feat: add BeyondCorp clientgateways API

PiperOrigin-RevId: 456537186
3 years ago · 584bde6484
parent 7eebdfc574
commit 584bde6484
4 changed files with 772 additions and 0 deletions
--- a/google/cloud/beyondcorp/clientgateways/v1/BUILD.bazel
+++ b/google/cloud/beyondcorp/clientgateways/v1/BUILD.bazel
@ -0,0 +1,321 @@
+# This file was automatically generated by BuildFileGenerator
+# https://github.com/googleapis/rules_gapic/tree/master/bazel
+
+# Most of the manual changes to this file will be overwritten.
+# It's **only** allowed to change the following rule attribute values:
+# - names of *_gapic_assembly_* rules
+# - certain parameters of *_gapic_library rules, including but not limited to:
+#    * extra_protoc_parameters
+#    * extra_protoc_file_parameters
+# The complete list of preserved parameters can be found in the source code.
+
+##############################################################################
+# Common
+##############################################################################
+load("@rules_proto//proto:defs.bzl", "proto_library")
+load(
+    "@com_google_googleapis_imports//:imports.bzl",
+    "cc_grpc_library",
+    "cc_proto_library",
+    "csharp_gapic_assembly_pkg",
+    "csharp_gapic_library",
+    "csharp_grpc_library",
+    "csharp_proto_library",
+    "go_gapic_assembly_pkg",
+    "go_gapic_library",
+    "go_proto_library",
+    "go_test",
+    "java_gapic_assembly_gradle_pkg",
+    "java_gapic_library",
+    "java_gapic_test",
+    "java_grpc_library",
+    "java_proto_library",
+    "nodejs_gapic_assembly_pkg",
+    "nodejs_gapic_library",
+    "php_gapic_assembly_pkg",
+    "php_gapic_library",
+    "php_grpc_library",
+    "php_proto_library",
+    "proto_library_with_info",
+    "py_gapic_assembly_pkg",
+    "py_gapic_library",
+    "ruby_cloud_gapic_library",
+    "ruby_gapic_assembly_pkg",
+    "ruby_grpc_library",
+    "ruby_proto_library",
+)
+
+# This is an API workspace, having public visibility by default makes perfect sense.
+package(default_visibility = ["//visibility:public"])
+
+proto_library(
+    name = "clientgateways_proto",
+    srcs = [
+        "client_gateways_service.proto",
+    ],
+    deps = [
+        "//google/api:annotations_proto",
+        "//google/api:client_proto",
+        "//google/api:field_behavior_proto",
+        "//google/api:resource_proto",
+        "//google/longrunning:operations_proto",
+        "@com_google_protobuf//:timestamp_proto",
+    ],
+)
+
+proto_library_with_info(
+    name = "clientgateways_proto_with_info",
+    deps = [
+        ":clientgateways_proto",
+        "//google/cloud:common_resources_proto",
+        "//google/cloud/location:location_proto",
+        "//google/iam/v1:iam_policy_proto",
+    ],
+)
+
+java_proto_library(
+    name = "clientgateways_java_proto",
+    deps = [":clientgateways_proto"],
+)
+
+java_grpc_library(
+    name = "clientgateways_java_grpc",
+    srcs = [":clientgateways_proto"],
+    deps = [":clientgateways_java_proto"],
+)
+
+java_gapic_library(
+    name = "clientgateways_java_gapic",
+    srcs = [":clientgateways_proto_with_info"],
+    gapic_yaml = None,
+    grpc_service_config = "beyondcorp-clientgateways_grpc_service_config.json",
+    service_yaml = "beyondcorp_v1.yaml",
+    test_deps = [
+        ":clientgateways_java_grpc",
+        "//google/cloud/location:location_java_grpc",
+        "//google/iam/v1:iam_java_grpc",
+    ],
+    deps = [
+        ":clientgateways_java_proto",
+        "//google/api:api_java_proto",
+        "//google/cloud/location:location_java_proto",
+        "//google/iam/v1:iam_java_proto",
+    ],
+)
+
+java_gapic_test(
+    name = "clientgateways_java_gapic_test_suite",
+    test_classes = [
