feat: Add new gcloud commands, API clients, and third-party libraries across various services.

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/AWSV4Signature.yaml

@@ -0,0 +1,44 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 AWSV4Signature export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- accessKeyId
+- originRegion
+- secretAccessKeyVersion
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  accessKeyId:
+    description: The access key ID that your origin uses to identify the key.
+    type: string
+  originRegion:
+    description: The name of the AWS region that your origin is in.
+    type: string
+  secretAccessKeyVersion:
+    description: |-
+      The Secret Manager secret version of the secret access key used by your
+      origin. This is the resource name of the secret version in the format
+      `projects/*/secrets/*/versions/*` where the `*` values are replaced by the
+      project, the secret, and the version that you require.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/AddValue.yaml

@@ -0,0 +1,33 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 AddValue export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties:
+  key:
+    description: Name of the additional property.
+    type: string
+  value:
+    description: A string attribute.
+    type: string
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/AuthzExtension.yaml

@@ -0,0 +1,120 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 AuthzExtension export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- authority
+- loadBalancingScheme
+- name
+- service
+- timeout
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  authority:
+    description: |-
+      The `:authority` header in the gRPC request sent from Envoy to the
+      extension service.
+    type: string
+  description:
+    description: A human-readable description of the resource.
+    type: string
+  failOpen:
+    description: |-
+      Determines how the proxy behaves if the call to the extension fails or
+      times out. When set to `TRUE`, request or response processing continues
+      without error. Any subsequent extensions in the extension chain are also
+      executed. When set to `FALSE` or the default setting of `FALSE` is used,
+      one of the following happens: * If response headers have not been
+      delivered to the downstream client, a generic 500 error is returned to the
+      client. The error response can be tailored by configuring a custom error
+      response in the load balancer. * If response headers have been delivered,
+      then the HTTP stream to the downstream client is reset.
+    type: boolean
+  forwardHeaders:
+    description: |-
+      List of the HTTP headers to forward to the extension (from the client). If
+      omitted, all headers are sent. Each element is a string indicating the
+      header name.
+    type: array
+    items:
+      type: string
+  labels:
+    description: |-
+      Set of labels associated with the `AuthzExtension` resource. The
+      format must comply with [the requirements for
+      labels](/compute/docs/labeling-resources#requirements) for Google
+      Cloud resources.
+    $ref: LabelsValue.yaml
+  loadBalancingScheme:
+    description: |-
+      All backend services and forwarding rules referenced by this extension
+      must share the same load balancing scheme. Supported values:
+      `INTERNAL_MANAGED`, `EXTERNAL_MANAGED`. For more information, refer to
+      [Backend services overview](https://cloud.google.com/load-
+      balancing/docs/backend-service).
+    type: string
+    enum:
+    - EXTERNAL_MANAGED
+    - INTERNAL_MANAGED
+    - LOAD_BALANCING_SCHEME_UNSPECIFIED
+  metadata:
+    description: |-
+      The metadata provided here is included as part of the
+      `metadata_context` (of type `google.protobuf.Struct`) in the
+      `ProcessingRequest` message sent to the extension server. The metadata
+      is available under the namespace `com.google.authz_extension.`. The
+      following variables are supported in the metadata Struct:
+      `{forwarding_rule_id}` - substituted with the forwarding rule's fully
+      qualified resource name.
+    type: object
+  name:
+    description: |-
+      Identifier. Name of the `AuthzExtension` resource in the following
+      format: `projects/{project}/locations/{location}/authzExtensio
+      ns/{authz_extension}`.
+    type: string
+  service:
+    description: |-
+      The reference to the service that runs the extension. To configure a
+      callout extension, `service` must be a fully-qualified reference to a
+      [backend service](https://cloud.google.com/compute/docs/r
+      eference/rest/v1/backendServices) in the format:
+      `https://www.googleapis .com/compute/v1/projects/{project}/regions/{re
+      gion}/backendServices/{bac kendService}` or
+      `https://www.googleapis.com/compute/v1/projects/{projec
+      t}/global/backendServices/{backendService}`.
+    type: string
+  timeout:
+    description: |-
+      Specifies the timeout for each individual message on the stream. The
+      timeout must be between 10-10000 milliseconds.
+    type: string
+  wireFormat:
+    description: |-
+      The format of communication supported by the callout extension. If not
+      specified, the default value `EXT_PROC_GRPC` is used.
+    type: string
+    enum:
+    - EXT_PROC_GRPC
+    - WIRE_FORMAT_UNSPECIFIED

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/CDNPolicy.yaml

@@ -0,0 +1,153 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 CDNPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  addSignatures:
+    description: |-
+      Enables signature generation or propagation on this route. This field can
+      only be specified when signed_request_mode is set to REQUIRE_TOKENS.
+    $ref: CDNPolicyAddSignaturesOptions.yaml
+  cacheKeyPolicy:
+    description: The request parameters that contribute to the cache key.
+    $ref: CDNPolicyCacheKeyPolicy.yaml
+  cacheMode:
+    description: |-
+      Set the CacheMode used by this route. BYPASS_CACHE and USE_ORIGIN_HEADERS
+      proxy the origin's headers. Other cache modes pass Cache-Control to the
+      client. Use client_ttl to override what is sent to the client.
+    type: string
+    enum:
+    - BYPASS_CACHE
+    - CACHE_ALL_STATIC
+    - CACHE_MODE_UNSPECIFIED
+    - FORCE_CACHE_ALL
+    - USE_ORIGIN_HEADERS
+  clientTtl:
+    description: |-
+      Specifies a separate client (such as browser client) TTL, separate from
+      the TTL used by the edge caches. Leaving this empty uses the same cache
+      TTL for both the CDN and the client-facing response. - The TTL must be >
+      `0` and <= `86400s` (1 day) - The `client_ttl` cannot be larger than the
+      default_ttl (if set) - Fractions of a second are not allowed. Omit this
+      field to use the `default_ttl`, or the max- age set by the origin, as the
+      client-facing TTL. When the CacheMode is set to USE_ORIGIN_HEADERS or
+      BYPASS_CACHE, you must omit this field.
+    type: string
+  defaultTtl:
+    description: |-
+      Specifies the default TTL for cached content served by this origin for
+      responses that do not have an existing valid TTL (max-age or s-max-age).
+      Defaults to `3600s` (1 hour). - The TTL must be >= `0` and <= `31,536,000`
+      seconds (1 year) - Setting a TTL of `0` means "always revalidate"
+      (equivalent to must-revalidate) - The value of `default_ttl` cannot be set
+      to a value greater than that of max_ttl. - Fractions of a second are not
+      allowed. - When the CacheMode is set to FORCE_CACHE_ALL, the `default_ttl`
+      overwrites the TTL set in all responses. Infrequently accessed objects
+      might be evicted from the cache before the defined TTL. Objects that
+      expire are revalidated with the origin. When the CacheMode is set to
+      USE_ORIGIN_HEADERS or BYPASS_CACHE, you must omit this field.
+    type: string
+  maxTtl:
+    description: |-
+      The maximum allowed TTL for cached content served by this origin. Defaults
+      to `86400s` (1 day). Cache directives that attempt to set a max-age or
+      s-maxage higher than this, or an Expires header more than `max_ttl`
+      seconds in the future are capped at the value of `max_ttl`, as if it were
+      the value of an s-maxage Cache-Control directive. - The TTL must be >= `0`
+      and <= `31,536,000` seconds (1 year) - Setting a TTL of `0` means "always
+      revalidate" - The value of `max_ttl` must be equal to or greater than
+      default_ttl. - Fractions of a second are not allowed. When CacheMode is
+      set to [USE_ORIGIN_HEADERS].[CacheMode.USE_ORIGIN_HEADERS],
+      FORCE_CACHE_ALL, or BYPASS_CACHE, you must omit this field.
+    type: string
+  negativeCaching:
+    description: |-
+      Negative caching allows setting per-status code TTLs, in order to apply
+      fine-grained caching for common errors or redirects. This can reduce the
+      load on your origin and improve end-user experience by reducing response
+      latency. By default, the CDNPolicy applies the following default TTLs to
+      these status codes: - **10m**: HTTP 300 (Multiple Choice), 301, 308
+      (Permanent Redirects) - **120s**: HTTP 404 (Not Found), 410 (Gone), 451
+      (Unavailable For Legal Reasons) - **60s**: HTTP 405 (Method Not Found),
+      501 (Not Implemented) These defaults can be overridden in
+      negative_caching_policy
+    type: boolean
+  negativeCachingPolicy:
+    description: |-
+      A cache TTL for the specified HTTP status code. negative_caching must be
+      enabled to configure `negative_caching_policy`. The following limitations
+      apply: - Omitting the policy and leaving `negative_caching` enabled uses
+      the default TTLs for each status code, defined in `negative_caching`. -
+      TTLs must be >= `0` (where `0` is "always revalidate") and <= `86400s` (1
+      day) You can set only the following status codes: - HTTP redirection
+      (`300`, `301`, `302`, `307`, or `308`) - Client error (`400`, `403`,
+      `404`, `405`, `410`, `421`, or `451`) - Server error (`500`, `501`, `502`,
+      `503`, or `504`) When you specify an explicit `negative_caching_policy`,
+      ensure that you also specify a cache TTL for all response codes that you
+      wish to cache. The CDNPolicy doesn't apply any default negative caching
+      when a policy exists.
+    $ref: NegativeCachingPolicyValue.yaml
+  signedRequestKeyset:
+    description: |-
+      The EdgeCacheKeyset containing the set of public keys used to validate
+      signed requests at the edge. The following are both valid paths to an
+      `EdgeCacheKeyset` resource: *
+      `projects/project/locations/global/edgeCacheKeysets/yourKeyset` *
+      `yourKeyset` SignedRequestMode must be set to a value other than DISABLED
+      when a keyset is provided.
+    type: string
+  signedRequestMaximumExpirationTtl:
+    description: |-
+      Limits how far into the future the expiration time of a signed request can
+      be. When set, a signed request is rejected if its expiration time is later
+      than `now` + `signed_request_maximum_expiration_ttl`, where `now` is the
+      time at which the signed request is first handled by the CDN. - The TTL
+      must be > 0. - Fractions of a second are not allowed. By default,
+      `signed_request_maximum_expiration_ttl` is not set and the expiration time
+      of a signed request might be arbitrarily far into future.
+    type: string
+  signedRequestMode:
+    description: |-
+      Specifies whether to enforce signed requests. The default value is
+      DISABLED, which means all content is public, and does not authorize
+      access. You must also set a signed_request_keyset to enable signed
+      requests. When set to REQUIRE_SIGNATURES or REQUIRE_TOKENS, all matching
+      requests get their signature validated. Requests that aren't signed with
+      the corresponding private key, or that are otherwise invalid (such as
+      expired or do not match the signature, IP address, or header) are rejected
+      with an HTTP 403 error. If logging is turned on, then invalid requests are
+      also logged.
+    type: string
+    enum:
+    - DISABLED
+    - REQUIRE_SIGNATURES
+    - REQUIRE_TOKENS
+    - SIGNED_REQUEST_MODE_UNSPECIFIED
+  signedTokenOptions:
+    description: |-
+      Any additional options for signed tokens. `signed_token_options` can only
+      be specified when `signed_request_mode` is `REQUIRE_TOKENS`.
+    $ref: CDNPolicySignedTokenOptions.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/CDNPolicyAddSignaturesOptions.yaml

@@ -0,0 +1,83 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 CDNPolicyAddSignaturesOptions export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- actions
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  actions:
+    description: |-
+      The actions to take to add signatures to responses. You must specify
+      exactly one action.
+    type: array
+    items:
+      type: string
+      enum:
+      - GENERATE_COOKIE
+      - GENERATE_TOKEN_HLS_COOKIELESS
+      - PROPAGATE_TOKEN_HLS_COOKIELESS
+      - SIGNATURE_ACTION_UNSPECIFIED
+  copiedParameters:
+    description: |-
+      The parameters to copy from the verified token to the generated token.
+      Only the following parameters can be copied: * `PathGlobs` * `paths` *
+      `acl` * `URLPrefix` * `IPRanges` * `SessionID` * `id` * `Data` *
+      `data` * `payload` * `Headers` You can specify up to 6 parameters to
+      copy. A given parameter is be copied only if the parameter exists in
+      the verified token. Parameter names are matched exactly as specified.
+      The order of the parameters does not matter. Duplicates are not
+      allowed. This field can only be specified when the `GENERATE_COOKIE`
+      or `GENERATE_TOKEN_HLS_COOKIELESS` actions are specified.
+    type: array
+    items:
+      type: string
+  keyset:
+    description: |-
+      The keyset to use for signature generation. The following are both
+      valid paths to an EdgeCacheKeyset resource: *
+      `projects/project/locations/global/edgeCacheKeysets/yourKeyset` *
+      `yourKeyset` This must be specified when the `GENERATE_COOKIE` or
+      `GENERATE_TOKEN_HLS_COOKIELESS` actions are specified. This field
+      can not be specified otherwise.
+    type: string
+  tokenQueryParameter:
+    description: |-
+      The query parameter in which to put the generated token. If not
+      specified, defaults to `edge-cache-token`. If specified, the name
+      must be 1-64 characters long and match the regular expression
+      `[a-zA-Z]([a-zA-Z0-9_-])*` which means the first character must be
+      a letter, and all following characters must be a dash, underscore,
+      letter or digit. This field can only be set when the
+      `GENERATE_TOKEN_HLS_COOKIELESS` or
+      `PROPAGATE_TOKEN_HLS_COOKIELESS` actions are specified.
+    type: string
+  tokenTtl:
+    description: |-
+      The duration the token is valid for starting from the moment the
+      token is first generated. Defaults to `86400s` (1 day). The TTL
+      must be >= 0 and <= 604,800 seconds (1 week). This field can only
+      be specified when the `GENERATE_COOKIE` or
+      `GENERATE_TOKEN_HLS_COOKIELESS` actions are specified.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/CDNPolicyCacheKeyPolicy.yaml

