feat: add an "unsupported" type of firewall policy rule

Google APIs · copybara-github · commit b99801549985 · 2024-03-27T07:29:54.000-07:00
PiperOrigin-RevId: 619524306
diff --git a/google/cloud/networkmanagement/v1/trace.proto b/google/cloud/networkmanagement/v1/trace.proto
@@ -351,6 +351,12 @@ message FirewallInfo {
     // policies](https://cloud.google.com/firewall/docs/regional-firewall-policies).
     NETWORK_REGIONAL_FIREWALL_POLICY_RULE = 6;
 
+    // Firewall policy rule containing attributes not yet supported in
+    // Connectivity tests. Firewall analysis is skipped if such a rule can
+    // potentially be matched. Please see the [list of unsupported
+    // configurations](https://cloud.google.com/network-intelligence-center/docs/connectivity-tests/concepts/overview#unsupported-configs).
+    UNSUPPORTED_FIREWALL_POLICY_RULE = 100;
+
     // Tracking state for response traffic created when request traffic goes
     // through allow firewall rule.
     // For details, see [firewall rules
diff --git a/google/cloud/networkmanagement/v1beta1/trace.proto b/google/cloud/networkmanagement/v1beta1/trace.proto
@@ -355,6 +355,12 @@ message FirewallInfo {
     // policies](https://cloud.google.com/firewall/docs/regional-firewall-policies).
     NETWORK_REGIONAL_FIREWALL_POLICY_RULE = 6;
 
+    // Firewall policy rule containing attributes not yet supported in
+    // Connectivity tests. Firewall analysis is skipped if such a rule can
+    // potentially be matched. Please see the [list of unsupported
+    // configurations](https://cloud.google.com/network-intelligence-center/docs/connectivity-tests/concepts/overview#unsupported-configs).
+    UNSUPPORTED_FIREWALL_POLICY_RULE = 100;
+
     // Tracking state for response traffic created when request traffic goes
     // through allow firewall rule.
     // For details, see [firewall rules
