Application Load Balancer API, REST: LoadBalancer.Update

Field

Description

loadBalancerId

string

Required field. ID of the application load balancer to update.
To get the application load balancer ID, make a LoadBalancerService.List request.

Field

Description

updateMask

string (field-mask)

A comma-separated names off ALL fields to be updated.
Only the specified fields will be changed. The others will be left untouched.
If the field is specified in updateMask and no value for that field was sent in the request,
the field's value will be reset to the default. The default value for most fields is null or 0.

If updateMask is not sent in the request, all fields' values will be updated.
Fields specified in the request will be updated to provided values.
The rest of the fields will be reset to the default.

name

string

New name for the application load balancer.
The name must be unique within the folder.

Value must match the regular expression |[a-z][-a-z0-9]{1,61}[a-z0-9].

description

string

New description of the application load balancer.

The maximum string length in characters is 256.

labels

object (map<string, string>)

New application load balancer labels as key:value pairs.
For details about the concept, see documentation.
Existing set of labels is completely replaced by the provided set, so if you just want
to add or remove a label:

1. Get the current set of labels with a LoadBalancerService.Get request.
2. Add or remove a label in this set.
3. Send the new set in this field.

The maximum string length in characters for each value is 63. The string length in characters for each key must be 1-63. Each key must match the regular expression [a-z][-_0-9a-z]*. Each value must match the regular expression [-_0-9a-z]*. No more than 64 per resource.

listenerSpecs[]

ListenerSpec

New listeners for the application load balancer.
For details about the concept,
see documentation.
Existing list of listeners is completely replaced by the specified list, so if you just want to add, update,
or remove a listener, make a LoadBalancerService.AddListener request,
a LoadBalancerService.UpdateListener request, or a LoadBalancerService.RemoveListener request.

allocationPolicy

AllocationPolicy

New locality settings of the application load balancer.
For details about the concept,
see documentation.
Existing locality settings are completely replaced by the specified settings,
so if you just want to add or remove an allocation policy:

1. Get the current settings with a LoadBalancerService.Get request.
2. Add or remove a policy in this set.
3. Send the new set in this field.

securityGroupIds[]

string

ID's of new security groups attributed to the application load balancer.
For details about the concept,
see documentation.
Existing list of security groups is completely replaced by the specified list,
so if you just want to add or remove an allocation policy:

1. Get the current set of security groups with a LoadBalancerService.Get request.
2. Add or remove a group in this set.
3. Send the new set in this field.

autoScalePolicy

AutoScalePolicy

New scaling settings of the application load balancer.
The scaling settings relate to a special internal instance group which facilitates the balancer's work.
Instances in this group are called resource units. The group is scaled automatically based on incoming load
and within limitations specified in these settings.
For details about the concept,
see documentation.

logOptions

LogOptions

Cloud logging settings of the application load balancer.

allowZonalShift

boolean

Specifies whether application load balancer is available to zonal shift.

Field

Description

name

string

Required field. Name of the listener. The name is unique within the application load balancer.

Value must match the regular expression [a-z][-a-z0-9]{1,61}[a-z0-9].

endpointSpecs[]

EndpointSpec

Endpoints of the listener.
Endpoints are defined by their IP addresses and ports.

stream

StreamListener

Unencrypted stream (TCP) listener settings.

Includes only one of the fields stream, http, tls.

Listener type and settings.

http

HttpListener

Unencrypted HTTP listener settings.

Includes only one of the fields stream, http, tls.

Listener type and settings.

tls

TlsListener

TLS-encrypted HTTP or TCP stream listener settings.
All handlers within a listener (TlsListener.defaultHandler and TlsListener.sniHandlers) must be of one
type, HttpHandler or StreamHandler. Mixing HTTP and TCP stream traffic in a TLS-encrypted listener is not
supported.

Includes only one of the fields stream, http, tls.

Listener type and settings.

Field

Description

addressSpecs[]

AddressSpec

Endpoint public (external) and internal addresses.

The number of elements must be greater than 0.

ports[]

string (int64)

Endpoint ports.

The number of elements must be greater than 0. Acceptable values are 1 to 65535, inclusive.

Field

Description

externalIpv4AddressSpec

ExternalIpv4AddressSpec

Public IPv4 endpoint address.

Includes only one of the fields externalIpv4AddressSpec, internalIpv4AddressSpec, externalIpv6AddressSpec.

Endpoint address of one of the types: public (external) IPv4 address, internal IPv4 address, public IPv6 address.

internalIpv4AddressSpec

InternalIpv4AddressSpec

Internal IPv4 endpoint address.
To enable the use of listeners with internal addresses, contact support.

Includes only one of the fields externalIpv4AddressSpec, internalIpv4AddressSpec, externalIpv6AddressSpec.

