diff --git a/generation_config.yaml b/generation_config.yaml
index ea21a2553df9..8c63eb11a9d7 100644
--- a/generation_config.yaml
+++ b/generation_config.yaml
@@ -1,5 +1,5 @@
 gapic_generator_version: 2.67.0
-googleapis_commitish: 47e44e0ff4b6aeecd2f2661c14c55e62c42d5ed8
+googleapis_commitish: dc505966accc82576fc1ebed3d7924fe9df4ab49
 libraries_bom_version: 26.76.0
 libraries:
 - api_shortname: accessapproval
diff --git a/java-network-management/google-cloud-network-management/src/main/java/com/google/cloud/networkmanagement/v1beta1/OrganizationVpcFlowLogsServiceClient.java b/java-network-management/google-cloud-network-management/src/main/java/com/google/cloud/networkmanagement/v1beta1/OrganizationVpcFlowLogsServiceClient.java
index e84cb6340424..0369ba06f2c2 100644
--- a/java-network-management/google-cloud-network-management/src/main/java/com/google/cloud/networkmanagement/v1beta1/OrganizationVpcFlowLogsServiceClient.java
+++ b/java-network-management/google-cloud-network-management/src/main/java/com/google/cloud/networkmanagement/v1beta1/OrganizationVpcFlowLogsServiceClient.java
@@ -190,7 +190,8 @@
  *    </tr>
  *    <tr>
  *      <td><p> ListLocations</td>
- *      <td><p> Lists information about the supported locations for this service.</td>
+ *      <td><p> Lists information about the supported locations for this service.This method can be called in two ways:
+ * <p> &#42;   &#42;&#42;List all public locations:&#42;&#42; Use the path `GET /v1/locations`.&#42;   &#42;&#42;List project-visible locations:&#42;&#42; Use the path`GET /v1/projects/{project_id}/locations`. This may include publiclocations as well as private or other locations specifically visibleto the project.</td>
  *      <td>
  *      <p>Request object method variants only take one parameter, a request object, which must be constructed before the call.</p>
  *      <ul>
@@ -1556,7 +1557,13 @@ public final OperationFuture<Empty, OperationMetadata> deleteVpcFlowLogsConfigAs
 
   // AUTO-GENERATED DOCUMENTATION AND METHOD.
   /**
-   * Lists information about the supported locations for this service.
+   * Lists information about the supported locations for this service.This method can be called in
+   * two ways:
+   *
+   * <p>&#42; &#42;&#42;List all public locations:&#42;&#42; Use the path `GET /v1/locations`.&#42;
+   * &#42;&#42;List project-visible locations:&#42;&#42; Use the path`GET
+   * /v1/projects/{project_id}/locations`. This may include publiclocations as well as private or
+   * other locations specifically visibleto the project.
    *
    * <p>Sample code:
    *
@@ -1591,7 +1598,13 @@ public final ListLocationsPagedResponse listLocations(ListLocationsRequest reque
 
   // AUTO-GENERATED DOCUMENTATION AND METHOD.
   /**
-   * Lists information about the supported locations for this service.
+   * Lists information about the supported locations for this service.This method can be called in
+   * two ways:
+   *
+   * <p>&#42; &#42;&#42;List all public locations:&#42;&#42; Use the path `GET /v1/locations`.&#42;
+   * &#42;&#42;List project-visible locations:&#42;&#42; Use the path`GET
+   * /v1/projects/{project_id}/locations`. This may include publiclocations as well as private or
+   * other locations specifically visibleto the project.
    *
    * <p>Sample code:
    *
@@ -1626,7 +1639,13 @@ public final ListLocationsPagedResponse listLocations(ListLocationsRequest reque
 
   // AUTO-GENERATED DOCUMENTATION AND METHOD.
   /**
-   * Lists information about the supported locations for this service.
+   * Lists information about the supported locations for this service.This method can be called in
+   * two ways:
+   *
+   * <p>&#42; &#42;&#42;List all public locations:&#42;&#42; Use the path `GET /v1/locations`.&#42;
+   * &#42;&#42;List project-visible locations:&#42;&#42; Use the path`GET
+   * /v1/projects/{project_id}/locations`. This may include publiclocations as well as private or
+   * other locations specifically visibleto the project.
    *
    * <p>Sample code:
    *
diff --git a/java-network-management/google-cloud-network-management/src/main/java/com/google/cloud/networkmanagement/v1beta1/ReachabilityServiceClient.java b/java-network-management/google-cloud-network-management/src/main/java/com/google/cloud/networkmanagement/v1beta1/ReachabilityServiceClient.java
index 3c4538723826..338b33344be0 100644
--- a/java-network-management/google-cloud-network-management/src/main/java/com/google/cloud/networkmanagement/v1beta1/ReachabilityServiceClient.java
+++ b/java-network-management/google-cloud-network-management/src/main/java/com/google/cloud/networkmanagement/v1beta1/ReachabilityServiceClient.java
@@ -184,7 +184,8 @@
  *    </tr>
  *    <tr>
  *      <td><p> ListLocations</td>
- *      <td><p> Lists information about the supported locations for this service.</td>
+ *      <td><p> Lists information about the supported locations for this service.This method can be called in two ways:
+ * <p> &#42;   &#42;&#42;List all public locations:&#42;&#42; Use the path `GET /v1/locations`.&#42;   &#42;&#42;List project-visible locations:&#42;&#42; Use the path`GET /v1/projects/{project_id}/locations`. This may include publiclocations as well as private or other locations specifically visibleto the project.</td>
  *      <td>
  *      <p>Request object method variants only take one parameter, a request object, which must be constructed before the call.</p>
  *      <ul>
@@ -1008,7 +1009,13 @@ public final OperationFuture<Empty, OperationMetadata> deleteConnectivityTestAsy
 
   // AUTO-GENERATED DOCUMENTATION AND METHOD.
   /**
-   * Lists information about the supported locations for this service.
+   * Lists information about the supported locations for this service.This method can be called in
+   * two ways:
+   *
+   * <p>&#42; &#42;&#42;List all public locations:&#42;&#42; Use the path `GET /v1/locations`.&#42;
+   * &#42;&#42;List project-visible locations:&#42;&#42; Use the path`GET
+   * /v1/projects/{project_id}/locations`. This may include publiclocations as well as private or
+   * other locations specifically visibleto the project.
    *
    * <p>Sample code:
    *
@@ -1041,7 +1048,13 @@ public final ListLocationsPagedResponse listLocations(ListLocationsRequest reque
 
   // AUTO-GENERATED DOCUMENTATION AND METHOD.
   /**
-   * Lists information about the supported locations for this service.
+   * Lists information about the supported locations for this service.This method can be called in
+   * two ways:
+   *
+   * <p>&#42; &#42;&#42;List all public locations:&#42;&#42; Use the path `GET /v1/locations`.&#42;
+   * &#42;&#42;List project-visible locations:&#42;&#42; Use the path`GET
+   * /v1/projects/{project_id}/locations`. This may include publiclocations as well as private or
+   * other locations specifically visibleto the project.
    *
    * <p>Sample code:
    *
@@ -1075,7 +1088,13 @@ public final ListLocationsPagedResponse listLocations(ListLocationsRequest reque
 
   // AUTO-GENERATED DOCUMENTATION AND METHOD.
   /**
-   * Lists information about the supported locations for this service.
+   * Lists information about the supported locations for this service.This method can be called in
+   * two ways:
+   *
+   * <p>&#42; &#42;&#42;List all public locations:&#42;&#42; Use the path `GET /v1/locations`.&#42;
+   * &#42;&#42;List project-visible locations:&#42;&#42; Use the path`GET
+   * /v1/projects/{project_id}/locations`. This may include publiclocations as well as private or
+   * other locations specifically visibleto the project.
    *
    * <p>Sample code:
    *
diff --git a/java-network-management/google-cloud-network-management/src/main/java/com/google/cloud/networkmanagement/v1beta1/VpcFlowLogsServiceClient.java b/java-network-management/google-cloud-network-management/src/main/java/com/google/cloud/networkmanagement/v1beta1/VpcFlowLogsServiceClient.java
index 588ef8dfa8d6..c96a77e2db23 100644
--- a/java-network-management/google-cloud-network-management/src/main/java/com/google/cloud/networkmanagement/v1beta1/VpcFlowLogsServiceClient.java
+++ b/java-network-management/google-cloud-network-management/src/main/java/com/google/cloud/networkmanagement/v1beta1/VpcFlowLogsServiceClient.java
@@ -219,7 +219,8 @@
  *    </tr>
  *    <tr>
  *      <td><p> ListLocations</td>
- *      <td><p> Lists information about the supported locations for this service.</td>
+ *      <td><p> Lists information about the supported locations for this service.This method can be called in two ways:
+ * <p> &#42;   &#42;&#42;List all public locations:&#42;&#42; Use the path `GET /v1/locations`.&#42;   &#42;&#42;List project-visible locations:&#42;&#42; Use the path`GET /v1/projects/{project_id}/locations`. This may include publiclocations as well as private or other locations specifically visibleto the project.</td>
  *      <td>
  *      <p>Request object method variants only take one parameter, a request object, which must be constructed before the call.</p>
  *      <ul>
@@ -1769,7 +1770,13 @@ public final ShowEffectiveFlowLogsConfigsPagedResponse showEffectiveFlowLogsConf
 
   // AUTO-GENERATED DOCUMENTATION AND METHOD.
   /**
-   * Lists information about the supported locations for this service.
+   * Lists information about the supported locations for this service.This method can be called in
+   * two ways:
+   *
+   * <p>&#42; &#42;&#42;List all public locations:&#42;&#42; Use the path `GET /v1/locations`.&#42;
+   * &#42;&#42;List project-visible locations:&#42;&#42; Use the path`GET
+   * /v1/projects/{project_id}/locations`. This may include publiclocations as well as private or
+   * other locations specifically visibleto the project.
    *
    * <p>Sample code:
    *
@@ -1802,7 +1809,13 @@ public final ListLocationsPagedResponse listLocations(ListLocationsRequest reque
 
   // AUTO-GENERATED DOCUMENTATION AND METHOD.
   /**
-   * Lists information about the supported locations for this service.
+   * Lists information about the supported locations for this service.This method can be called in
+   * two ways:
+   *
+   * <p>&#42; &#42;&#42;List all public locations:&#42;&#42; Use the path `GET /v1/locations`.&#42;
+   * &#42;&#42;List project-visible locations:&#42;&#42; Use the path`GET
+   * /v1/projects/{project_id}/locations`. This may include publiclocations as well as private or
+   * other locations specifically visibleto the project.
    *
    * <p>Sample code:
    *
@@ -1836,7 +1849,13 @@ public final ListLocationsPagedResponse listLocations(ListLocationsRequest reque
 
   // AUTO-GENERATED DOCUMENTATION AND METHOD.
   /**
-   * Lists information about the supported locations for this service.
+   * Lists information about the supported locations for this service.This method can be called in
+   * two ways:
+   *
+   * <p>&#42; &#42;&#42;List all public locations:&#42;&#42; Use the path `GET /v1/locations`.&#42;
+   * &#42;&#42;List project-visible locations:&#42;&#42; Use the path`GET
+   * /v1/projects/{project_id}/locations`. This may include publiclocations as well as private or
+   * other locations specifically visibleto the project.
    *
    * <p>Sample code:
    *
diff --git a/java-network-management/google-cloud-network-management/src/main/resources/META-INF/native-image/com.google.cloud.networkmanagement.v1beta1/reflect-config.json b/java-network-management/google-cloud-network-management/src/main/resources/META-INF/native-image/com.google.cloud.networkmanagement.v1beta1/reflect-config.json
index e723dac588c6..a94739d014dc 100644
--- a/java-network-management/google-cloud-network-management/src/main/resources/META-INF/native-image/com.google.cloud.networkmanagement.v1beta1/reflect-config.json
+++ b/java-network-management/google-cloud-network-management/src/main/resources/META-INF/native-image/com.google.cloud.networkmanagement.v1beta1/reflect-config.json
@@ -1070,6 +1070,51 @@
     "allDeclaredClasses": true,
     "allPublicClasses": true
   },
+  {
+    "name": "com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo$Reason",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
   {
     "name": "com.google.cloud.networkmanagement.v1beta1.GkePodInfo",
     "queryAllDeclaredConstructors": true,
@@ -1475,6 +1520,24 @@
     "allDeclaredClasses": true,
     "allPublicClasses": true
   },
+  {
+    "name": "com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
   {
     "name": "com.google.cloud.networkmanagement.v1beta1.OperationMetadata",
     "queryAllDeclaredConstructors": true,
diff --git a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/DropInfo.java b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/DropInfo.java
index adf7c01ae472..0a1a54e0c61e 100644
--- a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/DropInfo.java
+++ b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/DropInfo.java
@@ -1215,6 +1215,27 @@ public enum Cause implements com.google.protobuf.ProtocolMessageEnum {
      * <code>HYBRID_SUBNET_NO_ROUTE = 106;</code>
      */
     HYBRID_SUBNET_NO_ROUTE(106),
+    /**
+     *
+     *
+     * <pre>
+     * Packet is dropped by GKE Network Policy.
+     * </pre>
+     *
+     * <code>GKE_NETWORK_POLICY = 108;</code>
+     */
+    GKE_NETWORK_POLICY(108),
+    /**
+     *
+     *
+     * <pre>
+     * Packet is dropped because there is no valid matching route from the
+     * network of the Google-managed service to the destination.
+     * </pre>
+     *
+     * <code>NO_VALID_ROUTE_FROM_GOOGLE_MANAGED_NETWORK_TO_DESTINATION = 110;</code>
+     */
+    NO_VALID_ROUTE_FROM_GOOGLE_MANAGED_NETWORK_TO_DESTINATION(110),
     UNRECOGNIZED(-1),
     ;
 
@@ -2460,6 +2481,29 @@ public enum Cause implements com.google.protobuf.ProtocolMessageEnum {
      */
     public static final int HYBRID_SUBNET_NO_ROUTE_VALUE = 106;
 
