v1beta1

type AddressObservedStateStatus struct {
	/* Immutable. The static external IP address represented by this resource.
	The IP address must be inside the specified subnetwork,
	if any. Set by the API if undefined. */
	// +optional
	Address *string `json:"address,omitempty"`
}

type BackendbucketBypassCacheOnRequestHeaders struct {
	/* The header field name to match on when bypassing cache. Values are case-insensitive. */
	// +optional
	HeaderName *string `json:"headerName,omitempty"`
}

type BackendbucketCacheKeyPolicy struct {
	/* Allows HTTP request headers (by name) to be used in the
	cache key. */
	// +optional
	IncludeHttpHeaders []string `json:"includeHttpHeaders,omitempty"`

	/* Names of query string parameters to include in cache keys.
	Default parameters are always included. '&' and '=' will
	be percent encoded and not treated as delimiters. */
	// +optional
	QueryStringWhitelist []string `json:"queryStringWhitelist,omitempty"`
}

type BackendbucketCdnPolicy struct {
	/* Bypass the cache when the specified request headers are matched - e.g. Pragma or Authorization headers. Up to 5 headers can be specified. The cache is bypassed for all cdnPolicy.cacheMode settings. */
	// +optional
	BypassCacheOnRequestHeaders []BackendbucketBypassCacheOnRequestHeaders `json:"bypassCacheOnRequestHeaders,omitempty"`

	/* The CacheKeyPolicy for this CdnPolicy. */
	// +optional
	CacheKeyPolicy *BackendbucketCacheKeyPolicy `json:"cacheKeyPolicy,omitempty"`

	/* Specifies the cache setting for all responses from this backend.
	The possible values are: USE_ORIGIN_HEADERS, FORCE_CACHE_ALL and CACHE_ALL_STATIC Possible values: ["USE_ORIGIN_HEADERS", "FORCE_CACHE_ALL", "CACHE_ALL_STATIC"]. */
	// +optional
	CacheMode *string `json:"cacheMode,omitempty"`

	/* Specifies the maximum allowed TTL for cached content served by this origin. */
	// +optional
	ClientTtl *int `json:"clientTtl,omitempty"`

	/* Specifies the default TTL for cached content served by this origin for responses
	that do not have an existing valid TTL (max-age or s-max-age). */
	// +optional
	DefaultTtl *int `json:"defaultTtl,omitempty"`

	/* Specifies the maximum allowed TTL for cached content served by this origin. */
	// +optional
	MaxTtl *int `json:"maxTtl,omitempty"`

	/* Negative caching allows per-status code TTLs to be set, in order to apply fine-grained caching for common errors or redirects. */
	// +optional
	NegativeCaching *bool `json:"negativeCaching,omitempty"`

	/* Sets a cache TTL for the specified HTTP status code. negativeCaching must be enabled to configure negativeCachingPolicy.
	Omitting the policy and leaving negativeCaching enabled will use Cloud CDN's default cache TTLs. */
	// +optional
	NegativeCachingPolicy []BackendbucketNegativeCachingPolicy `json:"negativeCachingPolicy,omitempty"`

	/* If true then Cloud CDN will combine multiple concurrent cache fill requests into a small number of requests to the origin. */
	// +optional
	RequestCoalescing *bool `json:"requestCoalescing,omitempty"`

	/* Serve existing content from the cache (if available) when revalidating content with the origin, or when an error is encountered when refreshing the cache. */
	// +optional
	ServeWhileStale *int `json:"serveWhileStale,omitempty"`

	/* Maximum number of seconds the response to a signed URL request will
	be considered fresh. After this time period,
	the response will be revalidated before being served.
	When serving responses to signed URL requests,
	Cloud CDN will internally behave as though
	all responses from this backend had a "Cache-Control: public,
	max-age=[TTL]" header, regardless of any existing Cache-Control
	header. The actual headers served in responses will not be altered. */
	// +optional
	SignedUrlCacheMaxAgeSec *int `json:"signedUrlCacheMaxAgeSec,omitempty"`
}

type BackendbucketNegativeCachingPolicy struct {
	/* The HTTP status code to define a TTL against. Only HTTP status codes 300, 301, 308, 404, 405, 410, 421, 451 and 501
	can be specified as values, and you cannot specify a status code more than once. */
	// +optional
	Code *int `json:"code,omitempty"`

	/* The TTL (in seconds) for which to cache responses with the corresponding status code. The maximum allowed value is 1800s
	(30 minutes), noting that infrequently accessed objects may be evicted from the cache before the defined TTL. */
	// +optional
	Ttl *int `json:"ttl,omitempty"`
}

type BackendserviceBackend struct {
	/* Specifies the balancing mode for this backend.

	For global HTTP(S) or TCP/SSL load balancing, the default is
	UTILIZATION. Valid values are UTILIZATION, RATE (for HTTP(S))
	and CONNECTION (for TCP/SSL).

	See the [Backend Services Overview](https://cloud.google.com/load-balancing/docs/backend-service#balancing-mode)
	for an explanation of load balancing modes. Default value: "UTILIZATION" Possible values: ["UTILIZATION", "RATE", "CONNECTION"]. */
	// +optional
	BalancingMode *string `json:"balancingMode,omitempty"`

	/* A multiplier applied to the group's maximum servicing capacity
	(based on UTILIZATION, RATE or CONNECTION).

	Default value is 1, which means the group will serve up to 100%
	of its configured capacity (depending on balancingMode). A
	setting of 0 means the group is completely drained, offering
	0% of its available Capacity. Valid range is [0.0,1.0]. */
	// +optional
	CapacityScaler *float64 `json:"capacityScaler,omitempty"`

	/* An optional description of this resource.
	Provide this property when you create the resource. */
	// +optional
	Description *string `json:"description,omitempty"`

	/* This field designates whether this is a failover backend. More
	than one failover backend can be configured for a given RegionBackendService. */
	// +optional
	Failover *bool `json:"failover,omitempty"`

	/* Reference to a ComputeInstanceGroup or ComputeNetworkEndpointGroup
	resource. In case of instance group this defines the list of
	instances that serve traffic. Member virtual machine instances from
	each instance group must live in the same zone as the instance
	group itself. No two backends in a backend service are allowed to
	use same Instance Group resource.

	For Network Endpoint Groups this defines list of endpoints. All
	endpoints of Network Endpoint Group must be hosted on instances
	located in the same zone as the Network Endpoint Group.

	Backend services cannot mix Instance Group and Network Endpoint
	Group backends.

	When the 'load_balancing_scheme' is INTERNAL, only instance groups
	are supported. */
	Group BackendserviceGroup `json:"group"`

	/* The max number of simultaneous connections for the group. Can
	be used with either CONNECTION or UTILIZATION balancing modes.

	For CONNECTION mode, either maxConnections or one
	of maxConnectionsPerInstance or maxConnectionsPerEndpoint,
	as appropriate for group type, must be set. */
	// +optional
	MaxConnections *int `json:"maxConnections,omitempty"`

	/* The max number of simultaneous connections that a single backend
	network endpoint can handle. This is used to calculate the
	capacity of the group. Can be used in either CONNECTION or
	UTILIZATION balancing modes.

	For CONNECTION mode, either
	maxConnections or maxConnectionsPerEndpoint must be set. */
	// +optional
	MaxConnectionsPerEndpoint *int `json:"maxConnectionsPerEndpoint,omitempty"`

	/* The max number of simultaneous connections that a single
	backend instance can handle. This is used to calculate the
	capacity of the group. Can be used in either CONNECTION or
	UTILIZATION balancing modes.

	For CONNECTION mode, either maxConnections or
	maxConnectionsPerInstance must be set. */
	// +optional
	MaxConnectionsPerInstance *int `json:"maxConnectionsPerInstance,omitempty"`

	/* The max requests per second (RPS) of the group.

