feat: Add new gcloud commands, API clients, and third-party libraries across various services.

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1/AnthosServiceMesh.yaml

@@ -0,0 +1,30 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1 AnthosServiceMesh export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  serviceAccount:
+    description: Immutable. workload ID = IAM Service account
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1/CELPolicy.yaml

@@ -0,0 +1,32 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1 CELPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  ruleBlocks:
+    description: List of rule blocks.
+    type: array
+    items:
+      $ref: RuleBlock.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1/From.yaml

@@ -0,0 +1,32 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1 From export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  principals:
+    description: List of requesting principal identifiers.
+    type: array
+    items:
+      type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1/Policy.yaml

@@ -0,0 +1,40 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1 Policy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  celPolicy:
+    description: CEL-based authorization policy schema
+    $ref: CELPolicy.yaml
+  displayName:
+    description: |-
+      An arbitrary user-provided name for policy. The display name should adhere
+      to the following format. * Must be 6 to 63 characters in length. * Can
+      only contain lowercase letters, numbers, and hyphens. * Must start with a
+      letter.
+    type: string
+  name:
+    description: Name of resource
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1/PolicyConfig.yaml

@@ -0,0 +1,34 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1 PolicyConfig export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- policy
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  policy:
+    description: |-
+      Full policy name. Example:
+      projects/{project}/locations/{location}/policies/{policy}
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1/Rule.yaml

@@ -0,0 +1,39 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1 Rule export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  displayName:
+    description: Display name of the rule
+    type: string
+  requestFrom:
+    description: Request origins this rule applies to.
+    $ref: From.yaml
+  requestTo:
+    description: Request destination this rule applies to.
+    $ref: To.yaml
+  when:
+    description: Custom condition for the request.
+    $ref: When.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1/RuleBlock.yaml

@@ -0,0 +1,39 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1 RuleBlock export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  action:
+    description: Action type of this policy.
+    type: string
+    enum:
+    - ACTION_UNSPECIFIED
+    - ALLOW
+    - DENY
+  rules:
+    description: Rules that must be evaluated for this policy action.
+    type: array
+    items:
+      $ref: Rule.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1/TargetAssociation.yaml

@@ -0,0 +1,60 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1 TargetAssociation export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  asmWorkload:
+    description: |-
+      Immutable. AnthosServiceMesh based workload. Authorization Toolkit does
+      not auto configure the authorization settings on the workload.
+    $ref: AnthosServiceMesh.yaml
+  displayName:
+    description: |-
+      An arbitrary user-provided name for TargetAssociation. The display name
+      should adhere to the following format. * Must be 6 to 63 characters in
+      length. * Can only contain lowercase letters, numbers, and hyphens. * Must
+      start with a letter.
+    type: string
+  enableAuthorizationAuditLog:
+    description: |-
+      Enable the generation of authorization audit logs for the target.
+    type: boolean
+  enableAuthorizationDebugLog:
+    description: |-
+      Enable the generation of authorization debug logs for the target.
+    type: string
+    enum:
+    - LOG_ALL
+    - LOG_DENY_AND_ERROR
+    - LOG_ERROR
+    - LOG_NONE
+  name:
+    description: Identifier. name of resource
+    type: string
+  policies:
+    description: List of policies with full policy name and its configuration
+    type: array
+    items:
+      $ref: PolicyConfig.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1/To.yaml

@@ -0,0 +1,47 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1 To export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  hosts:
+    description: List of hosts.
+    type: array
+    items:
+      type: string
+  methods:
+    description: List of HTTP request methods.
+    type: array
+    items:
+      type: string
+  paths:
+    description: List of request paths.
+    type: array
+    items:
+      type: string
+  ports:
+    description: List of host ports.
+    type: array
+    items:
+      type: integer

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1/When.yaml

@@ -0,0 +1,30 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1 When export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  expr:
+    description: CEL expression to be evaluated.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1alpha/AnthosServiceMesh.yaml

@@ -0,0 +1,30 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1alpha AnthosServiceMesh export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  serviceAccount:
+    description: Immutable. workload ID = IAM Service account
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1alpha/Binding.yaml

@@ -0,0 +1,46 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1alpha Binding export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- selectors
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  displayName:
+    description: |-
+      An arbitrary user-provided name for binding. The display name should
+      adhere to the following format. * Must be 6 to 63 characters in length. *
+      Can only contain lowercase letters, numbers, and hyphens. * Must start
+      with a letter.
+    type: string
+  name:
+    description: Name of resource
+    type: string
+  selectors:
+    description: |-
+      List of selectors. The service currently supports only one selector in the
+      input.
+    type: array
+    items:
+      $ref: Selector.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1alpha/CELPolicy.yaml

@@ -0,0 +1,32 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1alpha CELPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  ruleBlocks:
+    description: List of rule blocks.
+    type: array
+    items:
+      $ref: RuleBlock.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1alpha/From.yaml

@@ -0,0 +1,32 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1alpha From export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  principals:
+    description: List of requesting principal identifiers.
+    type: array
+    items:
+      type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1alpha/Policy.yaml

@@ -0,0 +1,40 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1alpha Policy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  celPolicy:
+    description: CEL-based authorization policy schema
+    $ref: CELPolicy.yaml
+  displayName:
+    description: |-
+      An arbitrary user-provided name for policy. The display name should adhere
+      to the following format. * Must be 6 to 63 characters in length. * Can
+      only contain lowercase letters, numbers, and hyphens. * Must start with a
+      letter.
+    type: string
+  name:
+    description: Name of resource
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1alpha/PolicyConfig.yaml

@@ -0,0 +1,34 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1alpha PolicyConfig export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- policy
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  policy:
+    description: |-
+      Full policy name. Example:
+      projects/{project}/locations/{location}/policies/{policy}
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1alpha/Rule.yaml

@@ -0,0 +1,39 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1alpha Rule export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  displayName:
+    description: Display name of the rule
+    type: string
+  requestFrom:
+    description: Request origins this rule applies to.
+    $ref: From.yaml
+  requestTo:
+    description: Request destination this rule applies to.
+    $ref: To.yaml
+  when:
+    description: Custom condition for the request.
+    $ref: When.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1alpha/RuleBlock.yaml

@@ -0,0 +1,39 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1alpha RuleBlock export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  action:
+    description: Action type of this policy.
+    type: string
+    enum:
+    - ACTION_UNSPECIFIED
+    - ALLOW
+    - DENY
+  rules:
+    description: Rules that must be evaluated for this policy action.
+    type: array
+    items:
+      $ref: Rule.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1alpha/Selector.yaml

@@ -0,0 +1,30 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1alpha Selector export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  tdTarget:
+    description: Immutable. Grouping for Traffic Director-based workloads.
+    $ref: TrafficDirectorTarget.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1alpha/TargetAssociation.yaml

@@ -0,0 +1,60 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1alpha TargetAssociation export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  asmWorkload:
+    description: |-
+      Immutable. AnthosServiceMesh based workload. Authorization Toolkit does
+      not auto configure the authorization settings on the workload.
+    $ref: AnthosServiceMesh.yaml
+  displayName:
+    description: |-
+      An arbitrary user-provided name for TargetAssociation. The display name
+      should adhere to the following format. * Must be 6 to 63 characters in
+      length. * Can only contain lowercase letters, numbers, and hyphens. * Must
+      start with a letter.
+    type: string
+  enableAuthorizationAuditLog:
+    description: |-
+      Enable the generation of authorization audit logs for the target.
+    type: boolean
+  enableAuthorizationDebugLog:
+    description: |-
+      Enable the generation of authorization debug logs for the target.
+    type: string
+    enum:
+    - LOG_ALL
+    - LOG_DENY_AND_ERROR
+    - LOG_ERROR
+    - LOG_NONE
+  name:
+    description: Identifier. name of resource
+    type: string
+  policies:
+    description: List of policies with full policy name and its configuration
+    type: array
+    items:
+      $ref: PolicyConfig.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1alpha/To.yaml

@@ -0,0 +1,47 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1alpha To export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  hosts:
+    description: List of hosts.
+    type: array
+    items:
+      type: string
+  methods:
+    description: List of HTTP request methods.
+    type: array
+    items:
+      type: string
+  paths:
+    description: List of request paths.
+    type: array
+    items:
+      type: string
+  ports:
+    description: List of host ports.
+    type: array
+    items:
+      type: integer

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1alpha/TrafficDirector.yaml

@@ -0,0 +1,30 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1alpha TrafficDirector export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  serviceAccount:
+    description: Immutable. workload ID = IAM Service account
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1alpha/TrafficDirectorTarget.yaml

@@ -0,0 +1,30 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1alpha TrafficDirectorTarget export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  iamServiceAccount:
+    description: Immutable. IAM service account of the workload.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/authztoolkit/v1alpha/When.yaml

@@ -0,0 +1,30 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: authztoolkit v1alpha When export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  expr:
+    description: CEL expression to be evaluated.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/certificatemanager/v1/AllowlistedCertificate.yaml

@@ -0,0 +1,32 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: certificatemanager v1 AllowlistedCertificate export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  pemCertificate:
+    description: |-
+      PEM certificate that is allowlisted. The certificate can be up to
+      5k bytes, and must be a parseable X.509 certificate.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/certificatemanager/v1/CertificateAuthorityConfig.yaml

@@ -0,0 +1,30 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: certificatemanager v1 CertificateAuthorityConfig export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  certificateAuthorityServiceConfig:
+    description: Defines a CertificateAuthorityServiceConfig.
+    $ref: CertificateAuthorityServiceConfig.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/certificatemanager/v1/CertificateAuthorityServiceConfig.yaml

@@ -0,0 +1,35 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: certificatemanager v1 CertificateAuthorityServiceConfig export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- caPool
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  caPool:
+    description: |-
+      A CA pool resource used to issue a certificate. The CA pool string has a
+      relative resource path following the form
+      "projects/{project}/locations/{location}/caPools/{ca_pool}".
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/certificatemanager/v1/CertificateIssuanceConfig.yaml

@@ -0,0 +1,69 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: certificatemanager v1 CertificateIssuanceConfig export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- certificateAuthorityConfig
+- keyAlgorithm
+- lifetime
+- rotationWindowPercentage
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  certificateAuthorityConfig:
+    description: |-
+      The CA that issues the workload certificate. It includes the CA address,
+      type, authentication to CA service, etc.
+    $ref: CertificateAuthorityConfig.yaml
+  description:
+    description: |-
+      One or more paragraphs of text description of a CertificateIssuanceConfig.
+    type: string
+  keyAlgorithm:
+    description: The key algorithm to use when generating the private key.
+    type: string
+    enum:
+    - ECDSA_P256
+    - ECDSA_P384
+    - KEY_ALGORITHM_UNSPECIFIED
+    - RSA_2048
+    - RSA_3072
+    - RSA_4096
+  labels:
+    description: Set of labels associated with a CertificateIssuanceConfig.
+    $ref: LabelsValue.yaml
+  lifetime:
+    description: Workload certificate lifetime requested.
+    type: string
+  name:
+    description: |-
+      A user-defined name of the certificate issuance config.
+      CertificateIssuanceConfig names must be unique globally and match pattern
+      `projects/*/locations/*/certificateIssuanceConfigs/*`.
+    type: string
+  rotationWindowPercentage:
+    description: |-
+      Specifies the percentage of elapsed time of the certificate lifetime to
+      wait before renewing the certificate. Must be a number between 1-99,
+      inclusive.
+    type: integer

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/certificatemanager/v1/IntermediateCA.yaml

@@ -0,0 +1,32 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: certificatemanager v1 IntermediateCA export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  pemCertificate:
+    description: |-
+      PEM intermediate certificate used for building up paths for validation.
+      Each certificate provided in PEM format may occupy up to 5kB.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/certificatemanager/v1/LabelsValue.yaml

@@ -0,0 +1,33 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: certificatemanager v1 LabelsValue export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties:
+  key:
+    description: Name of the additional property.
+    type: string
+  value:
+    description: A string attribute.
+    type: string
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/certificatemanager/v1/TrustAnchor.yaml

@@ -0,0 +1,32 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: certificatemanager v1 TrustAnchor export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  pemCertificate:
+    description: |-
+      PEM root certificate of the PKI used for validation. Each certificate
+      provided in PEM format may occupy up to 5kB.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/certificatemanager/v1/TrustConfig.yaml

@@ -0,0 +1,62 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: certificatemanager v1 TrustConfig export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  description:
+    description: One or more paragraphs of text description of a TrustConfig.
+    type: string
+  etag:
+    description: |-
+      This checksum is computed by the server based on the value of other
+      fields, and may be sent on update and delete requests to ensure the client
+      has an up-to-date value before proceeding.
+    type: string
+  labels:
+    description: Set of labels associated with a TrustConfig.
+    $ref: LabelsValue.yaml
+  name:
+    description: |-
+      A user-defined name of the trust config. TrustConfig names must be unique
+      globally and match pattern `projects/*/locations/*/trustConfigs/*`.
+    type: string
+  trustStores:
+    description: |-
+      Set of trust stores to perform validation against. This field is supported
+      when TrustConfig is configured with Load Balancers, currently not
+      supported for SPIFFE certificate validation. Only one TrustStore specified
+      is currently allowed.
+    type: array
+    items:
+      $ref: TrustStore.yaml
+  allowlistedCertificates:
+    description: |-
+      A certificate matching an allowlisted certificate is always considered
+      valid as long as the certificate is parseable, proof of private key
+      possession is established, and constraints on the certificate's SAN field
+      are met.
+    type: array
+    items:
+      $ref: AllowlistedCertificate.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/certificatemanager/v1/TrustStore.yaml

@@ -0,0 +1,42 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: certificatemanager v1 TrustStore export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  intermediateCas:
+    description: |-
+      Set of intermediate CA certificates used for the path building phase of
+      chain validation. The field is currently not supported if TrustConfig is
+      used for the workload certificate feature.
+    type: array
+    items:
+      $ref: IntermediateCA.yaml
+  trustAnchors:
+    description: |-
+      List of Trust Anchors to be used while performing validation against a
+      given TrustStore.
+    type: array
+    items:
+      $ref: TrustAnchor.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/clouddeploy/v1/AnnotationsValue.yaml

@@ -0,0 +1,33 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: clouddeploy v1 AnnotationsValue export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties:
+  key:
+    description: Name of the additional property.
+    type: string
+  value:
+    description: A string attribute.
+    type: string
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/clouddeploy/v1/DeliveryPipeline.yaml