+    /**
+     *
+     *
+     * <pre>
+     * Packet is dropped by GKE Network Policy.
+     * </pre>
+     *
+     * <code>GKE_NETWORK_POLICY = 108;</code>
+     */
+    public static final int GKE_NETWORK_POLICY_VALUE = 108;
+
+    /**
+     *
+     *
+     * <pre>
+     * Packet is dropped because there is no valid matching route from the
+     * network of the Google-managed service to the destination.
+     * </pre>
+     *
+     * <code>NO_VALID_ROUTE_FROM_GOOGLE_MANAGED_NETWORK_TO_DESTINATION = 110;</code>
+     */
+    public static final int NO_VALID_ROUTE_FROM_GOOGLE_MANAGED_NETWORK_TO_DESTINATION_VALUE = 110;
+
     public final int getNumber() {
       if (this == UNRECOGNIZED) {
         throw new java.lang.IllegalArgumentException(
@@ -2690,6 +2734,10 @@ public static Cause forNumber(int value) {
           return HYBRID_SUBNET_REGION_MISMATCH;
         case 106:
           return HYBRID_SUBNET_NO_ROUTE;
+        case 108:
+          return GKE_NETWORK_POLICY;
+        case 110:
+          return NO_VALID_ROUTE_FROM_GOOGLE_MANAGED_NETWORK_TO_DESTINATION;
         default:
           return null;
       }
diff --git a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/GkeNetworkPolicyInfo.java b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/GkeNetworkPolicyInfo.java
new file mode 100644
index 000000000000..078c840ed2e8
--- /dev/null
+++ b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/GkeNetworkPolicyInfo.java
@@ -0,0 +1,1199 @@
+/*
+ * Copyright 2026 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// NO CHECKED-IN PROTOBUF GENCODE
+// source: google/cloud/networkmanagement/v1beta1/trace.proto
+// Protobuf Java Version: 4.33.2
+
+package com.google.cloud.networkmanagement.v1beta1;
+
+/**
+ *
+ *
+ * <pre>
+ * For display only. Metadata associated with a GKE Network Policy.
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo}
+ */
+@com.google.protobuf.Generated
+public final class GkeNetworkPolicyInfo extends com.google.protobuf.GeneratedMessage
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo)
+    GkeNetworkPolicyInfoOrBuilder {
+  private static final long serialVersionUID = 0L;
+
+  static {
+    com.google.protobuf.RuntimeVersion.validateProtobufGencodeVersion(
+        com.google.protobuf.RuntimeVersion.RuntimeDomain.PUBLIC,
+        /* major= */ 4,
+        /* minor= */ 33,
+        /* patch= */ 2,
+        /* suffix= */ "",
+        "GkeNetworkPolicyInfo");
+  }
+
+  // Use GkeNetworkPolicyInfo.newBuilder() to construct.
+  private GkeNetworkPolicyInfo(com.google.protobuf.GeneratedMessage.Builder<?> builder) {
+    super(builder);
+  }
+
+  private GkeNetworkPolicyInfo() {
+    displayName_ = "";
+    uri_ = "";
+    direction_ = "";
+    action_ = "";
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.networkmanagement.v1beta1.TraceProto
+        .internal_static_google_cloud_networkmanagement_v1beta1_GkeNetworkPolicyInfo_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessage.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.networkmanagement.v1beta1.TraceProto
+        .internal_static_google_cloud_networkmanagement_v1beta1_GkeNetworkPolicyInfo_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo.class,
+            com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo.Builder.class);
+  }
+
+  public static final int DISPLAY_NAME_FIELD_NUMBER = 1;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object displayName_ = "";
+
+  /**
+   *
+   *
+   * <pre>
+   * The name of the Network Policy.
+   * </pre>
+   *
+   * <code>string display_name = 1;</code>
+   *
+   * @return The displayName.
+   */
+  @java.lang.Override
+  public java.lang.String getDisplayName() {
+    java.lang.Object ref = displayName_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      displayName_ = s;
+      return s;
+    }
+  }
+
+  /**
+   *
+   *
+   * <pre>
+   * The name of the Network Policy.
+   * </pre>
+   *
+   * <code>string display_name = 1;</code>
+   *
+   * @return The bytes for displayName.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getDisplayNameBytes() {
+    java.lang.Object ref = displayName_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      displayName_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int URI_FIELD_NUMBER = 2;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object uri_ = "";
+
+  /**
+   *
+   *
+   * <pre>
+   * The URI of the Network Policy.
+   * Format for a Network Policy in a zonal cluster:
+   * `projects/&lt;project_id&gt;/zones/&lt;zone&gt;/clusters/&lt;cluster&gt;/k8s/namespaces/&lt;namespace&gt;/networking.k8s.io/networkpolicies/&lt;networkpolicy&gt;`
+   * Format for a Network Policy in a regional cluster:
+   * `projects/&lt;project_id&gt;/locations/&lt;location&gt;/clusters/&lt;cluster&gt;/k8s/namespaces/&lt;namespace&gt;/networking.k8s.io/networkpolicies/&lt;networkpolicy&gt;`
+   * </pre>
+   *
+   * <code>string uri = 2;</code>
+   *
+   * @return The uri.
+   */
+  @java.lang.Override
+  public java.lang.String getUri() {
+    java.lang.Object ref = uri_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      uri_ = s;
+      return s;
+    }
+  }
+
+  /**
+   *
+   *
+   * <pre>
+   * The URI of the Network Policy.
+   * Format for a Network Policy in a zonal cluster:
+   * `projects/&lt;project_id&gt;/zones/&lt;zone&gt;/clusters/&lt;cluster&gt;/k8s/namespaces/&lt;namespace&gt;/networking.k8s.io/networkpolicies/&lt;networkpolicy&gt;`
+   * Format for a Network Policy in a regional cluster:
+   * `projects/&lt;project_id&gt;/locations/&lt;location&gt;/clusters/&lt;cluster&gt;/k8s/namespaces/&lt;namespace&gt;/networking.k8s.io/networkpolicies/&lt;networkpolicy&gt;`
+   * </pre>
+   *
+   * <code>string uri = 2;</code>
+   *
+   * @return The bytes for uri.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getUriBytes() {
+    java.lang.Object ref = uri_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      uri_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int DIRECTION_FIELD_NUMBER = 3;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object direction_ = "";
+
+  /**
+   *
+   *
+   * <pre>
+   * Possible values: INGRESS, EGRESS
+   * </pre>
+   *
+   * <code>string direction = 3;</code>
+   *
+   * @return The direction.
+   */
+  @java.lang.Override
+  public java.lang.String getDirection() {
+    java.lang.Object ref = direction_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      direction_ = s;
+      return s;
+    }
+  }
+
+  /**
+   *
+   *
+   * <pre>
+   * Possible values: INGRESS, EGRESS
+   * </pre>
+   *
+   * <code>string direction = 3;</code>
+   *
+   * @return The bytes for direction.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getDirectionBytes() {
+    java.lang.Object ref = direction_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      direction_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int ACTION_FIELD_NUMBER = 4;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object action_ = "";
+
+  /**
+   *
+   *
+   * <pre>
+   * Possible values: ALLOW, DENY
+   * </pre>
+   *
+   * <code>string action = 4;</code>
+   *
+   * @return The action.
+   */
+  @java.lang.Override
+  public java.lang.String getAction() {
+    java.lang.Object ref = action_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      action_ = s;
+      return s;
+    }
+  }
+
+  /**
+   *
+   *
+   * <pre>
+   * Possible values: ALLOW, DENY
+   * </pre>
+   *
+   * <code>string action = 4;</code>
+   *
+   * @return The bytes for action.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getActionBytes() {
+    java.lang.Object ref = action_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      action_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (!com.google.protobuf.GeneratedMessage.isStringEmpty(displayName_)) {
+      com.google.protobuf.GeneratedMessage.writeString(output, 1, displayName_);
+    }
+    if (!com.google.protobuf.GeneratedMessage.isStringEmpty(uri_)) {
+      com.google.protobuf.GeneratedMessage.writeString(output, 2, uri_);
+    }
+    if (!com.google.protobuf.GeneratedMessage.isStringEmpty(direction_)) {
+      com.google.protobuf.GeneratedMessage.writeString(output, 3, direction_);
+    }
+    if (!com.google.protobuf.GeneratedMessage.isStringEmpty(action_)) {
+      com.google.protobuf.GeneratedMessage.writeString(output, 4, action_);
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (!com.google.protobuf.GeneratedMessage.isStringEmpty(displayName_)) {
+      size += com.google.protobuf.GeneratedMessage.computeStringSize(1, displayName_);
+    }
+    if (!com.google.protobuf.GeneratedMessage.isStringEmpty(uri_)) {
+      size += com.google.protobuf.GeneratedMessage.computeStringSize(2, uri_);
+    }
+    if (!com.google.protobuf.GeneratedMessage.isStringEmpty(direction_)) {
+      size += com.google.protobuf.GeneratedMessage.computeStringSize(3, direction_);
+    }
+    if (!com.google.protobuf.GeneratedMessage.isStringEmpty(action_)) {
+      size += com.google.protobuf.GeneratedMessage.computeStringSize(4, action_);
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo other =
+        (com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo) obj;
+
+    if (!getDisplayName().equals(other.getDisplayName())) return false;
+    if (!getUri().equals(other.getUri())) return false;
+    if (!getDirection().equals(other.getDirection())) return false;
+    if (!getAction().equals(other.getAction())) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + DISPLAY_NAME_FIELD_NUMBER;
+    hash = (53 * hash) + getDisplayName().hashCode();
+    hash = (37 * hash) + URI_FIELD_NUMBER;
+    hash = (53 * hash) + getUri().hashCode();
+    hash = (37 * hash) + DIRECTION_FIELD_NUMBER;
+    hash = (53 * hash) + getDirection().hashCode();
+    hash = (37 * hash) + ACTION_FIELD_NUMBER;
+    hash = (53 * hash) + getAction().hashCode();
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo parseFrom(
+      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo parseFrom(
+      byte[] data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessage.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessage.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo parseDelimitedFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessage.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo parseDelimitedFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessage.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessage.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessage.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(
+      com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessage.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+
+  /**
+   *
+   *
+   * <pre>
+   * For display only. Metadata associated with a GKE Network Policy.
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessage.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo)
+      com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfoOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.networkmanagement.v1beta1.TraceProto
+          .internal_static_google_cloud_networkmanagement_v1beta1_GkeNetworkPolicyInfo_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessage.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.networkmanagement.v1beta1.TraceProto
+          .internal_static_google_cloud_networkmanagement_v1beta1_GkeNetworkPolicyInfo_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo.class,
+              com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo.Builder.class);
+    }
+
+    // Construct using com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessage.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      displayName_ = "";
+      uri_ = "";
+      direction_ = "";
+      action_ = "";
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.networkmanagement.v1beta1.TraceProto
+          .internal_static_google_cloud_networkmanagement_v1beta1_GkeNetworkPolicyInfo_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo
+        getDefaultInstanceForType() {
+      return com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo.getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo build() {
+      com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo buildPartial() {
+      com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo result =
+          new com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(
+        com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.displayName_ = displayName_;
+      }
+      if (((from_bitField0_ & 0x00000002) != 0)) {
+        result.uri_ = uri_;
+      }
+      if (((from_bitField0_ & 0x00000004) != 0)) {
+        result.direction_ = direction_;
+      }
+      if (((from_bitField0_ & 0x00000008) != 0)) {
+        result.action_ = action_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo) {
+        return mergeFrom((com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(
+        com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo other) {
+      if (other
+          == com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo.getDefaultInstance())
+        return this;
+      if (!other.getDisplayName().isEmpty()) {
+        displayName_ = other.displayName_;
+        bitField0_ |= 0x00000001;
+        onChanged();
+      }
+      if (!other.getUri().isEmpty()) {
+        uri_ = other.uri_;
+        bitField0_ |= 0x00000002;
+        onChanged();
+      }
+      if (!other.getDirection().isEmpty()) {
+        direction_ = other.direction_;
+        bitField0_ |= 0x00000004;
+        onChanged();
+      }
+      if (!other.getAction().isEmpty()) {
+        action_ = other.action_;
+        bitField0_ |= 0x00000008;
+        onChanged();
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                displayName_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 10
+            case 18:
+              {
+                uri_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000002;
+                break;
+              } // case 18
+            case 26:
+              {
+                direction_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000004;
+                break;
+              } // case 26
+            case 34:
+              {
+                action_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000008;
+                break;
+              } // case 34
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private java.lang.Object displayName_ = "";
+
+    /**
+     *
+     *
+     * <pre>
+     * The name of the Network Policy.
+     * </pre>
+     *
+     * <code>string display_name = 1;</code>
+     *
+     * @return The displayName.
+     */
+    public java.lang.String getDisplayName() {
+      java.lang.Object ref = displayName_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        displayName_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * The name of the Network Policy.
+     * </pre>
+     *
+     * <code>string display_name = 1;</code>
+     *
+     * @return The bytes for displayName.
+     */
+    public com.google.protobuf.ByteString getDisplayNameBytes() {
+      java.lang.Object ref = displayName_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        displayName_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * The name of the Network Policy.
+     * </pre>
+     *
+     * <code>string display_name = 1;</code>
+     *
+     * @param value The displayName to set.
+     * @return This builder for chaining.
+     */
+    public Builder setDisplayName(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      displayName_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * The name of the Network Policy.
+     * </pre>
+     *
+     * <code>string display_name = 1;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearDisplayName() {
+      displayName_ = getDefaultInstance().getDisplayName();
+      bitField0_ = (bitField0_ & ~0x00000001);
+      onChanged();
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * The name of the Network Policy.
+     * </pre>
+     *
+     * <code>string display_name = 1;</code>
+     *
+     * @param value The bytes for displayName to set.
+     * @return This builder for chaining.
+     */
+    public Builder setDisplayNameBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      displayName_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object uri_ = "";
+
+    /**
+     *
+     *
+     * <pre>
+     * The URI of the Network Policy.
+     * Format for a Network Policy in a zonal cluster:
+     * `projects/&lt;project_id&gt;/zones/&lt;zone&gt;/clusters/&lt;cluster&gt;/k8s/namespaces/&lt;namespace&gt;/networking.k8s.io/networkpolicies/&lt;networkpolicy&gt;`
+     * Format for a Network Policy in a regional cluster:
+     * `projects/&lt;project_id&gt;/locations/&lt;location&gt;/clusters/&lt;cluster&gt;/k8s/namespaces/&lt;namespace&gt;/networking.k8s.io/networkpolicies/&lt;networkpolicy&gt;`
+     * </pre>
+     *
+     * <code>string uri = 2;</code>
+     *
+     * @return The uri.
+     */
+    public java.lang.String getUri() {
+      java.lang.Object ref = uri_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        uri_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * The URI of the Network Policy.
+     * Format for a Network Policy in a zonal cluster:
+     * `projects/&lt;project_id&gt;/zones/&lt;zone&gt;/clusters/&lt;cluster&gt;/k8s/namespaces/&lt;namespace&gt;/networking.k8s.io/networkpolicies/&lt;networkpolicy&gt;`
+     * Format for a Network Policy in a regional cluster:
+     * `projects/&lt;project_id&gt;/locations/&lt;location&gt;/clusters/&lt;cluster&gt;/k8s/namespaces/&lt;namespace&gt;/networking.k8s.io/networkpolicies/&lt;networkpolicy&gt;`
+     * </pre>
+     *
+     * <code>string uri = 2;</code>
+     *
+     * @return The bytes for uri.
+     */
+    public com.google.protobuf.ByteString getUriBytes() {
+      java.lang.Object ref = uri_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        uri_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * The URI of the Network Policy.
+     * Format for a Network Policy in a zonal cluster:
+     * `projects/&lt;project_id&gt;/zones/&lt;zone&gt;/clusters/&lt;cluster&gt;/k8s/namespaces/&lt;namespace&gt;/networking.k8s.io/networkpolicies/&lt;networkpolicy&gt;`
+     * Format for a Network Policy in a regional cluster:
+     * `projects/&lt;project_id&gt;/locations/&lt;location&gt;/clusters/&lt;cluster&gt;/k8s/namespaces/&lt;namespace&gt;/networking.k8s.io/networkpolicies/&lt;networkpolicy&gt;`
+     * </pre>
+     *
+     * <code>string uri = 2;</code>
+     *
+     * @param value The uri to set.
+     * @return This builder for chaining.
+     */
+    public Builder setUri(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      uri_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * The URI of the Network Policy.
+     * Format for a Network Policy in a zonal cluster:
+     * `projects/&lt;project_id&gt;/zones/&lt;zone&gt;/clusters/&lt;cluster&gt;/k8s/namespaces/&lt;namespace&gt;/networking.k8s.io/networkpolicies/&lt;networkpolicy&gt;`
+     * Format for a Network Policy in a regional cluster:
+     * `projects/&lt;project_id&gt;/locations/&lt;location&gt;/clusters/&lt;cluster&gt;/k8s/namespaces/&lt;namespace&gt;/networking.k8s.io/networkpolicies/&lt;networkpolicy&gt;`
+     * </pre>
+     *
+     * <code>string uri = 2;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearUri() {
+      uri_ = getDefaultInstance().getUri();
+      bitField0_ = (bitField0_ & ~0x00000002);
+      onChanged();
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * The URI of the Network Policy.
+     * Format for a Network Policy in a zonal cluster:
+     * `projects/&lt;project_id&gt;/zones/&lt;zone&gt;/clusters/&lt;cluster&gt;/k8s/namespaces/&lt;namespace&gt;/networking.k8s.io/networkpolicies/&lt;networkpolicy&gt;`
+     * Format for a Network Policy in a regional cluster:
+     * `projects/&lt;project_id&gt;/locations/&lt;location&gt;/clusters/&lt;cluster&gt;/k8s/namespaces/&lt;namespace&gt;/networking.k8s.io/networkpolicies/&lt;networkpolicy&gt;`
+     * </pre>
+     *
+     * <code>string uri = 2;</code>
+     *
+     * @param value The bytes for uri to set.
+     * @return This builder for chaining.
+     */
+    public Builder setUriBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      uri_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object direction_ = "";
+
+    /**
+     *
+     *
+     * <pre>
+     * Possible values: INGRESS, EGRESS
+     * </pre>
+     *
+     * <code>string direction = 3;</code>
+     *
+     * @return The direction.
+     */
+    public java.lang.String getDirection() {
+      java.lang.Object ref = direction_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        direction_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Possible values: INGRESS, EGRESS
+     * </pre>
+     *
+     * <code>string direction = 3;</code>
+     *
+     * @return The bytes for direction.
+     */
+    public com.google.protobuf.ByteString getDirectionBytes() {
+      java.lang.Object ref = direction_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        direction_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Possible values: INGRESS, EGRESS
+     * </pre>
+     *
+     * <code>string direction = 3;</code>
+     *
+     * @param value The direction to set.
+     * @return This builder for chaining.
+     */
+    public Builder setDirection(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      direction_ = value;
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Possible values: INGRESS, EGRESS
+     * </pre>
+     *
+     * <code>string direction = 3;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearDirection() {
+      direction_ = getDefaultInstance().getDirection();
+      bitField0_ = (bitField0_ & ~0x00000004);
+      onChanged();
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Possible values: INGRESS, EGRESS
+     * </pre>
+     *
+     * <code>string direction = 3;</code>
+     *
+     * @param value The bytes for direction to set.
+     * @return This builder for chaining.
+     */
+    public Builder setDirectionBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      direction_ = value;
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object action_ = "";
+
+    /**
+     *
+     *
+     * <pre>
+     * Possible values: ALLOW, DENY
+     * </pre>
+     *
+     * <code>string action = 4;</code>
+     *
+     * @return The action.
+     */
+    public java.lang.String getAction() {
+      java.lang.Object ref = action_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        action_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Possible values: ALLOW, DENY
+     * </pre>
+     *
+     * <code>string action = 4;</code>
+     *
+     * @return The bytes for action.
+     */
+    public com.google.protobuf.ByteString getActionBytes() {
+      java.lang.Object ref = action_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        action_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Possible values: ALLOW, DENY
+     * </pre>
+     *
+     * <code>string action = 4;</code>
+     *
+     * @param value The action to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAction(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      action_ = value;
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Possible values: ALLOW, DENY
+     * </pre>
+     *
+     * <code>string action = 4;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearAction() {
+      action_ = getDefaultInstance().getAction();
+      bitField0_ = (bitField0_ & ~0x00000008);
+      onChanged();
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Possible values: ALLOW, DENY
+     * </pre>
+     *
+     * <code>string action = 4;</code>
+     *
+     * @param value The bytes for action to set.
+     * @return This builder for chaining.
+     */
+    public Builder setActionBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      action_ = value;
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo)
+  private static final com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo
+      DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo();
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo
+      getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<GkeNetworkPolicyInfo> PARSER =
+      new com.google.protobuf.AbstractParser<GkeNetworkPolicyInfo>() {
+        @java.lang.Override
+        public GkeNetworkPolicyInfo parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<GkeNetworkPolicyInfo> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<GkeNetworkPolicyInfo> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo
+      getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/GkeNetworkPolicyInfoOrBuilder.java b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/GkeNetworkPolicyInfoOrBuilder.java
new file mode 100644
index 000000000000..f36aa2131040
--- /dev/null
+++ b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/GkeNetworkPolicyInfoOrBuilder.java
@@ -0,0 +1,140 @@
+/*
+ * Copyright 2026 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// NO CHECKED-IN PROTOBUF GENCODE
+// source: google/cloud/networkmanagement/v1beta1/trace.proto
+// Protobuf Java Version: 4.33.2
+
+package com.google.cloud.networkmanagement.v1beta1;
+
+@com.google.protobuf.Generated
+public interface GkeNetworkPolicyInfoOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * The name of the Network Policy.
+   * </pre>
+   *
+   * <code>string display_name = 1;</code>
+   *
+   * @return The displayName.
+   */
+  java.lang.String getDisplayName();
+
+  /**
+   *
+   *
+   * <pre>
+   * The name of the Network Policy.
+   * </pre>
+   *
+   * <code>string display_name = 1;</code>
+   *
+   * @return The bytes for displayName.
+   */
+  com.google.protobuf.ByteString getDisplayNameBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * The URI of the Network Policy.
+   * Format for a Network Policy in a zonal cluster:
+   * `projects/&lt;project_id&gt;/zones/&lt;zone&gt;/clusters/&lt;cluster&gt;/k8s/namespaces/&lt;namespace&gt;/networking.k8s.io/networkpolicies/&lt;networkpolicy&gt;`
+   * Format for a Network Policy in a regional cluster:
+   * `projects/&lt;project_id&gt;/locations/&lt;location&gt;/clusters/&lt;cluster&gt;/k8s/namespaces/&lt;namespace&gt;/networking.k8s.io/networkpolicies/&lt;networkpolicy&gt;`
+   * </pre>
+   *
+   * <code>string uri = 2;</code>
+   *
+   * @return The uri.
+   */
+  java.lang.String getUri();
+
+  /**
+   *
+   *
+   * <pre>
+   * The URI of the Network Policy.
+   * Format for a Network Policy in a zonal cluster:
+   * `projects/&lt;project_id&gt;/zones/&lt;zone&gt;/clusters/&lt;cluster&gt;/k8s/namespaces/&lt;namespace&gt;/networking.k8s.io/networkpolicies/&lt;networkpolicy&gt;`
+   * Format for a Network Policy in a regional cluster:
+   * `projects/&lt;project_id&gt;/locations/&lt;location&gt;/clusters/&lt;cluster&gt;/k8s/namespaces/&lt;namespace&gt;/networking.k8s.io/networkpolicies/&lt;networkpolicy&gt;`
+   * </pre>
+   *
+   * <code>string uri = 2;</code>
+   *
+   * @return The bytes for uri.
+   */
+  com.google.protobuf.ByteString getUriBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Possible values: INGRESS, EGRESS
+   * </pre>
+   *
+   * <code>string direction = 3;</code>
+   *
+   * @return The direction.
+   */
+  java.lang.String getDirection();
+
+  /**
+   *
+   *
+   * <pre>
+   * Possible values: INGRESS, EGRESS
+   * </pre>
+   *
+   * <code>string direction = 3;</code>
+   *
+   * @return The bytes for direction.
+   */
+  com.google.protobuf.ByteString getDirectionBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Possible values: ALLOW, DENY
+   * </pre>
+   *
+   * <code>string action = 4;</code>
+   *
+   * @return The action.
+   */
+  java.lang.String getAction();
+
+  /**
+   *
+   *
+   * <pre>
+   * Possible values: ALLOW, DENY
+   * </pre>
+   *
+   * <code>string action = 4;</code>
+   *
+   * @return The bytes for action.
+   */
+  com.google.protobuf.ByteString getActionBytes();
+}
diff --git a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/GkeNetworkPolicySkippedInfo.java b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/GkeNetworkPolicySkippedInfo.java
new file mode 100644
index 000000000000..a0fcb920665d
--- /dev/null
+++ b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/GkeNetworkPolicySkippedInfo.java
@@ -0,0 +1,843 @@
+/*
+ * Copyright 2026 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// NO CHECKED-IN PROTOBUF GENCODE
+// source: google/cloud/networkmanagement/v1beta1/trace.proto
+// Protobuf Java Version: 4.33.2
+
+package com.google.cloud.networkmanagement.v1beta1;
+
+/**
+ *
+ *
+ * <pre>
+ * For display only. Contains information about why GKE Network Policy
+ * evaluation was skipped.