Endpoint address of one of the types: public (external) IPv4 address, internal IPv4 address, public IPv6 address.

externalIpv6AddressSpec

ExternalIpv6AddressSpec

Public IPv6 endpoint address.

Includes only one of the fields externalIpv4AddressSpec, internalIpv4AddressSpec, externalIpv6AddressSpec.

Endpoint address of one of the types: public (external) IPv4 address, internal IPv4 address, public IPv6 address.

Field

Description

address

string

IPv4 address.

Field

Description

address

string

IPv4 address.

subnetId

string

Required field. ID of the subnet that the address belongs to.

Field

Description

address

string

IPv6 address.

Field

Description

handler

StreamHandler

Required field. Settings for handling stream (TCP) requests.

Field

Description

backendGroupId

string

Required field. ID of the backend group processing requests. For details about the concept, see
documentation.
The backend group type, specified via BackendGroup.backend, must be stream.
To get the list of all available backend groups, make a BackendGroupService.List request.

idleTimeout

string (duration)

The idle timeout is duration during which no data is transmitted or received on either the upstream or downstream connection.
If not configured, the default idle timeout is 1 hour. Setting it to 0 disables the timeout.

Field

Description

handler

HttpHandler

Settings for handling HTTP requests.
Only one of handler and redirects can be specified.

redirects

Redirects

Redirects settings.
Only one of redirects and handler can be specified.

Field

Description

httpRouterId

string

ID of the HTTP router processing requests. For details about the concept, see
documentation.
To get the list of all available HTTP routers, make a HttpRouterService.List request.

rewriteRequestId

boolean

When unset, will preserve the incoming x-request-id header, otherwise would rewrite it with a new value.

http2Options

Http2Options

HTTP/2 settings.
If specified, incoming HTTP/2 requests are supported by the listener.

Includes only one of the fields http2Options, allowHttp10.

Protocol settings.
For HTTPS (HTTP over TLS) connections, settings are applied to the protocol
negotiated using TLS ALPN extension.

allowHttp10

boolean

Enables support for incoming HTTP/1.0 and HTTP/1.1 requests and disables it for HTTP/2 requests.

Includes only one of the fields http2Options, allowHttp10.

Protocol settings.
For HTTPS (HTTP over TLS) connections, settings are applied to the protocol
negotiated using TLS ALPN extension.

preserveHttp1HeaderCasing

boolean

When enabled, preserves the original casing of HTTP/1.1 header names (e.g. "CONTENT-Type" -> "CONTENT-Type").
Has no effect on HTTP/2 connections where headers are always lowercase per RFC 7540.

Field

Description

maxConcurrentStreams

string (int64)

Maximum number of concurrent HTTP/2 streams in a connection.

Field

Description

httpToHttps

boolean

Redirects all unencrypted HTTP requests to the same URI with scheme changed to https.
The setting has the same effect as a single, catch-all HttpRoute
with RedirectAction.replaceScheme set to https.

Field

Description

defaultHandler

TlsHandler

Required field. Settings for handling requests by default, with Server Name
Indication (SNI) not matching any of the sniHandlers.

sniHandlers[]

SniMatch

Settings for handling requests with Server Name Indication (SNI)
matching one of SniMatch.serverNames values.

Field

Description

streamHandler

StreamHandler

Stream (TCP) handler.

Includes only one of the fields streamHandler, httpHandler.

Settings for handling requests.

httpHandler

HttpHandler

HTTP handler.

Includes only one of the fields streamHandler, httpHandler.

Settings for handling requests.

certificateIds[]

string

ID's of the TLS server certificates from Certificate Manager.
RSA and ECDSA certificates are supported, and only the first certificate of each type is used.

The string length in characters for each value must be greater than 1. The maximum number of elements is 1.

clientCertificatesVerification

ClientCertificatesVerification

Client certificates verification settings.

Field

Description

requireClientCertificate

boolean

If true, ALB will reject connections without a valid client certificate.

bytes

string

Trusted certificate authority certificates bundle (PEM text).

Includes only one of the fields bytes.

Field

Description

name

string

Required field. Name of the SNI handler.

serverNames[]

string

Server names that are matched by the SNI handler.

The string length in characters for each value must be 1-255. Each value must match the regular expression ([*].)?[-.a-z0-9]+. The number of elements must be greater than 0.

handler

TlsHandler

Required field. Settings for handling requests with Server Name Indication (SNI) matching one of serverNames values.

Field

Description

locations[]

Location

Availability zones and subnets that the application load balancer resides.

The minimum number of elements is 1.