+        "com.google.cloud.beyondcorp.clientgateways.v1.ClientGatewaysServiceClientTest",
+    ],
+    runtime_deps = [":clientgateways_java_gapic_test"],
+)
+
+# Open Source Packages
+java_gapic_assembly_gradle_pkg(
+    name = "google-cloud-beyondcorp-clientgateways-v1-java",
+    include_samples = True,
+    deps = [
+        ":clientgateways_java_gapic",
+        ":clientgateways_java_grpc",
+        ":clientgateways_java_proto",
+        ":clientgateways_proto",
+    ],
+)
+
+go_proto_library(
+    name = "clientgateways_go_proto",
+    compilers = ["@io_bazel_rules_go//proto:go_grpc"],
+    importpath = "google.golang.org/genproto/googleapis/cloud/beyondcorp/clientgateways/v1",
+    protos = [":clientgateways_proto"],
+    deps = [
+        "//google/api:annotations_go_proto",
+        "//google/longrunning:longrunning_go_proto",
+    ],
+)
+
+go_gapic_library(
+    name = "clientgateways_go_gapic",
+    srcs = [":clientgateways_proto_with_info"],
+    grpc_service_config = "beyondcorp-clientgateways_grpc_service_config.json",
+    importpath = "cloud.google.com/go/beyondcorp/clientgateways/apiv1;clientgateways",
+    metadata = True,
+    service_yaml = "beyondcorp_v1.yaml",
+    deps = [
+        ":clientgateways_go_proto",
+        "//google/cloud/location:location_go_proto",
+        "//google/iam/v1:iam_go_proto",
+        "//google/longrunning:longrunning_go_proto",
+        "@com_google_cloud_go//longrunning:go_default_library",
+        "@com_google_cloud_go//longrunning/autogen:go_default_library",
+    ],
+)
+
+go_test(
+    name = "clientgateways_go_gapic_test",
+    srcs = [":clientgateways_go_gapic_srcjar_test"],
+    embed = [":clientgateways_go_gapic"],
+    importpath = "cloud.google.com/go/beyondcorp/clientgateways/apiv1",
+)
+
+# Open Source Packages
+go_gapic_assembly_pkg(
+    name = "gapi-cloud-beyondcorp-clientgateways-v1-go",
+    deps = [
+        ":clientgateways_go_gapic",
+        ":clientgateways_go_gapic_srcjar-metadata.srcjar",
+        ":clientgateways_go_gapic_srcjar-test.srcjar",
+        ":clientgateways_go_proto",
+    ],
+)
+
+py_gapic_library(
+    name = "clientgateways_py_gapic",
+    srcs = [":clientgateways_proto"],
+    grpc_service_config = "beyondcorp-clientgateways_grpc_service_config.json",
+    service_yaml = "beyondcorp_v1.yaml",
+)
+
+# Open Source Packages
+py_gapic_assembly_pkg(
+    name = "beyondcorp-clientgateways-v1-py",
+    deps = [
+        ":clientgateways_py_gapic",
+    ],
+)
+
+php_proto_library(
+    name = "clientgateways_php_proto",
+    deps = [":clientgateways_proto"],
+)
+
+php_grpc_library(
+    name = "clientgateways_php_grpc",
+    srcs = [":clientgateways_proto"],
+    deps = [":clientgateways_php_proto"],
+)
+
+php_gapic_library(
+    name = "clientgateways_php_gapic",
+    srcs = [":clientgateways_proto_with_info"],
+    grpc_service_config = "beyondcorp-clientgateways_grpc_service_config.json",
+    service_yaml = "beyondcorp_v1.yaml",
+    deps = [
+        ":clientgateways_php_grpc",
+        ":clientgateways_php_proto",
+    ],
+)
+
+# Open Source Packages
+php_gapic_assembly_pkg(
+    name = "google-cloud-beyondcorp-clientgateways-v1-php",
+    deps = [
+        ":clientgateways_php_gapic",
+        ":clientgateways_php_grpc",
+        ":clientgateways_php_proto",
+    ],
+)
+
+nodejs_gapic_library(
+    name = "clientgateways_nodejs_gapic",
+    package_name = "@google-cloud/clientgateways",
+    src = ":clientgateways_proto_with_info",
+    extra_protoc_parameters = ["metadata"],
+    grpc_service_config = "beyondcorp-clientgateways_grpc_service_config.json",
+    package = "google.cloud.beyondcorp.clientgateways.v1",
+    service_yaml = "beyondcorp_v1.yaml",
+    deps = [],
+)
+
+nodejs_gapic_assembly_pkg(