@@ -0,0 +1,97 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 CDNPolicyCacheKeyPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  excludeHost:
+    description: |-
+      If `true`, exclude a request's host from the cache key. Requests with
+      different hosts share content in the cache. If `false` (the default), a
+      request's host is included in the cache key. Requests with different hosts
+      are stored independently. **Important:** Enable this only if the hosts
+      share the same origin and content. Removing the host from the cache key
+      might inadvertently result in different objects being cached than
+      intended, depending on which route the first user matched.
+    type: boolean
+  excludeQueryString:
+    description: |-
+      If `true`, exclude query string parameters from the cache key. If `false`
+      (the default), include the query string parameters in the cache key
+      according to included_query_parameters and excluded_query_parameters. If
+      neither is set, the entire query string is included.
+    type: boolean
+  excludedQueryParameters:
+    description: |-
+      The names of query string parameters to exclude from cache keys. All other
+      parameters are included. Specify either included_query_parameters or
+      excluded_query_parameters, not both. `&` and `=` are percent encoded and
+      not treated as delimiters. You can exclude up to 20 query parameters. Each
+      query parameter name must be between 1 and 32 characters long (inclusive).
+    type: array
+    items:
+      type: string
+  includeProtocol:
+    description: If `true`, HTTP and HTTPS requests are cached separately.
+    type: boolean
+  includedCookieNames:
+    description: |-
+      The names of cookies to include in cache keys. The cookie name and
+      cookie value of each cookie named is used as part of the cache key.
+      The following limitations apply: - Must be valid RFC 6265 "cookie-
+      name" tokens - Are case sensitive - Cannot start with "Edge-Cache-"
+      (case insensitive) Specifying several cookies or cookies that have a
+      large range of values, such as per-user, dramatically impacts the
+      cache hit rate, and might result in a higher eviction rate and reduced
+      performance. You can specify up to three cookie names.
+    type: array
+    items:
+      type: string
+  includedHeaderNames:
+    description: |-
+      The names of HTTP request headers to include in cache keys. The
+      value of the header field is used as part of the cache key. The
+      following limitations apply: - Header names must be valid HTTP RFC
+      7230 header field values. - Header field names are case
+      insensitive - You can specify up to five header names. - To
+      include the HTTP method, use `:method` Refer to the documentation
+      for the allowed list of header names. Specifying several headers
+      or headers that have a large range of values, such as per-user,
+      dramatically impacts the cache hit rate, and might result in a
+      higher eviction rate and reduced performance.
+    type: array
+    items:
+      type: string
+  includedQueryParameters:
+    description: |-
+      The names of query string parameters to include in cache keys.
+      All other parameters are excluded. Specify either
+      included_query_parameters or excluded_query_parameters, not
+      both. `&` and `=` are percent encoded and not treated as
+      delimiters. You can include up to 20 query parameters. Each
+      query parameter name must be between 1 and 32 characters long
+      (inclusive).
+    type: array
+    items:
+      type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/CDNPolicySignedTokenOptions.yaml

@@ -0,0 +1,47 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 CDNPolicySignedTokenOptions export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  allowedSignatureAlgorithms:
+    description: |-
+      The allowed signature algorithms to use. Defaults to using only ED25519.
+      You can specify up to 3 signature algorithms to use.
+    type: array
+    items:
+      type: string
+      enum:
+      - ED25519
+      - HMAC_SHA1
+      - HMAC_SHA_256
+      - SIGNATURE_ALGORITHM_UNSPECIFIED
+  tokenQueryParameter:
+    description: |-
+      The query parameter in which to find the token. The name must be 1-64
+      characters long and match the regular expression
+      `[a-zA-Z]([a-zA-Z0-9_-])*` which means the first character must be a
+      letter, and all following characters must be a dash, underscore,
+      letter or digit. Defaults to `edge-cache-token`.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/CORSPolicy.yaml

@@ -0,0 +1,84 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 CORSPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- maxAge
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  allowCredentials:
+    description: |-
+      In response to a preflight request, setting this to `true` indicates that
+      the actual request can include user credentials. This translates to the
+      `Access-Control-Allow-Credentials` response header.
+    type: boolean
+  allowHeaders:
+    description: |-
+      The content for the `Access-Control-Allow-Headers` response header. You
+      can specify up to 25 headers to include in the `Access-Control-Allow-
+      Headers` header.
+    type: array
+    items:
+      type: string
+  allowMethods:
+    description: |-
+      The content for the `Access-Control-Allow-Methods` response header.
+      You can specify up to five allowed methods.
+    type: array
+    items:
+      type: string
+  allowOrigins:
+    description: |-
+      A list of origins that are allowed to do CORS requests. This
+      translates to the `Access-Control-Allow-Origin` response header.
+      You can specify up to 25 allowed origins.
+    type: array
+    items:
+      type: string
+  disabled:
+    description: |-
+      If `true`, specifies that the CORS policy is disabled. The
+      default value is `false`, which indicates that the CORS policy
+      is in effect.
+    type: boolean
+  exposeHeaders:
+    description: |-
+      The content for the Access-Control-Expose-Headers response
+      header. You can specify up to 25 headers to expose in the
+      `Access-Control-Expose-Headers` header.
+    type: array
+    items:
+      type: string
+  maxAge:
+    description: |-
+      Specifies how long results of a preflight request can be
+      cached by a client in seconds. Note that many browser
+      clients enforce a maximum TTL of 600s (10 minutes). The
+      following limitations apply: - Setting the value to `-1`
+      forces a pre-flight check for all requests (not
+      recommended) - A maximum TTL of `86400s` can be set;
+      however, some clients might force pre-flight checks at a
+      more regular interval. This translates to the `Access-
+      Control-Max-Age` header.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/EdgeCacheKeyset.yaml

@@ -0,0 +1,72 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 EdgeCacheKeyset export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- name
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  description:
+    description: A human-readable description of the resource.
+    type: string
+  labels:
+    description: |-
+      A set of label tags associated with the EdgeCacheKeyset resource.
+    $ref: LabelsValue.yaml
+  name:
+    description: |-
+      The name of the resource as provided by the client when the resource is
+      created. The name must be 1-64 characters long, and match the regular
+      expression `[a-zA-Z]([a-zA-Z0-9_-])*` which means the first character must
+      be a letter, and all following characters must be a dash, an underscore, a
+      letter, or a digit.
+    type: string
+  publicKeys:
+    description: |-
+      An ordered list of Ed25519 public keys to use for validating signed
+      requests. Ed25519 public keys are not secret and only allow Google to
+      validate that a request was signed by your corresponding private key.
+      Ensure that the private key is kept secret and that only authorized users
+      can add public keys to a keyset. You can rotate keys by appending
+      (pushing) a new key to the list of public keys, and removing any
+      superseded keys. You must specify `public_keys` or validation_shared_keys
+      (or both). The keys in `public_keys` are checked first. You can specify at
+      most one Google-managed public key. If you specify `public_keys`, you must
+      specify at least one key and can specify up to three keys.
+    type: array
+    items:
+      $ref: PublicKey.yaml
+  validationSharedKeys:
+    description: |-
+      An ordered list of shared keys to use for validating signed requests.
+      Shared keys are secret. Ensure that only authorized users can add
+      `validation_shared_keys` to a keyset. You can rotate keys by appending
+      (pushing) a new key to the list of `validation_shared_keys` and
+      removing any superseded keys. You must specify public_keys or
+      `validation_shared_keys` (or both). The keys in `public_keys` are
+      checked first. If you specify `validation_shared_keys`, you must
+      specify at least one key and can specify up to three keys.
+    type: array
+    items:
+      $ref: Secret.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/EdgeCacheOrigin.yaml

@@ -0,0 +1,144 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 EdgeCacheOrigin export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- name
+- originAddress
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  awsV4Authentication:
+    description: Enable AWS Signature Version 4 origin authentication.
+    $ref: AWSV4Signature.yaml
+  description:
+    description: A human-readable description of the resource.
+    type: string
+  failoverOrigin:
+    description: |-
+      The EdgeCacheOrigin resource to try when the current origin cannot be
+      reached. After max_attempts is reached, the configured failover_origin is
+      used to fulfil the request. The following are both valid paths to an
+      `EdgeCacheOrigin` resource: * `projects/my-
+      project/locations/global/edgeCacheOrigins/my-origin` * `my-origin` The
+      value of max_attempts_timeout dictates the timeout across all origins.
+    type: string
+  flexShielding:
+    description: |-
+      The FlexShieldingOptions to be used for all routes to this origin. If not
+      set, defaults to a global caching layer in front of the origin.
+    $ref: FlexShieldingOptions.yaml
+  labels:
+    description: |-
+      A set of label tags associated with the EdgeCacheOrigin resource.
+    $ref: LabelsValue.yaml
+  maxAttempts:
+    description: |-
+      The maximum number of attempts to cache fill from this origin. Another
+      attempt is made when a cache fill fails with one of the retry_conditions
+      or following a redirect response matching one of the
+      origin_redirect.redirect_conditions. Once the maximum attempts to this
+      origin have failed, the failover origin][], if specified, is used. The
+      failover origin can have its own `max_attempts`, `retry_conditions`,
+      `redirect_conditions`, and `failover_origin` values to control its cache
+      fill failures. The total number of allowed attempts to cache fill across
+      this and failover origins is limited to four. The total time allowed for
+      cache fill attempts across this and failover origins can be controlled
+      with `max_attempts_timeout`. The last valid, non-retried response from all
+      origins is returned to the client. If no origin returns a valid response,
+      an `HTTP 502` error is returned to the client. Defaults to 1. Must be a
+      value greater than 0 and less than 5.
+    type: integer
+  name:
+    description: |-
+      The name of the resource as provided by the client when the resource is
+      created. The name must be 1-64 characters long, and match the regular
+      expression `[a-zA-Z]([a-zA-Z0-9_-])*`, which means that the first
+      character must be a letter, and all following characters must be a dash,
+      an underscore, a letter, or a digit.
+    type: string
+  originAddress:
+    description: |-
+      A fully qualified domain name (FQDN), an IPv4 or IPv6 address reachable
+      over the public internet, or the address of a Google Cloud Storage bucket.
+      This address is used as the origin for cache requests. The following are
+      example origins: - **FQDN**: `media- backend.example.com` - **IPv4**:
+      `35.218.1.1` - **IPv6**: `2607:f8b0:4012:809::200e` - **Google Cloud
+      Storage**: `gs://bucketname` or `bucketname.storage.googleapis.com` The
+      following limitations apply to fully-qualified domain names: * They must
+      be resolvable through public DNS. * They must not contain a protocol (such
+      as `https://`). * They must not contain any slashes. When providing an IP
+      address, it must be publicly routable. IPv6 addresses must not be enclosed
+      in square brackets.
+    type: string
+  originOverrideAction:
+    description: |-
+      The override actions, including URL rewrites and header additions, for
+      requests that use this origin.
+    $ref: OriginOverrideAction.yaml
+  originRedirect:
+    description: Follow redirects from this origin.
+    $ref: OriginRedirect.yaml
+  port:
+    description: |-
+      The port to connect to the origin on. Defaults to port **443** for HTTP2
+      and HTTPS protocols and port **80** for HTTP.
+    type: integer
+  protocol:
+    description: |-
+      The protocol to use to connect to the configured origin. Defaults to
+      HTTP2, which is strongly recommended for both security and performance.
+      When using HTTP2 or HTTPS as the protocol, a valid, publicly-signed,
+      unexpired TLS (SSL) certificate must be presented by the origin server.
+    type: string
+    enum:
+    - HTTP
+    - HTTP2
+    - HTTPS
+    - PROTOCOL_UNSPECIFIED
+  retryConditions:
+    description: |-
+      Specifies one or more retry conditions for the configured origin. If the
+      failure mode during a connection attempt to the origin matches the
+      configured `retryConditions` values, the origin request retries up to
+      max_attempts times. The failover origin, if configured, is then used to
+      satisfy the request. The default `retry_conditions` value is
+      `CONNECT_FAILURE`. `retry_conditions` values apply to this origin, and not
+      to subsequent failover origins, which can specify their own
+      `retry_conditions` and `max_attempts` values. For a list of valid values,
+      see RetryConditions.
+    type: array
+    items:
+      type: string
+      enum:
+      - CONNECT_FAILURE
+      - FORBIDDEN
+      - GATEWAY_ERROR
+      - HTTP_5XX
+      - NOT_FOUND
+      - RETRIABLE_4XX
+      - RETRY_CONDITIONS_UNSPECIFIED
+  timeout:
+    description: |-
+      The connection and HTTP timeout configuration for this origin.
+    $ref: Timeout.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/EdgeCacheService.yaml

@@ -0,0 +1,91 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 EdgeCacheService export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- name
+- routing
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  description:
+    description: A human-readable description of the resource.
+    type: string
+  disableHttp2:
+    description: |-
+      Disables HTTP/2. HTTP/2 (h2) is enabled by default and recommended for
+      performance. HTTP/2 improves connection re-use and reduces connection
+      setup overhead by sending multiple streams over the same connection. Some
+      legacy HTTP clients might have issues with HTTP/2 connections due to
+      broken HTTP/2 implementations. Setting this to `true` prevents HTTP/2 from
+      being advertised and negotiated.
+    type: boolean
+  disableQuic:
+    description: HTTP/3 (IETF QUIC) and Google QUIC are enabled by default.
+    type: boolean
+  edgeSecurityPolicy:
+    description: |-
+      The resource URL that points at the Cloud Armor edge security policy that
+      is applied on each request against the EdgeCacheService resource.
+    type: string
+  edgeSslCertificates:
+    description: |-
+      Certificate resources that are used to authenticate connections between
+      users and the EdgeCacheService resource. Note that only global
+      certificates with a scope of `EDGE_CACHE` can be attached to an
+      EdgeCacheService resource. The following are both valid paths to an
+      `edge_ssl_certificates` resource: *
+      `projects/project/locations/global/certificates/media-example-com-cert` *
+      `media-example-com-cert` You can specify up to five SSL certificates.
+    type: array
+    items:
+      type: string
+  labels:
+    description: |-
+      A set of label tags associated with the `EdgeCacheService` resource.
+    $ref: LabelsValue.yaml
+  logConfig:
+    description: |-
+      The logging options for the traffic served by this service. If logging
+      is enabled, logs are exported to Cloud Logging.
+    $ref: LogConfig.yaml
+  name:
+    description: |-
+      The name of the resource as provided by the client when the resource
+      is created. The name must be 1-64 characters long, and match the
+      regular expression `[a-zA-Z]([a-zA-Z0-9_-])*` which means the first
+      character must be a letter, and all following characters must be a
+      dash, an underscore, a letter, or a digit.
+    type: string
+  requireTls:
+    description: |-
+      Require TLS (HTTPS) for all clients connecting to this service.
+      Clients who connect over HTTP (port 80) see an `HTTP 301` response to
+      the same URL over HTTPS (port 443). You must have at least one
+      edge_ssl_certificates specified to enable this.
+    type: boolean
+  routing:
+    description: |-
+      Defines how requests are routed, modified, and cached, and which
+      origin the content is filled from.
+    $ref: Routing.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/EndpointMatcher.yaml

@@ -0,0 +1,30 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 EndpointMatcher export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  metadataLabelMatcher:
+    description: The matcher is based on node metadata presented by xDS clients.
+    $ref: EndpointMatcherMetadataLabelMatcher.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/EndpointMatcherMetadataLabelMatcher.yaml

@@ -0,0 +1,63 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 EndpointMatcherMetadataLabelMatcher export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  metadataLabelMatchCriteria:
+    description: |-
+      Specifies how matching should be done.
+      Supported values are:
+      MATCH_ANY: At least one of the Labels specified in the
+        matcher should match the metadata presented by xDS client.
+      MATCH_ALL: The metadata presented by the xDS client should
+        contain all of the labels specified here.
+      The selection is determined based on the best match. For
+      example, suppose there are three EndpointPolicy
+      resources P1, P2 and P3 and if P1 has a the matcher as
+      MATCH_ANY <A:1, B:1>, P2 has MATCH_ALL <A:1,B:1>, and P3 has
+      MATCH_ALL <A:1,B:1,C:1>.
+      If a client with label <A:1> connects, the config from P1
+      will be selected.
+      If a client with label <A:1,B:1> connects, the config from P2
+      will be selected.
+      If a client with label <A:1,B:1,C:1> connects, the config
+      from P3 will be selected.
+      If there is more than one best match, (for example, if a
+      config P4 with selector <A:1,D:1> exists and if a client with
+      label <A:1,B:1,D:1> connects), an error will be thrown.
+    type: string
+    enum:
+    - MATCH_ALL
+    - MATCH_ANY
+    - METADATA_LABEL_MATCH_CRITERIA_UNSPECIFIED
+  metadataLabels:
+    description: |-
+      The list of label value pairs that must match labels in the provided
+      metadata based on filterMatchCriteria This list can have at most 64
+      entries. The list can be empty if the match criteria is MATCH_ANY, to
+      specify a wildcard match (i.e this matches any client).
+    type: array
+    items:
+      $ref: EndpointMatcherMetadataLabelMatcherMetadataLabels.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/EndpointMatcherMetadataLabelMatcherMetadataLabels.yaml