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo}
+ */
+@com.google.protobuf.Generated
+public final class GkeNetworkPolicySkippedInfo extends com.google.protobuf.GeneratedMessage
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo)
+    GkeNetworkPolicySkippedInfoOrBuilder {
+  private static final long serialVersionUID = 0L;
+
+  static {
+    com.google.protobuf.RuntimeVersion.validateProtobufGencodeVersion(
+        com.google.protobuf.RuntimeVersion.RuntimeDomain.PUBLIC,
+        /* major= */ 4,
+        /* minor= */ 33,
+        /* patch= */ 2,
+        /* suffix= */ "",
+        "GkeNetworkPolicySkippedInfo");
+  }
+
+  // Use GkeNetworkPolicySkippedInfo.newBuilder() to construct.
+  private GkeNetworkPolicySkippedInfo(com.google.protobuf.GeneratedMessage.Builder<?> builder) {
+    super(builder);
+  }
+
+  private GkeNetworkPolicySkippedInfo() {
+    reason_ = 0;
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.networkmanagement.v1beta1.TraceProto
+        .internal_static_google_cloud_networkmanagement_v1beta1_GkeNetworkPolicySkippedInfo_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessage.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.networkmanagement.v1beta1.TraceProto
+        .internal_static_google_cloud_networkmanagement_v1beta1_GkeNetworkPolicySkippedInfo_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.class,
+            com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Builder.class);
+  }
+
+  /**
+   * Protobuf enum {@code google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason}
+   */
+  public enum Reason implements com.google.protobuf.ProtocolMessageEnum {
+    /**
+     *
+     *
+     * <pre>
+     * Unused default value.
+     * </pre>
+     *
+     * <code>REASON_UNSPECIFIED = 0;</code>
+     */
+    REASON_UNSPECIFIED(0),
+    /**
+     *
+     *
+     * <pre>
+     * Network Policy is disabled on the cluster.
+     * </pre>
+     *
+     * <code>NETWORK_POLICY_DISABLED = 1;</code>
+     */
+    NETWORK_POLICY_DISABLED(1),
+    /**
+     *
+     *
+     * <pre>
+     * Ingress traffic to a Pod from a source on the same Node is always
+     * allowed.
+     * </pre>
+     *
+     * <code>INGRESS_SOURCE_ON_SAME_NODE = 2;</code>
+     */
+    INGRESS_SOURCE_ON_SAME_NODE(2),
+    /**
+     *
+     *
+     * <pre>
+     * Egress traffic from a Pod that uses the Node's network namespace is not
+     * subject to Network Policy.
+     * </pre>
+     *
+     * <code>EGRESS_FROM_NODE_NETWORK_NAMESPACE_POD = 3;</code>
+     */
+    EGRESS_FROM_NODE_NETWORK_NAMESPACE_POD(3),
+    /**
+     *
+     *
+     * <pre>
+     * Network Policy is not applied to response traffic. This is because GKE
+     * Network Policy evaluation is stateful in both GKE Dataplane V2 (eBPF) and
+     * legacy (iptables) implementations.
+     * </pre>
+     *
+     * <code>NETWORK_POLICY_NOT_APPLIED_TO_RESPONSE_TRAFFIC = 4;</code>
+     */
+    NETWORK_POLICY_NOT_APPLIED_TO_RESPONSE_TRAFFIC(4),
+    /**
+     *
+     *
+     * <pre>
+     * Network Policy evaluation is currently not supported for clusters with
+     * FQDN Network Policies enabled.
+     * </pre>
+     *
+     * <code>NETWORK_POLICY_ANALYSIS_UNSUPPORTED = 100;</code>
+     */
+    NETWORK_POLICY_ANALYSIS_UNSUPPORTED(100),
+    UNRECOGNIZED(-1),
+    ;
+
+    static {
+      com.google.protobuf.RuntimeVersion.validateProtobufGencodeVersion(
+          com.google.protobuf.RuntimeVersion.RuntimeDomain.PUBLIC,
+          /* major= */ 4,
+          /* minor= */ 33,
+          /* patch= */ 2,
+          /* suffix= */ "",
+          "Reason");
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Unused default value.
+     * </pre>
+     *
+     * <code>REASON_UNSPECIFIED = 0;</code>
+     */
+    public static final int REASON_UNSPECIFIED_VALUE = 0;
+
+    /**
+     *
+     *
+     * <pre>
+     * Network Policy is disabled on the cluster.
+     * </pre>
+     *
+     * <code>NETWORK_POLICY_DISABLED = 1;</code>
+     */
+    public static final int NETWORK_POLICY_DISABLED_VALUE = 1;
+
+    /**
+     *
+     *
+     * <pre>
+     * Ingress traffic to a Pod from a source on the same Node is always
+     * allowed.
+     * </pre>
+     *
+     * <code>INGRESS_SOURCE_ON_SAME_NODE = 2;</code>
+     */
+    public static final int INGRESS_SOURCE_ON_SAME_NODE_VALUE = 2;
+
+    /**
+     *
+     *
+     * <pre>
+     * Egress traffic from a Pod that uses the Node's network namespace is not
+     * subject to Network Policy.
+     * </pre>
+     *
+     * <code>EGRESS_FROM_NODE_NETWORK_NAMESPACE_POD = 3;</code>
+     */
+    public static final int EGRESS_FROM_NODE_NETWORK_NAMESPACE_POD_VALUE = 3;
+
+    /**
+     *
+     *
+     * <pre>
+     * Network Policy is not applied to response traffic. This is because GKE
+     * Network Policy evaluation is stateful in both GKE Dataplane V2 (eBPF) and
+     * legacy (iptables) implementations.
+     * </pre>
+     *
+     * <code>NETWORK_POLICY_NOT_APPLIED_TO_RESPONSE_TRAFFIC = 4;</code>
+     */
+    public static final int NETWORK_POLICY_NOT_APPLIED_TO_RESPONSE_TRAFFIC_VALUE = 4;
+
+    /**
+     *
+     *
+     * <pre>
+     * Network Policy evaluation is currently not supported for clusters with
+     * FQDN Network Policies enabled.
+     * </pre>
+     *
+     * <code>NETWORK_POLICY_ANALYSIS_UNSUPPORTED = 100;</code>
+     */
+    public static final int NETWORK_POLICY_ANALYSIS_UNSUPPORTED_VALUE = 100;
+
+    public final int getNumber() {
+      if (this == UNRECOGNIZED) {
+        throw new java.lang.IllegalArgumentException(
+            "Can't get the number of an unknown enum value.");
+      }
+      return value;
+    }
+
+    /**
+     * @param value The numeric wire value of the corresponding enum entry.
+     * @return The enum associated with the given numeric wire value.
+     * @deprecated Use {@link #forNumber(int)} instead.
+     */
+    @java.lang.Deprecated
+    public static Reason valueOf(int value) {
+      return forNumber(value);
+    }
+
+    /**
+     * @param value The numeric wire value of the corresponding enum entry.
+     * @return The enum associated with the given numeric wire value.
+     */
+    public static Reason forNumber(int value) {
+      switch (value) {
+        case 0:
+          return REASON_UNSPECIFIED;
+        case 1:
+          return NETWORK_POLICY_DISABLED;
+        case 2:
+          return INGRESS_SOURCE_ON_SAME_NODE;
+        case 3:
+          return EGRESS_FROM_NODE_NETWORK_NAMESPACE_POD;
+        case 4:
+          return NETWORK_POLICY_NOT_APPLIED_TO_RESPONSE_TRAFFIC;
+        case 100:
+          return NETWORK_POLICY_ANALYSIS_UNSUPPORTED;
+        default:
+          return null;
+      }
+    }
+
+    public static com.google.protobuf.Internal.EnumLiteMap<Reason> internalGetValueMap() {
+      return internalValueMap;
+    }
+
+    private static final com.google.protobuf.Internal.EnumLiteMap<Reason> internalValueMap =
+        new com.google.protobuf.Internal.EnumLiteMap<Reason>() {
+          public Reason findValueByNumber(int number) {
+            return Reason.forNumber(number);
+          }
+        };
+
+    public final com.google.protobuf.Descriptors.EnumValueDescriptor getValueDescriptor() {
+      if (this == UNRECOGNIZED) {
+        throw new java.lang.IllegalStateException(
+            "Can't get the descriptor of an unrecognized enum value.");
+      }
+      return getDescriptor().getValues().get(ordinal());
+    }
+
+    public final com.google.protobuf.Descriptors.EnumDescriptor getDescriptorForType() {
+      return getDescriptor();
+    }
+
+    public static com.google.protobuf.Descriptors.EnumDescriptor getDescriptor() {
+      return com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.getDescriptor()
+          .getEnumTypes()
+          .get(0);
+    }
+
+    private static final Reason[] VALUES = values();
+
+    public static Reason valueOf(com.google.protobuf.Descriptors.EnumValueDescriptor desc) {
+      if (desc.getType() != getDescriptor()) {
+        throw new java.lang.IllegalArgumentException("EnumValueDescriptor is not for this type.");
+      }
+      if (desc.getIndex() == -1) {
+        return UNRECOGNIZED;
+      }
+      return VALUES[desc.getIndex()];
+    }
+
+    private final int value;
+
+    private Reason(int value) {
+      this.value = value;
+    }
+
+    // @@protoc_insertion_point(enum_scope:google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason)
+  }
+
+  public static final int REASON_FIELD_NUMBER = 1;
+  private int reason_ = 0;
+
+  /**
+   *
+   *
+   * <pre>
+   * Reason why Network Policy evaluation was skipped.
+   * </pre>
+   *
+   * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason reason = 1;
+   * </code>
+   *
+   * @return The enum numeric value on the wire for reason.
+   */
+  @java.lang.Override
+  public int getReasonValue() {
+    return reason_;
+  }
+
+  /**
+   *
+   *
+   * <pre>
+   * Reason why Network Policy evaluation was skipped.
+   * </pre>
+   *
+   * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason reason = 1;
+   * </code>
+   *
+   * @return The reason.
+   */
+  @java.lang.Override
+  public com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason getReason() {
+    com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason result =
+        com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason.forNumber(
+            reason_);
+    return result == null
+        ? com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason.UNRECOGNIZED
+        : result;
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (reason_
+        != com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason
+            .REASON_UNSPECIFIED
+            .getNumber()) {
+      output.writeEnum(1, reason_);
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (reason_
+        != com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason
+            .REASON_UNSPECIFIED
+            .getNumber()) {
+      size += com.google.protobuf.CodedOutputStream.computeEnumSize(1, reason_);
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo other =
+        (com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo) obj;
+
+    if (reason_ != other.reason_) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + REASON_FIELD_NUMBER;
+    hash = (53 * hash) + reason_;
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo parseFrom(
+      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo parseFrom(
+      byte[] data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessage.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessage.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo
+      parseDelimitedFrom(java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessage.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo
+      parseDelimitedFrom(
+          java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+          throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessage.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessage.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessage.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(
+      com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessage.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+
+  /**
+   *
+   *
+   * <pre>
+   * For display only. Contains information about why GKE Network Policy
+   * evaluation was skipped.
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessage.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo)
+      com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfoOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.networkmanagement.v1beta1.TraceProto
+          .internal_static_google_cloud_networkmanagement_v1beta1_GkeNetworkPolicySkippedInfo_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessage.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.networkmanagement.v1beta1.TraceProto
+          .internal_static_google_cloud_networkmanagement_v1beta1_GkeNetworkPolicySkippedInfo_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.class,
+              com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Builder.class);
+    }
+
+    // Construct using
+    // com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessage.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      reason_ = 0;
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.networkmanagement.v1beta1.TraceProto
+          .internal_static_google_cloud_networkmanagement_v1beta1_GkeNetworkPolicySkippedInfo_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo
+        getDefaultInstanceForType() {
+      return com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo
+          .getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo build() {
+      com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo result =
+          buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo buildPartial() {
+      com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo result =
+          new com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(
+        com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.reason_ = reason_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo) {
+        return mergeFrom(
+            (com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(
+        com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo other) {
+      if (other
+          == com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo
+              .getDefaultInstance()) return this;
+      if (other.reason_ != 0) {
+        setReasonValue(other.getReasonValue());
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 8:
+              {
+                reason_ = input.readEnum();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 8
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private int reason_ = 0;
+
+    /**
+     *
+     *
+     * <pre>
+     * Reason why Network Policy evaluation was skipped.
+     * </pre>
+     *
+     * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason reason = 1;
+     * </code>
+     *
+     * @return The enum numeric value on the wire for reason.
+     */
+    @java.lang.Override
+    public int getReasonValue() {
+      return reason_;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Reason why Network Policy evaluation was skipped.
+     * </pre>
+     *
+     * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason reason = 1;
+     * </code>
+     *
+     * @param value The enum numeric value on the wire for reason to set.
+     * @return This builder for chaining.
+     */
+    public Builder setReasonValue(int value) {
+      reason_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Reason why Network Policy evaluation was skipped.
+     * </pre>
+     *
+     * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason reason = 1;
+     * </code>
+     *
+     * @return The reason.
+     */
+    @java.lang.Override
+    public com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason
+        getReason() {
+      com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason result =
+          com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason.forNumber(
+              reason_);
+      return result == null
+          ? com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason
+              .UNRECOGNIZED
+          : result;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Reason why Network Policy evaluation was skipped.
+     * </pre>
+     *
+     * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason reason = 1;
+     * </code>
+     *
+     * @param value The reason to set.
+     * @return This builder for chaining.
+     */
+    public Builder setReason(
+        com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      bitField0_ |= 0x00000001;
+      reason_ = value.getNumber();
+      onChanged();
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Reason why Network Policy evaluation was skipped.
+     * </pre>
+     *
+     * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason reason = 1;
+     * </code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearReason() {
+      bitField0_ = (bitField0_ & ~0x00000001);
+      reason_ = 0;
+      onChanged();
+      return this;
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo)
+  private static final com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo
+      DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo();
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo
+      getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<GkeNetworkPolicySkippedInfo> PARSER =
+      new com.google.protobuf.AbstractParser<GkeNetworkPolicySkippedInfo>() {
+        @java.lang.Override
+        public GkeNetworkPolicySkippedInfo parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<GkeNetworkPolicySkippedInfo> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<GkeNetworkPolicySkippedInfo> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo
+      getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/GkeNetworkPolicySkippedInfoOrBuilder.java b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/GkeNetworkPolicySkippedInfoOrBuilder.java
new file mode 100644
index 000000000000..d94676d470c9
--- /dev/null
+++ b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/GkeNetworkPolicySkippedInfoOrBuilder.java
@@ -0,0 +1,56 @@
+/*
+ * Copyright 2026 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// NO CHECKED-IN PROTOBUF GENCODE
+// source: google/cloud/networkmanagement/v1beta1/trace.proto
+// Protobuf Java Version: 4.33.2
+
+package com.google.cloud.networkmanagement.v1beta1;
+
+@com.google.protobuf.Generated
+public interface GkeNetworkPolicySkippedInfoOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * Reason why Network Policy evaluation was skipped.
+   * </pre>
+   *
+   * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason reason = 1;
+   * </code>
+   *
+   * @return The enum numeric value on the wire for reason.
+   */
+  int getReasonValue();
+
+  /**
+   *
+   *
+   * <pre>
+   * Reason why Network Policy evaluation was skipped.
+   * </pre>
+   *
+   * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason reason = 1;
+   * </code>
+   *
+   * @return The reason.
+   */
+  com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason getReason();
+}
diff --git a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/InstanceInfo.java b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/InstanceInfo.java
index 63c5d31e58e4..534b7c128088 100644
--- a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/InstanceInfo.java
+++ b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/InstanceInfo.java
@@ -652,7 +652,7 @@ public com.google.protobuf.ByteString getNetworkTagsBytes(int index) {
    * <code>string service_account = 8 [deprecated = true];</code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.InstanceInfo.service_account is deprecated.
-   *     See google/cloud/networkmanagement/v1beta1/trace.proto;l=382
+   *     See google/cloud/networkmanagement/v1beta1/trace.proto;l=413
    * @return The serviceAccount.
    */
   @java.lang.Override
@@ -679,7 +679,7 @@ public java.lang.String getServiceAccount() {
    * <code>string service_account = 8 [deprecated = true];</code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.InstanceInfo.service_account is deprecated.
-   *     See google/cloud/networkmanagement/v1beta1/trace.proto;l=382
+   *     See google/cloud/networkmanagement/v1beta1/trace.proto;l=413
    * @return The bytes for serviceAccount.
    */
   @java.lang.Override
@@ -763,7 +763,7 @@ public com.google.protobuf.ByteString getPscNetworkAttachmentUriBytes() {
    * <code>bool running = 10 [deprecated = true];</code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.InstanceInfo.running is deprecated. See
-   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=389
+   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=420
    * @return The running.
    */
   @java.lang.Override
@@ -2237,7 +2237,7 @@ public Builder addNetworkTagsBytes(com.google.protobuf.ByteString value) {
      * <code>string service_account = 8 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.InstanceInfo.service_account is
-     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=382
+     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=413
      * @return The serviceAccount.
      */
     @java.lang.Deprecated
@@ -2263,7 +2263,7 @@ public java.lang.String getServiceAccount() {
      * <code>string service_account = 8 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.InstanceInfo.service_account is
-     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=382
+     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=413
      * @return The bytes for serviceAccount.
      */
     @java.lang.Deprecated
@@ -2289,7 +2289,7 @@ public com.google.protobuf.ByteString getServiceAccountBytes() {
      * <code>string service_account = 8 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.InstanceInfo.service_account is
-     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=382
+     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=413
      * @param value The serviceAccount to set.
      * @return This builder for chaining.
      */
@@ -2314,7 +2314,7 @@ public Builder setServiceAccount(java.lang.String value) {
      * <code>string service_account = 8 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.InstanceInfo.service_account is
-     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=382
+     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=413
      * @return This builder for chaining.
      */
     @java.lang.Deprecated
@@ -2335,7 +2335,7 @@ public Builder clearServiceAccount() {
      * <code>string service_account = 8 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.InstanceInfo.service_account is
-     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=382
+     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=413
      * @param value The bytes for serviceAccount to set.
      * @return This builder for chaining.
      */
@@ -2475,7 +2475,7 @@ public Builder setPscNetworkAttachmentUriBytes(com.google.protobuf.ByteString va
      * <code>bool running = 10 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.InstanceInfo.running is deprecated. See
-     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=389
+     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=420
      * @return The running.
      */
     @java.lang.Override
@@ -2495,7 +2495,7 @@ public boolean getRunning() {
      * <code>bool running = 10 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.InstanceInfo.running is deprecated. See
-     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=389
+     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=420
      * @param value The running to set.
      * @return This builder for chaining.
      */
@@ -2519,7 +2519,7 @@ public Builder setRunning(boolean value) {
      * <code>bool running = 10 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.InstanceInfo.running is deprecated. See
-     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=389
+     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=420
      * @return This builder for chaining.
      */
     @java.lang.Deprecated
diff --git a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/InstanceInfoOrBuilder.java b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/InstanceInfoOrBuilder.java
index c0f04ce6f526..3cb73ca039f2 100644
--- a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/InstanceInfoOrBuilder.java
+++ b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/InstanceInfoOrBuilder.java
@@ -246,7 +246,7 @@ public interface InstanceInfoOrBuilder
    * <code>string service_account = 8 [deprecated = true];</code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.InstanceInfo.service_account is deprecated.
-   *     See google/cloud/networkmanagement/v1beta1/trace.proto;l=382
+   *     See google/cloud/networkmanagement/v1beta1/trace.proto;l=413
    * @return The serviceAccount.
    */
   @java.lang.Deprecated
@@ -262,7 +262,7 @@ public interface InstanceInfoOrBuilder
    * <code>string service_account = 8 [deprecated = true];</code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.InstanceInfo.service_account is deprecated.
-   *     See google/cloud/networkmanagement/v1beta1/trace.proto;l=382
+   *     See google/cloud/networkmanagement/v1beta1/trace.proto;l=413
    * @return The bytes for serviceAccount.
    */
   @java.lang.Deprecated
@@ -305,7 +305,7 @@ public interface InstanceInfoOrBuilder
    * <code>bool running = 10 [deprecated = true];</code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.InstanceInfo.running is deprecated. See
-   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=389
+   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=420
    * @return The running.
    */
   @java.lang.Deprecated
diff --git a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/LoadBalancerInfo.java b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/LoadBalancerInfo.java
index c0bd649dc5ae..6fbf89f6b8b5 100644
--- a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/LoadBalancerInfo.java
+++ b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/LoadBalancerInfo.java
@@ -572,7 +572,7 @@ public int getLoadBalancerTypeValue() {
    * <code>string health_check_uri = 2 [deprecated = true];</code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.LoadBalancerInfo.health_check_uri is
-   *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=859
+   *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=890
    * @return The healthCheckUri.
    */
   @java.lang.Override
@@ -601,7 +601,7 @@ public java.lang.String getHealthCheckUri() {
    * <code>string health_check_uri = 2 [deprecated = true];</code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.LoadBalancerInfo.health_check_uri is
-   *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=859
+   *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=890
    * @return The bytes for healthCheckUri.
    */
   @java.lang.Override
@@ -1381,7 +1381,7 @@ public Builder clearLoadBalancerType() {
      * <code>string health_check_uri = 2 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.LoadBalancerInfo.health_check_uri is
-     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=859
+     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=890
      * @return The healthCheckUri.
      */
     @java.lang.Deprecated
@@ -1409,7 +1409,7 @@ public java.lang.String getHealthCheckUri() {
      * <code>string health_check_uri = 2 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.LoadBalancerInfo.health_check_uri is
-     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=859
+     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=890
      * @return The bytes for healthCheckUri.
      */
     @java.lang.Deprecated
@@ -1437,7 +1437,7 @@ public com.google.protobuf.ByteString getHealthCheckUriBytes() {
      * <code>string health_check_uri = 2 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.LoadBalancerInfo.health_check_uri is
-     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=859
+     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=890
      * @param value The healthCheckUri to set.
      * @return This builder for chaining.
      */
@@ -1464,7 +1464,7 @@ public Builder setHealthCheckUri(java.lang.String value) {
      * <code>string health_check_uri = 2 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.LoadBalancerInfo.health_check_uri is
-     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=859
+     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=890
      * @return This builder for chaining.
      */
     @java.lang.Deprecated
@@ -1487,7 +1487,7 @@ public Builder clearHealthCheckUri() {
      * <code>string health_check_uri = 2 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.LoadBalancerInfo.health_check_uri is
-     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=859
+     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=890
      * @param value The bytes for healthCheckUri to set.
      * @return This builder for chaining.
      */
diff --git a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/LoadBalancerInfoOrBuilder.java b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/LoadBalancerInfoOrBuilder.java
index 4669739fa244..e7bdd9609c28 100644
--- a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/LoadBalancerInfoOrBuilder.java
+++ b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/LoadBalancerInfoOrBuilder.java
@@ -69,7 +69,7 @@ public interface LoadBalancerInfoOrBuilder
    * <code>string health_check_uri = 2 [deprecated = true];</code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.LoadBalancerInfo.health_check_uri is