+    name = "beyondcorp-clientgateways-v1-nodejs",
+    deps = [
+        ":clientgateways_nodejs_gapic",
+        ":clientgateways_proto",
+    ],
+)
+
+ruby_proto_library(
+    name = "clientgateways_ruby_proto",
+    deps = [":clientgateways_proto"],
+)
+
+ruby_grpc_library(
+    name = "clientgateways_ruby_grpc",
+    srcs = [":clientgateways_proto"],
+    deps = [":clientgateways_ruby_proto"],
+)
+
+ruby_cloud_gapic_library(
+    name = "clientgateways_ruby_gapic",
+    srcs = [":clientgateways_proto_with_info"],
+    extra_protoc_parameters = [
+        "ruby-cloud-gem-name=google-cloud-beyond_corp-client_gateways-v1",
+        "ruby-cloud-product-url=https://cloud.google.com/beyondcorp/",
+        "ruby-cloud-api-id=beyondcorp.googleapis.com",
+        "ruby-cloud-api-shortname=beyondcorp",
+    ],
+    grpc_service_config = "beyondcorp-clientgateways_grpc_service_config.json",
+    ruby_cloud_description = "Beyondcorp Enterprise provides identity and context aware access controls for enterprise resources and enables zero-trust access. Using the Beyondcorp Enterprise APIs, enterprises can set up multi-cloud and on-prem connectivity using the App Connector hybrid connectivity solution.",
+    ruby_cloud_title = "BeyondCorp ClientGateways V1",
+    service_yaml = "beyondcorp_v1.yaml",
+    deps = [
+        ":clientgateways_ruby_grpc",
+        ":clientgateways_ruby_proto",
+    ],
+)
+
+# Open Source Packages
+ruby_gapic_assembly_pkg(
+    name = "google-cloud-beyondcorp-clientgateways-v1-ruby",
+    deps = [
+        ":clientgateways_ruby_gapic",
+        ":clientgateways_ruby_grpc",
+        ":clientgateways_ruby_proto",
+    ],
+)
+
+csharp_proto_library(
+    name = "clientgateways_csharp_proto",
+    deps = [":clientgateways_proto"],
+)
+
+csharp_grpc_library(
+    name = "clientgateways_csharp_grpc",
+    srcs = [":clientgateways_proto"],
+    deps = [":clientgateways_csharp_proto"],
+)
+
+csharp_gapic_library(
+    name = "clientgateways_csharp_gapic",
+    srcs = [":clientgateways_proto_with_info"],
+    common_resources_config = "@gax_dotnet//:Google.Api.Gax/ResourceNames/CommonResourcesConfig.json",
+    grpc_service_config = "beyondcorp-clientgateways_grpc_service_config.json",
+    service_yaml = "beyondcorp_v1.yaml",
+    deps = [
+        ":clientgateways_csharp_grpc",
+        ":clientgateways_csharp_proto",
+    ],
+)
+
+# Open Source Packages
+csharp_gapic_assembly_pkg(
+    name = "google-cloud-beyondcorp-clientgateways-v1-csharp",
+    deps = [
+        ":clientgateways_csharp_gapic",
+        ":clientgateways_csharp_grpc",
+        ":clientgateways_csharp_proto",
+    ],
+)
+
+cc_proto_library(
+    name = "clientgateways_cc_proto",
+    deps = [":clientgateways_proto"],
+)
+
+cc_grpc_library(
+    name = "clientgateways_cc_grpc",
+    srcs = [":clientgateways_proto"],
+    grpc_only = True,
+    deps = [":clientgateways_cc_proto"],
+)
--- a/google/cloud/beyondcorp/clientgateways/v1/beyondcorp-clientgateways_grpc_service_config.json
+++ b/google/cloud/beyondcorp/clientgateways/v1/beyondcorp-clientgateways_grpc_service_config.json
@ -0,0 +1,23 @@
+{
+  "methodConfig": [{
+    "name": [
+      { "service": "google.cloud.beyondcorp.clientgateways.v1", "method": "ListClientGateways" },
+      { "service": "google.cloud.beyondcorp.clientgateways.v1", "method": "GetClientGateway" }
+    ],
+    "timeout": "60s",
+    "retryPolicy": {
+      "maxAttempts": 5,
+      "initialBackoff": "1s",
+      "maxBackoff": "10s",
+      "backoffMultiplier": 1.3,
+      "retryableStatusCodes": ["UNAVAILABLE"]
+    }
+  },
+  {
+    "name": [
+      { "service": "google.cloud.beyondcorp.clientgateways.v1", "method": "CreateClientGateway" },
