Method: urlMaps.list

• HTTP request
• Path parameters
• Query parameters
• Request body
• Response body
  • JSON representation
    • JSON representation
    • JSON representation
      • JSON representation
        • JSON representation
        • JSON representation
      • JSON representation
      • JSON representation
      • JSON representation
      • JSON representation
      • JSON representation
      • JSON representation
        • JSON representation
      • JSON representation
      • JSON representation
        • JSON representation
        • JSON representation
        • JSON representation
        • JSON representation
      • JSON representation
      • JSON representation
      • JSON representation
        • JSON representation
        • JSON representation
      • JSON representation
        • JSON representation
        • JSON representation
        • JSON representation
        • JSON representation
      • JSON representation
      • JSON representation
      • JSON representation
      • JSON representation
      • JSON representation
      • JSON representation
      • JSON representation
      • JSON representation
    • JSON representation
    • JSON representation
      • JSON representation
      • JSON representation
      • JSON representation
      • JSON representation
    • JSON representation
    • JSON representation
    • JSON representation
    • JSON representation
• Authorization scopes
• IAM Permissions
• Try it!

Retrieves the list of UrlMap resources available to the specified project.

HTTP request

GET https://compute.googleapis.com/compute/beta/projects/{project}/global/urlMaps

The URL uses gRPC Transcoding syntax.

Path parameters

Parameters
project	string Project ID for this request.

Query parameters

Parameters
maxResults	integer (uint32 format) The maximum number of results per page that should be returned. If the number of available results is larger than maxResults, Compute Engine returns a nextPageToken that can be used to get the next page of results in subsequent list requests. Acceptable values are 0 to 500, inclusive. (Default: 500)
pageToken	string Specifies a page token to use. Set pageToken to the nextPageToken returned by a previous list request to get the next page of results.
filter	string A filter expression that filters resources listed in the response. Most Compute resources support two types of filter expressions: expressions that support regular expressions and expressions that follow API improvement proposal AIP-160. These two types of filter expressions cannot be mixed in one request. If you want to use AIP-160, your expression must specify the field name, an operator, and the value that you want to use for filtering. The value must be a string, a number, or a boolean. The operator must be either =, !=, >, <, <=, >= or :. For example, if you are filtering Compute Engine instances, you can exclude instances named example-instance by specifying name != example-instance. The :* comparison can be used to test whether a key has been defined. For example, to find all objects with owner label use: labels.owner:* You can also filter nested fields. For example, you could specify scheduling.automaticRestart = false to include instances only if they are not scheduled for automatic restarts. You can use filtering on nested fields to filter based on resource labels. To filter on multiple expressions, provide each separate expression within parentheses. For example: (scheduling.automaticRestart = true) (cpuPlatform = "Intel Skylake") By default, each expression is an AND expression. However, you can include AND and OR expressions explicitly. For example: (cpuPlatform = "Intel Skylake") OR (cpuPlatform = "Intel Broadwell") AND (scheduling.automaticRestart = true) If you want to use a regular expression, use the eq (equal) or ne (not equal) operator against a single un-parenthesized expression with or without quotes or against multiple parenthesized expressions. Examples: fieldname eq unquoted literal fieldname eq 'single quoted literal' fieldname eq "double quoted literal" (fieldname1 eq literal) (fieldname2 ne "literal") The literal value is interpreted as a regular expression using Google RE2 library syntax. The literal value must match the entire field. For example, to filter for instances that do not end with name "instance", you would use name ne .*instance. You cannot combine constraints on multiple fields using regular expressions.
orderBy	string Sorts list results by a certain order. By default, results are returned in alphanumerical order based on the resource name. You can also sort results in descending order based on the creation timestamp using orderBy="creationTimestamp desc". This sorts results based on the creationTimestamp field in reverse chronological order (newest result first). Use this to sort resources like operations so that the newest operation is returned first. Currently, only sorting by name or creationTimestamp desc is supported.
returnPartialSuccess	boolean Opt-in for partial success behavior which provides partial results in case of failure. The default value is false. For example, when partial success behavior is enabled, aggregatedList for a single zone scope either returns all resources in the zone or no resources, with an error code.

Request body

The request body must be empty.

Response body

Contains a list of UrlMap resources.

If successful, the response body contains data with the following structure:

JSON representation

{ "kind": string, "id": string, "items": [ { "kind": string, "id": string, "creationTimestamp": string, "name": string, "description": string, "selfLink": string, "hostRules": [ { "description": string, "hosts": [ string ], "pathMatcher": string } ], "pathMatchers": [ { "name": string, "description": string, "defaultService": string, "defaultRouteAction": { "weightedBackendServices": [ { "backendService": string, "weight": integer, "headerAction": { "requestHeadersToRemove": [ string ], "requestHeadersToAdd": [ { "headerName": string, "headerValue": string, "replace": boolean } ], "responseHeadersToRemove": [ string ], "responseHeadersToAdd": [ { "headerName": string, "headerValue": string, "replace": boolean } ] } } ], "urlRewrite": { "pathPrefixRewrite": string, "hostRewrite": string, "pathTemplateRewrite": string }, "timeout": { "seconds": string, "nanos": integer }, "retryPolicy": { "retryConditions": [ string ], "numRetries": integer, "perTryTimeout": { "seconds": string, "nanos": integer } }, "requestMirrorPolicy": { "backendService": string, "mirrorPercent": number }, "corsPolicy": { "allowOrigins": [ string ], "allowOriginRegexes": [ string ], "allowMethods": [ string ], "allowHeaders": [ string ], "exposeHeaders": [ string ], "maxAge": integer, "allowCredentials": boolean, "disabled": boolean }, "faultInjectionPolicy": { "delay": { "fixedDelay": { "seconds": string, "nanos": integer }, "percentage": number }, "abort": { "httpStatus": integer, "percentage": number } }, "maxStreamDuration": { "seconds": string, "nanos": integer } }, "defaultUrlRedirect": { "hostRedirect": string, "pathRedirect": string, "prefixRedirect": string, "redirectResponseCode": enum, "httpsRedirect": boolean, "stripQuery": boolean }, "pathRules": [ { "service": string, "routeAction": { "weightedBackendServices": [ { "backendService": string, "weight": integer, "headerAction": { "requestHeadersToRemove": [ string ], "requestHeadersToAdd": [ { "headerName": string, "headerValue": string, "replace": boolean } ], "responseHeadersToRemove": [ string ], "responseHeadersToAdd": [ { "headerName": string, "headerValue": string, "replace": boolean } ] } } ], "urlRewrite": { "pathPrefixRewrite": string, "hostRewrite": string, "pathTemplateRewrite": string }, "timeout": { "seconds": string, "nanos": integer }, "retryPolicy": { "retryConditions": [ string ], "numRetries": integer, "perTryTimeout": { "seconds": string, "nanos": integer } }, "requestMirrorPolicy": { "backendService": string, "mirrorPercent": number }, "corsPolicy": { "allowOrigins": [ string ], "allowOriginRegexes": [ string ], "allowMethods": [ string ], "allowHeaders": [ string ], "exposeHeaders": [ string ], "maxAge": integer, "allowCredentials": boolean, "disabled": boolean }, "faultInjectionPolicy": { "delay": { "fixedDelay": { "seconds": string, "nanos": integer }, "percentage": number }, "abort": { "httpStatus": integer, "percentage": number } }, "maxStreamDuration": { "seconds": string, "nanos": integer } }, "urlRedirect": { "hostRedirect": string, "pathRedirect": string, "prefixRedirect": string, "redirectResponseCode": enum, "httpsRedirect": boolean, "stripQuery": boolean }, "paths": [ string ], "customErrorResponsePolicy": { "errorResponseRules": [ { "matchResponseCodes": [ string ], "path": string, "overrideResponseCode": integer } ], "errorService": string } } ], "routeRules": [ { "priority": integer, "description": string, "matchRules": [ { "prefixMatch": string, "fullPathMatch": string, "regexMatch": string, "ignoreCase": boolean, "headerMatches": [ { "headerName": string, "exactMatch": string, "regexMatch": string, "rangeMatch": { "rangeStart": string, "rangeEnd": string }, "presentMatch": boolean, "prefixMatch": string, "suffixMatch": string, "invertMatch": boolean } ], "queryParameterMatches": [ { "name": string, "presentMatch": boolean, "exactMatch": string, "regexMatch": string } ], "metadataFilters": [ { "filterMatchCriteria": enum, "filterLabels": [ { "name": string, "value": string } ] } ], "pathTemplateMatch": string } ], "service": string, "routeAction": { "weightedBackendServices": [ { "backendService": string, "weight": integer, "headerAction": { "requestHeadersToRemove": [ string ], "requestHeadersToAdd": [ { "headerName": string, "headerValue": string, "replace": boolean } ], "responseHeadersToRemove": [ string ], "responseHeadersToAdd": [ { "headerName": string, "headerValue": string, "replace": boolean } ] } } ], "urlRewrite": { "pathPrefixRewrite": string, "hostRewrite": string, "pathTemplateRewrite": string }, "timeout": { "seconds": string, "nanos": integer }, "retryPolicy": { "retryConditions": [ string ], "numRetries": integer, "perTryTimeout": { "seconds": string, "nanos": integer } }, "requestMirrorPolicy": { "backendService": string, "mirrorPercent": number }, "corsPolicy": { "allowOrigins": [ string ], "allowOriginRegexes": [ string ], "allowMethods": [ string ], "allowHeaders": [ string ], "exposeHeaders": [ string ], "maxAge": integer, "allowCredentials": boolean, "disabled": boolean }, "faultInjectionPolicy": { "delay": { "fixedDelay": { "seconds": string, "nanos": integer }, "percentage": number }, "abort": { "httpStatus": integer, "percentage": number } }, "maxStreamDuration": { "seconds": string, "nanos": integer } }, "urlRedirect": { "hostRedirect": string, "pathRedirect": string, "prefixRedirect": string, "redirectResponseCode": enum, "httpsRedirect": boolean, "stripQuery": boolean }, "headerAction": { "requestHeadersToRemove": [ string ], "requestHeadersToAdd": [ { "headerName": string, "headerValue": string, "replace": boolean } ], "responseHeadersToRemove": [ string ], "responseHeadersToAdd": [ { "headerName": string, "headerValue": string, "replace": boolean } ] }, "httpFilterConfigs": [ { "filterName": string, "configTypeUrl": string, "config": string } ], "httpFilterMetadata": [ { "filterName": string, "configTypeUrl": string, "config": string } ], "customErrorResponsePolicy": { "errorResponseRules": [ { "matchResponseCodes": [ string ], "path": string, "overrideResponseCode": integer } ], "errorService": string } } ], "headerAction": { "requestHeadersToRemove": [ string ], "requestHeadersToAdd": [ { "headerName": string, "headerValue": string, "replace": boolean } ], "responseHeadersToRemove": [ string ], "responseHeadersToAdd": [ { "headerName": string, "headerValue": string, "replace": boolean } ] }, "defaultCustomErrorResponsePolicy": { "errorResponseRules": [ { "matchResponseCodes": [ string ], "path": string, "overrideResponseCode": integer } ], "errorService": string } } ], "tests": [ { "description": string, "host": string, "path": string, "headers": [ { "name": string, "value": string } ], "service": string, "expectedOutputUrl": string, "expectedRedirectResponseCode": integer } ], "defaultService": string, "defaultRouteAction": { "weightedBackendServices": [ { "backendService": string, "weight": integer, "headerAction": { "requestHeadersToRemove": [ string ], "requestHeadersToAdd": [ { "headerName": string, "headerValue": string, "replace": boolean } ], "responseHeadersToRemove": [ string ], "responseHeadersToAdd": [ { "headerName": string, "headerValue": string, "replace": boolean } ] } } ], "urlRewrite": { "pathPrefixRewrite": string, "hostRewrite": string, "pathTemplateRewrite": string }, "timeout": { "seconds": string, "nanos": integer }, "retryPolicy": { "retryConditions": [ string ], "numRetries": integer, "perTryTimeout": { "seconds": string, "nanos": integer } }, "requestMirrorPolicy": { "backendService": string, "mirrorPercent": number }, "corsPolicy": { "allowOrigins": [ string ], "allowOriginRegexes": [ string ], "allowMethods": [ string ], "allowHeaders": [ string ], "exposeHeaders": [ string ], "maxAge": integer, "allowCredentials": boolean, "disabled": boolean }, "faultInjectionPolicy": { "delay": { "fixedDelay": { "seconds": string, "nanos": integer }, "percentage": number }, "abort": { "httpStatus": integer, "percentage": number } }, "maxStreamDuration": { "seconds": string, "nanos": integer } }, "defaultUrlRedirect": { "hostRedirect": string, "pathRedirect": string, "prefixRedirect": string, "redirectResponseCode": enum, "httpsRedirect": boolean, "stripQuery": boolean }, "headerAction": { "requestHeadersToRemove": [ string ], "requestHeadersToAdd": [ { "headerName": string, "headerValue": string, "replace": boolean } ], "responseHeadersToRemove": [ string ], "responseHeadersToAdd": [ { "headerName": string, "headerValue": string, "replace": boolean } ] }, "defaultCustomErrorResponsePolicy": { "errorResponseRules": [ { "matchResponseCodes": [ string ], "path": string, "overrideResponseCode": integer } ], "errorService": string }, "fingerprint": string, "region": string } ], "nextPageToken": string, "selfLink": string, "warning": { "code": enum, "message": string, "data": [ { "key": string, "value": string } ] } }

