feat(networksecurity): update library (googleapis#16122)

Author: scotthart

CHANGELOG.md

@@ -16,6 +16,10 @@ the APIs in these libraries are stable, and are ready for production use.
 
 - [Data Analytics API with Gemini](/google/cloud/geminidataanalytics/README.md)
 
+### Updated Libraries
+
+- [Network Security API] has been updated with several additional services ([#16122](https://github.com/googleapis/google-cloud-cpp/pull/16122)) 
+
 ## v3.5.0 - 2026-05
 
 ### [Bigtable](/google/cloud/bigtable/README.md)

ci/abi-dumps/google_cloud_cpp_networksecurity.expected.abi.dump.gz

@@ -3113,6 +3113,62 @@ service {
   retryable_status_codes: ["kUnavailable"]
 }
 
+service {
+  service_proto_path: "google/cloud/networksecurity/v1/dns_threat_detector.proto"
+  additional_proto_files: ["google/cloud/networksecurity/v1/common.proto"]
+  product_path: "google/cloud/networksecurity/v1"
+  initial_copyright_year: "2026"
+  retryable_status_codes: ["kUnavailable"]
+}
+
+service {
+  service_proto_path: "google/cloud/networksecurity/v1/sse_realm.proto"
+  additional_proto_files: ["google/cloud/networksecurity/v1/common.proto"]
+  product_path: "google/cloud/networksecurity/v1"
+  initial_copyright_year: "2026"
+  retryable_status_codes: ["kUnavailable"]
+}
+
+service {
+  service_proto_path: "google/cloud/networksecurity/v1/firewall_activation.proto"
+  additional_proto_files: ["google/cloud/networksecurity/v1/common.proto"]
+  product_path: "google/cloud/networksecurity/v1"
+  initial_copyright_year: "2026"
+  retryable_status_codes: ["kUnavailable"]
+}
+
+service {
+  service_proto_path: "google/cloud/networksecurity/v1/intercept.proto"
+  additional_proto_files: ["google/cloud/networksecurity/v1/common.proto"]
+  product_path: "google/cloud/networksecurity/v1"
+  initial_copyright_year: "2026"
+  retryable_status_codes: ["kUnavailable"]
+}
+
+service {
+  service_proto_path: "google/cloud/networksecurity/v1/address_group.proto"
+  additional_proto_files: ["google/cloud/networksecurity/v1/common.proto"]
+  product_path: "google/cloud/networksecurity/v1"
+  initial_copyright_year: "2026"
+  retryable_status_codes: ["kUnavailable"]
+}
+
+service {
+  service_proto_path: "google/cloud/networksecurity/v1/security_profile_group_service.proto"
+  additional_proto_files: ["google/cloud/networksecurity/v1/common.proto"]
+  product_path: "google/cloud/networksecurity/v1"
+  initial_copyright_year: "2026"
+  retryable_status_codes: ["kUnavailable"]
+}
+
+service {
+  service_proto_path: "google/cloud/networksecurity/v1/mirroring.proto"
+  additional_proto_files: ["google/cloud/networksecurity/v1/common.proto"]
+  product_path: "google/cloud/networksecurity/v1"
+  initial_copyright_year: "2026"
+  retryable_status_codes: ["kUnavailable"]
+}
+
 # Network Services (aka Traffic Director)
 service {
   service_proto_path: "google/cloud/networkservices/v1/network_services.proto"

generator/generator_config.textproto

@@ -9,10 +9,46 @@ environment variables are convenient when troubleshooting problems.
 