	Can be used with either RATE or UTILIZATION balancing modes,
	but required if RATE mode. For RATE mode, either maxRate or one
	of maxRatePerInstance or maxRatePerEndpoint, as appropriate for
	group type, must be set. */
	// +optional
	MaxRate *int `json:"maxRate,omitempty"`

	/* The max requests per second (RPS) that a single backend network
	endpoint can handle. This is used to calculate the capacity of
	the group. Can be used in either balancing mode. For RATE mode,
	either maxRate or maxRatePerEndpoint must be set. */
	// +optional
	MaxRatePerEndpoint *float64 `json:"maxRatePerEndpoint,omitempty"`

	/* The max requests per second (RPS) that a single backend
	instance can handle. This is used to calculate the capacity of
	the group. Can be used in either balancing mode. For RATE mode,
	either maxRate or maxRatePerInstance must be set. */
	// +optional
	MaxRatePerInstance *float64 `json:"maxRatePerInstance,omitempty"`

	/* Used when balancingMode is UTILIZATION. This ratio defines the
	CPU utilization target for the group. Valid range is [0.0, 1.0]. */
	// +optional
	MaxUtilization *float64 `json:"maxUtilization,omitempty"`
}

type BackendserviceBaseEjectionTime struct {
	/* Span of time that's a fraction of a second at nanosecond resolution. Durations
	less than one second are represented with a 0 'seconds' field and a positive
	'nanos' field. Must be from 0 to 999,999,999 inclusive. */
	// +optional
	Nanos *int `json:"nanos,omitempty"`

	/* Span of time at a resolution of a second. Must be from 0 to 315,576,000,000
	inclusive. */
	Seconds int `json:"seconds"`
}

type BackendserviceBypassCacheOnRequestHeaders struct {
	/* The header field name to match on when bypassing cache. Values are case-insensitive. */
	HeaderName string `json:"headerName"`
}

type BackendserviceCacheKeyPolicy struct {
	/* If true requests to different hosts will be cached separately. */
	// +optional
	IncludeHost *bool `json:"includeHost,omitempty"`

	/* Allows HTTP request headers (by name) to be used in the
	cache key. */
	// +optional
	IncludeHttpHeaders []string `json:"includeHttpHeaders,omitempty"`

	/* Names of cookies to include in cache keys. */
	// +optional
	IncludeNamedCookies []string `json:"includeNamedCookies,omitempty"`

	/* If true, http and https requests will be cached separately. */
	// +optional
	IncludeProtocol *bool `json:"includeProtocol,omitempty"`

	/* If true, include query string parameters in the cache key
	according to query_string_whitelist and
	query_string_blacklist. If neither is set, the entire query
	string will be included.

	If false, the query string will be excluded from the cache
	key entirely. */
	// +optional
	IncludeQueryString *bool `json:"includeQueryString,omitempty"`

	/* Names of query string parameters to exclude in cache keys.

	All other parameters will be included. Either specify
	query_string_whitelist or query_string_blacklist, not both.
	'&' and '=' will be percent encoded and not treated as
	delimiters. */
	// +optional
	QueryStringBlacklist []string `json:"queryStringBlacklist,omitempty"`

	/* Names of query string parameters to include in cache keys.

	All other parameters will be excluded. Either specify
	query_string_whitelist or query_string_blacklist, not both.
	'&' and '=' will be percent encoded and not treated as
	delimiters. */
	// +optional
	QueryStringWhitelist []string `json:"queryStringWhitelist,omitempty"`
}

type BackendserviceCdnPolicy struct {
	/* Bypass the cache when the specified request headers are matched - e.g. Pragma or Authorization headers. Up to 5 headers can be specified.
	The cache is bypassed for all cdnPolicy.cacheMode settings. */
	// +optional
	BypassCacheOnRequestHeaders []BackendserviceBypassCacheOnRequestHeaders `json:"bypassCacheOnRequestHeaders,omitempty"`

	/* The CacheKeyPolicy for this CdnPolicy. */
	// +optional
	CacheKeyPolicy *BackendserviceCacheKeyPolicy `json:"cacheKeyPolicy,omitempty"`

	/* Specifies the cache setting for all responses from this backend.
	The possible values are: USE_ORIGIN_HEADERS, FORCE_CACHE_ALL and CACHE_ALL_STATIC Possible values: ["USE_ORIGIN_HEADERS", "FORCE_CACHE_ALL", "CACHE_ALL_STATIC"]. */
	// +optional
	CacheMode *string `json:"cacheMode,omitempty"`

	/* Specifies the maximum allowed TTL for cached content served by this origin. */
	// +optional
	ClientTtl *int `json:"clientTtl,omitempty"`

	/* Specifies the default TTL for cached content served by this origin for responses
	that do not have an existing valid TTL (max-age or s-max-age). */
	// +optional
	DefaultTtl *int `json:"defaultTtl,omitempty"`

	/* Specifies the maximum allowed TTL for cached content served by this origin. */
	// +optional
	MaxTtl *int `json:"maxTtl,omitempty"`

	/* Negative caching allows per-status code TTLs to be set, in order to apply fine-grained caching for common errors or redirects. */
	// +optional
	NegativeCaching *bool `json:"negativeCaching,omitempty"`

	/* Sets a cache TTL for the specified HTTP status code. negativeCaching must be enabled to configure negativeCachingPolicy.
	Omitting the policy and leaving negativeCaching enabled will use Cloud CDN's default cache TTLs. */
	// +optional
	NegativeCachingPolicy []BackendserviceNegativeCachingPolicy `json:"negativeCachingPolicy,omitempty"`

	/* Serve existing content from the cache (if available) when revalidating content with the origin, or when an error is encountered when refreshing the cache. */
	// +optional
	ServeWhileStale *int `json:"serveWhileStale,omitempty"`

	/* Maximum number of seconds the response to a signed URL request
	will be considered fresh, defaults to 1hr (3600s). After this
	time period, the response will be revalidated before
	being served.

	When serving responses to signed URL requests, Cloud CDN will
	internally behave as though all responses from this backend had a
	"Cache-Control: public, max-age=[TTL]" header, regardless of any
	existing Cache-Control header. The actual headers served in
	responses will not be altered. */
	// +optional
	SignedUrlCacheMaxAgeSec *int `json:"signedUrlCacheMaxAgeSec,omitempty"`
}

type BackendserviceCircuitBreakers struct {
	/* The timeout for new network connections to hosts. */
	// +optional
	ConnectTimeout *BackendserviceConnectTimeout `json:"connectTimeout,omitempty"`

	/* The maximum number of connections to the backend cluster.
	Defaults to 1024. */
	// +optional
	MaxConnections *int `json:"maxConnections,omitempty"`

	/* The maximum number of pending requests to the backend cluster.
	Defaults to 1024. */
	// +optional
	MaxPendingRequests *int `json:"maxPendingRequests,omitempty"`

	/* The maximum number of parallel requests to the backend cluster.
	Defaults to 1024. */
	// +optional
	MaxRequests *int `json:"maxRequests,omitempty"`

	/* Maximum requests for a single backend connection. This parameter
	is respected by both the HTTP/1.1 and HTTP/2 implementations. If
	not specified, there is no limit. Setting this parameter to 1
	will effectively disable keep alive. */
	// +optional
	MaxRequestsPerConnection *int `json:"maxRequestsPerConnection,omitempty"`

	/* The maximum number of parallel retries to the backend cluster.
	Defaults to 3. */
	// +optional
	MaxRetries *int `json:"maxRetries,omitempty"`
}

type BackendserviceConnectTimeout struct {
	/* Span of time that's a fraction of a second at nanosecond
	resolution. Durations less than one second are represented
	with a 0 seconds field and a positive nanos field. Must
	be from 0 to 999,999,999 inclusive. */
	// +optional
	Nanos *int `json:"nanos,omitempty"`

	/* Span of time at a resolution of a second.
	Must be from 0 to 315,576,000,000 inclusive. */
	Seconds int `json:"seconds"`
}

type BackendserviceConnectionTrackingPolicy struct {
	/* Specifies connection persistence when backends are unhealthy.

	If set to 'DEFAULT_FOR_PROTOCOL', the existing connections persist on
	unhealthy backends only for connection-oriented protocols (TCP and SCTP)
	and only if the Tracking Mode is PER_CONNECTION (default tracking mode)
	or the Session Affinity is configured for 5-tuple. They do not persist
	for UDP.

	If set to 'NEVER_PERSIST', after a backend becomes unhealthy, the existing
	connections on the unhealthy backend are never persisted on the unhealthy
	backend. They are always diverted to newly selected healthy backends
	(unless all backends are unhealthy).

	If set to 'ALWAYS_PERSIST', existing connections always persist on
	unhealthy backends regardless of protocol and session affinity. It is
	generally not recommended to use this mode overriding the default. Default value: "DEFAULT_FOR_PROTOCOL" Possible values: ["DEFAULT_FOR_PROTOCOL", "NEVER_PERSIST", "ALWAYS_PERSIST"]. */
	// +optional
	ConnectionPersistenceOnUnhealthyBackends *string `json:"connectionPersistenceOnUnhealthyBackends,omitempty"`

	/* Enable Strong Session Affinity for Network Load Balancing. This option is not available publicly. */
	// +optional
	EnableStrongAffinity *bool `json:"enableStrongAffinity,omitempty"`

	/* Specifies how long to keep a Connection Tracking entry while there is
	no matching traffic (in seconds).

	For L4 ILB the minimum(default) is 10 minutes and maximum is 16 hours.

	For NLB the minimum(default) is 60 seconds and the maximum is 16 hours. */
	// +optional
	IdleTimeoutSec *int `json:"idleTimeoutSec,omitempty"`

	/* Specifies the key used for connection tracking. There are two options:
	'PER_CONNECTION': The Connection Tracking is performed as per the
	Connection Key (default Hash Method) for the specific protocol.