@@ -0,0 +1,39 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 EndpointMatcherMetadataLabelMatcherMetadataLabels export
+  schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- labelName
+- labelValue
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  labelName:
+    description: Label name presented as key in xDS Node Metadata.
+    type: string
+  labelValue:
+    description: |-
+      Label value presented as value corresponding to the above key, in xDS Node
+      Metadata.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/EndpointPolicy.yaml

@@ -0,0 +1,87 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 EndpointPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- endpointMatcher
+- name
+- type
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  authorizationPolicy:
+    description: |-
+      This field specifies the URL of AuthorizationPolicy resource that applies
+      authorization policies to the inbound traffic at the matched endpoints.
+      Refer to Authorization. If this field is not specified, authorization is
+      disabled(no authz checks) for this endpoint. Applicable only when
+      EndpointPolicyType is SIDECAR_PROXY.
+    type: string
+  clientTlsPolicy:
+    description: |-
+      A URL referring to a ClientTlsPolicy resource. ClientTlsPolicy can be set
+      to specify the authentication for traffic from the proxy to the actual
+      endpoints. More specifically, it is applied to the outgoing traffic from
+      the proxy to the endpoint. This is typically used for sidecar model where
+      the proxy identifies itself as endpoint to the control plane, with the
+      connection between sidecar and endpoint requiring authentication. If this
+      field is not set, authentication is disabled(open). Applicable only when
+      EndpointPolicyType is SIDECAR_PROXY.
+    type: string
+  description:
+    description: |-
+      A free-text description of the resource. Max length 1024 characters.
+    type: string
+  endpointMatcher:
+    description: |-
+      A matcher that selects endpoints to which the policies should be applied.
+    $ref: EndpointMatcher.yaml
+  labels:
+    description: Set of label tags associated with the EndpointPolicy resource.
+    $ref: LabelsValue.yaml
+  name:
+    description: |-
+      Name of the EndpointPolicy resource. It matches pattern
+      `projects/{project}/locations/global/endpointPolicies/{endpoint_policy}` .
+    type: string
+  serverTlsPolicy:
+    description: |-
+      A URL referring to ServerTlsPolicy resource. ServerTlsPolicy is used to
+      determine the authentication policy to be applied to terminate the inbound
+      traffic at the identified backends. If this field is not set,
+      authentication is disabled(open) for this endpoint.
+    type: string
+  trafficPortSelector:
+    description: |-
+      Port selector for the (matched) endpoints. If no port selector is
+      provided, the matched config is applied to all ports.
+    $ref: TrafficPortSelector.yaml
+  type:
+    description: |-
+      The type of endpoint policy. This is primarily used to validate the
+      configuration.
+    type: string
+    enum:
+    - ENDPOINT_POLICY_TYPE_UNSPECIFIED
+    - GRPC_SERVER
+    - SIDECAR_PROXY

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/ExtensionChain.yaml

@@ -0,0 +1,51 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 ExtensionChain export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- extensions
+- matchCondition
+- name
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  extensions:
+    description: |-
+      A set of extensions to execute for the matching request. At least one
+      extension is required. Up to 3 extensions can be defined for each
+      extension chain for `LbTrafficExtension` resource. `LbRouteExtension` and
+      `LbEdgeExtension` chains are limited to 1 extension per extension chain.
+    type: array
+    items:
+      $ref: ExtensionChainExtension.yaml
+  matchCondition:
+    description: Conditions under which this chain is invoked for a request.
+    $ref: ExtensionChainMatchCondition.yaml
+  name:
+    description: |-
+      The name for this extension chain. The name is logged as part of the
+      HTTP request logs. The name must conform with RFC-1034, is restricted
+      to lower-cased letters, numbers and hyphens, and can have a maximum
+      length of 63 characters. Additionally, the first character must be a
+      letter and the last a letter or a number.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/ExtensionChainExtension.yaml

@@ -0,0 +1,182 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 ExtensionChainExtension export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- service
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  authority:
+    description: |-
+      The `:authority` header in the gRPC request sent from Envoy to the
+      extension service. Required for Callout extensions. This field is not
+      supported for plugin extensions. Setting it results in a validation error.
+    type: string
+  failOpen:
+    description: |-
+      Determines how the proxy behaves if the call to the extension fails or
+      times out. When set to `TRUE`, request or response processing continues
+      without error. Any subsequent extensions in the extension chain are also
+      executed. When set to `FALSE` or the default setting of `FALSE` is used,
+      one of the following happens: * If response headers have not been
+      delivered to the downstream client, a generic 500 error is returned to the
+      client. The error response can be tailored by configuring a custom error
+      response in the load balancer. * If response headers have been delivered,
+      then the HTTP stream to the downstream client is reset.
+    type: boolean
+  forwardHeaders:
+    description: |-
+      List of the HTTP headers to forward to the extension (from the client or
+      backend). If omitted, all headers are sent. Each element is a string
+      indicating the header name.
+    type: array
+    items:
+      type: string
+  metadata:
+    description: |-
+      The metadata provided here is included as part of the
+      `metadata_context` (of type `google.protobuf.Struct`) in the
+      `ProcessingRequest` message sent to the extension server. For
+      `AuthzExtension` resources, the metadata is available under the
+      namespace `com.google.authz_extension.`. For other types of
+      extensions, the metadata is available under the namespace
+      `com.google....`. For example:
+      `com.google.lb_traffic_extension.lbtrafficextension1.chain1.ext1`. The
+      following variables are supported in the metadata:
+      `{forwarding_rule_id}` - substituted with the forwarding rule's fully
+      qualified resource name. This field must not be set for plugin
+      extensions. Setting it results in a validation error. You can set
+      metadata at either the resource level or the extension level. The
+      extension level metadata is recommended because you can pass a
+      different set of metadata through each extension to the backend. This
+      field is subject to following limitations: * The total size of the
+      metadata must be less than 1KiB. * The total number of keys in the
+      metadata must be less than 16. * The length of each key must be less
+      than 64 characters. * The length of each value must be less than 1024
+      characters. * All values must be strings.
+    type: object
+  name:
+    description: |-
+      The name for this extension. The name is logged as part of the HTTP
+      request logs. The name must conform with RFC-1034, is restricted to
+      lower-cased letters, numbers and hyphens, and can have a maximum
+      length of 63 characters. Additionally, the first character must be a
+      letter and the last a letter or a number. This field is required
+      except for AuthzExtension.
+    type: string
+  observabilityMode:
+    description: |-
+      When set to `TRUE`, enables `observability_mode` on the `ext_proc`
+      filter. This makes `ext_proc` calls asynchronous. Envoy doesn't check
+      for the response from `ext_proc` calls. For more information about the
+      filter, see: https://www.envoyprox y.io/docs/envoy/v1.32.3/api-
+      v3/extensions/filters/http/ext_proc/v3/ext_proc.proto#extensions-
+      filters-http-ext-proc-v3-externalprocessor This field is helpful when
+      you want to try out the extension in async log-only mode. Supported by
+      regional `LbTrafficExtension` and `LbRouteExtension` resources. Only
+      `STREAMED` (default) body processing mode is supported.
+    type: boolean
+  requestBodySendMode:
+    description: |-
+      Configures the send mode for request body processing. The field can
+      only be set if `supported_events` includes `REQUEST_BODY`. If
+      `supported_events` includes `REQUEST_BODY`, but
+      `request_body_send_mode` is unset, the default value `STREAMED` is
+      used. When this field is set to `FULL_DUPLEX_STREAMED`,
+      `supported_events` must include both `REQUEST_BODY` and
+      `REQUEST_TRAILERS`. This field can be set only for
+      `LbTrafficExtension` and `LbRouteExtension` resources, and only when
+      the `service` field of the extension points to a `BackendService`.
+      Only `FULL_DUPLEX_STREAMED` mode is supported for `LbRouteExtension`
+      resources.
+    type: string
+    enum:
+    - BODY_SEND_MODE_FULL_DUPLEX_STREAMED
+    - BODY_SEND_MODE_STREAMED
+    - BODY_SEND_MODE_UNSPECIFIED
+  responseBodySendMode:
+    description: |-
+      Configures the send mode for response processing. If unspecified, the
+      default value `STREAMED` is used. The field can only be set if
+      `supported_events` includes `RESPONSE_BODY`. If `supported_events`
+      includes `RESPONSE_BODY`, but `response_body_send_mode` is unset, the
+      default value `STREAMED` is used. When this field is set to
+      `FULL_DUPLEX_STREAMED`, `supported_events` must include both
+      `RESPONSE_BODY` and `RESPONSE_TRAILERS`. This field can be set only
+      for `LbTrafficExtension` resources, and only when the `service` field
+      of the extension points to a `BackendService`.
+    type: string
+    enum:
+    - BODY_SEND_MODE_FULL_DUPLEX_STREAMED
+    - BODY_SEND_MODE_STREAMED
+    - BODY_SEND_MODE_UNSPECIFIED
+  service:
+    description: |-
+      The reference to the service that runs the extension. To configure a
+      callout extension, `service` must be a fully-qualified reference to a
+      [backend service](https://cloud.google.com/compute/docs/r
+      eference/rest/v1/backendServices) in the format:
+      `https://www.googleapis .com/compute/v1/projects/{project}/regions/{re
+      gion}/backendServices/{bac kendService}` or
+      `https://www.googleapis.com/compute/v1/projects/{projec
+      t}/global/backendServices/{backendService}`. To configure a plugin
+      extension, `service` must be a reference to a [`WasmPlugin`
+      resource](https://cloud.google.com/service-
+      extensions/docs/reference/rest/v1beta1/projects.locations.wasmPlugins)
+      in the format:
+      `projects/{project}/locations/{location}/wasmPlugins/{plugin}` or
+      `//net workservices.googleapis.com/projects/{project}/locations/{locat
+      ion}/wasm Plugins/{wasmPlugin}`. Plugin extensions are currently
+      supported for the `LbTrafficExtension`, the `LbRouteExtension`, and
+      the `LbEdgeExtension` resources.
+    type: string
+  supportedEvents:
+    description: |-
+      A set of events during request or response processing for which this
+      extension is called. For the `LbTrafficExtension` resource, this field
+      is required. For the `LbRouteExtension` resource, this field is
+      optional. If unspecified, `REQUEST_HEADERS` event is assumed as
+      supported. For the `LbEdgeExtension` resource, this field is required
+      and must only contain `REQUEST_HEADERS` event. For the
+      `AuthzExtension` resource, this field is optional. `REQUEST_HEADERS`
+      is the only supported event. If unspecified, `REQUEST_HEADERS` event
+      is assumed as supported.
+    type: array
+    items:
+      type: string
+      enum:
+      - EVENT_TYPE_UNSPECIFIED
+      - REQUEST_BODY
+      - REQUEST_HEADERS
+      - REQUEST_TRAILERS
+      - RESPONSE_BODY
+      - RESPONSE_HEADERS
+      - RESPONSE_TRAILERS
+  timeout:
+    description: |-
+      Specifies the timeout for each individual message on the stream.
+      The timeout must be between `10`-`10000` milliseconds. Required
+      for callout extensions. This field is not supported for plugin
+      extensions. Setting it results in a validation error.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/ExtensionChainMatchCondition.yaml

@@ -0,0 +1,36 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 ExtensionChainMatchCondition export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- celExpression
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  celExpression:
+    description: |-
+      A Common Expression Language (CEL) expression that is used to match
+      requests for which the extension chain is executed. For more information,
+      see [CEL matcher language reference](https://cloud.google.com/service-
+      extensions/docs/cel-matcher-language-reference).
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/FlexShieldingOptions.yaml

@@ -0,0 +1,39 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 FlexShieldingOptions export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  flexShieldingRegions:
+    description: |-
+      Whenever possible, content will be fetched from origin and cached in or
+      near the specified region. Best effort. You must specify exactly one
+      FlexShieldingRegion.
+    type: array
+    items:
+      type: string
+      enum:
+      - AFRICA_SOUTH1
+      - FLEX_SHIELDING_REGION_UNSPECIFIED
+      - ME_CENTRAL1

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/Gateway.yaml

@@ -0,0 +1,158 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 Gateway export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- ports
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  addresses:
+    description: |-
+      Zero or one IPv4 or IPv6 address on which the Gateway will receive the
+      traffic. When no address is provided, an IP from the subnetwork is
+      allocated This field only applies to gateways of type
+      'SECURE_WEB_GATEWAY'. Gateways of type 'OPEN_MESH' listen on 0.0.0.0 for
+      IPv4 and :: for IPv6.
+    type: array
+    items:
+      type: string
+  authorizationPolicy:
+    description: |-
+      A fully-qualified AuthorizationPolicy URL reference. Specifies how
+      traffic is authorized. If empty, authorization checks are disabled.
+    type: string
+  certificateUrls:
+    description: |-
+      A fully-qualified Certificates URL reference. The proxy presents a
+      Certificate (selected based on SNI) when establishing a TLS
+      connection. This feature only applies to gateways of type
+      'SECURE_WEB_GATEWAY'.
+    type: array
+    items:
+      type: string
+  description:
+    description: |-
+      A free-text description of the resource. Max length 1024
+      characters.
+    type: string
+  envoyHeaders:
+    description: |-
+      Determines if envoy will insert internal debug headers into
+      upstream requests. Other Envoy headers may still be injected. By
+      default, envoy will not insert any debug headers.
+    type: string
+    enum:
+    - DEBUG_HEADERS
+    - ENVOY_HEADERS_UNSPECIFIED
+    - NONE
+  gatewaySecurityPolicy:
+    description: |-
+      A fully-qualified GatewaySecurityPolicy URL reference. Defines how
+      a server should apply security policy to inbound (VM to Proxy)
+      initiated connections. For example:
+      `projects/*/locations/*/gatewaySecurityPolicies/swg-policy`. This
+      policy is specific to gateways of type 'SECURE_WEB_GATEWAY'.
+    type: string
+  ipVersion:
+    description: |-
+      The IP Version that will be used by this gateway. Valid options
+      are IPV4 or IPV6. Default is IPV4.
+    type: string
+    enum:
+    - IPV4
+    - IPV6
+    - IP_VERSION_UNSPECIFIED
+  labels:
+    description: Set of label tags associated with the Gateway resource.
+    $ref: LabelsValue.yaml
+  name:
+    description: |-
+      Identifier. Name of the Gateway resource. It matches pattern
+      `projects/*/locations/*/gateways/`.
+    type: string
+  network:
+    description: |-
+      The relative resource name identifying the VPC network that is
+      using this configuration. For example:
+      `projects/*/global/networks/network-1`. Currently, this field is
+      specific to gateways of type 'SECURE_WEB_GATEWAY'.
+    type: string
+  ports:
+    description: |-
+      One or more port numbers (1-65535), on which the Gateway will
+      receive traffic. The proxy binds to the specified ports. Gateways
+      of type 'SECURE_WEB_GATEWAY' are limited to 1 port. Gateways of
+      type 'OPEN_MESH' listen on 0.0.0.0 for IPv4 and :: for IPv6 and
+      support multiple ports.
+    type: array
+    items:
+      type: integer
+  routingMode:
+    description: |-
+      The routing mode of the Gateway. This field is configurable
+      only for gateways of type SECURE_WEB_GATEWAY. This field is
+      required for gateways of type SECURE_WEB_GATEWAY.
+    type: string
+    enum:
+    - EXPLICIT_ROUTING_MODE
+    - NEXT_HOP_ROUTING_MODE
+  scope:
+    description: |-
+      Scope determines how configuration across multiple Gateway
+      instances are merged. The configuration for multiple Gateway
+      instances with the same scope will be merged as presented as a
+      single coniguration to the proxy/load balancer. Max length 64
+      characters. Scope should start with a letter and can only have
+      letters, numbers, hyphens.
+    type: string
+  securityPolicy:
+    description: |-
+      A fully-qualified GatewaySecurityPolicy URL reference. Defines
+      how a server should apply security policy to inbound (VM to
+      Proxy) initiated connections. This policy is specific to
+      gateways of type 'SECURE_WEB_GATEWAY'. DEPRECATED!!!! Use the
+      gateway_security_policy field instead.
+    type: string
+  serverTlsPolicy:
+    description: |-
+      A fully-qualified ServerTLSPolicy URL reference. Specifies how
+      TLS traffic is terminated. If empty, TLS termination is
+      disabled.
+    type: string
+  subnetwork:
+    description: |-
+      The relative resource name identifying the subnetwork in which
+      this SWG is allocated. For example: `projects/*/regions/us-
+      central1/subnetworks/network-1` Currently, this field is
+      specific to gateways of type 'SECURE_WEB_GATEWAY".
+    type: string
+  type:
+    description: |-
+      Immutable. The type of the customer managed gateway. This
+      field is required. If unspecified, an error is returned.
+    type: string
+    enum:
+    - OPEN_MESH
+    - SECURE_WEB_GATEWAY
+    - TYPE_UNSPECIFIED