 <!-- inject-endpoint-env-vars-start -->
 
+- `GOOGLE_CLOUD_CPP_ADDRESS_GROUP_SERVICE_ENDPOINT=...` overrides the
+  `EndpointOption` (which defaults to "networksecurity.googleapis.com")
+  used by `MakeAddressGroupServiceConnection()`.
+
+- `GOOGLE_CLOUD_CPP_DNS_THREAT_DETECTOR_SERVICE_ENDPOINT=...` overrides the
+  `EndpointOption` (which defaults to "networksecurity.googleapis.com")
+  used by `MakeDnsThreatDetectorServiceConnection()`.
+
+- `GOOGLE_CLOUD_CPP_FIREWALL_ACTIVATION_ENDPOINT=...` overrides the
+  `EndpointOption` (which defaults to "networksecurity.googleapis.com")
+  used by `MakeFirewallActivationConnection()`.
+
+- `GOOGLE_CLOUD_CPP_INTERCEPT_ENDPOINT=...` overrides the
+  `EndpointOption` (which defaults to "networksecurity.googleapis.com")
+  used by `MakeInterceptConnection()`.
+
+- `GOOGLE_CLOUD_CPP_MIRRORING_ENDPOINT=...` overrides the
+  `EndpointOption` (which defaults to "networksecurity.googleapis.com")
+  used by `MakeMirroringConnection()`.
+
 - `GOOGLE_CLOUD_CPP_NETWORK_SECURITY_ENDPOINT=...` overrides the
   `EndpointOption` (which defaults to "networksecurity.googleapis.com")
   used by `MakeNetworkSecurityConnection()`.
 
+- `GOOGLE_CLOUD_CPP_ORGANIZATION_ADDRESS_GROUP_SERVICE_ENDPOINT=...` overrides the
+  `EndpointOption` (which defaults to "networksecurity.googleapis.com")
+  used by `MakeOrganizationAddressGroupServiceConnection()`.
+
+- `GOOGLE_CLOUD_CPP_ORGANIZATION_SECURITY_PROFILE_GROUP_SERVICE_ENDPOINT=...` overrides the
+  `EndpointOption` (which defaults to "networksecurity.googleapis.com")
+  used by `MakeOrganizationSecurityProfileGroupServiceConnection()`.
+
+- `GOOGLE_CLOUD_CPP_SECURITY_PROFILE_GROUP_SERVICE_ENDPOINT=...` overrides the
+  `EndpointOption` (which defaults to "networksecurity.googleapis.com")
+  used by `MakeSecurityProfileGroupServiceConnection()`.
+
+- `GOOGLE_CLOUD_CPP_SSE_REALM_SERVICE_ENDPOINT=...` overrides the
+  `EndpointOption` (which defaults to "networksecurity.googleapis.com")
+  used by `MakeSSERealmServiceConnection()`.
+
 <!-- inject-endpoint-env-vars-end -->
 
 @see google::cloud::EndpointOption

google/cloud/networksecurity/doc/environment-variables.dox

@@ -22,12 +22,26 @@ which should give you a taste of the Network Security API C++ client library API
 ## Main classes
 
 <!-- inject-client-list-start -->
-The main class in this library is
-[`networksecurity_v1::NetworkSecurityClient`](@ref google::cloud::networksecurity_v1::NetworkSecurityClient). All RPCs are exposed
-as member functions of this class. Other classes provide helpers, configuration
-parameters, and infrastructure to mock
-[`networksecurity_v1::NetworkSecurityClient`](@ref google::cloud::networksecurity_v1::NetworkSecurityClient) when testing your
+This library offers multiple `*Client` classes, which are listed below. Each one
+of these classes exposes all the RPCs for a service as member functions of the
+class. This library groups multiple services because they are part of the same
+product or are often used together. A typical example may be the administrative
+and data plane operations for a single product.
+
+The library also has other classes that provide helpers, configuration
+parameters, and infrastructure to mock the `*Client` classes when testing your
 application.
+
+- [\c networksecurity_v1::AddressGroupServiceClient](@ref google::cloud::networksecurity_v1::AddressGroupServiceClient)
+- [\c networksecurity_v1::DnsThreatDetectorServiceClient](@ref google::cloud::networksecurity_v1::DnsThreatDetectorServiceClient)
+- [\c networksecurity_v1::FirewallActivationClient](@ref google::cloud::networksecurity_v1::FirewallActivationClient)
+- [\c networksecurity_v1::InterceptClient](@ref google::cloud::networksecurity_v1::InterceptClient)
+- [\c networksecurity_v1::MirroringClient](@ref google::cloud::networksecurity_v1::MirroringClient)
+- [\c networksecurity_v1::NetworkSecurityClient](@ref google::cloud::networksecurity_v1::NetworkSecurityClient)
+- [\c networksecurity_v1::OrganizationAddressGroupServiceClient](@ref google::cloud::networksecurity_v1::OrganizationAddressGroupServiceClient)
+- [\c networksecurity_v1::OrganizationSecurityProfileGroupServiceClient](@ref google::cloud::networksecurity_v1::OrganizationSecurityProfileGroupServiceClient)
+- [\c networksecurity_v1::SecurityProfileGroupServiceClient](@ref google::cloud::networksecurity_v1::SecurityProfileGroupServiceClient)
+- [\c networksecurity_v1::SSERealmServiceClient](@ref google::cloud::networksecurity_v1::SSERealmServiceClient)
 <!-- inject-client-list-end -->
 