@@ -0,0 +1,66 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: clouddeploy v1 DeliveryPipeline export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- name
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  annotations:
+    description: |-
+      User annotations. These attributes can only be set and used by the user,
+      and not by Cloud Deploy. See https://google.aip.dev/128#annotations for
+      more details such as format and size limitations.
+    $ref: AnnotationsValue.yaml
+  description:
+    description: |-
+      Description of the `DeliveryPipeline`. Max length is 255 characters.
+    type: string
+  etag:
+    description: |-
+      This checksum is computed by the server based on the value of other
+      fields, and may be sent on update and delete requests to ensure the client
+      has an up-to-date value before proceeding.
+    type: string
+  labels:
+    description: |-
+      Labels are attributes that can be set and used by both the user and by
+      Cloud Deploy. Labels must meet the following constraints: Each resource is
+      limited to 64 labels. Keys must conform to the regexp: a-zA-Z{0,62} Values
+      must conform to the regexp: [a-zA-Z0-9_-]{0,63} Both keys and values are
+      additionally constrained to be <= 128 bytes in size.
+    $ref: LabelsValue.yaml
+  name:
+    description: |-
+      Name of the `DeliveryPipeline`. Format is projects/{project}/
+      locations/{location}/deliveryPipelines/a-z{0,62}.
+    type: string
+  renderServiceAccount:
+    description: |-
+      Service account used to render a `Release`. If unset, the compute service
+      account will be used.
+    type: string
+  serialPipeline:
+    description: A SerialPipeline attribute.
+    $ref: SerialPipeline.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/clouddeploy/v1/GKECluster.yaml

@@ -0,0 +1,36 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: clouddeploy v1 GKECluster export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  cluster:
+    description: Name of the cluster.
+    type: string
+  location:
+    description: Location of the cluster.
+    type: string
+  project:
+    description: Project in which the cluster is located.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/clouddeploy/v1/LabelsValue.yaml

@@ -0,0 +1,33 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: clouddeploy v1 LabelsValue export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties:
+  key:
+    description: Name of the additional property.
+    type: string
+  value:
+    description: A string attribute.
+    type: string
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/clouddeploy/v1/SerialPipeline.yaml

@@ -0,0 +1,34 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: clouddeploy v1 SerialPipeline export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  stages:
+    description: |-
+      Each stage specifies configuration for a `Target`. The ordering of this
+      list defines the promotion flow.
+    type: array
+    items:
+      $ref: Stage.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/clouddeploy/v1/Stage.yaml

@@ -0,0 +1,39 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: clouddeploy v1 Stage export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  profiles:
+    description: |-
+      Profiles to use when rendering the manifest for this stage's `Target`.
+    type: array
+    items:
+      type: string
+  targetId:
+    description: |-
+      The target_id to which this stage points. Format is "targetName". The
+      parent of the `Target` is the `DeliveryPipeline` in which this stage
+      lives.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/clouddeploy/v1/Target.yaml

@@ -0,0 +1,68 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: clouddeploy v1 Target export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- name
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  annotations:
+    description: |-
+      User annotations. These attributes can only be set and used by the user,
+      and not by Cloud Deploy. See https://google.aip.dev/128#annotations for
+      more details such as format and size limitations.
+    $ref: AnnotationsValue.yaml
+  approvalRequired:
+    description: Whether or not the `Target` requires approval.
+    type: boolean
+  deployServiceAccount:
+    description: |-
+      Service account used to deploy a `Rollout`. If unset, the compute service
+      account will be used.
+    type: string
+  description:
+    description: Description of the `Target`. Max length is 255 characters.
+    type: string
+  etag:
+    description: |-
+      This checksum is computed by the server based on the value of other
+      fields, and may be sent on update and delete requests to ensure the client
+      has an up-to-date value before proceeding.
+    type: string
+  gkeCluster:
+    description: A GKECluster attribute.
+    $ref: GKECluster.yaml
+  labels:
+    description: |-
+      Labels are attributes that can be set and used by both the user and by
+      Cloud Deploy. Labels must meet the following constraints: Each resource is
+      limited to 64 labels. Keys must conform to the regexp: a-zA-Z{0,62} Values
+      must conform to the regexp: [a-zA-Z0-9_-]{0,63} Both keys and values are
+      additionally constrained to be <= 128 bytes in size.
+    $ref: LabelsValue.yaml
+  name:
+    description: |-
+      Name of the `Target`. Format is projects/{project}/locations/{location}/
+      deliveryPipelines/{deliveryPipeline}/targets/a-z{0,62}.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/clouddeploy/v1alpha1/AnnotationsValue.yaml

@@ -0,0 +1,33 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: clouddeploy v1alpha1 AnnotationsValue export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties:
+  key:
+    description: Name of the additional property.
+    type: string
+  value:
+    description: A string attribute.
+    type: string
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/clouddeploy/v1alpha1/DeliveryPipeline.yaml

@@ -0,0 +1,69 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: clouddeploy v1alpha1 DeliveryPipeline export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- name
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  annotations:
+    description: |-
+      User annotations. These attributes can only be set and used by the user,
+      and not by Cloud Deploy. See https://google.aip.dev/128#annotations for
+      more details such as format and size limitations.
+    $ref: AnnotationsValue.yaml
+  condition:
+    description: Information around the state of the Delivery Pipeline.
+    $ref: PipelineCondition.yaml
+  description:
+    description: |-
+      Description of the `DeliveryPipeline`. Max length is 255 characters.
+    type: string
+  etag:
+    description: |-
+      This checksum is computed by the server based on the value of other
+      fields, and may be sent on update and delete requests to ensure the client
+      has an up-to-date value before proceeding.
+    type: string
+  labels:
+    description: |-
+      Labels are attributes that can be set and used by both the user and by
+      Cloud Deploy. Labels must meet the following constraints: Each resource is
+      limited to 64 labels. Keys must conform to the regexp: a-zA-Z{0,62} Values
+      must conform to the regexp: [a-zA-Z0-9_-]{0,63} Both keys and values are
+      additionally constrained to be <= 128 bytes in size.
+    $ref: LabelsValue.yaml
+  name:
+    description: |-
+      Name of the `DeliveryPipeline`. Format is projects/{project}/
+      locations/{location}/deliveryPipelines/a-z{0,62}.
+    type: string
+  renderServiceAccount:
+    description: |-
+      Service account used to render a `Release`. If unset, the compute service
+      account will be used.
+    type: string
+  serialPipeline:
+    description: A SerialPipeline attribute.
+    $ref: SerialPipeline.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/clouddeploy/v1alpha1/GKECluster.yaml

@@ -0,0 +1,36 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: clouddeploy v1alpha1 GKECluster export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  cluster:
+    description: Name of the cluster.
+    type: string
+  location:
+    description: Location of the cluster.
+    type: string
+  project:
+    description: Project in which the cluster is located.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/clouddeploy/v1alpha1/LabelsValue.yaml

@@ -0,0 +1,33 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: clouddeploy v1alpha1 LabelsValue export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties:
+  key:
+    description: Name of the additional property.
+    type: string
+  value:
+    description: A string attribute.
+    type: string
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/clouddeploy/v1alpha1/MissingTargetsCondition.yaml

@@ -0,0 +1,41 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: clouddeploy v1alpha1 MissingTargetsCondition export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  changeTime:
+    description: Last time the condition was updated.
+    type: string
+  missingTargets:
+    description: |-
+      The list of Target names that are missing. For example, pr
+      ojects/{projectName}/locations/{locationName}/deliveryPipelines/{pipelin
+      eName}/targets/{targetName}.
+    type: array
+    items:
+      type: string
+  ready:
+    description: True if there aren't any missing Targets.
+    type: boolean

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/clouddeploy/v1alpha1/PipelineCondition.yaml

@@ -0,0 +1,33 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: clouddeploy v1alpha1 PipelineCondition export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  missingTargetsCondition:
+    description: Details around missing targets.
+    $ref: MissingTargetsCondition.yaml
+  pipelineReadyCondition:
+    description: Details around the Pipeline's overall status.
+    $ref: PipelineReadyCondition.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/clouddeploy/v1alpha1/PipelineReadyCondition.yaml

@@ -0,0 +1,33 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: clouddeploy v1alpha1 PipelineReadyCondition export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  changeTime:
+    description: Last time the condition was updated.
+    type: string
+  ready:
+    description: True if the Pipeline is in a valid state.
+    type: boolean

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/clouddeploy/v1alpha1/SerialPipeline.yaml

@@ -0,0 +1,34 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: clouddeploy v1alpha1 SerialPipeline export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  stages:
+    description: |-
+      Each stage specifies configuration for a `Target`. The ordering of this
+      list defines the promotion flow.
+    type: array
+    items:
+      $ref: Stage.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/clouddeploy/v1alpha1/Stage.yaml

@@ -0,0 +1,39 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: clouddeploy v1alpha1 Stage export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  profiles:
+    description: |-
+      Profiles to use when rendering the manifest for this stage's `Target`.
+    type: array
+    items:
+      type: string
+  targetId:
+    description: |-
+      The target_id to which this stage points. Format is "targetName". The
+      parent of the `Target` is the `DeliveryPipeline` in which this stage
+      lives.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/clouddeploy/v1alpha1/Target.yaml

@@ -0,0 +1,68 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: clouddeploy v1alpha1 Target export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- name
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  annotations:
+    description: |-
+      User annotations. These attributes can only be set and used by the user,
+      and not by Cloud Deploy. See https://google.aip.dev/128#annotations for
+      more details such as format and size limitations.
+    $ref: AnnotationsValue.yaml
+  approvalRequired:
+    description: Whether or not the `Target` requires approval.
+    type: boolean
+  deployServiceAccount:
+    description: |-
+      Service account used to deploy a `Rollout`. If unset, the compute service
+      account will be used.
+    type: string
+  description:
+    description: Description of the `Target`. Max length is 255 characters.
+    type: string
+  etag:
+    description: |-
+      This checksum is computed by the server based on the value of other
+      fields, and may be sent on update and delete requests to ensure the client
+      has an up-to-date value before proceeding.
+    type: string
+  gkeCluster:
+    description: A GKECluster attribute.
+    $ref: GKECluster.yaml
+  labels:
+    description: |-
+      Labels are attributes that can be set and used by both the user and by
+      Cloud Deploy. Labels must meet the following constraints: Each resource is
+      limited to 64 labels. Keys must conform to the regexp: a-zA-Z{0,62} Values
+      must conform to the regexp: [a-zA-Z0-9_-]{0,63} Both keys and values are
+      additionally constrained to be <= 128 bytes in size.
+    $ref: LabelsValue.yaml
+  name:
+    description: |-
+      Name of the `Target`. Format is projects/{project}/locations/{location}/
+      deliveryPipelines/{deliveryPipeline}/targets/a-z{0,62}.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/AWSV4Signature.yaml

@@ -0,0 +1,49 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha AWSV4Signature export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  accessKey:
+    description: |-
+      The access key used for s3 bucket authentication. Required for updating or
+      creating a backend that uses AWS v4 signature authentication, but will not
+      be returned as part of the configuration when queried with a REST API GET
+      request. @InputOnly
+    type: string
+  accessKeyId:
+    description: |-
+      The identifier of an access key used for s3 bucket authentication.
+    type: string
+  accessKeyVersion:
+    description: |-
+      The optional version identifier for the access key. You can use this to
+      keep track of different iterations of your access key.
+    type: string
+  originRegion:
+    description: |-
+      The name of the cloud region of your origin. This is a free- form field
+      with the name of the region your cloud uses to host your origin. For
+      example, "us-east-1" for AWS or "us-ashburn-1" for OCI.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/AcceleratorConfig.yaml

@@ -0,0 +1,39 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha AcceleratorConfig export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  acceleratorCount:
+    description: |-
+      The number of the guest accelerator cards exposed to this instance.
+    type: integer
+  acceleratorType:
+    description: |-
+      Full or partial URL of the accelerator type resource to attach to this
+      instance. For example: projects/my-project/zones/us-
+      central1-c/acceleratorTypes/nvidia-tesla-p100 If you are creating an
+      instance template, specify only the accelerator name. See GPUs on Compute
+      Engine for a full list of accelerator types.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/AccessConfig.yaml

@@ -0,0 +1,96 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha AccessConfig export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  externalIpv6:
+    description: |-
+      [Output Only] The first IPv6 address of the external IPv6 range associated
+      with this instance, prefix length is stored in externalIpv6PrefixLength in
+      ipv6AccessConfig. The field is output only, an IPv6 address from a
+      subnetwork associated with the instance will be allocated dynamically.
+    type: string
+  externalIpv6PrefixLength:
+    description: '[Output Only] The prefix length of the external IPv6 range.'
+    type: integer
+  kind:
+    description: |-
+      [Output Only] Type of the resource. Always compute#accessConfig for access
+      configs.
+    type: string
+  name:
+    description: |-
+      The name of this access configuration. The default and recommended name is
+      External NAT, but you can use any arbitrary string, such as My external IP
+      or Network Access.
+    type: string
+  natIP:
+    description: |-
+      An external IP address associated with this instance. Specify an unused
+      static external IP address available to the project or leave this field
+      undefined to use an IP from a shared ephemeral IP address pool. If you
+      specify a static external IP address, it must live in the same region as
+      the zone of the instance.
+    type: string
+  networkTier:
+    description: |-
+      This signifies the networking tier used for configuring this access
+      configuration and can only take the following values: PREMIUM, STANDARD.
+      If an AccessConfig is specified without a valid external IP address, an
+      ephemeral IP will be created with this networkTier.  If an AccessConfig
+      with a valid external IP address is specified, it must match that of the
+      networkTier associated with the Address resource owning that IP.
+    type: string
+    enum:
+    - FIXED_STANDARD
+    - PREMIUM
+    - SELECT
+    - STANDARD
+    - STANDARD_OVERRIDES_FIXED_STANDARD
+  publicDnsName:
+    description: '[Output Only] The public DNS domain name for the instance.'
+    type: string
+  publicPtrDomainName:
+    description: |-
+      The DNS domain name for the public PTR record. You can set this field only
+      if the `setPublicPtr` field is enabled.
+    type: string
+  setPublicDns:
+    description: |-
+      Specifies whether a public DNS 'A' record should be created for the
+      external IP address of this access configuration.
+    type: boolean
+  setPublicPtr:
+    description: |-
+      Specifies whether a public DNS 'PTR' record should be created to map the
+      external IP address of the instance to a DNS domain name.
+    type: boolean
+  type:
+    description: |-
+      The type of configuration. The default and only option is ONE_TO_ONE_NAT.
+    type: string
+    enum:
+    - DIRECT_IPV6
+    - ONE_TO_ONE_NAT