	'PER_SESSION': The Connection Tracking is performed as per the
	configured Session Affinity. It matches the configured Session Affinity. Default value: "PER_CONNECTION" Possible values: ["PER_CONNECTION", "PER_SESSION"]. */
	// +optional
	TrackingMode *string `json:"trackingMode,omitempty"`
}

type BackendserviceConsistentHash struct {
	/* Hash is based on HTTP Cookie. This field describes a HTTP cookie
	that will be used as the hash key for the consistent hash load
	balancer. If the cookie is not present, it will be generated.
	This field is applicable if the sessionAffinity is set to HTTP_COOKIE. */
	// +optional
	HttpCookie *BackendserviceHttpCookie `json:"httpCookie,omitempty"`

	/* The hash based on the value of the specified header field.
	This field is applicable if the sessionAffinity is set to HEADER_FIELD. */
	// +optional
	HttpHeaderName *string `json:"httpHeaderName,omitempty"`

	/* The minimum number of virtual nodes to use for the hash ring.
	Larger ring sizes result in more granular load
	distributions. If the number of hosts in the load balancing pool
	is larger than the ring size, each host will be assigned a single
	virtual node.
	Defaults to 1024. */
	// +optional
	MinimumRingSize *int `json:"minimumRingSize,omitempty"`
}

type BackendserviceCustomPolicy struct {
	/* An optional, arbitrary JSON object with configuration data, understood
	by a locally installed custom policy implementation. */
	// +optional
	Data *string `json:"data,omitempty"`

	/* Identifies the custom policy.

	The value should match the type the custom implementation is registered
	with on the gRPC clients. It should follow protocol buffer
	message naming conventions and include the full path (e.g.
	myorg.CustomLbPolicy). The maximum length is 256 characters.

	Note that specifying the same custom policy more than once for a
	backend is not a valid configuration and will be rejected. */
	Name string `json:"name"`
}

type BackendserviceFailoverPolicy struct {
	/* On failover or failback, this field indicates whether connection drain
	will be honored. Setting this to true has the following effect: connections
	to the old active pool are not drained. Connections to the new active pool
	use the timeout of 10 min (currently fixed). Setting to false has the
	following effect: both old and new connections will have a drain timeout
	of 10 min.
	This can be set to true only if the protocol is TCP.
	The default is false. */
	// +optional
	DisableConnectionDrainOnFailover *bool `json:"disableConnectionDrainOnFailover,omitempty"`

	/* This option is used only when no healthy VMs are detected in the primary
	and backup instance groups. When set to true, traffic is dropped. When
	set to false, new connections are sent across all VMs in the primary group.
	The default is false. */
	// +optional
	DropTrafficIfUnhealthy *bool `json:"dropTrafficIfUnhealthy,omitempty"`

	/* The value of the field must be in [0, 1]. If the ratio of the healthy
	VMs in the primary backend is at or below this number, traffic arriving
	at the load-balanced IP will be directed to the failover backend.
	In case where 'failoverRatio' is not set or all the VMs in the backup
	backend are unhealthy, the traffic will be directed back to the primary
	backend in the "force" mode, where traffic will be spread to the healthy
	VMs with the best effort, or to all VMs when no VM is healthy.
	This field is only used with l4 load balancing. */
	// +optional
	FailoverRatio *float64 `json:"failoverRatio,omitempty"`
}

type BackendserviceGroup struct {
	// +optional
	InstanceGroupRef *v1alpha1.ResourceRef `json:"instanceGroupRef,omitempty"`

	// +optional
	NetworkEndpointGroupRef *v1alpha1.ResourceRef `json:"networkEndpointGroupRef,omitempty"`
}

type BackendserviceHealthChecks struct {
	// +optional
	HealthCheckRef *v1alpha1.ResourceRef `json:"healthCheckRef,omitempty"`

	// +optional
	HttpHealthCheckRef *v1alpha1.ResourceRef `json:"httpHealthCheckRef,omitempty"`
}

type BackendserviceHttpCookie struct {
	/* Name of the cookie. */
	// +optional
	Name *string `json:"name,omitempty"`

	/* Path to set for the cookie. */
	// +optional
	Path *string `json:"path,omitempty"`

	/* Lifetime of the cookie. */
	// +optional
	Ttl *BackendserviceTtl `json:"ttl,omitempty"`
}

type BackendserviceIap struct {
	/* DEPRECATED. Although this field is still available, there is limited support. We recommend that you use `spec.iap.oauth2ClientIdRef` instead. */
	// +optional
	Oauth2ClientId *string `json:"oauth2ClientId,omitempty"`

	/* OAuth2 Client ID for IAP. */
	// +optional
	Oauth2ClientIdRef *v1alpha1.ResourceRef `json:"oauth2ClientIdRef,omitempty"`

	/* OAuth2 Client Secret for IAP. */
	// +optional
	Oauth2ClientSecret *BackendserviceOauth2ClientSecret `json:"oauth2ClientSecret,omitempty"`

	/* OAuth2 Client Secret SHA-256 for IAP. */
	// +optional
	Oauth2ClientSecretSha256 *string `json:"oauth2ClientSecretSha256,omitempty"`
}

type BackendserviceInterval struct {
	/* Span of time that's a fraction of a second at nanosecond resolution. Durations
	less than one second are represented with a 0 'seconds' field and a positive
	'nanos' field. Must be from 0 to 999,999,999 inclusive. */
	// +optional
	Nanos *int `json:"nanos,omitempty"`

	/* Span of time at a resolution of a second. Must be from 0 to 315,576,000,000
	inclusive. */
	Seconds int `json:"seconds"`
}

type BackendserviceLocalityLbPolicies struct {
	/* The configuration for a custom policy implemented by the user and
	deployed with the client. */
	// +optional
	CustomPolicy *BackendserviceCustomPolicy `json:"customPolicy,omitempty"`

	/* The configuration for a built-in load balancing policy. */
	// +optional
	Policy *BackendservicePolicy `json:"policy,omitempty"`
}

type BackendserviceLogConfig struct {
	/* Whether to enable logging for the load balancer traffic served by this backend service. */
	// +optional
	Enable *bool `json:"enable,omitempty"`

	/* This field can only be specified if logging is enabled for this backend service. The value of
	the field must be in [0, 1]. This configures the sampling rate of requests to the load balancer
	where 1.0 means all logged requests are reported and 0.0 means no logged requests are reported.
	The default value is 1.0. */
	// +optional
	SampleRate *float64 `json:"sampleRate,omitempty"`
}

type BackendserviceNegativeCachingPolicy struct {
	/* The HTTP status code to define a TTL against. Only HTTP status codes 300, 301, 308, 404, 405, 410, 421, 451 and 501
	can be specified as values, and you cannot specify a status code more than once. */
	// +optional
	Code *int `json:"code,omitempty"`

	/* The TTL (in seconds) for which to cache responses with the corresponding status code. The maximum allowed value is 1800s
	(30 minutes), noting that infrequently accessed objects may be evicted from the cache before the defined TTL. */
	// +optional
	Ttl *int `json:"ttl,omitempty"`
}

type BackendserviceOauth2ClientSecret struct {
	/* Value of the field. Cannot be used if 'valueFrom' is specified. */
	// +optional
	Value *string `json:"value,omitempty"`

	/* Source for the field's value. Cannot be used if 'value' is specified. */
	// +optional
	ValueFrom *BackendserviceValueFrom `json:"valueFrom,omitempty"`
}

type BackendserviceOutlierDetection struct {
	/* The base time that a host is ejected for. The real time is equal to the base
	time multiplied by the number of times the host has been ejected. Defaults to
	30000ms or 30s. */
	// +optional
	BaseEjectionTime *BackendserviceBaseEjectionTime `json:"baseEjectionTime,omitempty"`

	/* Number of errors before a host is ejected from the connection pool. When the
	backend host is accessed over HTTP, a 5xx return code qualifies as an error.
	Defaults to 5. */
	// +optional
	ConsecutiveErrors *int `json:"consecutiveErrors,omitempty"`

	/* The number of consecutive gateway failures (502, 503, 504 status or connection
	errors that are mapped to one of those status codes) before a consecutive
	gateway failure ejection occurs. Defaults to 5. */
	// +optional
	ConsecutiveGatewayFailure *int `json:"consecutiveGatewayFailure,omitempty"`

	/* The percentage chance that a host will be actually ejected when an outlier
	status is detected through consecutive 5xx. This setting can be used to disable
	ejection or to ramp it up slowly. Defaults to 100. */
	// +optional
	EnforcingConsecutiveErrors *int `json:"enforcingConsecutiveErrors,omitempty"`

	/* The percentage chance that a host will be actually ejected when an outlier
	status is detected through consecutive gateway failures. This setting can be
	used to disable ejection or to ramp it up slowly. Defaults to 0. */
	// +optional
	EnforcingConsecutiveGatewayFailure *int `json:"enforcingConsecutiveGatewayFailure,omitempty"`

	/* The percentage chance that a host will be actually ejected when an outlier
	status is detected through success rate statistics. This setting can be used to
	disable ejection or to ramp it up slowly. Defaults to 100. */
	// +optional
	EnforcingSuccessRate *int `json:"enforcingSuccessRate,omitempty"`

