /// Allows delegating authorization decisions to Cloud IAP or to Service /// Extensions. One of `cloudIap` or `authzExtension` must be specified. /// /// Optional.5b5C/// A human-readable description of the resource. /// /// Optional.ɮErɮ9/// A list of authorization HTTP rules to match against the incoming request. /// /// A policy match occurs when at least one HTTP rule matches the request or /// when no HTTP rules are specified in the policy. At least one HTTP Rule is /// required for Allow or Deny Action. Limited to 5 rules. /// /// Optional.ʳɼʳ/// Set of labels associated with the `AuthzPolicy` resource. /// /// The format must comply with \[the following /// requirements\](/compute/docs/labeling-resources#requirements). /// /// Optional.ˉʾˉ/// Identifier. /// /// Name of the `AuthzPolicy` resource in the following format: /// `projects/{project}/locations/{location}/authzPolicies/{authz_policy}`. /// /// Required. ˒ _/// Specifies the set of resources to which this policy should be applied to. /// /// Required.ocoE/// The timestamp when the resource was updated. /// /// Output only.Ă4/// `AuthzPolicy` is a resource that allows to forward traffic to a callout /// backend designed to scan the traffic for security purposes.ֳ  ֳֳ6   N!%3/[5:;FMG]uv~מולאזסץצשת׮ׯ׷׻׼؝ 23;؏YRWMS\`ad~eijrvw؟رحظؿسع!Լi!D/// Describes properties of a source of a request. /// /// Optional.Ս*eՍD/// Describes properties of a target of a request. /// /// Optional.֪Ք֪/// CEL expression that describes the conditions to be satisfied for the /// action. /// /// The result of the CEL expression is ANDed with the from and to. Refer to /// the CEL language reference for a list of available attributes. /// /// Optional.ހgg1ԣ5/// Conditions to match against the incoming request./GIINZZ _//:m݅ݎݏݏݘ1ݥݩ߻ݽݳݿޚދިީޯް޻ߜߍߪ߲߫߱mmP݆./// Describes the negated properties of request sources. /// /// Matches requests from sources that do not match the criteria specified in /// this field. At least one of sources or notSources must be specified. /// /// Optional.#.#/// Describes the properties of a request's sources. /// /// At least one of sources or notSources must be specified. Limited to 1 /// source. A match occurs when ANY source (in sources or notSources) matches /// the request. Within a single source, the match follows AND semantics /// across fields and OR semantics within a single field, i.e. a match occurs /// when ANY principal matches AND ANY ipBlocks match. /// /// Optional.ٚٚ=/// Describes properties of one or more sources of a request.:_ff kyy~::iH$  #247G"!025E .03C槃Q߀ɀ/// A list of IP addresses or IP address ranges to match against the source IP /// address of the request. /// /// Limited to 10 ip_blocks per Authorization Policy /// /// Optional.<փp</// A list of identities derived from the client's certificate. /// /// This field will not match on a request unless frontend mutual TLS is /// enabled for the forwarding rule or Gateway and the client certificate has /// been successfully validated by mTLS. Each identity is a string whose value /// is matched against a list of URI SANs, DNS Name SANs, or the common name /// in the client's certificate. A match happens when any principal matches /// with the rule. Limited to 50 principals per Authorization Policy for /// regional internal Application Load Balancers, regional external /// Application Load Balancers, cross-region internal Application Load /// Balancers, and Cloud Service Mesh. This field is not supported for global /// external Application Load Balancers. /// /// Optional.,K,/// A list of resources to match against the resource of the source VM of a /// request. /// /// Limited to 10 resources per Authorization Policy. /// /// Optional. ~~0/// Describes the properties of a single source.Onpp u{{ OO9. 4 &6UV^u}pv쌁Gs^F/// Specifies the name of the header in the request. /// /// Optional.EtEG/// Specifies how the header match will be performed. /// /// Optional.׀]O3/// Determines how a HTTP header should be matched.\wyy ~ \\8>'%*./5 M 6/// The length of the address range. /// /// Required.QCQ)/// The address prefix. /// /// Required.DDhttw'/// Represents a range of IP Addresses.H. 8#P%*+6B7Rqrz!  $()/ρkX;/// A non-empty string whose value is matched against the principal value /// based on the principal_selector. /// /// Only exact match can be applied for CLIENT_CERT_URI_SAN, /// CLIENT_CERT_DNS_NAME_SAN, CLIENT_CERT_COMMON_NAME selectors. /// /// Required.mm/// An enum to decide what principal value the principal rule will match /// against. /// /// If not specified, the PrincipalSelector is CLIENT_CERT_URI_SAN. /// /// Optional. /// Possible string values are: /// - "PRINCIPAL_SELECTOR_UNSPECIFIED" : Unspecified principal selector. It /// will be treated as CLIENT_CERT_URI_SAN by default. /// - "CLIENT_CERT_URI_SAN" : The principal rule is matched against a list of /// URI SANs in the validated client's certificate. A match happens when there /// is any exact URI SAN value match. This is the default principal selector. /// - "CLIENT_CERT_DNS_NAME_SAN" : The principal rule is matched against a /// list of DNS Name SANs in the validated client's certificate. A match /// happens when there is any exact DNS Name SAN value match. This is only /// applicable for Application Load Balancers except for classic Global /// External Application load balancer. CLIENT_CERT_DNS_NAME_SAN is not /// supported for INTERNAL_SELF_MANAGED load balancing scheme. /// - "CLIENT_CERT_COMMON_NAME" : The principal rule is matched against the /// common name in the client's certificate. Authorization against multiple /// common names in the client certificate is not supported. Requests with /// multiple common names in the client certificate will be rejected if /// CLIENT_CERT_COMMON_NAME is set as the principal selector. A match happens /// when there is an exact common name value match. This is only applicable /// for Application Load Balancers except for global external Application Load /// Balancer and classic Application Load Balancer. CLIENT_CERT_COMMON_NAME is /// not supported for INTERNAL_SELF_MANAGED load balancing scheme.>>b06B/// Describes the properties of a principal to be matched against.bbb_C '\ )./:N;^}~ (Y*/0;K<[łL^^{/// An IAM service account to match against the source service account of the /// VM sending the request. /// /// Optional.PtP/// A list of resource tag value permanent IDs to match against the resource /// manager tags value associated with the source VM of a request. /// /// Optional.9k/// Describes the properties of a client VM resource accessing the internal /// application load balancers.7giin77=xH ) (78>?xx/E//// A list of resource tag value permanent IDs to match against the resource /// manager tags value associated with the source VM of a request. /// /// The match follows AND semantics which means all the ids must match. /// Limited to 5 ids in the Tag value id set. /// /// Required.NNfr/// Describes a set of resource tag value permanent IDs to match against the /// resource manager tags value associated with the source VM of a request. 9 X _ _  d r r  w          9 9      :      '  %   * . / 5 E @ V L T G M Y ] ^ d y o    {                             J /// The input string must have the substring specified here. /// /// Note: empty contains match is not allowed, please use regex instead. /// Examples: * ``abc`` matches the value ``xyz.abc.def``~/// The input string must match exactly the string specified here. /// /// Examples: * ``abc`` only matches the value ``abc``./// If true, indicates the exact/prefix/suffix/contains matching should be /// case insensitive. /// /// For example, the matcher ``data`` will match both input string ``Data`` /// and ``data`` if set to true. Y Y/// The input string must have the prefix specified here. /// /// Note: empty prefix is not allowed, please use regex instead. Examples: * /// ``abc`` matches the value ``abc.xyz`` . d ./// The input string must have the suffix specified here. /// /// Note: empty prefix is not allowed, please use regex instead. Examples: * /// ``abc`` matches the value ``xyz.abc``  w 04/// Determines how a string value should be matched.VlnnsVV>1   #3  '),<\" I"/// Describes the negated properties of the targets of a request. /// /// Matches requests for operations that do not match the criteria specified /// in this field. At least one of operations or notOperations must be /// specified. /// /// Optional.G4G/// Describes properties of one or more targets of a request. /// /// At least one of operations or notOperations must be specified. Limited to /// 1 operation. A match occurs when ANY operation (in operations or /// notOperations) matches. Within an operation, the match follows AND /// semantics across fields and OR semantics within a field, i.e. a match /// occurs when ANY path matches AND ANY header matches and ANY method /// matches. /// /// Optional.  D =/// Describes properties of one or more targets of a request.Hnuuz   HHth gJ$%0<1L{|!   /14D+-0P1O^_efvqx~yH9VW]^<H/// A list of headers to match against in http header. /// /// Optional. ʁH /// A list of HTTP Hosts to match against. /// /// The match can be one of exact, prefix, suffix, or contains (substring /// match). Matches are always case sensitive unless the ignoreCase is set. /// Limited to 10 hosts per Authorization Policy. /// /// Optional.QAQ/// A list of HTTP methods to match against. /// /// Each entry must be a valid HTTP method name (GET, PUT, POST, HEAD, PATCH, /// DELETE, OPTIONS). It only allows exact match and is always case sensitive. /// Limited to 10 methods per Authorization Policy. /// /// Optional.>]>/// A list of paths to match against. /// /// The match can be one of exact, prefix, suffix, or contains (substring /// match). Matches are always case sensitive unless the ignoreCase is set. /// Limited to 10 paths per Authorization Policy. Note that this path match /// includes the query parameters. For gRPC services, this should be a /// fully-qualified name of the form /package.service/method. /// /// Optional.mm2͊=/// Describes properties of one or more targets of a request.!!!! !!!@""1":";";"D"Q"U#Y"f"_"h""z"n"x"i"o"}""""""#:"#+#H#I#O#P""Y"2! !b/// A list of headers to match against in http header. /// /// The match can be one of exact, prefix, suffix, or contains (substring /// match). The match follows AND semantics which means all the headers must /// match. Matches are always case sensitive unless the ignoreCase is set. /// Limited to 10 headers per Authorization Policy. /// /// Required.#_#_v#45/// Describes a set of HTTP headers to match against.''('*'*'/'?'? 'D''@'S'l'u'v'v'C'')`'''(z'''''''((( (l(6(#(4(($(9(=(>(A([(B(F(G(O(S(T(|((()R(((((((((()D))) ())))))3))))')+),)T'S'S'm%$$V%$/// Delegate authorization decision to user authored Service Extension. /// /// Only one of cloudIap or authzExtension can be specified. /// /// Optional.'%7'/// Delegates authorization decisions to Cloud IAP. /// /// Applicable only for managed load balancers. Enabling Cloud IAP at the /// AuthzPolicy level is not compatible with Cloud IAP settings in the /// BackendService. Enabling IAP in both places will result in request /// failure. Ensure that IAP is enabled in either the AuthzPolicy or the /// BackendService but not in both places. /// /// Optional.)f)f)##ن\$8X/// Allows delegating authorization decisions to Cloud IAP or to Service /// Extensions.