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/AdvancedMachineFeatures.yaml

@@ -0,0 +1,68 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha AdvancedMachineFeatures export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  enableNestedVirtualization:
+    description: |-
+      Whether to enable nested virtualization or not (default is false).
+    type: boolean
+  threadsPerCore:
+    description: |-
+      The number of threads per physical core. To disable simultaneous
+      multithreading (SMT) set this to 1. If unset, the maximum number of
+      threads supported per core by the underlying processor is assumed.
+    type: integer
+  numaNodeCount:
+    description: |-
+      The number of virtual NUMA nodes.
+    type: integer
+  visibleCoreCount:
+    description: |-
+      The number of physical cores to expose to the instance's guest operating
+      system. The number of virtual CPUs visible to the instance's guest
+      operating system is this number of cores multiplied by the instance's
+      count of visible threads per physical core.
+    type: integer
+  enableUefiNetworking:
+    description: |-
+      Whether to enable UEFI networking during instance creation.
+    type: boolean
+  performanceMonitoringUnit:
+    description: |-
+      The set of performance measurement counters to enable for the instance.
+    type: string
+    enum:
+    - ARCHITECTURAL
+    - STANDARD
+    - ENHANCED
+  enableWatchdogTimer:
+    description: |-
+      Whether to enable watchdog timer device during instance creation.
+    type: boolean
+  turboMode:
+    description: |-
+      The turbo frequency of the instance.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/AliasIpRange.yaml

@@ -0,0 +1,41 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha AliasIpRange export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  ipCidrRange:
+    description: |-
+      The IP alias ranges to allocate for this interface. This IP CIDR range
+      must belong to the specified subnetwork and cannot contain IP addresses
+      reserved by system or used by other network interfaces. This range may be
+      a single IP address (such as 10.2.3.4), a netmask (such as /24) or a CIDR-
+      formatted string (such as 10.1.2.0/24).
+    type: string
+  subnetworkRangeName:
+    description: |-
+      The name of a subnetwork secondary IP range from which to allocate an IP
+      alias range. If not specified, the primary range of the subnetwork is
+      used.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/AttachedDisk.yaml

@@ -0,0 +1,166 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha AttachedDisk export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  autoDelete:
+    description: |-
+      Specifies whether the disk will be auto-deleted when the instance is
+      deleted (but not when the disk is detached from the instance).
+    type: boolean
+  boot:
+    description: |-
+      Indicates that this is a boot disk. The virtual machine will use the first
+      partition of the disk for its root filesystem.
+    type: boolean
+  deviceName:
+    description: |-
+      Specifies a unique device name of your choice that is reflected into the
+      /dev/disk/by-id/google-* tree of a Linux operating system running within
+      the instance. This name can be used to reference the device for mounting,
+      resizing, and so on, from within the instance. If not specified, the
+      server chooses a default device name to apply to this disk, in the form
+      persistent-disk-x, where x is a number assigned by Google Compute Engine.
+      This field is only applicable for persistent disks.
+    type: string
+  diskEncryptionKey:
+    description: |-
+      Encrypts or decrypts a disk using a customer-supplied encryption key.  If
+      you are creating a new disk, this field encrypts the new disk using an
+      encryption key that you provide. If you are attaching an existing disk
+      that is already encrypted, this field decrypts the disk using the
+      customer-supplied encryption key.  If you encrypt a disk using a customer-
+      supplied key, you must provide the same key again when you attempt to use
+      this resource at a later time. For example, you must provide the key when
+      you create a snapshot or an image from the disk or when you attach the
+      disk to a virtual machine instance.  If you do not provide an encryption
+      key, then the disk will be encrypted using an automatically generated key
+      and you do not need to provide a key to use the disk later.  Instance
+      templates do not store customer-supplied encryption keys, so you cannot
+      use your own keys to encrypt disks in a managed instance group.
+    $ref: CustomerEncryptionKey.yaml
+  diskSizeGb:
+    description: The size of the disk in GB.
+    type: integer
+  forceAttach:
+    description: |-
+      [Input Only] Whether to force attach the regional disk even if it's
+      currently attached to another instance. If you try to force attach a zonal
+      disk to an instance, you will receive an error.
+    type: boolean
+  guestOsFeatures:
+    description: |-
+      A list of features to enable on the guest operating system. Applicable
+      only for bootable images. Read  Enabling guest operating system features
+      to see a list of available options.
+    type: array
+    items:
+      $ref: GuestOsFeature.yaml
+  index:
+    description: |-
+      [Output Only] A zero-based index to this disk, where 0 is reserved for
+      the boot disk. If you have many disks attached to an instance, each
+      disk would have a unique index number.
+    type: integer
+  initializeParams:
+    description: |-
+      [Input Only] Specifies the parameters for a new disk that will be
+      created alongside the new instance. Use initialization parameters to
+      create boot disks or local SSDs attached to the new instance.  This
+      property is mutually exclusive with the source property; you can only
+      define one or the other, but not both.
+    $ref: AttachedDiskInitializeParams.yaml
+  interface:
+    description: |-
+      Specifies the disk interface to use for attaching this disk, which is
+      either SCSI or NVME. The default is SCSI. Persistent disks must always
+      use SCSI and the request will fail if you attempt to attach a
+      persistent disk in any other format than SCSI. Local SSDs can use
+      either NVME or SCSI. For performance characteristics of SCSI over
+      NVMe, see Local SSD performance.
+    type: string
+    enum:
+    - NVDIMM
+    - NVME
+    - SCSI
+  kind:
+    description: |-
+      [Output Only] Type of the resource. Always compute#attachedDisk for
+      attached disks.
+    type: string
+  licenses:
+    description: '[Output Only] Any valid publicly visible licenses.'
+    type: array
+    items:
+      type: string
+  mode:
+    description: |-
+      The mode in which to attach this disk, either READ_WRITE or
+      READ_ONLY. If not specified, the default is to attach the disk in
+      READ_WRITE mode.
+    type: string
+    enum:
+    - READ_ONLY
+    - READ_WRITE
+  savedState:
+    description: |-
+      For LocalSSD disks on VM Instances in STOPPED or SUSPENDED state,
+      this field is set to PRESERVED if the LocalSSD data has been saved
+      to a persistent location by customer request. (see the
+      discard_local_ssd option on Stop/Suspend). Read-only in the api.
+    type: string
+    enum:
+    - DISK_SAVED_STATE_UNSPECIFIED
+    - PRESERVED
+  shieldedInstanceInitialState:
+    description: '[Output Only] shielded vm initial state stored on disk'
+    $ref: InitialStateConfig.yaml
+  source:
+    description: |-
+      Specifies a valid partial or full URL to an existing Persistent
+      Disk resource. When creating a new instance, one of
+      initializeParams.sourceImage or initializeParams.sourceSnapshot or
+      disks.source is required except for local SSD.  If desired, you
+      can also attach existing non-root persistent disks using this
+      property. This field is only applicable for persistent disks.
+      Note that for InstanceTemplate, specify the disk name, not the URL
+      for the disk.
+    type: string
+  type:
+    description: |-
+      Specifies the type of the disk, either SCRATCH or PERSISTENT. If
+      not specified, the default is PERSISTENT.
+    type: string
+    enum:
+    - PERSISTENT
+    - SCRATCH
+  userLicenses:
+    description: |-
+      [Output Only] A list of user provided licenses. It represents a
+      list of URLs to the license resource. Unlike regular licenses,
+      user provided licenses can be modified after the disk is created.
+    type: array
+    items:
+      type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/AttachedDiskInitializeParams.yaml

@@ -0,0 +1,135 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha AttachedDiskInitializeParams export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  description:
+    description: |-
+      An optional description. Provide this property when creating the disk.
+    type: string
+  diskName:
+    description: |-
+      Specifies the disk name. If not specified, the default is to use the name
+      of the instance. If a disk with the same name already exists in the given
+      region, the existing disk is attached to the new instance and the new disk
+      is not created.
+    type: string
+  diskSizeGb:
+    description: |-
+      Specifies the size of the disk in base-2 GB. The size must be at least 10
+      GB. If you specify a sourceImage, which is required for boot disks, the
+      default size is the size of the sourceImage. If you do not specify a
+      sourceImage, the default disk size is 500 GB.
+    type: integer
+  diskType:
+    description: |-
+      Specifies the disk type to use to create the instance. If not specified,
+      the default is pd-standard, specified using the full URL. For
+    type: string
+  guestOsFeatures:
+    description: |-
+      A list of features to enable on the guest operating system. Applicable
+      only for bootable images. Read  Enabling guest operating system features
+      to see a list of available options.  Guest OS features are applied by
+      merging initializeParams.guestOsFeatures and disks.guestOsFeatures
+    type: array
+    items:
+      $ref: GuestOsFeature.yaml
+  labels:
+    description: |-
+      Labels to apply to this disk. These can be later modified by the
+      disks.setLabels method. This field is only applicable for persistent
+      disks.
+    $ref: LabelsValue.yaml
+  multiWriter:
+    description: |-
+      Indicates whether or not the disk can be read/write attached to more
+      than one instance.
+    type: boolean
+  onUpdateAction:
+    description: |-
+      Specifies which action to take on instance update with this disk.
+      Default is to use the existing disk.
+    type: string
+    enum:
+    - RECREATE_DISK
+    - RECREATE_DISK_IF_SOURCE_CHANGED
+    - USE_EXISTING_DISK
+  provisionedIops:
+    description: Indicates how many IOPS must be provisioned for the disk.
+    type: integer
+  replicaZones:
+    description: |-
+      URLs of the zones where the disk should be replicated to. Only
+      applicable for regional resources.
+    type: array
+    items:
+      type: string
+  resourcePolicies:
+    description: |-
+      Resource policies applied to this disk for automatic snapshot
+      creations. Specified using the full or partial URL. For instance
+      template, specify only the resource policy name.
+    type: array
+    items:
+      type: string
+  sourceImage:
+    description: |-
+      The source image to create this disk. When creating a new
+      instance, one of initializeParams.sourceImage or
+      initializeParams.sourceSnapshot or disks.source is required
+      except for local SSD.  To create a disk with one of the public
+      operating system images, specify the image by its family name.
+      For example, specify family/debian-9 to use the latest Debian
+      9 image: projects/debian- cloud/global/images/family/debian-9
+      Alternatively, use a specific version of a public operating
+      system image: projects/debian-
+      cloud/global/images/debian-9-stretch-vYYYYMMDD   To create a
+      disk with a custom image that you created, specify the image
+      name in the following
+    type: string
+  sourceImageEncryptionKey:
+    description: |-
+      The customer-supplied encryption key of the source image.
+      Required if the source image is protected by a customer-
+      supplied encryption key.  Instance templates do not store
+      customer- supplied encryption keys, so you cannot create disks
+      for instances in a managed instance group if the source images
+      are encrypted with your own keys.
+    $ref: CustomerEncryptionKey.yaml
+  sourceSnapshot:
+    description: |-
+      The source snapshot to create this disk. When creating a new
+      instance, one of initializeParams.sourceSnapshot or
+      initializeParams.sourceImage or disks.source is required
+      except for local SSD.  To create a disk with a snapshot that
+      you created, specify the snapshot name in the following
+      format: global/snapshots/my-backup If the source snapshot is
+      deleted later, this field will not be set.
+    type: string
+  sourceSnapshotEncryptionKey:
+    description: |-
+      The customer-supplied encryption key of the source snapshot.
+    $ref: CustomerEncryptionKey.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/AuthenticationPolicy.yaml

@@ -0,0 +1,68 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha AuthenticationPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  origins:
+    description: |-
+      List of authentication methods that can be used for origin authentication.
+      Similar to peers, these will be evaluated in order the first valid one
+      will be used to set origin identity. If none of these methods pass, the
+      request will be rejected with authentication failed error (401). Leave the
+      list empty if origin authentication is not required.
+    type: array
+    items:
+      $ref: OriginAuthenticationMethod.yaml
+  peers:
+    description: |-
+      List of authentication methods that can be used for peer
+      authentication. They will be evaluated in order the first valid one
+      will be used to set peer identity. If none of these methods pass, the
+      request will be rejected with authentication failed error (401). Leave
+      the list empty if peer authentication is not required.
+    type: array
+    items:
+      $ref: PeerAuthenticationMethod.yaml
+  principalBinding:
+    description: |-
+      Define whether peer or origin identity should be used for
+      principal. Default value is USE_PEER. If peer (or origin) identity
+      is not available, either because peer/origin authentication is not
+      defined, or failed, principal will be left unset. In other words,
+      binding rule does not affect the decision to accept or reject
+      request. This field can be set to one of the following: USE_PEER:
+      Principal will be set to the identity from peer authentication.
+      USE_ORIGIN: Principal will be set to the identity from origin
+      authentication.
+    type: string
+    enum:
+    - INVALID
+    - USE_ORIGIN
+    - USE_PEER
+  serverTlsContext:
+    description: |-
+      Configures the mechanism to obtain server-side security
+      certificates and identity information.
+    $ref: TlsContext.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/AuthorizationConfig.yaml

@@ -0,0 +1,32 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha AuthorizationConfig export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  policies:
+    description: List of RbacPolicies.
+    type: array
+    items:
+      $ref: RbacPolicy.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/Backend.yaml