	/* Time interval between ejection sweep analysis. This can result in both new
	ejections as well as hosts being returned to service. Defaults to 10 seconds. */
	// +optional
	Interval *BackendserviceInterval `json:"interval,omitempty"`

	/* Maximum percentage of hosts in the load balancing pool for the backend service
	that can be ejected. Defaults to 10%. */
	// +optional
	MaxEjectionPercent *int `json:"maxEjectionPercent,omitempty"`

	/* The number of hosts in a cluster that must have enough request volume to detect
	success rate outliers. If the number of hosts is less than this setting, outlier
	detection via success rate statistics is not performed for any host in the
	cluster. Defaults to 5. */
	// +optional
	SuccessRateMinimumHosts *int `json:"successRateMinimumHosts,omitempty"`

	/* The minimum number of total requests that must be collected in one interval (as
	defined by the interval duration above) to include this host in success rate
	based outlier detection. If the volume is lower than this setting, outlier
	detection via success rate statistics is not performed for that host. Defaults
	to 100. */
	// +optional
	SuccessRateRequestVolume *int `json:"successRateRequestVolume,omitempty"`

	/* This factor is used to determine the ejection threshold for success rate outlier
	ejection. The ejection threshold is the difference between the mean success
	rate, and the product of this factor and the standard deviation of the mean
	success rate: mean - (stdev * success_rate_stdev_factor). This factor is divided
	by a thousand to get a double. That is, if the desired factor is 1.9, the
	runtime value should be 1900. Defaults to 1900. */
	// +optional
	SuccessRateStdevFactor *int `json:"successRateStdevFactor,omitempty"`
}

type BackendservicePolicy struct {
	/* The name of a locality load balancer policy to be used. The value
	should be one of the predefined ones as supported by localityLbPolicy,
	although at the moment only ROUND_ROBIN is supported.

	This field should only be populated when the customPolicy field is not
	used.

	Note that specifying the same policy more than once for a backend is
	not a valid configuration and will be rejected.

	The possible values are:

	* 'ROUND_ROBIN': This is a simple policy in which each healthy backend
	is selected in round robin order.

	* 'LEAST_REQUEST': An O(1) algorithm which selects two random healthy
	hosts and picks the host which has fewer active requests.

	* 'RING_HASH': The ring/modulo hash load balancer implements consistent
	hashing to backends. The algorithm has the property that the
	addition/removal of a host from a set of N hosts only affects
	1/N of the requests.

	* 'RANDOM': The load balancer selects a random healthy host.

	* 'ORIGINAL_DESTINATION': Backend host is selected based on the client
	connection metadata, i.e., connections are opened
	to the same address as the destination address of
	the incoming connection before the connection
	was redirected to the load balancer.

	* 'MAGLEV': used as a drop in replacement for the ring hash load balancer.
	Maglev is not as stable as ring hash but has faster table lookup
	build times and host selection times. For more information about
	Maglev, refer to https://ai.google/research/pubs/pub44824 Possible values: ["ROUND_ROBIN", "LEAST_REQUEST", "RING_HASH", "RANDOM", "ORIGINAL_DESTINATION", "MAGLEV"]. */
	Name string `json:"name"`
}

type BackendserviceSecuritySettings struct {
	/* ClientTlsPolicy is a resource that specifies how a client should
	authenticate connections to backends of a service. This resource itself
	does not affect configuration unless it is attached to a backend
	service resource. */
	ClientTLSPolicyRef v1alpha1.ResourceRef `json:"clientTLSPolicyRef"`

	/* A list of alternate names to verify the subject identity in the certificate.
	If specified, the client will verify that the server certificate's subject
	alt name matches one of the specified values. */
	SubjectAltNames []string `json:"subjectAltNames"`
}

type BackendserviceSubsetting struct {
	/* The algorithm used for subsetting. Possible values: ["CONSISTENT_HASH_SUBSETTING"]. */
	Policy string `json:"policy"`
}

type BackendserviceTtl struct {
	/* Span of time that's a fraction of a second at nanosecond
	resolution. Durations less than one second are represented
	with a 0 seconds field and a positive nanos field. Must
	be from 0 to 999,999,999 inclusive. */
	// +optional
	Nanos *int `json:"nanos,omitempty"`

	/* Span of time at a resolution of a second.
	Must be from 0 to 315,576,000,000 inclusive. */
	Seconds int `json:"seconds"`
}

type BackendserviceValueFrom struct {
	/* Reference to a value with the given key in the given Secret in the resource's namespace. */
	// +optional
	SecretKeyRef *v1alpha1.SecretKeyRef `json:"secretKeyRef,omitempty"`
}

type ComputeAddress struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ComputeAddressSpec   `json:"spec,omitempty"`
	Status ComputeAddressStatus `json:"status,omitempty"`
}

type ComputeAddressList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ComputeAddress `json:"items"`
}

type ComputeAddressSpec struct {
	/* Immutable. The static external IP address represented by this resource.
	The IP address must be inside the specified subnetwork,
	if any. Set by the API if undefined. */
	// +optional
	Address *string `json:"address,omitempty"`

	/* Immutable. The type of address to reserve.
	Note: if you set this argument's value as 'INTERNAL' you need to leave the 'network_tier' argument unset in that resource block. Default value: "EXTERNAL" Possible values: ["INTERNAL", "EXTERNAL"]. */
	// +optional
	AddressType *string `json:"addressType,omitempty"`

	/* Immutable. An optional description of this resource. */
	// +optional
	Description *string `json:"description,omitempty"`

	/* Immutable. The IP Version that will be used by this address. The default value is 'IPV4'. Possible values: ["IPV4", "IPV6"]. */
	// +optional
	IpVersion *string `json:"ipVersion,omitempty"`

	/* Immutable. The endpoint type of this address, which should be VM or NETLB. This is
	used for deciding which type of endpoint this address can be used after
	the external IPv6 address reservation. Possible values: ["VM", "NETLB"]. */
	// +optional
	Ipv6EndpointType *string `json:"ipv6EndpointType,omitempty"`

	/* Location represents the geographical location of the ComputeAddress. Specify a region name or "global" for global resources. Reference: GCP definition of regions/zones (https://cloud.google.com/compute/docs/regions-zones/) */
	Location string `json:"location"`

	/* The network in which to reserve the address. If global, the address
	must be within the RFC1918 IP space. The network cannot be deleted
	if there are any reserved IP ranges referring to it. This field can
	only be used with INTERNAL type with the VPC_PEERING and
	IPSEC_INTERCONNECT purposes. */
	// +optional
	NetworkRef *v1alpha1.ResourceRef `json:"networkRef,omitempty"`

	/* Immutable. The networking tier used for configuring this address. If this field is not
	specified, it is assumed to be PREMIUM.
	This argument should not be used when configuring Internal addresses, because [network tier cannot be set for internal traffic; it's always Premium](https://cloud.google.com/network-tiers/docs/overview). Possible values: ["PREMIUM", "STANDARD"]. */
	// +optional
	NetworkTier *string `json:"networkTier,omitempty"`

	/* Immutable. The prefix length if the resource represents an IP range. */
	// +optional
	PrefixLength *int `json:"prefixLength,omitempty"`

	/* Immutable. The purpose of this resource, which can be one of the following values.

	* GCE_ENDPOINT for addresses that are used by VM instances, alias IP
	ranges, load balancers, and similar resources.

	* SHARED_LOADBALANCER_VIP for an address that can be used by multiple
	internal load balancers.

	* VPC_PEERING for addresses that are reserved for VPC peer networks.

	* IPSEC_INTERCONNECT for addresses created from a private IP range that
	are reserved for a VLAN attachment in an HA VPN over Cloud Interconnect
	configuration. These addresses are regional resources.

	* PRIVATE_SERVICE_CONNECT for a private network address that is used to
	configure Private Service Connect. Only global internal addresses can use
	this purpose.


