Gcp/networkservices

@swamp/gcp/networkservicesv2026.08.22.1· 1d agoMODELS

01README

Google Cloud networkservices infrastructure models

02Release Notes

Updated: extensionbindings, producerextensions

03Models24

@swamp/gcp/networkservices/agentconnectivitytemplatesv2026.08.16.1agentconnectivitytemplates.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
accessPath?	enum	no	Required. Immutable. The path of the access. Maps roughly to ingress/egress, though we keep CLIENT_TO_AGENT and AGENT_TO_ANYWHERE as carryovers from Agent Gateway's original resource model. The path is immutable once set. Exactly one path can be set.
accessTypes?	array	no	Optional. The types of network access provided to the gateway. Both PUBLIC and PRIVATE can be configured.
agentCompute?	enum	no	Optional. The compute environment where the agent is hosted. Exactly one type of compute must be chosen.
deploymentModel?	enum	no	Required. The deployment model for the gateway.
description?	string	no	Optional. A free-text description of the resource. Max length 1024 characters.
egressNetworkConfig?	object	no	Optional. Configuration for egress network traffic.
labels?	record	no	Optional. Set of label tags associated with the AgentConnectivityTemplate resource.
name?	string	no	Identifier. Name of the AgentConnectivityTemplate resource. It matches pattern `projects//locations//agentConnectivityTemplates/`.
agentConnectivityTemplateId?	string	no	Required. Short name of the AgentConnectivityTemplate resource to be created.
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a agentConnectivityTemplates

fn get(identifier: string)

Get a agentConnectivityTemplates

Argument	Type	Required	Description
identifier	string	yes	The name of the agentConnectivityTemplates

fn update(identifier?: string)

Update agentConnectivityTemplates attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific agentConnectivityTemplates by name (e.g. one discovered by list)

fn delete(identifier: string)

Delete the agentConnectivityTemplates

Argument	Type	Required	Description
identifier	string	yes	The name of the agentConnectivityTemplates

fn sync(identifier?: string)

Sync agentConnectivityTemplates state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific agentConnectivityTemplates by name (e.g. one discovered by list)

fn list(pageSize?: number, returnPartialSuccess?: boolean, maxPages?: number)

List agentConnectivityTemplates resources

Argument	Type	Required	Description
pageSize?	number	no	Optional. Maximum number of AgentConnectivityTemplates to return per call.
returnPartialSuccess?	boolean	no	Optional. If true, allow partial responses for multi-regional Aggregated List requests. Otherwise if one of the locations is down or unreachable, the Aggregated List request will fail.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— AgentConnectivityTemplate represents a reusable network configuration.

@swamp/gcp/networkservices/agentgatewaysv2026.08.12.2agentgateways.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
agentConnectivityTemplate?	string	no	Optional. The resource name of the AgentConnectivityTemplate. Format: projects/{project}/locations/{location}/agentConnectivityTemplates/{template}
description?	string	no	Optional. A free-text description of the resource. Max length 1024 characters.
googleManaged?	object	no	Optional. Proxy is orchestrated and managed by GoogleCloud in a tenant project.
labels?	record	no	Optional. Set of label tags associated with the AgentGateway resource.
name?	string	no	Identifier. Name of the AgentGateway resource. It matches pattern `projects//locations//agentGateways/`.
networkConfig?	object	no	Optional. Network configuration for the AgentGateway.
registries?	array	no	Optional. A list of Agent registries containing the agents, MCP servers and tools governed by the Agent Gateway. Note: Currently limited to project-scoped registries Must be of format `//agentregistry.googleapis.com/projects/{project}/locations/{location}/`
selfManaged?	object	no	Optional. Attach to existing Application Load Balancers or Secure Web Proxies.
agentGatewayId?	string	no	Required. Short name of the AgentGateway resource to be created.
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a agentGateways

fn get(identifier: string)

Get a agentGateways

Argument	Type	Required	Description
identifier	string	yes	The name of the agentGateways

fn update(identifier?: string)

Update agentGateways attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific agentGateways by name (e.g. one discovered by list)

fn delete(identifier: string)

Delete the agentGateways

Argument	Type	Required	Description
identifier	string	yes	The name of the agentGateways

fn sync(identifier?: string)

Sync agentGateways state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific agentGateways by name (e.g. one discovered by list)

fn list(pageSize?: number, returnPartialSuccess?: boolean, maxPages?: number)

List agentGateways resources

Argument	Type	Required	Description
pageSize?	number	no	Optional. Maximum number of AgentGateways to return per call.
returnPartialSuccess?	boolean	no	Optional. If true, allow partial responses for multi-regional Aggregated List requests. Otherwise if one of the locations is down or unreachable, the Aggregated List request will fail.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— AgentGateway represents the agent gateway resource.

@swamp/gcp/networkservices/authzextensionsv2026.08.12.2authzextensions.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
authority?	string	no	Optional. The `:authority` header in the gRPC request sent from Envoy to the extension service. It is required when the `service` field points to a backend service.
description?	string	no	Optional. A human-readable description of the resource.
failOpen?	boolean	no	Optional. Determines how the proxy behaves if the call to the extension fails or times out. When set to `TRUE`, request or response processing continues without error. Any subsequent extensions in the extension chain are also executed. When set to `FALSE` or the default setting of `FALSE` is used, one of the following happens: * If response headers have not been delivered to the downstream client, a generic 500 error is returned to the client. The error response can be tailored by configuring a
forwardAttributes?	array	no	Optional. List of the Envoy attributes to forward to the extension server. The attributes provided here are included as part of the `ProcessingRequest.attributes` field (of type `map`), where the keys are the attribute names. Refer to the [documentation](https://cloud.google.com/service-extensions/docs/cel-matcher-language-reference#attributes) for the names of attributes that can be forwarded. If omitted, no attributes are sent. Each element is a string indicating the attribute name.
forwardHeaders?	array	no	Optional. List of the HTTP headers to forward to the extension (from the client). If omitted, all headers are sent. Each element is a string indicating the header name.
labels?	record	no	Optional. Set of labels associated with the `AuthzExtension` resource. The format must comply with [the requirements for labels](/compute/docs/labeling-resources#requirements) for Google Cloud resources.
loadBalancingScheme?	enum	no	Optional. All backend services and forwarding rules referenced by this extension must share the same load balancing scheme. The supported values are `INTERNAL_MANAGED` and `EXTERNAL_MANAGED`. You can omit this field for `AuthzExtensions` resources that don't reference a backend service. For more information, see [Backend services overview](https://cloud.google.com/load-balancing/docs/backend-service).
metadata?	record	no	Optional. The metadata provided here is included as part of the `metadata_context` (of type `google.protobuf.Struct`) in the `ProcessingRequest` message sent to the extension server. The metadata is available under the namespace `com.google.authz_extension.`. The following variables are supported in the metadata Struct: `{forwarding_rule_id}` - substituted with the forwarding rule's fully qualified resource name.
name?	string	no	Required. Identifier. Name of the `AuthzExtension` resource in the following format: `projects/{project}/locations/{location}/authzExtensions/{authz_extension}`.
service?	string	no	Required. The reference to the service that runs the extension. To configure a callout extension: For global AuthzExtension, `service` must be a fully-qualified reference to a [backend service](https://cloud.google.com/compute/docs/reference/rest/v1/backendServices) in the format: `https://www.googleapis.com/compute/v1/projects/{project}/global/backendServices/{backendService}`. For regional AuthzExtension, `service` must be a fully-qualified reference to one of the following: * a [backend servi
timeout?	string	no	Required. Specifies the timeout for each individual message on the stream. The timeout must be between 10-10000 milliseconds.
wireFormat?	enum	no	Optional. The format of communication supported by the callout extension. This field is supported only for regional `AuthzExtension` resources. If not specified, the default value `EXT_PROC_GRPC` is used. Global `AuthzExtension` resources use the `EXT_PROC_GRPC` wire format.
authzExtensionId?	string	no	Required. User-provided ID of the `AuthzExtension` resource to be created.
requestId?	string	no	Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server can ignore the request if it has already been completed. The server guarantees that for 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server ignores the second request This prevents clients from accidentally creating dupl
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a authzExtensions

fn get(identifier: string)