@@ -0,0 +1,162 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha Backend export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  balancingMode:
+    description: |-
+      Specifies how to determine whether the backend of a load balancer can
+      handle additional traffic or is fully loaded. For usage guidelines, see
+      Connection balancing mode. Backends must use compatible balancing modes.
+      For more information, see Supported balancing modes and target capacity
+      settings and Restrictions and guidance for instance groups. Note:
+      Currently, if you use the API to configure incompatible balancing modes,
+      the configuration might be accepted even though it has no impact and is
+      ignored. Specifically, Backend.maxUtilization is ignored when
+      Backend.balancingMode is RATE. In the future, this incompatible
+      combination will be rejected.
+    type: string
+    enum:
+    - CONNECTION
+    - CUSTOM_METRICS
+    - IN_FLIGHT
+    - RATE
+    - UTILIZATION
+  capacityScaler:
+    description: |-
+      A multiplier applied to the backend's target capacity of its balancing
+      mode. The default value is 1, which means the group serves up to 100% of
+      its configured capacity (depending on balancingMode). A setting of 0 means
+      the group is completely drained, offering 0% of its available capacity.
+      The valid ranges are 0.0 and [0.1,1.0]. You cannot configure a setting
+      larger than 0 and smaller than 0.1. You cannot configure a setting of 0
+      when there is only one backend attached to the backend service. Not
+      available with backends that don't support using a balancingMode. This
+      includes backends such as global internet NEGs, regional serverless NEGs,
+      and PSC NEGs.
+    type: number
+  customMetrics:
+    description: |-
+      List of custom metrics that are used for CUSTOM_METRICS BalancingMode.
+    type: array
+    items:
+      $ref: BackendCustomMetric.yaml
+  description:
+    description: |-
+      An optional description of this resource. Provide this property when
+      you create the resource.
+    type: string
+  failover:
+    description: |-
+      This field designates whether this is a failover backend. More than
+      one failover backend can be configured for a given BackendService.
+    type: boolean
+  group:
+    description: |-
+      The fully-qualified URL of an instance group or network endpoint group
+      (NEG) resource. To determine what types of backends a load balancer
+      supports, see the [Backend services
+      overview](https://cloud.google.com/load-balancing/docs/backend-
+      service#backends). You must use the *fully-qualified* URL (starting
+      with https://www.googleapis.com/) to specify the instance group or
+      NEG. Partial URLs are not supported. If haPolicy is specified,
+      backends must refer to NEG resources of type GCE_VM_IP.
+    type: string
+  maxConnections:
+    description: |-
+      Defines a target maximum number of simultaneous connections. For usage
+      guidelines, see Connection balancing mode and Utilization balancing
+      mode. Not available if the backend's balancingMode is RATE.
+    type: integer
+  maxConnectionsPerEndpoint:
+    description: |-
+      Defines a target maximum number of simultaneous connections. For usage
+      guidelines, see Connection balancing mode and Utilization balancing
+      mode. Not available if the backend's balancingMode is RATE.
+    type: integer
+  maxConnectionsPerInstance:
+    description: |-
+      Defines a target maximum number of simultaneous connections. For usage
+      guidelines, see Connection balancing mode and Utilization balancing
+      mode. Not available if the backend's balancingMode is RATE.
+    type: integer
+  maxInFlightRequests:
+    description: |-
+      Defines a maximum number of in-flight requests for the whole NEG or
+      instance group. Not available if backend's balancingMode is RATE or
+      CONNECTION.
+    type: integer
+  maxInFlightRequestsPerEndpoint:
+    description: |-
+      Defines a maximum number of in-flight requests for a single endpoint.
+      Not available if backend's balancingMode is RATE or CONNECTION.
+    type: integer
+  maxInFlightRequestsPerInstance:
+    description: |-
+      Defines a maximum number of in-flight requests for a single VM. Not
+      available if backend's balancingMode is RATE or CONNECTION.
+    type: integer
+  maxRate:
+    description: |-
+      Defines a maximum number of HTTP requests per second (RPS). For usage
+      guidelines, see Rate balancing mode and Utilization balancing mode.
+      Not available if the backend's balancingMode is CONNECTION.
+    type: integer
+  maxRatePerEndpoint:
+    description: |-
+      Defines a maximum target for requests per second (RPS). For usage
+      guidelines, see Rate balancing mode and Utilization balancing mode.
+      Not available if the backend's balancingMode is CONNECTION.
+    type: number
+  maxRatePerInstance:
+    description: |-
+      Defines a maximum target for requests per second (RPS). For usage
+      guidelines, see Rate balancing mode and Utilization balancing mode.
+      Not available if the backend's balancingMode is CONNECTION.
+    type: number
+  maxUtilization:
+    description: |-
+      Optional parameter to define a target capacity for the UTILIZATION
+      balancing mode. The valid range is [0.0, 1.0]. For usage guidelines,
+      see Utilization balancing mode.
+    type: number
+  preference:
+    description: |-
+      This field indicates whether this backend should be fully utilized
+      before sending traffic to backends with default preference. The
+      possible values are: - PREFERRED: Backends with this preference level
+      will be filled up to their capacity limits first, based on RTT. -
+    type: string
+    enum:
+    - DEFAULT
+    - PREFERENCE_UNSPECIFIED
+    - PREFERRED
+  trafficDuration:
+    description: A TrafficDurationValueValuesEnum attribute.
+    type: string
+    enum:
+    - LONG
+    - SHORT
+    - TRAFFIC_DURATION_UNSPECIFIED

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendCustomMetric.yaml

@@ -0,0 +1,49 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendCustomMetric export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  dryRun:
+    description: |-
+      If true, the metric data is collected and reported to Cloud Monitoring,
+      but is not used for load balancing.
+    type: boolean
+  maxUtilization:
+    description: |-
+      Optional parameter to define a target utilization for the Custom Metrics
+      balancing mode. The valid range is [0.0, 1.0].
+    type: number
+  name:
+    description: |-
+      Name of a custom utilization signal. The name must be 1-64 characters long
+      and match the regular expression [a-z]([-_.a-z0-9]*[a-z0-9])? which means
+      that the first character must be a lowercase letter, and all following
+      characters must be a dash, period, underscore, lowercase letter, or digit,
+      except the last character, which cannot be a dash, period, or underscore.
+      For usage guidelines, see Custom Metrics balancing mode. This field can
+      only be used for a global or regional backend service with the
+      loadBalancingScheme set to EXTERNAL_MANAGED, INTERNAL_MANAGED
+      INTERNAL_SELF_MANAGED.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendService.yaml