	This should only be set when using an Internal address. */
	// +optional
	Purpose *string `json:"purpose,omitempty"`

	/* Immutable. Optional. The name of the resource. Used for creation and acquisition. When unset, the value of `metadata.name` is used as the default. */
	// +optional
	ResourceID *string `json:"resourceID,omitempty"`

	/* The subnetwork in which to reserve the address. If an IP address is
	specified, it must be within the subnetwork's IP range.  This field
	can only be used with INTERNAL type with GCE_ENDPOINT/DNS_RESOLVER
	purposes. */
	// +optional
	SubnetworkRef *v1alpha1.ResourceRef `json:"subnetworkRef,omitempty"`
}

type ComputeAddressStatus struct {
	/* Conditions represent the latest available observations of the
	   ComputeAddress's current state. */
	Conditions []v1alpha1.Condition `json:"conditions,omitempty"`
	/* Creation timestamp in RFC3339 text format. */
	// +optional
	CreationTimestamp *string `json:"creationTimestamp,omitempty"`

	/* The fingerprint used for optimistic locking of this resource.  Used
	internally during updates. */
	// +optional
	LabelFingerprint *string `json:"labelFingerprint,omitempty"`

	/* ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource. */
	// +optional
	ObservedGeneration *int `json:"observedGeneration,omitempty"`

	/* The observed state of the underlying GCP resource. */
	// +optional
	ObservedState *AddressObservedStateStatus `json:"observedState,omitempty"`

	// +optional
	SelfLink *string `json:"selfLink,omitempty"`

	/* The URLs of the resources that are using this address. */
	// +optional
	Users []string `json:"users,omitempty"`
}

type ComputeBackendBucket struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ComputeBackendBucketSpec   `json:"spec,omitempty"`
	Status ComputeBackendBucketStatus `json:"status,omitempty"`
}

type ComputeBackendBucketList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ComputeBackendBucket `json:"items"`
}

type ComputeBackendBucketSpec struct {
	/* Reference to the bucket. */
	BucketRef v1alpha1.ResourceRef `json:"bucketRef"`

	/* Cloud CDN configuration for this Backend Bucket. */
	// +optional
	CdnPolicy *BackendbucketCdnPolicy `json:"cdnPolicy,omitempty"`

	/* Compress text responses using Brotli or gzip compression, based on the client's Accept-Encoding header. Possible values: ["AUTOMATIC", "DISABLED"]. */
	// +optional
	CompressionMode *string `json:"compressionMode,omitempty"`

	/* Headers that the HTTP/S load balancer should add to proxied responses. */
	// +optional
	CustomResponseHeaders []string `json:"customResponseHeaders,omitempty"`

	/* An optional textual description of the resource; provided by the
	client when the resource is created. */
	// +optional
	Description *string `json:"description,omitempty"`

	/* The security policy associated with this backend bucket. */
	// +optional
	EdgeSecurityPolicy *string `json:"edgeSecurityPolicy,omitempty"`

	/* If true, enable Cloud CDN for this BackendBucket. */
	// +optional
	EnableCdn *bool `json:"enableCdn,omitempty"`

	/* Immutable. Optional. The name of the resource. Used for creation and acquisition. When unset, the value of `metadata.name` is used as the default. */
	// +optional
	ResourceID *string `json:"resourceID,omitempty"`
}

type ComputeBackendBucketStatus struct {
	/* Conditions represent the latest available observations of the
	   ComputeBackendBucket's current state. */
	Conditions []v1alpha1.Condition `json:"conditions,omitempty"`
	/* Creation timestamp in RFC3339 text format. */
	// +optional
	CreationTimestamp *string `json:"creationTimestamp,omitempty"`

	/* ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource. */
	// +optional
	ObservedGeneration *int `json:"observedGeneration,omitempty"`

	// +optional
	SelfLink *string `json:"selfLink,omitempty"`
}

type ComputeBackendService struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ComputeBackendServiceSpec   `json:"spec,omitempty"`
	Status ComputeBackendServiceStatus `json:"status,omitempty"`
}

type ComputeBackendServiceList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ComputeBackendService `json:"items"`
}

type ComputeBackendServiceSpec struct {
	/* Lifetime of cookies in seconds if session_affinity is
	GENERATED_COOKIE. If set to 0, the cookie is non-persistent and lasts
	only until the end of the browser session (or equivalent). The
	maximum allowed value for TTL is one day.

	When the load balancing scheme is INTERNAL, this field is not used. */
	// +optional
	AffinityCookieTtlSec *int `json:"affinityCookieTtlSec,omitempty"`

	/* The set of backends that serve this BackendService. */
	// +optional
	Backend []BackendserviceBackend `json:"backend,omitempty"`

	/* Cloud CDN configuration for this BackendService. */
	// +optional
	CdnPolicy *BackendserviceCdnPolicy `json:"cdnPolicy,omitempty"`

	/* Settings controlling the volume of connections to a backend service. This field
	is applicable only when the load_balancing_scheme is set to INTERNAL_SELF_MANAGED. */
	// +optional
	CircuitBreakers *BackendserviceCircuitBreakers `json:"circuitBreakers,omitempty"`

	/* Compress text responses using Brotli or gzip compression, based on the client's Accept-Encoding header. Possible values: ["AUTOMATIC", "DISABLED"]. */
	// +optional
	CompressionMode *string `json:"compressionMode,omitempty"`

	/* Time for which instance will be drained (not accept new
	connections, but still work to finish started). */
	// +optional
	ConnectionDrainingTimeoutSec *int `json:"connectionDrainingTimeoutSec,omitempty"`

	/* Connection Tracking configuration for this BackendService.
	This is available only for Layer 4 Internal Load Balancing and
	Network Load Balancing. */
	// +optional
	ConnectionTrackingPolicy *BackendserviceConnectionTrackingPolicy `json:"connectionTrackingPolicy,omitempty"`

	/* Consistent Hash-based load balancing can be used to provide soft session
	affinity based on HTTP headers, cookies or other properties. This load balancing
	policy is applicable only for HTTP connections. The affinity to a particular
	destination host will be lost when one or more hosts are added/removed from the
	destination service. This field specifies parameters that control consistent
	hashing. This field only applies if the load_balancing_scheme is set to
	INTERNAL_SELF_MANAGED. This field is only applicable when locality_lb_policy is
	set to MAGLEV or RING_HASH. */
	// +optional
	ConsistentHash *BackendserviceConsistentHash `json:"consistentHash,omitempty"`

	/* Headers that the HTTP/S load balancer should add to proxied
	requests. */
	// +optional
	CustomRequestHeaders []string `json:"customRequestHeaders,omitempty"`

	/* Headers that the HTTP/S load balancer should add to proxied
	responses. */
	// +optional
	CustomResponseHeaders []string `json:"customResponseHeaders,omitempty"`

	/* An optional description of this resource. */
	// +optional
	Description *string `json:"description,omitempty"`

	/* The resource URL for the edge security policy associated with this
	backend service. */
	// +optional
	EdgeSecurityPolicyRef *v1alpha1.ResourceRef `json:"edgeSecurityPolicyRef,omitempty"`

	/* If true, enable Cloud CDN for this BackendService. */
	// +optional
	EnableCdn *bool `json:"enableCdn,omitempty"`

	/* Policy for failovers. */
	// +optional
	FailoverPolicy *BackendserviceFailoverPolicy `json:"failoverPolicy,omitempty"`

	// +optional
	HealthChecks []BackendserviceHealthChecks `json:"healthChecks,omitempty"`

	/* Settings for enabling Cloud Identity Aware Proxy. */
	// +optional
	Iap *BackendserviceIap `json:"iap,omitempty"`

	/* Immutable. Indicates whether the backend service will be used with internal or
	external load balancing. A backend service created for one type of
	load balancing cannot be used with the other. For more information, refer to
	[Choosing a load balancer](https://cloud.google.com/load-balancing/docs/backend-service). Default value: "EXTERNAL" Possible values: ["EXTERNAL", "INTERNAL_SELF_MANAGED", "INTERNAL_MANAGED", "EXTERNAL_MANAGED"]. */
	// +optional
	LoadBalancingScheme *string `json:"loadBalancingScheme,omitempty"`

	/* A list of locality load balancing policies to be used in order of
	preference. Either the policy or the customPolicy field should be set.
	Overrides any value set in the localityLbPolicy field.

	localityLbPolicies is only supported when the BackendService is referenced
	by a URL Map that is referenced by a target gRPC proxy that has the
	validateForProxyless field set to true. */
	// +optional
	LocalityLbPolicies []BackendserviceLocalityLbPolicies `json:"localityLbPolicies,omitempty"`

	/* The load balancing algorithm used within the scope of the locality.
	The possible values are:

	* 'ROUND_ROBIN': This is a simple policy in which each healthy backend
	is selected in round robin order.

	* 'LEAST_REQUEST': An O(1) algorithm which selects two random healthy
	hosts and picks the host which has fewer active requests.

	* 'RING_HASH': The ring/modulo hash load balancer implements consistent
	hashing to backends. The algorithm has the property that the
	addition/removal of a host from a set of N hosts only affects
	1/N of the requests.

	* 'RANDOM': The load balancer selects a random healthy host.

	* 'ORIGINAL_DESTINATION': Backend host is selected based on the client
	connection metadata, i.e., connections are opened
	to the same address as the destination address of
	the incoming connection before the connection
	was redirected to the load balancer.

	* 'MAGLEV': used as a drop in replacement for the ring hash load balancer.
	Maglev is not as stable as ring hash but has faster table lookup
	build times and host selection times. For more information about
	Maglev, refer to https://ai.google/research/pubs/pub44824

	* 'WEIGHTED_MAGLEV': Per-instance weighted Load Balancing via health check
	reported weights. If set, the Backend Service must
	configure a non legacy HTTP-based Health Check, and
	health check replies are expected to contain
	non-standard HTTP response header field
	X-Load-Balancing-Endpoint-Weight to specify the
	per-instance weights. If set, Load Balancing is weight
	based on the per-instance weights reported in the last
	processed health check replies, as long as every
	instance either reported a valid weight or had
	UNAVAILABLE_WEIGHT. Otherwise, Load Balancing remains
	equal-weight.