Fields
kind	string Type of resource.
id	string [Output Only] Unique identifier for the resource; defined by the server.
items[]	object A list of UrlMap resources.
items[].kind	string [Output Only] Type of the resource. Always compute#urlMaps for url maps.
items[].id	string (uint64 format) [Output Only] The unique identifier for the resource. This identifier is defined by the server.
items[].creationTimestamp	string [Output Only] Creation timestamp in RFC3339 text format.
items[].name	string Name of the resource. Provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
items[].description	string An optional description of this resource. Provide this property when you create the resource.
items[].selfLink	string [Output Only] Server-defined URL for the resource.
items[].hostRules[]	object The list of host rules to use against the URL.
items[].hostRules[].description	string An optional description of this resource. Provide this property when you create the resource.
items[].hostRules[].hosts[]	string The list of host patterns to match. They must be valid hostnames with optional port numbers in the format host:port. * matches any string of ([a-z0-9-.]*). In that case, * must be the first character, and if followed by anything, the immediate following character must be either - or .. * based matching is not supported when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.
items[].hostRules[].pathMatcher	string The name of the PathMatcher to use to match the path portion of the URL if the hostRule matches the URL's host portion.
items[].pathMatchers[]	object The list of named PathMatchers to use against the URL.
items[].pathMatchers[].name	string The name to which this PathMatcher is referred by the HostRule.
items[].pathMatchers[].description	string An optional description of this resource. Provide this property when you create the resource.
items[].pathMatchers[].defaultService	string The full or partial URL to the BackendService resource. This URL is used if none of the pathRules or routeRules defined by this PathMatcher are matched. For example, the following are all valid URLs to a BackendService resource: https://www.googleapis.com/compute/v1/projects/project/global/backendServices/backendService compute/v1/projects/project/global/backendServices/backendService global/backendServices/backendService If defaultRouteAction is also specified, advanced routing actions, such as URL rewrites, take effect before sending the request to the backend. However, if defaultService is specified, defaultRouteAction cannot contain any weightedBackendServices. Conversely, if defaultRouteAction specifies any weightedBackendServices, defaultService must not be specified. If defaultService is specified, then set either defaultUrlRedirect or defaultRouteAction.weightedBackendService. Don't set both. Authorization requires one or more of the following Google IAM permissions on the specified resource defaultService: compute.backendBuckets.use compute.backendServices.use
items[].pathMatchers[].defaultRouteAction	object defaultRouteAction takes effect when none of the pathRules or routeRules match. The load balancer performs advanced routing actions, such as URL rewrites and header transformations, before forwarding the request to the selected backend. If defaultRouteAction specifies any weightedBackendServices, defaultService must not be set. Conversely if defaultService is set, defaultRouteAction cannot contain any weightedBackendServices. If defaultRouteAction is specified, don't set defaultUrlRedirect. If defaultRouteAction.weightedBackendServices is specified, don't set defaultService. URL maps for classic Application Load Balancers only support the urlRewrite action within a path matcher's defaultRouteAction.
items[].pathMatchers[].defaultRouteAction.weightedBackendServices[]	object A list of weighted backend services to send traffic to when a route match occurs. The weights determine the fraction of traffic that flows to their corresponding backend service. If all traffic needs to go to a single backend service, there must be one weightedBackendService with weight set to a non-zero number. After a backend service is identified and before forwarding the request to the backend service, advanced routing actions such as URL rewrites and header transformations are applied depending on additional settings specified in this HttpRouteAction.
items[].pathMatchers[].defaultRouteAction.weightedBackendServices[].backendService	string The full or partial URL to the default BackendService resource. Before forwarding the request to backendService, the load balancer applies any relevant headerActions specified as part of this backendServiceWeight.
items[].pathMatchers[].defaultRouteAction.weightedBackendServices[].weight	integer (uint32 format) Specifies the fraction of traffic sent to a backend service, computed as weight / (sum of all weightedBackendService weights in routeAction) . The selection of a backend service is determined only for new traffic. Once a user's request has been directed to a backend service, subsequent requests are sent to the same backend service as determined by the backend service's session affinity policy. Don't configure session affinity if you're using weighted traffic splitting. If you do, the weighted traffic splitting configuration takes precedence. The value must be from 0 to 1000.
items[].pathMatchers[].defaultRouteAction.weightedBackendServices[].headerAction	object Specifies changes to request and response headers that need to take effect for the selected backendService. headerAction specified here take effect before headerAction in the enclosing HttpRouteRule, PathMatcher and UrlMap. headerAction is not supported for load balancers that have their loadBalancingScheme set to EXTERNAL. Not supported when the URL map is bound to a target gRPC proxy that has validateForProxyless field set to true.
items[].pathMatchers[].defaultRouteAction.weightedBackendServices[].headerAction.requestHeadersToRemove[]	string A list of header names for headers that need to be removed from the request before forwarding the request to the backendService.
items[].pathMatchers[].defaultRouteAction.weightedBackendServices[].headerAction.requestHeadersToAdd[]	object Headers to add to a matching request before forwarding the request to the backendService.
items[].pathMatchers[].defaultRouteAction.weightedBackendServices[].headerAction.requestHeadersToAdd[].headerName	string The name of the header.
items[].pathMatchers[].defaultRouteAction.weightedBackendServices[].headerAction.requestHeadersToAdd[].headerValue	string The value of the header to add.
items[].pathMatchers[].defaultRouteAction.weightedBackendServices[].headerAction.requestHeadersToAdd[].replace	boolean If false, headerValue is appended to any values that already exist for the header. If true, headerValue is set for the header, discarding any values that were set for that header. The default value is false.
items[].pathMatchers[].defaultRouteAction.weightedBackendServices[].headerAction.responseHeadersToRemove[]	string A list of header names for headers that need to be removed from the response before sending the response back to the client.
items[].pathMatchers[].defaultRouteAction.weightedBackendServices[].headerAction.responseHeadersToAdd[]	object Headers to add the response before sending the response back to the client.
items[].pathMatchers[].defaultRouteAction.weightedBackendServices[].headerAction.responseHeadersToAdd[].headerName	string The name of the header.
items[].pathMatchers[].defaultRouteAction.weightedBackendServices[].headerAction.responseHeadersToAdd[].headerValue	string The value of the header to add.
items[].pathMatchers[].defaultRouteAction.weightedBackendServices[].headerAction.responseHeadersToAdd[].replace	boolean If false, headerValue is appended to any values that already exist for the header. If true, headerValue is set for the header, discarding any values that were set for that header. The default value is false.
items[].pathMatchers[].defaultRouteAction.urlRewrite	object The spec to modify the URL of the request, before forwarding the request to the matched service. urlRewrite is the only action supported in UrlMaps for classic Application Load Balancers. Not supported when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.
items[].pathMatchers[].defaultRouteAction.urlRewrite.pathPrefixRewrite	string Before forwarding the request to the selected backend service, the matching portion of the request's path is replaced by pathPrefixRewrite. The value must be from 1 to 1024 characters.
items[].pathMatchers[].defaultRouteAction.urlRewrite.hostRewrite	string Before forwarding the request to the selected service, the request's host header is replaced with contents of hostRewrite. The value must be from 1 to 255 characters.
items[].pathMatchers[].defaultRouteAction.urlRewrite.pathTemplateRewrite	string If specified, the pattern rewrites the URL path (based on the :path header) using the HTTP template syntax. A corresponding pathTemplateMatch must be specified. Any template variables must exist in the pathTemplateMatch field. -At least one variable must be specified in the pathTemplateMatch field You can omit variables from the rewritten URL The * and ** operators cannot be matched unless they have a corresponding variable name - e.g. {format=*} or {var=**}. For example, a pathTemplateMatch of /static/{format=**} could be rewritten as /static/content/{format} to prefix /content to the URL. Variables can also be re-ordered in a rewrite, so that /{country}/{format}/{suffix=**} can be rewritten as /content/{format}/{country}/{suffix}. At least one non-empty routeRules[].matchRules[].path_template_match is required. Only one of pathPrefixRewrite or pathTemplateRewrite may be specified.
items[].pathMatchers[].defaultRouteAction.timeout	object Specifies the timeout for the selected route. Timeout is computed from the time the request has been fully processed (known as end-of-stream) up until the response has been processed. Timeout includes all retries. If not specified, this field uses the largest timeout among all backend services associated with the route. Not supported when the URL map is bound to a target gRPC proxy that has validateForProxyless field set to true.
items[].pathMatchers[].defaultRouteAction.timeout.seconds	string (int64 format) Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive. Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
items[].pathMatchers[].defaultRouteAction.timeout.nanos	integer Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
items[].pathMatchers[].defaultRouteAction.retryPolicy	object Specifies the retry policy associated with this route.
items[].pathMatchers[].defaultRouteAction.retryPolicy.retryConditions[]	string Specifies one or more conditions when this retry policy applies. Valid values are: 5xx: retry is attempted if the instance or endpoint responds with any 5xx response code, or if the instance or endpoint does not respond at all. For example, disconnects, reset, read timeout, connection failure, and refused streams. gateway-error: Similar to 5xx, but only applies to response codes 502, 503 or 504. connect-failure: a retry is attempted on failures connecting to the instance or endpoint. For example, connection timeouts. retriable-4xx: a retry is attempted if the instance or endpoint responds with a 4xx response code. The only error that you can retry is error code 409. refused-stream: a retry is attempted if the instance or endpoint resets the stream with a REFUSED_STREAM error code. This reset type indicates that it is safe to retry. cancelled: a retry is attempted if the gRPC status code in the response header is set to cancelled. deadline-exceeded: a retry is attempted if the gRPC status code in the response header is set to deadline-exceeded. internal: a retry is attempted if the gRPC status code in the response header is set to internal. resource-exhausted: a retry is attempted if the gRPC status code in the response header is set to resource-exhausted. unavailable: a retry is attempted if the gRPC status code in the response header is set to unavailable. Only the following codes are supported when the URL map is bound to target gRPC proxy that has validateForProxyless field set to true. cancelled deadline-exceeded internal resource-exhausted unavailable
items[].pathMatchers[].defaultRouteAction.retryPolicy.numRetries	integer (uint32 format) Specifies the allowed number retries. This number must be > 0. If not specified, defaults to 1.
items[].pathMatchers[].defaultRouteAction.retryPolicy.perTryTimeout	object Specifies a non-zero timeout per retry attempt. If not specified, will use the timeout set in the HttpRouteAction field. If timeout in the HttpRouteAction field is not set, this field uses the largest timeout among all backend services associated with the route. Not supported when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.
items[].pathMatchers[].defaultRouteAction.retryPolicy.perTryTimeout.seconds	string (int64 format) Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive. Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
items[].pathMatchers[].defaultRouteAction.retryPolicy.perTryTimeout.nanos	integer Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
items[].pathMatchers[].defaultRouteAction.requestMirrorPolicy	object Specifies the policy on how requests intended for the route's backends are shadowed to a separate mirrored backend service. The load balancer does not wait for responses from the shadow service. Before sending traffic to the shadow service, the host / authority header is suffixed with -shadow. Not supported when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.
items[].pathMatchers[].defaultRouteAction.requestMirrorPolicy.backendService	string The full or partial URL to the BackendService resource being mirrored to. The backend service configured for a mirroring policy must reference backends that are of the same type as the original backend service matched in the URL map. Serverless NEG backends are not currently supported as a mirrored backend service.
items[].pathMatchers[].defaultRouteAction.requestMirrorPolicy.mirrorPercent	number The percentage of requests to be mirrored to backendService.
items[].pathMatchers[].defaultRouteAction.corsPolicy	object The specification for allowing client-side cross-origin requests. For more information about the W3C recommendation for cross-origin resource sharing (CORS), see Fetch API Living Standard. Not supported when the URL map is bound to a target gRPC proxy.
items[].pathMatchers[].defaultRouteAction.corsPolicy.allowOrigins[]	string Specifies the list of origins that is allowed to do CORS requests. An origin is allowed if it matches either an item in allowOrigins or an item in allowOriginRegexes.
items[].pathMatchers[].defaultRouteAction.corsPolicy.allowOriginRegexes[]	string Specifies a regular expression that matches allowed origins. For more information, see regular expression syntax . An origin is allowed if it matches either an item in allowOrigins or an item in allowOriginRegexes. Regular expressions can only be used when the loadBalancingScheme is set to INTERNAL_SELF_MANAGED.
items[].pathMatchers[].defaultRouteAction.corsPolicy.allowMethods[]	string Specifies the content for the Access-Control-Allow-Methods header.
items[].pathMatchers[].defaultRouteAction.corsPolicy.allowHeaders[]	string Specifies the content for the Access-Control-Allow-Headers header.
items[].pathMatchers[].defaultRouteAction.corsPolicy.exposeHeaders[]	string Specifies the content for the Access-Control-Expose-Headers header.
items[].pathMatchers[].defaultRouteAction.corsPolicy.maxAge	integer Specifies how long results of a preflight request can be cached in seconds. This field translates to the Access-Control-Max-Age header.
items[].pathMatchers[].defaultRouteAction.corsPolicy.allowCredentials	boolean In response to a preflight request, setting this to true indicates that the actual request can include user credentials. This field translates to the Access-Control-Allow-Credentials header. Default is false.
items[].pathMatchers[].defaultRouteAction.corsPolicy.disabled	boolean If true, disables the CORS policy. The default value is false, which indicates that the CORS policy is in effect.
items[].pathMatchers[].defaultRouteAction.faultInjectionPolicy	object The specification for fault injection introduced into traffic to test the resiliency of clients to backend service failure. As part of fault injection, when clients send requests to a backend service, delays can be introduced by a load balancer on a percentage of requests before sending those requests to the backend service. Similarly requests from clients can be aborted by the load balancer for a percentage of requests. timeout and retryPolicy is ignored by clients that are configured with a faultInjectionPolicy if: 1. The traffic is generated by fault injection AND 2. The fault injection is not a delay fault injection. Fault injection is not supported with the classic Application Load Balancer . To see which load balancers support fault injection, see Load balancing: Routing and traffic management features.
items[].pathMatchers[].defaultRouteAction.faultInjectionPolicy.delay	object The specification for how client requests are delayed as part of fault injection, before being sent to a backend service.
items[].pathMatchers[].defaultRouteAction.faultInjectionPolicy.delay.fixedDelay	object Specifies the value of the fixed delay interval.
items[].pathMatchers[].defaultRouteAction.faultInjectionPolicy.delay.fixedDelay.seconds	string (int64 format) Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive. Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
items[].pathMatchers[].defaultRouteAction.faultInjectionPolicy.delay.fixedDelay.nanos	integer Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
items[].pathMatchers[].defaultRouteAction.faultInjectionPolicy.delay.percentage	number The percentage of traffic for connections, operations, or requests for which a delay is introduced as part of fault injection. The value must be from 0.0 to 100.0 inclusive.