Get a authzExtensions

Argument	Type	Required	Description
identifier	string	yes	The name of the authzExtensions

fn update(identifier?: string)

Update authzExtensions attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific authzExtensions by name (e.g. one discovered by list)

fn delete(identifier: string)

Delete the authzExtensions

Argument	Type	Required	Description
identifier	string	yes	The name of the authzExtensions

fn sync(identifier?: string)

Sync authzExtensions state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific authzExtensions by name (e.g. one discovered by list)

fn list(filter?: string, orderBy?: string, pageSize?: number, maxPages?: number)

List authzExtensions resources

Argument	Type	Required	Description
filter?	string	no	Optional. Filtering results.
orderBy?	string	no	Optional. Hint about how to order the results.
pageSize?	number	no	Optional. Requested page size. The server might return fewer items than requested. If unspecified, the server picks an appropriate default.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— `AuthzExtension` is a resource that allows traffic forwarding to a callout ba...

@swamp/gcp/networkservices/endpointpoliciesv2026.08.12.2endpointpolicies.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
authorizationPolicy?	string	no	Optional. This field specifies the URL of AuthorizationPolicy resource that applies authorization policies to the inbound traffic at the matched endpoints. Refer to Authorization. If this field is not specified, authorization is disabled(no authz checks) for this endpoint.
description?	string	no	Optional. A free-text description of the resource. Max length 1024 characters.
endpointMatcher?	object	no	Required. A matcher that selects endpoints to which the policies should be applied.
labels?	record	no	Optional. Set of label tags associated with the EndpointPolicy resource.
name?	string	no	Identifier. Name of the EndpointPolicy resource. It matches pattern `projects/{project}/locations/*/endpointPolicies/{endpoint_policy}`.
serverTlsPolicy?	string	no	Optional. A URL referring to ServerTlsPolicy resource. ServerTlsPolicy is used to determine the authentication policy to be applied to terminate the inbound traffic at the identified backends. If this field is not set, authentication is disabled(open) for this endpoint.
trafficPortSelector?	object	no	Optional. Port selector for the (matched) endpoints. If no port selector is provided, the matched config is applied to all ports.
type?	enum	no	Required. The type of endpoint policy. This is primarily used to validate the configuration.
endpointPolicyId?	string	no	Required. Short name of the EndpointPolicy resource to be created. E.g. "CustomECS".
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a endpointPolicies

fn get(identifier: string)

Get a endpointPolicies

Argument	Type	Required	Description
identifier	string	yes	The name of the endpointPolicies

fn update(identifier?: string)

Update endpointPolicies attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific endpointPolicies by name (e.g. one discovered by list)

fn delete(identifier: string)

Delete the endpointPolicies

Argument	Type	Required	Description
identifier	string	yes	The name of the endpointPolicies

fn sync(identifier?: string)

Sync endpointPolicies state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific endpointPolicies by name (e.g. one discovered by list)

fn list(pageSize?: number, returnPartialSuccess?: boolean, maxPages?: number)

List endpointPolicies resources

Argument	Type	Required	Description
pageSize?	number	no	Maximum number of EndpointPolicies to return per call.
returnPartialSuccess?	boolean	no	Optional. If true, allow partial responses for multi-regional Aggregated List requests. Otherwise if one of the locations is down or unreachable, the Aggregated List request will fail.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— EndpointPolicy is a resource that helps apply desired configuration on the en...

@swamp/gcp/networkservices/extensionbindingsv2026.08.22.1extensionbindings.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
description?	string	no	Optional. A human-readable description of the resource.
failOpen?	boolean	no	Optional. Determines the behavior of the extension binding when the call to the extension fails or times out. Default value is `FALSE`. When set to `TRUE`, failures of the extension are silently ignored.
labels?	record	no	Optional. Set of labels associated with the `ExtensionBinding` resource. The format must comply with [the following requirements](https://cloud.google.com/compute/docs/labeling-resources#requirements).
matchConditions?	array	no	Optional. A list of match conditions to match against the incoming request. The extension will be invoked if at least one condition matches the request, or if no match conditions are specified. Limited to 5 conditions.
name?	string	no	Identifier. Name of the `ExtensionBinding` resource in the following format: `projects/{project}/locations/{location}/extensionBindings/{extension_binding}`.
priority?	number	no	Optional. Priority of the extension binding. Lower numbers indicate higher priority. Priority of extension bindings are used to determine the order in which extension bindings are applied to a request.
producerExtension?	string	no	Required. The name of the extension that this binding should attach to target resources. Format: For Google-provided extensions, specify the service endpoint (see [Model Armor integration](https://docs.cloud.google.com/model-armor/integrations))
producerMetadata?	record	no	Optional. Additional metadata that should be passed to the attached extension with each request.
target?	object	no	Required. Specifies a target to which this `ExtensionBinding` should be attached. The target can be either a single resource or a scope of resources.
extensionBindingId?	string	no	Required. Short name of the `ExtensionBinding` resource to be created.
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a extensionBindings

fn get(identifier: string)

Get a extensionBindings

Argument	Type	Required	Description
identifier	string	yes	The name of the extensionBindings

fn update(identifier?: string)

Update extensionBindings attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific extensionBindings by name (e.g. one discovered by list)

fn delete(identifier: string)

Delete the extensionBindings

Argument	Type	Required	Description
identifier	string	yes	The name of the extensionBindings

fn sync(identifier?: string)

Sync extensionBindings state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific extensionBindings by name (e.g. one discovered by list)

fn list(pageSize?: number, maxPages?: number)

List extensionBindings resources

Argument	Type	Required	Description
pageSize?	number	no	Optional. Maximum number of `ExtensionBinding` resources to return per call.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— `ExtensionBinding` is a resource representing the attachment of an extension ...

@swamp/gcp/networkservices/gatewaysv2026.08.12.2gateways.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
addresses?	array	no	Optional. Zero or one IPv4 or IPv6 address on which the Gateway will receive the traffic. When no address is provided, an IP from the subnetwork is allocated This field only applies to gateways of type 'SECURE_WEB_GATEWAY'. Gateways of type 'OPEN_MESH' listen on 0.0.0.0 for IPv4 and:: for IPv6.
allPorts?	boolean	no	Optional. If true, the Gateway will listen on all ports. This is mutually exclusive with the `ports` field. This field only applies to gateways of type 'SECURE_WEB_GATEWAY'.
allowGlobalAccess?	boolean	no	Optional. If true, the gateway will allow traffic from clients outside of the region where the gateway is located. This field is configurable only for gateways of type SECURE_WEB_GATEWAY.
certificateUrls?	array	no	Optional. A fully-qualified Certificates URL reference. The proxy presents a Certificate (selected based on SNI) when establishing a TLS connection. This feature only applies to gateways of type 'SECURE_WEB_GATEWAY'.
description?	string	no	Optional. A free-text description of the resource. Max length 1024 characters.
envoyHeaders?	enum	no	Optional. Determines if envoy will insert internal debug headers into upstream requests. Other Envoy headers may still be injected. By default, envoy will not insert any debug headers.
gatewaySecurityPolicy?	string	no	Optional. A fully-qualified GatewaySecurityPolicy URL reference. Defines how a server should apply security policy to inbound (VM to Proxy) initiated connections. For example: `projects//locations//gatewaySecurityPolicies/swg-policy`. This policy is specific to gateways of type 'SECURE_WEB_GATEWAY'.
ipVersion?	enum	no	Optional. The IP Version that will be used by this gateway. Valid options are IPV4 or IPV6. Default is IPV4.
labels?	record	no	Optional. Set of label tags associated with the Gateway resource.
name?	string	no	Identifier. Name of the Gateway resource. It matches pattern `projects//locations//gateways/`.
network?	string	no	Optional. The relative resource name identifying the VPC network that is using this configuration. For example: `projects/*/global/networks/network-1`. Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY'.
ports?	array	no	Required. One or more port numbers (1-65535), on which the Gateway will receive traffic. The proxy binds to the specified ports. Gateways of type 'SECURE_WEB_GATEWAY' are limited to 5 ports. Gateways of type 'OPEN_MESH' listen on 0.0.0.0 for IPv4 and:: for IPv6 and support multiple ports.
routingMode?	enum	no	Optional. The routing mode of the Gateway. This field is configurable only for gateways of type SECURE_WEB_GATEWAY. This field is required for gateways of type SECURE_WEB_GATEWAY.
scope?	string	no	Optional. Scope determines how configuration across multiple Gateway instances are merged. The configuration for multiple Gateway instances with the same scope will be merged as presented as a single configuration to the proxy/load balancer. Max length 64 characters. Scope should start with a letter and can only have letters, numbers, hyphens.
serverTlsPolicy?	string	no	Optional. A fully-qualified ServerTLSPolicy URL reference. Specifies how TLS traffic is terminated. If empty, TLS termination is disabled.
subnetwork?	string	no	Optional. The relative resource name identifying the subnetwork in which this SWG is allocated. For example: `projects/*/regions/us-central1/subnetworks/network-1` Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY\
type?	enum	no	Immutable. The type of the customer managed gateway. This field is required. If unspecified, an error is returned.
gatewayId?	string	no	Required. Short name of the Gateway resource to be created.
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a gateways