++,,,++:,,<,E,F,F,O,\,`,,s,j,u,,,{,,v,|,,,,,,,,,,,,,,,,,=+*+ɀ/// A list of references to authorization extensions that will be invoked for /// requests matching this policy. /// /// Limited to 1 custom provider. /// /// Required.,,~-*7*77*Ѐ/// Delegate authorization decision to user authored extension. /// /// Only one of cloudIap or authzExtension can be specified. /// /// Optional.3333333333>4 44%4&4&4/%4<4@54]4J4|4d4z4_4e44444444444444444444444555 5 4 4 43/3E/// All gateways and forwarding rules referenced by this policy and extensions /// must share the same load balancing scheme. /// /// Supported values: `INTERNAL_MANAGED` and `EXTERNAL_MANAGED`. For more /// information, refer to /// [Backend services overview](https://cloud.google.com/load-balancing/docs/backend-service). /// /// Required. /// Possible string values are: /// - "LOAD_BALANCING_SCHEME_UNSPECIFIED" : Default value. Do not use. /// - "INTERNAL_MANAGED" : Signifies that this is used for Regional internal /// or Cross-region internal Application Load Balancing. /// - "EXTERNAL_MANAGED" : Signifies that this is used for Global external or /// Regional external Application Load Balancing. /// - "INTERNAL_SELF_MANAGED" : Signifies that this is used for Cloud Service /// Mesh. Meant for use by CSM GKE controller only.33.3l/// A list of references to the Forwarding Rules on which this policy will be /// applied. /// /// Required.555=/;/;/K/// Specifies the set of targets to which this policy should be applied to.BC CCCC+C+C0C@C@CECVCV C[CeCe CjCvCv C{CCCCCCCCCBBCCCCCCvD D F~D(DDED/DCD*D0DHDLDMDSDhD^D~DoD|DjDpDDDDDDDDDDDDDDDDDDDDDDDDDDEDEE?EE EEEEEE E#E=E$E(E)E1E5E6E>E@EBEEEEQEEEEEEEEEEEEEEEEEEEEEEEFFF&FF$FFF)F-F.F4FMF?FgFTFeFOFUFjFnFoFuCC΂C :9H:/// A reference to a certificatemanager.googleapis.com.Certificate resource. /// /// This is a relative resource path following the form /// "projects/{project}/locations/{location}/certificates/{certificate}". Used /// by a BackendService to negotiate mTLS when the backend connection uses TLS /// and the backend requests a client certificate. Must have a CLIENT_AUTH /// scope. /// /// Optional.;e; c;eE/// The timestamp when the resource was created. /// /// Output only.;;t[;HHM^^cuuz ||6.2%# (,-1@BEeFdstz{pa~1!/"489?ZJ=\abmn/  ?SMUf[dV\imnqrvw$;+9&,>BCG^Rvet`fy}~ %z @M/// List of networks that are associated with this endpoint in the local zone. /// /// This is a projection of the FirewallEndpointAssociations pointing at this /// endpoint. A network will only appear in this list after traffic routing is /// fully configured. Format: projects/{project}/global/networks/{name}. /// /// Output only..)./// List of FirewallEndpointAssociations that are associated to this endpoint. /// /// An association will only appear in this list after traffic routing is /// fully configured. /// /// Output only.?c?/// Project to bill on endpoint uptime usage. /// /// Required.I+/// Create time stamp. /// /// Output only.ll_/// Description of the firewall endpoint. /// /// Max length 2048 characters. /// /// Optional.|i0/// Settings for the endpoint. /// /// Optional.D`D//// Labels as key value pairs /// /// Optional.OXX?CDLPQY[]`l$;+9&,>BCGWRh^fY_kopv  < H*/// Create time stamp /// /// Output only.s/// Whether the association is disabled. /// /// True indicates that traffic won't be intercepted /// /// Optional.sO/// The URL of the FirewallEndpoint that is being associated. /// /// Required.l`l//// Labels as key value pairs /// /// Optional.wW;/// Identifier. /// /// name of resource /// /// Immutable.-a-F/// The URL of the network that is being associated. /// /// Required.9l/// Whether reconciling is in progress, recommended per /// https://google.aip.dev/128. /// /// Output only.VɁVk/// Current state of the association. /// /// Output only. /// Possible string values are: /// - "STATE_UNSPECIFIED" : Not set. /// - "CREATING" : Being created. /// - "ACTIVE" : Active and ready for traffic. /// - "DELETING" : Being deleted. /// - "INACTIVE" : Down or in an error state. /// - "ORPHAN" : The project that housed the association has been deleted.`yR/// The URL of the TlsInspectionPolicy that is being associated. /// /// Optional.H*/// Update time stamp /// /// Output only.  -gg)/// Message describing Association object!EGG LRR W!!@e ee/// The resource name of the FirewallEndpointAssociation. /// /// Format: /// projects/{project}/locations/{location}/firewallEndpointAssociations/{id} /// /// Output only.o/// The VPC network associated. /// /// Format: projects/{project}/global/networks/{name}. /// /// Output only.?r/// This is a subset of the FirewallEndpointAssociation message, containing /// fields to be used by the consumer.<   #'e:(XAV<B[_`d〄 l/// Indicates whether Jumbo Frames are enabled. /// /// Default value is false. /// /// Optional. Immutable.kkO/// Settings for the endpoint. ##(AAF̀[pyzz:&$)-.4R?qYoTZtxy[[hqcE/// The timestamp when the resource was created. /// /// Output only.a[a>Xb N/// The GatewaySecurityPolicyRule resource is in a nested collection within a /// GatewaySecurityPolicy and represents a traffic matching condition and /// associated action to perform.  %FFKtbC%'BCKb]c&  (PQYpkqbbs)l)/// The certificate provider instance specification that will be passed to the /// data plane, which will be used to load necessary credential information.Ia/// gRPC specific configuration to access the gRPC server to obtain the cert /// and private key.ف$e8/// Specification of certificate provider. /// /// Defines the mechanism to obtain the certificate and private key for peer to /// peer authentication.')).;>foppyÆÊøÔËéÛçÖÜìðñ÷>>|g\}/// The target URI of the gRPC endpoint. /// /// Only UDS path is supported, and should start with "unix:". /// /// Required.þþ~=/'/// Specification of the GRPC Endpoint.h~ʀʀʅʖʖ ʛhh=ʩʿ%$% $358H  ʩʩ}juj=/// The configuration for logging of each type of permission.\~\/// Specifies a service that will be enabled for audit logging. /// /// For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. /// `allServices` is a special value that covers all services.**N@@鄢/// Specifies the audit configuration for a service. /// /// The configuration determines which permission types are logged, and what /// identities, if any, are exempted from logging. An AuditConfig must have one /// or more AuditLogConfigs. If there are AuditConfigs for both `allServices` /// and a specific service, the union of the two AuditConfigs is used for that /// service: the log_types specified in each AuditConfig are enabled, and the /// exempted_members in each AuditLogConfig are exempted. Example Policy with /// multiple AuditConfigs: { "audit_configs": \[ { "service": "allServices", /// "audit_log_configs": \[ { "log_type": "DATA_READ", "exempted_members": \[ /// "user:jose@example.com" \] }, { "log_type": "DATA_WRITE" }, { "log_type": /// "ADMIN_READ" } \] }, { "service": "sampleservice.googleapis.com", /// "audit_log_configs": \[ { "log_type": "DATA_READ" }, { "log_type": /// "DATA_WRITE", "exempted_members": \[ "user:aliya@example.com" \] } \] } \] } /// For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ /// logging. It also exempts `jose@example.com` from DATA_READ logging, and /// `aliya@example.com` from DATA_WRITE logging.  >&E37JAwLQR]i^y}~' !"&57:Z;Yhiop{݂?/// The condition that is associated with this binding. /// /// If the condition evaluates to `true`, then this binding applies to the /// current request. If the condition evaluates to `false`, then this binding /// does not apply to the current request. However, a different role binding /// might grant the same role to one or more of the principals in this /// binding. To learn which resources support conditions in their IAM /// policies, see the /// [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).!X/// Specifies the principals requesting access for a Google Cloud resource. /// /// `members` can have the following values: * `allUsers`: A special /// identifier that represents anyone who is on the internet; with or without /// a Google account. * `allAuthenticatedUsers`: A special identifier that /// represents anyone who is authenticated with a Google account or a service /// account. Does not include identities that come from external identity /// providers (IdPs) through identity federation. * `user:{emailid}`: An email /// address that represents a specific Google account. For example, /// `alice@example.com` . * `serviceAccount:{emailid}`: An email address that /// represents a Google service account. For example, /// `my-other-app@appspot.gserviceaccount.com`. * /// `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An /// identifier for a /// [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). /// For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * /// `group:{emailid}`: An email address that represents a Google group. For /// example, `admins@example.com`. * `domain:{domain}`: The G Suite domain /// (primary) that represents all the users of that domain. For example, /// `google.com` or `example.com`. * /// `principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: /// A single identity in a workforce identity pool. * /// `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/group/{group_id}`: /// All workforce identities in a group. * /// `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: /// All workforce identities with a specific attribute value. * /// `principalSet://iam.googleapis.com/locations/global/workforcePools/{pool_id} /// / * `: All identities in a workforce identity pool. * /// `principal://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/subject/{subject_attribute_value}`: /// A single identity in a workload identity pool. * /// `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/group/{group_id}`: /// A workload identity pool group. * /// `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id}/attribute.{attribute_name}/{attribute_value}`: /// All identities in a workload identity pool with a certain attribute. * /// `principalSet://iam.googleapis.com/projects/{project_number}/locations/global/workloadIdentityPools/{pool_id} /// / * `: All identities in a workload identity pool. * /// `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique /// identifier) representing a user that has been recently deleted. For /// example, `alice@example.com?uid=123456789012345678901`. If the user is /// recovered, this value reverts to `user:{emailid}` and the recovered user /// retains the role in the binding. * /// `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus /// unique identifier) representing a service account that has been recently /// deleted. For example, /// `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If /// the service account is undeleted, this value reverts to /// `serviceAccount:{emailid}` and the undeleted service account retains the /// role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email /// address (plus unique identifier) representing a Google group that has been /// recently deleted. For example, /// `admins@example.com?uid=123456789012345678901`. If the group is recovered, /// this value reverts to `group:{emailid}` and the recovered group retains /// the role in the binding. * /// `deleted:principal://iam.googleapis.com/locations/global/workforcePools/{pool_id}/subject/{subject_attribute_value}`: /// Deleted single identity in a workforce identity pool. For example, /// `deleted:principal://iam.googleapis.com/locations/global/workforcePools/my-pool-id/subject/my-subject-attribute-value`.㶁/// Role that is assigned to the list of `members`, or principals. /// /// For example, `roles/viewer`, `roles/editor`, or `roles/owner`. For an /// overview of the IAM roles and permissions, see the /// [IAM documentation](https://cloud.google.com/iam/docs/roles-overview). For /// a list of the available pre-defined roles, see /// [here](https://cloud.google.com/iam/docs/understanding-roles).嬀ΈΈ7/// Associates `members`, or principals, with a `role`.CT[[`rr w  CCdG3 *,/?  !