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/GrpcRoute.yaml

@@ -0,0 +1,97 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 GrpcRoute export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- hostnames
+- name
+- rules
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  description:
+    description: |-
+      A free-text description of the resource. Max length 1024 characters.
+    type: string
+  gateways:
+    description: |-
+      Gateways defines a list of gateways this GrpcRoute is attached to, as one
+      of the routing rules to route the requests served by the gateway. Each
+      gateway reference should match the pattern:
+      `projects/*/locations/global/gateways/`
+    type: array
+    items:
+      type: string
+  hostnames:
+    description: |-
+      Service hostnames with an optional port for which this route describes
+      traffic. Format: [:] Hostname is the fully qualified domain name of a
+      network host. This matches the RFC 1123 definition of a hostname with
+      2 notable exceptions: - IPs are not allowed. - A hostname may be
+      prefixed with a wildcard label (`*.`). The wildcard label must appear
+      by itself as the first label. Hostname can be "precise" which is a
+      domain name without the terminating dot of a network host (e.g.
+      `foo.example.com`) or "wildcard", which is a domain name prefixed with
+      a single wildcard label (e.g. `*.example.com`). Note that as per
+      RFC1035 and RFC1123, a label must consist of lower case alphanumeric
+      characters or '-', and must start and end with an alphanumeric
+      character. No other punctuation is allowed. The routes associated with
+      a Mesh or Gateway must have unique hostnames. If you attempt to attach
+      multiple routes with conflicting hostnames, the configuration will be
+      rejected. For example, while it is acceptable for routes for the
+      hostnames `*.foo.bar.com` and `*.bar.com` to be associated with the
+      same route, it is not possible to associate two routes both with
+      `*.bar.com` or both with `bar.com`. If a port is specified, then gRPC
+      clients must use the channel URI with the port to match this rule
+      (i.e. "xds:///service:123"), otherwise they must supply the URI
+      without a port (i.e. "xds:///service").
+    type: array
+    items:
+      type: string
+  labels:
+    description: |-
+      Set of label tags associated with the GrpcRoute resource.
+    $ref: LabelsValue.yaml
+  meshes:
+    description: |-
+      Meshes defines a list of meshes this GrpcRoute is attached to, as
+      one of the routing rules to route the requests served by the mesh.
+      Each mesh reference should match the pattern:
+      `projects/*/locations/global/meshes/`
+    type: array
+    items:
+      type: string
+  name:
+    description: |-
+      Name of the GrpcRoute resource. It matches pattern
+      `projects/*/locations/global/grpcRoutes/`
+    type: string
+  rules:
+    description: |-
+      A list of detailed rules defining how to route traffic. Within
+      a single GrpcRoute, the GrpcRoute.RouteAction associated with
+      the first matching GrpcRoute.RouteRule will be executed. At
+      least one rule must be supplied.
+    type: array
+    items:
+      $ref: GrpcRouteRouteRule.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/GrpcRouteDestination.yaml

@@ -0,0 +1,46 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 GrpcRouteDestination export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- serviceName
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  serviceName:
+    description: |-
+      The URL of a destination service to which to route traffic. Must refer to
+      either a BackendService or ServiceDirectoryService.
+    type: string
+  weight:
+    description: |-
+      Specifies the proportion of requests forwarded to the backend referenced
+      by the serviceName field. This is computed as: - weight/Sum(weights in
+      this destination list). For non-zero values, there may be some epsilon
+      from the exact proportion defined here depending on the precision an
+      implementation supports. If only one serviceName is specified and it has a
+      weight greater than 0, 100% of the traffic is forwarded to that backend.
+      If weights are specified for any one service name, they need to be
+      specified for all of them. If weights are unspecified for all services,
+      then, traffic is distributed in equal proportions to all of them.
+    type: integer

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/GrpcRouteFaultInjectionPolicy.yaml

@@ -0,0 +1,33 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 GrpcRouteFaultInjectionPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  abort:
+    description: The specification for aborting to client requests.
+    $ref: GrpcRouteFaultInjectionPolicyAbort.yaml
+  delay:
+    description: The specification for injecting delay to client requests.
+    $ref: GrpcRouteFaultInjectionPolicyDelay.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/GrpcRouteFaultInjectionPolicyAbort.yaml

@@ -0,0 +1,37 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 GrpcRouteFaultInjectionPolicyAbort export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  httpStatus:
+    description: |-
+      The HTTP status code used to abort the request. The value must be between
+      200 and 599 inclusive.
+    type: integer
+  percentage:
+    description: |-
+      The percentage of traffic which will be aborted. The value must be between
+      [0, 100]
+    type: integer

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/GrpcRouteFaultInjectionPolicyDelay.yaml

@@ -0,0 +1,35 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 GrpcRouteFaultInjectionPolicyDelay export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  fixedDelay:
+    description: Specify a fixed delay before forwarding the request.
+    type: string
+  percentage:
+    description: |-
+      The percentage of traffic on which delay will be injected. The value must
+      be between [0, 100]
+    type: integer

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/GrpcRouteHeaderMatch.yaml

@@ -0,0 +1,45 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 GrpcRouteHeaderMatch export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- key
+- value
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  key:
+    description: The key of the header.
+    type: string
+  type:
+    description: |-
+      Specifies how to match against the value of the header. If not specified,
+      a default value of EXACT is used.
+    type: string
+    enum:
+    - EXACT
+    - REGULAR_EXPRESSION
+    - TYPE_UNSPECIFIED
+  value:
+    description: The value of the header.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/GrpcRouteMethodMatch.yaml

@@ -0,0 +1,54 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 GrpcRouteMethodMatch export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- grpcMethod
+- grpcService
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  caseSensitive:
+    description: |-
+      Specifies that matches are case sensitive. The default value is true.
+      case_sensitive must not be used with a type of REGULAR_EXPRESSION.
+    type: boolean
+  grpcMethod:
+    description: |-
+      Name of the method to match against. If unspecified, will match all
+      methods.
+    type: string
+  grpcService:
+    description: |-
+      Name of the service to match against. If unspecified, will match all
+      services.
+    type: string
+  type:
+    description: |-
+      Specifies how to match against the name. If not specified, a default value
+      of "EXACT" is used.
+    type: string
+    enum:
+    - EXACT
+    - REGULAR_EXPRESSION
+    - TYPE_UNSPECIFIED

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/GrpcRouteRetryPolicy.yaml

@@ -0,0 +1,46 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 GrpcRouteRetryPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  numRetries:
+    description: |-
+      Specifies the allowed number of retries. This number must be > 0. If not
+      specified, default to 1.
+    type: integer
+  retryConditions:
+    description: |-
+      - connect-failure: Router will retry on failures connecting to Backend
+      Services, for example due to connection timeouts. - refused-stream: Router
+      will retry if the backend service resets the stream with a REFUSED_STREAM
+      error code. This reset type indicates that it is safe to retry. -
+      cancelled: Router will retry if the gRPC status code in the response
+      header is set to cancelled - deadline-exceeded: Router will retry if the
+      gRPC status code in the response header is set to deadline-exceeded -
+      resource-exhausted: Router will retry if the gRPC status code in the
+      response header is set to resource-exhausted -
+    type: array
+    items:
+      type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/GrpcRouteRouteAction.yaml

@@ -0,0 +1,66 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 GrpcRouteRouteAction export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  destinations:
+    description: |-
+      The destination services to which traffic should be forwarded. If multiple
+      destinations are specified, traffic will be split between Backend
+      Service(s) according to the weight field of these destinations.
+    type: array
+    items:
+      $ref: GrpcRouteDestination.yaml
+  faultInjectionPolicy:
+    description: |-
+      The specification for fault injection introduced into traffic to test
+      the resiliency of clients to destination service failure. As part of
+      fault injection, when clients send requests to a destination, delays
+      can be introduced on a percentage of requests before sending those
+      requests to the destination service. Similarly requests from clients
+      can be aborted by for a percentage of requests. timeout and
+      retry_policy will be ignored by clients that are configured with a
+      fault_injection_policy
+    $ref: GrpcRouteFaultInjectionPolicy.yaml
+  idleTimeout:
+    description: |-
+      Specifies the idle timeout for the selected route. The idle timeout is
+      defined as the period in which there are no bytes sent or received on
+      either the upstream or downstream connection. If not set, the default
+      idle timeout is 1 hour. If set to 0s, the timeout will be disabled.
+    type: string
+  retryPolicy:
+    description: Specifies the retry policy associated with this route.
+    $ref: GrpcRouteRetryPolicy.yaml
+  statefulSessionAffinity:
+    description: Specifies cookie-based stateful session affinity.
+    $ref: GrpcRouteStatefulSessionAffinityPolicy.yaml
+  timeout:
+    description: |-
+      Specifies the timeout for selected route. Timeout is computed from the
+      time the request has been fully processed (i.e. end of stream) up
+      until the response has been completely processed. Timeout includes all
+      retries.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/GrpcRouteRouteMatch.yaml

@@ -0,0 +1,37 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 GrpcRouteRouteMatch export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  headers:
+    description: Specifies a collection of headers to match.
+    type: array
+    items:
+      $ref: GrpcRouteHeaderMatch.yaml
+  method:
+    description: |-
+      A gRPC method to match against. If this field is empty or omitted,
+      will match all methods.
+    $ref: GrpcRouteMethodMatch.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/GrpcRouteRouteRule.yaml

@@ -0,0 +1,42 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 GrpcRouteRouteRule export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- action
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  action:
+    description: |-
+      A detailed rule defining how to route traffic. This field is required.
+    $ref: GrpcRouteRouteAction.yaml
+  matches:
+    description: |-
+      Matches define conditions used for matching the rule against incoming gRPC
+      requests. Each match is independent, i.e. this rule will be matched if ANY
+      one of the matches is satisfied. If no matches field is specified, this
+      rule will unconditionally match traffic.
+    type: array
+    items:
+      $ref: GrpcRouteRouteMatch.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/GrpcRouteStatefulSessionAffinityPolicy.yaml

@@ -0,0 +1,35 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 GrpcRouteStatefulSessionAffinityPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- cookieTtl
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  cookieTtl:
+    description: |-
+      The cookie TTL value for the Set-Cookie header generated by the data
+      plane. The lifetime of the cookie may be set to a value from 1 to 86400
+      seconds (24 hours) inclusive.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HeaderAction.yaml

@@ -0,0 +1,60 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HeaderAction export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  requestHeadersToAdd:
+    description: |-
+      A list of headers to add to the request prior to forwarding the request to
+      the origin. You can add a maximum of 25 request headers.
+    type: array
+    items:
+      $ref: HeaderActionAddHeader.yaml
+  requestHeadersToRemove:
+    description: |-
+      A list of header names to remove from the request before forwarding
+      the request to the origin. You can specify up to 25 request headers to
+      remove.
+    type: array
+    items:
+      $ref: HeaderActionRemoveHeader.yaml
+  responseHeadersToAdd:
+    description: |-
+      A list of headers to add to the response before sending it back to
+      the client. You can add a maximum of 25 response headers. Response
+      headers are only sent to the client, and do not have an effect on
+      the cache serving the response.
+    type: array
+    items:
+      $ref: HeaderActionAddHeader.yaml
+  responseHeadersToRemove:
+    description: |-
+      A list of headers to remove from the response before sending
+      it back to the client. Response headers are only sent to the
+      client, and do not have an effect on the cache serving the
+      response. You can specify up to 25 response headers to remove.
+    type: array
+    items:
+      $ref: HeaderActionRemoveHeader.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HeaderActionAddHeader.yaml

@@ -0,0 +1,40 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HeaderActionAddHeader export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- headerName
+- headerValue
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  headerName:
+    description: The name of the header to add.
+    type: string
+  headerValue:
+    description: The value of the header to add.
+    type: string
+  replace:
+    description: |-
+      Specifies whether to replace all existing headers with the same name.
+    type: boolean

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HeaderActionRemoveHeader.yaml

@@ -0,0 +1,32 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HeaderActionRemoveHeader export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- headerName
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  headerName:
+    description: The name of the header to remove.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HeaderMatch.yaml

@@ -0,0 +1,64 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HeaderMatch export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- headerName
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  exactMatch:
+    description: |-
+      The value of the header must exactly match contents of `exact_match`. Only
+      one of `exact_match`, prefix_match, suffix_match, or present_match must be
+      set.
+    type: string
+  headerName:
+    description: |-
+      The header name to match on. The `:method` pseudo- header may be used to
+      match on the request HTTP method.
+    type: string
+  invertMatch:
+    description: |-
+      If set to `false`, HeaderMatch is considered a match when the match
+      criteria above are met. If set to `true`, `HeaderMatch` is considered a
+      match when the match criteria above are not met. The default is `false`.
+    type: boolean
+  prefixMatch:
+    description: |-
+      The value of the header must start with the contents of `prefix_match`.
+      Only one of exact_match, `prefix_match`, suffix_match, or present_match
+      must be set.
+    type: string
+  presentMatch:
+    description: |-
+      A header with the contents of header_name must exist. The match takes
+      place whether or not the request's header has a value. Only one of
+      exact_match, prefix_match, suffix_match, or `present_match` must be set.
+    type: boolean
+  suffixMatch:
+    description: |-
+      The value of the header must end with the contents of `suffix_match`. Only
+      one of exact_match, prefix_match, `suffix_match`, or present_match must be
+      set.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HostRule.yaml