	This field is applicable to either:

	* A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
	and loadBalancingScheme set to INTERNAL_MANAGED.
	* A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
	* A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
	Load Balancing). Only MAGLEV and WEIGHTED_MAGLEV values are possible for External
	Network Load Balancing. The default is MAGLEV.


	If session_affinity is not NONE, and this field is not set to MAGLEV, WEIGHTED_MAGLEV,
	or RING_HASH, session affinity settings will not take effect.

	Only ROUND_ROBIN and RING_HASH are supported when the backend service is referenced
	by a URL map that is bound to target gRPC proxy that has validate_for_proxyless
	field set to true. Possible values: ["ROUND_ROBIN", "LEAST_REQUEST", "RING_HASH", "RANDOM", "ORIGINAL_DESTINATION", "MAGLEV", "WEIGHTED_MAGLEV"]. */
	// +optional
	LocalityLbPolicy *string `json:"localityLbPolicy,omitempty"`

	/* Location represents the geographical location of the ComputeBackendService. Specify a region name or "global" for global resources. Reference: GCP definition of regions/zones (https://cloud.google.com/compute/docs/regions-zones/) */
	Location string `json:"location"`

	/* This field denotes the logging options for the load balancer traffic served by this backend service.
	If logging is enabled, logs will be exported to Stackdriver. */
	// +optional
	LogConfig *BackendserviceLogConfig `json:"logConfig,omitempty"`

	/* The network to which this backend service belongs.  This field can
	only be specified when the load balancing scheme is set to
	INTERNAL. */
	// +optional
	NetworkRef *v1alpha1.ResourceRef `json:"networkRef,omitempty"`

	/* Settings controlling eviction of unhealthy hosts from the load balancing pool.
	This field is applicable only when the load_balancing_scheme is set
	to INTERNAL_SELF_MANAGED. */
	// +optional
	OutlierDetection *BackendserviceOutlierDetection `json:"outlierDetection,omitempty"`

	/* Name of backend port. The same name should appear in the instance
	groups referenced by this service. Required when the load balancing
	scheme is EXTERNAL. */
	// +optional
	PortName *string `json:"portName,omitempty"`

	/* The protocol this BackendService uses to communicate with backends.
	The default is HTTP. **NOTE**: HTTP2 is only valid for beta HTTP/2 load balancer
	types and may result in errors if used with the GA API. **NOTE**: With protocol “UNSPECIFIED”,
	the backend service can be used by Layer 4 Internal Load Balancing or Network Load Balancing
	with TCP/UDP/L3_DEFAULT Forwarding Rule protocol. Possible values: ["HTTP", "HTTPS", "HTTP2", "TCP", "SSL", "GRPC", "UNSPECIFIED"]. */
	// +optional
	Protocol *string `json:"protocol,omitempty"`

	/* Immutable. Optional. The name of the resource. Used for creation and acquisition. When unset, the value of `metadata.name` is used as the default. */
	// +optional
	ResourceID *string `json:"resourceID,omitempty"`

	/* The security policy associated with this backend service. */
	// +optional
	SecurityPolicy *string `json:"securityPolicy,omitempty"`

	/* The security policy associated with this backend service. */
	// +optional
	SecurityPolicyRef *v1alpha1.ResourceRef `json:"securityPolicyRef,omitempty"`

	/* The security settings that apply to this backend service. This field is applicable to either
	a regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2, and
	load_balancing_scheme set to INTERNAL_MANAGED; or a global backend service with the
	load_balancing_scheme set to INTERNAL_SELF_MANAGED. */
	// +optional
	SecuritySettings *BackendserviceSecuritySettings `json:"securitySettings,omitempty"`

	/* Type of session affinity to use. The default is NONE. Session affinity is
	not applicable if the protocol is UDP. Possible values: ["NONE", "CLIENT_IP", "CLIENT_IP_PORT_PROTO", "CLIENT_IP_PROTO", "GENERATED_COOKIE", "HEADER_FIELD", "HTTP_COOKIE"]. */
	// +optional
	SessionAffinity *string `json:"sessionAffinity,omitempty"`

	/* Subsetting configuration for this BackendService. Currently this is applicable only for Internal TCP/UDP load balancing and Internal HTTP(S) load balancing. */
	// +optional
	Subsetting *BackendserviceSubsetting `json:"subsetting,omitempty"`

	/* How many seconds to wait for the backend before considering it a
	failed request. Default is 30 seconds. Valid range is [1, 86400]. */
	// +optional
	TimeoutSec *int `json:"timeoutSec,omitempty"`
}

type ComputeBackendServiceStatus struct {
	/* Conditions represent the latest available observations of the
	   ComputeBackendService's current state. */
	Conditions []v1alpha1.Condition `json:"conditions,omitempty"`
	/* Creation timestamp in RFC3339 text format. */
	// +optional
	CreationTimestamp *string `json:"creationTimestamp,omitempty"`

	/* Fingerprint of this resource. A hash of the contents stored in this
	object. This field is used in optimistic locking. */
	// +optional
	Fingerprint *string `json:"fingerprint,omitempty"`

	/* The unique identifier for the resource. This identifier is defined by the server. */
	// +optional
	GeneratedId *int `json:"generatedId,omitempty"`

	/* ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource. */
	// +optional
	ObservedGeneration *int `json:"observedGeneration,omitempty"`

	// +optional
	SelfLink *string `json:"selfLink,omitempty"`
}

type ComputeDisk struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ComputeDiskSpec   `json:"spec,omitempty"`
	Status ComputeDiskStatus `json:"status,omitempty"`
}

type ComputeDiskList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ComputeDisk `json:"items"`
}

type ComputeDiskSpec struct {
	/* Immutable. A nested object resource. */
	// +optional
	AsyncPrimaryDisk *DiskAsyncPrimaryDisk `json:"asyncPrimaryDisk,omitempty"`

	/* Immutable. An optional description of this resource. Provide this property when
	you create the resource. */
	// +optional
	Description *string `json:"description,omitempty"`

	/* Immutable. Encrypts the disk using a customer-supplied encryption key.

	After you encrypt a disk with a customer-supplied key, you must
	provide the same key if you use the disk later (e.g. to create a disk
	snapshot or an image, or to attach the disk to a virtual machine).

	Customer-supplied encryption keys do not protect access to metadata of
	the disk.

	If you do not provide an encryption key when creating the disk, then
	the disk will be encrypted using an automatically generated key and
	you do not need to provide a key to use the disk later. */
	// +optional
	DiskEncryptionKey *DiskDiskEncryptionKey `json:"diskEncryptionKey,omitempty"`

	/* Immutable. Whether this disk is using confidential compute mode.
	Note: Only supported on hyperdisk skus, disk_encryption_key is required when setting to true. */
	// +optional
	EnableConfidentialCompute *bool `json:"enableConfidentialCompute,omitempty"`

	/* Immutable. A list of features to enable on the guest operating system.
	Applicable only for bootable disks. */
	// +optional
	GuestOsFeatures []DiskGuestOsFeatures `json:"guestOsFeatures,omitempty"`

	/* The image from which to initialize this disk. */
	// +optional
	ImageRef *v1alpha1.ResourceRef `json:"imageRef,omitempty"`

	/* DEPRECATED. `interface` is deprecated. This field is no longer used and can be safely removed from your configurations; disk interfaces are automatically determined on attachment. Immutable. Specifies the disk interface to use for attaching this disk, which is either SCSI or NVME. The default is SCSI. */
	// +optional
	Interface *string `json:"interface,omitempty"`

	/* Immutable. Any applicable license URI. */
	// +optional
	Licenses []string `json:"licenses,omitempty"`

	/* Location represents the geographical location of the ComputeDisk. Specify a region name or a zone name. Reference: GCP definition of regions/zones (https://cloud.google.com/compute/docs/regions-zones/) */
	Location string `json:"location"`

	/* Immutable. Indicates whether or not the disk can be read/write attached to more than one instance. */
	// +optional
	MultiWriter *bool `json:"multiWriter,omitempty"`

	/* Immutable. Physical block size of the persistent disk, in bytes. If not present
	in a request, a default value is used. Currently supported sizes
	are 4096 and 16384, other sizes may be added in the future.
	If an unsupported value is requested, the error message will list
	the supported values for the caller's project. */
	// +optional
	PhysicalBlockSizeBytes *int `json:"physicalBlockSizeBytes,omitempty"`

	/* The project that this resource belongs to. */
	// +optional
	ProjectRef *v1alpha1.ResourceRef `json:"projectRef,omitempty"`

	/* Indicates how many IOPS must be provisioned for the disk.
	Note: Updating currently is only supported by hyperdisk skus without the need to delete and recreate the disk, hyperdisk
	allows for an update of IOPS every 4 hours. To update your hyperdisk more frequently, you'll need to manually delete and recreate it. */
	// +optional
	ProvisionedIops *int `json:"provisionedIops,omitempty"`

	/* Indicates how much Throughput must be provisioned for the disk.
	Note: Updating currently is only supported by hyperdisk skus without the need to delete and recreate the disk, hyperdisk
	allows for an update of Throughput every 4 hours. To update your hyperdisk more frequently, you'll need to manually delete and recreate it. */
	// +optional
	ProvisionedThroughput *int `json:"provisionedThroughput,omitempty"`

	/* Immutable. URLs of the zones where the disk should be replicated to. */
	// +optional
	ReplicaZones []string `json:"replicaZones,omitempty"`

	/* Immutable. Optional. The name of the resource. Used for creation and acquisition. When unset, the value of `metadata.name` is used as the default. */
	// +optional
	ResourceID *string `json:"resourceID,omitempty"`

	// +optional
	ResourcePolicies []v1alpha1.ResourceRef `json:"resourcePolicies,omitempty"`

	/* Size of the persistent disk, specified in GB. You can specify this
	field when creating a persistent disk using the 'image' or
	'snapshot' parameter, or specify it alone to create an empty
	persistent disk.