$4 "&'*yry@/// Specifies cloud audit logging configuration for this policy.22t/// Associates a list of `members`, or principals, with a `role`. /// /// Optionally, may specify a `condition` that determines how and when the /// `bindings` are applied. Each of the `bindings` must contain at least one /// principal. The `bindings` in a `Policy` can refer to up to 1,500 /// principals; up to 250 of these principals can be Google groups. Each /// occurrence of a principal counts towards these limits. For example, if the /// `bindings` grant 50 different roles to `user:alice@example.com`, and not /// to any other principal, then you can add another 1,450 principals to the /// `bindings` in the `Policy`.?c9/// `etag` is used for optimistic concurrency control as a way to help prevent /// simultaneous updates of a policy from overwriting each other. /// /// It is strongly suggested that systems make use of the `etag` in the /// read-modify-write cycle to perform policy updates in order to avoid race /// conditions: An `etag` is returned in the response to `getIamPolicy`, and /// systems are expected to put that etag in the request to `setIamPolicy` to /// ensure that their change will be applied to the same version of the /// policy. **Important:** If you use IAM Conditions, you must include the /// `etag` field whenever you call `setIamPolicy`. If you omit this field, /// then IAM allows you to overwrite a version `3` policy with a version `1` /// policy, and all of the conditions in the version `3` policy are lost.77x/// Specifies the format of the policy. /// /// Valid values are `0`, `1`, and `3`. Requests that specify an invalid value /// are rejected. Any operation that affects conditional role bindings must /// specify version `3`. This requirement applies to the following operations: /// * Getting a policy that includes a conditional role binding * Adding a /// conditional role binding to a policy * Changing a conditional role binding /// in a policy * Removing any role binding, with or without a condition, from /// a policy that includes conditions **Important:** If you use IAM /// Conditions, you must include the `etag` field whenever you call /// `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a /// version `3` policy with a version `1` policy, and all of the conditions in /// the version `3` policy are lost. If a policy does not include any /// conditions, operations on that policy may specify any valid version or /// leave the field unset. To learn which resources support conditions in /// their IAM policies, see the /// [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).D99F]搘f/// An Identity and Access Management (IAM) policy, which specifies access /// controls for Google Cloud resources. /// /// A `Policy` is a collection of `bindings`. A `binding` binds one or more /// `members`, or principals, to a single `role`. Principals can be user /// accounts, service accounts, Google groups, and domains (such as G Suite). A /// `role` is a named list of permissions; each `role` can be an IAM predefined /// role or a user-created custom role. For some types of Google Cloud /// resources, a `binding` can also specify a `condition`, which is a logical /// expression that allows access to a resource only if the expression evaluates /// to `true`. A condition can add constraints based on attributes of the /// request, the resource, or both. To learn which resources support conditions /// in their IAM policies, see the /// [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). /// **JSON example:** ``` { "bindings": [ { "role": /// "roles/resourcemanager.organizationAdmin", "members": [ /// "user:mike@example.com", "group:admins@example.com", "domain:google.com", /// "serviceAccount:my-project-id@appspot.gserviceaccount.com" ] }, { "role": /// "roles/resourcemanager.organizationViewer", "members": [ /// "user:eve@example.com" ], "condition": { "title": "expirable access", /// "description": "Does not grant access after Sep 2020", "expression": /// "request.time < timestamp('2020-10-01T00:00:00.000Z')", } } ], "etag": /// "BwWWja0YfJA=", "version": 3 } ``` **YAML example:** ``` bindings: - /// members: - user:mike@example.com - group:admins@example.com - /// domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com /// role: roles/resourcemanager.organizationAdmin - members: - /// user:eve@example.com role: roles/resourcemanager.organizationViewer /// condition: title: expirable access description: Does not grant access after /// Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') /// etag: BwWWja0YfJA= version: 3 ``` For a description of IAM and its features, /// see the [IAM documentation](https://cloud.google.com/iam/docs/). ""'?8V_``i.vz}6( 8PFfWdRXimnt88GWہ/// REQUIRED: The complete policy to be applied to the `resource`. /// /// The size of the policy is limited to a few 10s of KB. An empty policy is a /// valid policy but certain Google Cloud services (such as Projects) might /// reject them./// OPTIONAL: A FieldMask specifying which fields of the policy to modify. /// /// Only the fields in the mask will be modified. If no mask is provided, the /// following default mask is used: `paths: "bindings, etag"`./// Request message for `SetIamPolicy` method.m|~~mm4 R       %  ; , 9 ' - > B C I/// The name of the HTTP header to match. /// /// For matching against the HTTP request's authority, use a headerMatch with /// the header name ":authority". For matching a request's method, use the /// headerName ":method". /// /// Required.^^/// The value of the header must match the regular expression specified in /// regexMatch. /// /// For regular expression grammar, please see: /// en.cppreference.com/w/cpp/regex/ecmascript For matching against a port /// specified in the HTTP request, use a headerMatch with headerName set to /// Host and a regular expression that satisfies the RFC2616 Host header's /// port specifier. /// /// Required. X X |<<u2/// Specification of HTTP header match attributes.   %55:KKPddi    v2(H9F4:KOPVlasnt%# (,-3D>F~WLUGMZ^_b|cghptu} ,*/348HCYOWJP\`ag|r~   j x/// The timestamp when the resource was created. /// /// See https://google.aip.dev/148#timestamps. /// /// Output only.   y/// User-provided description of the deployment. /// /// Used as additional context for the deployment. /// /// Optional.   /// The regional forwarding rule that fronts the interceptors, for example: /// `projects/123456789/regions/us-central1/forwardingRules/my-rule`. /// /// See https://google.aip.dev/124. /// /// Required. Immutable. /// The deployment group that this deployment is a part of, for example: /// `projects/123456789/locations/global/interceptDeploymentGroups/my-dg`. /// /// See https://google.aip.dev/124. /// /// Required. Immutable.CC\/// Labels are key/value pairs that help to organize and filter resources. /// /// Optional.JNJ/// Identifier. /// /// The resource name of this deployment, for example: /// `projects/123456789/locations/us-central1-a/interceptDeployments/my-dep`. /// See https://google.aip.dev/122 for more details. /// /// Immutable.S>/// The current state of the resource does not match the user's intended /// state, and the system is working to reconcile them. /// /// This part of the normal operation (e.g. linking a new association to the /// parent group). See https://google.aip.dev/128. /// /// Output only.OO/// The current state of the deployment. /// /// See https://google.aip.dev/216. /// /// Output only. /// Possible string values are: /// - "STATE_UNSPECIFIED" : State not set (this is not a valid state). /// - "ACTIVE" : The deployment is ready and in sync with the parent group. /// - "CREATING" : The deployment is being created. /// - "DELETING" : The deployment is being deleted. /// - "OUT_OF_SYNC" : The deployment is out of sync with the parent group. In /// most cases, this is a result of a transient issue within the system (e.g. /// a delayed data-path config) and the system is expected to recover /// automatically. See the parent deployment group's state for more details. /// - "DELETE_FAILED" : An attempt to delete the deployment has failed. This /// is a terminal state and the deployment is not expected to recover. The /// only permitted operation is to retry deleting the deployment.Y/// The timestamp when the resource was most recently updated. /// /// See https://google.aip.dev/148#timestamps. /// /// Output only. ! !{ R*/// A deployment represents a zonal intercept backend ready to accept /// GENEVE-encapsulated traffic, e.g. a zonal instance group fronted by an /// internal passthrough load balancer. /// /// Deployments are always part of a global deployment group which represents a /// global intercept service.''0 '7'7'<'Y'Y'^'n'n's'' '''''' '''''' '''''' (( ( ('' (&(>(G(H(H(Q(^(b-((l(((((((((((((()()))))))))))))******4*$*2**%*7*;*<*B*S*M*U**f*[*d*V*\*i*m*n*q**r*v*w*************++ *+ **+++++&+(++++;+++++++++++++++,,, ,,G,:,$,8,,%,=,A,B,F,U,W,Z,,j,- - ---%--8-,-6-'---;-?-@-F-\-Q-s-c-q-^-d-v-z-{-----------------------(&(&(? Y/// The list of endpoint groups that are connected to this resource. /// /// Output only.8x/// The timestamp when the resource was created. /// /// See https://google.aip.dev/148#timestamps. /// /// Output only.t׀t/// User-provided description of the deployment group. /// /// Used as additional context for the deployment group. /// /// Optional.  \/// Labels are key/value pairs that help to organize and filter resources. /// /// Optional.   U/// The list of locations where the deployment group is present. /// /// Output only.! !/// Identifier. /// /// The resource name of this deployment group, for example: /// `projects/123456789/locations/global/interceptDeploymentGroups/my-dg`. See /// https://google.aip.dev/122 for more details. /// /// Immutable.""""""\""!"U/// The list of Intercept Deployments that belong to this group. /// /// Output only.#"#/// The network that will be used for all child deployments, for example: /// `projects/{project}/global/networks/{network}`. /// /// See https://google.aip.dev/124. /// /// Required. Immutable.$#7$/// The current state of the resource does not match the user's intended /// state, and the system is working to reconcile them. /// /// This is part of the normal operation (e.g. adding a new deployment to the /// group) See https://google.aip.dev/128. /// /// Output only.&a$Ɂ&av/// The current state of the deployment group. /// /// See https://google.aip.dev/216. /// /// Output only. /// Possible string values are: /// - "STATE_UNSPECIFIED" : State not set (this is not a valid state). /// - "ACTIVE" : The deployment group is ready. /// - "CREATING" : The deployment group is being created. /// - "DELETING" : The deployment group is being deleted.' &k' /// The timestamp when the resource was most recently updated. /// /// See https://google.aip.dev/148#timestamps. /// /// Output only.--u.b/// A deployment group aggregates many zonal intercept backends (deployments) /// into a single global intercept service. /// /// Consumers can connect this service using an endpoint group.2222 222<3 373@3A3A3J3W3[33`3\3p3g3n3b3h3s3w3x3~3 3 x38212/// The connected endpoint group's resource name, for example: /// `projects/123456789/locations/global/interceptEndpointGroups/my-eg`. /// /// See https://google.aip.dev/124. /// /// Output only.33j31o1o19/// An endpoint group connected to this deployment group.8888 888 888<899$9%9%9.9;9?99M9I9]9T9[9O9U9`9d9e9k9{9v9999}9999988954U5/// The name of the Intercept Deployment, in the format: /// `projects/{project}/locations/{location}/interceptDeployments/{intercept_deployment}`. /// /// Output only.858g/// Most recent known state of the deployment. /// /// Output only. /// Possible string values are: /// - "STATE_UNSPECIFIED" : State not set (this is not a valid state). /// - "ACTIVE" : The deployment is ready and in sync with the parent group. /// - "CREATING" : The deployment is being created. /// - "DELETING" : The deployment is being deleted. /// - "OUT_OF_SYNC" : The deployment is out of sync with the parent group. In /// most cases, this is a result of a transient issue within the system (e.g. /// a delayed data-path config) and the system is expected to recover /// automatically. See the parent deployment group's state for more details. /// - "DELETE_FAILED" : An attempt to delete the deployment has failed. This /// is a terminal state and the deployment is not expected to recover. The /// only permitted operation is to retry deleting the deployment.99933Q4.4/// A deployment belonging to this deployment group.GG GGGGGGH H HH!H!H&H7H7H<HZHZ H_HkHk HpHzHzHHH HHHHGGHHHHHHHHMvI HI I0I#II!I II&I*I+I/I>I@ICIISIIIJJJ%J JaK&J'J,J-J8JSJ9JcJJJKJJJJJJJJJKJJJJJKK(K@K6KVKGKTKBKHKYK]K^KdKzKoKKKK|KKKKKKKKKKKKKKKLLL LLKL$LL"LLL'L+L,L/LIL0L4L5L=LALBLJLLLNLQLL]LLLLLLLLLLLLLLLLLLLLMMMMMM&MM$MMM)M-M.M4MIM?M_MPM]MKMQMbMfMgMmHHH B=>B/// User-provided description of the endpoint group. /// /// Used as additional context for the endpoint group. /// /// Optional.?Q>R?Q/// The deployment group that this endpoint group is connected to, for /// example: /// `projects/123456789/locations/global/interceptDeploymentGroups/my-dg`. /// /// See https://google.aip.dev/124. /// /// Required. Immutable.??n?