items[].pathMatchers[].defaultRouteAction.faultInjectionPolicy.abort	object The specification for how client requests are aborted as part of fault injection.
items[].pathMatchers[].defaultRouteAction.faultInjectionPolicy.abort.httpStatus	integer (uint32 format) The HTTP status code used to abort the request. The value must be from 200 to 599 inclusive. For gRPC protocol, the gRPC status code is mapped to HTTP status code according to this mapping table. HTTP status 200 is mapped to gRPC status UNKNOWN. Injecting an OK status is currently not supported by Traffic Director.
items[].pathMatchers[].defaultRouteAction.faultInjectionPolicy.abort.percentage	number The percentage of traffic for connections, operations, or requests that is aborted as part of fault injection. The value must be from 0.0 to 100.0 inclusive.
items[].pathMatchers[].defaultRouteAction.maxStreamDuration	object Specifies the maximum duration (timeout) for streams on the selected route. Unlike the timeout field where the timeout duration starts from the time the request has been fully processed (known as end-of-stream), the duration in this field is computed from the beginning of the stream until the response has been processed, including all retries. A stream that does not complete in this duration is closed. If not specified, this field uses the maximum maxStreamDuration value among all backend services associated with the route. This field is only allowed if the Url map is used with backend services with loadBalancingScheme set to INTERNAL_SELF_MANAGED.
items[].pathMatchers[].defaultRouteAction.maxStreamDuration.seconds	string (int64 format) Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive. Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
items[].pathMatchers[].defaultRouteAction.maxStreamDuration.nanos	integer Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
items[].pathMatchers[].defaultUrlRedirect	object When none of the specified pathRules or routeRules match, the request is redirected to a URL specified by defaultUrlRedirect. If defaultUrlRedirect is specified, then set either defaultService or defaultRouteAction. Don't set both. Not supported when the URL map is bound to a target gRPC proxy.
items[].pathMatchers[].defaultUrlRedirect.hostRedirect	string The host that is used in the redirect response instead of the one that was supplied in the request. The value must be from 1 to 255 characters.
items[].pathMatchers[].defaultUrlRedirect.pathRedirect	string The path that is used in the redirect response instead of the one that was supplied in the request. pathRedirect cannot be supplied together with prefixRedirect. Supply one alone or neither. If neither is supplied, the path of the original request is used for the redirect. The value must be from 1 to 1024 characters.
items[].pathMatchers[].defaultUrlRedirect.prefixRedirect	string The prefix that replaces the prefixMatch specified in the HttpRouteRuleMatch, retaining the remaining portion of the URL before redirecting the request. prefixRedirect cannot be supplied together with pathRedirect. Supply one alone or neither. If neither is supplied, the path of the original request is used for the redirect. The value must be from 1 to 1024 characters.
items[].pathMatchers[].defaultUrlRedirect.redirectResponseCode	enum The HTTP Status code to use for this RedirectAction. Supported values are: MOVED_PERMANENTLY_DEFAULT, which is the default value and corresponds to 301. FOUND, which corresponds to 302. SEE_OTHER which corresponds to 303. TEMPORARY_REDIRECT, which corresponds to 307. In this case, the request method is retained. PERMANENT_REDIRECT, which corresponds to 308. In this case, the request method is retained.
items[].pathMatchers[].defaultUrlRedirect.httpsRedirect	boolean If set to true, the URL scheme in the redirected request is set to HTTPS. If set to false, the URL scheme of the redirected request remains the same as that of the request. This must only be set for URL maps used in TargetHttpProxys. Setting this true for TargetHttpsProxy is not permitted. The default is set to false.
items[].pathMatchers[].defaultUrlRedirect.stripQuery	boolean If set to true, any accompanying query portion of the original URL is removed before redirecting the request. If set to false, the query portion of the original URL is retained. The default is set to false.
items[].pathMatchers[].pathRules[]	object The list of path rules. Use this list instead of routeRules when routing based on simple path matching is all that's required. The order by which path rules are specified does not matter. Matches are always done on the longest-path-first basis. For example: a pathRule with a path /a/b/c/* will match before /a/b/* irrespective of the order in which those paths appear in this list. Within a given pathMatcher, only one of pathRules or routeRules must be set.
items[].pathMatchers[].pathRules[].service	string The full or partial URL of the backend service resource to which traffic is directed if this rule is matched. If routeAction is also specified, advanced routing actions, such as URL rewrites, take effect before sending the request to the backend. However, if service is specified, routeAction cannot contain any weightedBackendServices. Conversely, if routeAction specifies any weightedBackendServices, service must not be specified. Only one of urlRedirect, service or routeAction.weightedBackendService must be set.
items[].pathMatchers[].pathRules[].routeAction	object In response to a matching path, the load balancer performs advanced routing actions, such as URL rewrites and header transformations, before forwarding the request to the selected backend. If routeAction specifies any weightedBackendServices, service must not be set. Conversely if service is set, routeAction cannot contain any weightedBackendServices. Only one of routeAction or urlRedirect must be set. URL maps for classic Application Load Balancers only support the urlRewrite action within a path rule's routeAction.
items[].pathMatchers[].pathRules[].routeAction.weightedBackendServices[]	object A list of weighted backend services to send traffic to when a route match occurs. The weights determine the fraction of traffic that flows to their corresponding backend service. If all traffic needs to go to a single backend service, there must be one weightedBackendService with weight set to a non-zero number. After a backend service is identified and before forwarding the request to the backend service, advanced routing actions such as URL rewrites and header transformations are applied depending on additional settings specified in this HttpRouteAction.
items[].pathMatchers[].pathRules[].routeAction.weightedBackendServices[].backendService	string The full or partial URL to the default BackendService resource. Before forwarding the request to backendService, the load balancer applies any relevant headerActions specified as part of this backendServiceWeight.
items[].pathMatchers[].pathRules[].routeAction.weightedBackendServices[].weight	integer (uint32 format) Specifies the fraction of traffic sent to a backend service, computed as weight / (sum of all weightedBackendService weights in routeAction) . The selection of a backend service is determined only for new traffic. Once a user's request has been directed to a backend service, subsequent requests are sent to the same backend service as determined by the backend service's session affinity policy. Don't configure session affinity if you're using weighted traffic splitting. If you do, the weighted traffic splitting configuration takes precedence. The value must be from 0 to 1000.
items[].pathMatchers[].pathRules[].routeAction.weightedBackendServices[].headerAction	object Specifies changes to request and response headers that need to take effect for the selected backendService. headerAction specified here take effect before headerAction in the enclosing HttpRouteRule, PathMatcher and UrlMap. headerAction is not supported for load balancers that have their loadBalancingScheme set to EXTERNAL. Not supported when the URL map is bound to a target gRPC proxy that has validateForProxyless field set to true.
items[].pathMatchers[].pathRules[].routeAction.weightedBackendServices[].headerAction.requestHeadersToRemove[]	string A list of header names for headers that need to be removed from the request before forwarding the request to the backendService.
items[].pathMatchers[].pathRules[].routeAction.weightedBackendServices[].headerAction.requestHeadersToAdd[]	object Headers to add to a matching request before forwarding the request to the backendService.
items[].pathMatchers[].pathRules[].routeAction.weightedBackendServices[].headerAction.requestHeadersToAdd[].headerName	string The name of the header.
items[].pathMatchers[].pathRules[].routeAction.weightedBackendServices[].headerAction.requestHeadersToAdd[].headerValue	string The value of the header to add.
items[].pathMatchers[].pathRules[].routeAction.weightedBackendServices[].headerAction.requestHeadersToAdd[].replace	boolean If false, headerValue is appended to any values that already exist for the header. If true, headerValue is set for the header, discarding any values that were set for that header. The default value is false.
items[].pathMatchers[].pathRules[].routeAction.weightedBackendServices[].headerAction.responseHeadersToRemove[]	string A list of header names for headers that need to be removed from the response before sending the response back to the client.
items[].pathMatchers[].pathRules[].routeAction.weightedBackendServices[].headerAction.responseHeadersToAdd[]	object Headers to add the response before sending the response back to the client.
items[].pathMatchers[].pathRules[].routeAction.weightedBackendServices[].headerAction.responseHeadersToAdd[].headerName	string The name of the header.
items[].pathMatchers[].pathRules[].routeAction.weightedBackendServices[].headerAction.responseHeadersToAdd[].headerValue	string The value of the header to add.
items[].pathMatchers[].pathRules[].routeAction.weightedBackendServices[].headerAction.responseHeadersToAdd[].replace	boolean If false, headerValue is appended to any values that already exist for the header. If true, headerValue is set for the header, discarding any values that were set for that header. The default value is false.
items[].pathMatchers[].pathRules[].routeAction.urlRewrite	object The spec to modify the URL of the request, before forwarding the request to the matched service. urlRewrite is the only action supported in UrlMaps for classic Application Load Balancers. Not supported when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.
items[].pathMatchers[].pathRules[].routeAction.urlRewrite.pathPrefixRewrite	string Before forwarding the request to the selected backend service, the matching portion of the request's path is replaced by pathPrefixRewrite. The value must be from 1 to 1024 characters.
items[].pathMatchers[].pathRules[].routeAction.urlRewrite.hostRewrite	string Before forwarding the request to the selected service, the request's host header is replaced with contents of hostRewrite. The value must be from 1 to 255 characters.
items[].pathMatchers[].pathRules[].routeAction.urlRewrite.pathTemplateRewrite	string If specified, the pattern rewrites the URL path (based on the :path header) using the HTTP template syntax. A corresponding pathTemplateMatch must be specified. Any template variables must exist in the pathTemplateMatch field. -At least one variable must be specified in the pathTemplateMatch field You can omit variables from the rewritten URL The * and ** operators cannot be matched unless they have a corresponding variable name - e.g. {format=*} or {var=**}. For example, a pathTemplateMatch of /static/{format=**} could be rewritten as /static/content/{format} to prefix /content to the URL. Variables can also be re-ordered in a rewrite, so that /{country}/{format}/{suffix=**} can be rewritten as /content/{format}/{country}/{suffix}. At least one non-empty routeRules[].matchRules[].path_template_match is required. Only one of pathPrefixRewrite or pathTemplateRewrite may be specified.
items[].pathMatchers[].pathRules[].routeAction.timeout	object Specifies the timeout for the selected route. Timeout is computed from the time the request has been fully processed (known as end-of-stream) up until the response has been processed. Timeout includes all retries. If not specified, this field uses the largest timeout among all backend services associated with the route. Not supported when the URL map is bound to a target gRPC proxy that has validateForProxyless field set to true.
items[].pathMatchers[].pathRules[].routeAction.timeout.seconds	string (int64 format) Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive. Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
items[].pathMatchers[].pathRules[].routeAction.timeout.nanos	integer Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
items[].pathMatchers[].pathRules[].routeAction.retryPolicy	object Specifies the retry policy associated with this route.
items[].pathMatchers[].pathRules[].routeAction.retryPolicy.retryConditions[]	string Specifies one or more conditions when this retry policy applies. Valid values are: 5xx: retry is attempted if the instance or endpoint responds with any 5xx response code, or if the instance or endpoint does not respond at all. For example, disconnects, reset, read timeout, connection failure, and refused streams. gateway-error: Similar to 5xx, but only applies to response codes 502, 503 or 504. connect-failure: a retry is attempted on failures connecting to the instance or endpoint. For example, connection timeouts. retriable-4xx: a retry is attempted if the instance or endpoint responds with a 4xx response code. The only error that you can retry is error code 409. refused-stream: a retry is attempted if the instance or endpoint resets the stream with a REFUSED_STREAM error code. This reset type indicates that it is safe to retry. cancelled: a retry is attempted if the gRPC status code in the response header is set to cancelled. deadline-exceeded: a retry is attempted if the gRPC status code in the response header is set to deadline-exceeded. internal: a retry is attempted if the gRPC status code in the response header is set to internal. resource-exhausted: a retry is attempted if the gRPC status code in the response header is set to resource-exhausted. unavailable: a retry is attempted if the gRPC status code in the response header is set to unavailable. Only the following codes are supported when the URL map is bound to target gRPC proxy that has validateForProxyless field set to true. cancelled deadline-exceeded internal resource-exhausted unavailable
items[].pathMatchers[].pathRules[].routeAction.retryPolicy.numRetries	integer (uint32 format) Specifies the allowed number retries. This number must be > 0. If not specified, defaults to 1.
items[].pathMatchers[].pathRules[].routeAction.retryPolicy.perTryTimeout	object Specifies a non-zero timeout per retry attempt. If not specified, will use the timeout set in the HttpRouteAction field. If timeout in the HttpRouteAction field is not set, this field uses the largest timeout among all backend services associated with the route. Not supported when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.
items[].pathMatchers[].pathRules[].routeAction.retryPolicy.perTryTimeout.seconds	string (int64 format) Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive. Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
items[].pathMatchers[].pathRules[].routeAction.retryPolicy.perTryTimeout.nanos	integer Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
items[].pathMatchers[].pathRules[].routeAction.requestMirrorPolicy	object Specifies the policy on how requests intended for the route's backends are shadowed to a separate mirrored backend service. The load balancer does not wait for responses from the shadow service. Before sending traffic to the shadow service, the host / authority header is suffixed with -shadow. Not supported when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.
items[].pathMatchers[].pathRules[].routeAction.requestMirrorPolicy.backendService	string The full or partial URL to the BackendService resource being mirrored to. The backend service configured for a mirroring policy must reference backends that are of the same type as the original backend service matched in the URL map. Serverless NEG backends are not currently supported as a mirrored backend service.
items[].pathMatchers[].pathRules[].routeAction.requestMirrorPolicy.mirrorPercent	number The percentage of requests to be mirrored to backendService.
items[].pathMatchers[].pathRules[].routeAction.corsPolicy	object The specification for allowing client-side cross-origin requests. For more information about the W3C recommendation for cross-origin resource sharing (CORS), see Fetch API Living Standard. Not supported when the URL map is bound to a target gRPC proxy.
items[].pathMatchers[].pathRules[].routeAction.corsPolicy.allowOrigins[]	string Specifies the list of origins that is allowed to do CORS requests. An origin is allowed if it matches either an item in allowOrigins or an item in allowOriginRegexes.
items[].pathMatchers[].pathRules[].routeAction.corsPolicy.allowOriginRegexes[]	string Specifies a regular expression that matches allowed origins. For more information, see regular expression syntax . An origin is allowed if it matches either an item in allowOrigins or an item in allowOriginRegexes. Regular expressions can only be used when the loadBalancingScheme is set to INTERNAL_SELF_MANAGED.
items[].pathMatchers[].pathRules[].routeAction.corsPolicy.allowMethods[]	string Specifies the content for the Access-Control-Allow-Methods header.
items[].pathMatchers[].pathRules[].routeAction.corsPolicy.allowHeaders[]	string Specifies the content for the Access-Control-Allow-Headers header.
