A Change represents a set of ResourceRecordSet additions and deletions applied atomically to a ManagedZone. ResourceRecordSets within a ManagedZone are modified by creating a new Change element in the Changes collection. In turn the Changes collection also records the past modifications to the ResourceRecordSets in a ManagedZone. The current state of the ManagedZone is the sum effect of applying all Change elements in the Changes collection in sequence.

Status of the operation (output only). A status of "done" means that the request to update the authoritative servers has been sent, but the servers might not be updated yet.

The time that this operation was started by the server (output only). This is in RFC3339 text format.

Identifies what kind of resource this is. Value: the fixed string "dns#change".

If the DNS queries for the zone will be served.

Unique identifier for the resource; defined by the server (output only).

Which ResourceRecordSets to remove? Must match existing data exactly.

Which ResourceRecordSets to add?

The response to a request to enumerate Changes to a ResourceRecordSets collection.

The presence of this field indicates that there exist more results following your last page of results in pagination order. To fetch them, make another list request using this value as your pagination token.

In this way you can retrieve the complete contents of even very large collections one page at a time. However, if the contents of the collection change between the first and last paginated list request, the set of all elements returned will be an inconsistent view of the collection. There is no way to retrieve a "snapshot" of collections larger than the maximum page size.

Type of resource.

The requested changes.

A Change represents a set of ResourceRecordSet additions and deletions applied atomically to a ManagedZone. ResourceRecordSets within a ManagedZone are modified by creating a new Change element in the Changes collection. In turn the Changes collection also records the past modifications to the ResourceRecordSets in a ManagedZone. The current state of the ManagedZone is the sum effect of applying all Change elements in the Changes collection in sequence.

Status of the operation (output only). A status of "done" means that the request to update the authoritative servers has been sent, but the servers might not be updated yet.

The time that this operation was started by the server (output only). This is in RFC3339 text format.

Identifies what kind of resource this is. Value: the fixed string "dns#change".

If the DNS queries for the zone will be served.

Unique identifier for the resource; defined by the server (output only).

Which ResourceRecordSets to remove? Must match existing data exactly.

Which ResourceRecordSets to add?

A DNSSEC key pair.

One of "KEY_SIGNING" or "ZONE_SIGNING". Keys of type KEY_SIGNING have the Secure Entry Point flag set and, when active, will be used to sign only resource record sets of type DNSKEY. Otherwise, the Secure Entry Point flag will be cleared and this key will be used to sign only resource record sets of other types. Immutable after creation time.

Base64 encoded public half of this key. Output only.

Identifies what kind of resource this is. Value: the fixed string "dns#dnsKey".

The key tag is a non-cryptographic hash of the a DNSKEY resource record associated with this DnsKey. The key tag can be used to identify a DNSKEY more quickly (but it is not a unique identifier). In particular, the key tag is used in a parent zone's DS record to point at the DNSKEY in this child ManagedZone. The key tag is a number in the range [0, 65535] and the algorithm to calculate it is specified in RFC4034 Appendix B. Output only.

Length of the key in bits. Specified at creation time then immutable.

Active keys will be used to sign subsequent changes to the ManagedZone. Inactive keys will still be present as DNSKEY Resource Records for the use of resolvers validating existing signatures.

Unique identifier for the resource; defined by the server (output only).

Cryptographic hashes of the DNSKEY resource record associated with this DnsKey. These digests are needed to construct a DS record that points at this DNS key. Output only.

A mutable string of at most 1024 characters associated with this resource for the user's convenience. Has no effect on the resource's function.

The time that this resource was created in the control plane. This is in RFC3339 text format. Output only.

String mnemonic specifying the DNSSEC algorithm of this key. Immutable after creation time.

The response to a request to enumerate DnsKeys in a ManagedZone.

The presence of this field indicates that there exist more results following your last page of results in pagination order. To fetch them, make another list request using this value as your pagination token.

In this way you can retrieve the complete contents of even very large collections one page at a time. However, if the contents of the collection change between the first and last paginated list request, the set of all elements returned will be an inconsistent view of the collection. There is no way to retrieve a "snapshot" of collections larger than the maximum page size.

Type of resource.

The requested resources.

An operation represents a successful mutation performed on a Cloud DNS resource. Operations provide: - An audit log of server resource mutations. - A way to recover/retry API calls in the case where the response is never received by the caller. Use the caller specified client_operation_id.

Only populated if the operation targeted a ManagedZone (output only).