	If you specify this field along with 'image' or 'snapshot',
	the value must not be less than the size of the image
	or the size of the snapshot.

	Upsizing the disk is mutable, but downsizing the disk
	requires re-creating the resource. */
	// +optional
	Size *int `json:"size,omitempty"`

	/* The source snapshot used to create this disk. */
	// +optional
	SnapshotRef *v1alpha1.ResourceRef `json:"snapshotRef,omitempty"`

	/* The source disk used to create this disk. */
	// +optional
	SourceDiskRef *v1alpha1.ResourceRef `json:"sourceDiskRef,omitempty"`

	/* Immutable. The customer-supplied encryption key of the source image. Required if
	the source image is protected by a customer-supplied encryption key. */
	// +optional
	SourceImageEncryptionKey *DiskSourceImageEncryptionKey `json:"sourceImageEncryptionKey,omitempty"`

	/* Immutable. The customer-supplied encryption key of the source snapshot. Required
	if the source snapshot is protected by a customer-supplied encryption
	key. */
	// +optional
	SourceSnapshotEncryptionKey *DiskSourceSnapshotEncryptionKey `json:"sourceSnapshotEncryptionKey,omitempty"`

	/* Immutable. URL of the disk type resource describing which disk type to use to
	create the disk. Provide this when creating the disk. */
	// +optional
	Type *string `json:"type,omitempty"`
}

type ComputeDiskStatus struct {
	/* Conditions represent the latest available observations of the
	   ComputeDisk's current state. */
	Conditions []v1alpha1.Condition `json:"conditions,omitempty"`
	/* Creation timestamp in RFC3339 text format. */
	// +optional
	CreationTimestamp *string `json:"creationTimestamp,omitempty"`

	/* The fingerprint used for optimistic locking of this resource.  Used
	internally during updates. */
	// +optional
	LabelFingerprint *string `json:"labelFingerprint,omitempty"`

	/* Last attach timestamp in RFC3339 text format. */
	// +optional
	LastAttachTimestamp *string `json:"lastAttachTimestamp,omitempty"`

	/* Last detach timestamp in RFC3339 text format. */
	// +optional
	LastDetachTimestamp *string `json:"lastDetachTimestamp,omitempty"`

	/* ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource. */
	// +optional
	ObservedGeneration *int `json:"observedGeneration,omitempty"`

	// +optional
	SelfLink *string `json:"selfLink,omitempty"`

	/* The ID value of the disk used to create this image. This value may
	be used to determine whether the image was taken from the current
	or a previous instance of a given disk name. */
	// +optional
	SourceDiskId *string `json:"sourceDiskId,omitempty"`

	/* The ID value of the image used to create this disk. This value
	identifies the exact image that was used to create this persistent
	disk. For example, if you created the persistent disk from an image
	that was later deleted and recreated under the same name, the source
	image ID would identify the exact version of the image that was used. */
	// +optional
	SourceImageId *string `json:"sourceImageId,omitempty"`

	/* The unique ID of the snapshot used to create this disk. This value
	identifies the exact snapshot that was used to create this persistent
	disk. For example, if you created the persistent disk from a snapshot
	that was later deleted and recreated under the same name, the source
	snapshot ID would identify the exact version of the snapshot that was
	used. */
	// +optional
	SourceSnapshotId *string `json:"sourceSnapshotId,omitempty"`

	/* Links to the users of the disk (attached instances) in form:
	project/zones/zone/instances/instance. */
	// +optional
	Users []string `json:"users,omitempty"`
}

type ComputeExternalVPNGateway struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ComputeExternalVPNGatewaySpec   `json:"spec,omitempty"`
	Status ComputeExternalVPNGatewayStatus `json:"status,omitempty"`
}

type ComputeExternalVPNGatewayList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ComputeExternalVPNGateway `json:"items"`
}

type ComputeExternalVPNGatewaySpec struct {
	/* Immutable. An optional description of this resource. */
	// +optional
	Description *string `json:"description,omitempty"`

	/* Immutable. A list of interfaces on this external VPN gateway. */
	// +optional
	Interface []ExternalvpngatewayInterface `json:"interface,omitempty"`

	/* Immutable. Indicates the redundancy type of this external VPN gateway Possible values: ["FOUR_IPS_REDUNDANCY", "SINGLE_IP_INTERNALLY_REDUNDANT", "TWO_IPS_REDUNDANCY"]. */
	// +optional
	RedundancyType *string `json:"redundancyType,omitempty"`

	/* Immutable. Optional. The name of the resource. Used for creation and acquisition. When unset, the value of `metadata.name` is used as the default. */
	// +optional
	ResourceID *string `json:"resourceID,omitempty"`
}

type ComputeExternalVPNGatewayStatus struct {
	/* Conditions represent the latest available observations of the
	   ComputeExternalVPNGateway's current state. */
	Conditions []v1alpha1.Condition `json:"conditions,omitempty"`
	/* The fingerprint used for optimistic locking of this resource.  Used
	internally during updates. */
	// +optional
	LabelFingerprint *string `json:"labelFingerprint,omitempty"`

	/* ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource. */
	// +optional
	ObservedGeneration *int `json:"observedGeneration,omitempty"`

	// +optional
	SelfLink *string `json:"selfLink,omitempty"`
}

type ComputeFirewall struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ComputeFirewallSpec   `json:"spec,omitempty"`
	Status ComputeFirewallStatus `json:"status,omitempty"`
}

type ComputeFirewallList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ComputeFirewall `json:"items"`
}

type ComputeFirewallPolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ComputeFirewallPolicySpec   `json:"spec,omitempty"`
	Status ComputeFirewallPolicyStatus `json:"status,omitempty"`
}

type ComputeFirewallPolicyAssociation struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ComputeFirewallPolicyAssociationSpec   `json:"spec,omitempty"`
	Status ComputeFirewallPolicyAssociationStatus `json:"status,omitempty"`
}

type ComputeFirewallPolicyAssociationList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ComputeFirewallPolicyAssociation `json:"items"`
}

type ComputeFirewallPolicyAssociationSpec struct {
	/* Immutable. */
	AttachmentTargetRef v1alpha1.ResourceRef `json:"attachmentTargetRef"`

	/* Immutable. */
	FirewallPolicyRef v1alpha1.ResourceRef `json:"firewallPolicyRef"`

	/* Immutable. Optional. The name of the resource. Used for creation and acquisition. When unset, the value of `metadata.name` is used as the default. */
	// +optional
	ResourceID *string `json:"resourceID,omitempty"`
}

type ComputeFirewallPolicyAssociationStatus struct {
	/* Conditions represent the latest available observations of the
	   ComputeFirewallPolicyAssociation's current state. */
	Conditions []v1alpha1.Condition `json:"conditions,omitempty"`
	/* ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource. */
	// +optional
	ObservedGeneration *int `json:"observedGeneration,omitempty"`

	/* The short name of the firewall policy of the association. */
	// +optional
	ShortName *string `json:"shortName,omitempty"`
}

type ComputeFirewallPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ComputeFirewallPolicy `json:"items"`
}

type ComputeFirewallPolicyRule struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ComputeFirewallPolicyRuleSpec   `json:"spec,omitempty"`
	Status ComputeFirewallPolicyRuleStatus `json:"status,omitempty"`
}

type ComputeFirewallPolicyRuleList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ComputeFirewallPolicyRule `json:"items"`
}

type ComputeFirewallPolicyRuleSpec struct {
	/* The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next". */
	Action string `json:"action"`

	/* An optional description for this resource. */
	// +optional
	Description *string `json:"description,omitempty"`

	/* The direction in which this rule applies. Possible values: INGRESS, EGRESS */
	Direction string `json:"direction"`

	/* Denotes whether the firewall policy rule is disabled. When set to true, the firewall policy rule is not enforced and traffic behaves as if it did not exist. If this is unspecified, the firewall policy rule will be enabled. */
	// +optional
	Disabled *bool `json:"disabled,omitempty"`