items[].pathMatchers[].pathRules[].routeAction.corsPolicy.exposeHeaders[]	string Specifies the content for the Access-Control-Expose-Headers header.
items[].pathMatchers[].pathRules[].routeAction.corsPolicy.maxAge	integer Specifies how long results of a preflight request can be cached in seconds. This field translates to the Access-Control-Max-Age header.
items[].pathMatchers[].pathRules[].routeAction.corsPolicy.allowCredentials	boolean In response to a preflight request, setting this to true indicates that the actual request can include user credentials. This field translates to the Access-Control-Allow-Credentials header. Default is false.
items[].pathMatchers[].pathRules[].routeAction.corsPolicy.disabled	boolean If true, disables the CORS policy. The default value is false, which indicates that the CORS policy is in effect.
items[].pathMatchers[].pathRules[].routeAction.faultInjectionPolicy	object The specification for fault injection introduced into traffic to test the resiliency of clients to backend service failure. As part of fault injection, when clients send requests to a backend service, delays can be introduced by a load balancer on a percentage of requests before sending those requests to the backend service. Similarly requests from clients can be aborted by the load balancer for a percentage of requests. timeout and retryPolicy is ignored by clients that are configured with a faultInjectionPolicy if: 1. The traffic is generated by fault injection AND 2. The fault injection is not a delay fault injection. Fault injection is not supported with the classic Application Load Balancer . To see which load balancers support fault injection, see Load balancing: Routing and traffic management features.
items[].pathMatchers[].pathRules[].routeAction.faultInjectionPolicy.delay	object The specification for how client requests are delayed as part of fault injection, before being sent to a backend service.
items[].pathMatchers[].pathRules[].routeAction.faultInjectionPolicy.delay.fixedDelay	object Specifies the value of the fixed delay interval.
items[].pathMatchers[].pathRules[].routeAction.faultInjectionPolicy.delay.fixedDelay.seconds	string (int64 format) Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive. Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
items[].pathMatchers[].pathRules[].routeAction.faultInjectionPolicy.delay.fixedDelay.nanos	integer Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
items[].pathMatchers[].pathRules[].routeAction.faultInjectionPolicy.delay.percentage	number The percentage of traffic for connections, operations, or requests for which a delay is introduced as part of fault injection. The value must be from 0.0 to 100.0 inclusive.
items[].pathMatchers[].pathRules[].routeAction.faultInjectionPolicy.abort	object The specification for how client requests are aborted as part of fault injection.
items[].pathMatchers[].pathRules[].routeAction.faultInjectionPolicy.abort.httpStatus	integer (uint32 format) The HTTP status code used to abort the request. The value must be from 200 to 599 inclusive. For gRPC protocol, the gRPC status code is mapped to HTTP status code according to this mapping table. HTTP status 200 is mapped to gRPC status UNKNOWN. Injecting an OK status is currently not supported by Traffic Director.
items[].pathMatchers[].pathRules[].routeAction.faultInjectionPolicy.abort.percentage	number The percentage of traffic for connections, operations, or requests that is aborted as part of fault injection. The value must be from 0.0 to 100.0 inclusive.
items[].pathMatchers[].pathRules[].routeAction.maxStreamDuration	object Specifies the maximum duration (timeout) for streams on the selected route. Unlike the timeout field where the timeout duration starts from the time the request has been fully processed (known as end-of-stream), the duration in this field is computed from the beginning of the stream until the response has been processed, including all retries. A stream that does not complete in this duration is closed. If not specified, this field uses the maximum maxStreamDuration value among all backend services associated with the route. This field is only allowed if the Url map is used with backend services with loadBalancingScheme set to INTERNAL_SELF_MANAGED.
items[].pathMatchers[].pathRules[].routeAction.maxStreamDuration.seconds	string (int64 format) Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive. Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
items[].pathMatchers[].pathRules[].routeAction.maxStreamDuration.nanos	integer Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
items[].pathMatchers[].pathRules[].urlRedirect	object When a path pattern is matched, the request is redirected to a URL specified by urlRedirect. If urlRedirect is specified, service or routeAction must not be set. Not supported when the URL map is bound to a target gRPC proxy.
items[].pathMatchers[].pathRules[].urlRedirect.hostRedirect	string The host that is used in the redirect response instead of the one that was supplied in the request. The value must be from 1 to 255 characters.
items[].pathMatchers[].pathRules[].urlRedirect.pathRedirect	string The path that is used in the redirect response instead of the one that was supplied in the request. pathRedirect cannot be supplied together with prefixRedirect. Supply one alone or neither. If neither is supplied, the path of the original request is used for the redirect. The value must be from 1 to 1024 characters.
items[].pathMatchers[].pathRules[].urlRedirect.prefixRedirect	string The prefix that replaces the prefixMatch specified in the HttpRouteRuleMatch, retaining the remaining portion of the URL before redirecting the request. prefixRedirect cannot be supplied together with pathRedirect. Supply one alone or neither. If neither is supplied, the path of the original request is used for the redirect. The value must be from 1 to 1024 characters.
items[].pathMatchers[].pathRules[].urlRedirect.redirectResponseCode	enum The HTTP Status code to use for this RedirectAction. Supported values are: MOVED_PERMANENTLY_DEFAULT, which is the default value and corresponds to 301. FOUND, which corresponds to 302. SEE_OTHER which corresponds to 303. TEMPORARY_REDIRECT, which corresponds to 307. In this case, the request method is retained. PERMANENT_REDIRECT, which corresponds to 308. In this case, the request method is retained.
items[].pathMatchers[].pathRules[].urlRedirect.httpsRedirect	boolean If set to true, the URL scheme in the redirected request is set to HTTPS. If set to false, the URL scheme of the redirected request remains the same as that of the request. This must only be set for URL maps used in TargetHttpProxys. Setting this true for TargetHttpsProxy is not permitted. The default is set to false.
items[].pathMatchers[].pathRules[].urlRedirect.stripQuery	boolean If set to true, any accompanying query portion of the original URL is removed before redirecting the request. If set to false, the query portion of the original URL is retained. The default is set to false.
items[].pathMatchers[].pathRules[].paths[]	string The list of path patterns to match. Each must start with / and the only place a * is allowed is at the end following a /. The string fed to the path matcher does not include any text after the first ? or #, and those chars are not allowed here.
items[].pathMatchers[].pathRules[].customErrorResponsePolicy	object customErrorResponsePolicy specifies how the Load Balancer returns error responses when BackendServiceor BackendBucket responds with an error. If a policy for an error code is not configured for the PathRule, a policy for the error code configured in pathMatcher.defaultCustomErrorResponsePolicy is applied. If one is not specified in pathMatcher.defaultCustomErrorResponsePolicy, the policy configured in UrlMap.defaultCustomErrorResponsePolicy takes effect. For example, consider a UrlMap with the following configuration: UrlMap.defaultCustomErrorResponsePolicy are configured with policies for 5xx and 4xx errors A PathRule for /coming_soon/ is configured for the error code 404. If the request is for www.myotherdomain.com and a 404 is encountered, the policy under UrlMap.defaultCustomErrorResponsePolicy takes effect. If a 404 response is encountered for the request www.example.com/current_events/, the pathMatcher's policy takes effect. If however, the request for www.example.com/coming_soon/ encounters a 404, the policy in PathRule.customErrorResponsePolicy takes effect. If any of the requests in this example encounter a 500 error code, the policy at UrlMap.defaultCustomErrorResponsePolicy takes effect. customErrorResponsePolicy is supported only for global external Application Load Balancers.
items[].pathMatchers[].pathRules[].customErrorResponsePolicy.errorResponseRules[]	object Specifies rules for returning error responses. In a given policy, if you specify rules for both a range of error codes as well as rules for specific error codes then rules with specific error codes have a higher priority. For example, assume that you configure a rule for 401 (Un-authorized) code, and another for all 4 series error codes (4XX). If the backend service returns a 401, then the rule for 401 will be applied. However if the backend service returns a 403, the rule for 4xx takes effect.
items[].pathMatchers[].pathRules[].customErrorResponsePolicy.errorResponseRules[].matchResponseCodes[]	string Valid values include: A number between 400 and 599: For example 401 or 503, in which case the load balancer applies the policy if the error code exactly matches this value. 5xx: Load Balancer will apply the policy if the backend service responds with any response code in the range of 500 to 599. 4xx: Load Balancer will apply the policy if the backend service responds with any response code in the range of 400 to 499. Values must be unique within matchResponseCodes and across all errorResponseRules of CustomErrorResponsePolicy.
items[].pathMatchers[].pathRules[].customErrorResponsePolicy.errorResponseRules[].path	string The full path to a file within backendBucket . For example: /errors/defaultError.html path must start with a leading slash. path cannot have trailing slashes. If the file is not available in backendBucket or the load balancer cannot reach the BackendBucket, a simple Not Found Error is returned to the client. The value must be from 1 to 1024 characters
items[].pathMatchers[].pathRules[].customErrorResponsePolicy.errorResponseRules[].overrideResponseCode	integer The HTTP status code returned with the response containing the custom error content. If overrideResponseCode is not supplied, the same response code returned by the original backend bucket or backend service is returned to the client.
items[].pathMatchers[].pathRules[].customErrorResponsePolicy.errorService	string The full or partial URL to the BackendBucket resource that contains the custom error content. Examples are: https://www.googleapis.com/compute/v1/projects/project/global/backendBuckets/myBackendBucket compute/v1/projects/project/global/backendBuckets/myBackendBucket global/backendBuckets/myBackendBucket If errorService is not specified at lower levels like pathMatcher, pathRule and routeRule, an errorService specified at a higher level in the UrlMap will be used. If UrlMap.defaultCustomErrorResponsePolicy contains one or more errorResponseRules[], it must specify errorService. If load balancer cannot reach the backendBucket, a simple Not Found Error will be returned, with the original response code (or overrideResponseCode if configured). errorService is not supported for internal or regional HTTP/HTTPS load balancers.
items[].pathMatchers[].routeRules[]	object The list of HTTP route rules. Use this list instead of pathRules when advanced route matching and routing actions are desired. routeRules are evaluated in order of priority, from the lowest to highest number. Within a given pathMatcher, you can set only one of pathRules or routeRules.
items[].pathMatchers[].routeRules[].priority	integer For routeRules within a given pathMatcher, priority determines the order in which a load balancer interprets routeRules. RouteRules are evaluated in order of priority, from the lowest to highest number. The priority of a rule decreases as its number increases (1, 2, 3, N+1). The first rule that matches the request is applied. You cannot configure two or more routeRules with the same priority. Priority for each rule must be set to a number from 0 to 2147483647 inclusive. Priority numbers can have gaps, which enable you to add or remove rules in the future without affecting the rest of the rules. For example, 1, 2, 3, 4, 5, 9, 12, 16 is a valid series of priority numbers to which you could add rules numbered from 6 to 8, 10 to 11, and 13 to 15 in the future without any impact on existing rules.
items[].pathMatchers[].routeRules[].description	string The short description conveying the intent of this routeRule. The description can have a maximum length of 1024 characters.
items[].pathMatchers[].routeRules[].matchRules[]	object The list of criteria for matching attributes of a request to this routeRule. This list has OR semantics: the request matches this routeRule when any of the matchRules are satisfied. However predicates within a given matchRule have AND semantics. All predicates within a matchRule must match for the request to match the rule.
items[].pathMatchers[].routeRules[].matchRules[].prefixMatch	string For satisfying the matchRule condition, the request's path must begin with the specified prefixMatch. prefixMatch must begin with a /. The value must be from 1 to 1024 characters. Only one of prefixMatch, fullPathMatch or regexMatch must be specified.
items[].pathMatchers[].routeRules[].matchRules[].fullPathMatch	string For satisfying the matchRule condition, the path of the request must exactly match the value specified in fullPathMatch after removing any query parameters and anchor that may be part of the original URL. fullPathMatch must be from 1 to 1024 characters. Only one of prefixMatch, fullPathMatch or regexMatch must be specified.
items[].pathMatchers[].routeRules[].matchRules[].regexMatch	string For satisfying the matchRule condition, the path of the request must satisfy the regular expression specified in regexMatch after removing any query parameters and anchor supplied with the original URL. For more information about regular expression syntax, see Syntax. Only one of prefixMatch, fullPathMatch or regexMatch must be specified. Regular expressions can only be used when the loadBalancingScheme is set to INTERNAL_SELF_MANAGED.
items[].pathMatchers[].routeRules[].matchRules[].ignoreCase	boolean Specifies that prefixMatch and fullPathMatch matches are case sensitive. The default value is false. ignoreCase must not be used with regexMatch. Not supported when the URL map is bound to a target gRPC proxy.
items[].pathMatchers[].routeRules[].matchRules[].headerMatches[]	object Specifies a list of header match criteria, all of which must match corresponding headers in the request.
items[].pathMatchers[].routeRules[].matchRules[].headerMatches[].headerName	string The name of the HTTP header to match. For matching against the HTTP request's authority, use a headerMatch with the header name ":authority". For matching a request's method, use the headerName ":method". When the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true, only non-binary user-specified custom metadata and the content-type header are supported. The following transport-level headers cannot be used in header matching rules: :authority, :method, :path, :scheme, user-agent, accept-encoding, content-encoding, grpc-accept-encoding, grpc-encoding, grpc-previous-rpc-attempts, grpc-tags-bin, grpc-timeout and grpc-trace-bin.
items[].pathMatchers[].routeRules[].matchRules[].headerMatches[].exactMatch	string The value should exactly match contents of exactMatch. Only one of exactMatch, prefixMatch, suffixMatch, regexMatch, presentMatch or rangeMatch must be set.
items[].pathMatchers[].routeRules[].matchRules[].headerMatches[].regexMatch	string The value of the header must match the regular expression specified in regexMatch. For more information about regular expression syntax, see Syntax. For matching against a port specified in the HTTP request, use a headerMatch with headerName set to PORT and a regular expression that satisfies the RFC2616 Host header's port specifier. Only one of exactMatch, prefixMatch, suffixMatch, regexMatch, presentMatch or rangeMatch must be set. Regular expressions can only be used when the loadBalancingScheme is set to INTERNAL_SELF_MANAGED.
items[].pathMatchers[].routeRules[].matchRules[].headerMatches[].rangeMatch	object The header value must be an integer and its value must be in the range specified in rangeMatch. If the header does not contain an integer, number or is empty, the match fails. For example for a range [-5, 0] -3 will match. 0 will not match. 0.25 will not match. -3someString will not match. Only one of exactMatch, prefixMatch, suffixMatch, regexMatch, presentMatch or rangeMatch must be set. rangeMatch is not supported for load balancers that have loadBalancingScheme set to EXTERNAL.
items[].pathMatchers[].routeRules[].matchRules[].headerMatches[].rangeMatch.rangeStart	string (int64 format) The start of the range (inclusive) in signed long integer format.
items[].pathMatchers[].routeRules[].matchRules[].headerMatches[].rangeMatch.rangeEnd	string (int64 format) The end of the range (exclusive) in signed long integer format.
items[].pathMatchers[].routeRules[].matchRules[].headerMatches[].presentMatch	boolean A header with the contents of headerName must exist. The match takes place whether or not the request's header has a value. Only one of exactMatch, prefixMatch, suffixMatch, regexMatch, presentMatch or rangeMatch must be set.
items[].pathMatchers[].routeRules[].matchRules[].headerMatches[].prefixMatch	string The value of the header must start with the contents of prefixMatch. Only one of exactMatch, prefixMatch, suffixMatch, regexMatch, presentMatch or rangeMatch must be set.