User who requested the operation, for example: user@example.com. cloud-dns-system for operations automatically done by the system. (output only)

Type of the operation. Operations include insert, update, and delete (output only).

Status of the operation. Can be one of the following: "PENDING" or "DONE" (output only). A status of "DONE" means that the request to update the authoritative servers has been sent, but the servers might not be updated yet.

The time that this operation was started by the server. This is in RFC3339 text format (output only).

Identifies what kind of resource this is. Value: the fixed string "dns#operation".

Unique identifier for the resource. This is the client_operation_id if the client specified it when the mutation was initiated, otherwise, it is generated by the server. The name must be 1-63 characters long and match the regular expression [-a-z0-9]? (output only)

Only populated if the operation targeted a DnsKey (output only).

The operation resources.

The presence of this field indicates that there exist more results following your last page of results in pagination order. To fetch them, make another list request using this value as your page token.

In this way you can retrieve the complete contents of even very large collections one page at a time. However, if the contents of the collection change between the first and last paginated list request, the set of all elements returned will be an inconsistent view of the collection. There is no way to retrieve a consistent snapshot of a collection larger than the maximum page size.

Type of resource.

A zone is a subtree of the DNS namespace under one administrative responsibility. A ManagedZone is a resource that represents a DNS zone hosted by the Cloud DNS service.

The zone's visibility: public zones are exposed to the Internet, while private zones are visible only to Virtual Private Cloud resources.

For privately visible zones, the set of Virtual Private Cloud resources that the zone is visible from.

The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with.

Delegate your managed_zone to these virtual name servers; defined by the server (output only)

Optionally specifies the NameServerSet for this ManagedZone. A NameServerSet is a set of DNS name servers that all host the same ManagedZones. Most users will leave this field unset.

User assigned name for this resource. Must be unique within the project. The name must be 1-63 characters long, must begin with a letter, end with a letter or digit, and only contain lowercase letters, digits or dashes.

User labels.

Identifies what kind of resource this is. Value: the fixed string "dns#managedZone".

Unique identifier for the resource; defined by the server (output only)

The presence for this field indicates that outbound forwarding is enabled for this zone. The value of this field contains the set of destinations to forward to.

DNSSEC configuration.

The DNS name of this managed zone, for instance "example.com.".

A mutable string of at most 1024 characters associated with this resource for the user's convenience. Has no effect on the managed zone's function.

The time that this resource was created on the server. This is in RFC3339 text format. Output only.

An operation represents a successful mutation performed on a Cloud DNS resource. Operations provide: - An audit log of server resource mutations. - A way to recover/retry API calls in the case where the response is never received by the caller. Use the caller specified client_operation_id.

Only populated if the operation targeted a ManagedZone (output only).

User who requested the operation, for example: user@example.com. cloud-dns-system for operations automatically done by the system. (output only)

Type of the operation. Operations include insert, update, and delete (output only).

Status of the operation. Can be one of the following: "PENDING" or "DONE" (output only). A status of "DONE" means that the request to update the authoritative servers has been sent, but the servers might not be updated yet.

The time that this operation was started by the server. This is in RFC3339 text format (output only).

Identifies what kind of resource this is. Value: the fixed string "dns#operation".

Unique identifier for the resource. This is the client_operation_id if the client specified it when the mutation was initiated, otherwise, it is generated by the server. The name must be 1-63 characters long and match the regular expression [-a-z0-9]? (output only)

Only populated if the operation targeted a DnsKey (output only).

An operation represents a successful mutation performed on a Cloud DNS resource. Operations provide: - An audit log of server resource mutations. - A way to recover/retry API calls in the case where the response is never received by the caller. Use the caller specified client_operation_id.

Only populated if the operation targeted a ManagedZone (output only).

User who requested the operation, for example: user@example.com. cloud-dns-system for operations automatically done by the system. (output only)

Type of the operation. Operations include insert, update, and delete (output only).

Status of the operation. Can be one of the following: "PENDING" or "DONE" (output only). A status of "DONE" means that the request to update the authoritative servers has been sent, but the servers might not be updated yet.

The time that this operation was started by the server. This is in RFC3339 text format (output only).

Identifies what kind of resource this is. Value: the fixed string "dns#operation".

Unique identifier for the resource. This is the client_operation_id if the client specified it when the mutation was initiated, otherwise, it is generated by the server. The name must be 1-63 characters long and match the regular expression [-a-z0-9]? (output only)

Only populated if the operation targeted a DnsKey (output only).