Field

Description

zoneId

string

Required field. ID of the availability zone where the application load balancer resides.
Each availability zone can only be specified once.

subnetId

string

ID of the subnet that the application load balancer belongs to.

disableTraffic

boolean

Disables the load balancer node in the specified availability zone.
Backends in the availability zone are not directly affected by this setting.
They still may receive traffic from the load balancer nodes in other availability zones,
subject to LoadBalancingConfig.localityAwareRoutingPercent and LoadBalancingConfig.strictLocality settings.

zonalShiftActive

boolean

Show zonal shift status for the location.
Deprecated: use zonalTrafficDisabled below to track traffic status.

zonalTrafficDisabled

boolean

Computed field: will be set to true if all traffic in zone is disabled
either manually by user or automatically by Cloud infrastructure.

Field

Description

minZoneSize

string (int64)

Lower limit for the number of resource units in each availability zone.
If not specified previously (using other instruments such as management console), the default value is 2.
To revert to it, specify it explicitly.
The minimum value is 2.

Acceptable values are 0 to 1000, inclusive.

maxSize

string (int64)

Upper limit for the total number of resource units across all availability zones.
If a positive value is specified, it must be at least minZoneSize multiplied by the size of
AllocationPolicy.locations.
If the value is 0, there is no upper limit.

Acceptable values are 0 to 1000, inclusive.

Field

Description

logGroupId

string

Cloud Logging log group ID to store access logs.
If not set then logs will be stored in default log group for the folder
where load balancer located.

Value must match the regular expression ([a-zA-Z][-a-zA-Z0-9_.]{0,63})?.

discardRules[]

LogDiscardRule

ordered list of rules, first matching rule applies

disable

boolean

Do not send logs to Cloud Logging log group.

Field

Description

httpCodes[]

string (int64)

HTTP codes that should be discarded.

Acceptable values are 100 to 599, inclusive.

httpCodeIntervals[]

enum (HttpCodeInterval)

Groups of HTTP codes like 4xx that should be discarded.

• HTTP_1XX
• HTTP_2XX
• HTTP_3XX
• HTTP_4XX
• HTTP_5XX
• HTTP_ALL

grpcCodes[]

enum (Code)

GRPC codes that should be discarded

• OK: Not an error; returned on success

  HTTP Mapping: 200 OK

• CANCELLED: The operation was cancelled, typically by the caller.

  HTTP Mapping: 499 Client Closed Request

• UNKNOWN: Unknown error. For example, this error may be returned when
  a Status value received from another address space belongs to
  an error space that is not known in this address space. Also
  errors raised by APIs that do not return enough error information
  may be converted to this error.

  HTTP Mapping: 500 Internal Server Error

• INVALID_ARGUMENT: The client specified an invalid argument. Note that this differs
  from FAILED_PRECONDITION. INVALID_ARGUMENT indicates arguments
  that are problematic regardless of the state of the system
  (e.g., a malformed file name).

  HTTP Mapping: 400 Bad Request

• DEADLINE_EXCEEDED: The deadline expired before the operation could complete. For operations
  that change the state of the system, this error may be returned
  even if the operation has completed successfully. For example, a
  successful response from a server could have been delayed long
  enough for the deadline to expire.

  HTTP Mapping: 504 Gateway Timeout

• NOT_FOUND: Some requested entity (e.g., file or directory) was not found.

  Note to server developers: if a request is denied for an entire class
  of users, such as gradual feature rollout or undocumented whitelist,
  NOT_FOUND may be used. If a request is denied for some users within
  a class of users, such as user-based access control, PERMISSION_DENIED
  must be used.

  HTTP Mapping: 404 Not Found

• ALREADY_EXISTS: The entity that a client attempted to create (e.g., file or directory)
  already exists.

  HTTP Mapping: 409 Conflict

• PERMISSION_DENIED: The caller does not have permission to execute the specified
  operation. PERMISSION_DENIED must not be used for rejections
  caused by exhausting some resource (use RESOURCE_EXHAUSTED
  instead for those errors). PERMISSION_DENIED must not be
  used if the caller can not be identified (use UNAUTHENTICATED
  instead for those errors). This error code does not imply the
  request is valid or the requested entity exists or satisfies
  other pre-conditions.

  HTTP Mapping: 403 Forbidden

• UNAUTHENTICATED: The request does not have valid authentication credentials for the
  operation.

  HTTP Mapping: 401 Unauthorized

• RESOURCE_EXHAUSTED: Some resource has been exhausted, perhaps a per-user quota, or
  perhaps the entire file system is out of space.

  HTTP Mapping: 429 Too Many Requests

• FAILED_PRECONDITION: The operation was rejected because the system is not in a state
  required for the operation's execution. For example, the directory
  to be deleted is non-empty, an rmdir operation is applied to
  a non-directory, etc.