items[].pathMatchers[].routeRules[].matchRules[].headerMatches[].suffixMatch	string The value of the header must end with the contents of suffixMatch. Only one of exactMatch, prefixMatch, suffixMatch, regexMatch, presentMatch or rangeMatch must be set.
items[].pathMatchers[].routeRules[].matchRules[].headerMatches[].invertMatch	boolean If set to false, the headerMatch is considered a match if the preceding match criteria are met. If set to true, the headerMatch is considered a match if the preceding match criteria are NOT met. The default setting is false.
items[].pathMatchers[].routeRules[].matchRules[].queryParameterMatches[]	object Specifies a list of query parameter match criteria, all of which must match corresponding query parameters in the request. Not supported when the URL map is bound to a target gRPC proxy.
items[].pathMatchers[].routeRules[].matchRules[].queryParameterMatches[].name	string The name of the query parameter to match. The query parameter must exist in the request, in the absence of which the request match fails.
items[].pathMatchers[].routeRules[].matchRules[].queryParameterMatches[].presentMatch	boolean Specifies that the queryParameterMatch matches if the request contains the query parameter, irrespective of whether the parameter has a value or not. Only one of presentMatch, exactMatch, or regexMatch must be set.
items[].pathMatchers[].routeRules[].matchRules[].queryParameterMatches[].exactMatch	string The queryParameterMatch matches if the value of the parameter exactly matches the contents of exactMatch. Only one of presentMatch, exactMatch, or regexMatch must be set.
items[].pathMatchers[].routeRules[].matchRules[].queryParameterMatches[].regexMatch	string The queryParameterMatch matches if the value of the parameter matches the regular expression specified by regexMatch. For more information about regular expression syntax, see Syntax. Only one of presentMatch, exactMatch, or regexMatch must be set. Regular expressions can only be used when the loadBalancingScheme is set to INTERNAL_SELF_MANAGED.
items[].pathMatchers[].routeRules[].matchRules[].metadataFilters[]	object Opaque filter criteria used by the load balancer to restrict routing configuration to a limited set of xDS compliant clients. In their xDS requests to the load balancer, xDS clients present node metadata. When there is a match, the relevant routing configuration is made available to those proxies. For each metadataFilter in this list, if its filterMatchCriteria is set to MATCH_ANY, at least one of the filterLabels must match the corresponding label provided in the metadata. If its filterMatchCriteria is set to MATCH_ALL, then all of its filterLabels must match with corresponding labels provided in the metadata. If multiple metadata filters are specified, all of them need to be satisfied in order to be considered a match. metadataFilters specified here is applied after those specified in ForwardingRule that refers to the UrlMap this HttpRouteRuleMatch belongs to. metadataFilters only applies to load balancers that have loadBalancingScheme set to INTERNAL_SELF_MANAGED. Not supported when the URL map is bound to a target gRPC proxy that has validateForProxyless field set to true.
items[].pathMatchers[].routeRules[].matchRules[].metadataFilters[].filterMatchCriteria	enum Specifies how individual filter label matches within the list of filterLabels and contributes toward the overall metadataFilter match. Supported values are: MATCH_ANY: at least one of the filterLabels must have a matching label in the provided metadata. MATCH_ALL: all filterLabels must have matching labels in the provided metadata.
items[].pathMatchers[].routeRules[].matchRules[].metadataFilters[].filterLabels[]	object The list of label value pairs that must match labels in the provided metadata based on filterMatchCriteria This list must not be empty and can have at the most 64 entries.
items[].pathMatchers[].routeRules[].matchRules[].metadataFilters[].filterLabels[].name	string Name of metadata label. The name can have a maximum length of 1024 characters and must be at least 1 character long.
items[].pathMatchers[].routeRules[].matchRules[].metadataFilters[].filterLabels[].value	string The value of the label must match the specified value. value can have a maximum length of 1024 characters.
items[].pathMatchers[].routeRules[].matchRules[].pathTemplateMatch	string If specified, the route is a pattern match expression that must match the :path header once the query string is removed. A pattern match allows you to match The value must be between 1 and 1024 characters The pattern must start with a leading slash ("/") There may be no more than 5 operators in pattern Precisely one of prefixMatch, fullPathMatch, regexMatch or pathTemplateMatch must be set.
items[].pathMatchers[].routeRules[].service	string The full or partial URL of the backend service resource to which traffic is directed if this rule is matched. If routeAction is also specified, advanced routing actions, such as URL rewrites, take effect before sending the request to the backend. However, if service is specified, routeAction cannot contain any weightedBackendServices. Conversely, if routeAction specifies any weightedBackendServices, service must not be specified. Only one of urlRedirect, service or routeAction.weightedBackendService must be set.
items[].pathMatchers[].routeRules[].routeAction	object In response to a matching matchRule, the load balancer performs advanced routing actions, such as URL rewrites and header transformations, before forwarding the request to the selected backend. If routeAction specifies any weightedBackendServices, service must not be set. Conversely if service is set, routeAction cannot contain any weightedBackendServices. Only one of urlRedirect, service or routeAction.weightedBackendService must be set. URL maps for classic Application Load Balancers only support the urlRewrite action within a route rule's routeAction.
items[].pathMatchers[].routeRules[].routeAction.weightedBackendServices[]	object A list of weighted backend services to send traffic to when a route match occurs. The weights determine the fraction of traffic that flows to their corresponding backend service. If all traffic needs to go to a single backend service, there must be one weightedBackendService with weight set to a non-zero number. After a backend service is identified and before forwarding the request to the backend service, advanced routing actions such as URL rewrites and header transformations are applied depending on additional settings specified in this HttpRouteAction.
items[].pathMatchers[].routeRules[].routeAction.weightedBackendServices[].backendService	string The full or partial URL to the default BackendService resource. Before forwarding the request to backendService, the load balancer applies any relevant headerActions specified as part of this backendServiceWeight.
items[].pathMatchers[].routeRules[].routeAction.weightedBackendServices[].weight	integer (uint32 format) Specifies the fraction of traffic sent to a backend service, computed as weight / (sum of all weightedBackendService weights in routeAction) . The selection of a backend service is determined only for new traffic. Once a user's request has been directed to a backend service, subsequent requests are sent to the same backend service as determined by the backend service's session affinity policy. Don't configure session affinity if you're using weighted traffic splitting. If you do, the weighted traffic splitting configuration takes precedence. The value must be from 0 to 1000.
items[].pathMatchers[].routeRules[].routeAction.weightedBackendServices[].headerAction	object Specifies changes to request and response headers that need to take effect for the selected backendService. headerAction specified here take effect before headerAction in the enclosing HttpRouteRule, PathMatcher and UrlMap. headerAction is not supported for load balancers that have their loadBalancingScheme set to EXTERNAL. Not supported when the URL map is bound to a target gRPC proxy that has validateForProxyless field set to true.
items[].pathMatchers[].routeRules[].routeAction.weightedBackendServices[].headerAction.requestHeadersToRemove[]	string A list of header names for headers that need to be removed from the request before forwarding the request to the backendService.
items[].pathMatchers[].routeRules[].routeAction.weightedBackendServices[].headerAction.requestHeadersToAdd[]	object Headers to add to a matching request before forwarding the request to the backendService.
items[].pathMatchers[].routeRules[].routeAction.weightedBackendServices[].headerAction.requestHeadersToAdd[].headerName	string The name of the header.
items[].pathMatchers[].routeRules[].routeAction.weightedBackendServices[].headerAction.requestHeadersToAdd[].headerValue	string The value of the header to add.
items[].pathMatchers[].routeRules[].routeAction.weightedBackendServices[].headerAction.requestHeadersToAdd[].replace	boolean If false, headerValue is appended to any values that already exist for the header. If true, headerValue is set for the header, discarding any values that were set for that header. The default value is false.
items[].pathMatchers[].routeRules[].routeAction.weightedBackendServices[].headerAction.responseHeadersToRemove[]	string A list of header names for headers that need to be removed from the response before sending the response back to the client.
items[].pathMatchers[].routeRules[].routeAction.weightedBackendServices[].headerAction.responseHeadersToAdd[]	object Headers to add the response before sending the response back to the client.
items[].pathMatchers[].routeRules[].routeAction.weightedBackendServices[].headerAction.responseHeadersToAdd[].headerName	string The name of the header.
items[].pathMatchers[].routeRules[].routeAction.weightedBackendServices[].headerAction.responseHeadersToAdd[].headerValue	string The value of the header to add.
items[].pathMatchers[].routeRules[].routeAction.weightedBackendServices[].headerAction.responseHeadersToAdd[].replace	boolean If false, headerValue is appended to any values that already exist for the header. If true, headerValue is set for the header, discarding any values that were set for that header. The default value is false.
items[].pathMatchers[].routeRules[].routeAction.urlRewrite	object The spec to modify the URL of the request, before forwarding the request to the matched service. urlRewrite is the only action supported in UrlMaps for classic Application Load Balancers. Not supported when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.
items[].pathMatchers[].routeRules[].routeAction.urlRewrite.pathPrefixRewrite	string Before forwarding the request to the selected backend service, the matching portion of the request's path is replaced by pathPrefixRewrite. The value must be from 1 to 1024 characters.
items[].pathMatchers[].routeRules[].routeAction.urlRewrite.hostRewrite	string Before forwarding the request to the selected service, the request's host header is replaced with contents of hostRewrite. The value must be from 1 to 255 characters.
items[].pathMatchers[].routeRules[].routeAction.urlRewrite.pathTemplateRewrite	string If specified, the pattern rewrites the URL path (based on the :path header) using the HTTP template syntax. A corresponding pathTemplateMatch must be specified. Any template variables must exist in the pathTemplateMatch field. -At least one variable must be specified in the pathTemplateMatch field You can omit variables from the rewritten URL The * and ** operators cannot be matched unless they have a corresponding variable name - e.g. {format=*} or {var=**}. For example, a pathTemplateMatch of /static/{format=**} could be rewritten as /static/content/{format} to prefix /content to the URL. Variables can also be re-ordered in a rewrite, so that /{country}/{format}/{suffix=**} can be rewritten as /content/{format}/{country}/{suffix}. At least one non-empty routeRules[].matchRules[].path_template_match is required. Only one of pathPrefixRewrite or pathTemplateRewrite may be specified.
items[].pathMatchers[].routeRules[].routeAction.timeout	object Specifies the timeout for the selected route. Timeout is computed from the time the request has been fully processed (known as end-of-stream) up until the response has been processed. Timeout includes all retries. If not specified, this field uses the largest timeout among all backend services associated with the route. Not supported when the URL map is bound to a target gRPC proxy that has validateForProxyless field set to true.
items[].pathMatchers[].routeRules[].routeAction.timeout.seconds	string (int64 format) Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive. Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
items[].pathMatchers[].routeRules[].routeAction.timeout.nanos	integer Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
items[].pathMatchers[].routeRules[].routeAction.retryPolicy	object Specifies the retry policy associated with this route.
items[].pathMatchers[].routeRules[].routeAction.retryPolicy.retryConditions[]	string Specifies one or more conditions when this retry policy applies. Valid values are: 5xx: retry is attempted if the instance or endpoint responds with any 5xx response code, or if the instance or endpoint does not respond at all. For example, disconnects, reset, read timeout, connection failure, and refused streams. gateway-error: Similar to 5xx, but only applies to response codes 502, 503 or 504. connect-failure: a retry is attempted on failures connecting to the instance or endpoint. For example, connection timeouts. retriable-4xx: a retry is attempted if the instance or endpoint responds with a 4xx response code. The only error that you can retry is error code 409. refused-stream: a retry is attempted if the instance or endpoint resets the stream with a REFUSED_STREAM error code. This reset type indicates that it is safe to retry. cancelled: a retry is attempted if the gRPC status code in the response header is set to cancelled. deadline-exceeded: a retry is attempted if the gRPC status code in the response header is set to deadline-exceeded. internal: a retry is attempted if the gRPC status code in the response header is set to internal. resource-exhausted: a retry is attempted if the gRPC status code in the response header is set to resource-exhausted. unavailable: a retry is attempted if the gRPC status code in the response header is set to unavailable. Only the following codes are supported when the URL map is bound to target gRPC proxy that has validateForProxyless field set to true. cancelled deadline-exceeded internal resource-exhausted unavailable
items[].pathMatchers[].routeRules[].routeAction.retryPolicy.numRetries	integer (uint32 format) Specifies the allowed number retries. This number must be > 0. If not specified, defaults to 1.
items[].pathMatchers[].routeRules[].routeAction.retryPolicy.perTryTimeout	object Specifies a non-zero timeout per retry attempt. If not specified, will use the timeout set in the HttpRouteAction field. If timeout in the HttpRouteAction field is not set, this field uses the largest timeout among all backend services associated with the route. Not supported when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.
items[].pathMatchers[].routeRules[].routeAction.retryPolicy.perTryTimeout.seconds	string (int64 format) Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive. Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
items[].pathMatchers[].routeRules[].routeAction.retryPolicy.perTryTimeout.nanos	integer Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
items[].pathMatchers[].routeRules[].routeAction.requestMirrorPolicy	object Specifies the policy on how requests intended for the route's backends are shadowed to a separate mirrored backend service. The load balancer does not wait for responses from the shadow service. Before sending traffic to the shadow service, the host / authority header is suffixed with -shadow. Not supported when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.
items[].pathMatchers[].routeRules[].routeAction.requestMirrorPolicy.backendService	string The full or partial URL to the BackendService resource being mirrored to. The backend service configured for a mirroring policy must reference backends that are of the same type as the original backend service matched in the URL map. Serverless NEG backends are not currently supported as a mirrored backend service.
items[].pathMatchers[].routeRules[].routeAction.requestMirrorPolicy.mirrorPercent	number The percentage of requests to be mirrored to backendService.
items[].pathMatchers[].routeRules[].routeAction.corsPolicy	object The specification for allowing client-side cross-origin requests. For more information about the W3C recommendation for cross-origin resource sharing (CORS), see Fetch API Living Standard. Not supported when the URL map is bound to a target gRPC proxy.
items[].pathMatchers[].routeRules[].routeAction.corsPolicy.allowOrigins[]	string Specifies the list of origins that is allowed to do CORS requests. An origin is allowed if it matches either an item in allowOrigins or an item in allowOriginRegexes.
items[].pathMatchers[].routeRules[].routeAction.corsPolicy.allowOriginRegexes[]	string Specifies a regular expression that matches allowed origins. For more information, see regular expression syntax . An origin is allowed if it matches either an item in allowOrigins or an item in allowOriginRegexes. Regular expressions can only be used when the loadBalancingScheme is set to INTERNAL_SELF_MANAGED.
items[].pathMatchers[].routeRules[].routeAction.corsPolicy.allowMethods[]	string Specifies the content for the Access-Control-Allow-Methods header.
items[].pathMatchers[].routeRules[].routeAction.corsPolicy.allowHeaders[]	string Specifies the content for the Access-Control-Allow-Headers header.