fn get(identifier: string)

Get a gateways

Argument	Type	Required	Description
identifier	string	yes	The name of the gateways

fn update(identifier?: string)

Update gateways attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific gateways by name (e.g. one discovered by list)

fn delete(identifier: string)

Delete the gateways

Argument	Type	Required	Description
identifier	string	yes	The name of the gateways

fn sync(identifier?: string)

Sync gateways state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific gateways by name (e.g. one discovered by list)

fn list(pageSize?: number, maxPages?: number)

List gateways resources

Argument	Type	Required	Description
pageSize?	number	no	Maximum number of Gateways to return per call.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— Gateway represents the configuration for a proxy, typically a load balancer. ...

@swamp/gcp/networkservices/gateways-routeviewsv2026.08.12.2gateways_routeviews.ts

Global Arguments

Argument	Type	Required	Description
name	string	yes	Instance name for this resource (used as the unique identifier in the factory pattern)
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
parent?	string	no	The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn get(identifier: string)

Get a routeViews

Argument	Type	Required	Description
identifier	string	yes	The name of the routeViews

fn sync(identifier?: string)

Sync routeViews state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific routeViews by name (e.g. one discovered by list)

fn list(pageSize?: number, maxPages?: number)

List routeViews resources

Argument	Type	Required	Description
pageSize?	number	no	Maximum number of GatewayRouteViews to return per call.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— GatewayRouteView defines view-only resource for Routes to a Gateway

@swamp/gcp/networkservices/grpcroutesv2026.08.12.2grpcroutes.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
description?	string	no	Optional. A free-text description of the resource. Max length 1024 characters.
gateways?	array	no	Optional. Gateways defines a list of gateways this GrpcRoute is attached to, as one of the routing rules to route the requests served by the gateway. Each gateway reference should match the pattern: `projects//locations//gateways/`
hostnames?	array	no	Required. Service hostnames with an optional port for which this route describes traffic. Format: [:] Hostname is the fully qualified domain name of a network host. This matches the RFC 1123 definition of a hostname with 2 notable exceptions: - IPs are not allowed. - A hostname may be prefixed with a wildcard label (`*.`). The wildcard label must appear by itself as the first label. Hostname can be "precise" which is a domain name without the terminating dot of a network host (e.g. `foo.example.
labels?	record	no	Optional. Set of label tags associated with the GrpcRoute resource.
meshes?	array	no	Optional. Meshes defines a list of meshes this GrpcRoute is attached to, as one of the routing rules to route the requests served by the mesh. Each mesh reference should match the pattern: `projects//locations//meshes/`
name?	string	no	Identifier. Name of the GrpcRoute resource. It matches pattern `projects//locations//grpcRoutes/`
rules?	array	no	Required. A list of detailed rules defining how to route traffic. Within a single GrpcRoute, the GrpcRoute.RouteAction associated with the first matching GrpcRoute.RouteRule will be executed. At least one rule must be supplied.
grpcRouteId?	string	no	Required. Short name of the GrpcRoute resource to be created.
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a grpcRoutes

fn get(identifier: string)

Get a grpcRoutes

Argument	Type	Required	Description
identifier	string	yes	The name of the grpcRoutes

fn update(identifier?: string)

Update grpcRoutes attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific grpcRoutes by name (e.g. one discovered by list)

fn delete(identifier: string)

Delete the grpcRoutes

Argument	Type	Required	Description
identifier	string	yes	The name of the grpcRoutes

fn sync(identifier?: string)

Sync grpcRoutes state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific grpcRoutes by name (e.g. one discovered by list)

fn list(pageSize?: number, returnPartialSuccess?: boolean, maxPages?: number)

List grpcRoutes resources

Argument	Type	Required	Description
pageSize?	number	no	Maximum number of GrpcRoutes to return per call.
returnPartialSuccess?	boolean	no	Optional. If true, allow partial responses for multi-regional Aggregated List requests. Otherwise if one of the locations is down or unreachable, the Aggregated List request will fail.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— GrpcRoute is the resource defining how gRPC traffic routed by a Mesh or Gatew...

@swamp/gcp/networkservices/httproutesv2026.08.12.2httproutes.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
description?	string	no	Optional. A free-text description of the resource. Max length 1024 characters.
gateways?	array	no	Optional. Gateways defines a list of gateways this HttpRoute is attached to, as one of the routing rules to route the requests served by the gateway. Each gateway reference should match the pattern: `projects//locations//gateways/`
hostnames?	array	no	Required. Hostnames define a set of hosts that should match against the HTTP host header to select a HttpRoute to process the request. Hostname is the fully qualified domain name of a network host, as defined by RFC 1123 with the exception that: - IPs are not allowed. - A hostname may be prefixed with a wildcard label (`*.`). The wildcard label must appear by itself as the first label. Hostname can be "precise" which is a domain name without the terminating dot of a network host (e.g. `foo.examp
labels?	record	no	Optional. Set of label tags associated with the HttpRoute resource.
meshes?	array	no	Optional. Meshes defines a list of meshes this HttpRoute is attached to, as one of the routing rules to route the requests served by the mesh. Each mesh reference should match the pattern: `projects//locations//meshes/` The attached Mesh should be of a type SIDECAR
name?	string	no	Identifier. Name of the HttpRoute resource. It matches pattern `projects//locations//httpRoutes/http_route_name>`.
rules?	array	no	Required. Rules that define how traffic is routed and handled. Rules will be matched sequentially based on the RouteMatch specified for the rule.
httpRouteId?	string	no	Required. Short name of the HttpRoute resource to be created.
requestId?	string	no	Optional. Idempotent request UUID.
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a httpRoutes

fn get(identifier: string)

Get a httpRoutes

Argument	Type	Required	Description
identifier	string	yes	The name of the httpRoutes

fn update(identifier?: string)

Update httpRoutes attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific httpRoutes by name (e.g. one discovered by list)

fn delete(identifier: string)

Delete the httpRoutes

Argument	Type	Required	Description
identifier	string	yes	The name of the httpRoutes

fn sync(identifier?: string)

Sync httpRoutes state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific httpRoutes by name (e.g. one discovered by list)

fn list(filter?: string, pageSize?: number, returnPartialSuccess?: boolean, maxPages?: number)

List httpRoutes resources

Argument	Type	Required	Description
filter?	string	no	Optional. Filter expression to restrict the list.
pageSize?	number	no	Maximum number of HttpRoutes to return per call.
returnPartialSuccess?	boolean	no	Optional. If true, allow partial responses for multi-regional Aggregated List requests. Otherwise if one of the locations is down or unreachable, the Aggregated List request will fail.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— HttpRoute is the resource defining how HTTP traffic should be routed by a Mes...