-   *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=859
+   *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=890
    * @return The healthCheckUri.
    */
   @java.lang.Deprecated
@@ -87,7 +87,7 @@ public interface LoadBalancerInfoOrBuilder
    * <code>string health_check_uri = 2 [deprecated = true];</code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.LoadBalancerInfo.health_check_uri is
-   *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=859
+   *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=890
    * @return The bytes for healthCheckUri.
    */
   @java.lang.Deprecated
diff --git a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/NgfwPacketInspectionInfo.java b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/NgfwPacketInspectionInfo.java
new file mode 100644
index 000000000000..d9dbc14319f1
--- /dev/null
+++ b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/NgfwPacketInspectionInfo.java
@@ -0,0 +1,617 @@
+/*
+ * Copyright 2026 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// NO CHECKED-IN PROTOBUF GENCODE
+// source: google/cloud/networkmanagement/v1beta1/trace.proto
+// Protobuf Java Version: 4.33.2
+
+package com.google.cloud.networkmanagement.v1beta1;
+
+/**
+ *
+ *
+ * <pre>
+ * For display only. Metadata associated with a layer 7 packet inspection by the
+ * firewall.
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo}
+ */
+@com.google.protobuf.Generated
+public final class NgfwPacketInspectionInfo extends com.google.protobuf.GeneratedMessage
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo)
+    NgfwPacketInspectionInfoOrBuilder {
+  private static final long serialVersionUID = 0L;
+
+  static {
+    com.google.protobuf.RuntimeVersion.validateProtobufGencodeVersion(
+        com.google.protobuf.RuntimeVersion.RuntimeDomain.PUBLIC,
+        /* major= */ 4,
+        /* minor= */ 33,
+        /* patch= */ 2,
+        /* suffix= */ "",
+        "NgfwPacketInspectionInfo");
+  }
+
+  // Use NgfwPacketInspectionInfo.newBuilder() to construct.
+  private NgfwPacketInspectionInfo(com.google.protobuf.GeneratedMessage.Builder<?> builder) {
+    super(builder);
+  }
+
+  private NgfwPacketInspectionInfo() {
+    securityProfileGroupUri_ = "";
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.networkmanagement.v1beta1.TraceProto
+        .internal_static_google_cloud_networkmanagement_v1beta1_NgfwPacketInspectionInfo_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessage.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.networkmanagement.v1beta1.TraceProto
+        .internal_static_google_cloud_networkmanagement_v1beta1_NgfwPacketInspectionInfo_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo.class,
+            com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo.Builder.class);
+  }
+
+  public static final int SECURITY_PROFILE_GROUP_URI_FIELD_NUMBER = 1;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object securityProfileGroupUri_ = "";
+
+  /**
+   *
+   *
+   * <pre>
+   * URI of the security profile group associated with this firewall packet
+   * inspection.
+   * </pre>
+   *
+   * <code>string security_profile_group_uri = 1;</code>
+   *
+   * @return The securityProfileGroupUri.
+   */
+  @java.lang.Override
+  public java.lang.String getSecurityProfileGroupUri() {
+    java.lang.Object ref = securityProfileGroupUri_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      securityProfileGroupUri_ = s;
+      return s;
+    }
+  }
+
+  /**
+   *
+   *
+   * <pre>
+   * URI of the security profile group associated with this firewall packet
+   * inspection.
+   * </pre>
+   *
+   * <code>string security_profile_group_uri = 1;</code>
+   *
+   * @return The bytes for securityProfileGroupUri.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getSecurityProfileGroupUriBytes() {
+    java.lang.Object ref = securityProfileGroupUri_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      securityProfileGroupUri_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (!com.google.protobuf.GeneratedMessage.isStringEmpty(securityProfileGroupUri_)) {
+      com.google.protobuf.GeneratedMessage.writeString(output, 1, securityProfileGroupUri_);
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (!com.google.protobuf.GeneratedMessage.isStringEmpty(securityProfileGroupUri_)) {
+      size += com.google.protobuf.GeneratedMessage.computeStringSize(1, securityProfileGroupUri_);
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo other =
+        (com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo) obj;
+
+    if (!getSecurityProfileGroupUri().equals(other.getSecurityProfileGroupUri())) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + SECURITY_PROFILE_GROUP_URI_FIELD_NUMBER;
+    hash = (53 * hash) + getSecurityProfileGroupUri().hashCode();
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo parseFrom(
+      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo parseFrom(
+      byte[] data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessage.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessage.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo
+      parseDelimitedFrom(java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessage.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo
+      parseDelimitedFrom(
+          java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+          throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessage.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessage.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessage.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(
+      com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessage.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+
+  /**
+   *
+   *
+   * <pre>
+   * For display only. Metadata associated with a layer 7 packet inspection by the
+   * firewall.
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessage.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo)
+      com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfoOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.networkmanagement.v1beta1.TraceProto
+          .internal_static_google_cloud_networkmanagement_v1beta1_NgfwPacketInspectionInfo_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessage.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.networkmanagement.v1beta1.TraceProto
+          .internal_static_google_cloud_networkmanagement_v1beta1_NgfwPacketInspectionInfo_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo.class,
+              com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo.Builder.class);
+    }
+
+    // Construct using
+    // com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessage.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      securityProfileGroupUri_ = "";
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.networkmanagement.v1beta1.TraceProto
+          .internal_static_google_cloud_networkmanagement_v1beta1_NgfwPacketInspectionInfo_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo
+        getDefaultInstanceForType() {
+      return com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo
+          .getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo build() {
+      com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo buildPartial() {
+      com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo result =
+          new com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(
+        com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.securityProfileGroupUri_ = securityProfileGroupUri_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo) {
+        return mergeFrom(
+            (com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(
+        com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo other) {
+      if (other
+          == com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo
+              .getDefaultInstance()) return this;
+      if (!other.getSecurityProfileGroupUri().isEmpty()) {
+        securityProfileGroupUri_ = other.securityProfileGroupUri_;
+        bitField0_ |= 0x00000001;
+        onChanged();
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                securityProfileGroupUri_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 10
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private java.lang.Object securityProfileGroupUri_ = "";
+
+    /**
+     *
+     *
+     * <pre>
+     * URI of the security profile group associated with this firewall packet
+     * inspection.
+     * </pre>
+     *
+     * <code>string security_profile_group_uri = 1;</code>
+     *
+     * @return The securityProfileGroupUri.
+     */
+    public java.lang.String getSecurityProfileGroupUri() {
+      java.lang.Object ref = securityProfileGroupUri_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        securityProfileGroupUri_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * URI of the security profile group associated with this firewall packet
+     * inspection.
+     * </pre>
+     *
+     * <code>string security_profile_group_uri = 1;</code>
+     *
+     * @return The bytes for securityProfileGroupUri.
+     */
+    public com.google.protobuf.ByteString getSecurityProfileGroupUriBytes() {
+      java.lang.Object ref = securityProfileGroupUri_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        securityProfileGroupUri_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * URI of the security profile group associated with this firewall packet
+     * inspection.
+     * </pre>
+     *
+     * <code>string security_profile_group_uri = 1;</code>
+     *
+     * @param value The securityProfileGroupUri to set.
+     * @return This builder for chaining.
+     */
+    public Builder setSecurityProfileGroupUri(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      securityProfileGroupUri_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * URI of the security profile group associated with this firewall packet
+     * inspection.
+     * </pre>
+     *
+     * <code>string security_profile_group_uri = 1;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearSecurityProfileGroupUri() {
+      securityProfileGroupUri_ = getDefaultInstance().getSecurityProfileGroupUri();
+      bitField0_ = (bitField0_ & ~0x00000001);
+      onChanged();
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * URI of the security profile group associated with this firewall packet
+     * inspection.
+     * </pre>
+     *
+     * <code>string security_profile_group_uri = 1;</code>
+     *
+     * @param value The bytes for securityProfileGroupUri to set.
+     * @return This builder for chaining.
+     */
+    public Builder setSecurityProfileGroupUriBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      securityProfileGroupUri_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo)
+  private static final com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo
+      DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo();
+  }
+
+  public static com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo
+      getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<NgfwPacketInspectionInfo> PARSER =
+      new com.google.protobuf.AbstractParser<NgfwPacketInspectionInfo>() {
+        @java.lang.Override
+        public NgfwPacketInspectionInfo parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<NgfwPacketInspectionInfo> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<NgfwPacketInspectionInfo> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo
+      getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/NgfwPacketInspectionInfoOrBuilder.java b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/NgfwPacketInspectionInfoOrBuilder.java
new file mode 100644
index 000000000000..89b3c76f2e68
--- /dev/null
+++ b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/NgfwPacketInspectionInfoOrBuilder.java
@@ -0,0 +1,56 @@
+/*
+ * Copyright 2026 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// NO CHECKED-IN PROTOBUF GENCODE
+// source: google/cloud/networkmanagement/v1beta1/trace.proto
+// Protobuf Java Version: 4.33.2
+
+package com.google.cloud.networkmanagement.v1beta1;
+
+@com.google.protobuf.Generated
+public interface NgfwPacketInspectionInfoOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * URI of the security profile group associated with this firewall packet
+   * inspection.
+   * </pre>
+   *
+   * <code>string security_profile_group_uri = 1;</code>
+   *
+   * @return The securityProfileGroupUri.
+   */
+  java.lang.String getSecurityProfileGroupUri();
+
+  /**
+   *
+   *
+   * <pre>
+   * URI of the security profile group associated with this firewall packet
+   * inspection.
+   * </pre>
+   *
+   * <code>string security_profile_group_uri = 1;</code>
+   *
+   * @return The bytes for securityProfileGroupUri.
+   */
+  com.google.protobuf.ByteString getSecurityProfileGroupUriBytes();
+}
diff --git a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/RouteInfo.java b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/RouteInfo.java
index a9500a3cf280..07dade497619 100644
--- a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/RouteInfo.java
+++ b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/RouteInfo.java
@@ -1113,7 +1113,7 @@ public com.google.cloud.networkmanagement.v1beta1.RouteInfo.NextHopType getNextH
    * </code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.route_scope is deprecated. See
-   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=646
+   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=677
    * @return The enum numeric value on the wire for routeScope.
    */
   @java.lang.Override
@@ -1135,7 +1135,7 @@ public int getRouteScopeValue() {
    * </code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.route_scope is deprecated. See
-   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=646
+   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=677
    * @return The routeScope.
    */
   @java.lang.Override
@@ -1383,7 +1383,7 @@ public com.google.protobuf.ByteString getDestIpRangeBytes() {
    * <code>string next_hop = 4 [deprecated = true];</code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.next_hop is deprecated. See
-   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=666
+   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=697
    * @return The nextHop.
    */
   @java.lang.Override
@@ -1412,7 +1412,7 @@ public java.lang.String getNextHop() {
    * <code>string next_hop = 4 [deprecated = true];</code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.next_hop is deprecated. See
-   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=666
+   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=697
    * @return The bytes for nextHop.
    */
   @java.lang.Override
@@ -2061,7 +2061,7 @@ public com.google.protobuf.ByteString getAdvertisedRouteSourceRouterUriBytes() {
    * <code>optional string advertised_route_next_hop_uri = 18 [deprecated = true];</code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.advertised_route_next_hop_uri is
-   *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=706
+   *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=737
    * @return Whether the advertisedRouteNextHopUri field is set.
    */
   @java.lang.Override
@@ -2084,7 +2084,7 @@ public boolean hasAdvertisedRouteNextHopUri() {
    * <code>optional string advertised_route_next_hop_uri = 18 [deprecated = true];</code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.advertised_route_next_hop_uri is
-   *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=706
+   *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=737
    * @return The advertisedRouteNextHopUri.
    */
   @java.lang.Override
@@ -2115,7 +2115,7 @@ public java.lang.String getAdvertisedRouteNextHopUri() {
    * <code>optional string advertised_route_next_hop_uri = 18 [deprecated = true];</code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.advertised_route_next_hop_uri is
-   *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=706
+   *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=737
    * @return The bytes for advertisedRouteNextHopUri.
    */
   @java.lang.Override
@@ -3572,7 +3572,7 @@ public Builder clearNextHopType() {
      * </code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.route_scope is deprecated. See
-     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=646
+     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=677
      * @return The enum numeric value on the wire for routeScope.
      */
     @java.lang.Override
@@ -3594,7 +3594,7 @@ public int getRouteScopeValue() {
      * </code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.route_scope is deprecated. See
-     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=646
+     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=677
      * @param value The enum numeric value on the wire for routeScope to set.
      * @return This builder for chaining.
      */
@@ -3619,7 +3619,7 @@ public Builder setRouteScopeValue(int value) {
      * </code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.route_scope is deprecated. See
-     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=646
+     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=677
      * @return The routeScope.
      */
     @java.lang.Override
@@ -3645,7 +3645,7 @@ public com.google.cloud.networkmanagement.v1beta1.RouteInfo.RouteScope getRouteS
      * </code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.route_scope is deprecated. See
-     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=646
+     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=677
      * @param value The routeScope to set.
      * @return This builder for chaining.
      */
@@ -3674,7 +3674,7 @@ public Builder setRouteScope(
      * </code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.route_scope is deprecated. See
-     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=646
+     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=677
      * @return This builder for chaining.
      */
     @java.lang.Deprecated
@@ -4158,7 +4158,7 @@ public Builder setDestIpRangeBytes(com.google.protobuf.ByteString value) {
      * <code>string next_hop = 4 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.next_hop is deprecated. See
-     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=666
+     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=697
      * @return The nextHop.
      */
     @java.lang.Deprecated
@@ -4186,7 +4186,7 @@ public java.lang.String getNextHop() {
      * <code>string next_hop = 4 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.next_hop is deprecated. See
-     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=666
+     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=697
      * @return The bytes for nextHop.
      */
     @java.lang.Deprecated
@@ -4214,7 +4214,7 @@ public com.google.protobuf.ByteString getNextHopBytes() {
      * <code>string next_hop = 4 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.next_hop is deprecated. See
-     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=666
+     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=697
      * @param value The nextHop to set.
      * @return This builder for chaining.
      */
@@ -4241,7 +4241,7 @@ public Builder setNextHop(java.lang.String value) {
      * <code>string next_hop = 4 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.next_hop is deprecated. See
-     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=666
+     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=697
      * @return This builder for chaining.
      */
     @java.lang.Deprecated
@@ -4264,7 +4264,7 @@ public Builder clearNextHop() {
      * <code>string next_hop = 4 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.next_hop is deprecated. See
-     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=666
+     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=697
      * @param value The bytes for nextHop to set.
      * @return This builder for chaining.
      */
@@ -5702,7 +5702,7 @@ public Builder setAdvertisedRouteSourceRouterUriBytes(com.google.protobuf.ByteSt
      * <code>optional string advertised_route_next_hop_uri = 18 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.advertised_route_next_hop_uri is
-     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=706
+     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=737
      * @return Whether the advertisedRouteNextHopUri field is set.
      */
     @java.lang.Deprecated
@@ -5724,7 +5724,7 @@ public boolean hasAdvertisedRouteNextHopUri() {
      * <code>optional string advertised_route_next_hop_uri = 18 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.advertised_route_next_hop_uri is
-     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=706
+     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=737
      * @return The advertisedRouteNextHopUri.
      */
     @java.lang.Deprecated
@@ -5754,7 +5754,7 @@ public java.lang.String getAdvertisedRouteNextHopUri() {
      * <code>optional string advertised_route_next_hop_uri = 18 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.advertised_route_next_hop_uri is
-     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=706
+     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=737
      * @return The bytes for advertisedRouteNextHopUri.
      */
     @java.lang.Deprecated
@@ -5784,7 +5784,7 @@ public com.google.protobuf.ByteString getAdvertisedRouteNextHopUriBytes() {
      * <code>optional string advertised_route_next_hop_uri = 18 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.advertised_route_next_hop_uri is
-     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=706
+     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=737
      * @param value The advertisedRouteNextHopUri to set.
      * @return This builder for chaining.
      */
@@ -5813,7 +5813,7 @@ public Builder setAdvertisedRouteNextHopUri(java.lang.String value) {
      * <code>optional string advertised_route_next_hop_uri = 18 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.advertised_route_next_hop_uri is
-     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=706
+     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=737
      * @return This builder for chaining.
      */
     @java.lang.Deprecated
@@ -5838,7 +5838,7 @@ public Builder clearAdvertisedRouteNextHopUri() {
      * <code>optional string advertised_route_next_hop_uri = 18 [deprecated = true];</code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.advertised_route_next_hop_uri is
-     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=706
+     *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=737
      * @param value The bytes for advertisedRouteNextHopUri to set.
      * @return This builder for chaining.
      */
diff --git a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/RouteInfoOrBuilder.java b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/RouteInfoOrBuilder.java
index 827ca4a77af7..effe1b60db95 100644
--- a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/RouteInfoOrBuilder.java
+++ b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/RouteInfoOrBuilder.java
@@ -91,7 +91,7 @@ public interface RouteInfoOrBuilder
    * </code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.route_scope is deprecated. See
-   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=646
+   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=677
    * @return The enum numeric value on the wire for routeScope.
    */
   @java.lang.Deprecated
@@ -110,7 +110,7 @@ public interface RouteInfoOrBuilder
    * </code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.route_scope is deprecated. See
-   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=646
+   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=677
    * @return The routeScope.
    */
   @java.lang.Deprecated
@@ -238,7 +238,7 @@ public interface RouteInfoOrBuilder
    * <code>string next_hop = 4 [deprecated = true];</code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.next_hop is deprecated. See
-   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=666
+   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=697
    * @return The nextHop.
    */
   @java.lang.Deprecated
@@ -256,7 +256,7 @@ public interface RouteInfoOrBuilder
    * <code>string next_hop = 4 [deprecated = true];</code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.next_hop is deprecated. See
-   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=666
+   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=697
    * @return The bytes for nextHop.
    */
   @java.lang.Deprecated
@@ -683,7 +683,7 @@ public interface RouteInfoOrBuilder
    * <code>optional string advertised_route_next_hop_uri = 18 [deprecated = true];</code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.advertised_route_next_hop_uri is
-   *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=706
+   *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=737
    * @return Whether the advertisedRouteNextHopUri field is set.
    */
   @java.lang.Deprecated
@@ -703,7 +703,7 @@ public interface RouteInfoOrBuilder
    * <code>optional string advertised_route_next_hop_uri = 18 [deprecated = true];</code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.advertised_route_next_hop_uri is
-   *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=706
+   *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=737
    * @return The advertisedRouteNextHopUri.
    */
   @java.lang.Deprecated
@@ -723,7 +723,7 @@ public interface RouteInfoOrBuilder
    * <code>optional string advertised_route_next_hop_uri = 18 [deprecated = true];</code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.RouteInfo.advertised_route_next_hop_uri is
-   *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=706
+   *     deprecated. See google/cloud/networkmanagement/v1beta1/trace.proto;l=737
    * @return The bytes for advertisedRouteNextHopUri.
    */
   @java.lang.Deprecated
diff --git a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/Step.java b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/Step.java
index 6b61fcc7ccb1..180bb0f23f00 100644
--- a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/Step.java
+++ b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/Step.java
@@ -411,6 +411,16 @@ public enum State implements com.google.protobuf.ProtocolMessageEnum {
      * <code>ARRIVE_AT_VPC_CONNECTOR = 24;</code>
      */
     ARRIVE_AT_VPC_CONNECTOR(24),
+    /**
+     *
+     *
+     * <pre>
+     * Forwarding state: arriving at a GKE Pod.
+     * </pre>
+     *
+     * <code>ARRIVE_AT_GKE_POD = 44;</code>
+     */
+    ARRIVE_AT_GKE_POD(44),
     /**
      *
      *
@@ -433,6 +443,17 @@ public enum State implements com.google.protobuf.ProtocolMessageEnum {
      * <code>SERVERLESS_EXTERNAL_CONNECTION = 36;</code>
      */
     SERVERLESS_EXTERNAL_CONNECTION(36),
+    /**
+     *
+     *
+     * <pre>
+     * Forwarding state: Layer 7 packet inspection by the firewall endpoint
+     * based on the configured security profile group.
+     * </pre>
+     *
+     * <code>NGFW_PACKET_INSPECTION = 47;</code>
+     */
+    NGFW_PACKET_INSPECTION(47),
     /**
      *
      *
@@ -455,6 +476,48 @@ public enum State implements com.google.protobuf.ProtocolMessageEnum {
      * <code>SKIP_GKE_POD_IP_MASQUERADING = 40;</code>
      */
     SKIP_GKE_POD_IP_MASQUERADING(40),
+    /**
+     *
+     *
+     * <pre>
+     * Transition state: GKE Ingress Network Policy is skipped. The
+     * `gke_network_policy_skipped` field is populated with the reason.
+     * </pre>
+     *
+     * <code>SKIP_GKE_INGRESS_NETWORK_POLICY = 41;</code>
+     */
+    SKIP_GKE_INGRESS_NETWORK_POLICY(41),
+    /**
+     *
+     *
+     * <pre>
+     * Transition state: GKE Egress Network Policy is skipped. The
+     * `gke_network_policy_skipped` field is populated with the reason.
+     * </pre>
+     *
+     * <code>SKIP_GKE_EGRESS_NETWORK_POLICY = 42;</code>
+     */
+    SKIP_GKE_EGRESS_NETWORK_POLICY(42),
+    /**
+     *
+     *
+     * <pre>
+     * Config checking state: verify ingress GKE network policy.
+     * </pre>
+     *
+     * <code>APPLY_INGRESS_GKE_NETWORK_POLICY = 45;</code>
+     */
+    APPLY_INGRESS_GKE_NETWORK_POLICY(45),
+    /**
+     *
+     *
+     * <pre>
+     * Config checking state: verify egress GKE network policy.
+     * </pre>
+     *
+     * <code>APPLY_EGRESS_GKE_NETWORK_POLICY = 46;</code>
+     */
+    APPLY_EGRESS_GKE_NETWORK_POLICY(46),
     /**
      *
      *
@@ -886,6 +949,17 @@ public enum State implements com.google.protobuf.ProtocolMessageEnum {
      */
     public static final int ARRIVE_AT_VPC_CONNECTOR_VALUE = 24;
 