+      { "service": "google.cloud.beyondcorp.clientgateways.v1", "method": "DeleteClientGateway" }
+    ],
+    "timeout": "60s"
+  }]
+}
--- a/google/cloud/beyondcorp/clientgateways/v1/beyondcorp_v1.yaml
+++ b/google/cloud/beyondcorp/clientgateways/v1/beyondcorp_v1.yaml
@ -0,0 +1,132 @@
+type: google.api.Service
+config_version: 3
+name: beyondcorp.googleapis.com
+title: BeyondCorp API
+
+apis:
+- name: google.cloud.beyondcorp.clientgateways.v1.ClientGatewaysService
+- name: google.cloud.location.Locations
+- name: google.iam.v1.IAMPolicy
+- name: google.longrunning.Operations
+
+types:
+- name: google.cloud.beyondcorp.clientgateways.v1.ClientGatewayOperationMetadata
+
+documentation:
+  summary: |-
+    Beyondcorp Enterprise provides identity and context aware access controls
+    for enterprise resources and enables zero-trust access. Using the
+    Beyondcorp Enterprise APIs, enterprises can set up multi-cloud and on-prem
+    connectivity using the App Connector hybrid connectivity solution.
+  rules:
+  - selector: google.cloud.location.Locations.GetLocation
+    description: Gets information about a location.
+
+  - selector: google.cloud.location.Locations.ListLocations
+    description: Lists information about the supported locations for this service.
+
+  - selector: google.iam.v1.IAMPolicy.GetIamPolicy
+    description: |-
+      Gets the access control policy for a resource. Returns an empty policy
+      if the resource exists and does not have a policy set.
+
+  - selector: google.iam.v1.IAMPolicy.SetIamPolicy
+    description: |-
+      Sets the access control policy on the specified resource. Replaces
+      any existing policy.
+
+      Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED`
+      errors.
+
+  - selector: google.iam.v1.IAMPolicy.TestIamPermissions
+    description: |-
+      Returns permissions that a caller has on the specified resource. If the
+      resource does not exist, this will return an empty set of
+      permissions, not a `NOT_FOUND` error.
+
+      Note: This operation is designed to be used for building
+      permission-aware UIs and command-line tools, not for authorization
+      checking. This operation may "fail open" without warning.
+
+backend:
+  rules:
+  - selector: 'google.cloud.beyondcorp.clientgateways.v1.ClientGatewaysService.*'
+    deadline: 60.0
+  - selector: google.cloud.location.Locations.GetLocation
+    deadline: 60.0
+  - selector: google.cloud.location.Locations.ListLocations
+    deadline: 60.0
+  - selector: 'google.iam.v1.IAMPolicy.*'
+    deadline: 60.0
+  - selector: 'google.longrunning.Operations.*'
+    deadline: 60.0
+
+http:
+  rules:
+  - selector: google.cloud.location.Locations.GetLocation
+    get: '/v1/{name=projects/*/locations/*}'
+  - selector: google.cloud.location.Locations.ListLocations
+    get: '/v1/{name=projects/*}/locations'
+  - selector: google.iam.v1.IAMPolicy.GetIamPolicy
+    get: '/v1/{resource=projects/*/locations/*/appConnections/*}:getIamPolicy'
+    additional_bindings:
+    - get: '/v1/{resource=projects/*/locations/*/appConnectors/*}:getIamPolicy'
+    - get: '/v1/{resource=projects/*/locations/*/appGateways/*}:getIamPolicy'
+    - get: '/v1/{resource=projects/*/locations/*/clientConnectorServices/*}:getIamPolicy'
+    - get: '/v1/{resource=projects/*/locations/*/clientGateways/*}:getIamPolicy'
+  - selector: google.iam.v1.IAMPolicy.SetIamPolicy
+    post: '/v1/{resource=projects/*/locations/*/appConnections/*}:setIamPolicy'
+    body: '*'
+    additional_bindings:
+    - post: '/v1/{resource=projects/*/locations/*/appConnectors/*}:setIamPolicy'
+      body: '*'
+    - post: '/v1/{resource=projects/*/locations/*/appGateways/*}:setIamPolicy'
+      body: '*'
+    - post: '/v1/{resource=projects/*/locations/*/clientConnectorServices/*}:setIamPolicy'