\/// Labels are key/value pairs that help to organize and filter resources. /// /// Optional.@@@/// Identifier. /// /// The resource name of this endpoint group, for example: /// `projects/123456789/locations/global/interceptEndpointGroups/my-eg`. See /// https://google.aip.dev/122 for more details. /// /// Immutable.B2A9B2/// The current state of the resource does not match the user's intended /// state, and the system is working to reconcile them. /// /// This is part of the normal operation (e.g. adding a new association to the /// group). See https://google.aip.dev/128. /// /// Output only.FBBF/// The current state of the endpoint group. /// /// See https://google.aip.dev/216. /// /// Output only. /// Possible string values are: /// - "STATE_UNSPECIFIED" : State not set (this is not a valid state). /// - "ACTIVE" : The endpoint group is ready and in sync with the target /// deployment group. /// - "CLOSED" : The deployment group backing this endpoint group has been /// force-deleted. This endpoint group cannot be used and interception is /// effectively disabled. /// - "CREATING" : The endpoint group is being created. /// - "DELETING" : The endpoint group is being deleted. /// - "OUT_OF_SYNC" : The endpoint group is out of sync with the backing /// deployment group. In most cases, this is a result of a transient issue /// within the system (e.g. an inaccessible location) and the system is /// expected to recover automatically. See the associations field for details /// per network and location. /// - "DELETE_FAILED" : An attempt to delete the endpoint group has failed. /// This is a terminal state and the endpoint group is not expected to /// recover. The only permitted operation is to retry deleting the endpoint /// group.GGG/// The timestamp when the resource was most recently updated. /// /// See https://google.aip.dev/148#timestamps. /// /// Output only.M|M|dM:F:F;_/// An endpoint group is a consumer frontend for a deployment group (backend). /// /// In order to configure intercept for a network, consumers must create: - An /// association between their network and the endpoint group. - A security /// profile that points to the endpoint group. - A firewall rule that references /// the security profile (group)._u_ ________ _______`` ``"`" `'`4`4`9`J`J `O`Z`Z`__u_u`t```````e```````````a`a4aa2aaa7a;a<aBaSaMaUaafa[adaVa\aiamanaqaaravawaaaaaaaaaaaaabb ab aabbbbb&b(b+bb;bbbbbbbbcc bc bbccccc&c(c+cc;cddd d ddd+d"d)dd#d.d2d3d9dKdDd^dRd\dMdSdadedfdlddwdddddddddddddddddddddddddddeeee `t`t` SBRSBx/// The timestamp when the resource was created. /// /// See https://google.aip.dev/148#timestamps. /// /// Output only.TCSQTC/// The endpoint group that this association is connected to, for example: /// `projects/123456789/locations/global/interceptEndpointGroups/my-eg`. /// /// See https://google.aip.dev/124. /// /// Required. Immutable.TT^T\/// Labels are key/value pairs that help to organize and filter resources. /// /// Optional.UTU/// The list of locations where the association is configured. /// /// This information is retrieved from the linked endpoint group. /// /// Output only.VVVVVVVW8UW8/// The list of locations where the association is present. /// /// This information is retrieved from the linked endpoint group, and not /// configured as part of the association itself. /// /// Output only.XkWM"Xk/// Identifier. /// /// The resource name of this endpoint group association, for example: /// `projects/123456789/locations/global/interceptEndpointGroupAssociations/my-eg-association`. /// See https://google.aip.dev/122 for more details. /// /// Immutable.Y<XtY/// The endpoint group's view of a connected deployment group.xbxxxxxxxxbxbcxxxxxx%y yzy/yy1y_yRy7yPy2y8yUyYyZy^ymyoyrzDyz5zRzSzYzZzrzezzyzztzzzzzzxxɁxw3vw3J/// A list of references that matches the specified filter in the request.xPwNxP/// If there might be more results than those appearing in this response, then /// `next_page_token` is included. /// /// To get the next set of results, call this method again using the value of /// `next_page_token` as `page_token`.zzzv<v<vy6/// Response of the ListAddressGroupReferences method.}C}z}}}}}}}}}}C}C}~~~~~$~+~/~~G~9~a~N~_~I~O~d~h~i~o~~z~~~~~~~~~~~~~~~~~~~~}}ρ&~|h|%Q|h3/// FirewallPolicy that is using the Address Group.||{a|H/// Rule priority of the FirewallPolicy that is using the Address Group.}0|]}0?/// Cloud Armor SecurityPolicy that is using the Address Group.~~I{{{"/// The Reference of AddressGroup.ZszzZZg< @3!1"6:;?NPSc'%*./5K@MpcSaNTfjko~ŁM$/// List of AddressGroups resources./// If there might be more results than those appearing in this response, then /// `next_page_token` is included. /// /// To get the next set of results, call this method again using the value of /// `next_page_token` as `page_token`.JNJ(/// Locations that could not be reached.ȁ=FF6/// Response returned by the ListAddressGroups method.99>aVw% VVxtd,/// List of AuthorizationPolicies resources.݁߀/// If there might be more results than those appearing in this response, then /// `next_page_token` is included. /// /// To get the next set of results, call this method again using the value of /// `next_page_token` as `page_token`.  N>/// Response returned by the ListAuthorizationPolicies method.uuug <4'6[N<L7=QUVZikn~ (A/?*0DHIOeZg}m{hniP(/// The list of `AuthzPolicy` resources._B/// A token identifying a page of results that the server returns.e"Ne(/// Locations that could not be reached.=Kfoppy< $&I<,:'-?CDHWY\|]{>>_gb/// The list of AssociationP`PC/// A token identifying a page of results the server should return.bN(/// Locations that could not be reached.y22i0/// Message for response to listing Associationszzzo <*.I8KtgQeLRjnos &'-.F9_M]HNbfgmx tI/// The list of Endpoint`C/// A token identifying a page of results the server should return.j'Nj(/// Locations that could not be reached.M$1R-/// Message for response to listing Endpoints{8ABBK<X\]}fwd  >=LMSTJ9j./// List of GatewaySecurityPolicies resources.1/1/// If there might be more results than those appearing in this response, then /// 'next_page_token' is included. /// /// To get the next set of results, call this method again using the value of /// 'next_page_token' as 'page_token'.CN(/// Locations that could not be reached.cceQQy@/// Response returned by the ListGatewaySecurityPolicies method. FMMRrrw  <!SF'D"(IMNRegj~&'-.F9_M]HNbfgmxWAs0/// List of GatewaySecurityPolicyRule resources./// If there might be more results than those appearing in this response, then /// 'next_page_token' is included. /// /// To get the next set of results, call this method again using the value of /// 'next_page_token' as 'page_token'.N(/// Locations that could not be reached.q$̆C/// Response returned by the ListGatewaySecurityPolicyRules method.<ahhm<BCGVX[{\z܉܊ܐܑځځڢطfeط./// The deployments from the specified parent.٣Ѐ٣/// A token that can be sent as `page_token` to retrieve the next page. /// /// If this field is omitted, there are no subsequent pages. See /// https://google.aip.dev/158 for more details.ٵN(/// Locations that could not be reached.ܠܠYA2/// Response message for ListMirroringDeployments.'GGL{d%U* $%)<>AU  %>,<'-AEFLddw//// The associations from the specified parent.Ӏ/// A token that can be sent as `page_token` to retrieve the next page. /// /// If this field is omitted, there are no subsequent pages. See /// https://google.aip.dev/158 for more details.[[LD@/// Response message for ListMirroringEndpointGroupAssociations.hhhe%9"GviMgHNlpqu4!FGMNfYm}hnсgog2/// The endpoint groups from the specified parent.V䃀V/// A token that can be sent as `page_token` to retrieve the next page. /// /// If this field is omitted, there are no subsequent pages. See /// https://google.aip.dev/158 for more details.省㫅 5/// Response message for ListMirroringEndpointGroups. 338HHMacy<T "$'754CDJKcczGCG&/// The standard List next-page token.YmJ/// A list of operations that matches the specified filter in the request.ˁ./// Unordered list. /// /// Unreachable resources. Populated when the request sets /// `ListOperationsRequest.return_partial_success` and reads across /// collections. For example, when attempting to list all resources across all /// supported locations.ZZ1~踅7/// The response message for Operations.ListOperations.xxxa%"v9,R@P;AUYZ`kWHeflm݁/// If there might be more results than those appearing in this response, then /// `next_page_token` is included. /// /// To get the next set of results, call this method again using the value of /// `next_page_token` as `page_token`.^e^,/// List of SecurityProfileGroups resources.||>/// Response returned by the ListSecurityProfileGroups method._{}}__J%2   $%+F6HpcNaIOfjko~!"()/// If there might be more results than those appearing in this response, then /// `next_page_token` is included. /// /// To get the next set of results, call this method again using the value of /// `next_page_token` as `page_token`.JUJ&/// List of SecurityProfile resources.88\󐄦9/// Response returned by the ListSecurityProfiles method.,338KKPgglo< H;%9 &>BCGVX[k </- 267;JLOoPn}~/// If there might be more results than those appearing in this response, then /// `next_page_token` is included. /// /// To get the next set of results, call this method again using the value of /// `next_page_token` as `page_token`.V&/// List of ServerTlsPolicy resources. /// Unreachable resources. /// /// Populated when the request opts into `return_partial_success` and reading /// across collections e.g. when attempting to list all resources across all /// supported locations.M88y:/// Response returned by the ListServerTlsPolicies method. AHHM``e  w<>)@m`F^AGcghl{}"#)*@5BeXHVCI[_`dsuxyRPR/// If there might be more results than those appearing in this response, then /// 'next_page_token' is included. /// /// To get the next set of results, call this method again using the value of /// 'next_page_token' as 'page_token'.dd,/// List of TlsInspectionPolicies resources.N(/// Locations that could not be reached.]7*>/// Response returned by the ListTlsInspectionPolicies method.,..3BBGTT YLh|< Q  '),L-KZ[abumw}x~ 2 # @ A G Hhh}qoq/// If there might be more results than those appearing in this response, then /// `next_page_token` is included. /// /// To get the next set of results, call this method again using the value of /// `next_page_token` as `page_token`.N(/// Locations that could not be reached. = /// List of UrlList resources. W W) {dV1/// Response returned by the ListUrlLists method.Ycjjo YYt0 G:#8$=ABFUWZj<#:$?CDJpU~с %   %/// Required if the policy is to be used with Traffic Director. /// /// For Application Load Balancers it must be empty. Defines the mechanism to /// obtain the Certificate Authority certificate to validate the client /// certificate. <w/// When the client presents an invalid certificate or no certificate to the /// load balancer, the `client_validation_mode` specifies how the client /// connection is handled. /// /// Required if the policy is to be used with the Application Load Balancers. /// For Traffic Director it must be empty. /// Possible string values are: /// - "CLIENT_VALIDATION_MODE_UNSPECIFIED" : Not allowed. /// - "ALLOW_INVALID_OR_MISSING_CLIENT_CERT" : Allow connection even if /// certificate chain validation of the client certificate failed or no client /// certificate was presented. The proof of possession of the private key is /// always checked if client certificate was presented. This mode requires the /// backend to implement processing of data extracted from a client /// certificate to authenticate the peer, or to reject connections if the /// client certificate fingerprint is missing. /// - "REJECT_INVALID" : Require a client certificate and allow connection to /// the backend only if validation of the client certificate passed. If set, /// requires a reference to non-empty TrustConfig specified in /// `client_validation_trust_config`.9T9/// Reference to the TrustConfig from certificatemanager.googleapis.com /// namespace. /// /// If specified, the chain validation will be performed against certificates /// configured in the given TrustConfig. Allowed only if the policy is to be /// used with Application Load Balancers.  ݋ $/// Specification of the MTLSPolicy."f"y """"""""""" """""" "### ## #"#-#-#2"f"f#G#Z#c#d#d#mv#z#~& ######################$ #$$$$"$ $$'$+$,$2$C$=$E$}$V$K$T$F$L$Y$]$^$a${$b$f$g$o$s$t$|$~$$$$$$$%$%%"%%%'%+%,%2%A%=%Q%H%O%C%I%T%X%Y%_%u%j%%|%%w%}%%%%%%%%%%%%%%%%%%%%%%%%%&#G#G#[ R€Rx/// The timestamp when the resource was created. /// /// See https://google.aip.dev/148#timestamps. /// /// Output only.ay/// User-provided description of the deployment. /// /// Used as additional context for the deployment. /// /// Optional./// The regional forwarding rule that fronts the mirroring collectors, for /// example: `projects/123456789/regions/us-central1/forwardingRules/my-rule`. /// /// See https://google.aip.dev/124. /// /// Required. Immutable. \/// Labels are key/value pairs that help to organize and filter resources. /// /// Optional. /// The deployment group that this deployment is a part of, for example: /// `projects/123456789/locations/global/mirroringDeploymentGroups/my-dg`. /// /// See https://google.aip.dev/124. /// /// Required. Immutable./// Identifier. /// /// The resource name of this deployment, for example: /// `projects/123456789/locations/us-central1-a/mirroringDeployments/my-dep`. /// See https://google.aip.dev/122 for more details. /// /// Immutable.>/// The current state of the resource does not match the user's intended /// state, and the system is working to reconcile them. /// /// This part of the normal operation (e.g. linking a new association to the /// parent group). See https://google.aip.dev/128. /// /// Output only.!!/// The current state of the deployment. /// /// See https://google.aip.dev/216. /// /// Output only. /// Possible string values are: /// - "STATE_UNSPECIFIED" : State not set (this is not a valid state). /// - "ACTIVE" : The deployment is ready and in sync with the parent group. /// - "CREATING" : The deployment is being created. /// - "DELETING" : The deployment is being deleted. /// - "OUT_OF_SYNC" : The deployment is out of sync with the parent group. In /// most cases, this is a result of a transient issue within the system (e.g. /// a delayed data-path config) and the system is expected to recover /// automatically. See the parent deployment group's state for more details. /// - "DELETE_FAILED" : An attempt to delete the deployment has failed. This /// is a terminal state and the deployment is not expected to recover. The /// only permitted operation is to retry deleting the deployment."W!"W/// The timestamp when the resource was most recently updated. /// /// See https://google.aip.dev/148#timestamps. /// /// Output only.&&&3qq2/// A deployment represents a zonal mirroring backend ready to accept /// GENEVE-encapsulated replica traffic, e.g. a zonal instance group fronted by /// an internal passthrough load balancer. /// /// Deployments are always part of a global deployment group which represents a /// global mirroring service.33 333444 444!4242 474C4C4H4W4W 4\4f4f4k44 444444 444433Ɓ 4444445 5:5155?5n5a5E5_5@5F5d5h5i5m5556b56O6t6u6{6|66666666666666666666667677;77 777 7777797 7$7%7-71727:7<7>7A77M777777777777777778k78\8y8z88888888888888888888888888999999999999999999999: 9:!::: ::$:(:):-:=:8:N:D:L:?:E:Q:U:V:\:q:g::x::s:y::::44ԅ4 *|)߀*|Y/// The list of endpoint groups that are connected to this resource. /// /// Output only.+(*+(x/// The timestamp when the resource was created. /// /// See https://google.aip.dev/148#timestamps. /// /// Output only.++7+Ԁ/// User-provided description of the deployment group. /// /// Used as additional context for the deployment group. /// /// Optional.,k+䀍,k\/// Labels are key/value pairs that help to organize and filter resources. /// /// Optional.,,v,U/// The list of locations where the deployment group is present. /// /// Output only.-,-/// Identifier. /// /// The resource name of this deployment group, for example: /// `projects/123456789/locations/global/mirroringDeploymentGroups/my-dg`. See /// https://google.aip.dev/122 for more details. /// /// Immutable..b.c.g.h.r..x...U/// The list of Mirroring Deployments that belong to this group. /// /// Output only.////// The network that will be used for all child deployments, for example: /// `projects/{project}/global/networks/{network}`. /// /// See https://google.aip.dev/124. /// /// Required. Immutable.1/71/// The current state of the resource does not match the user's intended /// state, and the system is working to reconcile them. /// /// This is part of the normal operation (e.g. adding a new deployment to the /// group) See https://google.aip.dev/128. /// /// Output only.31)3/// The current state of the deployment group. /// /// See https://google.aip.dev/216. /// /// Output only. /// Possible string values are: /// - "STATE_UNSPECIFIED" : State not set (this is not a valid state). /// - "ACTIVE" : The deployment group is ready. /// - "CREATING" : The deployment group is being created. /// - "DELETING" : The deployment group is being deleted. /// - "CLOSED" : The deployment group is being wiped out (project deleted).333/// The timestamp when the resource was most recently updated. /// /// See https://google.aip.dev/148#timestamps. /// /// Output only.::u:(()€/// A deployment group aggregates many zonal mirroring backends (deployments) /// into a single global mirroring service. /// /// Consumers can connect this service using an endpoint group.?w??? ??w?w<??????@@ @-@@ @@@@@@!@%@&@,??x??n>?n/// The connected endpoint group's resource name, for example: /// `projects/123456789/locations/global/mirroringEndpointGroups/my-eg`. /// /// See https://google.aip.dev/124. /// /// Output only.@3@3j@W>>>]9/// An endpoint group connected to this deployment group.EgEEE EEE EEgEg<EEEEEEEEFQEEF FF EFFFFFF)F$F:F0F8F+F1F=FAFBFHEEEAAA/// The name of the Mirroring Deployment, in the format: /// `projects/{project}/locations/{location}/mirroringDeployments/{mirroring_deployment}`. /// /// Output only.E]AʃE]g/// Most recent known state of the deployment. /// /// Output only. /// Possible string values are: /// - "STATE_UNSPECIFIED" : State not set (this is not a valid state). /// - "ACTIVE" : The deployment is ready and in sync with the parent group. /// - "CREATING" : The deployment is being created. /// - "DELETING" : The deployment is being deleted. /// - "OUT_OF_SYNC" : The deployment is out of sync with the parent group. In /// most cases, this is a result of a transient issue within the system (e.g. /// a delayed data-path config) and the system is expected to recover /// automatically. See the parent deployment group's state for more details. /// - "DELETE_FAILED" : An attempt to delete the deployment has failed. This /// is a terminal state and the deployment is not expected to recover. The /// only permitted operation is to retry deleting the deployment.FWFWF{@@Q@4/// A deployment belonging to this deployment group.UU UUUUUUUUVVVVV*V* V/V;V;V@V^V^ VcVmVmVrVV VVV VVVVUUVVVVVVVV[W WWW2W%WW#WWW(W,W-W1W@WBWEWWUWWWXXX(XX6XgXZX<XXX7X=X]XaXbXfXyX{X~Y[XYHYmYnYtYuYYYYYYYYYYYYYYYYYYYYYYYYYZ4Z ZZ YZZZZZZ2ZZZZ&Z*Z+Z3Z5Z7Z:ZZFZ}ZZZZZZZZZZZZZ[Z[Z[[ [[[[,[![C[3[A[.[4[F[J[K[O[_[Z[p[f[n[a[g[s[w[x[~[[[[[[[[[[[[[[[[[[[[[[VV3V HHvHE/// List of associations to this endpoint group. /// /// Output only.IIIj/// List of details about the connected deployment groups to this endpoint /// group. /// /// Output only.JfIրJfx/// The timestamp when the resource was created. /// /// See https://google.aip.dev/148#timestamps. /// /// Output only.KJuK/// User-provided description of the endpoint group. /// /// Used as additional context for the endpoint group. /// /// Optional.KKK\/// Labels are key/value pairs that help to organize and filter resources. /// /// Optional.LKL/// The deployment group that this DIRECT endpoint group is connected to, for /// example: /// `projects/123456789/locations/global/mirroringDeploymentGroups/my-dg`. /// /// See https://google.aip.dev/124. /// /// Immutable.MLɀMĀ/// Identifier. /// /// The resource name of this endpoint group, for example: /// `projects/123456789/locations/global/mirroringEndpointGroups/my-eg`. See /// https://google.aip.dev/122 for more details. /// /// Immutable.NḾ9N/// The current state of the resource does not match the user's intended /// state, and the system is working to reconcile them. /// /// This is part of the normal operation (e.g. adding a new association to the /// group). See https://google.aip.dev/128. /// /// Output only.SO SĄ}/// The current state of the endpoint group. /// /// See https://google.aip.dev/216. /// /// Output only. /// Possible string values are: /// - "STATE_UNSPECIFIED" : State not set (this is not a valid state). /// - "ACTIVE" : The endpoint group is ready and in sync with the target /// deployment group. /// - "CLOSED" : The deployment group backing this endpoint group has been /// force-deleted. This endpoint group cannot be used and mirroring is /// effectively disabled. /// - "CREATING" : The endpoint group is being created. /// - "DELETING" : The endpoint group is being deleted. /// - "OUT_OF_SYNC" : The endpoint group is out of sync with the backing /// deployment group. In most cases, this is a result of a transient issue /// within the system (e.g. an inaccessible location) and the system is /// expected to recover automatically. See the associations field for details /// per network and location. /// - "DELETE_FAILED" : An attempt to delete the endpoint group has failed. /// This is a terminal state and the endpoint group is not expected to /// recover. The only permitted operation is to retry deleting the endpoint /// group.TS΁'T/// The type of the endpoint group. /// /// If left unspecified, defaults to DIRECT. /// /// Immutable. /// Possible string values are: /// - "TYPE_UNSPECIFIED" : Not set. /// - "DIRECT" : An endpoint group that sends packets to a single deployment /// group.UTU/// The timestamp when the resource was most recently updated. /// /// See https://google.aip.dev/148#timestamps. /// /// Output only.[[\FFH[`/// An endpoint group is a consumer frontend for a deployment group (backend). /// /// In order to configure mirroring for a network, consumers must create: - An /// association between their network and the endpoint group. - A security /// profile that points to the endpoint group. - A mirroring rule that /// references the security profile (group).n n. n5n5n:nJnJ nOn[n[n`nonontnnnnn nnn nnnnnn nnnnn n o o-o6o7o7o@oMoQsoeo[o{oloyogomo~ooooooooooooooooooooooooooop(opp<p3p>p_pRpDpPp?pEpUpYpZp^pmpoprqppqqqqq5q%q7q_qRq=qPq8q>qUqYqZq^qmqoqrr=qr.rKrLrRrSrtr^rr{rrvr|rrrrrrrrrrrrrrrrrrrrrrrrrssss1s!s/ss"s4s8s9s=sMsHs^sTs\sOsUsasesfslsswssssssssso o o. aa^ax/// The timestamp when the resource was created. /// /// See https://google.aip.dev/148#timestamps. /// /// Output only.bab\/// Labels are key/value pairs that help to organize and filter resources. /// /// Optional.cQbcQ/// The list of locations where the association is configured. /// /// This information is retrieved from the linked endpoint group. /// /// Output only.d<d=dAdBdLddRdc_d׀/// The list of locations where the association is present. /// /// This information is retrieved from the linked endpoint group, and not /// configured as part of the association itself. /// /// Output only.edeԀ/// The endpoint group that this association is connected to, for example: /// `projects/123456789/locations/global/mirroringEndpointGroups/my-eg`. /// /// See https://google.aip.dev/124. /// /// Immutable.g e"g /// Identifier. /// /// The resource name of this endpoint group association, for example: /// `projects/123456789/locations/global/mirroringEndpointGroupAssociations/my-eg-association`. /// See https://google.aip.dev/122 for more details. /// /// Immutable.gggԀ/// The VPC network that is associated. /// /// for example: `projects/123456789/global/networks/my-network`. See /// https://google.aip.dev/124. /// /// Immutable.igEi /// The current state of