@@ -0,0 +1,56 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HostRule export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- hosts
+- pathMatcher
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  description:
+    description: A human-readable description of the `HostRule` value.
+    type: string
+  hosts:
+    description: |-
+      A list of host patterns to match. Host patterns must be valid hostnames.
+      Ports are not allowed. Wildcard hosts are supported in the suffix or
+      prefix form. `*` matches any string of `([a-z0-9-.]*)`. It does not match
+      an empty string. When multiple hosts are specified, hosts are matched in
+      the following priority: 1. Exact domain names: `www.foo.com`. 2. Suffix
+      domain wildcards: `*.foo.com` or `*-bar.foo.com`. 3. Prefix domain
+      wildcards: `foo.*` or `foo-*`. 4. Special wildcard `*` matching any
+      domain. The wildcard doesn't match the empty string. For example,
+      `*-bar.foo.com` matches `baz-bar.foo.com` but not `-bar.foo.com`. The
+      longest wildcards match first. Only a single host in the entire service
+      can match on ``*``. A domain must be unique across all configured hosts
+      within a service. Hosts are matched against the HTTP `Host` header, or for
+      HTTP/2 and HTTP/3, the `:authority` header, in the incoming request. You
+      can specify up to 10 hosts.
+    type: array
+    items:
+      type: string
+  pathMatcher:
+    description: |-
+      The name of the PathMatcher associated with this `HostRule`.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HttpRoute.yaml

@@ -0,0 +1,94 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HttpRoute export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- hostnames
+- name
+- rules
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  description:
+    description: |-
+      A free-text description of the resource. Max length 1024 characters.
+    type: string
+  gateways:
+    description: |-
+      Gateways defines a list of gateways this HttpRoute is attached to, as one
+      of the routing rules to route the requests served by the gateway. Each
+      gateway reference should match the pattern:
+      `projects/*/locations/global/gateways/`
+    type: array
+    items:
+      type: string
+  hostnames:
+    description: |-
+      Hostnames define a set of hosts that should match against the HTTP
+      host header to select a HttpRoute to process the request. Hostname is
+      the fully qualified domain name of a network host, as defined by RFC
+      1123 with the exception that: - IPs are not allowed. - A hostname may
+      be prefixed with a wildcard label (`*.`). The wildcard label must
+      appear by itself as the first label. Hostname can be "precise" which
+      is a domain name without the terminating dot of a network host (e.g.
+      `foo.example.com`) or "wildcard", which is a domain name prefixed with
+      a single wildcard label (e.g. `*.example.com`). Note that as per
+      RFC1035 and RFC1123, a label must consist of lower case alphanumeric
+      characters or '-', and must start and end with an alphanumeric
+      character. No other punctuation is allowed. The routes associated with
+      a Mesh or Gateways must have unique hostnames. If you attempt to
+      attach multiple routes with conflicting hostnames, the configuration
+      will be rejected. For example, while it is acceptable for routes for
+      the hostnames `*.foo.bar.com` and `*.bar.com` to be associated with
+      the same Mesh (or Gateways under the same scope), it is not possible
+      to associate two routes both with `*.bar.com` or both with `bar.com`.
+    type: array
+    items:
+      type: string
+  labels:
+    description: |-
+      Set of label tags associated with the HttpRoute resource.
+    $ref: LabelsValue.yaml
+  meshes:
+    description: |-
+      Meshes defines a list of meshes this HttpRoute is attached to, as
+      one of the routing rules to route the requests served by the mesh.
+      Each mesh reference should match the pattern:
+      `projects/*/locations/global/meshes/` The attached Mesh should be
+      of a type SIDECAR
+    type: array
+    items:
+      type: string
+  name:
+    description: |-
+      Name of the HttpRoute resource. It matches pattern
+      `projects/*/locations/global/httpRoutes/http_route_name>`.
+    type: string
+  rules:
+    description: |-
+      Rules that define how traffic is routed and handled. Rules
+      will be matched sequentially based on the RouteMatch specified
+      for the rule.
+    type: array
+    items:
+      $ref: HttpRouteRouteRule.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HttpRouteCorsPolicy.yaml

@@ -0,0 +1,78 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HttpRouteCorsPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  allowCredentials:
+    description: |-
+      In response to a preflight request, setting this to true indicates that
+      the actual request can include user credentials. This translates to the
+      Access-Control-Allow-Credentials header. Default value is false.
+    type: boolean
+  allowHeaders:
+    description: Specifies the content for Access-Control-Allow-Headers header.
+    type: array
+    items:
+      type: string
+  allowMethods:
+    description: |-
+      Specifies the content for Access-Control-Allow-Methods header.
+    type: array
+    items:
+      type: string
+  allowOriginRegexes:
+    description: |-
+      Specifies the regular expression patterns that match allowed
+      origins. For regular expression grammar, please see
+      https://github.com/google/re2/wiki/Syntax.
+    type: array
+    items:
+      type: string
+  allowOrigins:
+    description: |-
+      Specifies the list of origins that will be allowed to do CORS
+      requests. An origin is allowed if it matches either an item in
+      allow_origins or an item in allow_origin_regexes.
+    type: array
+    items:
+      type: string
+  disabled:
+    description: |-
+      If true, the CORS policy is disabled. The default value is
+      false, which indicates that the CORS policy is in effect.
+    type: boolean
+  exposeHeaders:
+    description: |-
+      Specifies the content for Access-Control-Expose-Headers
+      header.
+    type: array
+    items:
+      type: string
+  maxAge:
+    description: |-
+      Specifies how long result of a preflight request can
+      be cached in seconds. This translates to the Access-
+      Control-Max-Age header.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HttpRouteDestination.yaml

@@ -0,0 +1,56 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HttpRouteDestination export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  requestHeaderModifier:
+    description: |-
+      The specification for modifying the headers of a matching request prior to
+      delivery of the request to the destination. If HeaderModifiers are set on
+      both the Destination and the RouteAction, they will be merged. Conflicts
+      between the two will not be resolved on the configuration.
+    $ref: HttpRouteHeaderModifier.yaml
+  responseHeaderModifier:
+    description: |-
+      The specification for modifying the headers of a response prior to sending
+      the response back to the client. If HeaderModifiers are set on both the
+      Destination and the RouteAction, they will be merged. Conflicts between
+      the two will not be resolved on the configuration.
+    $ref: HttpRouteHeaderModifier.yaml
+  serviceName:
+    description: The URL of a BackendService to route traffic to.
+    type: string
+  weight:
+    description: |-
+      Specifies the proportion of requests forwarded to the backend referenced
+      by the serviceName field. This is computed as: - weight/Sum(weights in
+      this destination list). For non-zero values, there may be some epsilon
+      from the exact proportion defined here depending on the precision an
+      implementation supports. If only one serviceName is specified and it has a
+      weight greater than 0, 100% of the traffic is forwarded to that backend.
+      If weights are specified for any one service name, they need to be
+      specified for all of them. If weights are unspecified for all services,
+      then, traffic is distributed in equal proportions to all of them.
+    type: integer

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HttpRouteFaultInjectionPolicy.yaml

@@ -0,0 +1,33 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HttpRouteFaultInjectionPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  abort:
+    description: The specification for aborting to client requests.
+    $ref: HttpRouteFaultInjectionPolicyAbort.yaml
+  delay:
+    description: The specification for injecting delay to client requests.
+    $ref: HttpRouteFaultInjectionPolicyDelay.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HttpRouteFaultInjectionPolicyAbort.yaml

@@ -0,0 +1,37 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HttpRouteFaultInjectionPolicyAbort export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  httpStatus:
+    description: |-
+      The HTTP status code used to abort the request. The value must be between
+      200 and 599 inclusive.
+    type: integer
+  percentage:
+    description: |-
+      The percentage of traffic which will be aborted. The value must be between
+      [0, 100]
+    type: integer

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HttpRouteFaultInjectionPolicyDelay.yaml

@@ -0,0 +1,35 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HttpRouteFaultInjectionPolicyDelay export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  fixedDelay:
+    description: Specify a fixed delay before forwarding the request.
+    type: string
+  percentage:
+    description: |-
+      The percentage of traffic on which delay will be injected. The value must
+      be between [0, 100]
+    type: integer

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HttpRouteHeaderMatch.yaml

@@ -0,0 +1,63 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HttpRouteHeaderMatch export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  exactMatch:
+    description: |-
+      The value of the header should match exactly the content of exact_match.
+    type: string
+  header:
+    description: The name of the HTTP header to match against.
+    type: string
+  invertMatch:
+    description: |-
+      If specified, the match result will be inverted before checking. Default
+      value is set to false.
+    type: boolean
+  prefixMatch:
+    description: |-
+      The value of the header must start with the contents of prefix_match.
+    type: string
+  presentMatch:
+    description: |-
+      A header with header_name must exist. The match takes place whether or not
+      the header has a value.
+    type: boolean
+  rangeMatch:
+    description: |-
+      If specified, the rule will match if the request header value is within
+      the range.
+    $ref: HttpRouteHeaderMatchIntegerRange.yaml
+  regexMatch:
+    description: |-
+      The value of the header must match the regular expression specified in
+      regex_match. For regular expression grammar, please see:
+      https://github.com/google/re2/wiki/Syntax
+    type: string
+  suffixMatch:
+    description: |-
+      The value of the header must end with the contents of suffix_match.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HttpRouteHeaderMatchIntegerRange.yaml

@@ -0,0 +1,33 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HttpRouteHeaderMatchIntegerRange export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  end:
+    description: End of the range (exclusive)
+    type: integer
+  start:
+    description: Start of the range (inclusive)
+    type: integer

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HttpRouteHeaderModifier.yaml

@@ -0,0 +1,43 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HttpRouteHeaderModifier export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  add:
+    description: |-
+      Add the headers with given map where key is the name of the header, value
+      is the value of the header.
+    $ref: AddValue.yaml
+  remove:
+    description: |-
+      Remove headers (matching by header names) specified in the list.
+    type: array
+    items:
+      type: string
+  set:
+    description: |-
+      Completely overwrite/replace the headers with given map where key is
+      the name of the header, value is the value of the header.
+    $ref: SetValue.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HttpRouteHttpDirectResponse.yaml

@@ -0,0 +1,40 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HttpRouteHttpDirectResponse export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- status
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  bytesBody:
+    description: Response body as bytes. Maximum body size is 4096B.
+    type: string
+  status:
+    description: |-
+      Status to return as part of HTTP Response. Must be a positive integer.
+    type: integer
+  stringBody:
+    description: |-
+      Response body as a string. Maximum body length is 1024 characters.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HttpRouteQueryParameterMatch.yaml

@@ -0,0 +1,49 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HttpRouteQueryParameterMatch export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  exactMatch:
+    description: |-
+      The value of the query parameter must exactly match the contents of
+      exact_match. Only one of exact_match, regex_match, or present_match must
+      be set.
+    type: string
+  presentMatch:
+    description: |-
+      Specifies that the QueryParameterMatcher matches if request contains query
+      parameter, irrespective of whether the parameter has a value or not. Only
+      one of exact_match, regex_match, or present_match must be set.
+    type: boolean
+  queryParameter:
+    description: The name of the query parameter to match.
+    type: string
+  regexMatch:
+    description: |-
+      The value of the query parameter must match the regular expression
+      specified by regex_match. For regular expression grammar, please see
+      https://github.com/google/re2/wiki/Syntax Only one of exact_match,
+      regex_match, or present_match must be set.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HttpRouteRedirect.yaml

@@ -0,0 +1,72 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HttpRouteRedirect export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  hostRedirect:
+    description: |-
+      The host that will be used in the redirect response instead of the one
+      that was supplied in the request.
+    type: string
+  httpsRedirect:
+    description: |-
+      If set to true, the URL scheme in the redirected request is set to https.
+      If set to false, the URL scheme of the redirected request will remain the
+      same as that of the request. The default is set to false.
+    type: boolean
+  pathRedirect:
+    description: |-
+      The path that will be used in the redirect response instead of the one
+      that was supplied in the request. path_redirect can not be supplied
+      together with prefix_redirect. Supply one alone or neither. If neither is
+      supplied, the path of the original request will be used for the redirect.
+    type: string
+  portRedirect:
+    description: |-
+      The port that will be used in the redirected request instead of the one
+      that was supplied in the request.
+    type: integer
+  prefixRewrite:
+    description: |-
+      Indicates that during redirection, the matched prefix (or path) should be
+      swapped with this value. This option allows URLs be dynamically created
+      based on the request.
+    type: string
+  responseCode:
+    description: The HTTP Status code to use for the redirect.
+    type: string
+    enum:
+    - FOUND
+    - MOVED_PERMANENTLY_DEFAULT
+    - PERMANENT_REDIRECT
+    - RESPONSE_CODE_UNSPECIFIED
+    - SEE_OTHER
+    - TEMPORARY_REDIRECT
+  stripQuery:
+    description: |-
+      if set to true, any accompanying query portion of the original URL is
+      removed prior to redirecting the request. If set to false, the query
+      portion of the original URL is retained. The default is set to false.
+    type: boolean

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HttpRouteRequestMirrorPolicy.yaml

@@ -0,0 +1,36 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HttpRouteRequestMirrorPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  destination:
+    description: |-
+      The destination the requests will be mirrored to. The weight of the
+      destination will be ignored.
+    $ref: HttpRouteDestination.yaml
+  mirrorPercent:
+    description: |-
+      The percentage of requests to get mirrored to the desired destination.
+    type: number

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HttpRouteRetryPolicy.yaml

@@ -0,0 +1,51 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HttpRouteRetryPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  numRetries:
+    description: |-
+      Specifies the allowed number of retries. This number must be > 0. If not
+      specified, default to 1.
+    type: integer
+  perTryTimeout:
+    description: Specifies a non-zero timeout per retry attempt.
+    type: string
+  retryConditions:
+    description: |-
+      Specifies one or more conditions when this retry policy applies. Valid
+      values are: 5xx: Proxy will attempt a retry if the destination service
+      responds with any 5xx response code, of if the destination service does
+      not respond at all, example: disconnect, reset, read timeout, connection
+      failure and refused streams. gateway-error: Similar to 5xx, but only
+      applies to response codes 502, 503, 504. reset: Proxy will attempt a retry
+      if the destination service does not respond at all (disconnect/reset/read
+      timeout) connect-failure: Proxy will retry on failures connecting to
+      destination for example due to connection timeouts. retriable-4xx: Proxy
+      will retry fro retriable 4xx response codes. Currently the only retriable
+      error supported is 409. refused-
+    type: array
+    items:
+      type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HttpRouteRouteAction.yaml