@swamp/gcp/networkservices/lbedgeextensionsv2026.08.12.2lbedgeextensions.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
description?	string	no	Optional. A human-readable description of the resource.
extensionChains?	array	no	Required. A set of ordered extension chains that contain the match conditions and extensions to execute. Match conditions for each extension chain are evaluated in sequence for a given request. The first extension chain that has a condition that matches the request is executed. Any subsequent extension chains do not execute. Limited to 5 extension chains per resource.
forwardingRules?	array	no	Required. A list of references to the forwarding rules to which this service extension is attached. At least one forwarding rule is required. Only one `LbEdgeExtension` resource can be associated with a forwarding rule.
labels?	record	no	Optional. Set of labels associated with the `LbEdgeExtension` resource. The format must comply with [the requirements for labels](https://cloud.google.com/compute/docs/labeling-resources#requirements) for Google Cloud resources.
loadBalancingScheme?	enum	no	Required. All forwarding rules referenced by this extension must share the same load balancing scheme. Supported values: `EXTERNAL_MANAGED`.
name?	string	no	Required. Identifier. Name of the `LbEdgeExtension` resource in the following format: `projects/{project}/locations/{location}/lbEdgeExtensions/{lb_edge_extension}`.
lbEdgeExtensionId?	string	no	Required. User-provided ID of the `LbEdgeExtension` resource to be created.
requestId?	string	no	Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server can ignore the request if it has already been completed. The server guarantees that for 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server ignores the second request This prevents clients from accidentally creating dupl
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a lbEdgeExtensions

fn get(identifier: string)

Get a lbEdgeExtensions

Argument	Type	Required	Description
identifier	string	yes	The name of the lbEdgeExtensions

fn update(identifier?: string)

Update lbEdgeExtensions attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific lbEdgeExtensions by name (e.g. one discovered by list)

fn delete(identifier: string)

Delete the lbEdgeExtensions

Argument	Type	Required	Description
identifier	string	yes	The name of the lbEdgeExtensions

fn sync(identifier?: string)

Sync lbEdgeExtensions state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific lbEdgeExtensions by name (e.g. one discovered by list)

fn list(filter?: string, orderBy?: string, pageSize?: number, maxPages?: number)

List lbEdgeExtensions resources

Argument	Type	Required	Description
filter?	string	no	Optional. Filtering results.
orderBy?	string	no	Optional. Hint about how to order the results.
pageSize?	number	no	Optional. Requested page size. The server might return fewer items than requested. If unspecified, the server picks an appropriate default.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— `LbEdgeExtension` is a resource that lets the extension service influence the...

@swamp/gcp/networkservices/lbrouteextensionsv2026.08.12.2lbrouteextensions.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
description?	string	no	Optional. A human-readable description of the resource.
extensionChains?	array	no	Required. A set of ordered extension chains that contain the match conditions and extensions to execute. Match conditions for each extension chain are evaluated in sequence for a given request. The first extension chain that has a condition that matches the request is executed. Any subsequent extension chains do not execute. Limited to 5 extension chains per resource.
forwardingRules?	array	no	Required. A list of references to the forwarding rules to which this service extension is attached. At least one forwarding rule is required. Only one `LbRouteExtension` resource can be associated with a forwarding rule.
labels?	record	no	Optional. Set of labels associated with the `LbRouteExtension` resource. The format must comply with [the requirements for labels](https://cloud.google.com/compute/docs/labeling-resources#requirements) for Google Cloud resources.
loadBalancingScheme?	enum	no	Required. All backend services and forwarding rules referenced by this extension must share the same load balancing scheme. Supported values: `INTERNAL_MANAGED`, `EXTERNAL_MANAGED`. For more information, refer to [Backend services overview](https://cloud.google.com/load-balancing/docs/backend-service).
metadata?	record	no	Optional. The metadata provided here is included as part of the `metadata_context` (of type `google.protobuf.Struct`) in the `ProcessingRequest` message sent to the extension server. The metadata applies to all extensions in all extensions chains in this resource. The metadata is available under the key `com.google.lb_route_extension.`. The following variables are supported in the metadata: `{forwarding_rule_id}` - substituted with the forwarding rule's fully qualified resource name. This field
name?	string	no	Required. Identifier. Name of the `LbRouteExtension` resource in the following format: `projects/{project}/locations/{location}/lbRouteExtensions/{lb_route_extension}`.
lbRouteExtensionId?	string	no	Required. User-provided ID of the `LbRouteExtension` resource to be created.
requestId?	string	no	Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server can ignore the request if it has already been completed. The server guarantees that for 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server ignores the second request This prevents clients from accidentally creating dupl
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a lbRouteExtensions

fn get(identifier: string)

Get a lbRouteExtensions

Argument	Type	Required	Description
identifier	string	yes	The name of the lbRouteExtensions

fn update(identifier?: string)

Update lbRouteExtensions attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific lbRouteExtensions by name (e.g. one discovered by list)

fn delete(identifier: string)

Delete the lbRouteExtensions

Argument	Type	Required	Description
identifier	string	yes	The name of the lbRouteExtensions

fn sync(identifier?: string)

Sync lbRouteExtensions state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific lbRouteExtensions by name (e.g. one discovered by list)

fn list(filter?: string, orderBy?: string, pageSize?: number, maxPages?: number)

List lbRouteExtensions resources

Argument	Type	Required	Description
filter?	string	no	Optional. Filtering results.
orderBy?	string	no	Optional. Hint about how to order the results.
pageSize?	number	no	Optional. Requested page size. The server might return fewer items than requested. If unspecified, the server picks an appropriate default.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— `LbRouteExtension` is a resource that lets you control where traffic is route...

@swamp/gcp/networkservices/lbtrafficextensionsv2026.08.12.2lbtrafficextensions.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
description?	string	no	Optional. A human-readable description of the resource.
extensionChains?	array	no	Required. A set of ordered extension chains that contain the match conditions and extensions to execute. Match conditions for each extension chain are evaluated in sequence for a given request. The first extension chain that has a condition that matches the request is executed. Any subsequent extension chains do not execute. Limited to 5 extension chains per resource.
forwardingRules?	array	no	Optional. A list of references to the forwarding rules to which this service extension is attached. At least one forwarding rule is required. Only one `LbTrafficExtension` resource can be associated with a forwarding rule.
labels?	record	no	Optional. Set of labels associated with the `LbTrafficExtension` resource. The format must comply with [the requirements for labels](https://cloud.google.com/compute/docs/labeling-resources#requirements) for Google Cloud resources.
loadBalancingScheme?	enum	no	Required. All backend services and forwarding rules referenced by this extension must share the same load balancing scheme. Supported values: `INTERNAL_MANAGED` and `EXTERNAL_MANAGED`. For more information, refer to [Backend services overview](https://cloud.google.com/load-balancing/docs/backend-service).
metadata?	record	no	Optional. The metadata provided here is included as part of the `metadata_context` (of type `google.protobuf.Struct`) in the `ProcessingRequest` message sent to the extension server. The metadata applies to all extensions in all extensions chains in this resource. The metadata is available under the key `com.google.lb_traffic_extension.`. The following variables are supported in the metadata: `{forwarding_rule_id}` - substituted with the forwarding rule's fully qualified resource name. This fiel
name?	string	no	Required. Identifier. Name of the `LbTrafficExtension` resource in the following format: `projects/{project}/locations/{location}/lbTrafficExtensions/{lb_traffic_extension}`.
lbTrafficExtensionId?	string	no	Required. User-provided ID of the `LbTrafficExtension` resource to be created.
requestId?	string	no	Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server can ignore the request if it has already been completed. The server guarantees that for 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server ignores the second request This prevents clients from accidentally creating dupl
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a lbTrafficExtensions

fn get(identifier: string)