items[].pathMatchers[].routeRules[].routeAction.corsPolicy.exposeHeaders[]	string Specifies the content for the Access-Control-Expose-Headers header.
items[].pathMatchers[].routeRules[].routeAction.corsPolicy.maxAge	integer Specifies how long results of a preflight request can be cached in seconds. This field translates to the Access-Control-Max-Age header.
items[].pathMatchers[].routeRules[].routeAction.corsPolicy.allowCredentials	boolean In response to a preflight request, setting this to true indicates that the actual request can include user credentials. This field translates to the Access-Control-Allow-Credentials header. Default is false.
items[].pathMatchers[].routeRules[].routeAction.corsPolicy.disabled	boolean If true, disables the CORS policy. The default value is false, which indicates that the CORS policy is in effect.
items[].pathMatchers[].routeRules[].routeAction.faultInjectionPolicy	object The specification for fault injection introduced into traffic to test the resiliency of clients to backend service failure. As part of fault injection, when clients send requests to a backend service, delays can be introduced by a load balancer on a percentage of requests before sending those requests to the backend service. Similarly requests from clients can be aborted by the load balancer for a percentage of requests. timeout and retryPolicy is ignored by clients that are configured with a faultInjectionPolicy if: 1. The traffic is generated by fault injection AND 2. The fault injection is not a delay fault injection. Fault injection is not supported with the classic Application Load Balancer . To see which load balancers support fault injection, see Load balancing: Routing and traffic management features.
items[].pathMatchers[].routeRules[].routeAction.faultInjectionPolicy.delay	object The specification for how client requests are delayed as part of fault injection, before being sent to a backend service.
items[].pathMatchers[].routeRules[].routeAction.faultInjectionPolicy.delay.fixedDelay	object Specifies the value of the fixed delay interval.
items[].pathMatchers[].routeRules[].routeAction.faultInjectionPolicy.delay.fixedDelay.seconds	string (int64 format) Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive. Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
items[].pathMatchers[].routeRules[].routeAction.faultInjectionPolicy.delay.fixedDelay.nanos	integer Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
items[].pathMatchers[].routeRules[].routeAction.faultInjectionPolicy.delay.percentage	number The percentage of traffic for connections, operations, or requests for which a delay is introduced as part of fault injection. The value must be from 0.0 to 100.0 inclusive.
items[].pathMatchers[].routeRules[].routeAction.faultInjectionPolicy.abort	object The specification for how client requests are aborted as part of fault injection.
items[].pathMatchers[].routeRules[].routeAction.faultInjectionPolicy.abort.httpStatus	integer (uint32 format) The HTTP status code used to abort the request. The value must be from 200 to 599 inclusive. For gRPC protocol, the gRPC status code is mapped to HTTP status code according to this mapping table. HTTP status 200 is mapped to gRPC status UNKNOWN. Injecting an OK status is currently not supported by Traffic Director.
items[].pathMatchers[].routeRules[].routeAction.faultInjectionPolicy.abort.percentage	number The percentage of traffic for connections, operations, or requests that is aborted as part of fault injection. The value must be from 0.0 to 100.0 inclusive.
items[].pathMatchers[].routeRules[].routeAction.maxStreamDuration	object Specifies the maximum duration (timeout) for streams on the selected route. Unlike the timeout field where the timeout duration starts from the time the request has been fully processed (known as end-of-stream), the duration in this field is computed from the beginning of the stream until the response has been processed, including all retries. A stream that does not complete in this duration is closed. If not specified, this field uses the maximum maxStreamDuration value among all backend services associated with the route. This field is only allowed if the Url map is used with backend services with loadBalancingScheme set to INTERNAL_SELF_MANAGED.
items[].pathMatchers[].routeRules[].routeAction.maxStreamDuration.seconds	string (int64 format) Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive. Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
items[].pathMatchers[].routeRules[].routeAction.maxStreamDuration.nanos	integer Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
items[].pathMatchers[].routeRules[].urlRedirect	object When this rule is matched, the request is redirected to a URL specified by urlRedirect. If urlRedirect is specified, service or routeAction must not be set. Not supported when the URL map is bound to a target gRPC proxy.
items[].pathMatchers[].routeRules[].urlRedirect.hostRedirect	string The host that is used in the redirect response instead of the one that was supplied in the request. The value must be from 1 to 255 characters.
items[].pathMatchers[].routeRules[].urlRedirect.pathRedirect	string The path that is used in the redirect response instead of the one that was supplied in the request. pathRedirect cannot be supplied together with prefixRedirect. Supply one alone or neither. If neither is supplied, the path of the original request is used for the redirect. The value must be from 1 to 1024 characters.
items[].pathMatchers[].routeRules[].urlRedirect.prefixRedirect	string The prefix that replaces the prefixMatch specified in the HttpRouteRuleMatch, retaining the remaining portion of the URL before redirecting the request. prefixRedirect cannot be supplied together with pathRedirect. Supply one alone or neither. If neither is supplied, the path of the original request is used for the redirect. The value must be from 1 to 1024 characters.
items[].pathMatchers[].routeRules[].urlRedirect.redirectResponseCode	enum The HTTP Status code to use for this RedirectAction. Supported values are: MOVED_PERMANENTLY_DEFAULT, which is the default value and corresponds to 301. FOUND, which corresponds to 302. SEE_OTHER which corresponds to 303. TEMPORARY_REDIRECT, which corresponds to 307. In this case, the request method is retained. PERMANENT_REDIRECT, which corresponds to 308. In this case, the request method is retained.
items[].pathMatchers[].routeRules[].urlRedirect.httpsRedirect	boolean If set to true, the URL scheme in the redirected request is set to HTTPS. If set to false, the URL scheme of the redirected request remains the same as that of the request. This must only be set for URL maps used in TargetHttpProxys. Setting this true for TargetHttpsProxy is not permitted. The default is set to false.
items[].pathMatchers[].routeRules[].urlRedirect.stripQuery	boolean If set to true, any accompanying query portion of the original URL is removed before redirecting the request. If set to false, the query portion of the original URL is retained. The default is set to false.
items[].pathMatchers[].routeRules[].headerAction	object Specifies changes to request and response headers that need to take effect for the selected backendService. The headerAction value specified here is applied before the matching pathMatchers[].headerAction and after pathMatchers[].routeRules[].routeAction.weightedBackendService.backendServiceWeightAction[].headerAction HeaderAction is not supported for load balancers that have their loadBalancingScheme set to EXTERNAL. Not supported when the URL map is bound to a target gRPC proxy that has validateForProxyless field set to true.
items[].pathMatchers[].routeRules[].headerAction.requestHeadersToRemove[]	string A list of header names for headers that need to be removed from the request before forwarding the request to the backendService.
items[].pathMatchers[].routeRules[].headerAction.requestHeadersToAdd[]	object Headers to add to a matching request before forwarding the request to the backendService.
items[].pathMatchers[].routeRules[].headerAction.requestHeadersToAdd[].headerName	string The name of the header.
items[].pathMatchers[].routeRules[].headerAction.requestHeadersToAdd[].headerValue	string The value of the header to add.
items[].pathMatchers[].routeRules[].headerAction.requestHeadersToAdd[].replace	boolean If false, headerValue is appended to any values that already exist for the header. If true, headerValue is set for the header, discarding any values that were set for that header. The default value is false.
items[].pathMatchers[].routeRules[].headerAction.responseHeadersToRemove[]	string A list of header names for headers that need to be removed from the response before sending the response back to the client.
items[].pathMatchers[].routeRules[].headerAction.responseHeadersToAdd[]	object Headers to add the response before sending the response back to the client.
items[].pathMatchers[].routeRules[].headerAction.responseHeadersToAdd[].headerName	string The name of the header.
items[].pathMatchers[].routeRules[].headerAction.responseHeadersToAdd[].headerValue	string The value of the header to add.
items[].pathMatchers[].routeRules[].headerAction.responseHeadersToAdd[].replace	boolean If false, headerValue is appended to any values that already exist for the header. If true, headerValue is set for the header, discarding any values that were set for that header. The default value is false.
items[].pathMatchers[].routeRules[].httpFilterConfigs[]	object Outbound route specific configuration for networkservices.HttpFilter resources enabled by Traffic Director. httpFilterConfigs only applies for load balancers with loadBalancingScheme set to INTERNAL_SELF_MANAGED. See ForwardingRule for more details. Not supported when the URL map is bound to a target gRPC proxy that has validateForProxyless field set to true.
items[].pathMatchers[].routeRules[].httpFilterConfigs[].filterName	string Name of the networkservices.HttpFilter resource this configuration belongs to. This name must be known to the xDS client. Example: envoy.wasm
items[].pathMatchers[].routeRules[].httpFilterConfigs[].configTypeUrl	string The fully qualified versioned proto3 type url of the protobuf that the filter expects for its contextual settings, for example: type.googleapis.com/google.protobuf.Struct
items[].pathMatchers[].routeRules[].httpFilterConfigs[].config	string The configuration needed to enable the networkservices.HttpFilter resource. The configuration must be YAML formatted and only contain fields defined in the protobuf identified in configTypeUrl
items[].pathMatchers[].routeRules[].httpFilterMetadata[]	object Outbound route specific metadata supplied to networkservices.HttpFilter resources enabled by Traffic Director. httpFilterMetadata only applies for load balancers with loadBalancingScheme set to INTERNAL_SELF_MANAGED. See ForwardingRule for more details. The only configTypeUrl supported is type.googleapis.com/google.protobuf.Struct Not supported when the URL map is bound to a target gRPC proxy that has validateForProxyless field set to true.
items[].pathMatchers[].routeRules[].httpFilterMetadata[].filterName	string Name of the networkservices.HttpFilter resource this configuration belongs to. This name must be known to the xDS client. Example: envoy.wasm
items[].pathMatchers[].routeRules[].httpFilterMetadata[].configTypeUrl	string The fully qualified versioned proto3 type url of the protobuf that the filter expects for its contextual settings, for example: type.googleapis.com/google.protobuf.Struct
items[].pathMatchers[].routeRules[].httpFilterMetadata[].config	string The configuration needed to enable the networkservices.HttpFilter resource. The configuration must be YAML formatted and only contain fields defined in the protobuf identified in configTypeUrl
items[].pathMatchers[].routeRules[].customErrorResponsePolicy	object customErrorResponsePolicy specifies how the Load Balancer returns error responses when BackendServiceor BackendBucket responds with an error. If a policy for an error code is not configured for the RouteRule, a policy for the error code configured in pathMatcher.defaultCustomErrorResponsePolicy is applied. If one is not specified in pathMatcher.defaultCustomErrorResponsePolicy, the policy configured in UrlMap.defaultCustomErrorResponsePolicy takes effect. For example, consider a UrlMap with the following configuration: UrlMap.defaultCustomErrorResponsePolicy are configured with policies for 5xx and 4xx errors A RouteRule for /coming_soon/ is configured for the error code 404. If the request is for www.myotherdomain.com and a 404 is encountered, the policy under UrlMap.defaultCustomErrorResponsePolicy takes effect. If a 404 response is encountered for the request www.example.com/current_events/, the pathMatcher's policy takes effect. If however, the request for www.example.com/coming_soon/ encounters a 404, the policy in RouteRule.customErrorResponsePolicy takes effect. If any of the requests in this example encounter a 500 error code, the policy at UrlMap.defaultCustomErrorResponsePolicy takes effect. When used in conjunction with routeRules.routeAction.retryPolicy, retries take precedence. Only once all retries are exhausted, the customErrorResponsePolicy is applied. While attempting a retry, if load balancer is successful in reaching the service, the customErrorResponsePolicy is ignored and the response from the service is returned to the client. customErrorResponsePolicy is supported only for global external Application Load Balancers.
items[].pathMatchers[].routeRules[].customErrorResponsePolicy.errorResponseRules[]	object Specifies rules for returning error responses. In a given policy, if you specify rules for both a range of error codes as well as rules for specific error codes then rules with specific error codes have a higher priority. For example, assume that you configure a rule for 401 (Un-authorized) code, and another for all 4 series error codes (4XX). If the backend service returns a 401, then the rule for 401 will be applied. However if the backend service returns a 403, the rule for 4xx takes effect.
items[].pathMatchers[].routeRules[].customErrorResponsePolicy.errorResponseRules[].matchResponseCodes[]	string Valid values include: A number between 400 and 599: For example 401 or 503, in which case the load balancer applies the policy if the error code exactly matches this value. 5xx: Load Balancer will apply the policy if the backend service responds with any response code in the range of 500 to 599. 4xx: Load Balancer will apply the policy if the backend service responds with any response code in the range of 400 to 499. Values must be unique within matchResponseCodes and across all errorResponseRules of CustomErrorResponsePolicy.
items[].pathMatchers[].routeRules[].customErrorResponsePolicy.errorResponseRules[].path	string The full path to a file within backendBucket . For example: /errors/defaultError.html path must start with a leading slash. path cannot have trailing slashes. If the file is not available in backendBucket or the load balancer cannot reach the BackendBucket, a simple Not Found Error is returned to the client. The value must be from 1 to 1024 characters
items[].pathMatchers[].routeRules[].customErrorResponsePolicy.errorResponseRules[].overrideResponseCode	integer The HTTP status code returned with the response containing the custom error content. If overrideResponseCode is not supplied, the same response code returned by the original backend bucket or backend service is returned to the client.
items[].pathMatchers[].routeRules[].customErrorResponsePolicy.errorService	string The full or partial URL to the BackendBucket resource that contains the custom error content. Examples are: https://www.googleapis.com/compute/v1/projects/project/global/backendBuckets/myBackendBucket compute/v1/projects/project/global/backendBuckets/myBackendBucket global/backendBuckets/myBackendBucket If errorService is not specified at lower levels like pathMatcher, pathRule and routeRule, an errorService specified at a higher level in the UrlMap will be used. If UrlMap.defaultCustomErrorResponsePolicy contains one or more errorResponseRules[], it must specify errorService. If load balancer cannot reach the backendBucket, a simple Not Found Error will be returned, with the original response code (or overrideResponseCode if configured). errorService is not supported for internal or regional HTTP/HTTPS load balancers.
items[].pathMatchers[].headerAction	object Specifies changes to request and response headers that need to take effect for the selected backend service. HeaderAction specified here are applied after the matching HttpRouteRule HeaderAction and before the HeaderAction in the UrlMap HeaderAction is not supported for load balancers that have their loadBalancingScheme set to EXTERNAL. Not supported when the URL map is bound to a target gRPC proxy that has validateForProxyless field set to true.
items[].pathMatchers[].headerAction.requestHeadersToRemove[]	string A list of header names for headers that need to be removed from the request before forwarding the request to the backendService.
items[].pathMatchers[].headerAction.requestHeadersToAdd[]	object Headers to add to a matching request before forwarding the request to the backendService.
items[].pathMatchers[].headerAction.requestHeadersToAdd[].headerName	string The name of the header.
items[].pathMatchers[].headerAction.requestHeadersToAdd[].headerValue	string The value of the header to add.
items[].pathMatchers[].headerAction.requestHeadersToAdd[].replace	boolean If false, headerValue is appended to any values that already exist for the header. If true, headerValue is set for the header, discarding any values that were set for that header. The default value is false.
items[].pathMatchers[].headerAction.responseHeadersToRemove[]	string A list of header names for headers that need to be removed from the response before sending the response back to the client.