+    /**
+     *
+     *
+     * <pre>
+     * Forwarding state: arriving at a GKE Pod.
+     * </pre>
+     *
+     * <code>ARRIVE_AT_GKE_POD = 44;</code>
+     */
+    public static final int ARRIVE_AT_GKE_POD_VALUE = 44;
+
     /**
      *
      *
@@ -910,6 +984,18 @@ public enum State implements com.google.protobuf.ProtocolMessageEnum {
      */
     public static final int SERVERLESS_EXTERNAL_CONNECTION_VALUE = 36;
 
+    /**
+     *
+     *
+     * <pre>
+     * Forwarding state: Layer 7 packet inspection by the firewall endpoint
+     * based on the configured security profile group.
+     * </pre>
+     *
+     * <code>NGFW_PACKET_INSPECTION = 47;</code>
+     */
+    public static final int NGFW_PACKET_INSPECTION_VALUE = 47;
+
     /**
      *
      *
@@ -934,6 +1020,52 @@ public enum State implements com.google.protobuf.ProtocolMessageEnum {
      */
     public static final int SKIP_GKE_POD_IP_MASQUERADING_VALUE = 40;
 
+    /**
+     *
+     *
+     * <pre>
+     * Transition state: GKE Ingress Network Policy is skipped. The
+     * `gke_network_policy_skipped` field is populated with the reason.
+     * </pre>
+     *
+     * <code>SKIP_GKE_INGRESS_NETWORK_POLICY = 41;</code>
+     */
+    public static final int SKIP_GKE_INGRESS_NETWORK_POLICY_VALUE = 41;
+
+    /**
+     *
+     *
+     * <pre>
+     * Transition state: GKE Egress Network Policy is skipped. The
+     * `gke_network_policy_skipped` field is populated with the reason.
+     * </pre>
+     *
+     * <code>SKIP_GKE_EGRESS_NETWORK_POLICY = 42;</code>
+     */
+    public static final int SKIP_GKE_EGRESS_NETWORK_POLICY_VALUE = 42;
+
+    /**
+     *
+     *
+     * <pre>
+     * Config checking state: verify ingress GKE network policy.
+     * </pre>
+     *
+     * <code>APPLY_INGRESS_GKE_NETWORK_POLICY = 45;</code>
+     */
+    public static final int APPLY_INGRESS_GKE_NETWORK_POLICY_VALUE = 45;
+
+    /**
+     *
+     *
+     * <pre>
+     * Config checking state: verify egress GKE network policy.
+     * </pre>
+     *
+     * <code>APPLY_EGRESS_GKE_NETWORK_POLICY = 46;</code>
+     */
+    public static final int APPLY_EGRESS_GKE_NETWORK_POLICY_VALUE = 46;
+
     /**
      *
      *
@@ -1087,14 +1219,26 @@ public static State forNumber(int value) {
           return ARRIVE_AT_INTERCONNECT_ATTACHMENT;
         case 24:
           return ARRIVE_AT_VPC_CONNECTOR;
+        case 44:
+          return ARRIVE_AT_GKE_POD;
         case 35:
           return DIRECT_VPC_EGRESS_CONNECTION;
         case 36:
           return SERVERLESS_EXTERNAL_CONNECTION;
+        case 47:
+          return NGFW_PACKET_INSPECTION;
         case 14:
           return NAT;
         case 40:
           return SKIP_GKE_POD_IP_MASQUERADING;
+        case 41:
+          return SKIP_GKE_INGRESS_NETWORK_POLICY;
+        case 42:
+          return SKIP_GKE_EGRESS_NETWORK_POLICY;
+        case 45:
+          return APPLY_INGRESS_GKE_NETWORK_POLICY;
+        case 46:
+          return APPLY_EGRESS_GKE_NETWORK_POLICY;
         case 15:
           return PROXY_CONNECTION;
         case 16:
@@ -1192,6 +1336,8 @@ public enum StepInfoCase
     GKE_MASTER(18),
     GKE_POD(37),
     IP_MASQUERADING_SKIPPED(38),
+    GKE_NETWORK_POLICY(39),
+    GKE_NETWORK_POLICY_SKIPPED(40),
     CLOUD_SQL_INSTANCE(19),
     REDIS_INSTANCE(30),
     REDIS_CLUSTER(31),
@@ -1203,6 +1349,7 @@ public enum StepInfoCase
     LOAD_BALANCER_BACKEND_INFO(27),
     STORAGE_BUCKET(28),
     SERVERLESS_NEG(29),
+    NGFW_PACKET_INSPECTION(42),
     STEPINFO_NOT_SET(0);
     private final int value;
 
@@ -1266,6 +1413,10 @@ public static StepInfoCase forNumber(int value) {
           return GKE_POD;
         case 38:
           return IP_MASQUERADING_SKIPPED;
+        case 39:
+          return GKE_NETWORK_POLICY;
+        case 40:
+          return GKE_NETWORK_POLICY_SKIPPED;
         case 19:
           return CLOUD_SQL_INSTANCE;
         case 30:
@@ -1288,6 +1439,8 @@ public static StepInfoCase forNumber(int value) {
           return STORAGE_BUCKET;
         case 29:
           return SERVERLESS_NEG;
+        case 42:
+          return NGFW_PACKET_INSPECTION;
         case 0:
           return STEPINFO_NOT_SET;
         default:
@@ -2447,7 +2600,7 @@ public com.google.cloud.networkmanagement.v1beta1.DropInfoOrBuilder getDropOrBui
    * </code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.Step.load_balancer is deprecated. See
-   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=294
+   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=315
    * @return Whether the loadBalancer field is set.
    */
   @java.lang.Override
@@ -2469,7 +2622,7 @@ public boolean hasLoadBalancer() {
    * </code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.Step.load_balancer is deprecated. See
-   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=294
+   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=315
    * @return The loadBalancer.
    */
   @java.lang.Override
@@ -2732,6 +2885,131 @@ public boolean hasIpMasqueradingSkipped() {
         .getDefaultInstance();
   }
 