@@ -0,0 +1,620 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendService export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  affinityCookieTtlSec:
+    description: |-
+      Lifetime of cookies in seconds. This setting is applicable to Application
+      Load Balancers and Traffic Director and requires GENERATED_COOKIE or
+      HTTP_COOKIE session affinity. If set to 0, the cookie is non-persistent
+      and lasts only until the end of the browser session (or equivalent). The
+      maximum allowed value is two weeks (1,209,600). Not supported when the
+      backend service is referenced by a URL map that is bound to target gRPC
+      proxy that has validateForProxyless field set to true.
+    type: integer
+  allowMultinetwork:
+    description: |-
+      A boolean flag enabling multi-network mesh. This field is only allowed
+      with load balancing scheme set to INTERNAL_SELF_MANAGED.
+    type: boolean
+  backends:
+    description: The list of backends that serve this BackendService.
+    type: array
+    items:
+      $ref: Backend.yaml
+  cdnPolicy:
+    description: |-
+      Cloud CDN configuration for this BackendService. Only available for
+      specified load balancer types.
+    $ref: BackendServiceCdnPolicy.yaml
+  circuitBreakers:
+    description: A CircuitBreakers attribute.
+    $ref: CircuitBreakers.yaml
+  compressionMode:
+    description: |-
+      Compress text responses using Brotli or gzip compression, based on the
+      client's Accept-Encoding header.
+    type: string
+    enum:
+    - AUTOMATIC
+    - DISABLED
+  connectionDraining:
+    description: connectionDraining cannot be specified with haPolicy.
+    $ref: ConnectionDraining.yaml
+  connectionTrackingPolicy:
+    description: |-
+      Connection Tracking configuration for this BackendService. Connection
+      tracking policy settings are only available for external passthrough
+      Network Load Balancers and internal passthrough Network Load
+      Balancers. connectionTrackingPolicy cannot be specified with haPolicy.
+    $ref: BackendServiceConnectionTrackingPolicy.yaml
+  consistentHash:
+    description: |-
+      Consistent Hash-based load balancing can be used to provide soft
+      session affinity based on HTTP headers, cookies or other properties.
+      This load balancing policy is applicable only for HTTP connections.
+      The affinity to a particular destination host will be lost when one or
+      more hosts are added/removed from the destination service. This field
+      specifies parameters that control consistent hashing. This field is
+      only applicable when localityLbPolicy is set to MAGLEV or RING_HASH.
+      This field is applicable to either: - A regional backend service with
+      the service_protocol set to HTTP, HTTPS, HTTP2 or H2C, and
+      load_balancing_scheme set to INTERNAL_MANAGED. - A global backend
+      service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
+    $ref: ConsistentHashLoadBalancerSettings.yaml
+  creationTimestamp:
+    description: '[Output Only] Creation timestamp in RFC3339 text format.'
+    type: string
+  customMetrics:
+    description: |-
+      List of custom metrics that are used for the WEIGHTED_ROUND_ROBIN
+      locality_lb_policy.
+    type: array
+    items:
+      $ref: BackendServiceCustomMetric.yaml
+  customRequestHeaders:
+    description: |-
+      Headers that the load balancer adds to proxied requests. See
+      [Creating custom headers](https://cloud.google.com/load-
+      balancing/docs/custom-headers).
+    type: array
+    items:
+      type: string
+  customResponseHeaders:
+    description: |-
+      Headers that the load balancer adds to proxied responses. See
+      [Creating custom headers](https://cloud.google.com/load-
+      balancing/docs/custom-headers).
+    type: array
+    items:
+      type: string
+  description:
+    description: |-
+      An optional description of this resource. Provide this
+      property when you create the resource.
+    type: string
+  dynamicForwarding:
+    description: |-
+      Dynamic forwarding configuration. This field is used to
+      configure the backend service with dynamic forwarding
+      feature which together with Service Extension allows
+      customized and complex routing logic.
+    $ref: BackendServiceDynamicForwarding.yaml
+  edgeSecurityPolicy:
+    description: |-
+      [Output Only] The resource URL for the edge security
+      policy associated with this backend service.
+    type: string
+  enableCDN:
+    description: |-
+      If true, enables Cloud CDN for the backend service of a
+      global external Application Load Balancer.
+    type: boolean
+  externalManagedMigrationState:
+    description: |-
+      Specifies the canary migration state. Possible values are
+      PREPARE, TEST_BY_PERCENTAGE, and TEST_ALL_TRAFFIC. To
+      begin the migration from EXTERNAL to EXTERNAL_MANAGED, the
+      state must be changed to PREPARE. The state must be
+      changed to TEST_ALL_TRAFFIC before the loadBalancingScheme
+      can be changed to EXTERNAL_MANAGED. Optionally, the
+      TEST_BY_PERCENTAGE state can be used to migrate traffic by
+      percentage using
+      externalManagedMigrationTestingPercentage. Rolling back a
+      migration requires the states to be set in reverse order.
+      So changing the scheme from EXTERNAL_MANAGED to EXTERNAL
+      requires the state to be set to TEST_ALL_TRAFFIC at the
+      same time. Optionally, the TEST_BY_PERCENTAGE state can be
+      used to migrate some traffic back to EXTERNAL or PREPARE
+      can be used to migrate all traffic back to EXTERNAL.
+    type: string
+    enum:
+    - PREPARE
+    - TEST_ALL_TRAFFIC
+    - TEST_BY_PERCENTAGE
+  externalManagedMigrationTestingPercentage:
+    description: |-
+      Determines the fraction of requests that should be
+      processed by the Global external Application Load
+      Balancer. The value of this field must be in the range [0,
+      100]. Session affinity options will slightly affect this
+      routing behavior, for more details, see: Session Affinity.
+      This value can only be set if the loadBalancingScheme in
+      the BackendService is set to EXTERNAL (when using the
+      classic Application Load Balancer) and the migration state
+      is TEST_BY_PERCENTAGE.
+    type: number
+  failoverPolicy:
+    description: |-
+      Requires at least one backend instance group to be defined
+      as a backup (failover) backend. For load balancers that
+      have configurable failover: [Internal passthrough Network
+      Load Balancers](https://cloud.google.com/load-
+      balancing/docs/internal/failover-overview) and [external
+      passthrough Network Load
+      Balancers](https://cloud.google.com/load-
+      balancing/docs/network/networklb-failover-overview).
+      failoverPolicy cannot be specified with haPolicy.
+    $ref: BackendServiceFailoverPolicy.yaml
+  fingerprint:
+    description: |-
+      Fingerprint of this resource. A hash of the contents
+      stored in this object. This field is used in optimistic
+      locking. This field will be ignored when inserting a
+      BackendService. An up-to-date fingerprint must be provided
+      in order to update the BackendService, otherwise the
+      request will fail with error 412 conditionNotMet. To see
+      the latest fingerprint, make a get() request to retrieve a
+      BackendService.
+    type: string
+  haPolicy:
+    description: |-
+      Configures self-managed High Availability (HA) for
+      External and Internal Protocol Forwarding. The backends of
+      this regional backend service must only specify zonal
+      network endpoint groups (NEGs) of type GCE_VM_IP. When
+      haPolicy is set for an Internal Passthrough Network Load
+      Balancer, the regional backend service must set the
+      network field. All zonal NEGs must belong to the same
+      network. However, individual NEGs can belong to different
+      subnetworks of that network. When haPolicy is specified,
+      the set of attached network endpoints across all backends
+      comprise an High Availability domain from which one
+      endpoint is selected as the active endpoint (the leader)
+      that receives all traffic. haPolicy can be added only at
+      backend service creation time. Once set up, it cannot be
+      deleted. Note that haPolicy is not for load balancing, and
+      therefore cannot be specified with sessionAffinity,
+      connectionTrackingPolicy, and failoverPolicy. haPolicy
+      requires customers to be responsible for tracking backend
+      endpoint health and electing a leader among the healthy
+      endpoints. Therefore, haPolicy cannot be specified with
+      healthChecks. haPolicy can only be specified for External
+      Passthrough Network Load Balancers and Internal
+      Passthrough Network Load Balancers.
+    $ref: BackendServiceHAPolicy.yaml
+  healthChecks:
+    description: |-
+      The list of URLs to the healthChecks, httpHealthChecks
+      (legacy), or httpsHealthChecks (legacy) resource for
+      health checking this backend service. Not all backend
+      services support legacy health checks. See Load balancer
+      guide. Currently, at most one health check can be
+      specified for each backend service. Backend services with
+      instance group or zonal NEG backends must have a health
+      check unless haPolicy is specified. Backend services with
+      internet or serverless NEG backends must not have a health
+      check. healthChecks[] cannot be specified with haPolicy.
+    type: array
+    items:
+      type: string
+  iap:
+    description: |-
+      The configurations for Identity-Aware Proxy on this
+      resource. Not available for internal passthrough
+      Network Load Balancers and external passthrough
+      Network Load Balancers.
+    $ref: BackendServiceIAP.yaml
+  ipAddressSelectionPolicy:
+    description: |-
+      Specifies a preference for traffic sent from the proxy
+      to the backend (or from the client to the backend for
+      proxyless gRPC). The possible values are: - IPV4_ONLY:
+      Only send IPv4 traffic to the backends of the backend
+      service (Instance Group, Managed Instance Group,
+      Network Endpoint Group), regardless of traffic from
+      the client to the proxy. Only IPv4 health checks are
+      used to check the health of the backends. This is the
+      default setting. - PREFER_IPV6: Prioritize the
+      connection to the endpoint's IPv6 address over its
+      IPv4 address (provided there is a healthy IPv6
+      address). - IPV6_ONLY: Only send IPv6 traffic to the
+      backends of the backend service (Instance Group,
+      Managed Instance Group, Network Endpoint Group),
+      regardless of traffic from the client to the proxy.
+      Only IPv6 health checks are used to check the health
+      of the backends. This field is applicable to either: -
+      Advanced global external Application Load Balancer
+      (load balancing scheme EXTERNAL_MANAGED), - Regional
+      external Application Load Balancer, - Internal proxy
+      Network Load Balancer (load balancing scheme
+      INTERNAL_MANAGED), - Regional internal Application
+      Load Balancer (load balancing scheme
+      INTERNAL_MANAGED), - Traffic Director with Envoy
+      proxies and proxyless gRPC (load balancing scheme
+      INTERNAL_SELF_MANAGED).
+    type: string
+    enum:
+    - IPV4_ONLY
+    - IPV6_ONLY
+    - IP_ADDRESS_SELECTION_POLICY_UNSPECIFIED
+    - PREFER_IPV6
+  kind:
+    description: |-
+      [Output Only] Type of resource. Always
+      compute#backendService for backend services.
+    type: string
+  loadBalancingScheme:
+    description: |-
+      Specifies the load balancer type. A backend service
+      created for one type of load balancer cannot be used
+      with another. For more information, refer to Choosing
+      a load balancer.
+    type: string
+    enum:
+    - EXTERNAL
+    - EXTERNAL_MANAGED
+    - EXTERNAL_PASSTHROUGH
+    - INTERNAL
+    - INTERNAL_MANAGED
+    - INTERNAL_SELF_MANAGED
+    - INVALID_LOAD_BALANCING_SCHEME
+  localityLbPolicies:
+    description: |-
+      A list of locality load-balancing policies to be used
+      in order of preference. When you use
+      localityLbPolicies, you must set at least one value
+      for either the localityLbPolicies[].policy or the
+      localityLbPolicies[].customPolicy field.
+      localityLbPolicies overrides any value set in the
+      localityLbPolicy field. For an example of how to use
+      this field, see Define a list of preferred policies.
+      Caution: This field and its children are intended for
+      use in a service mesh that includes gRPC clients only.
+      Envoy proxies can't use backend services that have
+      this configuration.
+    type: array
+    items:
+      $ref: BackendServiceLocalityLoadBalancingPolicyConfig.yaml
+  localityLbPolicy:
+    description: |-
+      The load balancing algorithm used within the scope
+      of the locality. The possible values are: -
+      ROUND_ROBIN: This is a simple policy in which each
+      healthy backend is selected in round robin order.
+      This is the default. - LEAST_REQUEST: An O(1)
+      algorithm which selects two random healthy hosts
+      and picks the host which has fewer active
+      requests. - RING_HASH: The ring/modulo hash load
+      balancer implements consistent hashing to
+      backends. The algorithm has the property that the
+      addition/removal of a host from a set of N hosts
+      only affects 1/N of the requests. - RANDOM: The
+      load balancer selects a random healthy host. -
+    type: string
+    enum:
+    - INVALID_LB_POLICY
+    - LEAST_REQUEST
+    - MAGLEV
+    - ORIGINAL_DESTINATION
+    - RANDOM
+    - RING_HASH
+    - ROUND_ROBIN
+    - WEIGHTED_GCP_RENDEZVOUS
+    - WEIGHTED_MAGLEV
+    - WEIGHTED_ROUND_ROBIN
+  logConfig:
+    description: |-
+      This field denotes the logging options for the
+      load balancer traffic served by this backend
+      service. If logging is enabled, logs will be
+      exported to Stackdriver.
+    $ref: BackendServiceLogConfig.yaml
+  maxStreamDuration:
+    description: |-
+      Specifies the default maximum duration (timeout)
+      for streams to this service. Duration is computed
+      from the beginning of the stream until the
+      response has been completely processed, including
+      all retries. A stream that does not complete in
+      this duration is closed. If not specified, there
+      will be no timeout limit, i.e. the maximum
+      duration is infinite. This value can be overridden
+      in the PathMatcher configuration of the UrlMap
+      that references this backend service. This field
+      is only allowed when the loadBalancingScheme of
+      the backend service is INTERNAL_SELF_MANAGED.
+    $ref: Duration.yaml
+  metadatas:
+    description: |-
+      Deployment metadata associated with the resource
+      to be set by a GKE hub controller and read by the
+      backend RCTH
+    $ref: MetadatasValue.yaml
+  name:
+    description: |-
+      Name of the resource. Provided by the client when
+      the resource is created. The name must be 1-63
+      characters long, and comply with RFC1035.
+      Specifically, the name must be 1-63 characters
+      long and match the regular expression
+      `[a-z]([-a-z0-9]*[a-z0-9])?` which means the first
+      character must be a lowercase letter, and all
+      following characters must be a dash, lowercase
+      letter, or digit, except the last character, which
+      cannot be a dash.
+    type: string
+  network:
+    description: |-
+      The URL of the network to which this backend
+      service belongs. This field must be set for
+      Internal Passthrough Network Load Balancers when
+      the haPolicy is enabled, and for External
+      Passthrough Network Load Balancers when the
+      haPolicy fastIpMove is enabled. This field can
+      only be specified when the load balancing scheme
+      is set to INTERNAL, or when the load balancing
+      scheme is set to EXTERNAL and haPolicy fastIpMove
+      is enabled.
+    type: string
+  networkPassThroughLbTrafficPolicy:
+    description: |-
+      Configures traffic steering properties of internal
+      passthrough Network Load Balancers.
+      networkPassThroughLbTrafficPolicy cannot be
+      specified with haPolicy.
+    $ref: BackendServiceNetworkPassThroughLbTrafficPolicy.yaml
+  outlierDetection:
+    description: |-
+      Settings controlling the ejection of unhealthy
+      backend endpoints from the load balancing pool of
+      each individual proxy instance that processes the
+      traffic for the given backend service. If not set,
+      this feature is considered disabled. Results of
+      the outlier detection algorithm (ejection of
+      endpoints from the load balancing pool and
+      returning them back to the pool) are executed
+      independently by each proxy instance of the load
+      balancer. In most cases, more than one proxy
+      instance handles the traffic received by a backend
+      service. Thus, it is possible that an unhealthy
+      endpoint is detected and ejected by only some of
+      the proxies, and while this happens, other proxies
+      may continue to send requests to the same
+      unhealthy endpoint until they detect and eject the
+      unhealthy endpoint. Applicable backend endpoints
+      can be: - VM instances in an Instance Group -
+      Endpoints in a Zonal NEG (GCE_VM_IP,
+      GCE_VM_IP_PORT) - Endpoints in a Hybrid
+      Connectivity NEG (NON_GCP_PRIVATE_IP_PORT) -
+      Serverless NEGs, that resolve to Cloud Run, App
+      Engine, or Cloud Functions Services - Private
+      Service Connect NEGs, that resolve to Google-
+      managed regional API endpoints or managed services
+      published using Private Service Connect Applicable
+      backend service types can be: - A global backend
+      service with the loadBalancingScheme set to
+      INTERNAL_SELF_MANAGED or EXTERNAL_MANAGED. - A
+      regional backend service with the serviceProtocol
+      set to HTTP, HTTPS, HTTP2 or H2C, and
+      loadBalancingScheme set to INTERNAL_MANAGED or
+      EXTERNAL_MANAGED. Not supported for Serverless
+      NEGs. Not supported when the backend service is
+      referenced by a URL map that is bound to target
+      gRPC proxy that has validateForProxyless field set
+      to true.
+    $ref: OutlierDetection.yaml
+  params:
+    description: |-
+      Input only. [Input Only] Additional params passed
+      with the request, but not persisted as part of
+      resource payload.
+    $ref: BackendServiceParams.yaml
+  port:
+    description: |-
+      Deprecated in favor of portName. The TCP port to
+      connect on the backend. The default value is 80.
+      For internal passthrough Network Load Balancers
+      and external passthrough Network Load Balancers,
+      omit port.
+    type: integer
+  portName:
+    description: |-
+      A named port on a backend instance group
+      representing the port for communication to the
+      backend VMs in that group. The named port must be
+      [defined on each backend instance
+      group](https://cloud.google.com/load-
+      balancing/docs/backend- service#named_ports). This
+      parameter has no meaning if the backends are NEGs.
+      For internal passthrough Network Load Balancers
+      and external passthrough Network Load Balancers,
+      omit port_name.
+    type: string
+  protocol:
+    description: |-
+      The protocol this BackendService uses to
+      communicate with backends. Possible values are
+      HTTP, HTTPS, HTTP2, H2C, TCP, SSL, UDP or GRPC.
+      depending on the chosen load balancer or Traffic
+      Director configuration. Refer to the documentation
+      for the load balancers or for Traffic Director for
+      more information. Must be set to GRPC when the
+      backend service is referenced by a URL map that is
+      bound to target gRPC proxy.
+    type: string
+    enum:
+    - ALL
+    - GRPC
+    - H2C
+    - HTTP
+    - HTTP2
+    - HTTPS
+    - SSL
+    - TCP
+    - UDP
+    - UNSPECIFIED
+  region:
+    description: |-
+      [Output Only] URL of the region where the regional
+      backend service resides. This field is not
+      applicable to global backend services. You must
+      specify this field as part of the HTTP request
+      URL. It is not settable as a field in the request
+      body.
+    type: string
+  securityPolicy:
+    description: |-
+      [Output Only] The resource URL for the security
+      policy associated with this backend service.
+    type: string
+  securitySettings:
+    description: |-
+      This field specifies the security settings that
+      apply to this backend service. This field is
+      applicable to a global backend service with the
+      load_balancing_scheme set to
+      INTERNAL_SELF_MANAGED.
+    $ref: SecuritySettings.yaml
+  selfLink:
+    description: |-
+      [Output Only] Server-defined URL for the resource.
+    type: string
+  selfLinkWithId:
+    description: |-
+      [Output Only] Server-defined URL for this resource
+      with the resource id.
+    type: string
+  serviceBindings:
+    description: |-
+      URLs of networkservices.ServiceBinding resources.
+      Can only be set if load balancing scheme is
+      INTERNAL_SELF_MANAGED. If set, lists of backends
+      and health checks must be both empty.
+    type: array
+    items:
+      type: string
+  serviceLbPolicy:
+    description: |-
+      URL to networkservices.ServiceLbPolicy
+      resource. Can only be set if load balancing
+      scheme is EXTERNAL_MANAGED, INTERNAL_MANAGED
+      or INTERNAL_SELF_MANAGED and the scope is
+      global.
+    type: string
+  sessionAffinity:
+    description: |-
+      Type of session affinity to use. The default
+      is NONE. Only NONE and HEADER_FIELD are
+      supported when the backend service is
+      referenced by a URL map that is bound to
+      target gRPC proxy that has
+      validateForProxyless field set to true. For
+      more details, see: [Session
+      Affinity](https://cloud.google.com/load-
+      balancing/docs/backend-
+      service#session_affinity). sessionAffinity
+      cannot be specified with haPolicy.
+    type: string
+    enum:
+    - CLIENT_IP
+    - CLIENT_IP_NO_DESTINATION
+    - CLIENT_IP_PORT_PROTO
+    - CLIENT_IP_PROTO
+    - GENERATED_COOKIE
+    - HEADER_FIELD
+    - HTTP_COOKIE
+    - NONE
+    - STRONG_COOKIE_AFFINITY
+  strongSessionAffinityCookie:
+    description: |-
+      Describes the HTTP cookie used for stateful
+      session affinity. This field is applicable and
+      required if the sessionAffinity is set to
+      STRONG_COOKIE_AFFINITY.
+    $ref: BackendServiceHttpCookie.yaml
+  subsetting:
+    description: |-
+      subsetting cannot be specified with haPolicy.
+    $ref: Subsetting.yaml
+  timeoutSec:
+    description: |-
+      The backend service timeout has a different
+      meaning depending on the type of load
+      balancer. For more information see, Backend
+      service settings. The default is 30 seconds.
+      The full range of timeout values allowed goes
+      from 1 through 2,147,483,647 seconds. This
+      value can be overridden in the PathMatcher
+      configuration of the UrlMap that references
+      this backend service. Not supported when the
+      backend service is referenced by a URL map
+      that is bound to target gRPC proxy that has
+      validateForProxyless field set to true.
+      Instead, use maxStreamDuration.
+    type: integer
+  tlsSettings:
+    description: |-
+      Configuration for Backend Authenticated TLS
+      and mTLS. May only be specified when the
+      backend protocol is SSL, HTTPS or HTTP2.
+    $ref: BackendServiceTlsSettings.yaml
+  usedBy:
+    description: |-
+      [Output Only] List of resources referencing
+      given backend service.
+    type: array
+    items:
+      $ref: BackendServiceUsedBy.yaml
+  vpcNetworkScope:
+    description: |-
+      The network scope of the backends that can
+      be added to the backend service. This
+      field can be either GLOBAL_VPC_NETWORK or
+      REGIONAL_VPC_NETWORK. A backend service
+      with the VPC scope set to
+      GLOBAL_VPC_NETWORK is only allowed to have
+      backends in global VPC networks. When the
+      VPC scope is set to REGIONAL_VPC_NETWORK
+      the backend service is only allowed to
+      have backends in regional networks in the
+      same scope as the backend service. Note:
+      if not specified then GLOBAL_VPC_NETWORK
+      will be used.
+    type: string
+    enum:
+    - GLOBAL_VPC_NETWORK
+    - REGIONAL_VPC_NETWORK