items[].pathMatchers[].headerAction.responseHeadersToAdd[]	object Headers to add the response before sending the response back to the client.
items[].pathMatchers[].headerAction.responseHeadersToAdd[].headerName	string The name of the header.
items[].pathMatchers[].headerAction.responseHeadersToAdd[].headerValue	string The value of the header to add.
items[].pathMatchers[].headerAction.responseHeadersToAdd[].replace	boolean If false, headerValue is appended to any values that already exist for the header. If true, headerValue is set for the header, discarding any values that were set for that header. The default value is false.
items[].pathMatchers[].defaultCustomErrorResponsePolicy	object defaultCustomErrorResponsePolicy specifies how the Load Balancer returns error responses when BackendServiceor BackendBucket responds with an error. This policy takes effect at the PathMatcher level and applies only when no policy has been defined for the error code at lower levels like RouteRule and PathRule within this PathMatcher. If an error code does not have a policy defined in defaultCustomErrorResponsePolicy, then a policy defined for the error code in UrlMap.defaultCustomErrorResponsePolicy takes effect. For example, consider a UrlMap with the following configuration: UrlMap.defaultCustomErrorResponsePolicy is configured with policies for 5xx and 4xx errors A RouteRule for /coming_soon/ is configured for the error code 404. If the request is for www.myotherdomain.com and a 404 is encountered, the policy under UrlMap.defaultCustomErrorResponsePolicy takes effect. If a 404 response is encountered for the request www.example.com/current_events/, the pathMatcher's policy takes effect. If however, the request for www.example.com/coming_soon/ encounters a 404, the policy in RouteRule.customErrorResponsePolicy takes effect. If any of the requests in this example encounter a 500 error code, the policy at UrlMap.defaultCustomErrorResponsePolicy takes effect. When used in conjunction with pathMatcher.defaultRouteAction.retryPolicy, retries take precedence. Only once all retries are exhausted, the defaultCustomErrorResponsePolicy is applied. While attempting a retry, if load balancer is successful in reaching the service, the defaultCustomErrorResponsePolicy is ignored and the response from the service is returned to the client. defaultCustomErrorResponsePolicy is supported only for global external Application Load Balancers.
items[].pathMatchers[].defaultCustomErrorResponsePolicy.errorResponseRules[]	object Specifies rules for returning error responses. In a given policy, if you specify rules for both a range of error codes as well as rules for specific error codes then rules with specific error codes have a higher priority. For example, assume that you configure a rule for 401 (Un-authorized) code, and another for all 4 series error codes (4XX). If the backend service returns a 401, then the rule for 401 will be applied. However if the backend service returns a 403, the rule for 4xx takes effect.
items[].pathMatchers[].defaultCustomErrorResponsePolicy.errorResponseRules[].matchResponseCodes[]	string Valid values include: A number between 400 and 599: For example 401 or 503, in which case the load balancer applies the policy if the error code exactly matches this value. 5xx: Load Balancer will apply the policy if the backend service responds with any response code in the range of 500 to 599. 4xx: Load Balancer will apply the policy if the backend service responds with any response code in the range of 400 to 499. Values must be unique within matchResponseCodes and across all errorResponseRules of CustomErrorResponsePolicy.
items[].pathMatchers[].defaultCustomErrorResponsePolicy.errorResponseRules[].path	string The full path to a file within backendBucket . For example: /errors/defaultError.html path must start with a leading slash. path cannot have trailing slashes. If the file is not available in backendBucket or the load balancer cannot reach the BackendBucket, a simple Not Found Error is returned to the client. The value must be from 1 to 1024 characters
items[].pathMatchers[].defaultCustomErrorResponsePolicy.errorResponseRules[].overrideResponseCode	integer The HTTP status code returned with the response containing the custom error content. If overrideResponseCode is not supplied, the same response code returned by the original backend bucket or backend service is returned to the client.
items[].pathMatchers[].defaultCustomErrorResponsePolicy.errorService	string The full or partial URL to the BackendBucket resource that contains the custom error content. Examples are: https://www.googleapis.com/compute/v1/projects/project/global/backendBuckets/myBackendBucket compute/v1/projects/project/global/backendBuckets/myBackendBucket global/backendBuckets/myBackendBucket If errorService is not specified at lower levels like pathMatcher, pathRule and routeRule, an errorService specified at a higher level in the UrlMap will be used. If UrlMap.defaultCustomErrorResponsePolicy contains one or more errorResponseRules[], it must specify errorService. If load balancer cannot reach the backendBucket, a simple Not Found Error will be returned, with the original response code (or overrideResponseCode if configured). errorService is not supported for internal or regional HTTP/HTTPS load balancers.
items[].tests[]	object The list of expected URL mapping tests. Request to update the UrlMap succeeds only if all test cases pass. You can specify a maximum of 100 tests per UrlMap. Not supported when the URL map is bound to a target gRPC proxy that has validateForProxyless field set to true.
items[].tests[].description	string Description of this test case.
items[].tests[].host	string Host portion of the URL. If headers contains a host header, then host must also match the header value.
items[].tests[].path	string Path portion of the URL.
items[].tests[].headers[]	object HTTP headers for this request. If headers contains a host header, then host must also match the header value.
items[].tests[].headers[].name	string Header name.
items[].tests[].headers[].value	string Header value.
items[].tests[].service	string Expected BackendService or BackendBucket resource the given URL should be mapped to. The service field cannot be set if expectedRedirectResponseCode is set.
items[].tests[].expectedOutputUrl	string The expected output URL evaluated by the load balancer containing the scheme, host, path and query parameters. For rules that forward requests to backends, the test passes only when expectedOutputUrl matches the request forwarded by the load balancer to backends. For rules with urlRewrite, the test verifies that the forwarded request matches hostRewrite and pathPrefixRewrite in the urlRewrite action. When service is specified, expectedOutputUrl`s scheme is ignored. For rules with urlRedirect, the test passes only if expectedOutputUrl matches the URL in the load balancer's redirect response. If urlRedirect specifies httpsRedirect, the test passes only if the scheme in expectedOutputUrl is also set to HTTPS. If urlRedirect specifies stripQuery, the test passes only if expectedOutputUrl does not contain any query parameters. expectedOutputUrl is optional when service is specified.
items[].tests[].expectedRedirectResponseCode	integer For rules with urlRedirect, the test passes only if expectedRedirectResponseCode matches the HTTP status code in load balancer's redirect response. expectedRedirectResponseCode cannot be set when service is set.
items[].defaultService	string The full or partial URL of the defaultService resource to which traffic is directed if none of the hostRules match. If defaultRouteAction is also specified, advanced routing actions, such as URL rewrites, take effect before sending the request to the backend. However, if defaultService is specified, defaultRouteAction cannot contain any defaultRouteAction.weightedBackendServices. Conversely, if defaultRouteAction specifies any defaultRouteAction.weightedBackendServices, defaultService must not be specified. If defaultService is specified, then set either defaultUrlRedirect , or defaultRouteAction.weightedBackendService Don't set both. defaultService has no effect when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.
items[].defaultRouteAction	object defaultRouteAction takes effect when none of the hostRules match. The load balancer performs advanced routing actions, such as URL rewrites and header transformations, before forwarding the request to the selected backend. If defaultRouteAction specifies any weightedBackendServices, defaultService must not be set. Conversely if defaultService is set, defaultRouteAction cannot contain any weightedBackendServices. Only one of defaultRouteAction or defaultUrlRedirect must be set. URL maps for classic Application Load Balancers only support the urlRewrite action within defaultRouteAction. defaultRouteAction has no effect when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.
items[].defaultRouteAction.weightedBackendServices[]	object A list of weighted backend services to send traffic to when a route match occurs. The weights determine the fraction of traffic that flows to their corresponding backend service. If all traffic needs to go to a single backend service, there must be one weightedBackendService with weight set to a non-zero number. After a backend service is identified and before forwarding the request to the backend service, advanced routing actions such as URL rewrites and header transformations are applied depending on additional settings specified in this HttpRouteAction.
items[].defaultRouteAction.weightedBackendServices[].backendService	string The full or partial URL to the default BackendService resource. Before forwarding the request to backendService, the load balancer applies any relevant headerActions specified as part of this backendServiceWeight.
items[].defaultRouteAction.weightedBackendServices[].weight	integer (uint32 format) Specifies the fraction of traffic sent to a backend service, computed as weight / (sum of all weightedBackendService weights in routeAction) . The selection of a backend service is determined only for new traffic. Once a user's request has been directed to a backend service, subsequent requests are sent to the same backend service as determined by the backend service's session affinity policy. Don't configure session affinity if you're using weighted traffic splitting. If you do, the weighted traffic splitting configuration takes precedence. The value must be from 0 to 1000.
items[].defaultRouteAction.weightedBackendServices[].headerAction	object Specifies changes to request and response headers that need to take effect for the selected backendService. headerAction specified here take effect before headerAction in the enclosing HttpRouteRule, PathMatcher and UrlMap. headerAction is not supported for load balancers that have their loadBalancingScheme set to EXTERNAL. Not supported when the URL map is bound to a target gRPC proxy that has validateForProxyless field set to true.
items[].defaultRouteAction.weightedBackendServices[].headerAction.requestHeadersToRemove[]	string A list of header names for headers that need to be removed from the request before forwarding the request to the backendService.
items[].defaultRouteAction.weightedBackendServices[].headerAction.requestHeadersToAdd[]	object Headers to add to a matching request before forwarding the request to the backendService.
items[].defaultRouteAction.weightedBackendServices[].headerAction.requestHeadersToAdd[].headerName	string The name of the header.
items[].defaultRouteAction.weightedBackendServices[].headerAction.requestHeadersToAdd[].headerValue	string The value of the header to add.
items[].defaultRouteAction.weightedBackendServices[].headerAction.requestHeadersToAdd[].replace	boolean If false, headerValue is appended to any values that already exist for the header. If true, headerValue is set for the header, discarding any values that were set for that header. The default value is false.
items[].defaultRouteAction.weightedBackendServices[].headerAction.responseHeadersToRemove[]	string A list of header names for headers that need to be removed from the response before sending the response back to the client.
items[].defaultRouteAction.weightedBackendServices[].headerAction.responseHeadersToAdd[]	object Headers to add the response before sending the response back to the client.
items[].defaultRouteAction.weightedBackendServices[].headerAction.responseHeadersToAdd[].headerName	string The name of the header.
items[].defaultRouteAction.weightedBackendServices[].headerAction.responseHeadersToAdd[].headerValue	string The value of the header to add.
items[].defaultRouteAction.weightedBackendServices[].headerAction.responseHeadersToAdd[].replace	boolean If false, headerValue is appended to any values that already exist for the header. If true, headerValue is set for the header, discarding any values that were set for that header. The default value is false.
items[].defaultRouteAction.urlRewrite	object The spec to modify the URL of the request, before forwarding the request to the matched service. urlRewrite is the only action supported in UrlMaps for classic Application Load Balancers. Not supported when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.
items[].defaultRouteAction.urlRewrite.pathPrefixRewrite	string Before forwarding the request to the selected backend service, the matching portion of the request's path is replaced by pathPrefixRewrite. The value must be from 1 to 1024 characters.
items[].defaultRouteAction.urlRewrite.hostRewrite	string Before forwarding the request to the selected service, the request's host header is replaced with contents of hostRewrite. The value must be from 1 to 255 characters.
items[].defaultRouteAction.urlRewrite.pathTemplateRewrite	string If specified, the pattern rewrites the URL path (based on the :path header) using the HTTP template syntax. A corresponding pathTemplateMatch must be specified. Any template variables must exist in the pathTemplateMatch field. -At least one variable must be specified in the pathTemplateMatch field You can omit variables from the rewritten URL The * and ** operators cannot be matched unless they have a corresponding variable name - e.g. {format=*} or {var=**}. For example, a pathTemplateMatch of /static/{format=**} could be rewritten as /static/content/{format} to prefix /content to the URL. Variables can also be re-ordered in a rewrite, so that /{country}/{format}/{suffix=**} can be rewritten as /content/{format}/{country}/{suffix}. At least one non-empty routeRules[].matchRules[].path_template_match is required. Only one of pathPrefixRewrite or pathTemplateRewrite may be specified.
items[].defaultRouteAction.timeout	object Specifies the timeout for the selected route. Timeout is computed from the time the request has been fully processed (known as end-of-stream) up until the response has been processed. Timeout includes all retries. If not specified, this field uses the largest timeout among all backend services associated with the route. Not supported when the URL map is bound to a target gRPC proxy that has validateForProxyless field set to true.
items[].defaultRouteAction.timeout.seconds	string (int64 format) Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive. Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
items[].defaultRouteAction.timeout.nanos	integer Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
items[].defaultRouteAction.retryPolicy	object Specifies the retry policy associated with this route.
items[].defaultRouteAction.retryPolicy.retryConditions[]	string Specifies one or more conditions when this retry policy applies. Valid values are: 5xx: retry is attempted if the instance or endpoint responds with any 5xx response code, or if the instance or endpoint does not respond at all. For example, disconnects, reset, read timeout, connection failure, and refused streams. gateway-error: Similar to 5xx, but only applies to response codes 502, 503 or 504. connect-failure: a retry is attempted on failures connecting to the instance or endpoint. For example, connection timeouts. retriable-4xx: a retry is attempted if the instance or endpoint responds with a 4xx response code. The only error that you can retry is error code 409. refused-stream: a retry is attempted if the instance or endpoint resets the stream with a REFUSED_STREAM error code. This reset type indicates that it is safe to retry. cancelled: a retry is attempted if the gRPC status code in the response header is set to cancelled. deadline-exceeded: a retry is attempted if the gRPC status code in the response header is set to deadline-exceeded. internal: a retry is attempted if the gRPC status code in the response header is set to internal. resource-exhausted: a retry is attempted if the gRPC status code in the response header is set to resource-exhausted. unavailable: a retry is attempted if the gRPC status code in the response header is set to unavailable. Only the following codes are supported when the URL map is bound to target gRPC proxy that has validateForProxyless field set to true. cancelled deadline-exceeded internal resource-exhausted unavailable
items[].defaultRouteAction.retryPolicy.numRetries	integer (uint32 format) Specifies the allowed number retries. This number must be > 0. If not specified, defaults to 1.
items[].defaultRouteAction.retryPolicy.perTryTimeout	object Specifies a non-zero timeout per retry attempt. If not specified, will use the timeout set in the HttpRouteAction field. If timeout in the HttpRouteAction field is not set, this field uses the largest timeout among all backend services associated with the route. Not supported when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.
items[].defaultRouteAction.retryPolicy.perTryTimeout.seconds	string (int64 format) Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive. Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