the resource does not match the user's intended /// state, and the system is working to reconcile them. /// /// This part of the normal operation (e.g. adding a new location to the /// target deployment group). See https://google.aip.dev/128. /// /// Output only.mVi*1mV/// Current state of the endpoint group association. /// /// Output only. /// Possible string values are: /// - "STATE_UNSPECIFIED" : Not set. /// - "ACTIVE" : The association is ready and in sync with the linked endpoint /// group. /// - "CREATING" : The association is being created. /// - "DELETING" : The association is being deleted. /// - "CLOSED" : The association is disabled due to a breaking change in /// another resource. /// - "OUT_OF_SYNC" : The association is out of sync with the linked endpoint /// group. In most cases, this is a result of a transient issue within the /// system (e.g. an inaccessible location) and the system is expected to /// recover automatically. Check the `locations_details` field for more /// details. /// - "DELETE_FAILED" : An attempt to delete the association has failed. This /// is a terminal state and the association is not expected to be usable as /// some of its resources have been deleted. The only permitted operation is /// to retry deleting the association.mm`m/// The timestamp when the resource was most recently updated. /// /// See https://google.aip.dev/148#timestamps. /// /// Output only.ss s__Fa8/// An endpoint group association represents a link between a network and an /// endpoint group in the organization. /// /// Creating an association creates the networking infrastructure linking the /// network to the endpoint group, but does not enable mirroring by itself. To /// enable mirroring, the user must also create a network firewall policy /// containing mirroring rules and associate it with the network.}$}L}S}S }X}b}b }g}t}t }y}$}$a}}}}}}$}}~l}}}}}}}}}}~~~ ~&~~$~~~)~-~.~4~D~?~U~K~S~F~L~X~\~]~c}}}x,wEx,/// The connected association's resource name, for example: /// `projects/123456789/locations/global/mirroringEndpointGroupAssociations/my-ega`. /// /// See https://google.aip.dev/124. /// /// Output only.xx5x瀘/// The associated network, for example: /// projects/123456789/global/networks/my-network. /// /// See https://google.aip.dev/124. /// /// Output only.}x,}/// Most recent known state of the association. /// /// Output only. /// Possible string values are: /// - "STATE_UNSPECIFIED" : Not set. /// - "ACTIVE" : The association is ready and in sync with the linked endpoint /// group. /// - "CREATING" : The association is being created. /// - "DELETING" : The association is being deleted. /// - "CLOSED" : The association is disabled due to a breaking change in /// another resource. /// - "OUT_OF_SYNC" : The association is out of sync with the linked endpoint /// group. In most cases, this is a result of a transient issue within the /// system (e.g. an inaccessible location) and the system is expected to /// recover automatically. Check the `locations_details` field for more /// details. /// - "DELETE_FAILED" : An attempt to delete the association has failed. This /// is a terminal state and the association is not expected to be usable as /// some of its resources have been deleted. The only permitted operation is /// to retry deleting the association.~r~r~vv؈lw9/// The endpoint group's view of a connected association."$$)44 9LDr{||%qbDD{sU/// The list of locations where the deployment group is present. /// /// Output only. /// The connected deployment group's resource name, for example: /// `projects/123456789/locations/global/mirroringDeploymentGroups/my-dg`. /// /// See https://google.aip.dev/124. /// /// Output only.À  eN>/// The endpoint group's view of a connected deployment group.Ybdd ioo t{{   YYLo 9#+$;ABJkai\bnrsvw{|: , $%<NJ^U\PVaeflwY L /// If the value is `false`, it means the operation is still in progress. /// /// If `true`, the operation is completed, and either `error` or `response` is /// available.hYhI/// The error result of the operation in case of failure or cancellation.jrj/// Service-specific metadata associated with the operation. /// /// It typically contains progress information and common metadata such as /// create time. Some services might not provide such metadata. Any method /// that returns a long-running operation should document the metadata type, /// if any. /// /// The values for Object must be JSON objects. It can consist of `num`, /// `String`, `bool` and `null` as well as `Map` and `List` values.uwu/// The server-assigned name, which is only unique within the same service /// that originally returns it. /// /// If you use the default HTTP mapping, the `name` should be a resource name /// ending with `operations/{unique_id}`.L~L/// The normal, successful response of the operation. /// /// If the original method returns no data on success, such as `Delete`, the /// response is `google.protobuf.Empty`. If the original method is standard /// `Get`/`Create`/`Update`, the response should be the resource. For other /// methods, the response should have the type `XxxResponse`, where `Xxx` is /// the original method name. For example, if the original method name is /// `TakeSnapshot()`, the inferred response type is `TakeSnapshotResponse`. /// /// The values for Object must be JSON objects. It can consist of `num`, /// `String`, `bool` and `null` as well as `Map` and `List` values._*ԋ>c/// This resource represents a long-running operation that is the result of a /// network API call. =%4'%*./3BDGgHfuv|}ĀR./// List of items to remove. /// /// Required.u!]u*/// An optional request ID to identify requests. /// /// Specify a unique request ID so that if you must retry your request, the /// server will know to ignore the request if it has already been completed. /// The server will guarantee that for at least 60 minutes since the first /// request. For example, consider a situation where you make an initial /// request and the request times out. If you make the request again with the /// same request ID, the server can check if original operation with the same /// request ID was received, and if so, will ignore the second request. This /// prevents clients from accidentally creating duplicate commitments. The /// request ID must be a valid UUID with the exception that zero UUID is not /// supported (00000000-0000-0000-0000-000000000000). /// /// Optional.Àii 7/// Request used by the RemoveAddressGroupItems method.uy{{ uu(1(xiT/// List of attributes for the traffic destination. /// /// All of the destinations must match. A destination is a match if a request /// matches all the specified hosts, ports, methods and headers. If not set, /// the action specified in the 'action' field will be applied without any /// rule checks for the destination. /// /// Optional.i-Ci/// List of attributes for the traffic source. /// /// All of the sources must match. A source is a match if both principals and /// ip_blocks match. If not set, the action specified in the 'action' field /// will be applied without any rule checks for the source. /// /// Optional.tt/// Specification of rules.Xg nns     ,, 1;;@XXUdmnnw 34<SlNT&(>?G^wY_   0'."(378>OIQbW`RXeijmnrs{ ,g.34?Y@i($8/6*0;?@F[Qqbo]ctxyUU5e #S#5/// Resource creation timestamp. /// /// Output only.2k:/// The custom TPPI configuration for the SecurityProfile.zI/// The custom Packet Mirroring v2 configuration for the SecurityProfile.!`/// An optional description of the profile. /// /// Max length 512 characters. /// /// Optional./// This checksum is computed by the server based on the value of other /// fields, and may be sent on update and delete requests to ensure the client /// has an up-to-date value before proceeding. /// /// Output only.a0/// Labels as key value pairs. /// /// Optional. /// Identifier. /// /// Name of the SecurityProfile resource. It matches pattern /// `projects|organizations / * /// /locations/{location}/securityProfiles/{security_profile}`. /// /// Immutable.NsN@/// The threat prevention configuration for the SecurityProfile.jl/// The single ProfileType that the SecurityProfile resource configures. /// /// Immutable. /// Possible string values are: /// - "PROFILE_TYPE_UNSPECIFIED" : Profile type not specified. /// - "THREAT_PREVENTION" : Profile type for threat prevention. /// - "CUSTOM_MIRRORING" : Profile type for packet mirroring v2 /// - "CUSTOM_INTERCEPT" : Profile type for TPPI.IVI8/// Last resource update timestamp. /// /// Output only.`bb]/// SecurityProfile is a resource that defines the behavior for one of many /// ProfileTypes.<P WW\llq    **/<<DXabbkx|d&H-F(.KOPVkarms B "#&@'+,489ACEHT"7-M>K9?PTU[DD"Y pS5/// Resource creation timestamp. /// /// Output only.8Ȁ8\/// Reference to a SecurityProfile with the CustomIntercept configuration. /// /// Optional.S\/// Reference to a SecurityProfile with the CustomMirroring configuration. /// /// Optional.]ހ]g/// Identifier used by the data-path. /// /// Unique within {container, location}. /// /// Output only.lg/// An optional description of the profile group. /// /// Max length 2048 characters. /// /// Optional./// This checksum is computed by the server based on the value of other /// fields, and may be sent on update and delete requests to ensure the client /// has an up-to-date value before proceeding. /// /// Output only.QaQ0/// Labels as key value pairs. /// /// Optional.K\K/// Identifier. /// /// Name of the SecurityProfileGroup resource. It matches pattern /// `projects|organizations / * /// /locations/{location}/securityProfileGroups/{security_profile_group}`. /// /// Immutable.T]/// Reference to a SecurityProfile with the ThreatPrevention configuration. /// /// Optional.-V-8/// Last resource update timestamp. /// /// Output only.jjxW^/// SecurityProfileGroup is a resource that defines the behavior for various /// ProfileTypes.,;BBGVV[kkpƁƁ ƆƒƒƗƧƧ Ƭƶƶƻ,,ʱ2)G9E4:JNOSh^~o|jpǁDždžnjǢǗǹǩǷǤǪǼ f$[{qȩ(}ȂȃȎțȏȫȵȶȾ *<8LCJ>DOSTZveɫjx}~ɉɝɊɭ\&)-.1K267?CDlʄzʚʋʘʆʌʝʡʢʨ<z/// Defines what action to take for a specific severity match.ioqq vۀۀۅii)ۖۜۥۦۦۯ1ۼ'&56<=RHTviZgU[lpqu܄܆܉ܩ܊ܨܷܸܾܿۖۖ4۝vv[/// List of CIDR ranges to match based on source IP address. /// /// At least one IP block should match. Single IP (e.g., "1.2.3.4") and CIDR /// (e.g., "1.2.3.0/24") are supported. Authorization based on source IP alone /// should be avoided. The IP addresses of any load balancers or proxies /// should be considered untrusted. /// /// Optional.ZكZ/// List of peer identities to match for authorization. /// /// At least one principal should match. Each peer can be an exact match, or a /// prefix match (example, "namespace / * ") or a suffix match (example, " * / /// service-account") or a presence match "*". Authorization based on the /// principal name without certificate validation (configured by /// ServerTlsPolicy resource) is considered insecure. /// /// Optional.΀ױױ//// Specification of traffic source attributes.BPRR W__ dnn sBB8~$K $ 4+2&,7;<B~~q˂q|/// Threat action override. /// /// For some threat types, only a subset of actions applies. /// /// Required. /// Possible string values are: /// - "THREAT_ACTION_UNSPECIFIED" : Threat action not specified. /// - "DEFAULT_ACTION" : The default action (as specified by the vendor) is /// taken. /// - "ALLOW" : The packet matching this rule will be allowed to transmit. /// - "ALERT" : The packet matching this rule will be allowed to transmit, but /// a threat_log entry will be sent to the consumer project. /// - "DENY" : The packet matching this rule will be dropped, and a threat_log /// entry will be sent to the consumer project.|]A/// Vendor-specific ID of a threat to override. /// /// Required.9ރ_9-/// Type of the threat (read only). /// /// Output only. /// Possible string values are: /// - "THREAT_TYPE_UNSPECIFIED" : Type of threat not specified. /// - "UNKNOWN" : Type of threat is not derivable from threat ID. An override /// will be created for all types. Firewall will ignore overridden signature /// ID's that don't exist in the specific type. /// - "VULNERABILITY" : Threats related to system flaws that an attacker might /// otherwise attempt to exploit. /// - "ANTIVIRUS" : Threats related to viruses and malware found in /// executables and file types. /// - "SPYWARE" : Threats related to command-and-control (C2) activity, where /// spyware on an infected client is collecting data without the user's /// consent and/or communicating with a remote attacker. /// - "DNS" : Threats related to DNS.QQurr߸?