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceAppEngineBackend.yaml

@@ -0,0 +1,42 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceAppEngineBackend export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- targetProject
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  appEngineService:
+    description: App Engine app service name.
+    type: string
+  targetProject:
+    description: |-
+      Project ID of the project hosting the app. This is the project ID of this
+      project. Reference to another project is not allowed.
+    type: string
+  version:
+    description: |-
+      Version of App Engine app service. When empty, App Engine will do its
+      normal traffic split.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceCdnPolicy.yaml

@@ -0,0 +1,161 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceCdnPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  bypassCacheOnRequestHeaders:
+    description: |-
+      Bypass the cache when the specified request headers are matched - e.g.
+      Pragma or Authorization headers. Up to 5 headers can be specified. The
+      cache is bypassed for all cdnPolicy.cacheMode settings.
+    type: array
+    items:
+      $ref: BackendServiceCdnPolicyBypassCacheOnRequestHeader.yaml
+  cacheKeyPolicy:
+    description: The CacheKeyPolicy for this CdnPolicy.
+    $ref: CacheKeyPolicy.yaml
+  cacheMode:
+    description: |-
+      Specifies the cache setting for all responses from this backend. The
+      possible values are: USE_ORIGIN_HEADERS Requires the origin to set
+      valid caching headers to cache content. Responses without these
+      headers will not be cached at Google's edge, and will require a full
+      trip to the origin on every request, potentially impacting performance
+      and increasing load on the origin server. FORCE_CACHE_ALL Cache all
+      content, ignoring any "private", "no-store" or "no-cache" directives
+      in Cache-Control response headers. Warning: this may result in Cloud
+      CDN caching private, per-user (user identifiable) content.
+      CACHE_ALL_STATIC Automatically cache static content, including common
+      image formats, media (video and audio), and web assets (JavaScript and
+      CSS). Requests and responses that are marked as uncacheable, as well
+      as dynamic content (including HTML), will not be cached. If no value
+      is provided for cdnPolicy.cacheMode, it defaults to CACHE_ALL_STATIC.
+    type: string
+    enum:
+    - CACHE_ALL_STATIC
+    - FORCE_CACHE_ALL
+    - INVALID_CACHE_MODE
+    - USE_ORIGIN_HEADERS
+  clientTtl:
+    description: |-
+      Specifies a separate client (e.g. browser client) maximum TTL. This is
+      used to clamp the max-age (or Expires) value sent to the client. With
+      FORCE_CACHE_ALL, the lesser of client_ttl and default_ttl is used for
+      the response max-age directive, along with a "public" directive. For
+      cacheable content in CACHE_ALL_STATIC mode, client_ttl clamps the max-
+      age from the origin (if specified), or else sets the response max-age
+      directive to the lesser of the client_ttl and default_ttl, and also
+      ensures a "public" cache-control directive is present. If a client TTL
+      is not specified, a default value (1 hour) will be used. The maximum
+      allowed value is 31,622,400s (1 year).
+    type: integer
+  defaultTtl:
+    description: |-
+      Specifies the default TTL for cached content served by this origin for
+      responses that do not have an existing valid TTL (max-age or
+      s-maxage). Setting a TTL of "0" means "always revalidate". The value
+      of defaultTTL cannot be set to a value greater than that of maxTTL,
+      but can be equal. When the cacheMode is set to FORCE_CACHE_ALL, the
+      defaultTTL will overwrite the TTL set in all responses. The maximum
+      allowed value is 31,622,400s (1 year), noting that infrequently
+      accessed objects may be evicted from the cache before the defined TTL.
+    type: integer
+  maxTtl:
+    description: |-
+      Specifies the maximum allowed TTL for cached content served by this
+      origin. Cache directives that attempt to set a max-age or s-maxage
+      higher than this, or an Expires header more than maxTTL seconds in the
+      future will be capped at the value of maxTTL, as if it were the value
+      of an s-maxage Cache-Control directive. Headers sent to the client
+      will not be modified. Setting a TTL of "0" means "always revalidate".
+      The maximum allowed value is 31,622,400s (1 year), noting that
+      infrequently accessed objects may be evicted from the cache before the
+      defined TTL.
+    type: integer
+  negativeCaching:
+    description: |-
+      Negative caching allows per-status code TTLs to be set, in order to
+      apply fine-grained caching for common errors or redirects. This can
+      reduce the load on your origin and improve end-user experience by
+      reducing response latency. When the cache mode is set to
+      CACHE_ALL_STATIC or USE_ORIGIN_HEADERS, negative caching applies to
+      responses with the specified response code that lack any Cache-
+      Control, Expires, or Pragma: no-cache directives. When the cache mode
+      is set to FORCE_CACHE_ALL, negative caching applies to all responses
+      with the specified response code, and override any caching headers. By
+      default, Cloud CDN will apply the following default TTLs to these
+      status codes: HTTP 300 (Multiple Choice), 301, 308 (Permanent
+      Redirects): 10m HTTP 404 (Not Found), 410 (Gone), 451 (Unavailable For
+      Legal Reasons): 120s HTTP 405 (Method Not Found), 421 (Misdirected
+      Request), 501 (Not Implemented): 60s. These defaults can be overridden
+      in negative_caching_policy.
+    type: boolean
+  negativeCachingPolicy:
+    description: |-
+      Sets a cache TTL for the specified HTTP status code. negative_caching
+      must be enabled to configure negative_caching_policy. Omitting the
+      policy and leaving negative_caching enabled will use Cloud CDN's
+      default cache TTLs. Note that when specifying an explicit
+      negative_caching_policy, you should take care to specify a cache TTL
+      for all response codes that you wish to cache. Cloud CDN will not
+      apply any default negative caching when a policy exists.
+    type: array
+    items:
+      $ref: BackendServiceCdnPolicyNegativeCachingPolicy.yaml
+  requestCoalescing:
+    description: |-
+      If true then Cloud CDN will combine multiple concurrent cache fill
+      requests into a small number of requests to the origin.
+    type: boolean
+  serveWhileStale:
+    description: |-
+      Serve existing content from the cache (if available) when
+      revalidating content with the origin, or when an error is
+      encountered when refreshing the cache. This setting defines the
+      default "max-stale" duration for any cached responses that do not
+      specify a max-stale directive. Stale responses that exceed the TTL
+      configured here will not be served. The default limit (max-stale)
+      is 86400s (1 day), which will allow stale content to be served up
+      to this limit beyond the max-age (or s-maxage) of a cached
+      response. The maximum allowed value is 604800 (1 week). Set this
+      to zero (0) to disable serve-while-stale.
+    type: integer
+  signedUrlCacheMaxAgeSec:
+    description: |-
+      Maximum number of seconds the response to a signed URL request
+      will be considered fresh. After this time period, the response
+      will be revalidated before being served. Defaults to 1hr (3600s).
+      When serving responses to signed URL requests, Cloud CDN will
+      internally behave as though all responses from this backend had a
+      "Cache-Control: public, max-age=[TTL]" header, regardless of any
+      existing Cache-Control header. The actual headers served in
+      responses will not be altered.
+    type: integer
+  signedUrlKeyNames:
+    description: |-
+      [Output Only] Names of the keys for signing request URLs.
+    type: array
+    items:
+      type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceCdnPolicyBypassCacheOnRequestHeader.yaml

@@ -0,0 +1,32 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceCdnPolicyBypassCacheOnRequestHeader export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  headerName:
+    description: |-
+      The header field name to match on when bypassing cache. Values are case-
+      insensitive.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceCdnPolicyNegativeCachingPolicy.yaml

@@ -0,0 +1,40 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceCdnPolicyNegativeCachingPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  code:
+    description: |-
+      The HTTP status code to define a TTL against. Only HTTP status codes 300,
+      301, 302, 307, 308, 404, 405, 410, 421, 451 and 501 are can be specified
+      as values, and you cannot specify a status code more than once.
+    type: integer
+  ttl:
+    description: |-
+      The TTL (in seconds) for which to cache responses with the corresponding
+      status code. The maximum allowed value is 1800s (30 minutes), noting that
+      infrequently accessed objects may be evicted from the cache before the
+      defined TTL.
+    type: integer

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceCloudFunctionBackend.yaml

@@ -0,0 +1,38 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceCloudFunctionBackend export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- functionName
+- targetProject
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  functionName:
+    description: |-
+      A cloud function name. Special value ?*? represents all cloud functions in
+      the project.
+    type: string
+  targetProject:
+    description: Project ID of the project hosting the cloud function.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceConnectionTrackingPolicy.yaml

@@ -0,0 +1,86 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceConnectionTrackingPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  connectionPersistenceOnUnhealthyBackends:
+    description: |-
+      Specifies connection persistence when backends are unhealthy. The default
+      value is DEFAULT_FOR_PROTOCOL. If set to DEFAULT_FOR_PROTOCOL, the
+      existing connections persist on unhealthy backends only for connection-
+      oriented protocols (TCP and SCTP) and only if the Tracking Mode is
+      PER_CONNECTION (default tracking mode) or the Session Affinity is
+      configured for 5-tuple. They do not persist for UDP. If set to
+      NEVER_PERSIST, after a backend becomes unhealthy, the existing connections
+      on the unhealthy backend are never persisted on the unhealthy backend.
+      They are always diverted to newly selected healthy backends (unless all
+      backends are unhealthy). If set to ALWAYS_PERSIST, existing connections
+      always persist on unhealthy backends regardless of protocol and session
+      affinity. It is generally not recommended to use this mode overriding the
+      default. For more details, see [Connection Persistence for Network Load
+      Balancing](https://cloud.google.com/load-
+      balancing/docs/network/networklb-backend-service#connection-persistence)
+      and [Connection Persistence for Internal TCP/UDP Load
+      Balancing](https://cloud.google.com/load-
+      balancing/docs/internal#connection-persistence).
+    type: string
+    enum:
+    - ALWAYS_PERSIST
+    - DEFAULT_FOR_PROTOCOL
+    - NEVER_PERSIST
+  enableStrongAffinity:
+    description: |-
+      Enable Strong Session Affinity for external passthrough Network Load
+      Balancers. This option is not available publicly.
+    type: boolean
+  idleTimeoutSec:
+    description: |-
+      Specifies how long to keep a Connection Tracking entry while there is no
+      matching traffic (in seconds). For internal passthrough Network Load
+      Balancers: - The minimum (default) is 10 minutes and the maximum is 16
+      hours. - It can be set only if Connection Tracking is less than 5-tuple
+      (i.e. Session Affinity is CLIENT_IP_NO_DESTINATION, CLIENT_IP or
+      CLIENT_IP_PROTO, and Tracking Mode is PER_SESSION). For external
+      passthrough Network Load Balancers the default is 60 seconds. This option
+      is not available publicly.
+    type: integer
+  trackingMode:
+    description: |-
+      Specifies the key used for connection tracking. There are two options: -
+      PER_CONNECTION: This is the default mode. The Connection Tracking is
+      performed as per the Connection Key (default Hash Method) for the specific
+      protocol. - PER_SESSION: The Connection Tracking is performed as per the
+      configured Session Affinity. It matches the configured Session Affinity.
+      For more details, see [Tracking Mode for Network Load
+      Balancing](https://cloud.google.com/load-
+      balancing/docs/network/networklb-backend-service#tracking-mode) and
+      [Tracking Mode for Internal TCP/UDP Load
+      Balancing](https://cloud.google.com/load-
+      balancing/docs/internal#tracking-mode).
+    type: string
+    enum:
+    - INVALID_TRACKING_MODE
+    - PER_CONNECTION
+    - PER_SESSION

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceCustomMetric.yaml

@@ -0,0 +1,42 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceCustomMetric export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  dryRun:
+    description: If true, the metric data is not used for load balancing.
+    type: boolean
+  name:
+    description: |-
+      Name of a custom utilization signal. The name must be 1-64 characters long
+      and match the regular expression [a-z]([-_.a-z0-9]*[a-z0-9])? which means
+      that the first character must be a lowercase letter, and all following
+      characters must be a dash, period, underscore, lowercase letter, or digit,
+      except the last character, which cannot be a dash, period, or underscore.
+      For usage guidelines, see Custom Metrics balancing mode. This field can
+      only be used for a global or regional backend service with the
+      loadBalancingScheme set to EXTERNAL_MANAGED, INTERNAL_MANAGED
+      INTERNAL_SELF_MANAGED.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceDynamicForwarding.yaml

@@ -0,0 +1,30 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceDynamicForwarding export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  ipPortSelection:
+    description: IP:PORT based dynamic forwarding configuration.
+    $ref: BackendServiceDynamicForwardingIpPortSelection.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceDynamicForwardingIpPortSelection.yaml

@@ -0,0 +1,30 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceDynamicForwardingIpPortSelection export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  enabled:
+    description: A boolean flag enabling IP:PORT based dynamic forwarding.
+    type: boolean

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceFailoverPolicy.yaml

@@ -0,0 +1,55 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceFailoverPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  disableConnectionDrainOnFailover:
+    description: |-
+      This can be set to true only if the protocol is TCP. The default is false.
+    type: boolean
+  dropTrafficIfUnhealthy:
+    description: |-
+      If set to true, connections to the load balancer are dropped when all
+      primary and all backup backend VMs are unhealthy.If set to false,
+      connections are distributed among all primary VMs when all primary and all
+      backup backend VMs are unhealthy. For load balancers that have
+      configurable failover: [Internal passthrough Network Load
+      Balancers](https://cloud.google.com/load-
+      balancing/docs/internal/failover-overview) and [external passthrough
+      Network Load Balancers](https://cloud.google.com/load-
+      balancing/docs/network/networklb-failover-overview). The default is false.
+    type: boolean
+  failoverRatio:
+    description: |-
+      The value of the field must be in the range [0, 1]. If the value is 0, the
+      load balancer performs a failover when the number of healthy primary VMs
+      equals zero. For all other values, the load balancer performs a failover
+      when the total number of healthy primary VMs is less than this ratio. For
+      load balancers that have configurable failover: [Internal TCP/UDP Load
+      Balancing](https://cloud.google.com/load-
+      balancing/docs/internal/failover-overview) and [external TCP/UDP Load
+      Balancing](https://cloud.google.com/load-
+      balancing/docs/network/networklb-failover-overview).
+    type: number