+  public static final int GKE_NETWORK_POLICY_FIELD_NUMBER = 39;
+
+  /**
+   *
+   *
+   * <pre>
+   * Display information of a GKE Network Policy.
+   * </pre>
+   *
+   * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo gke_network_policy = 39;
+   * </code>
+   *
+   * @return Whether the gkeNetworkPolicy field is set.
+   */
+  @java.lang.Override
+  public boolean hasGkeNetworkPolicy() {
+    return stepInfoCase_ == 39;
+  }
+
+  /**
+   *
+   *
+   * <pre>
+   * Display information of a GKE Network Policy.
+   * </pre>
+   *
+   * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo gke_network_policy = 39;
+   * </code>
+   *
+   * @return The gkeNetworkPolicy.
+   */
+  @java.lang.Override
+  public com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo getGkeNetworkPolicy() {
+    if (stepInfoCase_ == 39) {
+      return (com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo) stepInfo_;
+    }
+    return com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo.getDefaultInstance();
+  }
+
+  /**
+   *
+   *
+   * <pre>
+   * Display information of a GKE Network Policy.
+   * </pre>
+   *
+   * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo gke_network_policy = 39;
+   * </code>
+   */
+  @java.lang.Override
+  public com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfoOrBuilder
+      getGkeNetworkPolicyOrBuilder() {
+    if (stepInfoCase_ == 39) {
+      return (com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo) stepInfo_;
+    }
+    return com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo.getDefaultInstance();
+  }
+
+  public static final int GKE_NETWORK_POLICY_SKIPPED_FIELD_NUMBER = 40;
+
+  /**
+   *
+   *
+   * <pre>
+   * Display information of the reason why GKE Network Policy evaluation was
+   * skipped.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo gke_network_policy_skipped = 40;
+   * </code>
+   *
+   * @return Whether the gkeNetworkPolicySkipped field is set.
+   */
+  @java.lang.Override
+  public boolean hasGkeNetworkPolicySkipped() {
+    return stepInfoCase_ == 40;
+  }
+
+  /**
+   *
+   *
+   * <pre>
+   * Display information of the reason why GKE Network Policy evaluation was
+   * skipped.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo gke_network_policy_skipped = 40;
+   * </code>
+   *
+   * @return The gkeNetworkPolicySkipped.
+   */
+  @java.lang.Override
+  public com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo
+      getGkeNetworkPolicySkipped() {
+    if (stepInfoCase_ == 40) {
+      return (com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo) stepInfo_;
+    }
+    return com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo
+        .getDefaultInstance();
+  }
+
+  /**
+   *
+   *
+   * <pre>
+   * Display information of the reason why GKE Network Policy evaluation was
+   * skipped.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo gke_network_policy_skipped = 40;
+   * </code>
+   */
+  @java.lang.Override
+  public com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfoOrBuilder
+      getGkeNetworkPolicySkippedOrBuilder() {
+    if (stepInfoCase_ == 40) {
+      return (com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo) stepInfo_;
+    }
+    return com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo
+        .getDefaultInstance();
+  }
+
   public static final int CLOUD_SQL_INSTANCE_FIELD_NUMBER = 19;
 
   /**
@@ -3355,6 +3633,68 @@ public com.google.cloud.networkmanagement.v1beta1.ServerlessNegInfo getServerles
     return com.google.cloud.networkmanagement.v1beta1.ServerlessNegInfo.getDefaultInstance();
   }
 
+  public static final int NGFW_PACKET_INSPECTION_FIELD_NUMBER = 42;
+
+  /**
+   *
+   *
+   * <pre>
+   * Display information of a layer 7 packet inspection by the firewall.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo ngfw_packet_inspection = 42;
+   * </code>
+   *
+   * @return Whether the ngfwPacketInspection field is set.
+   */
+  @java.lang.Override
+  public boolean hasNgfwPacketInspection() {
+    return stepInfoCase_ == 42;
+  }
+
+  /**
+   *
+   *
+   * <pre>
+   * Display information of a layer 7 packet inspection by the firewall.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo ngfw_packet_inspection = 42;
+   * </code>
+   *
+   * @return The ngfwPacketInspection.
+   */
+  @java.lang.Override
+  public com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo
+      getNgfwPacketInspection() {
+    if (stepInfoCase_ == 42) {
+      return (com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo) stepInfo_;
+    }
+    return com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo.getDefaultInstance();
+  }
+
+  /**
+   *
+   *
+   * <pre>
+   * Display information of a layer 7 packet inspection by the firewall.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo ngfw_packet_inspection = 42;
+   * </code>
+   */
+  @java.lang.Override
+  public com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfoOrBuilder
+      getNgfwPacketInspectionOrBuilder() {
+    if (stepInfoCase_ == 42) {
+      return (com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo) stepInfo_;
+    }
+    return com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo.getDefaultInstance();
+  }
+
   private byte memoizedIsInitialized = -1;
 
   @java.lang.Override
@@ -3502,6 +3842,18 @@ public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io
       output.writeMessage(
           38, (com.google.cloud.networkmanagement.v1beta1.IpMasqueradingSkippedInfo) stepInfo_);
     }
+    if (stepInfoCase_ == 39) {
+      output.writeMessage(
+          39, (com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo) stepInfo_);
+    }
+    if (stepInfoCase_ == 40) {
+      output.writeMessage(
+          40, (com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo) stepInfo_);
+    }
+    if (stepInfoCase_ == 42) {
+      output.writeMessage(
+          42, (com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo) stepInfo_);
+    }
     getUnknownFields().writeTo(output);
   }
 
@@ -3693,6 +4045,22 @@ public int getSerializedSize() {
           com.google.protobuf.CodedOutputStream.computeMessageSize(
               38, (com.google.cloud.networkmanagement.v1beta1.IpMasqueradingSkippedInfo) stepInfo_);
     }
+    if (stepInfoCase_ == 39) {
+      size +=
+          com.google.protobuf.CodedOutputStream.computeMessageSize(
+              39, (com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo) stepInfo_);
+    }
+    if (stepInfoCase_ == 40) {
+      size +=
+          com.google.protobuf.CodedOutputStream.computeMessageSize(
+              40,
+              (com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo) stepInfo_);
+    }
+    if (stepInfoCase_ == 42) {
+      size +=
+          com.google.protobuf.CodedOutputStream.computeMessageSize(
+              42, (com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo) stepInfo_);
+    }
     size += getUnknownFields().getSerializedSize();
     memoizedSize = size;
     return size;
@@ -3783,6 +4151,12 @@ public boolean equals(final java.lang.Object obj) {
       case 38:
         if (!getIpMasqueradingSkipped().equals(other.getIpMasqueradingSkipped())) return false;
         break;
+      case 39:
+        if (!getGkeNetworkPolicy().equals(other.getGkeNetworkPolicy())) return false;
+        break;
+      case 40:
+        if (!getGkeNetworkPolicySkipped().equals(other.getGkeNetworkPolicySkipped())) return false;
+        break;
       case 19:
         if (!getCloudSqlInstance().equals(other.getCloudSqlInstance())) return false;
         break;
@@ -3816,6 +4190,9 @@ public boolean equals(final java.lang.Object obj) {
       case 29:
         if (!getServerlessNeg().equals(other.getServerlessNeg())) return false;
         break;
+      case 42:
+        if (!getNgfwPacketInspection().equals(other.getNgfwPacketInspection())) return false;
+        break;
       case 0:
       default:
     }
@@ -3927,6 +4304,14 @@ public int hashCode() {
         hash = (37 * hash) + IP_MASQUERADING_SKIPPED_FIELD_NUMBER;
         hash = (53 * hash) + getIpMasqueradingSkipped().hashCode();
         break;
+      case 39:
+        hash = (37 * hash) + GKE_NETWORK_POLICY_FIELD_NUMBER;
+        hash = (53 * hash) + getGkeNetworkPolicy().hashCode();
+        break;
+      case 40:
+        hash = (37 * hash) + GKE_NETWORK_POLICY_SKIPPED_FIELD_NUMBER;
+        hash = (53 * hash) + getGkeNetworkPolicySkipped().hashCode();
+        break;
       case 19:
         hash = (37 * hash) + CLOUD_SQL_INSTANCE_FIELD_NUMBER;
         hash = (53 * hash) + getCloudSqlInstance().hashCode();
@@ -3971,6 +4356,10 @@ public int hashCode() {
         hash = (37 * hash) + SERVERLESS_NEG_FIELD_NUMBER;
         hash = (53 * hash) + getServerlessNeg().hashCode();
         break;
+      case 42:
+        hash = (37 * hash) + NGFW_PACKET_INSPECTION_FIELD_NUMBER;
+        hash = (53 * hash) + getNgfwPacketInspection().hashCode();
+        break;
       case 0:
       default:
     }
@@ -4186,6 +4575,12 @@ public Builder clear() {
       if (ipMasqueradingSkippedBuilder_ != null) {
         ipMasqueradingSkippedBuilder_.clear();
       }
+      if (gkeNetworkPolicyBuilder_ != null) {
+        gkeNetworkPolicyBuilder_.clear();
+      }
+      if (gkeNetworkPolicySkippedBuilder_ != null) {
+        gkeNetworkPolicySkippedBuilder_.clear();
+      }
       if (cloudSqlInstanceBuilder_ != null) {
         cloudSqlInstanceBuilder_.clear();
       }
@@ -4219,6 +4614,9 @@ public Builder clear() {
       if (serverlessNegBuilder_ != null) {
         serverlessNegBuilder_.clear();
       }
+      if (ngfwPacketInspectionBuilder_ != null) {
+        ngfwPacketInspectionBuilder_.clear();
+      }
       stepInfoCase_ = 0;
       stepInfo_ = null;
       return this;
@@ -4348,6 +4746,12 @@ private void buildPartialOneofs(com.google.cloud.networkmanagement.v1beta1.Step
       if (stepInfoCase_ == 38 && ipMasqueradingSkippedBuilder_ != null) {
         result.stepInfo_ = ipMasqueradingSkippedBuilder_.build();
       }
+      if (stepInfoCase_ == 39 && gkeNetworkPolicyBuilder_ != null) {
+        result.stepInfo_ = gkeNetworkPolicyBuilder_.build();
+      }
+      if (stepInfoCase_ == 40 && gkeNetworkPolicySkippedBuilder_ != null) {
+        result.stepInfo_ = gkeNetworkPolicySkippedBuilder_.build();
+      }
       if (stepInfoCase_ == 19 && cloudSqlInstanceBuilder_ != null) {
         result.stepInfo_ = cloudSqlInstanceBuilder_.build();
       }
@@ -4381,6 +4785,9 @@ private void buildPartialOneofs(com.google.cloud.networkmanagement.v1beta1.Step
       if (stepInfoCase_ == 29 && serverlessNegBuilder_ != null) {
         result.stepInfo_ = serverlessNegBuilder_.build();
       }
+      if (stepInfoCase_ == 42 && ngfwPacketInspectionBuilder_ != null) {
+        result.stepInfo_ = ngfwPacketInspectionBuilder_.build();
+      }
     }
 
     @java.lang.Override
@@ -4523,6 +4930,16 @@ public Builder mergeFrom(com.google.cloud.networkmanagement.v1beta1.Step other)
             mergeIpMasqueradingSkipped(other.getIpMasqueradingSkipped());
             break;
           }
+        case GKE_NETWORK_POLICY:
+          {
+            mergeGkeNetworkPolicy(other.getGkeNetworkPolicy());
+            break;
+          }
+        case GKE_NETWORK_POLICY_SKIPPED:
+          {
+            mergeGkeNetworkPolicySkipped(other.getGkeNetworkPolicySkipped());
+            break;
+          }
         case CLOUD_SQL_INSTANCE:
           {
             mergeCloudSqlInstance(other.getCloudSqlInstance());
@@ -4578,6 +4995,11 @@ public Builder mergeFrom(com.google.cloud.networkmanagement.v1beta1.Step other)
             mergeServerlessNeg(other.getServerlessNeg());
             break;
           }
+        case NGFW_PACKET_INSPECTION:
+          {
+            mergeNgfwPacketInspection(other.getNgfwPacketInspection());
+            break;
+          }
         case STEPINFO_NOT_SET:
           {
             break;
@@ -4860,10 +5282,32 @@ public Builder mergeFrom(
                 stepInfoCase_ = 38;
                 break;
               } // case 306
-            default:
+            case 314:
               {
-                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
-                  done = true; // was an endgroup tag
+                input.readMessage(
+                    internalGetGkeNetworkPolicyFieldBuilder().getBuilder(), extensionRegistry);
+                stepInfoCase_ = 39;
+                break;
+              } // case 314
+            case 322:
+              {
+                input.readMessage(
+                    internalGetGkeNetworkPolicySkippedFieldBuilder().getBuilder(),
+                    extensionRegistry);
+                stepInfoCase_ = 40;
+                break;
+              } // case 322
+            case 338:
+              {
+                input.readMessage(
+                    internalGetNgfwPacketInspectionFieldBuilder().getBuilder(), extensionRegistry);
+                stepInfoCase_ = 42;
+                break;
+              } // case 338
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
                 }
                 break;
               } // default:
@@ -9168,7 +9612,7 @@ public com.google.cloud.networkmanagement.v1beta1.DropInfoOrBuilder getDropOrBui
      * </code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.Step.load_balancer is deprecated. See
-     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=294
+     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=315
      * @return Whether the loadBalancer field is set.
      */
     @java.lang.Override
@@ -9190,7 +9634,7 @@ public boolean hasLoadBalancer() {
      * </code>
      *
      * @deprecated google.cloud.networkmanagement.v1beta1.Step.load_balancer is deprecated. See
-     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=294
+     *     google/cloud/networkmanagement/v1beta1/trace.proto;l=315
      * @return The loadBalancer.
      */
     @java.lang.Override
@@ -10330,6 +10774,499 @@ public Builder clearIpMasqueradingSkipped() {
       return ipMasqueradingSkippedBuilder_;
     }
 