/// Defines what action to take for a specific threat_id match."::?VV[ruH    uuE+贀+R/// Configuration for overriding antivirus actions per protocol. /// /// Optional.BU/// Configuration for overriding threats actions by severity match. /// /// Optional.с)/// Configuration for overriding threats actions by threat_id match. /// /// If a threat is matched both by configuration provided in /// severity_overrides and threat_overrides, the threat_overrides action is /// applied. /// /// Optional.q--d/// ThreatPreventionProfile defines an action for specific threat signatures or /// severity levels.y     %//4KKPaafyy{}]  7&9bU?S:@X\]apruv!  $()-E8^L\GMaefl{w}  0&F7D28IMNT{{ Ԁˀ/// A CA pool resource used to issue interception certificates. /// /// The CA pool string has a relative resource path following the form /// "projects/{project}/locations/{location}/caPools/{ca_pool}". /// /// Required./c/E/// The timestamp when the resource was created. /// /// Output only.>R/// List of custom TLS cipher suites selected. /// /// This field is valid only if the selected tls_feature_profile is CUSTOM. /// The compute.SslPoliciesService.ListAvailableFeatures method returns the /// set of features that can be specified in this list. Note that Secure Web /// Proxy does not yet honor this field. /// /// Optional.[[/// If FALSE (the default), use our default set of public CAs in addition to /// any CAs specified in trust_config. /// /// These public CAs are currently based on the Mozilla Root Program and are /// subject to change over time. If TRUE, do not accept our default set of /// public CAs. Only CAs specified in trust_config will be accepted. This /// defaults to FALSE (use public CAs in addition to trust_config) for /// backwards compatibility, but trusting public root CAs is *not recommended* /// unless the traffic in question is outbound to public web servers. When /// possible, prefer setting this to "false" and explicitly specifying trusted /// CAs and certificates in a TrustConfig. Note that Secure Web Proxy does not /// yet honor this field. /// /// Optional.JrJ/// Minimum TLS version that the firewall should use when negotiating /// connections with both clients and servers. /// /// If this is not set, then the default value is to allow the broadest set of /// clients and servers (TLS 1.0 or higher). Setting this to more restrictive /// values may improve security, but may also prevent the firewall from /// connecting to some clients or servers. Note that Secure Web Proxy does not /// yet honor this field. /// /// Optional. /// Possible string values are: /// - "TLS_VERSION_UNSPECIFIED" : Indicates no TLS version was specified. /// - "TLS_1_0" : TLS 1.0 /// - "TLS_1_1" : TLS 1.1 /// - "TLS_1_2" : TLS 1.2 /// - "TLS_1_3" : TLS 1.3}\%}/// Name of the resource. /// /// Name is of the form /// projects/{project}/locations/{location}/tlsInspectionPolicies/{tls_inspection_policy} /// tls_inspection_policy should match the /// pattern:(^\[a-z\](\[a-z0-9-\]{0,61}\[a-z0-9\])?$). /// /// Required.!!e/// The selected Profile. /// /// If this is not set, then the default value is to allow the broadest set of /// clients and servers ("PROFILE_COMPATIBLE"). Setting this to more /// restrictive values may improve security, but may also prevent the TLS /// inspection proxy from connecting to some clients or servers. Note that /// Secure Web Proxy does not yet honor this field. /// /// Optional. /// Possible string values are: /// - "PROFILE_UNSPECIFIED" : Indicates no profile was specified. /// - "PROFILE_COMPATIBLE" : Compatible profile. Allows the broadest set of /// clients, even those which support only out-of-date SSL features to /// negotiate with the TLS inspection proxy. /// - "PROFILE_MODERN" : Modern profile. Supports a wide set of SSL features, /// allowing modern clients to negotiate SSL with the TLS inspection proxy. /// - "PROFILE_RESTRICTED" : Restricted profile. Supports a reduced set of SSL /// features, intended to meet stricter compliance requirements. /// - "PROFILE_CUSTOM" : Custom profile. Allow only the set of allowed SSL /// features specified in the custom_features field of SslPolicy.7/// A TrustConfig resource used when making a connection to the TLS server. /// /// This is a relative resource path following the form /// "projects/{project}/locations/{location}/trustConfigs/{trust_config}". /// This is necessary to intercept TLS connections to servers with /// certificates signed by a private CA or self-signed certificates. Note that /// Secure Web Proxy does not yet honor this field. /// /// Optional.jcjE/// The timestamp when the resource was updated. /// /// Output only.ccd33𼀂/// The TlsInspectionPolicy resource contains references to CA pools in /// Certificate Authority Service and associated metadata.         " "  ' 1 1 6 F F  K  o \ c l m m vF                           !'<2RCP>DUYZ`qksytz \ \ d  \a C/// Time when the security policy was created. /// /// Output only.  [ >$b||/// Specification of ValidationCA. /// /// Defines the mechanism to obtain the Certificate Authority certificate to /// validate the peer certificate. -p-p//// Delegates authorization decisions to Cloud IAP. /// /// Applicable only for managed load balancers. Enabling Cloud IAP at the /// AuthzPolicy level is not compatible with Cloud IAP settings in the /// BackendService. Enabling IAP in both places will result in request failure. /// Ensure that IAP is enabled in either the AuthzPolicy or the BackendService /// but not in both places. /// /// Optional.ISIS`I7/// The request message for Operations.CancelOperation.zzH{I0/// A generic empty message that you can re-use to avoid defining duplicated /// empty messages in your APIs. /// /// A typical example is to use it as the request or the response type of an API /// method. For instance: service Foo { rpc Bar(google.protobuf.Empty) returns /// (google.protobuf.Empty); }{Z{Z/// Represents a textual expression in the Common Expression Language (CEL) /// syntax. /// /// CEL is a C-like expression language. The syntax and semantics of CEL are /// documented at https://github.com/google/cel-spec. Example (Comparison): /// title: "Summary size limit" description: "Determines if a summary is less /// than 100 chars" expression: "document.summary.size() \< 100" Example /// (Equality): title: "Requestor is owner" description: "Determines if /// requestor is the document owner" expression: "document.owner == /// request.auth.claims.email" Example (Logic): title: "Public documents" /// description: "Determine whether the document should be publicly visible" /// expression: "document.type != 'private' && document.type != 'internal'" /// Example (Data Manipulation): title: "Notification string" description: /// "Create a notification string with a timestamp." expression: "'New message /// received at ' + string(document.create_time)" The exact variables and /// functions that may be referenced within an expression are determined by the /// service that evaluates it. See the service documentation for additional /// information.ZV/// Provides the configuration for logging a type of permissions. /// /// Example: { "audit_log_configs": \[ { "log_type": "DATA_READ", /// "exempted_members": \[ "user:jose@example.com" \] }, { "log_type": /// "DATA_WRITE" } \] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while /// exempting jose@example.com from DATA_READ logging.<<y4/// Request message for `TestIamPermissions` method.{5/// Response message for `TestIamPermissions` method.ppqX/// Contains details about the state of an association in a specific cloud /// location.uubv9/// Details about intercept in a specific cloud location.  W 7/// A resource that represents a Google Cloud location.FFX/// Contains details about the state of an association in a specific cloud /// location.ppb9/// Details about mirroring in a specific cloud location.ݏݏ]/// The `Status` type defines a logical error model that is suitable for /// different programming environments, including REST APIs and RPC APIs. /// /// It is used by [gRPC](https://github.com/grpc). Each `Status` message /// contains three pieces of data: error code, error message, and error details. /// You can find out more about this error model and how to work with it in the /// [API Design Guide](https://cloud.google.com/apis/design/errors).`GHmЀ)[ʂ*`aǂ˃7`Ԅ I/bۆUɇ LΈ J̉ 9pى#?@ӊ9lm؋#[\֍.Hٍ+578V134[ȐRґDc56tƒ;VW}ғؔ%\EU[֕:oܖ3s.:H[|ԘؘٙDJdj!?ٚjw}Μ)Tt˝ @GHȝԝnrs `9ѠE/zʣi=CȤΥ,2ڥ/Ker-i#/=PqxɨͨΨbƪ`J5ѭ X^:GMӮ )CP̰ @Aq} 9?Y_W]TsTzT{TTTUUU)UJUQUUUUUV V VZVuVvVVVVWWWDWWWX-X\XbXXYJYYZ2ZZ[[m[[[\\ \0\6\\\\] ]B]`]z]]]]^^R^^^^_._5_6______`` `]`a`b``````aBaHaab0b}bcchcddSdddddeeemezeeff(f@f\fvfffg4g;g<gsgtgggggh9h=h>hghmhhhhi&i,iwiiiijjj"jsjjjkk kMkkkkkkkl l,l3lYlllllllmmCmmmmmnnQnnnoooQoaogooopp pZppppqq(qDq^qkqqrrRrrrrsssLsXsesssssttt$t*tYt_tytttu"u(usuvv]vvwHwwx3xkxqxyy]yyyz3zCzIzmzszzz{({]{~{{{{|||D|||}4};}<}s}t}}}}}}~K~O~Q~R~~~~U[C.~7U"(y0Tl8?@ VZ[$kq6<!'x<qxy%rvw+1KQ9IOsy.c(/0gh*./v|+v|l Q4:#062Ns K29:W^bde#>?:` TdjI~,\HOPa +2*Zi"s .F]w&-.ef+/0ekTr$*Y_Is'./fg:AEFM'7=z<B6CI!9Uo|6krs :Ax06PV)G=-3W]GhV :FUhHI28RX:@/W]9FL+Oiv-N %8Y`±µ¶U~-3ĀĨĮ 39Ŋŗŝ#E]tƎƛ=DE|}ǭǹBFGw}ȗȝYw$*TZʫʸʾDiˁ˛˨$%\]̙̦̍+267z͚̀͠4nιο \Ϭeu{ви mѢ#=JҊ9@AӐӑ4lswxԲԸ \Վ:@֎(io׺KX^د":Wq~ٮ-bijڡڢ!(y}ۀۙegh܊ܴܳ,zݼ4lޒ!_ߧDDeG>%Z}P <]V$X(.] -3l !Q]j/5 j17B,MS;KQ<q2LY;w+7Del 56|f06%v2?o9:jvKQ,]{ &JP:`Bw~ ,MT"(BHk&,waL7ou  Q ^ d    & @ a }     _     $ % U a o       & , F L   BH0}hSmz(@\v4;<st9=>lr#Ajw}%=WdIUb%+{ Y;kV/5  & , }   !,!F!S!!!"'"\"c"d"""""####J########$A$$$$%0%6%%&&&i&&&&&'3'9''''(#(S(m((((()-)k)))**R*Y*Z*****+++G++++++++,,,c,,,,-K--.1.7.....//>/D////0.0q000001,1j111112>2?2o2{22223 3'3+3,3d3j333344I4g4445J5561667 7m7778H889,9o9u9999::Q:^:d::; ;%;=;Y;v;;;< > >9>?>Y>_>>??7?{????@@ @]@j@p@@AAIAiAAABB5B<B=BBBBBBC CCdChCiCCCD%D+DZD`DzDDDE-EYEwEEF FF"FNFTFFFG G>GnGGGGH HMHHHHHIII"I5IVI]IIIIIJJJ\JJKJKPKKKKKL LYLLLLM8MHMNMMMMMNIN~NNOO0O=OmOOOOOPEPFPvPPPPPQQ>QEQIQKQLQQQQRRR`RfRRRRS SMSSST2TTTUUUU>UDUUUUV.VPVqVVVVW WJWWWWWWX XWXXXXXXXXY.Y2Y3Y_YeYYYZ&Z3ZQZZZZ[[([.[[[[\\:\R\l\y\\\\]-].]^]j]z]]]]]^,^2^L^R^^^__g_m____``S```f``aa-aGaTaaaabb b9bEbRbsbzbbbbbcc"crc}ccccddPd|ddde:eeffjfggUggh.h4hhhhhii%i+i|iiij+jEjRjjjk&k[kbkckkkkkll"lIllllllllm9mmmmnKnQnno"oFoLooooop@pMpSppqq+qCq_qyqqrr@rur|r}rrrs ss#sDsKssssstt t9t?tYt_ttuugumuv vYvvvw:wJwPwtwzwwwx/xdxxxxxyy2yryyyyz%z&zVzbzqzzzz{{{B{H{{{{{|||a|v||}}\}b}}}}}~F~S~Y~~;Wq~#*+xy%]dhiM &@F&D7='qV+9Lmt$MN&,FL'-~2mY,2V\Fh.n'./{|RVW{Vt WA-~AQW{6k(d %FMFW XhnO$Y`a +cjno %+s"flP7#SAG1a}bs01amz  HNhn/u{DYio ^(D^kRHTa28gmB`C-~j1}DJ&39-Jdq\ /PWCio !qP`fM!QLXfyš¡  SYà@ĎĔ8Mŝ+1|ƌƒ)6<Ǎ >Ztȁȱ&-.?ɉɊɺJʂʉʍʏʐ1Rmn˿P̵̗E͔8>ΉΙΟ'-~ϳHboП->kѠѧѨѹLXfyҚҡ-PVpv.Lԟԥaqw՛աV֋֭Cpץ׬׭!1RYتخد06ن٫ \bڭڽP]c۴2LYܙ >JWxݰ>D^dާ fl߼K"28{6k_'7`9qx|}#=C1)y_ouT"/_RS*.01d9?ntci X cpv;UyFWx6BPc )/06%v L .5/y0@Fpv+`9@AxyGNRS WlNT8m ;)/IeJ[IUb4:TZ  Q W    , |      4 :     $ X r      K    EQ^7=lrDbJ(.y n0=m!()`a8<=}.4NT-K&,}Fr%Zab .5\4"(W]w}1]{  $ * j p   !%!Z!!!" ""I"""""#!#"#R#^#l####$$!$%$'$($\$$$$$%4%:%i%o%%%%&2&8&y&&&'4'D'J'v'|'''(1(f(((() ))F))))*)*0*1******+++/+g+n+r+s++++,,",k,q,,,,,-I-V-\--.1.q.....//"/2/S/Z/////000I0g001111C1I1111232Z2r2223333M3N3~3333344%4)4*4j4p4445'5-5y5556$6m666667$7*7{77788I8c8{88889<9x999:::7:C:P:q:x:::::;; ;O;U;o;u;;<*<0<<==n==>>>$>P>V>>>? ?@?i?????@@T@@@@AAA8ADASAfAAAAAAAAB9BbBcBBBBC*C0C_CeCCCCCDMDDDE-E{EFFbFGGQGGH%H+HvHHHHIIIIkIIIJJ5JQJkJxJJK6KGKtKKKKKLL7L`LaLLLLLLM7M;M<MpMvMMMMN5N;NNO#OpOP P[PPQFQ~QQQQR RR`RmRsRRSS3SOSiSvSST'T.T/TfTgTTTTTU,U0U1UmUsUUUUV2V8VVVVVW&W3W9WWWXX"X/XoXXXXXYY Y-YNYUYYYYYZZ Z$Z*ZnZZZZ[!['[w[[\\&\,\w\\\\]']4]:]]]^^2^L^d^^^^__P___````(`Q`z`{`````a*abaiamanaaaaaab3bQbbbcCccd*dzdeefeeefAffg$gggmggggghIhVh\hhii,iDi`i}iiijjPjjjjkkk4k@kOkbkkkkkkll>l?lllllm m&m@mFmsmmnnWnnno%otop p\ppqHqqqr r0r6rZr`rrrssJslssssst t<t|tttu#uXu_u`uuuuuvv/v6vvvvvvvwwwgwmwxxUxxy=yyz)zxzz{{{{;{A{{{{|+|M|e||||}$}Y}`}a}}}}}~~ ~^~b~c~~~~~~FL/<B -m+LSy"cl !l|$u+C_y/m67gs?Etz8>&s^I$sIY_>s*ZJQR aeghYZFLflFLZ| ^kq<VYj,-]iw6<V\,z \io/IV  ;GWx +1LR:GM0=}".;\c7=?Ec:@*d~W./_kx]c[/5k>D.Or>}".