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceHAPolicy.yaml

@@ -0,0 +1,93 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceHAPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  fastIPMove:
+    description: |-
+      Specifies whether fast IP move is enabled, and if so, the mechanism to
+      achieve it. Supported values are: - DISABLED: Fast IP Move is disabled.
+      You can only use the haPolicy.leader API to update the leader. - >GARP_RA:
+      Provides a method to very quickly define a new network endpoint as the
+      leader. This method is faster than updating the leader using the
+      haPolicy.leader API. Fast IP move works as follows: The VM hosting the
+      network endpoint that should become the new leader sends either a
+      Gratuitous ARP (GARP) packet (IPv4) or an ICMPv6 Router Advertisement(RA)
+      packet (IPv6). Google Cloud immediately but temporarily associates the
+      forwarding rule IP address with that VM, and both new and in-flight
+      packets are quickly delivered to that VM. Note the important properties of
+      the Fast IP Move functionality: - The GARP/RA-initiated re-routing stays
+      active for approximately 20 minutes. After triggering fast failover, you
+      must also appropriately set the haPolicy.leader. - The new leader instance
+      should continue to send GARP/RA packets periodically every 10 seconds
+      until at least 10 minutes after updating the haPolicy.leader (but stop
+      immediately if it is no longer the leader). - After triggering a fast
+      failover, we recommend that you wait at least 3 seconds before sending
+      another GARP/RA packet from a different VM instance to avoid race
+      conditions. - Don't send GARP/RA packets from different VM instances at
+      the same time. If multiple instances continue to send GARP/RA packets,
+      traffic might be routed to different destinations in an alternating order.
+      This condition ceases when a single instance issues a GARP/RA packet. -
+      The GARP/RA request always takes priority over the leader API. Using the
+      haPolicy.leader API to change the leader to a different instance will have
+      no effect until the GARP/RA request becomes inactive. - The GARP/RA
+      packets should follow the GARP/RA Packet Specifications.. - When multiple
+      forwarding rules refer to a regional backend service, you need only send a
+      GARP or RA packet for a single forwarding rule virtual IP. The virtual IPs
+      for all forwarding rules targeting the same backend service will also be
+      moved to the sender of the GARP or RA packet. The following are the Fast
+      IP Move limitations (that is, when fastIPMove is not DISABLED): - Multiple
+      forwarding rules cannot use the same IP address if one of them refers to a
+      regional backend service with fastIPMove. - The regional backend service
+      must set the network field, and all NEGs must belong to that network.
+      However, individual NEGs can belong to different subnetworks of that
+      network. - The maximum number of network endpoints across all backends of
+      a backend service with fastIPMove is 32. - The maximum number of backend
+      services with fastIPMove that can have the same network endpoint attached
+      to one of its backends is 64. - The maximum number of backend services
+      with fastIPMove in a VPC in a region is 64. - The network endpoints that
+      are attached to a backend of a backend service with fastIPMove cannot
+      resolve to Gen3+ machines for IPv6. - Traffic directed to the leader by a
+      static route next hop will not be redirected to a new leader by fast
+      failover. Such traffic will only be redirected once an haPolicy.leader
+      update has taken effect. Only traffic to the forwarding rule's virtual IP
+      will be redirected to a new leader by fast failover. haPolicy.fastIPMove
+      can be set only at backend service creation time. Once set, it cannot be
+      updated. By default, fastIpMove is set to DISABLED.
+    type: string
+    enum:
+    - DISABLED
+    - GARP_RA
+  leader:
+    description: |-
+      Selects one of the network endpoints attached to the backend NEGs of this
+      service as the active endpoint (the leader) that receives all traffic.
+      When the leader changes, there is no connection draining to persist
+      existing connections on the old leader. You are responsible for selecting
+      a suitable endpoint as the leader. For example, preferring a healthy
+      endpoint over unhealthy ones. Note that this service does not track
+      backend endpoint health, and selects the configured leader
+      unconditionally.
+    $ref: BackendServiceHAPolicyLeader.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceHAPolicyLeader.yaml

@@ -0,0 +1,42 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceHAPolicyLeader export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  backendGroup:
+    description: |-
+      A fully-qualified URL (starting with https://www.googleapis.com/) of the
+      zonal Network Endpoint Group (NEG) with `GCE_VM_IP` endpoints that the
+      leader is attached to. The leader's backendGroup must already be specified
+      as a backend of this backend service. Removing a backend that is
+      designated as the leader's backendGroup is not permitted.
+    type: string
+  networkEndpoint:
+    description: |-
+      The network endpoint within the leader.backendGroup that is designated as
+      the leader. This network endpoint cannot be detached from the NEG
+      specified in the haPolicy.leader.backendGroup until the leader is updated
+      with another network endpoint, or the leader is removed from the haPolicy.
+    $ref: BackendServiceHAPolicyLeaderNetworkEndpoint.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceHAPolicyLeaderNetworkEndpoint.yaml

@@ -0,0 +1,35 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceHAPolicyLeaderNetworkEndpoint export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  instance:
+    description: |-
+      The name of the VM instance of the leader network endpoint. The instance
+      must already be attached to the NEG specified in the
+      haPolicy.leader.backendGroup. The name must be 1-63 characters long, and
+      comply with RFC1035. Authorization requires the following IAM permission
+      on the specified resource instance: compute.instances.use
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceHttpCookie.yaml

@@ -0,0 +1,36 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceHttpCookie export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  name:
+    description: Name of the cookie.
+    type: string
+  path:
+    description: Path to set for the cookie.
+    type: string
+  ttl:
+    description: Lifetime of the cookie.
+    $ref: Duration.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceIAP.yaml

@@ -0,0 +1,51 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceIAP export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  enabled:
+    description: |-
+      Whether the serving infrastructure will authenticate and authorize all
+      incoming requests.
+    type: boolean
+  oauth2ClientId:
+    description: OAuth2 client ID to use for the authentication flow.
+    type: string
+  oauth2ClientInfo:
+    description: |-
+      [Input Only] OAuth client info required to generate client id to be used
+      for IAP.
+    $ref: BackendServiceIAPOAuth2ClientInfo.yaml
+  oauth2ClientSecret:
+    description: |-
+      OAuth2 client secret to use for the authentication flow. For security
+      reasons, this value cannot be retrieved via the API. Instead, the SHA-256
+      hash of the value is returned in the oauth2ClientSecretSha256 field.
+      @InputOnly
+    type: string
+  oauth2ClientSecretSha256:
+    description: |-
+      [Output Only] SHA256 hash value for the field oauth2_client_secret above.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceIAPOAuth2ClientInfo.yaml

@@ -0,0 +1,38 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceIAPOAuth2ClientInfo export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  applicationName:
+    description: Application name to be used in OAuth consent screen.
+    type: string
+  clientName:
+    description: |-
+      Name of the client to be generated. Optional - If not provided, the name
+      will be autogenerated by the backend.
+    type: string
+  developerEmailAddress:
+    description: Developer's information to be used in OAuth consent screen.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceLocalityLoadBalancingPolicyConfig.yaml

@@ -0,0 +1,35 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceLocalityLoadBalancingPolicyConfig export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  customPolicy:
+    description: |-
+      A BackendServiceLocalityLoadBalancingPolicyConfigCustomPolicy attribute.
+    $ref: BackendServiceLocalityLoadBalancingPolicyConfigCustomPolicy.yaml
+  policy:
+    description: |-
+      A BackendServiceLocalityLoadBalancingPolicyConfigPolicy attribute.
+    $ref: BackendServiceLocalityLoadBalancingPolicyConfigPolicy.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceLocalityLoadBalancingPolicyConfigCustomPolicy.yaml

@@ -0,0 +1,43 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceLocalityLoadBalancingPolicyConfigCustomPolicy export
+  schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  data:
+    description: |-
+      An optional, arbitrary JSON object with configuration data, understood by
+      a locally installed custom policy implementation.
+    type: string
+  name:
+    description: |-
+      Identifies the custom policy. The value should match the name of a custom
+      implementation registered on the gRPC clients. It should follow protocol
+      buffer message naming conventions and include the full path (for example,
+      myorg.CustomLbPolicy). The maximum length is 256 characters. Do not
+      specify the same custom policy more than once for a backend. If you do,
+      the configuration is rejected. For an example of how to use this field,
+      see Use a custom policy.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceLocalityLoadBalancingPolicyConfigPolicy.yaml

@@ -0,0 +1,47 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceLocalityLoadBalancingPolicyConfigPolicy export
+  schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  name:
+    description: |-
+      The name of a locality load-balancing policy. Valid values include
+      ROUND_ROBIN and, for Java clients, LEAST_REQUEST. For information about
+      these values, see the description of localityLbPolicy. Do not specify the
+      same policy more than once for a backend. If you do, the configuration is
+      rejected.
+    type: string
+    enum:
+    - INVALID_LB_POLICY
+    - LEAST_REQUEST
+    - MAGLEV
+    - ORIGINAL_DESTINATION
+    - RANDOM
+    - RING_HASH
+    - ROUND_ROBIN
+    - WEIGHTED_GCP_RENDEZVOUS
+    - WEIGHTED_MAGLEV
+    - WEIGHTED_ROUND_ROBIN

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceLogConfig.yaml

@@ -0,0 +1,74 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceLogConfig export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  enable:
+    description: |-
+      Denotes whether to enable logging for the load balancer traffic served by
+      this backend service. The default value is false.
+    type: boolean
+  optional:
+    description: |-
+      Deprecated in favor of optionalMode. This field can only be specified if
+      logging is enabled for this backend service. Configures whether all, none
+      or a subset of optional fields should be added to the reported logs. One
+      of [INCLUDE_ALL_OPTIONAL, EXCLUDE_ALL_OPTIONAL, CUSTOM]. Default is
+      EXCLUDE_ALL_OPTIONAL.
+    type: string
+    enum:
+    - CUSTOM
+    - EXCLUDE_ALL_OPTIONAL
+    - INCLUDE_ALL_OPTIONAL
+    - UNSPECIFIED_OPTIONAL_MODE
+  optionalFields:
+    description: |-
+      This field can only be specified if logging is enabled for this backend
+      service and "logConfig.optionalMode" was set to CUSTOM. Contains a list of
+      optional fields you want to include in the logs. For
+    type: array
+    items:
+      type: string
+  optionalMode:
+    description: |-
+      This field can only be specified if logging is enabled for this
+      backend service. Configures whether all, none or a subset of optional
+      fields should be added to the reported logs. One of
+      [INCLUDE_ALL_OPTIONAL, EXCLUDE_ALL_OPTIONAL, CUSTOM]. Default is
+      EXCLUDE_ALL_OPTIONAL.
+    type: string
+    enum:
+    - CUSTOM
+    - EXCLUDE_ALL_OPTIONAL
+    - INCLUDE_ALL_OPTIONAL
+    - UNSPECIFIED_OPTIONAL_MODE
+  sampleRate:
+    description: |-
+      This field can only be specified if logging is enabled for this
+      backend service. The value of the field must be in [0, 1]. This
+      configures the sampling rate of requests to the load balancer where
+      1.0 means all logged requests are reported and 0.0 means no logged
+      requests are reported. The default value is 1.0.
+    type: number

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceNetworkPassThroughLbTrafficPolicy.yaml

@@ -0,0 +1,32 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceNetworkPassThroughLbTrafficPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  zonalAffinity:
+    description: |-
+      When configured, new connections are load balanced across healthy backend
+      endpoints in the local zone.
+    $ref: BackendServiceNetworkPassThroughLbTrafficPolicyZonalAffinity.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceNetworkPassThroughLbTrafficPolicyZonalAffinity.yaml

@@ -0,0 +1,50 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceNetworkPassThroughLbTrafficPolicyZonalAffinity
+  export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  spillover:
+    description: |-
+      This field indicates whether zonal affinity is enabled or not. The
+      possible values are: - ZONAL_AFFINITY_DISABLED: Default Value. Zonal
+      Affinity is disabled. The load balancer distributes new connections to all
+      healthy backend endpoints across all zones. -
+    type: string
+    enum:
+    - ZONAL_AFFINITY_DISABLED
+    - ZONAL_AFFINITY_SPILL_CROSS_ZONE
+    - ZONAL_AFFINITY_STAY_WITHIN_ZONE
+  spilloverRatio:
+    description: |-
+      The value of the field must be in [0, 1]. When the ratio of the count of
+      healthy backend endpoints in a zone to the count of backend endpoints in
+      that same zone is equal to or above this threshold, the load balancer
+      distributes new connections to all healthy endpoints in the local zone
+      only. When the ratio of the count of healthy backend endpoints in a zone
+      to the count of backend endpoints in that same zone is below this
+      threshold, the load balancer distributes all new connections to all
+      healthy endpoints across all zones.
+    type: number

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceParams.yaml

@@ -0,0 +1,38 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceParams export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  resourceManagerTags:
+    description: |-
+      Tag keys/values directly bound to this resource. Tag keys and values have
+      the same definition as resource manager tags. The field is allowed for
+      INSERT only. The keys/values to set on the resource should be specified in
+      either ID { : } or Namespaced format { : }. For example the following are
+      valid inputs: * {"tagKeys/333" : "tagValues/444", "tagKeys/123" :
+      "tagValues/456"} * {"123/environment" : "production", "345/abc" : "xyz"}
+      Note: * Invalid combinations of ID & namespaced format is not supported.
+      For instance: {"123/environment" : "tagValues/444"} is invalid.
+    $ref: ResourceManagerTagsValue.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceTlsSettings.yaml