Get a lbTrafficExtensions

Argument	Type	Required	Description
identifier	string	yes	The name of the lbTrafficExtensions

fn update(identifier?: string)

Update lbTrafficExtensions attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific lbTrafficExtensions by name (e.g. one discovered by list)

fn delete(identifier: string)

Delete the lbTrafficExtensions

Argument	Type	Required	Description
identifier	string	yes	The name of the lbTrafficExtensions

fn sync(identifier?: string)

Sync lbTrafficExtensions state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific lbTrafficExtensions by name (e.g. one discovered by list)

fn list(filter?: string, orderBy?: string, pageSize?: number, maxPages?: number)

List lbTrafficExtensions resources

Argument	Type	Required	Description
filter?	string	no	Optional. Filtering results.
orderBy?	string	no	Optional. Hint about how to order the results.
pageSize?	number	no	Optional. Requested page size. The server might return fewer items than requested. If unspecified, the server picks an appropriate default.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— `LbTrafficExtension` is a resource that lets the extension service modify the...

@swamp/gcp/networkservices/locationsv2026.08.12.2locations.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
name	string	yes	The resource that owns the locations collection, if applicable.

fn get(identifier: string)

Get a locations

Argument	Type	Required	Description
identifier	string	yes	The name of the locations

fn sync(identifier?: string)

Sync locations state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific locations by name (e.g. one discovered by list)

fn list(extraLocationTypes?: string, filter?: string, pageSize?: number, maxPages?: number)

List locations resources

Argument	Type	Required	Description
extraLocationTypes?	string	no	Optional. Do not use this field unless explicitly documented otherwise. This is primarily for internal usage.
filter?	string	no	A filter to narrow down results to a preferred subset. The filtering language accepts strings like `"displayName=tokyo"`, and is documented in more detail in [AIP-160](https://google.aip.dev/160).
pageSize?	number	no	The maximum number of results to return. If not set, the service selects a default.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— A resource that represents a Google Cloud location.

@swamp/gcp/networkservices/meshesv2026.08.12.2meshes.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
description?	string	no	Optional. A free-text description of the resource. Max length 1024 characters.
envoyHeaders?	enum	no	Optional. Determines if envoy will insert internal debug headers into upstream requests. Other Envoy headers may still be injected. By default, envoy will not insert any debug headers.
interceptionPort?	number	no	Optional. If set to a valid TCP port (1-65535), instructs the SIDECAR proxy to listen on the specified port of localhost (127.0.0.1) address. The SIDECAR proxy will expect all traffic to be redirected to this port regardless of its actual ip:port destination. If unset, a port '15001' is used as the interception port. This is applicable only for sidecar proxy deployments.
labels?	record	no	Optional. Set of label tags associated with the Mesh resource.
name?	string	no	Identifier. Name of the Mesh resource. It matches pattern `projects//locations//meshes/`.
meshId?	string	no	Required. Short name of the Mesh resource to be created.
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a meshes

fn get(identifier: string)

Get a meshes

Argument	Type	Required	Description
identifier	string	yes	The name of the meshes

fn update(identifier?: string)

Update meshes attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific meshes by name (e.g. one discovered by list)

fn delete(identifier: string)

Delete the meshes

Argument	Type	Required	Description
identifier	string	yes	The name of the meshes

fn sync(identifier?: string)

Sync meshes state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific meshes by name (e.g. one discovered by list)

fn list(pageSize?: number, returnPartialSuccess?: boolean, maxPages?: number)

List meshes resources

Argument	Type	Required	Description
pageSize?	number	no	Maximum number of Meshes to return per call.
returnPartialSuccess?	boolean	no	Optional. If true, allow partial responses for multi-regional Aggregated List requests. Otherwise if one of the locations is down or unreachable, the Aggregated List request will fail.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— Mesh represents a logical configuration grouping for workload to workload com...

@swamp/gcp/networkservices/meshes-routeviewsv2026.08.12.2meshes_routeviews.ts

Global Arguments

Argument	Type	Required	Description
name	string	yes	Instance name for this resource (used as the unique identifier in the factory pattern)
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
parent?	string	no	The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn get(identifier: string)

Get a routeViews

Argument	Type	Required	Description
identifier	string	yes	The name of the routeViews

fn sync(identifier?: string)

Sync routeViews state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific routeViews by name (e.g. one discovered by list)

fn list(pageSize?: number, maxPages?: number)

List routeViews resources

Argument	Type	Required	Description
pageSize?	number	no	Maximum number of MeshRouteViews to return per call.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— MeshRouteView defines view-only resource for Routes to a Mesh

@swamp/gcp/networkservices/multicastconsumerassociationsv2026.08.12.2multicastconsumerassociations.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
description?	string	no	Optional. An optional text description of the multicast consumer association.
labels?	record	no	Optional. Labels as key-value pairs
multicastDomainActivation?	string	no	Optional. The resource name of the multicast domain activation that is in the same zone as this multicast consumer association. Use the following format: `projects//locations//multicastDomainActivations/*`.
name?	string	no	Identifier. The resource name of the multicast consumer association. Use the following format: `projects//locations//multicastConsumerAssociations/*`.
network?	string	no	Required. The resource name of the multicast consumer VPC network. Use following format: `projects/{project}/locations/global/networks/{network}`.
multicastConsumerAssociationId?	string	no	Required. A unique name for the multicast consumer association. The name is restricted to lower-case letters, numbers, and hyphen, with the first character a lower-case letter, and the last a letter or a number. The name must not exceed 48 characters.
requestId?	string	no	Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes after the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID w
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a multicastConsumerAssociations

fn get(identifier: string)

Get a multicastConsumerAssociations

Argument	Type	Required	Description
identifier	string	yes	The name of the multicastConsumerAssociations

fn update(identifier?: string)

Update multicastConsumerAssociations attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific multicastConsumerAssociations by name (e.g. one discovered by list)

fn delete(identifier: string)

Delete the multicastConsumerAssociations

Argument	Type	Required	Description
identifier	string	yes	The name of the multicastConsumerAssociations

fn sync(identifier?: string)

Sync multicastConsumerAssociations state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific multicastConsumerAssociations by name (e.g. one discovered by list)

fn list(filter?: string, orderBy?: string, pageSize?: number, maxPages?: number)

List multicastConsumerAssociations resources

Argument	Type	Required	Description
filter?	string	no	Optional. A filter expression that filters the resources listed in the response. The expression must be of the form ` ` where operators: `<`, `>`, `<=`, `>=`, `!=`, `=`, `:` are supported (colon `:` represents a HAS operator which is roughly synonymous with equality). can refer to a proto or JSON field, or a synthetic field. Field names can be camelCase or snake_case. Examples: * Filter by name: name = "RESOURCE_NAME" * Filter by labels: * Resources that have a key named `foo` labels.foo:* * Res
orderBy?	string	no	Optional. A field used to sort the results by a certain order.
pageSize?	number	no	Optional. The maximum number of multicast consumer associations to return per call.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— Multicast consumer association resource.