 ## More Information

google/cloud/networksecurity/doc/main.dox

@@ -9,7 +9,20 @@ this default. You can do so by providing the
 The following example shows how to explicitly load a service account key file:
 
 <!-- inject-service-account-snippet-start -->
-@snippet network_security_client_samples.cc with-service-account
+@snippet address_group_client_samples.cc with-service-account
+
+Follow these links to find examples for other \c *Client classes:
+
+- [\c networksecurity_v1::AddressGroupServiceClient](@ref networksecurity_v1::AddressGroupServiceClient-service-account-snippet)
+- [\c networksecurity_v1::DnsThreatDetectorServiceClient](@ref networksecurity_v1::DnsThreatDetectorServiceClient-service-account-snippet)
+- [\c networksecurity_v1::FirewallActivationClient](@ref networksecurity_v1::FirewallActivationClient-service-account-snippet)
+- [\c networksecurity_v1::InterceptClient](@ref networksecurity_v1::InterceptClient-service-account-snippet)
+- [\c networksecurity_v1::MirroringClient](@ref networksecurity_v1::MirroringClient-service-account-snippet)
+- [\c networksecurity_v1::NetworkSecurityClient](@ref networksecurity_v1::NetworkSecurityClient-service-account-snippet)
+- [\c networksecurity_v1::OrganizationAddressGroupServiceClient](@ref networksecurity_v1::OrganizationAddressGroupServiceClient-service-account-snippet)
+- [\c networksecurity_v1::OrganizationSecurityProfileGroupServiceClient](@ref networksecurity_v1::OrganizationSecurityProfileGroupServiceClient-service-account-snippet)
+- [\c networksecurity_v1::SecurityProfileGroupServiceClient](@ref networksecurity_v1::SecurityProfileGroupServiceClient-service-account-snippet)
+- [\c networksecurity_v1::SSERealmServiceClient](@ref networksecurity_v1::SSERealmServiceClient-service-account-snippet)
 
 <!-- inject-service-account-snippet-end -->
 
@@ -27,9 +40,63 @@ guide for more details.
 