	/* Denotes whether to enable logging for a particular rule. If logging is enabled, logs will be exported to the configured export destination in Stackdriver. Logs may be exported to BigQuery or Pub/Sub. Note: you cannot enable logging on "goto_next" rules. */
	// +optional
	EnableLogging *bool `json:"enableLogging,omitempty"`

	/* Immutable. */
	FirewallPolicyRef v1alpha1.ResourceRef `json:"firewallPolicyRef"`

	/* A match condition that incoming traffic is evaluated against. If it evaluates to true, the corresponding 'action' is enforced. */
	Match FirewallpolicyruleMatch `json:"match"`

	/* Immutable. An integer indicating the priority of a rule in the list. The priority must be a positive value between 0 and 2147483647. Rules are evaluated from highest to lowest priority where 0 is the highest priority and 2147483647 is the lowest prority. */
	Priority int `json:"priority"`

	// +optional
	TargetResources []v1alpha1.ResourceRef `json:"targetResources,omitempty"`

	// +optional
	TargetServiceAccounts []v1alpha1.ResourceRef `json:"targetServiceAccounts,omitempty"`
}

type ComputeFirewallPolicyRuleStatus struct {
	/* Conditions represent the latest available observations of the
	   ComputeFirewallPolicyRule's current state. */
	Conditions []v1alpha1.Condition `json:"conditions,omitempty"`
	/* Type of the resource. Always `compute#firewallPolicyRule` for firewall policy rules */
	// +optional
	Kind *string `json:"kind,omitempty"`

	/* ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource. */
	// +optional
	ObservedGeneration *int `json:"observedGeneration,omitempty"`

	/* Calculation of the complexity of a single firewall policy rule. */
	// +optional
	RuleTupleCount *int `json:"ruleTupleCount,omitempty"`
}

type ComputeFirewallPolicySpec struct {
	/* An optional description of this resource. Provide this property when you create the resource. */
	// +optional
	Description *string `json:"description,omitempty"`

	/* Immutable. The Folder that this resource belongs to. Only one of [folderRef, organizationRef] may be specified. */
	// +optional
	FolderRef *v1alpha1.ResourceRef `json:"folderRef,omitempty"`

	/* Immutable. The Organization that this resource belongs to. Only one of [folderRef, organizationRef] may be specified. */
	// +optional
	OrganizationRef *v1alpha1.ResourceRef `json:"organizationRef,omitempty"`

	/* Immutable. Optional. The service-generated name of the resource. Used for acquisition only. Leave unset to create a new resource. */
	// +optional
	ResourceID *string `json:"resourceID,omitempty"`

	/* Immutable. User-provided name of the Organization firewall policy. The name should be unique in the organization in which the firewall policy is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash. */
	ShortName string `json:"shortName"`
}

type ComputeFirewallPolicyStatus struct {
	/* Conditions represent the latest available observations of the
	   ComputeFirewallPolicy's current state. */
	Conditions []v1alpha1.Condition `json:"conditions,omitempty"`
	/* Creation timestamp in RFC3339 text format. */
	// +optional
	CreationTimestamp *string `json:"creationTimestamp,omitempty"`

	/* Fingerprint of the resource. This field is used internally during updates of this resource. */
	// +optional
	Fingerprint *string `json:"fingerprint,omitempty"`

	/* The unique identifier for the resource. This identifier is defined by the server. */
	// +optional
	Id *string `json:"id,omitempty"`

	/* ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource. */
	// +optional
	ObservedGeneration *int `json:"observedGeneration,omitempty"`

	/* Total count of all firewall policy rule tuples. A firewall policy can not exceed a set number of tuples. */
	// +optional
	RuleTupleCount *int `json:"ruleTupleCount,omitempty"`

	/* Server-defined URL for the resource. */
	// +optional
	SelfLink *string `json:"selfLink,omitempty"`

	/* Server-defined URL for this resource with the resource id. */
	// +optional
	SelfLinkWithId *string `json:"selfLinkWithId,omitempty"`
}

type ComputeFirewallSpec struct {
	/* The list of ALLOW rules specified by this firewall. Each rule
	specifies a protocol and port-range tuple that describes a permitted
	connection. */
	// +optional
	Allow []FirewallAllow `json:"allow,omitempty"`

	/* The list of DENY rules specified by this firewall. Each rule specifies
	a protocol and port-range tuple that describes a denied connection. */
	// +optional
	Deny []FirewallDeny `json:"deny,omitempty"`

	/* An optional description of this resource. Provide this property when
	you create the resource. */
	// +optional
	Description *string `json:"description,omitempty"`

	/* If destination ranges are specified, the firewall will apply only to
	traffic that has destination IP address in these ranges. These ranges
	must be expressed in CIDR format. IPv4 or IPv6 ranges are supported. */
	// +optional
	DestinationRanges []string `json:"destinationRanges,omitempty"`

	/* Immutable. Direction of traffic to which this firewall applies; default is
	INGRESS. Note: For INGRESS traffic, one of 'source_ranges',
	'source_tags' or 'source_service_accounts' is required. Possible values: ["INGRESS", "EGRESS"]. */
	// +optional
	Direction *string `json:"direction,omitempty"`

	/* Denotes whether the firewall rule is disabled, i.e not applied to the
	network it is associated with. When set to true, the firewall rule is
	not enforced and the network behaves as if it did not exist. If this
	is unspecified, the firewall rule will be enabled. */
	// +optional
	Disabled *bool `json:"disabled,omitempty"`

	/* DEPRECATED. Deprecated in favor of log_config. This field denotes whether to enable logging for a particular firewall rule. If logging is enabled, logs will be exported to Stackdriver. */
	// +optional
	EnableLogging *bool `json:"enableLogging,omitempty"`

	/* This field denotes the logging options for a particular firewall rule.
	If defined, logging is enabled, and logs will be exported to Cloud Logging. */
	// +optional
	LogConfig *FirewallLogConfig `json:"logConfig,omitempty"`

	/* The network to attach this firewall to. */
	NetworkRef v1alpha1.ResourceRef `json:"networkRef"`

	/* Priority for this rule. This is an integer between 0 and 65535, both
	inclusive. When not specified, the value assumed is 1000. Relative
	priorities determine precedence of conflicting rules. Lower value of
	priority implies higher precedence (eg, a rule with priority 0 has
	higher precedence than a rule with priority 1). DENY rules take
	precedence over ALLOW rules having equal priority. */
	// +optional
	Priority *int `json:"priority,omitempty"`

	/* Immutable. Optional. The name of the resource. Used for creation and acquisition. When unset, the value of `metadata.name` is used as the default. */
	// +optional
	ResourceID *string `json:"resourceID,omitempty"`

	/* If source ranges are specified, the firewall will apply only to
	traffic that has source IP address in these ranges. These ranges must
	be expressed in CIDR format. One or both of sourceRanges and
	sourceTags may be set. If both properties are set, the firewall will
	apply to traffic that has source IP address within sourceRanges OR the
	source IP that belongs to a tag listed in the sourceTags property. The
	connection does not need to match both properties for the firewall to
	apply. IPv4 or IPv6 ranges are supported. For INGRESS traffic, one of
	'source_ranges', 'source_tags' or 'source_service_accounts' is required. */
	// +optional
	SourceRanges []string `json:"sourceRanges,omitempty"`

	// +optional
	SourceServiceAccounts []v1alpha1.ResourceRef `json:"sourceServiceAccounts,omitempty"`

	/* If source tags are specified, the firewall will apply only to traffic
	with source IP that belongs to a tag listed in source tags. Source
	tags cannot be used to control traffic to an instance's external IP
	address. Because tags are associated with an instance, not an IP
	address. One or both of sourceRanges and sourceTags may be set. If
	both properties are set, the firewall will apply to traffic that has
	source IP address within sourceRanges OR the source IP that belongs to
	a tag listed in the sourceTags property. The connection does not need
	to match both properties for the firewall to apply. For INGRESS traffic,
	one of 'source_ranges', 'source_tags' or 'source_service_accounts' is required. */
	// +optional
	SourceTags []string `json:"sourceTags,omitempty"`

	// +optional
	TargetServiceAccounts []v1alpha1.ResourceRef `json:"targetServiceAccounts,omitempty"`

	/* A list of instance tags indicating sets of instances located in the
	network that may make network connections as specified in allowed[].
	If no targetTags are specified, the firewall rule applies to all
	instances on the specified network. */
	// +optional
	TargetTags []string `json:"targetTags,omitempty"`
}

type ComputeFirewallStatus struct {
	/* Conditions represent the latest available observations of the
	   ComputeFirewall's current state. */
	Conditions []v1alpha1.Condition `json:"conditions,omitempty"`
	/* Creation timestamp in RFC3339 text format. */
	// +optional
	CreationTimestamp *string `json:"creationTimestamp,omitempty"`

	/* ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource. */
	// +optional
	ObservedGeneration *int `json:"observedGeneration,omitempty"`

	// +optional
	SelfLink *string `json:"selfLink,omitempty"`
}