+      body: '*'
+    - post: '/v1/{resource=projects/*/locations/*/clientGateways/*}:setIamPolicy'
+      body: '*'
+  - selector: google.iam.v1.IAMPolicy.TestIamPermissions
+    post: '/v1/{resource=projects/*/locations/*/appConnections/*}:testIamPermissions'
+    body: '*'
+    additional_bindings:
+    - post: '/v1/{resource=projects/*/locations/*/appConnectors/*}:testIamPermissions'
+      body: '*'
+    - post: '/v1/{resource=projects/*/locations/*/appGateways/*}:testIamPermissions'
+      body: '*'
+    - post: '/v1/{resource=projects/*/locations/*/clientConnectorServices/*}:testIamPermissions'
+      body: '*'
+    - post: '/v1/{resource=projects/*/locations/*/clientGateways/*}:testIamPermissions'
+      body: '*'
+  - selector: google.longrunning.Operations.CancelOperation
+    post: '/v1/{name=projects/*/locations/*/operations/*}:cancel'
+    body: '*'
+  - selector: google.longrunning.Operations.DeleteOperation
+    delete: '/v1/{name=projects/*/locations/*/operations/*}'
+  - selector: google.longrunning.Operations.GetOperation
+    get: '/v1/{name=projects/*/locations/*/operations/*}'
+  - selector: google.longrunning.Operations.ListOperations
+    get: '/v1/{name=projects/*/locations/*}/operations'
+
+authentication:
+  rules:
+  - selector: 'google.cloud.beyondcorp.clientgateways.v1.ClientGatewaysService.*'
+    oauth:
+      canonical_scopes: |-
+        https://www.googleapis.com/auth/cloud-platform
+  - selector: google.cloud.location.Locations.GetLocation
+    oauth:
+      canonical_scopes: |-
+        https://www.googleapis.com/auth/cloud-platform
+  - selector: google.cloud.location.Locations.ListLocations
+    oauth:
+      canonical_scopes: |-
+        https://www.googleapis.com/auth/cloud-platform
+  - selector: 'google.iam.v1.IAMPolicy.*'
+    oauth:
+      canonical_scopes: |-
+        https://www.googleapis.com/auth/cloud-platform
+  - selector: 'google.longrunning.Operations.*'
+    oauth:
+      canonical_scopes: |-
+        https://www.googleapis.com/auth/cloud-platform
--- a/google/cloud/beyondcorp/clientgateways/v1/client_gateways_service.proto
+++ b/google/cloud/beyondcorp/clientgateways/v1/client_gateways_service.proto
@ -0,0 +1,296 @@
+// Copyright 2022 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+syntax = "proto3";
+
+package google.cloud.beyondcorp.clientgateways.v1;
+
+import "google/api/annotations.proto";
+import "google/api/client.proto";
+import "google/api/field_behavior.proto";
+import "google/api/resource.proto";
+import "google/longrunning/operations.proto";
+import "google/protobuf/timestamp.proto";
+
+option csharp_namespace = "Google.Cloud.BeyondCorp.ClientGateways.V1";
+option go_package = "google.golang.org/genproto/googleapis/cloud/beyondcorp/clientgateways/v1;clientgateways";
+option java_multiple_files = true;
+option java_outer_classname = "ClientGatewaysServiceProto";
+option java_package = "com.google.cloud.beyondcorp.clientgateways.v1";
+option php_namespace = "Google\\Cloud\\BeyondCorp\\ClientGateways\\V1";
+option ruby_package = "Google::Cloud::BeyondCorp::ClientGateways::V1";
+
+// ## API Overview
+//
+// The `beyondcorp.googleapis.com` service implements the Google Cloud
+// BeyondCorp API.
+//
+// ## Data Model
+//
+// The ClientGatewaysService exposes the following resources:
+//
+// * Client Gateways, named as follows:
+//   `projects/{project_id}/locations/{location_id}/clientGateways/{client_gateway_id}`.
+service ClientGatewaysService {
+  option (google.api.default_host) = "beyondcorp.googleapis.com";
+  option (google.api.oauth_scopes) =
+      "https://www.googleapis.com/auth/cloud-platform";
+
+  // Lists ClientGateways in a given project and location.