items[].defaultRouteAction.retryPolicy.perTryTimeout.nanos	integer Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
items[].defaultRouteAction.requestMirrorPolicy	object Specifies the policy on how requests intended for the route's backends are shadowed to a separate mirrored backend service. The load balancer does not wait for responses from the shadow service. Before sending traffic to the shadow service, the host / authority header is suffixed with -shadow. Not supported when the URL map is bound to a target gRPC proxy that has the validateForProxyless field set to true.
items[].defaultRouteAction.requestMirrorPolicy.backendService	string The full or partial URL to the BackendService resource being mirrored to. The backend service configured for a mirroring policy must reference backends that are of the same type as the original backend service matched in the URL map. Serverless NEG backends are not currently supported as a mirrored backend service.
items[].defaultRouteAction.requestMirrorPolicy.mirrorPercent	number The percentage of requests to be mirrored to backendService.
items[].defaultRouteAction.corsPolicy	object The specification for allowing client-side cross-origin requests. For more information about the W3C recommendation for cross-origin resource sharing (CORS), see Fetch API Living Standard. Not supported when the URL map is bound to a target gRPC proxy.
items[].defaultRouteAction.corsPolicy.allowOrigins[]	string Specifies the list of origins that is allowed to do CORS requests. An origin is allowed if it matches either an item in allowOrigins or an item in allowOriginRegexes.
items[].defaultRouteAction.corsPolicy.allowOriginRegexes[]	string Specifies a regular expression that matches allowed origins. For more information, see regular expression syntax . An origin is allowed if it matches either an item in allowOrigins or an item in allowOriginRegexes. Regular expressions can only be used when the loadBalancingScheme is set to INTERNAL_SELF_MANAGED.
items[].defaultRouteAction.corsPolicy.allowMethods[]	string Specifies the content for the Access-Control-Allow-Methods header.
items[].defaultRouteAction.corsPolicy.allowHeaders[]	string Specifies the content for the Access-Control-Allow-Headers header.
items[].defaultRouteAction.corsPolicy.exposeHeaders[]	string Specifies the content for the Access-Control-Expose-Headers header.
items[].defaultRouteAction.corsPolicy.maxAge	integer Specifies how long results of a preflight request can be cached in seconds. This field translates to the Access-Control-Max-Age header.
items[].defaultRouteAction.corsPolicy.allowCredentials	boolean In response to a preflight request, setting this to true indicates that the actual request can include user credentials. This field translates to the Access-Control-Allow-Credentials header. Default is false.
items[].defaultRouteAction.corsPolicy.disabled	boolean If true, disables the CORS policy. The default value is false, which indicates that the CORS policy is in effect.
items[].defaultRouteAction.faultInjectionPolicy	object The specification for fault injection introduced into traffic to test the resiliency of clients to backend service failure. As part of fault injection, when clients send requests to a backend service, delays can be introduced by a load balancer on a percentage of requests before sending those requests to the backend service. Similarly requests from clients can be aborted by the load balancer for a percentage of requests. timeout and retryPolicy is ignored by clients that are configured with a faultInjectionPolicy if: 1. The traffic is generated by fault injection AND 2. The fault injection is not a delay fault injection. Fault injection is not supported with the classic Application Load Balancer . To see which load balancers support fault injection, see Load balancing: Routing and traffic management features.
items[].defaultRouteAction.faultInjectionPolicy.delay	object The specification for how client requests are delayed as part of fault injection, before being sent to a backend service.
items[].defaultRouteAction.faultInjectionPolicy.delay.fixedDelay	object Specifies the value of the fixed delay interval.
items[].defaultRouteAction.faultInjectionPolicy.delay.fixedDelay.seconds	string (int64 format) Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive. Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
items[].defaultRouteAction.faultInjectionPolicy.delay.fixedDelay.nanos	integer Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
items[].defaultRouteAction.faultInjectionPolicy.delay.percentage	number The percentage of traffic for connections, operations, or requests for which a delay is introduced as part of fault injection. The value must be from 0.0 to 100.0 inclusive.
items[].defaultRouteAction.faultInjectionPolicy.abort	object The specification for how client requests are aborted as part of fault injection.
items[].defaultRouteAction.faultInjectionPolicy.abort.httpStatus	integer (uint32 format) The HTTP status code used to abort the request. The value must be from 200 to 599 inclusive. For gRPC protocol, the gRPC status code is mapped to HTTP status code according to this mapping table. HTTP status 200 is mapped to gRPC status UNKNOWN. Injecting an OK status is currently not supported by Traffic Director.
items[].defaultRouteAction.faultInjectionPolicy.abort.percentage	number The percentage of traffic for connections, operations, or requests that is aborted as part of fault injection. The value must be from 0.0 to 100.0 inclusive.
items[].defaultRouteAction.maxStreamDuration	object Specifies the maximum duration (timeout) for streams on the selected route. Unlike the timeout field where the timeout duration starts from the time the request has been fully processed (known as end-of-stream), the duration in this field is computed from the beginning of the stream until the response has been processed, including all retries. A stream that does not complete in this duration is closed. If not specified, this field uses the maximum maxStreamDuration value among all backend services associated with the route. This field is only allowed if the Url map is used with backend services with loadBalancingScheme set to INTERNAL_SELF_MANAGED.
items[].defaultRouteAction.maxStreamDuration.seconds	string (int64 format) Span of time at a resolution of a second. Must be from 0 to 315,576,000,000 inclusive. Note: these bounds are computed from: 60 sec/min * 60 min/hr * 24 hr/day * 365.25 days/year * 10000 years
items[].defaultRouteAction.maxStreamDuration.nanos	integer Span of time that's a fraction of a second at nanosecond resolution. Durations less than one second are represented with a 0 seconds field and a positive nanos field. Must be from 0 to 999,999,999 inclusive.
items[].defaultUrlRedirect	object When none of the specified hostRules match, the request is redirected to a URL specified by defaultUrlRedirect. If defaultUrlRedirect is specified, defaultService or defaultRouteAction must not be set. Not supported when the URL map is bound to a target gRPC proxy.
items[].defaultUrlRedirect.hostRedirect	string The host that is used in the redirect response instead of the one that was supplied in the request. The value must be from 1 to 255 characters.
items[].defaultUrlRedirect.pathRedirect	string The path that is used in the redirect response instead of the one that was supplied in the request. pathRedirect cannot be supplied together with prefixRedirect. Supply one alone or neither. If neither is supplied, the path of the original request is used for the redirect. The value must be from 1 to 1024 characters.
items[].defaultUrlRedirect.prefixRedirect	string The prefix that replaces the prefixMatch specified in the HttpRouteRuleMatch, retaining the remaining portion of the URL before redirecting the request. prefixRedirect cannot be supplied together with pathRedirect. Supply one alone or neither. If neither is supplied, the path of the original request is used for the redirect. The value must be from 1 to 1024 characters.
items[].defaultUrlRedirect.redirectResponseCode	enum The HTTP Status code to use for this RedirectAction. Supported values are: MOVED_PERMANENTLY_DEFAULT, which is the default value and corresponds to 301. FOUND, which corresponds to 302. SEE_OTHER which corresponds to 303. TEMPORARY_REDIRECT, which corresponds to 307. In this case, the request method is retained. PERMANENT_REDIRECT, which corresponds to 308. In this case, the request method is retained.
items[].defaultUrlRedirect.httpsRedirect	boolean If set to true, the URL scheme in the redirected request is set to HTTPS. If set to false, the URL scheme of the redirected request remains the same as that of the request. This must only be set for URL maps used in TargetHttpProxys. Setting this true for TargetHttpsProxy is not permitted. The default is set to false.
items[].defaultUrlRedirect.stripQuery	boolean If set to true, any accompanying query portion of the original URL is removed before redirecting the request. If set to false, the query portion of the original URL is retained. The default is set to false.
items[].headerAction	object Specifies changes to request and response headers that need to take effect for the selected backendService. The headerAction specified here take effect after headerAction specified under pathMatcher. headerAction is not supported for load balancers that have their loadBalancingScheme set to EXTERNAL. Not supported when the URL map is bound to a target gRPC proxy that has validateForProxyless field set to true.
items[].headerAction.requestHeadersToRemove[]	string A list of header names for headers that need to be removed from the request before forwarding the request to the backendService.
items[].headerAction.requestHeadersToAdd[]	object Headers to add to a matching request before forwarding the request to the backendService.
items[].headerAction.requestHeadersToAdd[].headerName	string The name of the header.
items[].headerAction.requestHeadersToAdd[].headerValue	string The value of the header to add.
items[].headerAction.requestHeadersToAdd[].replace	boolean If false, headerValue is appended to any values that already exist for the header. If true, headerValue is set for the header, discarding any values that were set for that header. The default value is false.
items[].headerAction.responseHeadersToRemove[]	string A list of header names for headers that need to be removed from the response before sending the response back to the client.
items[].headerAction.responseHeadersToAdd[]	object Headers to add the response before sending the response back to the client.
items[].headerAction.responseHeadersToAdd[].headerName	string The name of the header.
items[].headerAction.responseHeadersToAdd[].headerValue	string The value of the header to add.
items[].headerAction.responseHeadersToAdd[].replace	boolean If false, headerValue is appended to any values that already exist for the header. If true, headerValue is set for the header, discarding any values that were set for that header. The default value is false.
items[].defaultCustomErrorResponsePolicy	object defaultCustomErrorResponsePolicy specifies how the Load Balancer returns error responses when BackendServiceor BackendBucket responds with an error. This policy takes effect at the load balancer level and applies only when no policy has been defined for the error code at lower levels like PathMatcher, RouteRule and PathRule within this UrlMap. For example, consider a UrlMap with the following configuration: defaultCustomErrorResponsePolicy containing policies for responding to 5xx and 4xx errors A PathMatcher configured for *.example.com has defaultCustomErrorResponsePolicy for 4xx. If a request for http://www.example.com/ encounters a 404, the policy in pathMatcher.defaultCustomErrorResponsePolicy will be enforced. When the request for http://www.example.com/ encounters a 502, the policy in UrlMap.defaultCustomErrorResponsePolicy will be enforced. When a request that does not match any host in *.example.com such as http://www.myotherexample.com/, encounters a 404, UrlMap.defaultCustomErrorResponsePolicy takes effect. When used in conjunction with defaultRouteAction.retryPolicy, retries take precedence. Only once all retries are exhausted, the defaultCustomErrorResponsePolicy is applied. While attempting a retry, if load balancer is successful in reaching the service, the defaultCustomErrorResponsePolicy is ignored and the response from the service is returned to the client. defaultCustomErrorResponsePolicy is supported only for global external Application Load Balancers.
items[].defaultCustomErrorResponsePolicy.errorResponseRules[]	object Specifies rules for returning error responses. In a given policy, if you specify rules for both a range of error codes as well as rules for specific error codes then rules with specific error codes have a higher priority. For example, assume that you configure a rule for 401 (Un-authorized) code, and another for all 4 series error codes (4XX). If the backend service returns a 401, then the rule for 401 will be applied. However if the backend service returns a 403, the rule for 4xx takes effect.
items[].defaultCustomErrorResponsePolicy.errorResponseRules[].matchResponseCodes[]	string Valid values include: A number between 400 and 599: For example 401 or 503, in which case the load balancer applies the policy if the error code exactly matches this value. 5xx: Load Balancer will apply the policy if the backend service responds with any response code in the range of 500 to 599. 4xx: Load Balancer will apply the policy if the backend service responds with any response code in the range of 400 to 499. Values must be unique within matchResponseCodes and across all errorResponseRules of CustomErrorResponsePolicy.
items[].defaultCustomErrorResponsePolicy.errorResponseRules[].path	string The full path to a file within backendBucket . For example: /errors/defaultError.html path must start with a leading slash. path cannot have trailing slashes. If the file is not available in backendBucket or the load balancer cannot reach the BackendBucket, a simple Not Found Error is returned to the client. The value must be from 1 to 1024 characters
items[].defaultCustomErrorResponsePolicy.errorResponseRules[].overrideResponseCode	integer The HTTP status code returned with the response containing the custom error content. If overrideResponseCode is not supplied, the same response code returned by the original backend bucket or backend service is returned to the client.
items[].defaultCustomErrorResponsePolicy.errorService	string The full or partial URL to the BackendBucket resource that contains the custom error content. Examples are: https://www.googleapis.com/compute/v1/projects/project/global/backendBuckets/myBackendBucket compute/v1/projects/project/global/backendBuckets/myBackendBucket global/backendBuckets/myBackendBucket If errorService is not specified at lower levels like pathMatcher, pathRule and routeRule, an errorService specified at a higher level in the UrlMap will be used. If UrlMap.defaultCustomErrorResponsePolicy contains one or more errorResponseRules[], it must specify errorService. If load balancer cannot reach the backendBucket, a simple Not Found Error will be returned, with the original response code (or overrideResponseCode if configured). errorService is not supported for internal or regional HTTP/HTTPS load balancers.
items[].fingerprint	string (bytes format) Fingerprint of this resource. A hash of the contents stored in this object. This field is used in optimistic locking. This field is ignored when inserting a UrlMap. An up-to-date fingerprint must be provided in order to update the UrlMap, otherwise the request will fail with error 412 conditionNotMet. To see the latest fingerprint, make a get() request to retrieve a UrlMap. A base64-encoded string.
items[].region	string [Output Only] URL of the region where the regional URL map resides. This field is not applicable to global URL maps. You must specify this field as part of the HTTP request URL. It is not settable as a field in the request body.
nextPageToken	string [Output Only] This token allows you to get the next page of results for list requests. If the number of results is larger than maxResults, use the nextPageToken as a value for the query parameter pageToken in the next list request. Subsequent list requests will have their own nextPageToken to continue paging through the results.
selfLink	string [Output Only] Server-defined URL for this resource.
warning	object [Output Only] Informational warning message.
warning.code	enum [Output Only] A warning code, if applicable. For example, Compute Engine returns NO_RESULTS_ON_PAGE if there are no results in the response.
warning.message	string [Output Only] A human-readable description of the warning code.
warning.data[]	object [Output Only] Metadata about this warning in key: value format. For example: "data": [ { "key": "scope", "value": "zones/us-east1-d" }
warning.data[].key	string [Output Only] A key that provides more detail on the warning being returned. For example, for warnings where there are no results in a list request for a particular zone, this key might be scope and the key value might be the zone name. Other examples might be a key indicating a deprecated resource and a suggested replacement, or a warning about invalid network settings (for example, if an instance attempts to perform IP forwarding but is not enabled for IP forwarding).
warning.data[].value	string [Output Only] A warning data value corresponding to the key.

Authorization scopes

Requires one of the following OAuth scopes:

• https://www.googleapis.com/auth/compute.readonly
• https://www.googleapis.com/auth/compute
• https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

IAM Permissions

In addition to any permissions specified on the fields above, authorization requires one or more of the following IAM permissions:

• compute.urlMaps.list

To find predefined roles that contain those permissions, see Compute Engine IAM Roles.