@swamp/gcp/networkservices/multicastgroupconsumeractivationsv2026.08.12.2multicastgroupconsumeractivations.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
description?	string	no	Optional. An optional text description of the multicast group consumer activation.
labels?	record	no	Optional. Labels as key-value pairs
logConfig?	object	no	Optional. Specifies the logging options for the activities performed related to the multicast group consumer activation. Defaults to false. If logging is enabled, logs are exported to Cloud Logging.
multicastConsumerAssociation?	string	no	Required. The resource name of the multicast consumer association that is in the same zone as this multicast group consumer activation. Use the following format: `projects//locations//multicastConsumerAssociations/*`.
multicastGroupRangeActivation?	string	no	Required. The resource name of the multicast group range activation created by the admin in the same zone as this multicast group consumer activation. Use the following format: // `projects//locations//multicastGroupRangeActivations/*`.
name?	string	no	Identifier. The resource name of the multicast group consumer activation. Use the following format: `projects//locations//multicastGroupConsumerActivations/*`.
multicastGroupConsumerActivationId?	string	no	Required. A unique name for the multicast group consumer activation. The name is restricted to lower-case letters, numbers, and hyphen, with the first character a lower-case letter, and the last a letter or a number. The name must not exceed 48 characters.
requestId?	string	no	Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes after the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID w
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a multicastGroupConsumerActivations

fn get(identifier: string)

Get a multicastGroupConsumerActivations

Argument	Type	Required	Description
identifier	string	yes	The name of the multicastGroupConsumerActivations

fn update(identifier?: string)

Update multicastGroupConsumerActivations attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific multicastGroupConsumerActivations by name (e.g. one discovered by list)

fn delete(identifier: string)

Delete the multicastGroupConsumerActivations

Argument	Type	Required	Description
identifier	string	yes	The name of the multicastGroupConsumerActivations

fn sync(identifier?: string)

Sync multicastGroupConsumerActivations state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific multicastGroupConsumerActivations by name (e.g. one discovered by list)

fn list(filter?: string, orderBy?: string, pageSize?: number, maxPages?: number)

List multicastGroupConsumerActivations resources

Argument	Type	Required	Description
filter?	string	no	Optional. A filter expression that filters the resources listed in the response. The expression must be of the form ` ` where operators: `<`, `>`, `<=`, `>=`, `!=`, `=`, `:` are supported (colon `:` represents a HAS operator which is roughly synonymous with equality). can refer to a proto or JSON field, or a synthetic field. Field names can be camelCase or snake_case. Examples: * Filter by name: name = "RESOURCE_NAME" * Filter by labels: * Resources that have a key named `foo` labels.foo:* * Res
orderBy?	string	no	Optional. A field used to sort the results by a certain order.
pageSize?	number	no	Optional. The maximum number of multicast group consumer activations to return per call.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— Multicast group consumer activation resource.

@swamp/gcp/networkservices/producerextensionsv2026.08.22.1producerextensions.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
description?	string	no	Optional. A human-readable description of the resource.
extensionSettings?	object	no	Required. The configuration for the service that this `ProducerExtension` offers.
labels?	record	no	Optional. Set of labels associated with the `ProducerExtension` resource. The format must comply with [the following requirements](https://cloud.google.com/compute/docs/labeling-resources#requirements).
name?	string	no	Identifier. Name of the `ProducerExtension` resource in the following format: `projects/{project}/locations/{location}/producerExtensions/{producer_extension}`.
phase?	enum	no	Required. The phase in which this `ProducerExtension` should execute.
producerExtensionId?	string	no	Required. Short name of the `ProducerExtension` resource to be created.
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a producerExtensions

fn get(identifier: string)

Get a producerExtensions

Argument	Type	Required	Description
identifier	string	yes	The name of the producerExtensions

fn delete(identifier: string)

Delete the producerExtensions

Argument	Type	Required	Description
identifier	string	yes	The name of the producerExtensions

fn sync(identifier?: string)

Sync producerExtensions state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific producerExtensions by name (e.g. one discovered by list)

fn list(pageSize?: number, maxPages?: number)

List producerExtensions resources

Argument	Type	Required	Description
pageSize?	number	no	Optional. Maximum number of `ProducerExtension` resources to return per call.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— `ProducerExtension` is a resource representing producer defined configuration...

@swamp/gcp/networkservices/servicebindingsv2026.08.12.2servicebindings.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
description?	string	no	Optional. A free-text description of the resource. Max length 1024 characters.
labels?	record	no	Optional. Set of label tags associated with the ServiceBinding resource.
name?	string	no	Identifier. Name of the ServiceBinding resource. It matches pattern `projects//locations//serviceBindings/`.
serviceBindingId?	string	no	Required. Short name of the ServiceBinding resource to be created.
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a serviceBindings

fn get(identifier: string)

Get a serviceBindings

Argument	Type	Required	Description
identifier	string	yes	The name of the serviceBindings

fn update(identifier?: string)

Update serviceBindings attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific serviceBindings by name (e.g. one discovered by list)

fn delete(identifier: string)

Delete the serviceBindings

Argument	Type	Required	Description
identifier	string	yes	The name of the serviceBindings

fn sync(identifier?: string)

Sync serviceBindings state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific serviceBindings by name (e.g. one discovered by list)

fn list(pageSize?: number, maxPages?: number)

List serviceBindings resources

Argument	Type	Required	Description
pageSize?	number	no	Maximum number of ServiceBindings to return per call.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— ServiceBinding can be used to: - Bind a Service Directory Service to be used ...

@swamp/gcp/networkservices/servicelbpoliciesv2026.08.12.2servicelbpolicies.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
autoCapacityDrain?	object	no	Optional. Configuration to automatically move traffic away for unhealthy IG/NEG for the associated Backend Service.
description?	string	no	Optional. A free-text description of the resource. Max length 1024 characters.
failoverConfig?	object	no	Optional. Configuration related to health based failover.
isolationConfig?	object	no	Optional. Configuration to provide isolation support for the associated Backend Service.
labels?	record	no	Optional. Set of label tags associated with the ServiceLbPolicy resource.
loadBalancingAlgorithm?	enum	no	Optional. The type of load balancing algorithm to be used. The default behavior is WATERFALL_BY_REGION.
name?	string	no	Identifier. Name of the ServiceLbPolicy resource. It matches pattern `projects/{project}/locations/{location}/serviceLbPolicies/{service_lb_policy_name}`.
serviceLbPolicyId?	string	no	Required. Short name of the ServiceLbPolicy resource to be created. E.g. for resource name `projects/{project}/locations/{location}/serviceLbPolicies/{service_lb_policy_name}`. the id is value of {service_lb_policy_name}
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a serviceLbPolicies

fn get(identifier: string)

Get a serviceLbPolicies

Argument	Type	Required	Description
identifier	string	yes	The name of the serviceLbPolicies

fn update(identifier?: string)

Update serviceLbPolicies attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific serviceLbPolicies by name (e.g. one discovered by list)

fn delete(identifier: string)

Delete the serviceLbPolicies

Argument	Type	Required	Description
identifier	string	yes	The name of the serviceLbPolicies

fn sync(identifier?: string)

Sync serviceLbPolicies state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific serviceLbPolicies by name (e.g. one discovered by list)

fn list(pageSize?: number, maxPages?: number)

List serviceLbPolicies resources

Argument	Type	Required	Description
pageSize?	number	no	Maximum number of ServiceLbPolicies to return per call.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— ServiceLbPolicy holds global load balancing and traffic distribution configur...