+  rpc ListClientGateways(ListClientGatewaysRequest)
+      returns (ListClientGatewaysResponse) {
+    option (google.api.http) = {
+      get: "/v1/{parent=projects/*/locations/*}/clientGateways"
+    };
+    option (google.api.method_signature) = "parent";
+  }
+
+  // Gets details of a single ClientGateway.
+  rpc GetClientGateway(GetClientGatewayRequest) returns (ClientGateway) {
+    option (google.api.http) = {
+      get: "/v1/{name=projects/*/locations/*/clientGateways/*}"
+    };
+    option (google.api.method_signature) = "name";
+  }
+
+  // Creates a new ClientGateway in a given project and location.
+  rpc CreateClientGateway(CreateClientGatewayRequest)
+      returns (google.longrunning.Operation) {
+    option (google.api.http) = {
+      post: "/v1/{parent=projects/*/locations/*}/clientGateways"
+      body: "client_gateway"
+    };
+    option (google.api.method_signature) =
+        "parent,client_gateway,client_gateway_id";
+    option (google.longrunning.operation_info) = {
+      response_type: "ClientGateway"
+      metadata_type: "ClientGatewayOperationMetadata"
+    };
+  }
+
+  // Deletes a single ClientGateway.
+  rpc DeleteClientGateway(DeleteClientGatewayRequest)
+      returns (google.longrunning.Operation) {
+    option (google.api.http) = {
+      delete: "/v1/{name=projects/*/locations/*/clientGateways/*}"
+    };
+    option (google.api.method_signature) = "name";
+    option (google.longrunning.operation_info) = {
+      response_type: "google.protobuf.Empty"
+      metadata_type: "ClientGatewayOperationMetadata"
+    };
+  }
+}
+
+// Message describing ClientGateway object.
+message ClientGateway {
+  option (google.api.resource) = {
+    type: "beyondcorp.googleapis.com/ClientGateway"
+    pattern: "projects/{project}/locations/{location}/clientGateways/{client_gateway}"
+  };
+
+  // Represents the different states of a gateway.
+  enum State {
+    // Default value. This value is unused.
+    STATE_UNSPECIFIED = 0;
+
+    // Gateway is being created.
+    CREATING = 1;
+
+    // Gateway is being updated.
+    UPDATING = 2;
+
+    // Gateway is being deleted.
+    DELETING = 3;
+
+    // Gateway is running.
+    RUNNING = 4;
+
+    // Gateway is down and may be restored in the future.
+    // This happens when CCFE sends ProjectState = OFF.
+    DOWN = 5;
+
+    // ClientGateway encountered an error and is in indeterministic state.
+    ERROR = 6;
+  }
+
+  // Required. name of resource. The name is ignored during creation.
+  string name = 1 [(google.api.field_behavior) = REQUIRED];
+
+  // Output only. [Output only] Create time stamp.
+  google.protobuf.Timestamp create_time = 2
+      [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Output only. [Output only] Update time stamp.
+  google.protobuf.Timestamp update_time = 3
+      [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Output only. The operational state of the gateway.
+  State state = 4 [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Output only. A unique identifier for the instance generated by the system.
+  string id = 5 [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Output only. The client connector service name that the client gateway is
+  // associated to. Client Connector Services, named as follows:
+  //   `projects/{project_id}/locations/{location_id}/client_connector_services/{client_connector_service_id}`.
+  string client_connector_service = 6
+      [(google.api.field_behavior) = OUTPUT_ONLY];
+}
+
+// Message for requesting list of ClientGateways.
+message ListClientGatewaysRequest {
+  // Required. Parent value for ListClientGatewaysRequest.
+  string parent = 1 [
+    (google.api.field_behavior) = REQUIRED,
+    (google.api.resource_reference) = {
+      child_type: "beyondcorp.googleapis.com/ClientGateway"
+    }
+  ];
+
+  // Optional. Requested page size. Server may return fewer items than
+  // requested. If unspecified, server will pick an appropriate default.
+  int32 page_size = 2 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. A token identifying a page of results the server should return.
+  string page_token = 3 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. Filtering results.
+  string filter = 4 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. Hint for how to order the results.
+  string order_by = 5 [(google.api.field_behavior) = OPTIONAL];
+}
+
+// Message for response to listing ClientGateways.
+message ListClientGatewaysResponse {
+  // The list of ClientGateway.