@@ -0,0 +1,74 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceTlsSettings export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  authenticationConfig:
+    description: |-
+      Reference to the BackendAuthenticationConfig resource from the
+      networksecurity.googleapis.com namespace. Can be used in authenticating
+      TLS connections to the backend, as specified by the authenticationMode
+      field. Can only be specified if authenticationMode is not NONE.
+    type: string
+  identity:
+    description: |-
+      Assigns the Managed Identity for the RegionBackendService Workload. Use
+      this property to configure the load balancer back-end to use certificates
+      and roots of trust provisioned by the Managed Workload Identity system.
+      The `managedIdentity` property is the fully-specified SPIFFE ID to use in
+      the SVID presented by the Load Balancer Workload. The SPIFFE ID must be a
+      resource starting with the "spiffe" scheme identifier, followed by the
+      "trustDomain" property value, followed by the path to the Managed Workload
+      Identity. Supported SPIFFE ID format: -
+      spiffe://<trust_domain>/ns/<namespace>/sa/<subject> The Trust Domain
+      within the Managed Identity must refer to a valid Workload Identity Pool.
+      The TrustConfig and CertificateIssuanceConfig will be inherited from the
+      Workload Identity Pool. Restrictions: - If you set the `managedIdentity`
+      property, you cannot manually set the following
+    type: string
+  sni:
+    description: |-
+      Server Name Indication - see RFC3546 section 3.1. If set, the load
+      balancer sends this string as the SNI hostname in the TLS connection to
+      the backend, and requires that this string match a Subject Alternative
+      Name (SAN) in the backend's server certificate. With a Regional Internet
+      NEG backend, if the SNI is specified here, the load balancer uses it
+      regardless of whether the Regional Internet NEG is specified with FQDN or
+      IP address and port. When both sni and subjectAltNames[] are specified,
+      the load balancer matches the backend certificate's SAN only to
+      subjectAltNames[].
+    type: string
+  subjectAltNames:
+    description: |-
+      A list of Subject Alternative Names (SANs) that the Load Balancer verifies
+      during a TLS handshake with the backend. When the server presents its
+      X.509 certificate to the Load Balancer, the Load Balancer inspects the
+      certificate's SAN field, and requires that at least one SAN match one of
+      the subjectAltNames in the list. This field is limited to 5 entries. When
+      both sni and subjectAltNames[] are specified, the load balancer matches
+      the backend certificate's SAN only to subjectAltNames[].
+    type: array
+    items:
+      $ref: BackendServiceTlsSettingsSubjectAltName.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceTlsSettingsSubjectAltName.yaml

@@ -0,0 +1,33 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceTlsSettingsSubjectAltName export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  dnsName:
+    description: The SAN specified as a DNS Name.
+    type: string
+  uniformResourceIdentifier:
+    description: The SAN specified as a URI.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/BackendServiceUsedBy.yaml

@@ -0,0 +1,33 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha BackendServiceUsedBy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  reference:
+    description: |-
+      [Output Only] Server-defined URL for resources referencing given
+      BackendService like UrlMaps, TargetTcpProxies, TargetSslProxies and
+      ForwardingRule.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/CacheKeyPolicy.yaml

@@ -0,0 +1,74 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha CacheKeyPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  includeHost:
+    description: If true, requests to different hosts will be cached separately.
+    type: boolean
+  includeHttpHeaders:
+    description: |-
+      Allows HTTP request headers (by name) to be used in the cache key.
+    type: array
+    items:
+      type: string
+  includeNamedCookies:
+    description: |-
+      Allows HTTP cookies (by name) to be used in the cache key. The
+      name=value pair will be used in the cache key Cloud CDN generates.
+    type: array
+    items:
+      type: string
+  includeProtocol:
+    description: |-
+      If true, http and https requests will be cached separately.
+    type: boolean
+  includeQueryString:
+    description: |-
+      If true, include query string parameters in the cache key
+      according to query_string_whitelist and query_string_blacklist. If
+      neither is set, the entire query string will be included. If
+      false, the query string will be excluded from the cache key
+      entirely.
+    type: boolean
+  queryStringBlacklist:
+    description: |-
+      Names of query string parameters to exclude in cache keys. All
+      other parameters will be included. Either specify
+      query_string_whitelist or query_string_blacklist, not both. '&'
+      and '=' will be percent encoded and not treated as delimiters.
+    type: array
+    items:
+      type: string
+  queryStringWhitelist:
+    description: |-
+      Names of query string parameters to include in cache keys. All
+      other parameters will be excluded. Either specify
+      query_string_whitelist or query_string_blacklist, not both.
+      '&' and '=' will be percent encoded and not treated as
+      delimiters.
+    type: array
+    items:
+      type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/CallCredentials.yaml

@@ -0,0 +1,41 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha CallCredentials export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  callCredentialType:
+    description: |-
+      The type of call credentials to use for GRPC requests to the SDS server.
+      This field can be set to one of the following: -
+    type: string
+    enum:
+    - FROM_PLUGIN
+    - GCE_VM
+    - INVALID
+  fromPlugin:
+    description: |-
+      Custom authenticator credentials. Valid if callCredentialType is
+      FROM_PLUGIN.
+    $ref: MetadataCredentialsFromPlugin.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/ChannelCredentials.yaml

@@ -0,0 +1,40 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha ChannelCredentials export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  certificates:
+    description: The call credentials to access the SDS server.
+    $ref: TlsCertificatePaths.yaml
+  channelCredentialType:
+    description: |-
+      The channel credentials to access the SDS server. This field can be set to
+      one of the following: CERTIFICATES: Use TLS certificates to access the SDS
+      server. GCE_VM: Use local GCE VM credentials to access the SDS server.
+    type: string
+    enum:
+    - CERTIFICATES
+    - GCE_VM
+    - INVALID

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/CircuitBreakers.yaml

@@ -0,0 +1,65 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha CircuitBreakers export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  connectTimeout:
+    description: The timeout for new network connections to hosts.
+    $ref: Duration.yaml
+  maxConnections:
+    description: |-
+      The maximum number of connections to the backend service. If not
+      specified, there is no limit. Not supported when the backend service is
+      referenced by a URL map that is bound to target gRPC proxy that has
+      validateForProxyless field set to true.
+    type: integer
+  maxPendingRequests:
+    description: |-
+      The maximum number of pending requests allowed to the backend service. If
+      not specified, there is no limit. Not supported when the backend service
+      is referenced by a URL map that is bound to target gRPC proxy that has
+      validateForProxyless field set to true.
+    type: integer
+  maxRequests:
+    description: |-
+      The maximum number of parallel requests that allowed to the backend
+      service. If not specified, there is no limit.
+    type: integer
+  maxRequestsPerConnection:
+    description: |-
+      Maximum requests for a single connection to the backend service. This
+      parameter is respected by both the HTTP/1.1 and HTTP/2 implementations. If
+      not specified, there is no limit. Setting this parameter to 1 will
+      effectively disable keep alive. Not supported when the backend service is
+      referenced by a URL map that is bound to target gRPC proxy that has
+      validateForProxyless field set to true.
+    type: integer
+  maxRetries:
+    description: |-
+      The maximum number of parallel retries allowed to the backend cluster. If
+      not specified, the default is 1. Not supported when the backend service is
+      referenced by a URL map that is bound to target gRPC proxy that has
+      validateForProxyless field set to true.
+    type: integer

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/ClientTlsSettings.yaml

@@ -0,0 +1,61 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha ClientTlsSettings export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  clientTlsContext:
+    description: |-
+      Configures the mechanism to obtain client-side security certificates and
+      identity information. This field is only applicable when mode is set to
+      MUTUAL.
+    $ref: TlsContext.yaml
+  mode:
+    description: |-
+      Indicates whether connections to this port should be secured using TLS.
+      The value of this field determines how TLS is enforced. This can be set to
+      one of the following values: DISABLE: Do not setup a TLS connection to the
+      backends. SIMPLE: Originate a TLS connection to the backends. MUTUAL:
+      Secure connections to the backends using mutual TLS by presenting client
+      certificates for authentication.
+    type: string
+    enum:
+    - DISABLE
+    - INVALID
+    - MUTUAL
+    - SIMPLE
+  sni:
+    description: |-
+      SNI string to present to the server during TLS handshake. This field is
+      applicable only when mode is SIMPLE or MUTUAL.
+    type: string
+  subjectAltNames:
+    description: |-
+      A list of alternate names to verify the subject identity in the
+      certificate.If specified, the proxy will verify that the server
+      certificate's subject alt name matches one of the specified values. This
+      field is applicable only when mode is SIMPLE or MUTUAL.
+    type: array
+    items:
+      type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/ConfidentialInstanceConfig.yaml

@@ -0,0 +1,31 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha ConfidentialInstanceConfig export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  enableConfidentialCompute:
+    description: |-
+      Defines whether the instance should have confidential compute enabled.
+    type: boolean

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/ConnectionDraining.yaml

@@ -0,0 +1,33 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha ConnectionDraining export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  drainingTimeoutSec:
+    description: |-
+      Configures a duration timeout for existing requests on a removed backend
+      instance. For supported load balancers and protocols, as described in
+      Enabling connection draining.
+    type: integer

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/ConsistentHashLoadBalancerSettings.yaml

@@ -0,0 +1,48 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha ConsistentHashLoadBalancerSettings export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  httpCookie:
+    description: |-
+      Hash is based on HTTP Cookie. This field describes a HTTP cookie that will
+      be used as the hash key for the consistent hash load balancer. If the
+      cookie is not present, it will be generated. This field is applicable if
+      the sessionAffinity is set to HTTP_COOKIE. Not supported when the backend
+      service is referenced by a URL map that is bound to target gRPC proxy that
+      has validateForProxyless field set to true.
+    $ref: ConsistentHashLoadBalancerSettingsHttpCookie.yaml
+  httpHeaderName:
+    description: |-
+      The hash based on the value of the specified header field. This field is
+      applicable if the sessionAffinity is set to HEADER_FIELD.
+    type: string
+  minimumRingSize:
+    description: |-
+      The minimum number of virtual nodes to use for the hash ring. Defaults to
+      1024. Larger ring sizes result in more granular load distributions. If the
+      number of hosts in the load balancing pool is larger than the ring size,
+      each host will be assigned a single virtual node.
+    type: integer

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/ConsistentHashLoadBalancerSettingsHttpCookie.yaml

@@ -0,0 +1,36 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha ConsistentHashLoadBalancerSettingsHttpCookie export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  name:
+    description: Name of the cookie.
+    type: string
+  path:
+    description: Path to set for the cookie.
+    type: string
+  ttl:
+    description: Lifetime of the cookie.
+    $ref: Duration.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/CorsPolicy.yaml

@@ -0,0 +1,81 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha CorsPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  allowCredentials:
+    description: |-
+      In response to a preflight request, setting this to true indicates that
+      the actual request can include user credentials. This field translates to
+      the Access-Control-Allow-Credentials header. Default is false.
+    type: boolean
+  allowHeaders:
+    description: |-
+      Specifies the content for the Access-Control-Allow-Headers header.
+    type: array
+    items:
+      type: string
+  allowMethods:
+    description: |-
+      Specifies the content for the Access-Control-Allow-Methods header.
+    type: array
+    items:
+      type: string
+  allowOriginRegexes:
+    description: |-
+      Specifies a regular expression that matches allowed origins. For
+      more information about the regular expression syntax, see Syntax.
+      An origin is allowed if it matches either an item in allowOrigins
+      or an item in allowOriginRegexes.
+    type: array
+    items:
+      type: string
+  allowOrigins:
+    description: |-
+      Specifies the list of origins that is allowed to do CORS
+      requests. An origin is allowed if it matches either an item in
+      allowOrigins or an item in allowOriginRegexes.
+    type: array
+    items:
+      type: string
+  disabled:
+    description: |-
+      If true, the setting specifies the CORS policy is
+      disabled. The default value of false, which indicates that
+      the CORS policy is in effect.
+    type: boolean
+  exposeHeaders:
+    description: |-
+      Specifies the content for the Access-Control-Expose-
+      Headers header.
+    type: array
+    items:
+      type: string
+  maxAge:
+    description: |-
+      Specifies how long results of a preflight request can
+      be cached in seconds. This field translates to the
+      Access-Control-Max-Age header.
+    type: integer

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/CustomErrorResponsePolicy.yaml

@@ -0,0 +1,56 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha CustomErrorResponsePolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  errorResponseRules:
+    description: |-
+      Specifies rules for returning error responses. In a given policy, if you
+      specify rules for both a range of error codes as well as rules for
+      specific error codes then rules with specific error codes have a higher
+      priority. For example, assume that you configure a rule for 401 (Un-
+      authorized) code, and another for all 4 series error codes (4XX). If the
+      backend service returns a 401, then the rule for 401 will be applied.
+      However if the backend service returns a 403, the rule for 4xx takes
+      effect.
+    type: array
+    items:
+      $ref: CustomErrorResponsePolicyCustomErrorResponseRule.yaml
+  errorService:
+    description: |-
+      The full or partial URL to the BackendBucket resource that contains
+      the custom error content. Examples are: - https://www.googleapi s.com/
+      compute/v1/projects/project/global/backendBuckets/myBackendBucket -
+      compute/v1/projects/project/global/backendBuckets/myBackendBucket -
+      global/backendBuckets/myBackendBucket If errorService is not specified
+      at lower levels like pathMatcher, pathRule and routeRule, an
+      errorService specified at a higher level in the UrlMap will be used.
+      If UrlMap.defaultCustomErrorResponsePolicy contains one or more
+      errorResponseRules[], it must specify errorService. If load balancer
+      cannot reach the backendBucket, a simple Not Found Error will be
+      returned, with the original response code (or overrideResponseCode if
+      configured). errorService is not supported for internal or regional
+      HTTP/HTTPS load balancers.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/compute/alpha/CustomErrorResponsePolicyCustomErrorResponseRule.yaml

@@ -0,0 +1,56 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: compute alpha CustomErrorResponsePolicyCustomErrorResponseRule export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  matchResponseCodes:
+    description: |-
+      Valid values include: - A number between 400 and 599: For example 401 or
+      503, in which case the load balancer applies the policy if the error code
+      exactly matches this value. - 5xx: Load Balancer will apply the policy if
+      the backend service responds with any response code in the range of 500 to
+      599. - 4xx: Load Balancer will apply the policy if the backend service
+      responds with any response code in the range of 400 to 499. Values must be
+      unique within matchResponseCodes and across all errorResponseRules of
+      CustomErrorResponsePolicy.
+    type: array
+    items:
+      type: string
+  overrideResponseCode:
+    description: |-
+      The HTTP status code returned with the response containing the custom
+      error content. If overrideResponseCode is not supplied, the same
+      response code returned by the original backend bucket or backend
+      service is returned to the client.
+    type: integer
+  path:
+    description: |-
+      The full path to a file within backendBucket . For example:
+      /errors/defaultError.html path must start with a leading slash. path
+      cannot have trailing slashes. If the file is not available in
+      backendBucket or the load balancer cannot reach the BackendBucket, a
+      simple Not Found Error is returned to the client. The value must be
+      from 1 to 1024 characters
+    type: string