@swamp/gcp/networkservices/tcproutesv2026.08.12.2tcproutes.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
description?	string	no	Optional. A free-text description of the resource. Max length 1024 characters.
gateways?	array	no	Optional. Gateways defines a list of gateways this TcpRoute is attached to, as one of the routing rules to route the requests served by the gateway. Each gateway reference should match the pattern: `projects//locations//gateways/`
labels?	record	no	Optional. Set of label tags associated with the TcpRoute resource.
meshes?	array	no	Optional. Meshes defines a list of meshes this TcpRoute is attached to, as one of the routing rules to route the requests served by the mesh. Each mesh reference should match the pattern: `projects//locations//meshes/` The attached Mesh should be of a type SIDECAR
name?	string	no	Identifier. Name of the TcpRoute resource. It matches pattern `projects//locations//tcpRoutes/tcp_route_name>`.
rules?	array	no	Required. Rules that define how traffic is routed and handled. At least one RouteRule must be supplied. If there are multiple rules then the action taken will be the first rule to match.
tcpRouteId?	string	no	Required. Short name of the TcpRoute resource to be created.
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a tcpRoutes

fn get(identifier: string)

Get a tcpRoutes

Argument	Type	Required	Description
identifier	string	yes	The name of the tcpRoutes

fn update(identifier?: string)

Update tcpRoutes attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific tcpRoutes by name (e.g. one discovered by list)

fn delete(identifier: string)

Delete the tcpRoutes

Argument	Type	Required	Description
identifier	string	yes	The name of the tcpRoutes

fn sync(identifier?: string)

Sync tcpRoutes state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific tcpRoutes by name (e.g. one discovered by list)

fn list(pageSize?: number, returnPartialSuccess?: boolean, maxPages?: number)

List tcpRoutes resources

Argument	Type	Required	Description
pageSize?	number	no	Maximum number of TcpRoutes to return per call.
returnPartialSuccess?	boolean	no	Optional. If true, allow partial responses for multi-regional Aggregated List requests. Otherwise if one of the locations is down or unreachable, the Aggregated List request will fail.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— TcpRoute is the resource defining how TCP traffic should be routed by a Mesh/...

@swamp/gcp/networkservices/tlsroutesv2026.08.12.2tlsroutes.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
description?	string	no	Optional. A free-text description of the resource. Max length 1024 characters.
gateways?	array	no	Optional. Gateways defines a list of gateways this TlsRoute is attached to, as one of the routing rules to route the requests served by the gateway. Each gateway reference should match the pattern: `projects//locations//gateways/`
labels?	record	no	Optional. Set of label tags associated with the TlsRoute resource.
meshes?	array	no	Optional. Meshes defines a list of meshes this TlsRoute is attached to, as one of the routing rules to route the requests served by the mesh. Each mesh reference should match the pattern: `projects//locations//meshes/` The attached Mesh should be of a type SIDECAR
name?	string	no	Identifier. Name of the TlsRoute resource. It matches pattern `projects//locations//tlsRoutes/tls_route_name>`.
rules?	array	no	Required. Rules that define how traffic is routed and handled. At least one RouteRule must be supplied. If there are multiple rules then the action taken will be the first rule to match.
targetProxies?	array	no	Optional. TargetProxies defines a list of TargetTcpProxies this TlsRoute is attached to, as one of the routing rules to route the requests served by the TargetTcpProxy. Each TargetTcpProxy reference should match the pattern: `projects//locations//targetTcpProxies/`
tlsRouteId?	string	no	Required. Short name of the TlsRoute resource to be created.
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a tlsRoutes

fn get(identifier: string)

Get a tlsRoutes

Argument	Type	Required	Description
identifier	string	yes	The name of the tlsRoutes

fn update(identifier?: string)

Update tlsRoutes attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific tlsRoutes by name (e.g. one discovered by list)

fn delete(identifier: string)

Delete the tlsRoutes

Argument	Type	Required	Description
identifier	string	yes	The name of the tlsRoutes

fn sync(identifier?: string)

Sync tlsRoutes state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific tlsRoutes by name (e.g. one discovered by list)

fn list(pageSize?: number, returnPartialSuccess?: boolean, maxPages?: number)

List tlsRoutes resources

Argument	Type	Required	Description
pageSize?	number	no	Maximum number of TlsRoutes to return per call.
returnPartialSuccess?	boolean	no	Optional. If true, allow partial responses for multi-regional Aggregated List requests. Otherwise if one of the locations is down or unreachable, the Aggregated List request will fail.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— TlsRoute defines how traffic should be routed based on SNI and other matching...

@swamp/gcp/networkservices/wasmpluginsv2026.08.12.2wasmplugins.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
description?	string	no	Optional. A human-readable description of the resource.
labels?	record	no	Optional. Set of labels associated with the `WasmPlugin` resource. The format must comply with [the following requirements](/compute/docs/labeling-resources#requirements).
logConfig?	object	no	Optional. Specifies the logging options for the activity performed by this plugin. If logging is enabled, plugin logs are exported to Cloud Logging. Note that the settings relate to the logs generated by using logging statements in your Wasm code.
mainVersionId?	string	no	Optional. The ID of the `WasmPluginVersion` resource that is the currently serving one. The version referred to must be a child of this `WasmPlugin` resource.
name?	string	no	Identifier. Name of the `WasmPlugin` resource in the following format: `projects/{project}/locations/{location}/wasmPlugins/{wasm_plugin}`.
versions?	record	no	Optional. All versions of this `WasmPlugin` resource in the key-value format. The key is the resource ID, and the value is the `VersionDetails` object. Lets you create or update a `WasmPlugin` resource and its versions in a single request. When the `main_version_id` field is not empty, it must point to one of the `VersionDetails` objects in the map. If provided in a `PATCH` request, the new versions replace the previous set. Any version omitted from the `versions` field is removed. Because the `
wasmPluginId?	string	no	Required. User-provided ID of the `WasmPlugin` resource to be created.
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a wasmPlugins

fn get(identifier: string)

Get a wasmPlugins

Argument	Type	Required	Description
identifier	string	yes	The name of the wasmPlugins

fn update(identifier?: string)

Update wasmPlugins attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific wasmPlugins by name (e.g. one discovered by list)

fn delete(identifier: string)

Delete the wasmPlugins

Argument	Type	Required	Description
identifier	string	yes	The name of the wasmPlugins

fn sync(identifier?: string)

Sync wasmPlugins state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific wasmPlugins by name (e.g. one discovered by list)

fn list(pageSize?: number, maxPages?: number)

List wasmPlugins resources

Argument	Type	Required	Description
pageSize?	number	no	Maximum number of `WasmPlugin` resources to return per call. If not specified, at most 50 `WasmPlugin` resources are returned. The maximum value is 1000; values above 1000 are coerced to 1000.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— `WasmPlugin` is a resource representing a service executing a customer-provid...

@swamp/gcp/networkservices/wasmplugins-versionsv2026.08.12.2wasmplugins_versions.ts

Global Arguments

Argument	Type	Required	Description
accessToken?	string	no	GCP OAuth2 access token; overrides GCP_ACCESS_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
credentialsJson?	string	no	GCP service account JSON credentials; overrides GOOGLE_APPLICATION_CREDENTIALS_JSON environment variable. Wire with a vault.get(...) expression to source it from a vault.
project?	string	no	GCP project ID; overrides GCP_PROJECT / GOOGLE_CLOUD_PROJECT environment variables.
scopes?	string	no	Comma-separated OAuth scopes to request when minting access tokens via gcloud. Defaults to the API's Discovery Document scopes.
quotaProject?	string	no	GCP project ID for quota and billing attribution; sets the x-goog-user-project header. Overrides GOOGLE_CLOUD_QUOTA_PROJECT environment variable. Required for APIs like Cloud Identity when using user credentials.
apiEndpoint?	string	no	Custom API endpoint for emulators; overrides GCP_API_ENDPOINT environment variable. Defaults to the service's production URL.
description?	string	no	Optional. A human-readable description of the resource.
imageUri?	string	no	Optional. URI of the image containing the Wasm module, stored in Artifact Registry. The URI can refer to one of the following repository formats: * Container images: the `image_uri` must point to a container that contains a single file with the name `plugin.wasm`. When a new `WasmPluginVersion` resource is created, the digest of the image is saved in the `image_digest` field. When pulling a container image from Artifact Registry, the digest value is used instead of an image tag. * Generic artifa
labels?	record	no	Optional. Set of labels associated with the `WasmPluginVersion` resource.
name?	string	no	Identifier. Name of the `WasmPluginVersion` resource in the following format: `projects/{project}/locations/{location}/wasmPlugins/{wasm_plugin}/ versions/{wasm_plugin_version}`.
pluginConfigData?	string	no	Configuration for the plugin. The configuration is provided to the plugin at runtime through the `ON_CONFIGURE` callback. When a new `WasmPluginVersion` resource is created, the digest of the contents is saved in the `plugin_config_digest` field.
pluginConfigUri?	string	no	URI of the plugin configuration stored in the Artifact Registry. The configuration is provided to the plugin at runtime through the `ON_CONFIGURE` callback. The URI can refer to one of the following repository formats: * Container images: the `plugin_config_uri` must point to a container that contains a single file with the name `plugin.config`. When a new `WasmPluginVersion` resource is created, the digest of the image is saved in the `plugin_config_digest` field. When pulling a container image
wasmPluginVersionId?	string	no	Required. User-provided ID of the `WasmPluginVersion` resource to be created.
parent?	string	no	The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456)
location?	string	no	The location for this resource (e.g., 'us', 'us-central1', 'europe-west1')

fn create()