+  repeated ClientGateway client_gateways = 1;
+
+  // A token identifying a page of results the server should return.
+  string next_page_token = 2;
+
+  // Locations that could not be reached.
+  repeated string unreachable = 3;
+}
+
+// Message for getting a ClientGateway.
+message GetClientGatewayRequest {
+  // Required. Name of the resource
+  string name = 1 [
+    (google.api.field_behavior) = REQUIRED,
+    (google.api.resource_reference) = {
+      type: "beyondcorp.googleapis.com/ClientGateway"
+    }
+  ];
+}
+
+// Message for creating a ClientGateway.
+message CreateClientGatewayRequest {
+  // Required. Value for parent.
+  string parent = 1 [
+    (google.api.field_behavior) = REQUIRED,
+    (google.api.resource_reference) = {
+      child_type: "beyondcorp.googleapis.com/ClientGateway"
+    }
+  ];
+
+  // Optional. User-settable client gateway resource ID.
+  //  * Must start with a letter.
+  //  * Must contain between 4-63 characters from `/[a-z][0-9]-/`.
+  //  * Must end with a number or a letter.
+  string client_gateway_id = 2 [(google.api.field_behavior) = OPTIONAL];
+
+  // Required. The resource being created.
+  ClientGateway client_gateway = 3 [(google.api.field_behavior) = REQUIRED];
+
+  // Optional. An optional request ID to identify requests. Specify a unique
+  // request ID so that if you must retry your request, the server will know to
+  // ignore the request if it has already been completed. The server will
+  // guarantee that for at least 60 minutes since the first request.
+  //
+  // For example, consider a situation where you make an initial request and t
+  // he request times out. If you make the request again with the same request
+  // ID, the server can check if original operation with the same request ID
+  // was received, and if so, will ignore the second request. This prevents
+  // clients from accidentally creating duplicate commitments.
+  //
+  // The request ID must be a valid UUID with the exception that zero UUID is
+  // not supported (00000000-0000-0000-0000-000000000000).
+  string request_id = 4 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. If set, validates request by executing a dry-run which would not
+  // alter the resource in any way.
+  bool validate_only = 5 [(google.api.field_behavior) = OPTIONAL];
+}
+
+// Message for deleting a ClientGateway
+message DeleteClientGatewayRequest {
+  // Required. Name of the resource
+  string name = 1 [
+    (google.api.field_behavior) = REQUIRED,
+    (google.api.resource_reference) = {
+      type: "beyondcorp.googleapis.com/ClientGateway"
+    }
+  ];
+
+  // Optional. An optional request ID to identify requests. Specify a unique
+  // request ID so that if you must retry your request, the server will know to
+  // ignore the request if it has already been completed. The server will
+  // guarantee that for at least 60 minutes after the first request.
+  //
+  // For example, consider a situation where you make an initial request and t
+  // he request times out. If you make the request again with the same request
+  // ID, the server can check if original operation with the same request ID
+  // was received, and if so, will ignore the second request. This prevents
+  // clients from accidentally creating duplicate commitments.
+  //
+  // The request ID must be a valid UUID with the exception that zero UUID is
+  // not supported (00000000-0000-0000-0000-000000000000).
+  string request_id = 2 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. If set, validates request by executing a dry-run which would not
+  // alter the resource in any way.
+  bool validate_only = 3 [(google.api.field_behavior) = OPTIONAL];
+}
+
+// Represents the metadata of the long-running operation.
+message ClientGatewayOperationMetadata {
+  // Output only. The time the operation was created.
+  google.protobuf.Timestamp create_time = 1
+      [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Output only. The time the operation finished running.
+  google.protobuf.Timestamp end_time = 2
+      [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Output only. Server-defined resource path for the target of the operation.
+  string target = 3 [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Output only. Name of the verb executed by the operation.
+  string verb = 4 [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Output only. Human-readable status of the operation, if any.
+  string status_message = 5 [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Output only. Identifies whether the user has requested cancellation
+  // of the operation. Operations that have been cancelled successfully
+  // have [Operation.error][] value with a
+  // [google.rpc.Status.code][google.rpc.Status.code] of 1, corresponding to
+  // `Code.CANCELLED`.
+  bool requested_cancellation = 6 [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Output only. API version used to start the operation.
+  string api_version = 7 [(google.api.field_behavior) = OUTPUT_ONLY];
+}