The presence of this field indicates that there exist more results following your last page of results in pagination order. To fetch them, make another list request using this value as your page token.

In this way you can retrieve the complete contents of even very large collections one page at a time. However, if the contents of the collection change between the first and last paginated list request, the set of all elements returned will be an inconsistent view of the collection. There is no way to retrieve a consistent snapshot of a collection larger than the maximum page size.

The managed zone resources.

Type of resource.

A zone is a subtree of the DNS namespace under one administrative responsibility. A ManagedZone is a resource that represents a DNS zone hosted by the Cloud DNS service.

The zone's visibility: public zones are exposed to the Internet, while private zones are visible only to Virtual Private Cloud resources.

For privately visible zones, the set of Virtual Private Cloud resources that the zone is visible from.

The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with.

Delegate your managed_zone to these virtual name servers; defined by the server (output only)

Optionally specifies the NameServerSet for this ManagedZone. A NameServerSet is a set of DNS name servers that all host the same ManagedZones. Most users will leave this field unset.

User assigned name for this resource. Must be unique within the project. The name must be 1-63 characters long, must begin with a letter, end with a letter or digit, and only contain lowercase letters, digits or dashes.

User labels.

Identifies what kind of resource this is. Value: the fixed string "dns#managedZone".

Unique identifier for the resource; defined by the server (output only)

The presence for this field indicates that outbound forwarding is enabled for this zone. The value of this field contains the set of destinations to forward to.

DNSSEC configuration.

The DNS name of this managed zone, for instance "example.com.".

A mutable string of at most 1024 characters associated with this resource for the user's convenience. Has no effect on the managed zone's function.

The time that this resource was created on the server. This is in RFC3339 text format. Output only.

A policy is a collection of DNS rules applied to one or more Virtual Private Cloud resources.

List of network names specifying networks to which this policy is applied.

User assigned name for this policy.

Identifies what kind of resource this is. Value: the fixed string "dns#policy".

Unique identifier for the resource; defined by the server (output only).

Controls whether logging is enabled for the networks bound to this policy. Defaults to no logging if not set.

Allows networks bound to this policy to receive DNS queries sent by VMs or applications over VPN connections. When enabled, a virtual IP address will be allocated from each of the sub-networks that are bound to this policy.

A mutable string of at most 1024 characters associated with this resource for the user's convenience. Has no effect on the policy's function.

Sets an alternative name server for the associated networks. When specified, all DNS queries are forwarded to a name server that you choose. Names such as .internal are not available when an alternative name server is specified.

The policy resources.

The presence of this field indicates that there exist more results following your last page of results in pagination order. To fetch them, make another list request using this value as your page token.

In this way you can retrieve the complete contents of even very large collections one page at a time. However, if the contents of the collection change between the first and last paginated list request, the set of all elements returned will be an inconsistent view of the collection. There is no way to retrieve a consistent snapshot of a collection larger than the maximum page size.

Type of resource.

A policy is a collection of DNS rules applied to one or more Virtual Private Cloud resources.

List of network names specifying networks to which this policy is applied.

User assigned name for this policy.

Identifies what kind of resource this is. Value: the fixed string "dns#policy".

Unique identifier for the resource; defined by the server (output only).

Controls whether logging is enabled for the networks bound to this policy. Defaults to no logging if not set.

Allows networks bound to this policy to receive DNS queries sent by VMs or applications over VPN connections. When enabled, a virtual IP address will be allocated from each of the sub-networks that are bound to this policy.

A mutable string of at most 1024 characters associated with this resource for the user's convenience. Has no effect on the policy's function.

Sets an alternative name server for the associated networks. When specified, all DNS queries are forwarded to a name server that you choose. Names such as .internal are not available when an alternative name server is specified.

A project resource. The project is a top level container for resources including Cloud DNS ManagedZones. Projects can be created only in the APIs console.

Quotas assigned to this project (output only).

Unique numeric identifier for the resource; defined by the server (output only).

Identifies what kind of resource this is. Value: the fixed string "dns#project".

User assigned unique identifier for the resource (output only).

The resource record set resources.

The presence of this field indicates that there exist more results following your last page of results in pagination order. To fetch them, make another list request using this value as your pagination token.

In this way you can retrieve the complete contents of even very large collections one page at a time. However, if the contents of the collection change between the first and last paginated list request, the set of all elements returned will be an inconsistent view of the collection. There is no way to retrieve a consistent snapshot of a collection larger than the maximum page size.

Type of resource.