@@ -0,0 +1,103 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HttpRouteRouteAction export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  corsPolicy:
+    description: |-
+      The specification for allowing client side cross-origin requests.
+    $ref: HttpRouteCorsPolicy.yaml
+  destinations:
+    description: The destination to which traffic should be forwarded.
+    type: array
+    items:
+      $ref: HttpRouteDestination.yaml
+  directResponse:
+    description: |-
+      Static HTTP Response object to be returned regardless of the request.
+    $ref: HttpRouteHttpDirectResponse.yaml
+  faultInjectionPolicy:
+    description: |-
+      The specification for fault injection introduced into traffic to test
+      the resiliency of clients to backend service failure. As part of fault
+      injection, when clients send requests to a backend service, delays can
+      be introduced on a percentage of requests before sending those
+      requests to the backend service. Similarly requests from clients can
+      be aborted for a percentage of requests. timeout and retry_policy will
+      be ignored by clients that are configured with a
+      fault_injection_policy
+    $ref: HttpRouteFaultInjectionPolicy.yaml
+  idleTimeout:
+    description: |-
+      Specifies the idle timeout for the selected route. The idle timeout is
+      defined as the period in which there are no bytes sent or received on
+      either the upstream or downstream connection. If not set, the default
+      idle timeout is 1 hour. If set to 0s, the timeout will be disabled.
+    type: string
+  redirect:
+    description: |-
+      If set, the request is directed as configured by this field.
+    $ref: HttpRouteRedirect.yaml
+  requestHeaderModifier:
+    description: |-
+      The specification for modifying the headers of a matching request
+      prior to delivery of the request to the destination. If
+      HeaderModifiers are set on both the Destination and the RouteAction,
+      they will be merged. Conflicts between the two will not be resolved on
+      the configuration.
+    $ref: HttpRouteHeaderModifier.yaml
+  requestMirrorPolicy:
+    description: |-
+      Specifies the policy on how requests intended for the routes
+      destination are shadowed to a separate mirrored destination. Proxy
+      will not wait for the shadow destination to respond before returning
+      the response. Prior to sending traffic to the shadow service, the
+      host/authority header is suffixed with -shadow.
+    $ref: HttpRouteRequestMirrorPolicy.yaml
+  responseHeaderModifier:
+    description: |-
+      The specification for modifying the headers of a response prior to
+      sending the response back to the client. If HeaderModifiers are set on
+      both the Destination and the RouteAction, they will be merged.
+      Conflicts between the two will not be resolved on the configuration.
+    $ref: HttpRouteHeaderModifier.yaml
+  retryPolicy:
+    description: Specifies the retry policy associated with this route.
+    $ref: HttpRouteRetryPolicy.yaml
+  statefulSessionAffinity:
+    description: Specifies cookie-based stateful session affinity.
+    $ref: HttpRouteStatefulSessionAffinityPolicy.yaml
+  timeout:
+    description: |-
+      Specifies the timeout for selected route. Timeout is computed from the
+      time the request has been fully processed (i.e. end of stream) up
+      until the response has been completely processed. Timeout includes all
+      retries.
+    type: string
+  urlRewrite:
+    description: |-
+      The specification for rewrite URL before forwarding requests to the
+      destination.
+    $ref: HttpRouteURLRewrite.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HttpRouteRouteMatch.yaml

@@ -0,0 +1,66 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HttpRouteRouteMatch export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  fullPathMatch:
+    description: |-
+      The HTTP request path value should exactly match this value. Only one of
+      full_path_match, prefix_match, or regex_match should be used.
+    type: string
+  headers:
+    description: |-
+      Specifies a list of HTTP request headers to match against. ALL of the
+      supplied headers must be matched.
+    type: array
+    items:
+      $ref: HttpRouteHeaderMatch.yaml
+  ignoreCase:
+    description: |-
+      Specifies if prefix_match and full_path_match matches are case
+      sensitive. The default value is false.
+    type: boolean
+  prefixMatch:
+    description: |-
+      The HTTP request path value must begin with specified prefix_match.
+      prefix_match must begin with a /. Only one of full_path_match,
+      prefix_match, or regex_match should be used.
+    type: string
+  queryParameters:
+    description: |-
+      Specifies a list of query parameters to match against. ALL of the
+      query parameters must be matched.
+    type: array
+    items:
+      $ref: HttpRouteQueryParameterMatch.yaml
+  regexMatch:
+    description: |-
+      The HTTP request path value must satisfy the regular expression
+      specified by regex_match after removing any query parameters and
+      anchor supplied with the original URL. For regular expression
+      grammar, please see https://github.com/google/re2/wiki/Syntax Only
+      one of full_path_match, prefix_match, or regex_match should be
+      used.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HttpRouteRouteRule.yaml

@@ -0,0 +1,41 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HttpRouteRouteRule export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  action:
+    description: The detailed rule defining how to route matched traffic.
+    $ref: HttpRouteRouteAction.yaml
+  matches:
+    description: |-
+      A list of matches define conditions used for matching the rule against
+      incoming HTTP requests. Each match is independent, i.e. this rule will be
+      matched if ANY one of the matches is satisfied. If no matches field is
+      specified, this rule will unconditionally match traffic. If a default rule
+      is desired to be configured, add a rule with no matches specified to the
+      end of the rules list.
+    type: array
+    items:
+      $ref: HttpRouteRouteMatch.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HttpRouteStatefulSessionAffinity.yaml

@@ -0,0 +1,33 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1alpha1 HttpRouteStatefulSessionAffinity export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  cookieTtl:
+    description: |-
+      The cookie TTL value for the Set-Cookie header generated by
+      the data plane. The lifetime of the cookie may be set to a value from 1
+      to 86400 seconds (24 hours) inclusive.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HttpRouteStatefulSessionAffinityPolicy.yaml

@@ -0,0 +1,35 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HttpRouteStatefulSessionAffinityPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- cookieTtl
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  cookieTtl:
+    description: |-
+      The cookie TTL value for the Set-Cookie header generated by the data
+      plane. The lifetime of the cookie may be set to a value from 1 to 86400
+      seconds (24 hours) inclusive.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/HttpRouteURLRewrite.yaml

@@ -0,0 +1,37 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 HttpRouteURLRewrite export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  hostRewrite:
+    description: |-
+      Prior to forwarding the request to the selected destination, the requests
+      host header is replaced by this value.
+    type: string
+  pathPrefixRewrite:
+    description: |-
+      Prior to forwarding the request to the selected destination, the matching
+      portion of the requests path is replaced by this value.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/LabelsValue.yaml

@@ -0,0 +1,33 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 LabelsValue export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties:
+  key:
+    description: Name of the additional property.
+    type: string
+  value:
+    description: A string attribute.
+    type: string
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/LbEdgeExtension.yaml

@@ -0,0 +1,78 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 LbEdgeExtension export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- extensionChains
+- forwardingRules
+- loadBalancingScheme
+- name
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  description:
+    description: A human-readable description of the resource.
+    type: string
+  extensionChains:
+    description: |-
+      A set of ordered extension chains that contain the match conditions and
+      extensions to execute. Match conditions for each extension chain are
+      evaluated in sequence for a given request. The first extension chain that
+      has a condition that matches the request is executed. Any subsequent
+      extension chains do not execute. Limited to 5 extension chains per
+      resource.
+    type: array
+    items:
+      $ref: ExtensionChain.yaml
+  forwardingRules:
+    description: |-
+      A list of references to the forwarding rules to which this service
+      extension is attached. At least one forwarding rule is required. Only
+      one `LbEdgeExtension` resource can be associated with a forwarding
+      rule.
+    type: array
+    items:
+      type: string
+  labels:
+    description: |-
+      Set of labels associated with the `LbEdgeExtension` resource. The
+      format must comply with [the requirements for
+      labels](https://cloud.google.com/compute/docs/labeling-
+      resources#requirements) for Google Cloud resources.
+    $ref: LabelsValue.yaml
+  loadBalancingScheme:
+    description: |-
+      All forwarding rules referenced by this extension must share the
+      same load balancing scheme. Supported values: `EXTERNAL_MANAGED`.
+    type: string
+    enum:
+    - EXTERNAL_MANAGED
+    - INTERNAL_MANAGED
+    - LOAD_BALANCING_SCHEME_UNSPECIFIED
+  name:
+    description: |-
+      Identifier. Name of the `LbEdgeExtension` resource in the
+      following format:
+      `projects/{project}/locations/{location}/lbEdgeExtensi
+      ons/{lb_edge_extension}`.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/LbRouteExtension.yaml

@@ -0,0 +1,99 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 LbRouteExtension export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- extensionChains
+- forwardingRules
+- loadBalancingScheme
+- name
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  description:
+    description: A human-readable description of the resource.
+    type: string
+  extensionChains:
+    description: |-
+      A set of ordered extension chains that contain the match conditions and
+      extensions to execute. Match conditions for each extension chain are
+      evaluated in sequence for a given request. The first extension chain that
+      has a condition that matches the request is executed. Any subsequent
+      extension chains do not execute. Limited to 5 extension chains per
+      resource.
+    type: array
+    items:
+      $ref: ExtensionChain.yaml
+  forwardingRules:
+    description: |-
+      A list of references to the forwarding rules to which this service
+      extension is attached. At least one forwarding rule is required. Only
+      one `LbRouteExtension` resource can be associated with a forwarding
+      rule.
+    type: array
+    items:
+      type: string
+  labels:
+    description: |-
+      Set of labels associated with the `LbRouteExtension` resource. The
+      format must comply with [the requirements for
+      labels](https://cloud.google.com/compute/docs/labeling-
+      resources#requirements) for Google Cloud resources.
+    $ref: LabelsValue.yaml
+  loadBalancingScheme:
+    description: |-
+      All backend services and forwarding rules referenced by this
+      extension must share the same load balancing scheme. Supported
+      values: `INTERNAL_MANAGED`, `EXTERNAL_MANAGED`. For more
+      information, refer to [Backend services
+      overview](https://cloud.google.com/load-balancing/docs/backend-
+      service).
+    type: string
+    enum:
+    - EXTERNAL_MANAGED
+    - INTERNAL_MANAGED
+    - LOAD_BALANCING_SCHEME_UNSPECIFIED
+  metadata:
+    description: |-
+      The metadata provided here is included as part of the
+      `metadata_context` (of type `google.protobuf.Struct`) in the
+      `ProcessingRequest` message sent to the extension server. The
+      metadata applies to all extensions in all extensions chains in
+      this resource. The metadata is available under the key
+      `com.google.lb_route_extension.`. The following variables are
+      supported in the metadata: `{forwarding_rule_id}` - substituted
+      with the forwarding rule's fully qualified resource name. This
+      field must not be set if at least one of the extension chains
+      contains plugin extensions. Setting it results in a validation
+      error. You can set metadata at either the resource level or the
+      extension level. The extension level metadata is recommended
+      because you can pass a different set of metadata through each
+      extension to the backend.
+    type: object
+  name:
+    description: |-
+      Identifier. Name of the `LbRouteExtension` resource in the
+      following format:
+      `projects/{project}/locations/{location}/lbRouteExtens
+      ions/{lb_route_extension}`.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/LbTrafficExtension.yaml

@@ -0,0 +1,98 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 LbTrafficExtension export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- extensionChains
+- loadBalancingScheme
+- name
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  description:
+    description: A human-readable description of the resource.
+    type: string
+  extensionChains:
+    description: |-
+      A set of ordered extension chains that contain the match conditions and
+      extensions to execute. Match conditions for each extension chain are
+      evaluated in sequence for a given request. The first extension chain that
+      has a condition that matches the request is executed. Any subsequent
+      extension chains do not execute. Limited to 5 extension chains per
+      resource.
+    type: array
+    items:
+      $ref: ExtensionChain.yaml
+  forwardingRules:
+    description: |-
+      A list of references to the forwarding rules to which this service
+      extension is attached. At least one forwarding rule is required. Only
+      one `LbTrafficExtension` resource can be associated with a forwarding
+      rule.
+    type: array
+    items:
+      type: string
+  labels:
+    description: |-
+      Set of labels associated with the `LbTrafficExtension` resource.
+      The format must comply with [the requirements for
+      labels](https://cloud.google.com/compute/docs/labeling-
+      resources#requirements) for Google Cloud resources.
+    $ref: LabelsValue.yaml
+  loadBalancingScheme:
+    description: |-
+      All backend services and forwarding rules referenced by this
+      extension must share the same load balancing scheme. Supported
+      values: `INTERNAL_MANAGED` and `EXTERNAL_MANAGED`. For more
+      information, refer to [Backend services
+      overview](https://cloud.google.com/load-balancing/docs/backend-
+      service).
+    type: string
+    enum:
+    - EXTERNAL_MANAGED
+    - INTERNAL_MANAGED
+    - LOAD_BALANCING_SCHEME_UNSPECIFIED
+  metadata:
+    description: |-
+      The metadata provided here is included as part of the
+      `metadata_context` (of type `google.protobuf.Struct`) in the
+      `ProcessingRequest` message sent to the extension server. The
+      metadata applies to all extensions in all extensions chains in
+      this resource. The metadata is available under the key
+      `com.google.lb_traffic_extension.`. The following variables are
+      supported in the metadata: `{forwarding_rule_id}` - substituted
+      with the forwarding rule's fully qualified resource name. This
+      field must not be set if at least one of the extension chains
+      contains plugin extensions. Setting it results in a validation
+      error. You can set metadata at either the resource level or the
+      extension level. The extension level metadata is recommended
+      because you can pass a different set of metadata through each
+      extension to the backend.
+    type: object
+  name:
+    description: |-
+      Identifier. Name of the `LbTrafficExtension` resource in the
+      following format:
+      `projects/{project}/locations/{location}/lbTraffic
+      Extensions/{lb_traffic_extension}`.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/LogConfig.yaml

@@ -0,0 +1,39 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 LogConfig export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  enable:
+    description: |-
+      Specifies whether to enable logging for traffic served by this service.
+      Defaults to false.
+    type: boolean
+  sampleRate:
+    description: |-
+      The sampling rate of requests, where `1.0` means all logged requests are
+      reported and `0.0` means no logged requests are reported. The default
+      value is `0.0`, and the value of the field must be in `[0, 1]`. This field
+      can be specified only if logging is enabled for this service.
+    type: number

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/MatchRule.yaml

@@ -0,0 +1,76 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 MatchRule export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  fullPathMatch:
+    description: |-
+      To satisfy the `MatchRule` condition, the path of the request must exactly
+      match the value specified in `full_path_match` after removing any query
+      parameters and anchors that might be part of the original URL.
+      `full_path_match` must begin with a `/`. The value must be between 1 and
+      1024 characters, (inclusive). One of prefix_match, `full_path_match`, or
+      path_template_match must be specified.
+    type: string
+  headerMatches:
+    description: |-
+      A list of HeaderMatch criteria, all of which must match corresponding
+      headers in the request. You can specify up to three headers to match on.
+    type: array
+    items:
+      $ref: HeaderMatch.yaml
+  ignoreCase:
+    description: |-
+      Specifies that prefix_match and full_path_match matches are not case
+      sensitive. The default value is `false`, which means that matches are
+      case sensitive.
+    type: boolean
+  pathTemplateMatch:
+    description: |-
+      To satisfy the `MatchRule` condition, the path of the request must
+      match the wildcard pattern specified in `path_template_match` after
+      removing any query parameters and anchors that might be part of the
+      original URL. `path_template_match` must be between 1 and 255
+      characters (inclusive). The pattern specified by `path_template_match`
+      can have at most 10 wildcard operators and 10 variable captures. One
+      of prefix_match, full_path_match, or `path_template_match` must be
+      specified.
+    type: string
+  prefixMatch:
+    description: |-
+      To satisfy the `MatchRule` condition, the request's path must begin
+      with the specified `prefix_match`. `prefix_match` must begin with a
+      `/`. The value must be between 1 and 1024 characters (inclusive). One
+      of `prefix_match`, full_path_match, or path_template_match must be
+      specified.
+    type: string
+  queryParameterMatches:
+    description: |-
+      A list of QueryParameterMatcher criteria, all of which must match
+      corresponding query parameters in the request. You can specify up to
+      five query parameters to match on.
+    type: array
+    items:
+      $ref: QueryParameterMatcher.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/Mesh.yaml