 // <!-- inject-authentication-pages-start -->
 
+/*! @page networksecurity_v1::AddressGroupServiceClient-service-account-snippet Override networksecurity_v1::AddressGroupServiceClient Authentication Defaults
+
+@snippet google/cloud/networksecurity/v1/samples/address_group_client_samples.cc with-service-account
+
+*/
+
+/*! @page networksecurity_v1::DnsThreatDetectorServiceClient-service-account-snippet Override networksecurity_v1::DnsThreatDetectorServiceClient Authentication Defaults
+
+@snippet google/cloud/networksecurity/v1/samples/dns_threat_detector_client_samples.cc with-service-account
+
+*/
+
+/*! @page networksecurity_v1::FirewallActivationClient-service-account-snippet Override networksecurity_v1::FirewallActivationClient Authentication Defaults
+
+@snippet google/cloud/networksecurity/v1/samples/firewall_activation_client_samples.cc with-service-account
+
+*/
+
+/*! @page networksecurity_v1::InterceptClient-service-account-snippet Override networksecurity_v1::InterceptClient Authentication Defaults
+
+@snippet google/cloud/networksecurity/v1/samples/intercept_client_samples.cc with-service-account
+
+*/
+
+/*! @page networksecurity_v1::MirroringClient-service-account-snippet Override networksecurity_v1::MirroringClient Authentication Defaults
+
+@snippet google/cloud/networksecurity/v1/samples/mirroring_client_samples.cc with-service-account
+
+*/
+
 /*! @page networksecurity_v1::NetworkSecurityClient-service-account-snippet Override networksecurity_v1::NetworkSecurityClient Authentication Defaults
 
 @snippet google/cloud/networksecurity/v1/samples/network_security_client_samples.cc with-service-account
 
+*/
+
+/*! @page networksecurity_v1::OrganizationAddressGroupServiceClient-service-account-snippet Override networksecurity_v1::OrganizationAddressGroupServiceClient Authentication Defaults
+
+@snippet google/cloud/networksecurity/v1/samples/organization_address_group_client_samples.cc with-service-account
+
+*/
+
+/*! @page networksecurity_v1::OrganizationSecurityProfileGroupServiceClient-service-account-snippet Override networksecurity_v1::OrganizationSecurityProfileGroupServiceClient Authentication Defaults
+
+@snippet google/cloud/networksecurity/v1/samples/organization_security_profile_group_client_samples.cc with-service-account
+
+*/
+
+/*! @page networksecurity_v1::SecurityProfileGroupServiceClient-service-account-snippet Override networksecurity_v1::SecurityProfileGroupServiceClient Authentication Defaults
+
+@snippet google/cloud/networksecurity/v1/samples/security_profile_group_client_samples.cc with-service-account
+
+*/
+
+/*! @page networksecurity_v1::SSERealmServiceClient-service-account-snippet Override networksecurity_v1::SSERealmServiceClient Authentication Defaults
+
+@snippet google/cloud/networksecurity/v1/samples/sse_realm_client_samples.cc with-service-account
+
 */
 // <!-- inject-authentication-pages-end -->

google/cloud/networksecurity/doc/override-authentication.dox

@@ -7,19 +7,86 @@ library. Use the
 client library to change this default.
 
 <!-- inject-endpoint-snippet-start -->
-For example, this will override the default endpoint for `networksecurity_v1::NetworkSecurityClient`:
+For example, this will override the default endpoint for `networksecurity_v1::AddressGroupServiceClient`:
 
-@snippet network_security_client_samples.cc set-client-endpoint
+@snippet address_group_client_samples.cc set-client-endpoint
+
+Follow these links to find examples for other \c *Client classes:
+
+- [\c networksecurity_v1::AddressGroupServiceClient](@ref networksecurity_v1::AddressGroupServiceClient-endpoint-snippet)
+- [\c networksecurity_v1::DnsThreatDetectorServiceClient](@ref networksecurity_v1::DnsThreatDetectorServiceClient-endpoint-snippet)
+- [\c networksecurity_v1::FirewallActivationClient](@ref networksecurity_v1::FirewallActivationClient-endpoint-snippet)
+- [\c networksecurity_v1::InterceptClient](@ref networksecurity_v1::InterceptClient-endpoint-snippet)
+- [\c networksecurity_v1::MirroringClient](@ref networksecurity_v1::MirroringClient-endpoint-snippet)
+- [\c networksecurity_v1::NetworkSecurityClient](@ref networksecurity_v1::NetworkSecurityClient-endpoint-snippet)
+- [\c networksecurity_v1::OrganizationAddressGroupServiceClient](@ref networksecurity_v1::OrganizationAddressGroupServiceClient-endpoint-snippet)
+- [\c networksecurity_v1::OrganizationSecurityProfileGroupServiceClient](@ref networksecurity_v1::OrganizationSecurityProfileGroupServiceClient-endpoint-snippet)
+- [\c networksecurity_v1::SecurityProfileGroupServiceClient](@ref networksecurity_v1::SecurityProfileGroupServiceClient-endpoint-snippet)
+- [\c networksecurity_v1::SSERealmServiceClient](@ref networksecurity_v1::SSERealmServiceClient-endpoint-snippet)
 