+    private com.google.protobuf.SingleFieldBuilder<
+            com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo,
+            com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo.Builder,
+            com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfoOrBuilder>
+        gkeNetworkPolicyBuilder_;
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of a GKE Network Policy.
+     * </pre>
+     *
+     * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo gke_network_policy = 39;
+     * </code>
+     *
+     * @return Whether the gkeNetworkPolicy field is set.
+     */
+    @java.lang.Override
+    public boolean hasGkeNetworkPolicy() {
+      return stepInfoCase_ == 39;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of a GKE Network Policy.
+     * </pre>
+     *
+     * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo gke_network_policy = 39;
+     * </code>
+     *
+     * @return The gkeNetworkPolicy.
+     */
+    @java.lang.Override
+    public com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo getGkeNetworkPolicy() {
+      if (gkeNetworkPolicyBuilder_ == null) {
+        if (stepInfoCase_ == 39) {
+          return (com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo) stepInfo_;
+        }
+        return com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo.getDefaultInstance();
+      } else {
+        if (stepInfoCase_ == 39) {
+          return gkeNetworkPolicyBuilder_.getMessage();
+        }
+        return com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo.getDefaultInstance();
+      }
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of a GKE Network Policy.
+     * </pre>
+     *
+     * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo gke_network_policy = 39;
+     * </code>
+     */
+    public Builder setGkeNetworkPolicy(
+        com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo value) {
+      if (gkeNetworkPolicyBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        stepInfo_ = value;
+        onChanged();
+      } else {
+        gkeNetworkPolicyBuilder_.setMessage(value);
+      }
+      stepInfoCase_ = 39;
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of a GKE Network Policy.
+     * </pre>
+     *
+     * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo gke_network_policy = 39;
+     * </code>
+     */
+    public Builder setGkeNetworkPolicy(
+        com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo.Builder builderForValue) {
+      if (gkeNetworkPolicyBuilder_ == null) {
+        stepInfo_ = builderForValue.build();
+        onChanged();
+      } else {
+        gkeNetworkPolicyBuilder_.setMessage(builderForValue.build());
+      }
+      stepInfoCase_ = 39;
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of a GKE Network Policy.
+     * </pre>
+     *
+     * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo gke_network_policy = 39;
+     * </code>
+     */
+    public Builder mergeGkeNetworkPolicy(
+        com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo value) {
+      if (gkeNetworkPolicyBuilder_ == null) {
+        if (stepInfoCase_ == 39
+            && stepInfo_
+                != com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo
+                    .getDefaultInstance()) {
+          stepInfo_ =
+              com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo.newBuilder(
+                      (com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo) stepInfo_)
+                  .mergeFrom(value)
+                  .buildPartial();
+        } else {
+          stepInfo_ = value;
+        }
+        onChanged();
+      } else {
+        if (stepInfoCase_ == 39) {
+          gkeNetworkPolicyBuilder_.mergeFrom(value);
+        } else {
+          gkeNetworkPolicyBuilder_.setMessage(value);
+        }
+      }
+      stepInfoCase_ = 39;
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of a GKE Network Policy.
+     * </pre>
+     *
+     * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo gke_network_policy = 39;
+     * </code>
+     */
+    public Builder clearGkeNetworkPolicy() {
+      if (gkeNetworkPolicyBuilder_ == null) {
+        if (stepInfoCase_ == 39) {
+          stepInfoCase_ = 0;
+          stepInfo_ = null;
+          onChanged();
+        }
+      } else {
+        if (stepInfoCase_ == 39) {
+          stepInfoCase_ = 0;
+          stepInfo_ = null;
+        }
+        gkeNetworkPolicyBuilder_.clear();
+      }
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of a GKE Network Policy.
+     * </pre>
+     *
+     * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo gke_network_policy = 39;
+     * </code>
+     */
+    public com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo.Builder
+        getGkeNetworkPolicyBuilder() {
+      return internalGetGkeNetworkPolicyFieldBuilder().getBuilder();
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of a GKE Network Policy.
+     * </pre>
+     *
+     * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo gke_network_policy = 39;
+     * </code>
+     */
+    @java.lang.Override
+    public com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfoOrBuilder
+        getGkeNetworkPolicyOrBuilder() {
+      if ((stepInfoCase_ == 39) && (gkeNetworkPolicyBuilder_ != null)) {
+        return gkeNetworkPolicyBuilder_.getMessageOrBuilder();
+      } else {
+        if (stepInfoCase_ == 39) {
+          return (com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo) stepInfo_;
+        }
+        return com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo.getDefaultInstance();
+      }
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of a GKE Network Policy.
+     * </pre>
+     *
+     * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo gke_network_policy = 39;
+     * </code>
+     */
+    private com.google.protobuf.SingleFieldBuilder<
+            com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo,
+            com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo.Builder,
+            com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfoOrBuilder>
+        internalGetGkeNetworkPolicyFieldBuilder() {
+      if (gkeNetworkPolicyBuilder_ == null) {
+        if (!(stepInfoCase_ == 39)) {
+          stepInfo_ =
+              com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo.getDefaultInstance();
+        }
+        gkeNetworkPolicyBuilder_ =
+            new com.google.protobuf.SingleFieldBuilder<
+                com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo,
+                com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo.Builder,
+                com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfoOrBuilder>(
+                (com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo) stepInfo_,
+                getParentForChildren(),
+                isClean());
+        stepInfo_ = null;
+      }
+      stepInfoCase_ = 39;
+      onChanged();
+      return gkeNetworkPolicyBuilder_;
+    }
+
+    private com.google.protobuf.SingleFieldBuilder<
+            com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo,
+            com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Builder,
+            com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfoOrBuilder>
+        gkeNetworkPolicySkippedBuilder_;
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of the reason why GKE Network Policy evaluation was
+     * skipped.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo gke_network_policy_skipped = 40;
+     * </code>
+     *
+     * @return Whether the gkeNetworkPolicySkipped field is set.
+     */
+    @java.lang.Override
+    public boolean hasGkeNetworkPolicySkipped() {
+      return stepInfoCase_ == 40;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of the reason why GKE Network Policy evaluation was
+     * skipped.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo gke_network_policy_skipped = 40;
+     * </code>
+     *
+     * @return The gkeNetworkPolicySkipped.
+     */
+    @java.lang.Override
+    public com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo
+        getGkeNetworkPolicySkipped() {
+      if (gkeNetworkPolicySkippedBuilder_ == null) {
+        if (stepInfoCase_ == 40) {
+          return (com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo) stepInfo_;
+        }
+        return com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo
+            .getDefaultInstance();
+      } else {
+        if (stepInfoCase_ == 40) {
+          return gkeNetworkPolicySkippedBuilder_.getMessage();
+        }
+        return com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo
+            .getDefaultInstance();
+      }
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of the reason why GKE Network Policy evaluation was
+     * skipped.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo gke_network_policy_skipped = 40;
+     * </code>
+     */
+    public Builder setGkeNetworkPolicySkipped(
+        com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo value) {
+      if (gkeNetworkPolicySkippedBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        stepInfo_ = value;
+        onChanged();
+      } else {
+        gkeNetworkPolicySkippedBuilder_.setMessage(value);
+      }
+      stepInfoCase_ = 40;
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of the reason why GKE Network Policy evaluation was
+     * skipped.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo gke_network_policy_skipped = 40;
+     * </code>
+     */
+    public Builder setGkeNetworkPolicySkipped(
+        com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Builder
+            builderForValue) {
+      if (gkeNetworkPolicySkippedBuilder_ == null) {
+        stepInfo_ = builderForValue.build();
+        onChanged();
+      } else {
+        gkeNetworkPolicySkippedBuilder_.setMessage(builderForValue.build());
+      }
+      stepInfoCase_ = 40;
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of the reason why GKE Network Policy evaluation was
+     * skipped.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo gke_network_policy_skipped = 40;
+     * </code>
+     */
+    public Builder mergeGkeNetworkPolicySkipped(
+        com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo value) {
+      if (gkeNetworkPolicySkippedBuilder_ == null) {
+        if (stepInfoCase_ == 40
+            && stepInfo_
+                != com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo
+                    .getDefaultInstance()) {
+          stepInfo_ =
+              com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.newBuilder(
+                      (com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo)
+                          stepInfo_)
+                  .mergeFrom(value)
+                  .buildPartial();
+        } else {
+          stepInfo_ = value;
+        }
+        onChanged();
+      } else {
+        if (stepInfoCase_ == 40) {
+          gkeNetworkPolicySkippedBuilder_.mergeFrom(value);
+        } else {
+          gkeNetworkPolicySkippedBuilder_.setMessage(value);
+        }
+      }
+      stepInfoCase_ = 40;
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of the reason why GKE Network Policy evaluation was
+     * skipped.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo gke_network_policy_skipped = 40;
+     * </code>
+     */
+    public Builder clearGkeNetworkPolicySkipped() {
+      if (gkeNetworkPolicySkippedBuilder_ == null) {
+        if (stepInfoCase_ == 40) {
+          stepInfoCase_ = 0;
+          stepInfo_ = null;
+          onChanged();
+        }
+      } else {
+        if (stepInfoCase_ == 40) {
+          stepInfoCase_ = 0;
+          stepInfo_ = null;
+        }
+        gkeNetworkPolicySkippedBuilder_.clear();
+      }
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of the reason why GKE Network Policy evaluation was
+     * skipped.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo gke_network_policy_skipped = 40;
+     * </code>
+     */
+    public com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Builder
+        getGkeNetworkPolicySkippedBuilder() {
+      return internalGetGkeNetworkPolicySkippedFieldBuilder().getBuilder();
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of the reason why GKE Network Policy evaluation was
+     * skipped.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo gke_network_policy_skipped = 40;
+     * </code>
+     */
+    @java.lang.Override
+    public com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfoOrBuilder
+        getGkeNetworkPolicySkippedOrBuilder() {
+      if ((stepInfoCase_ == 40) && (gkeNetworkPolicySkippedBuilder_ != null)) {
+        return gkeNetworkPolicySkippedBuilder_.getMessageOrBuilder();
+      } else {
+        if (stepInfoCase_ == 40) {
+          return (com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo) stepInfo_;
+        }
+        return com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo
+            .getDefaultInstance();
+      }
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of the reason why GKE Network Policy evaluation was
+     * skipped.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo gke_network_policy_skipped = 40;
+     * </code>
+     */
+    private com.google.protobuf.SingleFieldBuilder<
+            com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo,
+            com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Builder,
+            com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfoOrBuilder>
+        internalGetGkeNetworkPolicySkippedFieldBuilder() {
+      if (gkeNetworkPolicySkippedBuilder_ == null) {
+        if (!(stepInfoCase_ == 40)) {
+          stepInfo_ =
+              com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo
+                  .getDefaultInstance();
+        }
+        gkeNetworkPolicySkippedBuilder_ =
+            new com.google.protobuf.SingleFieldBuilder<
+                com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo,
+                com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Builder,
+                com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfoOrBuilder>(
+                (com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo) stepInfo_,
+                getParentForChildren(),
+                isClean());
+        stepInfo_ = null;
+      }
+      stepInfoCase_ = 40;
+      onChanged();
+      return gkeNetworkPolicySkippedBuilder_;
+    }
+
     private com.google.protobuf.SingleFieldBuilder<
             com.google.cloud.networkmanagement.v1beta1.CloudSQLInstanceInfo,
             com.google.cloud.networkmanagement.v1beta1.CloudSQLInstanceInfo.Builder,
@@ -12869,6 +13806,256 @@ public Builder clearServerlessNeg() {
       return serverlessNegBuilder_;
     }
 
+    private com.google.protobuf.SingleFieldBuilder<
+            com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo,
+            com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo.Builder,
+            com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfoOrBuilder>
+        ngfwPacketInspectionBuilder_;
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of a layer 7 packet inspection by the firewall.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo ngfw_packet_inspection = 42;
+     * </code>
+     *
+     * @return Whether the ngfwPacketInspection field is set.
+     */
+    @java.lang.Override
+    public boolean hasNgfwPacketInspection() {
+      return stepInfoCase_ == 42;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of a layer 7 packet inspection by the firewall.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo ngfw_packet_inspection = 42;
+     * </code>
+     *
+     * @return The ngfwPacketInspection.
+     */
+    @java.lang.Override
+    public com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo
+        getNgfwPacketInspection() {
+      if (ngfwPacketInspectionBuilder_ == null) {
+        if (stepInfoCase_ == 42) {
+          return (com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo) stepInfo_;
+        }
+        return com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo
+            .getDefaultInstance();
+      } else {
+        if (stepInfoCase_ == 42) {
+          return ngfwPacketInspectionBuilder_.getMessage();
+        }
+        return com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo
+            .getDefaultInstance();
+      }
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of a layer 7 packet inspection by the firewall.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo ngfw_packet_inspection = 42;
+     * </code>
+     */
+    public Builder setNgfwPacketInspection(
+        com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo value) {
+      if (ngfwPacketInspectionBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        stepInfo_ = value;
+        onChanged();
+      } else {
+        ngfwPacketInspectionBuilder_.setMessage(value);
+      }
+      stepInfoCase_ = 42;
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of a layer 7 packet inspection by the firewall.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo ngfw_packet_inspection = 42;
+     * </code>
+     */
+    public Builder setNgfwPacketInspection(
+        com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo.Builder
+            builderForValue) {
+      if (ngfwPacketInspectionBuilder_ == null) {
+        stepInfo_ = builderForValue.build();
+        onChanged();
+      } else {
+        ngfwPacketInspectionBuilder_.setMessage(builderForValue.build());
+      }
+      stepInfoCase_ = 42;
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of a layer 7 packet inspection by the firewall.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo ngfw_packet_inspection = 42;
+     * </code>
+     */
+    public Builder mergeNgfwPacketInspection(
+        com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo value) {
+      if (ngfwPacketInspectionBuilder_ == null) {
+        if (stepInfoCase_ == 42
+            && stepInfo_
+                != com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo
+                    .getDefaultInstance()) {
+          stepInfo_ =
+              com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo.newBuilder(
+                      (com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo)
+                          stepInfo_)
+                  .mergeFrom(value)
+                  .buildPartial();
+        } else {
+          stepInfo_ = value;
+        }
+        onChanged();
+      } else {
+        if (stepInfoCase_ == 42) {
+          ngfwPacketInspectionBuilder_.mergeFrom(value);
+        } else {
+          ngfwPacketInspectionBuilder_.setMessage(value);
+        }
+      }
+      stepInfoCase_ = 42;
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of a layer 7 packet inspection by the firewall.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo ngfw_packet_inspection = 42;
+     * </code>
+     */
+    public Builder clearNgfwPacketInspection() {
+      if (ngfwPacketInspectionBuilder_ == null) {
+        if (stepInfoCase_ == 42) {
+          stepInfoCase_ = 0;
+          stepInfo_ = null;
+          onChanged();
+        }
+      } else {
+        if (stepInfoCase_ == 42) {
+          stepInfoCase_ = 0;
+          stepInfo_ = null;
+        }
+        ngfwPacketInspectionBuilder_.clear();
+      }
+      return this;
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of a layer 7 packet inspection by the firewall.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo ngfw_packet_inspection = 42;
+     * </code>
+     */
+    public com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo.Builder
+        getNgfwPacketInspectionBuilder() {
+      return internalGetNgfwPacketInspectionFieldBuilder().getBuilder();
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of a layer 7 packet inspection by the firewall.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo ngfw_packet_inspection = 42;
+     * </code>
+     */
+    @java.lang.Override
+    public com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfoOrBuilder
+        getNgfwPacketInspectionOrBuilder() {
+      if ((stepInfoCase_ == 42) && (ngfwPacketInspectionBuilder_ != null)) {
+        return ngfwPacketInspectionBuilder_.getMessageOrBuilder();
+      } else {
+        if (stepInfoCase_ == 42) {
+          return (com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo) stepInfo_;
+        }
+        return com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo
+            .getDefaultInstance();
+      }
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Display information of a layer 7 packet inspection by the firewall.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo ngfw_packet_inspection = 42;
+     * </code>
+     */
+    private com.google.protobuf.SingleFieldBuilder<
+            com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo,
+            com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo.Builder,
+            com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfoOrBuilder>
+        internalGetNgfwPacketInspectionFieldBuilder() {
+      if (ngfwPacketInspectionBuilder_ == null) {
+        if (!(stepInfoCase_ == 42)) {
+          stepInfo_ =
+              com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo
+                  .getDefaultInstance();
+        }
+        ngfwPacketInspectionBuilder_ =
+            new com.google.protobuf.SingleFieldBuilder<
+                com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo,
+                com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo.Builder,
+                com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfoOrBuilder>(
+                (com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo) stepInfo_,
+                getParentForChildren(),
+                isClean());
+        stepInfo_ = null;
+      }
+      stepInfoCase_ = 42;
+      onChanged();
+      return ngfwPacketInspectionBuilder_;
+    }
+
     // @@protoc_insertion_point(builder_scope:google.cloud.networkmanagement.v1beta1.Step)
   }
 
diff --git a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/StepOrBuilder.java b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/StepOrBuilder.java
index 626af7d55762..e56822636905 100644
--- a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/StepOrBuilder.java
+++ b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/StepOrBuilder.java
@@ -792,7 +792,7 @@ public interface StepOrBuilder
    * </code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.Step.load_balancer is deprecated. See
-   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=294
+   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=315
    * @return Whether the loadBalancer field is set.
    */
   @java.lang.Deprecated
@@ -811,7 +811,7 @@ public interface StepOrBuilder
    * </code>
    *
    * @deprecated google.cloud.networkmanagement.v1beta1.Step.load_balancer is deprecated. See
-   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=294
+   *     google/cloud/networkmanagement/v1beta1/trace.proto;l=315
    * @return The loadBalancer.
    */
   @java.lang.Deprecated
@@ -990,6 +990,95 @@ public interface StepOrBuilder
   com.google.cloud.networkmanagement.v1beta1.IpMasqueradingSkippedInfoOrBuilder
       getIpMasqueradingSkippedOrBuilder();
 
+  /**
+   *
+   *
+   * <pre>
+   * Display information of a GKE Network Policy.
+   * </pre>
+   *
+   * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo gke_network_policy = 39;
+   * </code>
+   *
+   * @return Whether the gkeNetworkPolicy field is set.
+   */
+  boolean hasGkeNetworkPolicy();
+
+  /**
+   *
+   *
+   * <pre>
+   * Display information of a GKE Network Policy.
+   * </pre>
+   *
+   * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo gke_network_policy = 39;
+   * </code>
+   *
+   * @return The gkeNetworkPolicy.
+   */
+  com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo getGkeNetworkPolicy();
+
+  /**
+   *
+   *
+   * <pre>
+   * Display information of a GKE Network Policy.
+   * </pre>
+   *
+   * <code>.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfo gke_network_policy = 39;
+   * </code>
+   */
+  com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicyInfoOrBuilder
+      getGkeNetworkPolicyOrBuilder();
+
+  /**
+   *
+   *
+   * <pre>
+   * Display information of the reason why GKE Network Policy evaluation was
+   * skipped.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo gke_network_policy_skipped = 40;
+   * </code>
+   *
+   * @return Whether the gkeNetworkPolicySkipped field is set.
+   */
+  boolean hasGkeNetworkPolicySkipped();
+
+  /**
+   *
+   *
+   * <pre>
+   * Display information of the reason why GKE Network Policy evaluation was
+   * skipped.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo gke_network_policy_skipped = 40;
+   * </code>
+   *
+   * @return The gkeNetworkPolicySkipped.
+   */
+  com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo
+      getGkeNetworkPolicySkipped();
+
+  /**
+   *
+   *
+   * <pre>
+   * Display information of the reason why GKE Network Policy evaluation was
+   * skipped.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo gke_network_policy_skipped = 40;
+   * </code>
+   */
+  com.google.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfoOrBuilder
+      getGkeNetworkPolicySkippedOrBuilder();
+
   /**
    *
    *
@@ -1420,5 +1509,49 @@ public interface StepOrBuilder
    */
   com.google.cloud.networkmanagement.v1beta1.ServerlessNegInfoOrBuilder getServerlessNegOrBuilder();
 