  Service implementors can use the following guidelines to decide
  between FAILED_PRECONDITION, ABORTED, and UNAVAILABLE:
  (a) Use UNAVAILABLE if the client can retry just the failing call.
  (b) Use ABORTED if the client should retry at a higher level
  (e.g., when a client-specified test-and-set fails, indicating the
  client should restart a read-modify-write sequence).
  (c) Use FAILED_PRECONDITION if the client should not retry until
  the system state has been explicitly fixed. E.g., if an "rmdir"
  fails because the directory is non-empty, FAILED_PRECONDITION
  should be returned since the client should not retry unless
  the files are deleted from the directory.

  HTTP Mapping: 400 Bad Request

• ABORTED: The operation was aborted, typically due to a concurrency issue such as
  a sequencer check failure or transaction abort.

  See the guidelines above for deciding between FAILED_PRECONDITION,
  ABORTED, and UNAVAILABLE.

  HTTP Mapping: 409 Conflict

• OUT_OF_RANGE: The operation was attempted past the valid range. E.g., seeking or
  reading past end-of-file.

  Unlike INVALID_ARGUMENT, this error indicates a problem that may
  be fixed if the system state changes. For example, a 32-bit file
  system will generate INVALID_ARGUMENT if asked to read at an
  offset that is not in the range [0,2^32-1], but it will generate
  OUT_OF_RANGE if asked to read from an offset past the current
  file size.

  There is a fair bit of overlap between FAILED_PRECONDITION and
  OUT_OF_RANGE. We recommend using OUT_OF_RANGE (the more specific
  error) when it applies so that callers who are iterating through
  a space can easily look for an OUT_OF_RANGE error to detect when
  they are done.

  HTTP Mapping: 400 Bad Request

• UNIMPLEMENTED: The operation is not implemented or is not supported/enabled in this
  service.

  HTTP Mapping: 501 Not Implemented

• INTERNAL: Internal errors. This means that some invariants expected by the
  underlying system have been broken. This error code is reserved
  for serious errors.

  HTTP Mapping: 500 Internal Server Error

• UNAVAILABLE: The service is currently unavailable. This is most likely a
  transient condition, which can be corrected by retrying with
  a backoff.

  See the guidelines above for deciding between FAILED_PRECONDITION,
  ABORTED, and UNAVAILABLE.

  HTTP Mapping: 503 Service Unavailable

• DATA_LOSS: Unrecoverable data loss or corruption.

  HTTP Mapping: 500 Internal Server Error

discardPercent

string (int64)

Percent of logs to be discarded: 0 - keep all, 100 or unset - discard all

Acceptable values are 0 to 100, inclusive.

Field

Description

id

string

ID of the operation.

description

string

Description of the operation. 0-256 characters long.

createdAt

string (date-time)

Creation timestamp.

String in RFC3339 text format. The range of possible values is from
0001-01-01T00:00:00Z to 9999-12-31T23:59:59.999999999Z, i.e. from 0 to 9 digits for fractions of a second.

To work with values in this field, use the APIs described in the
Protocol Buffers reference.
In some languages, built-in datetime utilities do not support nanosecond precision (9 digits).

createdBy

string

ID of the user or service account who initiated the operation.

modifiedAt

string (date-time)

The time when the Operation resource was last modified.

String in RFC3339 text format. The range of possible values is from
0001-01-01T00:00:00Z to 9999-12-31T23:59:59.999999999Z, i.e. from 0 to 9 digits for fractions of a second.

To work with values in this field, use the APIs described in the
Protocol Buffers reference.
In some languages, built-in datetime utilities do not support nanosecond precision (9 digits).

done

boolean

If the value is false, it means the operation is still in progress.
If true, the operation is completed, and either error or response is available.

metadata

object

Service-specific metadata associated with the operation.
It typically contains the ID of the target resource that the operation is performed on.
Any method that returns a long-running operation should document the metadata type, if any.

error

Status

The error result of the operation in case of failure or cancellation.

Includes only one of the fields error, response.

The operation result.
If done == false and there was no failure detected, neither error nor response is set.
If done == false and there was a failure detected, error is set.
If done == true, exactly one of error or response is set.

response

object

The normal response of the operation in case of success.
If the original method returns no data on success, such as Delete,
the response is google.protobuf.Empty.
If the original method is the standard Create/Update,
the response should be the target resource of the operation.
Any method that returns a long-running operation should document the response type, if any.

Includes only one of the fields error, response.

The operation result.
If done == false and there was no failure detected, neither error nor response is set.
If done == false and there was a failure detected, error is set.
If done == true, exactly one of error or response is set.

Field

Description

code

integer (int32)

Error code. An enum value of google.rpc.Code.

message

string

An error message.

details[]

object

A list of messages that carry the error details.