@@ -0,0 +1,59 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 Mesh export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- name
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  description:
+    description: |-
+      A free-text description of the resource. Max length 1024 characters.
+    type: string
+  envoyHeaders:
+    description: |-
+      Determines if envoy will insert internal debug headers into upstream
+      requests. Other Envoy headers may still be injected. By default, envoy
+      will not insert any debug headers.
+    type: string
+    enum:
+    - DEBUG_HEADERS
+    - ENVOY_HEADERS_UNSPECIFIED
+    - NONE
+  interceptionPort:
+    description: |-
+      If set to a valid TCP port (1-65535), instructs the SIDECAR proxy to
+      listen on the specified port of localhost (127.0.0.1) address. The SIDECAR
+      proxy will expect all traffic to be redirected to this port regardless of
+      its actual ip:port destination. If unset, a port '15001' is used as the
+      interception port. This is applicable only for sidecar proxy deployments.
+    type: integer
+  labels:
+    description: Set of label tags associated with the Mesh resource.
+    $ref: LabelsValue.yaml
+  name:
+    description: |-
+      Name of the Mesh resource. It matches pattern
+      `projects/*/locations/global/meshes/`.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/NegativeCachingPolicyValue.yaml

@@ -0,0 +1,33 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 NegativeCachingPolicyValue export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties:
+  key:
+    description: Name of the additional property.
+    type: string
+  value:
+    description: A string attribute.
+    type: string
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/OriginHeaderAction.yaml

@@ -0,0 +1,32 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 OriginHeaderAction export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  requestHeadersToAdd:
+    description: A header to add. You can add a maximum of 25 request headers.
+    type: array
+    items:
+      $ref: OriginHeaderActionAddHeader.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/OriginHeaderActionAddHeader.yaml

@@ -0,0 +1,43 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 OriginHeaderActionAddHeader export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- headerName
+- headerValue
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  headerName:
+    description: The name of the header to add.
+    type: string
+  headerValue:
+    description: The value of the header to add.
+    type: string
+  replace:
+    description: |-
+      Specifies whether to replace all existing headers with the same name. By
+      default, added header values are appended to the response or request
+      headers with the same field names. The added values are separated by
+      commas. To overwrite existing values, set `replace` to `true`.
+    type: boolean

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/OriginOverrideAction.yaml

@@ -0,0 +1,37 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 OriginOverrideAction export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  headerAction:
+    description: |-
+      The header actions, including adding and removing headers, for requests
+      handled by this origin.
+    $ref: OriginHeaderAction.yaml
+  urlRewrite:
+    description: |-
+      The URL rewrite configuration for requests that are handled by this
+      origin.
+    $ref: OriginUrlRewrite.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/OriginRedirect.yaml

@@ -0,0 +1,39 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 OriginRedirect export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  redirectConditions:
+    description: The set of HTTP redirect response codes that the CDN follows.
+    type: array
+    items:
+      type: string
+      enum:
+      - FOUND
+      - MOVED_PERMANENTLY
+      - PERMANENT_REDIRECT
+      - REDIRECT_CONDITIONS_UNSPECIFIED
+      - SEE_OTHER
+      - TEMPORARY_REDIRECT

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/OriginUrlRewrite.yaml

@@ -0,0 +1,33 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 OriginUrlRewrite export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  hostRewrite:
+    description: |-
+      Before forwarding the request to the selected origin, the request's `Host`
+      header is replaced with the contents of `hostRewrite`. The host value must
+      be between 1 and 255 characters.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/PathMatcher.yaml

@@ -0,0 +1,47 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 PathMatcher export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- name
+- routeRules
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  description:
+    description: A human-readable description of the resource.
+    type: string
+  name:
+    description: |-
+      The name to which this `PathMatcher` is referred by the HostRule.
+    type: string
+  routeRules:
+    description: |-
+      A list of RouteRule rules to match against. `RouteRule` rules support
+      advanced routing behavior, and can match on paths, headers and query
+      parameters, as well as status codes and HTTP methods. You must specify at
+      least one rule, and can specify a maximum of 200 rules. `RouteRule` rules
+      must not have duplicate priority values.
+    type: array
+    items:
+      $ref: RouteRule.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/PublicKey.yaml

@@ -0,0 +1,51 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 PublicKey export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- id
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  id:
+    description: |-
+      The ID of the public key. The ID must be 1-64 characters long, and match
+      the regular expression `[a-zA-Z]([a-zA-Z0-9_-])*` which means the first
+      character must be a letter, and all following characters must be a dash,
+      an underscore, a letter, or a digit.
+    type: string
+  managed:
+    description: |-
+      Set to `true` to have the CDN automatically manage this public key.
+      Managed keys are used by the CDN for dual-token authentication. Media CDN
+      internally generates, uses, and rotates the underlying public and private
+      key pair. It is not possible to use a managed key outside of dual-token
+      authentication. Either `value` or `managed` must be specified.
+    type: boolean
+  value:
+    description: |-
+      The base64-encoded value of the Ed25519 public key. The base64 encoding
+      can be padded (44 bytes) or unpadded (43 bytes). Representations or
+      encodings of the public key other than this are rejected with an error.
+      Either `value` or `managed` must be specified.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/QueryParameterMatcher.yaml

@@ -0,0 +1,49 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 QueryParameterMatcher export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- name
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  exactMatch:
+    description: |-
+      The QueryParameterMatcher matches if the value of the parameter exactly
+      matches the contents of `exact_match`. The match value must be between 1
+      and 64 characters long (inclusive). Only one of present_match or
+      `exact_match` must be set.
+    type: string
+  name:
+    description: |-
+      The name of the query parameter to match. The query parameter must exist
+      in the request; if it doesn't, the request match fails. The name must be
+      specified and be between 1 and 32 characters long (inclusive).
+    type: string
+  presentMatch:
+    description: |-
+      Specifies that the QueryParameterMatcher matches if the request contains
+      the query parameter. The match can succeed as long as the request contains
+      the query parameter, regardless of whether the parameter has a value or
+      not. Only one of `present_match` or exact_match must be set.
+    type: boolean

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/RouteAction.yaml

@@ -0,0 +1,55 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 RouteAction export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  cdnPolicy:
+    description: |-
+      The policy to use for defining caching and signed request behavior for
+      requests that match this route.
+    $ref: CDNPolicy.yaml
+  compressionMode:
+    description: |-
+      The compression mode to use for responses. If not specified, Media CDN
+      doesn't compress uncompressed responses received from the origin.
+    type: string
+    enum:
+    - AUTOMATIC
+    - COMPRESSION_MODE_UNSPECIFIED
+    - DISABLED
+  corsPolicy:
+    description: |-
+      The Cross-Origin Resource Sharing (CORS) policy for requests that match
+      this route.
+    $ref: CORSPolicy.yaml
+  urlRewrite:
+    description: |-
+      The URL rewrite configuration for requests that match this route.
+    $ref: UrlRewrite.yaml
+  wasmAction:
+    description: |-
+      A WasmAction resource in the format:
+      `projects/{project}/locations/{location}/wasmActions/{wasm_action}`
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/RouteRule.yaml

@@ -0,0 +1,84 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 RouteRule export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- matchRules
+- priority
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  description:
+    description: A human-readable description of the `RouteRule`.
+    type: string
+  headerAction:
+    description: |-
+      The header actions, including adding and removing headers, for requests
+      that match this route.
+    $ref: HeaderAction.yaml
+  matchRules:
+    description: |-
+      The list of criteria for matching attributes of a request to this
+      `RouteRule`. This list has `OR` semantics: the request matches this
+      `RouteRule` when any of the MatchRules are satisfied. However, predicates
+      within a given `MatchRule` have `AND` semantics. All predicates within a
+      `MatchRule` must match for the request to match the rule. You can specify
+      up to five match rules.
+    type: array
+    items:
+      $ref: MatchRule.yaml
+  origin:
+    description: |-
+      An alternate EdgeCacheOrigin resource that this route responds with
+      when a matching response is not in the cache. The following are both
+      valid paths to an `EdgeCacheOrigin` resource: * `projects/my-
+      project/locations/global/edgeCacheOrigins/my-origin` * `my- origin`
+      Only one of `origin` or url_redirect can be set.
+    type: string
+  priority:
+    description: |-
+      The priority of this route rule, where `1` is the highest priority.
+      You cannot configure two or more `RouteRules` with the same priority.
+      Priority for each rule must be set to a number between 1 and 999
+      inclusive. Priority numbers can have gaps, which enable you to add or
+      remove rules in the future without affecting the rest of the rules.
+      For example, `1, 2, 3, 4, 5, 9, 12, 16` is a valid series of priority
+      numbers to which you could add rules numbered from 6 to 8, 10 to 11,
+      and 13 to 15 in the future without any impact on existing rules.
+    type: integer
+  routeAction:
+    description: |-
+      In response to a matching path, the RouteAction performs advanced
+      routing actions like URL rewrites, header transformations, and so
+      forth prior to forwarding the request to the selected origin.
+    $ref: RouteAction.yaml
+  routeMethods:
+    description: |-
+      Allow overriding the set of methods that are allowed for this route.
+      When not set, Media CDN allows only `GET`, `HEAD`, and `OPTIONS`.
+    $ref: RouteRuleRouteMethods.yaml
+  urlRedirect:
+    description: |-
+      The URL redirect configuration for requests that match this route.
+      Only one of origin or `url_redirect` can be set.
+    $ref: UrlRedirect.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/RouteRuleRouteMethods.yaml

@@ -0,0 +1,35 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 RouteRuleRouteMethods export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- allowedMethods
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  allowedMethods:
+    description: |-
+      The non-empty set of HTTP methods that are allowed for this route.
+    type: array
+    items:
+      type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/Routing.yaml

@@ -0,0 +1,48 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 Routing export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- hostRules
+- pathMatchers
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  hostRules:
+    description: |-
+      A list of HostRule rules to match against. `RouteRule` rules support
+      advanced routing behavior, and can match on paths, headers and query
+      parameters, as well as status codes and HTTP methods. You can specify up
+      to 50 host rules.
+    type: array
+    items:
+      $ref: HostRule.yaml
+  pathMatchers:
+    description: |-
+      A list of PathMatcher values referenced by name by HostRule values.
+      `PathMatcher` is used to match the path portion of the URL when
+      a`HostRule` value matches the URL's host portion. You can specify up
+      to 50 path matchers.
+    type: array
+    items:
+      $ref: PathMatcher.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/Secret.yaml

@@ -0,0 +1,40 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 Secret export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- secretVersion
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  secretVersion:
+    description: |-
+      The name of the secret in Secret Manager. The resource name of the secret
+      version must be in the format `projects/*/secrets/*/versions/*` where the
+      `*` values are replaced by the name of the secret. The secrets must be at
+      least 16 bytes. The recommended secret size depends on the signature
+      algorithm that you're using. * If you're using `HMAC-SHA1`, we recommend
+      20-byte secrets. * If you're using `HMAC-SHA256`, we recommend 32-byte
+      secrets. See RFC 2104, Section 3 for more details on these
+      recommendations.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/ServiceBinding.yaml

@@ -0,0 +1,45 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 ServiceBinding export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  description:
+    description: |-
+      A free-text description of the resource. Max length 1024 characters.
+    type: string
+  labels:
+    description: Set of label tags associated with the ServiceBinding resource.
+    $ref: LabelsValue.yaml
+  name:
+    description: |-
+      Identifier. Name of the ServiceBinding resource. It matches pattern
+      `projects/*/locations/*/serviceBindings/`.
+    type: string
+  service:
+    description: |-
+      The full Service Directory Service name of the format
+      `projects/*/locations/*/namespaces/*/services/*`. This field is for
+      Service Directory integration which will be deprecated soon.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/ServiceLbPolicy.yaml

@@ -0,0 +1,64 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 ServiceLbPolicy export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  autoCapacityDrain:
+    description: |-
+      Configuration to automatically move traffic away for unhealthy IG/NEG for
+      the associated Backend Service.
+    $ref: ServiceLbPolicyAutoCapacityDrain.yaml
+  description:
+    description: |-
+      A free-text description of the resource. Max length 1024 characters.
+    type: string
+  failoverConfig:
+    description: Configuration related to health based failover.
+    $ref: ServiceLbPolicyFailoverConfig.yaml
+  isolationConfig:
+    description: |-
+      Configuration to provide isolation support for the associated Backend
+      Service.
+    $ref: ServiceLbPolicyIsolationConfig.yaml
+  labels:
+    description: Set of label tags associated with the ServiceLbPolicy resource.
+    $ref: LabelsValue.yaml
+  loadBalancingAlgorithm:
+    description: |-
+      The type of load balancing algorithm to be used. The default behavior is
+      WATERFALL_BY_REGION.
+    type: string
+    enum:
+    - LOAD_BALANCING_ALGORITHM_UNSPECIFIED
+    - SPRAY_TO_REGION
+    - SPRAY_TO_WORLD
+    - WATERFALL_BY_REGION
+    - WATERFALL_BY_ZONE
+  name:
+    description: |-
+      Identifier. Name of the ServiceLbPolicy resource. It matches pattern
+      `projects/{project}/locations/{location}/serviceLbPolicies/{service_lb_p
+      olicy_name}`.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/ServiceLbPolicyAutoCapacityDrain.yaml

@@ -0,0 +1,34 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 ServiceLbPolicyAutoCapacityDrain export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  enable:
+    description: |-
+      If set to 'True', an unhealthy IG/NEG will be set as drained. - An IG/NEG
+      is considered unhealthy if less than 25% of the instances/endpoints in the
+      IG/NEG are healthy. - This option will never result in draining more than
+      50% of the configured IGs/NEGs for the Backend Service.
+    type: boolean

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/ServiceLbPolicyFailoverConfig.yaml

@@ -0,0 +1,36 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 ServiceLbPolicyFailoverConfig export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  failoverHealthThreshold:
+    description: |-
+      The percentage threshold that a load balancer will begin to send traffic
+      to failover backends. If the percentage of endpoints in a MIG/NEG is
+      smaller than this value, traffic would be sent to failover backends if
+      possible. This field should be set to a value between 1 and 99. The
+      default value is 50 for Global external HTTP(S) load balancer (classic)
+      and Proxyless service mesh, and 70 for others.
+    type: integer

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/ServiceLbPolicyIsolationConfig.yaml

@@ -0,0 +1,40 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 ServiceLbPolicyIsolationConfig export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  isolationGranularity:
+    description: The isolation granularity of the load balancer.
+    type: string
+    enum:
+    - ISOLATION_GRANULARITY_UNSPECIFIED
+    - REGION
+  isolationMode:
+    description: The isolation mode of the load balancer.
+    type: string
+    enum:
+    - ISOLATION_MODE_UNSPECIFIED
+    - NEAREST
+    - STRICT