=Pqx78q.4NT Y_7=&,}C]j$5`,?`gf} ioKX^8E*6Fgn¿$tPVġıķBOUŦ "<IƉƾ.:GhoǞ*0JPȠ\z(.aʩ-3~ˎ˔,9?̐4Pjwͷ1fmnβγ$`ϘϟϣϤ#=CЍФa/z_eӰANTԥ":Wq~ծ-bij֢֡!(y}׀׻<WXؚؠ!qٳHژڵڻ Yیےn{܁)Oiݖݲ Iޑޢ=DEVߥߦ$+|.L@syUbh(D^k#$[\!%&NTzTr#)\bLz.56mn ELPQ2t%bh+zE#n~(. #=Uq A XY=DHIkq=WIO &n "(sh5O\G|;BGbc &sNAtzVci2Lt'ev %opFJKgmPV'-x    m       _       @ L \ }       ( . H N    Z `     FSY :G,8Efm?E_e+qwY_5; Y9?)`zH{+`ghy .5k,2LR8VEx~ ZntP]c  + C _ |   !!O!!!!"""3"?"N"a""""""#%#N#O####$ $$5$;$j$p$$$%%c%i%&&T&^&d&''5';'''''(($(*({(()))Q)m)))**1*h*y**++$+%+6+F+o++++++,,$,u,y,z,,,,,,--<---.9.l.r...../N/[/a//0 0!0=0W0d001111T1U111112222B2H2n2t2223V3t3344.444p4v4445+5`555566K6R6S6666666737k7r7v7w7777788H889 99A9~9999:G:::;;_;;<5<;<<<<<=<=I=O==>>4>M>g>>>>??5?k??@@!@"@3@C@l@@@@@AA AQAAAAAAAABBB4B:BBC CBC`CCD D]DDDE%EdEEEEEF"F(FyFFFGG3GbGzGGGGH HJHHHIII9I:IjIvIIIIJJJJJQJzJ{JJJK(K.KTKZKKKKLL?LLLM"M7M=MMNNN_NoNuNNNNOOTOOOOPP0PJPWPPQ QQDQQQQQRRRLRXRfRyRRRRRSSSDSJSdSjSST TTaTTTU5UEUKUoUuUUUV*V_VVVVVWWXWWWWWWX XX:XAXXXXXXXY YY\YYZ)Z/ZzZZZZ[[%[+[|[[[\\\\\\\\\]] ]];]B]n]]]]]]^^!^;^A^^__J_P____`2`8``aaaYaab8bvb|bbbcc!crcccd dEd_dxddddde-e`eeffEfLfMf^fffffgggVgggggggghh"h<hBhhhi'iEiiij7jjjpjkkPkhknkkkkklJlWl]llmm(m@m\mymmmnnLnnnnnoo0o<oKo^ooooooppBpCpypppppq$q*qYq_qyqqrrWr]rrsssgssst;tKtQtut{tttu0ueuuuuvv*v7vgvvww*wfwwwwxxx4x@xNxaxxxxxyyy-y3yMySyyyzzNzzz{"{2{8{\{b{{{||L|n||||} }E}z}}}}}}~~'~.~~~~~~~~~M &q$u W6=k :@KQ39Z={"(yNh6iNUVg!(c*0JP9WK~h bouBZv*fJVex.WX)/^d~V\O#39]cMoE5jqr +LSEcRgtz":Vp}.56mn378Z`Om MS=f~!"YZ,378qwVDJ{ \-kFV\R #?YfM!"R^k  )/U[_S$j-3W]Gh1q!()`a8<>? ()gm<{b`$u0_y"b F{ÂÃÔä-9GZ{Ă"(BH|ŚGƗ+1U[ǬǹǿEgțȵ>sz{ɲɳ 'x|}ʠʦ<˴+1|̌̒%28͉; '4tΩΰα%2SZϑ;A[aЦ!gmџOUҥ+1vӽUԓԙCI՚էխ3x֒֫ `דCx؀ؑء*6Cdkٯ=Crxڒژi۠۾kܻ<݃FV\ހކ;pߑ+8h#X_`osuv)DE ^59lrN[a -Gr%iz,yzPTUv|kqBH$17-:z*+[gw!GMgm9%v;Smz./_kx MSy/b#T5lrG%5;y4i$>K2n  :FSt{EKzRE`'-QW Ab.n%&]^59;<h 5 ;   # q   ^ y       5 v |      T a g   /Gan^_156^dFLfl ]msNGNOHLM!'Zx  DJ489iuGMBHsy8lQagS  ? Y f  !!S!!!!"""M"N"~"""""###*#.#0#1#d#####$9$?$n$t$$$%%c%i%& &X&&&&&' ''c'p'v''((;(U(y((())F)W)x)))***6*B*P*c*****+ ++)+/+++,0,6,,,,,---%-v----. .L......./ /./5///////0/0y000101@1F1p1v1112+2`22223393@3A3x3y3333344G4N4R4S444445 55W5l5566N6T66787788m89 9;99999:):/::::;;I;e;;;;4>:>T>Z>>? ?Q?W???@,@|@@@A6AvAB B4B:BBBBBC*C7C=CCCDD)DEDjDDDEEKEEEEEEFNFOFFFFFFG+G2G6G7GqGwGGGGHH6HyHHHI3IIJJ]JcJJJJJK?KLKRKKKLL.LKLeLrLLM!MVM]M^MMMMMMNNNmNqNrNNOO.O4OcOiOOOOP6PbPPPQQ)Q/Q[QaQQQRRKR{RRRRSSZSSSSSTT!T/TBTcTjTTTTTUU"UiUV VWV]VVVVWWWfWWWWXIXYX_XXXYY YZYYZ Z'ZAZNZ~ZZZZ[ [V[W[[[[[[\\O\V\Z\\\]\\\] ]'](]q]w]]]]^^^^^^_C___``/`5`Y`_```aaIakaaaaab%bebbbcccc'crcsccccccdIdMdNdzddddeeaeeef"fbfffffgggmgzgghh(h@hVhph}hhi'i.i/ifigiiiiij,j0j1jejkjjjjkIkgkkllllHlNlllmm8mamymmmnnnnTnUnnnnnno'o.o2o3ovo|ooop%pVppppq*qzqqqr=rMrSrrrrrsJssssttt,tlttuu"u#u4uuuuuuuv(v`vgvkvlvvvvvwwHwwx x(xtxzxyyfyyyzGzWz]zzzzz{<{q{{{{|||?|||||}2}3}c}o}~}}}~ ~~~~;~d~e~~~~4:TZ!'w%+vk '4dde;?@`f.msO\b "<I.:JkrcK[a>s6=>uv6:;qwD"rCI3^xQBN[|#)X^x~8q"s DJ&39 *DQ5<=tuLPRS39#n]17GabD[HLNONTg/0sy5;K`a'@Afl:OP(7I\k&a)mx !VCm )Q^{<Qry}AGWy dEw8Ut  =>kw8\ U$*:\*ABu{  TZj06F[\zn &ABZkNVa7E\Bb~ .G\s.Bqwf·PáCĒ0iũ6RijƝƣƶMǘǞǮ&BCȓș8u{ɋɹɺ2w}ʍʻʼdjzˏːGM`{|̝̲̌&;ABiuͦMΝέ2E}ϻAЅАн[kѸ;kҕһ?Leӆӯ 8Y`dfgԝԺ'(]csՑՒ@օ֋ְֱ֛'O׀=؁ؑإ )A]ٓٗٙٚ4:ڊ+,ci۵Pܠ,-jkݟݫ?}ގޜ޳Aߐߞߵ߾߿:w{}~.LRgW6HI78bu&9x$7x"5|+OwIq "LM(`"@mqst,2BYZ8ABs0VQWg<BRtK9eB)w^D|2;<mk%+;qr _`PM Dz f:45uv+BKL}TZ@FPs  J a b     6 7 [ n ~        8 g      ; _ }      & G ` y      (.}12rxXST%o.x'U} :syGDJ!'7Z[#qEFq >#6yRi+<Jajk -Lc~  J P  !8!n!t!!!!""K"W"""##.#<#S#\#]######$"$2$T$$$$$%4%5%k%q%&&O&&&&' ' 'P'Q'''((^(n((()6)F)Z)c)d)))*0*4*6*7*w*{****+J+o+u+++++,,,V,b,,,,,--C-i-m-o-p---.9....//:/;///0#0)0u00011*1s112M2233+3,3|3333344 464B4445 555H5555666666b6677 7[778H889"9F999:&:w::::; ; ;=;C;V;q;r;;;;;;;<<<>h>??E?K?[?w?x?????@!@C@@@AEAAB2BBBBC C'C<CRCaCrCCCCCCDDDVDDDEGEEEEF7FxFFFFGG;GWGwGGGHH"HQHrHHHHHIIEILIPIRISIIIIIJBJJJK"KsKKKLL LL8L9LoLpLLLMMNM~MMMMNNNUNuNNOO O5O;OKOOOOOOOP'P-P=PYPZPPPPPQQQ$QzQQQQQRR"RcRiRyRRRSSS)S/S?SSSTSSSSSSSTTT(T7TTTbTwT}T~TTTU?UjUUUVV>VVVW WRWeWWWWX X4XmXvXwXXYY0YPYlYYYYZ"ZCZfZZZZZ[[[[[>[d[[[\:\\]"]r]^^]^^^^^^^_ _/_0_|_}___`B`K`L`}``a,a0a2a3aaaabb bqbbbbcc9c:clcxcccddDddddddee7e`efeef ff,fSfTffffgg&g'gXggggghh(hKhQhhi6iVi\iliiiijjhjjjkk&k'kNkTkkkkkll l1l7lGlelfllllmmHm_mmnn&n:nlnnnoo+o4o5ofoooopppEp`pwp~ppppqqqfqqqqqrrrLrerkrrrrrs=sJsPs`sssssssttt3t9tItkttttuuu1uLuMucuxuuuuuuuvvvTvvvw2wvwwwxx%x&xWxxxxyy;yHyiyyyyzz z zzz]z~zz{"{A{Y{Z{{{||O||}.}r}~ ~U~~9%>6&'x~<=ms%GM]yzLM_e} 9:Y_r  Bi,-EK^yz $5DZq4g~SdrB!1EJ(12c#M?]6Y!8Y`dfg-3jp06Ftu67q*QuG]^ ()I^qUabJy8`@^ 8Qfi ]cvbcJf:@^dhi Q<BRno :sy(.>bc=RXY 7Hd,_&Hj'-=_34Z`s)?@\bFLg|}8>NmnABhn,;Ng,i;m2;<m#Ea&W| 6k2j FGBY_`M[R~)Z…‹;<Àûü9=?@uydųOƜ8~fȲB{|ɾ Mefʦʧ':w˵'(Y̭̋=A̓R·ΈhϸPИа msѺ WҧDӊFԖԭ%sYր,ג׿A؃٧eڍ0},y_݈'Cޒo6!j  QW-b-9k)\s#?T=#m9mE`<{aTnQ<="qZC6Nl_N+|b+@AWn1k&\-67h(EZu|$uAG56p|*>w59;<q;<o Vrx ;#9?Ojk  L U V       ! g    . L h        : @ u {     > D j p    CIou KL^d$*;PQ+`fy&o)y`@VW1G` Y6;j0` (P]~ 5Xo\}56ioOUe   W ] p     !D!w!}!!!!!"""Z"^"""#%#+#Q#W#r###$$$f$$$$$$$%$%*%=%_%%&&R&h&i&&&&&'''3'U'j'''''''(((#($(X(d(((()E))))* *E***++-+b++++,,I,\,,,,--I-----.%.g....//Q/s////0+0L0o000011)1@1a1h1l1n1o112!2l2r22222333Q333333334(4S4445555K5Q5d5566S667)7q788\88888959A9n99999::?:C:E:F:::;3;;;;;<>#>3>O>P>>>>?!?'?B?k?l?????@@@S@@@@AAAMAAAB BB%B?B@BoBuBBBBCCjCCDD7DqDDECEEEFKFFFGGGGGMG~GGGGGGHHH3HVHgHvHHHHHHHI2IEIIIIJJUJJK KK.KgKKLLSLLLMM7MpMyMzMMNNCNmNNNOO5O]OjOOOPPMPfP{PPPPPPPQ1QYQ]QQRDRRRRSS S3SNSOSSSTTT4T[T\TTTTTU/U5UyUUUUUVVNVVVVVVWJWKW]WcWXXEXKX\XqXrXXXY YY-YEYFYYYZZ\ZbZuZZZZZ[[)[z[[[\@\X\\]@]]]^7^^^^__ _>_D_W_r_s_____```0`F`V`k`q`r```aEaaabb-bbbbbbcc-cFccccdd<doddeeeeKeseeef-fIfkffffg gBg[gzgggghh2h9h=h?h@hzhhi@iFiliriiiiijj'j-j@jXjYjjjjjk>kKkklllllmmNm]mmnJnsnnnnnnnno3o?oloooop p%pGpepppppqqBqpqqqqr*r0rCrnrorrss+s1sDsYsZssstt6tIt~ttttuu(u)uZuuuuuuvv;v<vsvvw1wKwLwwwxxAx_x`xxxxxyyyaytyyz#z8zFz]zzzz{{E{R{{{{{{{|#|Y|x|y|||}!}@}A}}}}}}}~~%~1~r~~~~(X8?CEF}Bgm0WXvBU8r%S} Hr,QW5MST5s#aEg Krs]pR?m "#ii +,W~LX~\qJajk@M%Kt"r  CO*8O-:i 9mn'NOr ReM Dr$+/12cA_`5;< NK~JtLr$%Pwx$0v 1p/e CJNPQ,-~"@Al R^Rgy @W`a,9t?r-3InUl1p/wDgnrtuTU9:dVm1pyz,k-ef,JKvS_3DRi¨,56gã=dćĎĒĔĕ ?oŕŖ)\z{ƮDP|$f{ȍȨ"Qɂɰɽ5<@BCyʥciˬ&H`fg̦̲'eͧͼ(12cΥBIMOPφϤ<Z[КЛ!MыќѪ  ;aҏCzӼӽ PԃԡԢP\վWl~֙Yׇה;dؕaٔٲٳ+Jbx~ڻ&]ۛ۬ۺJ}ܔܝܞ 9cpݥ>uާHNߑC[ab,COXY%v BGef;x$6Q ;H8VW"h/DZ`a)V7NWX =^Int  ;uv$c:KYpyz$K@ek,\].r,56g*1578se%+{  /GcyJ]>q'Q^$NCabD\|!o-gXPm9befNe  & 4 K T U      6 Y v }         W ]    9 :     G t  m S oHY_*VWfI\Mr'c cjnpq26*0C^_M  X^n5;agM6<%KQdS ) q !!\!!!!!"/"5"H"c"d"|"""""###)#>#D#E#t###$5$$$$%5%b%%&& & &>&f&&&'$'@'j''''((*(C((((((((()L)x)|))*$***=*z****++++4+5+n+t+++++,/,5,E,s,t,,,,,---S----...G.M.`.t..///O///////060p0v0001 1&1'1X1^111122:2v23333X3^333333444.4?4S4b4~44444455535p555696R6d6667C777788N8_8m8889 9P99999:0:_::::;;=;g;;;;>>>>>W>>?? ?F?L?_?t?u???@0@1@b@~@@@@@AA<AAAAAAABB4B}BCC7CCDDnDE ENEdEeEEEEFFKFTFUFFFFFFFGCGGGGH(HUHtHHHIIISI`IfIyIIIJJ J>JDJWJrJsJJJJJKKKiKoKKKKL LZL`LLLLLLLMMkMMMMMNNPNVNNNNOO O8O>OdOjO}OOP3PKPPPQ7QqQR RSRRSSZSSSSSST'T-T>T`TTTTTU9U?UpUvUUUUUUVV&V7VZViVVVVVVVVW4WGWWWWXX*XiXXXY2YKY]YxYYZ<ZZZZ[[R[[[[[\"\N\\\]]J]f]]]]]^$^c^^^^__5_L_a______`` `W``a2a\aaaaaaabHbNb^bbbbccc1c\c]cccd!d'd:dNdddde7eeeeeeeeffNffffggg>gDggggggh)hchihhhi i'i(i_ieixiijjjVjjjk@kkl"l1llmmGm]m^mmmmmn n n1nFnWnknnnnnnoo o oGoSoop p+paptpppqqqaqtqqrr1r?rVrrss@sosssst t+tQtttuu-uKusuuuuvv?vTvovvvvvvvwwCwwwxx xx2x3x^xxxxxxxy#y)y<y^yyyzzQzz{{Q{{{|E||} }!}"}O}^}p}}}}}~~7~f~o~p~~~~?CEF HJABTes4imop"8J^opOCtu:f{| W@%VW-L.Bo5Qo )>[bfhiRXB-|PVf6i6mqst)x*+\b>DTrsIlz[_ab/0mMStzBsy _3gh-o!':UVj(7LRS~>nIyA [I%e)Emz 0E^s?Qn)PQ 5;NijC+YZlr%+<QR 9:Sh&;ABr~YJ%^ghAi-Ub9Ng|+OSA`xT8$/GH{0^_ W£;NhiÕÛ 45syc{)*>Rg}ƎƣƲ!VǏ^iȝ 0]ɟN^rʫʴʵ 4^~˦ -Lm̩̐/6:<=|͕ͳ͹.|Ή'fϷ &6XЗ/Kє&AҌmӸQԙ1Հ "#UVւ֎ֿ/Osת׮װױ/5؄ FL\ـفٻcگ*0@fgۓ۔۶)@xܫ!I݈݌ݎݏ"&oUqr߲,2BdO0byz=P -}*?@{|ENO&*,-} ?@[6Rlrs BC >|%[%,023{c  ;<ms^,-|G-z8>Nop@+GM];YZv|X^n> #E O>45UBH[vw+G]rxyd0oW`a:rDQj  5 J y        J Z           Q W q     1 2 c i |           - B S Y Z }   *c@j4Unuy{|(yReA~#3G2;<m3X_ceNetworkSecurityApiOrganizationsResourceOrganizationsLocationsResource+OrganizationsLocationsAddressGroupsResource/OrganizationsLocationsFirewallEndpointsResource(OrganizationsLocationsOperationsResource3OrganizationsLocationsSecurityProfileGroupsResource.OrganizationsLocationsSecurityProfilesResourceProjectsResourceProjectsLocationsResource&ProjectsLocationsAddressGroupsResource.ProjectsLocationsAuthorizationPoliciesResource&ProjectsLocationsAuthzPoliciesResource5ProjectsLocationsBackendAuthenticationConfigsResource*ProjectsLocationsClientTlsPoliciesResource+ProjectsLocationsDnsThreatDetectorsResource5ProjectsLocationsFirewallEndpointAssociationsResource*ProjectsLocationsFirewallEndpointsResource0ProjectsLocationsGatewaySecurityPoliciesResource5ProjectsLocationsGatewaySecurityPoliciesRulesResource2ProjectsLocationsInterceptDeploymentGroupsResource-ProjectsLocationsInterceptDeploymentsResource;ProjectsLocationsInterceptEndpointGroupAssociationsResource0ProjectsLocationsInterceptEndpointGroupsResource2ProjectsLocationsMirroringDeploymentGroupsResource-ProjectsLocationsMirroringDeploymentsResource;ProjectsLocationsMirroringEndpointGroupAssociationsResource0ProjectsLocationsMirroringEndpointGroupsResource#ProjectsLocationsOperationsResource*ProjectsLocationsServerTlsPoliciesResource.ProjectsLocationsTlsInspectionPoliciesResource!ProjectsLocationsUrlListsResourceAddAddressGroupItemsRequest AddressGroupAntivirusOverrideAuthorizationPolicy AuthzPolicyAuthzPolicyAuthzRuleAuthzPolicyAuthzRuleFrom%AuthzPolicyAuthzRuleFromRequestSourceAuthzPolicyAuthzRuleHeaderMatchAuthzPolicyAuthzRuleIpBlockAuthzPolicyAuthzRulePrincipal#AuthzPolicyAuthzRuleRequestResource0AuthzPolicyAuthzRuleRequestResourceTagValueIdSetAuthzPolicyAuthzRuleStringMatchAuthzPolicyAuthzRuleTo&AuthzPolicyAuthzRuleToRequestOperation/AuthzPolicyAuthzRuleToRequestOperationHeaderSetAuthzPolicyCustomProvider'AuthzPolicyCustomProviderAuthzExtensionAuthzPolicyTargetBackendAuthenticationConfigCertificateProviderInstanceClientTlsPolicyCloneAddressGroupItemsRequestCustomInterceptProfileCustomMirroringProfile DestinationDnsThreatDetectorFirewallEndpointFirewallEndpointAssociation$FirewallEndpointAssociationReference FirewallEndpointEndpointSettingsGatewaySecurityPolicyGatewaySecurityPolicyRule/GoogleCloudNetworksecurityV1CertificateProvider(GoogleCloudNetworksecurityV1GrpcEndpointGoogleIamV1AuditConfigGoogleIamV1BindingGoogleIamV1PolicyGoogleIamV1SetIamPolicyRequestHttpHeaderMatchInterceptDeploymentInterceptDeploymentGroup.InterceptDeploymentGroupConnectedEndpointGroup"InterceptDeploymentGroupDeploymentInterceptEndpointGroup!InterceptEndpointGroupAssociation(InterceptEndpointGroupAssociationDetails.InterceptEndpointGroupConnectedDeploymentGroup"ListAddressGroupReferencesResponse7ListAddressGroupReferencesResponseAddressGroupReferenceListAddressGroupsResponse!ListAuthorizationPoliciesResponseListAuthzPoliciesResponse(ListBackendAuthenticationConfigsResponseListClientTlsPoliciesResponseListDnsThreatDetectorsResponse(ListFirewallEndpointAssociationsResponseListFirewallEndpointsResponse#ListGatewaySecurityPoliciesResponse&ListGatewaySecurityPolicyRulesResponse%ListInterceptDeploymentGroupsResponse ListInterceptDeploymentsResponse.ListInterceptEndpointGroupAssociationsResponse#ListInterceptEndpointGroupsResponseListLocationsResponse%ListMirroringDeploymentGroupsResponse ListMirroringDeploymentsResponse.ListMirroringEndpointGroupAssociationsResponse#ListMirroringEndpointGroupsResponseListOperationsResponse!ListSecurityProfileGroupsResponseListSecurityProfilesResponseListServerTlsPoliciesResponse!ListTlsInspectionPoliciesResponseListUrlListsResponse MTLSPolicyMirroringDeploymentMirroringDeploymentGroup.MirroringDeploymentGroupConnectedEndpointGroup"MirroringDeploymentGroupDeploymentMirroringEndpointGroup!MirroringEndpointGroupAssociation(MirroringEndpointGroupAssociationDetails.MirroringEndpointGroupConnectedDeploymentGroup OperationRemoveAddressGroupItemsRequestRuleSecurityProfileSecurityProfileGroupServerTlsPolicySeverityOverrideSourceThreatOverrideThreatPreventionProfileTlsInspectionPolicyUrlList ValidationCA