 <!-- inject-endpoint-snippet-end -->
 
 */
 
 // <!-- inject-endpoint-pages-start -->
 
+/*! @page networksecurity_v1::AddressGroupServiceClient-endpoint-snippet Override networksecurity_v1::AddressGroupServiceClient Endpoint Configuration
+
+@snippet google/cloud/networksecurity/v1/samples/address_group_client_samples.cc set-client-endpoint
+
+*/
+
+/*! @page networksecurity_v1::DnsThreatDetectorServiceClient-endpoint-snippet Override networksecurity_v1::DnsThreatDetectorServiceClient Endpoint Configuration
+
+@snippet google/cloud/networksecurity/v1/samples/dns_threat_detector_client_samples.cc set-client-endpoint
+
+*/
+
+/*! @page networksecurity_v1::FirewallActivationClient-endpoint-snippet Override networksecurity_v1::FirewallActivationClient Endpoint Configuration
+
+@snippet google/cloud/networksecurity/v1/samples/firewall_activation_client_samples.cc set-client-endpoint
+
+*/
+
+/*! @page networksecurity_v1::InterceptClient-endpoint-snippet Override networksecurity_v1::InterceptClient Endpoint Configuration
+
+@snippet google/cloud/networksecurity/v1/samples/intercept_client_samples.cc set-client-endpoint
+
+*/
+
+/*! @page networksecurity_v1::MirroringClient-endpoint-snippet Override networksecurity_v1::MirroringClient Endpoint Configuration
+
+@snippet google/cloud/networksecurity/v1/samples/mirroring_client_samples.cc set-client-endpoint
+
+*/
+
 /*! @page networksecurity_v1::NetworkSecurityClient-endpoint-snippet Override networksecurity_v1::NetworkSecurityClient Endpoint Configuration
 
 @snippet google/cloud/networksecurity/v1/samples/network_security_client_samples.cc set-client-endpoint
 
+*/
+
+/*! @page networksecurity_v1::OrganizationAddressGroupServiceClient-endpoint-snippet Override networksecurity_v1::OrganizationAddressGroupServiceClient Endpoint Configuration
+
+@snippet google/cloud/networksecurity/v1/samples/organization_address_group_client_samples.cc set-client-endpoint
+
+*/
+
+/*! @page networksecurity_v1::OrganizationSecurityProfileGroupServiceClient-endpoint-snippet Override networksecurity_v1::OrganizationSecurityProfileGroupServiceClient Endpoint Configuration
+
+@snippet google/cloud/networksecurity/v1/samples/organization_security_profile_group_client_samples.cc set-client-endpoint
+
+*/
+
+/*! @page networksecurity_v1::SecurityProfileGroupServiceClient-endpoint-snippet Override networksecurity_v1::SecurityProfileGroupServiceClient Endpoint Configuration
+
+@snippet google/cloud/networksecurity/v1/samples/security_profile_group_client_samples.cc set-client-endpoint
+
+*/
+
+/*! @page networksecurity_v1::SSERealmServiceClient-endpoint-snippet Override networksecurity_v1::SSERealmServiceClient Endpoint Configuration
+
+@snippet google/cloud/networksecurity/v1/samples/sse_realm_client_samples.cc set-client-endpoint
+
 */
 // <!-- inject-endpoint-pages-end -->