Create a versions

fn get(identifier: string)

Get a versions

Argument	Type	Required	Description
identifier	string	yes	The name of the versions

fn delete(identifier: string)

Delete the versions

Argument	Type	Required	Description
identifier	string	yes	The name of the versions

fn sync(identifier?: string)

Sync versions state from GCP

Argument	Type	Required	Description
identifier?	string	no	Target a specific versions by name (e.g. one discovered by list)

fn list(pageSize?: number, maxPages?: number)

List versions resources

Argument	Type	Required	Description
pageSize?	number	no	Maximum number of `WasmPluginVersion` resources to return per call. If not specified, at most 50 `WasmPluginVersion` resources are returned. The maximum value is 1000; values above 1000 are coerced to 1000.
maxPages?	number	no	Maximum number of pages to fetch (default: 10)

Resources

state(infinite)— A single immutable version of a `WasmPlugin` resource. Defines the Wasm modul...

04Previous Versions19

2026.08.16.1Aug 16, 2026

Added: extensionbindings, producerextensions
Updated: agentconnectivitytemplates

Added 2 models

2026.08.12.2Aug 12, 2026

Updated: locations, agentconnectivitytemplates, agentgateways, authzextensions, endpointpolicies, gateways, gateways_routeviews, grpcroutes, httproutes, lbedgeextensions, lbrouteextensions, lbtrafficextensions, meshes, meshes_routeviews, multicastconsumerassociations, multicastgroupconsumeractivations, servicebindings, servicelbpolicies, tcproutes, tlsroutes, wasmplugins, wasmplugins_versions

2026.08.11.1Aug 11, 2026

Updated: agentconnectivitytemplates, agentgateways, wasmplugins

2026.08.04.1Aug 4, 2026

Added: agentconnectivitytemplates

Added 1 models

2026.07.29.1Jul 30, 2026

Updated: locations, agentgateways, authzextensions, endpointpolicies, gateways, gateways_routeviews, grpcroutes, httproutes, lbedgeextensions, lbrouteextensions, lbtrafficextensions, meshes, meshes_routeviews, multicastconsumerassociations, multicastgroupconsumeractivations, servicebindings, servicelbpolicies, tcproutes, tlsroutes, wasmplugins, wasmplugins_versions

2026.07.21.4Jul 21, 2026

Added: agentgateways, multicastconsumerassociations, multicastgroupconsumeractivations
Updated: locations, authzextensions, endpointpolicies, gateways, httproutes

2026.07.21.1Jul 21, 2026

Updated: agentgateways, endpointpolicies, grpcroutes, httproutes, lbedgeextensions, lbrouteextensions, lbtrafficextensions, multicastconsumerassociations, multicastgroupconsumeractivations, servicelbpolicies, tcproutes, tlsroutes, wasmplugins

2026.07.20.2Jul 20, 2026

Added: agentgateways, multicastconsumerassociations, multicastgroupconsumeractivations
Updated: locations, authzextensions, endpointpolicies, gateways, httproutes

Added 3 models

2026.07.20.1Jul 20, 2026

Updated: locations, authzextensions, endpointpolicies, gateways, gateways_routeviews, grpcroutes, httproutes, lbedgeextensions, lbrouteextensions, lbtrafficextensions, meshes, meshes_routeviews, servicebindings, servicelbpolicies, tcproutes, tlsroutes, wasmplugins, wasmplugins_versions

Removed 3 models

2026.07.19.2Jul 19, 2026

Updated: locations

2026.07.19.1Jul 19, 2026

Updated: locations, agentgateways, authzextensions, endpointpolicies, gateways, gateways_routeviews, grpcroutes, httproutes, lbedgeextensions, lbrouteextensions, lbtrafficextensions, meshes, meshes_routeviews, multicastconsumerassociations, multicastgroupconsumeractivations, servicebindings, servicelbpolicies, tcproutes, tlsroutes, wasmplugins, wasmplugins_versions

2026.07.18.2Jul 18, 2026

Updated: locations, agentgateways, authzextensions, endpointpolicies, gateways, gateways_routeviews, grpcroutes, httproutes, lbedgeextensions, lbrouteextensions, lbtrafficextensions, meshes, meshes_routeviews, multicastconsumerassociations, multicastgroupconsumeractivations, servicebindings, servicelbpolicies, tcproutes, tlsroutes, wasmplugins, wasmplugins_versions

2026.07.17.2Jul 17, 2026

Updated: agentgateways, authzextensions, endpointpolicies, gateways, grpcroutes, httproutes, lbedgeextensions, lbrouteextensions, lbtrafficextensions, meshes, multicastconsumerassociations, multicastgroupconsumeractivations, servicebindings, servicelbpolicies, tcproutes, tlsroutes, wasmplugins, wasmplugins_versions

2026.07.17.1Jul 17, 2026

Updated: agentgateways, authzextensions, endpointpolicies, gateways, gateways_routeviews, grpcroutes, httproutes, lbedgeextensions, lbrouteextensions, lbtrafficextensions, meshes, meshes_routeviews, multicastconsumerassociations, multicastgroupconsumeractivations, servicebindings, servicelbpolicies, tcproutes, tlsroutes, wasmplugins, wasmplugins_versions

2026.07.08.1Jul 8, 2026

Updated: agentgateways

2026.06.12.1Jun 12, 2026

Updated: agentgateways

2026.06.08.2Jun 8, 2026

Updated: locations, agentgateways, authzextensions, endpointpolicies, gateways, gateways_routeviews, grpcroutes, httproutes, lbedgeextensions, lbrouteextensions, lbtrafficextensions, meshes, meshes_routeviews, multicastconsumerassociations, multicastgroupconsumeractivations, servicebindings, servicelbpolicies, tcproutes, tlsroutes, wasmplugins, wasmplugins_versions

2026.06.07.1Jun 7, 2026

Updated: locations, agentgateways, authzextensions, endpointpolicies, gateways, gateways_routeviews, grpcroutes, httproutes, lbedgeextensions, lbrouteextensions, lbtrafficextensions, meshes, meshes_routeviews, multicastconsumerassociations, multicastgroupconsumeractivations, servicebindings, servicelbpolicies, tcproutes, tlsroutes, wasmplugins, wasmplugins_versions

2026.06.05.1Jun 5, 2026

Added: agentgateways, multicastconsumerassociations, multicastgroupconsumeractivations

Added 3 models

05Stats

100 / 100

Downloads

Archive size

353.1 KB

Verified by Swamp

Has README or module doc2/2earned
README has a code example1/1earned
README is substantive1/1earned
Most symbols documented1/1earned
No slow types (deprecated)1/1earned
Dependencies pass trust audit2/2earned
Has description1/1earned
Platform support declared (or universal)2/2earned
License declared1/1earned
Verified public repository2/2earned

Repository

https://github.com/swamp-club/swamp-extensions

06Platforms

linux · x86_64 linux · aarch64 macOS · x86_64 macOS · aarch64

07Labels

#gcp #google-cloud #networkservices #cloud #infrastructure