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/SetValue.yaml

@@ -0,0 +1,33 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 SetValue export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties:
+  key:
+    description: Name of the additional property.
+    type: string
+  value:
+    description: A string attribute.
+    type: string
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/TcpRoute.yaml

@@ -0,0 +1,69 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 TcpRoute export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- name
+- rules
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  description:
+    description: |-
+      A free-text description of the resource. Max length 1024 characters.
+    type: string
+  gateways:
+    description: |-
+      Gateways defines a list of gateways this TcpRoute is attached to, as one
+      of the routing rules to route the requests served by the gateway. Each
+      gateway reference should match the pattern:
+      `projects/*/locations/global/gateways/`
+    type: array
+    items:
+      type: string
+  labels:
+    description: Set of label tags associated with the TcpRoute resource.
+    $ref: LabelsValue.yaml
+  meshes:
+    description: |-
+      Meshes defines a list of meshes this TcpRoute is attached to, as one
+      of the routing rules to route the requests served by the mesh. Each
+      mesh reference should match the pattern:
+      `projects/*/locations/global/meshes/` The attached Mesh should be of a
+      type SIDECAR
+    type: array
+    items:
+      type: string
+  name:
+    description: |-
+      Name of the TcpRoute resource. It matches pattern
+      `projects/*/locations/global/tcpRoutes/tcp_route_name>`.
+    type: string
+  rules:
+    description: |-
+      Rules that define how traffic is routed and handled. At least one
+      RouteRule must be supplied. If there are multiple rules then the
+      action taken will be the first rule to match.
+    type: array
+    items:
+      $ref: TcpRouteRouteRule.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/TcpRouteRouteAction.yaml

@@ -0,0 +1,49 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 TcpRouteRouteAction export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  destinations:
+    description: |-
+      The destination services to which traffic should be forwarded. At least
+      one destination service is required. Only one of route destination or
+      original destination can be set.
+    type: array
+    items:
+      $ref: TcpRouteRouteDestination.yaml
+  idleTimeout:
+    description: |-
+      Specifies the idle timeout for the selected route. The idle timeout is
+      defined as the period in which there are no bytes sent or received on
+      either the upstream or downstream connection. If not set, the default
+      idle timeout is 30 seconds. If set to 0s, the timeout will be
+      disabled.
+    type: string
+  originalDestination:
+    description: |-
+      If true, Router will use the destination IP and port of the original
+      connection as the destination of the request. Default is false. Only
+      one of route destinations or original destination can be set.
+    type: boolean

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/TcpRouteRouteDestination.yaml

@@ -0,0 +1,44 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 TcpRouteRouteDestination export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- serviceName
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  serviceName:
+    description: The URL of a BackendService to route traffic to.
+    type: string
+  weight:
+    description: |-
+      Specifies the proportion of requests forwarded to the backend referenced
+      by the serviceName field. This is computed as: - weight/Sum(weights in
+      this destination list). For non-zero values, there may be some epsilon
+      from the exact proportion defined here depending on the precision an
+      implementation supports. If only one serviceName is specified and it has a
+      weight greater than 0, 100% of the traffic is forwarded to that backend.
+      If weights are specified for any one service name, they need to be
+      specified for all of them. If weights are unspecified for all services,
+      then, traffic is distributed in equal proportions to all of them.
+    type: integer

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/TcpRouteRouteMatch.yaml

@@ -0,0 +1,43 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 TcpRouteRouteMatch export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- address
+- port
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  address:
+    description: |-
+      Must be specified in the CIDR range format. A CIDR range consists of an IP
+      Address and a prefix length to construct the subnet mask. By default, the
+      prefix length is 32 (i.e. matches a single IP address). Only IPV4
+      addresses are supported. Examples: "10.0.0.1" - matches against this exact
+      IP address. "10.0.0.0/8" - matches against any IP address within the
+      10.0.0.0 subnet and 255.255.255.0 mask. "0.0.0.0/0" - matches against any
+      IP address'.
+    type: string
+  port:
+    description: Specifies the destination port to match against.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/TcpRouteRouteRule.yaml

@@ -0,0 +1,40 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 TcpRouteRouteRule export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- action
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  action:
+    description: The detailed rule defining how to route matched traffic.
+    $ref: TcpRouteRouteAction.yaml
+  matches:
+    description: |-
+      RouteMatch defines the predicate used to match requests to a given action.
+      Multiple match types are "OR"ed for evaluation. If no routeMatch field is
+      specified, this rule will unconditionally match traffic.
+    type: array
+    items:
+      $ref: TcpRouteRouteMatch.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/Timeout.yaml

@@ -0,0 +1,67 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 Timeout export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  connectTimeout:
+    description: |-
+      The maximum duration to wait for a single origin connection to be
+      established, including DNS lookup, TLS handshake, and TCP/QUIC connection
+      establishment. Defaults to 5 seconds. The timeout must be a value between
+      1s and 15s. The `connect_timeout` capped by the deadline set by the
+      request's max_attempts_timeout. The last connection attempt can have a
+      smaller `connect_timeout` so that the total `max_attempts_timeout` value
+      is not exceeded.
+    type: string
+  maxAttemptsTimeout:
+    description: |-
+      The maximum time across all connection attempts to all origins, including
+      failover origins, before returning an error to the client. An `HTTP 504`
+      error is returned if the timeout is reached before a response is returned.
+      Defaults to 15 seconds. The timeout must be a value between 1s and 30s. If
+      a failover origin is specified, the `max_attempts_timeout` value of the
+      first configured origin sets the deadline for all connection attempts
+      across all failover origins.
+    type: string
+  readTimeout:
+    description: |-
+      The maximum duration to wait between reads of a single HTTP connection or
+      stream. Defaults to 15 seconds. The timeout must be a value between 1s and
+      30s. The `read_timeout` value is capped by the response_timeout value. All
+      reads of the HTTP connection or stream must be completed by the deadline
+      set by response_timeout. If the response headers have already been written
+      to the connection, the response is truncated and logged.
+    type: string
+  responseTimeout:
+    description: |-
+      The maximum duration to wait for the last byte of a response to arrive
+      when reading from the HTTP connection/stream. Defaults to 30 seconds. The
+      timeout must be a value between 1s and 120s. The `response_timeout` starts
+      after the connection has been established. Origins that take longer to
+      write additional bytes to the response than the configured
+      `response_timeout` value result in an error returned to the client. If the
+      response headers have already been written to the connection, the response
+      is truncated and logged.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/TlsRoute.yaml

@@ -0,0 +1,69 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 TlsRoute export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- name
+- rules
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  description:
+    description: |-
+      A free-text description of the resource. Max length 1024 characters.
+    type: string
+  gateways:
+    description: |-
+      Gateways defines a list of gateways this TlsRoute is attached to, as one
+      of the routing rules to route the requests served by the gateway. Each
+      gateway reference should match the pattern:
+      `projects/*/locations/global/gateways/`
+    type: array
+    items:
+      type: string
+  labels:
+    description: Set of label tags associated with the TlsRoute resource.
+    $ref: LabelsValue.yaml
+  meshes:
+    description: |-
+      Meshes defines a list of meshes this TlsRoute is attached to, as one
+      of the routing rules to route the requests served by the mesh. Each
+      mesh reference should match the pattern:
+      `projects/*/locations/global/meshes/` The attached Mesh should be of a
+      type SIDECAR
+    type: array
+    items:
+      type: string
+  name:
+    description: |-
+      Name of the TlsRoute resource. It matches pattern
+      `projects/*/locations/global/tlsRoutes/tls_route_name>`.
+    type: string
+  rules:
+    description: |-
+      Rules that define how traffic is routed and handled. At least one
+      RouteRule must be supplied. If there are multiple rules then the
+      action taken will be the first rule to match.
+    type: array
+    items:
+      $ref: TlsRouteRouteRule.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/TlsRouteRouteAction.yaml

@@ -0,0 +1,43 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 TlsRouteRouteAction export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- destinations
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  destinations:
+    description: |-
+      The destination services to which traffic should be forwarded. At least
+      one destination service is required.
+    type: array
+    items:
+      $ref: TlsRouteRouteDestination.yaml
+  idleTimeout:
+    description: |-
+      Specifies the idle timeout for the selected route. The idle timeout is
+      defined as the period in which there are no bytes sent or received on
+      either the upstream or downstream connection. If not set, the default
+      idle timeout is 1 hour. If set to 0s, the timeout will be disabled.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/TlsRouteRouteDestination.yaml

@@ -0,0 +1,38 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 TlsRouteRouteDestination export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- serviceName
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  serviceName:
+    description: The URL of a BackendService to route traffic to.
+    type: string
+  weight:
+    description: |-
+      Specifies the proportion of requests forwareded to the backend referenced
+      by the service_name field. This is computed as: - weight/Sum(weights in
+      destinations) Weights in all destinations does not need to sum up to 100.
+    type: integer

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/TlsRouteRouteMatch.yaml

@@ -0,0 +1,46 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 TlsRouteRouteMatch export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  alpn:
+    description: |-
+      ALPN (Application-Layer Protocol Negotiation) to match against. Examples:
+      "http/1.1", "h2". At least one of sni_host and alpn is required. Up to 5
+      alpns across all matches can be set.
+    type: array
+    items:
+      type: string
+  sniHost:
+    description: |-
+      SNI (server name indicator) to match against. SNI will be matched
+      against all wildcard domains, i.e. `www.example.com` will be first
+      matched against `www.example.com`, then `*.example.com`, then `*.com.`
+      Partial wildcards are not supported, and values like *w.example.com
+      are invalid. At least one of sni_host and alpn is required. Up to 5
+      sni hosts across all matches can be set.
+    type: array
+    items:
+      type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/TlsRouteRouteRule.yaml

@@ -0,0 +1,40 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 TlsRouteRouteRule export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- action
+- matches
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  action:
+    description: The detailed rule defining how to route matched traffic.
+    $ref: TlsRouteRouteAction.yaml
+  matches:
+    description: |-
+      RouteMatch defines the predicate used to match requests to a given action.
+      Multiple match types are "OR"ed for evaluation.
+    type: array
+    items:
+      $ref: TlsRouteRouteMatch.yaml

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/TrafficPortSelector.yaml

@@ -0,0 +1,35 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 TrafficPortSelector export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  ports:
+    description: |-
+      A list of ports. Can be port numbers or port range (example, [80-90]
+      specifies all ports from 80 to 90, including 80 and 90) or named ports or
+      * to specify all ports. If the list is empty, all ports are selected.
+    type: array
+    items:
+      type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/UrlRedirect.yaml

@@ -0,0 +1,76 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 UrlRedirect export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  hostRedirect:
+    description: |-
+      The host that is used in the redirect response instead of the one that was
+      supplied in the request. The value must be between 1 and 255 characters.
+    type: string
+  httpsRedirect:
+    description: |-
+      Determines whether the URL scheme in the redirected request is adjusted to
+      `HTTPS` or remains that of the request. If it is set to `true` and at
+      least one edge_ssl_certificates is set on the service, the URL scheme in
+      the redirected request is set to `HTTPS`. If it is set to `false`, the URL
+      scheme of the redirected request remains the same as that of the request.
+    type: boolean
+  pathRedirect:
+    description: |-
+      The path that is used in the redirect response instead of the one that was
+      supplied in the request. `path_redirect` cannot be supplied together with
+      prefix_redirect. Supply one alone or neither. If neither is supplied, the
+      path of the original request is used for the redirect. The path value must
+      be between 1 and 1024 characters.
+    type: string
+  prefixRedirect:
+    description: |-
+      The prefix that replaces the prefix_match specified in the RouteRule rule,
+      retaining the remaining portion of the URL before redirecting the request.
+      `prefix_redirect` cannot be supplied together with path_redirect. Supply
+      one alone or neither. If neither is supplied, the path of the original
+      request is used for the redirect. The prefix value must be between 1 and
+      1024 characters.
+    type: string
+  redirectResponseCode:
+    description: |-
+      The HTTP status code to use for this redirect action. For a list of
+      supported values, see RedirectResponseCode.
+    type: string
+    enum:
+    - FOUND
+    - MOVED_PERMANENTLY_DEFAULT
+    - PERMANENT_REDIRECT
+    - SEE_OTHER
+    - TEMPORARY_REDIRECT
+  stripQuery:
+    description: |-
+      Determines whether accompanying query portions of the original URL are
+      removed prior to redirecting the request. If it is set to `true`, the
+      accompanying query portion of the original URL is removed before
+      redirecting the request. If it is set to `false`, the query portion of the
+      original URL is retained. The default is `false`.
+    type: boolean

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1/UrlRewrite.yaml

@@ -0,0 +1,54 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1 UrlRewrite export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  hostRewrite:
+    description: |-
+      Before forwarding the request to the selected origin, the request's host
+      header is replaced with contents of `host_rewrite`. The host value must be
+      between 1 and 255 characters.
+    type: string
+  pathPrefixRewrite:
+    description: |-
+      Before forwarding the request to the selected origin, the matching portion
+      of the request's path is replaced by `path_prefix_rewrite`. If specified,
+      the path value must start with a `/` and be between 1 and 1024 characters
+      long (inclusive). `path_prefix_rewrite` can only be used when all of a
+      route's match_rules specify prefix_match or full_path_match. Only one of
+      `path_prefix_rewrite` and path_template_rewrite can be specified.
+    type: string
+  pathTemplateRewrite:
+    description: |-
+      Before forwarding the request to the selected origin, if the request
+      matched a path_template_match, the matching portion of the request's path
+      is replaced re-written using the pattern specified by
+      `path_template_rewrite`. `path_template_rewrite` must be between 1 and 255
+      characters (inclusive), must start with a `/`, and must only use variables
+      captured by the route's `path_template_match`. `path_template_rewrite` can
+      only be used when all of a route's match_rules specify
+      `path_template_match`. Only one of path_prefix_rewrite and
+      `path_template_rewrite` can be specified.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1alpha1/AWSV4Signature.yaml

@@ -0,0 +1,44 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1alpha1 AWSV4Signature export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+required:
+- accessKeyId
+- originRegion
+- secretAccessKeyVersion
+additionalProperties: false
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string
+  accessKeyId:
+    description: The access key ID that your origin uses to identify the key.
+    type: string
+  originRegion:
+    description: The name of the AWS region that your origin is in.
+    type: string
+  secretAccessKeyVersion:
+    description: |-
+      The Secret Manager secret version of the secret access key used by your
+      origin. This is the resource name of the secret version in the format
+      `projects/*/secrets/*/versions/*` where the `*` values are replaced by the
+      project, the secret, and the version that you require.
+    type: string

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/schemas/networkservices/v1alpha1/AddValue.yaml

@@ -0,0 +1,33 @@
+$schema: "http://json-schema.org/draft-06/schema#"
+
+title: networkservices v1alpha1 AddValue export schema
+description: A gcloud export/import command YAML validation schema.
+type: object
+additionalProperties:
+  key:
+    description: Name of the additional property.
+    type: string
+  value:
+    description: A string attribute.
+    type: string
+properties:
+  COMMENT:
+    type: object
+    description: User specified info ignored by gcloud import.
+    additionalProperties: false
+    properties:
+      template-id:
+        type: string
+      region:
+        type: string
+      description:
+        type: string
+      date:
+        type: string
+      version:
+        type: string
+  UNKNOWN:
+    type: array
+    description: Unknown API fields that cannot be imported.
+    items:
+      type: string