+  /**
+   *
+   *
+   * <pre>
+   * Display information of a layer 7 packet inspection by the firewall.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo ngfw_packet_inspection = 42;
+   * </code>
+   *
+   * @return Whether the ngfwPacketInspection field is set.
+   */
+  boolean hasNgfwPacketInspection();
+
+  /**
+   *
+   *
+   * <pre>
+   * Display information of a layer 7 packet inspection by the firewall.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo ngfw_packet_inspection = 42;
+   * </code>
+   *
+   * @return The ngfwPacketInspection.
+   */
+  com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo getNgfwPacketInspection();
+
+  /**
+   *
+   *
+   * <pre>
+   * Display information of a layer 7 packet inspection by the firewall.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfo ngfw_packet_inspection = 42;
+   * </code>
+   */
+  com.google.cloud.networkmanagement.v1beta1.NgfwPacketInspectionInfoOrBuilder
+      getNgfwPacketInspectionOrBuilder();
+
   com.google.cloud.networkmanagement.v1beta1.Step.StepInfoCase getStepInfoCase();
 }
diff --git a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/TraceProto.java b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/TraceProto.java
index c9c8ec03b4f5..14cfff8685a5 100644
--- a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/TraceProto.java
+++ b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/java/com/google/cloud/networkmanagement/v1beta1/TraceProto.java
@@ -128,6 +128,14 @@ public static void registerAllExtensions(com.google.protobuf.ExtensionRegistry r
       internal_static_google_cloud_networkmanagement_v1beta1_IpMasqueradingSkippedInfo_descriptor;
   static final com.google.protobuf.GeneratedMessage.FieldAccessorTable
       internal_static_google_cloud_networkmanagement_v1beta1_IpMasqueradingSkippedInfo_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_networkmanagement_v1beta1_GkeNetworkPolicyInfo_descriptor;
+  static final com.google.protobuf.GeneratedMessage.FieldAccessorTable
+      internal_static_google_cloud_networkmanagement_v1beta1_GkeNetworkPolicyInfo_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_networkmanagement_v1beta1_GkeNetworkPolicySkippedInfo_descriptor;
+  static final com.google.protobuf.GeneratedMessage.FieldAccessorTable
+      internal_static_google_cloud_networkmanagement_v1beta1_GkeNetworkPolicySkippedInfo_fieldAccessorTable;
   static final com.google.protobuf.Descriptors.Descriptor
       internal_static_google_cloud_networkmanagement_v1beta1_CloudSQLInstanceInfo_descriptor;
   static final com.google.protobuf.GeneratedMessage.FieldAccessorTable
@@ -184,6 +192,10 @@ public static void registerAllExtensions(com.google.protobuf.ExtensionRegistry r
       internal_static_google_cloud_networkmanagement_v1beta1_ServerlessNegInfo_descriptor;
   static final com.google.protobuf.GeneratedMessage.FieldAccessorTable
       internal_static_google_cloud_networkmanagement_v1beta1_ServerlessNegInfo_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_networkmanagement_v1beta1_NgfwPacketInspectionInfo_descriptor;
+  static final com.google.protobuf.GeneratedMessage.FieldAccessorTable
+      internal_static_google_cloud_networkmanagement_v1beta1_NgfwPacketInspectionInfo_fieldAccessorTable;
 
   public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
     return descriptor;
@@ -200,7 +212,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "endpoint_info\030\001 \001(\01324.google.clo"
           + "ud.networkmanagement.v1beta1.EndpointInfo\022;\n"
           + "\005steps\030\002 \003(\0132,.google.cloud.networkmanagement.v1beta1.Step\022\030\n"
-          + "\020forward_trace_id\030\004 \001(\005\"\304\037\n"
+          + "\020forward_trace_id\030\004 \001(\005\"\266#\n"
           + "\004Step\022\023\n"
           + "\013description\030\001 \001(\t\022A\n"
           + "\005state\030\002"
@@ -251,27 +263,33 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + ".cloud.networkmanagement.v1beta1.GkePodInfoH\000\022d\n"
           + "\027ip_masquerading_skipped\030& \001(\0132A"
           + ".google.cloud.networkmanagement.v1beta1.IpMasqueradingSkippedInfoH\000\022Z\n"
-          + "\022cloud_sql_instance\030\023 \001(\0132<.google.cloud.networkma"
-          + "nagement.v1beta1.CloudSQLInstanceInfoH\000\022S\n"
-          + "\016redis_instance\030\036 \001(\01329.google.cloud.n"
-          + "etworkmanagement.v1beta1.RedisInstanceInfoH\000\022Q\n\r"
-          + "redis_cluster\030\037 \001(\01328.google.clo"
-          + "ud.networkmanagement.v1beta1.RedisClusterInfoH\000\022S\n"
-          + "\016cloud_function\030\024 \001(\01329.google"
-          + ".cloud.networkmanagement.v1beta1.CloudFunctionInfoH\000\022Z\n"
-          + "\022app_engine_version\030\026 \001(\013"
-          + "2<.google.cloud.networkmanagement.v1beta1.AppEngineVersionInfoH\000\022Z\n"
+          + "\022gke_network_policy\030\' \001(\0132<.google.cloud.networkma"
+          + "nagement.v1beta1.GkeNetworkPolicyInfoH\000\022i\n"
+          + "\032gke_network_policy_skipped\030( \001(\0132C.go"
+          + "ogle.cloud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfoH\000\022Z\n"
+          + "\022cloud_sql_instance\030\023 \001(\0132<.google.cloud.networkman"
+          + "agement.v1beta1.CloudSQLInstanceInfoH\000\022S\n"
+          + "\016redis_instance\030\036 \001(\01329.google.cloud.ne"
+          + "tworkmanagement.v1beta1.RedisInstanceInfoH\000\022Q\n\r"
+          + "redis_cluster\030\037 \001(\01328.google.clou"
+          + "d.networkmanagement.v1beta1.RedisClusterInfoH\000\022S\n"
+          + "\016cloud_function\030\024 \001(\01329.google."
+          + "cloud.networkmanagement.v1beta1.CloudFunctionInfoH\000\022Z\n"
+          + "\022app_engine_version\030\026 \001(\0132"
+          + "<.google.cloud.networkmanagement.v1beta1.AppEngineVersionInfoH\000\022Z\n"
           + "\022cloud_run_revision\030\027"
           + " \001(\0132<.google.cloud.networkmanagement.v1beta1.CloudRunRevisionInfoH\000\022>\n"
           + "\003nat\030\031 \001(\0132/.google.cloud.networkmanagement.v1beta1.NatInfoH\000\022W\n"
           + "\020proxy_connection\030\032"
           + " \001(\0132;.google.cloud.networkmanagement.v1beta1.ProxyConnectionInfoH\000\022e\n"
-          + "\032load_balancer_backend_info\030\033 \001(\0132?.google.cloud"
-          + ".networkmanagement.v1beta1.LoadBalancerBackendInfoH\000\022S\n"
-          + "\016storage_bucket\030\034 \001(\01329.g"
-          + "oogle.cloud.networkmanagement.v1beta1.StorageBucketInfoH\000\022S\n"
-          + "\016serverless_neg\030\035 \001("
-          + "\01329.google.cloud.networkmanagement.v1beta1.ServerlessNegInfoH\000\"\351\010\n"
+          + "\032load_balancer_backend_info\030\033 \001(\0132?.google.cloud."
+          + "networkmanagement.v1beta1.LoadBalancerBackendInfoH\000\022S\n"
+          + "\016storage_bucket\030\034 \001(\01329.go"
+          + "ogle.cloud.networkmanagement.v1beta1.StorageBucketInfoH\000\022S\n"
+          + "\016serverless_neg\030\035 \001(\013"
+          + "29.google.cloud.networkmanagement.v1beta1.ServerlessNegInfoH\000\022b\n"
+          + "\026ngfw_packet_inspection\030* \001(\0132@.google.cloud.networkmana"
+          + "gement.v1beta1.NgfwPacketInspectionInfoH\000\"\260\n\n"
           + "\005State\022\025\n"
           + "\021STATE_UNSPECIFIED\020\000\022\027\n"
           + "\023START_FROM_INSTANCE\020\001\022\027\n"
@@ -304,11 +322,17 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "\024ARRIVE_AT_VPN_TUNNEL\020\r"
           + "\022%\n"
           + "!ARRIVE_AT_INTERCONNECT_ATTACHMENT\020%\022\033\n"
-          + "\027ARRIVE_AT_VPC_CONNECTOR\020\030\022 \n"
+          + "\027ARRIVE_AT_VPC_CONNECTOR\020\030\022\025\n"
+          + "\021ARRIVE_AT_GKE_POD\020,\022 \n"
           + "\034DIRECT_VPC_EGRESS_CONNECTION\020#\022\"\n"
-          + "\036SERVERLESS_EXTERNAL_CONNECTION\020$\022\007\n"
+          + "\036SERVERLESS_EXTERNAL_CONNECTION\020$\022\032\n"
+          + "\026NGFW_PACKET_INSPECTION\020/\022\007\n"
           + "\003NAT\020\016\022 \n"
-          + "\034SKIP_GKE_POD_IP_MASQUERADING\020(\022\024\n"
+          + "\034SKIP_GKE_POD_IP_MASQUERADING\020(\022#\n"
+          + "\037SKIP_GKE_INGRESS_NETWORK_POLICY\020)\022\"\n"
+          + "\036SKIP_GKE_EGRESS_NETWORK_POLICY\020*\022$\n"
+          + " APPLY_INGRESS_GKE_NETWORK_POLICY\020-\022#\n"
+          + "\037APPLY_EGRESS_GKE_NETWORK_POLICY\020.\022\024\n"
           + "\020PROXY_CONNECTION\020\017\022\013\n"
           + "\007DELIVER\020\020\022\010\n"
           + "\004DROP\020\021\022\013\n"
@@ -328,8 +352,8 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "\032psc_network_attachment_uri\030\t \001(\t\022\023\n"
           + "\007running\030\n"
           + " \001(\010B\002\030\001\022K\n"
-          + "\006status\030\013 \001(\0162;.google.cloud"
-          + ".networkmanagement.v1beta1.InstanceInfo.Status\">\n"
+          + "\006status\030\013 "
+          + "\001(\0162;.google.cloud.networkmanagement.v1beta1.InstanceInfo.Status\">\n"
           + "\006Status\022\026\n"
           + "\022STATUS_UNSPECIFIED\020\000\022\013\n"
           + "\007RUNNING\020\001\022\017\n"
@@ -352,12 +376,11 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "\006policy\030\t \001(\t\022\022\n\n"
           + "policy_uri\030\013 \001(\t\022a\n"
           + "\022firewall_rule_type\030\n"
-          + " \001(\0162E.goo"
-          + "gle.cloud.networkmanagement.v1beta1.FirewallInfo.FirewallRuleType\022\027\n"
+          + " \001(\0162E.google.cloud.networkmanag"
+          + "ement.v1beta1.FirewallInfo.FirewallRuleType\022\027\n"
           + "\017policy_priority\030\014 \001(\005\022T\n"
           + "\013target_type\030\r"
-          + " \001(\0162?.google"
-          + ".cloud.networkmanagement.v1beta1.FirewallInfo.TargetType\"\274\003\n"
+          + " \001(\0162?.google.cloud.networkmanagement.v1beta1.FirewallInfo.TargetType\"\274\003\n"
           + "\020FirewallRuleType\022\"\n"
           + "\036FIREWALL_RULE_TYPE_UNSPECIFIED\020\000\022%\n"
           + "!HIERARCHICAL_FIREWALL_POLICY_RULE\020\001\022\025\n"
@@ -376,12 +399,12 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "\tINSTANCES\020\001\022\027\n"
           + "\023INTERNAL_MANAGED_LB\020\002\"\373\013\n"
           + "\tRouteInfo\022O\n\n"
-          + "route_type\030\010 \001(\0162;.google.cloud.netw"
-          + "orkmanagement.v1beta1.RouteInfo.RouteType\022T\n\r"
-          + "next_hop_type\030\t \001(\0162=.google.cloud."
-          + "networkmanagement.v1beta1.RouteInfo.NextHopType\022U\n"
-          + "\013route_scope\030\016 \001(\0162<.google.cl"
-          + "oud.networkmanagement.v1beta1.RouteInfo.RouteScopeB\002\030\001\022\024\n"
+          + "route_type\030\010 \001(\0162;"
+          + ".google.cloud.networkmanagement.v1beta1.RouteInfo.RouteType\022T\n\r"
+          + "next_hop_type\030\t \001"
+          + "(\0162=.google.cloud.networkmanagement.v1beta1.RouteInfo.NextHopType\022U\n"
+          + "\013route_scope\030\016"
+          + " \001(\0162<.google.cloud.networkmanagement.v1beta1.RouteInfo.RouteScopeB\002\030\001\022\024\n"
           + "\014display_name\030\001 \001(\t\022\013\n"
           + "\003uri\030\002 \001(\t\022\016\n"
           + "\006region\030\023 \001(\t\022\025\n\r"
@@ -443,8 +466,8 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "\036_advertised_route_next_hop_uri\"\337\002\n"
           + "\021GoogleServiceInfo\022\021\n"
           + "\tsource_ip\030\001 \001(\t\022h\n"
-          + "\023google_service_type\030\002 \001(\0162K.google."
-          + "cloud.networkmanagement.v1beta1.GoogleServiceInfo.GoogleServiceType\"\314\001\n"
+          + "\023google_service_type\030\002 \001(\0162K.google.cloud.networkmanagemen"
+          + "t.v1beta1.GoogleServiceInfo.GoogleServiceType\"\314\001\n"
           + "\021GoogleServiceType\022#\n"
           + "\037GOOGLE_SERVICE_TYPE_UNSPECIFIED\020\000\022\007\n"
           + "\003IAP\020\001\022$\n"
@@ -468,13 +491,13 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + " \001(\t\022\035\n"
           + "\025psc_google_api_target\030\013 \001(\t\"\321\004\n"
           + "\020LoadBalancerInfo\022e\n"
-          + "\022load_balancer_type\030\001 \001(\0162I.g"
-          + "oogle.cloud.networkmanagement.v1beta1.LoadBalancerInfo.LoadBalancerType\022\034\n"
+          + "\022load_balancer_type\030\001 \001(\0162I.google.cloud.networkman"
+          + "agement.v1beta1.LoadBalancerInfo.LoadBalancerType\022\034\n"
           + "\020health_check_uri\030\002 \001(\tB\002\030\001\022M\n"
-          + "\010backends\030\003 \003(\0132"
-          + ";.google.cloud.networkmanagement.v1beta1.LoadBalancerBackend\022Z\n"
-          + "\014backend_type\030\004 \001"
-          + "(\0162D.google.cloud.networkmanagement.v1beta1.LoadBalancerInfo.BackendType\022\023\n"
+          + "\010backends\030\003 \003(\0132;.google.cloud.network"
+          + "management.v1beta1.LoadBalancerBackend\022Z\n"
+          + "\014backend_type\030\004 \001(\0162D.google.cloud.netw"
+          + "orkmanagement.v1beta1.LoadBalancerInfo.BackendType\022\023\n"
           + "\013backend_uri\030\005 \001(\t\"\217\001\n"
           + "\020LoadBalancerType\022\"\n"
           + "\036LOAD_BALANCER_TYPE_UNSPECIFIED\020\000\022\024\n"
@@ -491,9 +514,8 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "\023LoadBalancerBackend\022\024\n"
           + "\014display_name\030\001 \001(\t\022\013\n"
           + "\003uri\030\002 \001(\t\022y\n"
-          + "\033health_check_firewall_state\030\003 \001(\0162"
-          + "T.google.cloud.networkmanagement.v1beta1"
-          + ".LoadBalancerBackend.HealthCheckFirewallState\022,\n"
+          + "\033health_check_firewall_state\030\003 \001(\0162T.google.cloud.network"
+          + "management.v1beta1.LoadBalancerBackend.HealthCheckFirewallState\022,\n"
           + "$health_check_allowing_firewall_rules\030\004 \003(\t\022,\n"
           + "$health_check_blocking_firewall_rules\030\005 \003(\t\"j\n"
           + "\030HealthCheckFirewallState\022+\n"
@@ -520,8 +542,8 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "\021source_gateway_ip\030\006 \001(\t\022\023\n"
           + "\013network_uri\030\007 \001(\t\022\016\n"
           + "\006region\030\010 \001(\t\022W\n"
-          + "\014routing_type\030\t \001(\0162A.google.cloud"
-          + ".networkmanagement.v1beta1.VpnTunnelInfo.RoutingType\"[\n"
+          + "\014routing_type\030\t "
+          + "\001(\0162A.google.cloud.networkmanagement.v1beta1.VpnTunnelInfo.RoutingType\"[\n"
           + "\013RoutingType\022\034\n"
           + "\030ROUTING_TYPE_UNSPECIFIED\020\000\022\017\n"
           + "\013ROUTE_BASED\020\001\022\020\n"
@@ -533,8 +555,8 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "\020interconnect_uri\030\003 \001(\t\022\016\n"
           + "\006region\030\004 \001(\t\022\030\n"
           + "\020cloud_router_uri\030\005 \001(\t\022U\n"
-          + "\004type\030\006 \001(\0162G.google.cloud.networkmana"
-          + "gement.v1beta1.InterconnectAttachmentInfo.Type\0222\n"
+          + "\004type\030\006 \001(\0162G.google"
+          + ".cloud.networkmanagement.v1beta1.InterconnectAttachmentInfo.Type\0222\n"
           + " l2_attachment_matched_ip_address\030\007 \001("
           + "\tB\010\342\214\317\327\010\002\010\004\"`\n"
           + "\004Type\022\024\n"
@@ -553,14 +575,14 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "\027destination_network_uri\030\007 \001(\t\022\030\n"
           + "\020source_agent_uri\030\010 \001(\t\"\336\006\n"
           + "\013DeliverInfo\022J\n"
-          + "\006target\030\001 \001(\016"
-          + "2:.google.cloud.networkmanagement.v1beta1.DeliverInfo.Target\022\024\n"
+          + "\006target\030\001 \001(\0162:.google.cloud.networ"
+          + "kmanagement.v1beta1.DeliverInfo.Target\022\024\n"
           + "\014resource_uri\030\002 \001(\t\022\034\n\n"
           + "ip_address\030\003 \001(\tB\010\342\214\317\327\010\002\010\004\022\026\n"
           + "\016storage_bucket\030\004 \001(\t\022\035\n"
           + "\025psc_google_api_target\030\005 \001(\t\022b\n"
-          + "\023google_service_type\030\006 \001(\0162E.g"
-          + "oogle.cloud.networkmanagement.v1beta1.DeliverInfo.GoogleServiceType\"\204\003\n"
+          + "\023google_service_type\030\006 \001(\0162E.google.cloud.networkman"
+          + "agement.v1beta1.DeliverInfo.GoogleServiceType\"\204\003\n"
           + "\006Target\022\026\n"
           + "\022TARGET_UNSPECIFIED\020\000\022\014\n"
           + "\010INSTANCE\020\001\022\014\n"
@@ -591,8 +613,8 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "\025PRIVATE_GOOGLE_ACCESS\020\004\022\031\n"
           + "\025SERVERLESS_VPC_ACCESS\020\005\"\216\003\n"
           + "\013ForwardInfo\022J\n"
-          + "\006target\030\001 \001(\0162:.google.cloud"
-          + ".networkmanagement.v1beta1.ForwardInfo.Target\022\024\n"
+          + "\006target\030\001 "
+          + "\001(\0162:.google.cloud.networkmanagement.v1beta1.ForwardInfo.Target\022\024\n"
           + "\014resource_uri\030\002 \001(\t\022\034\n\n"
           + "ip_address\030\003 \001(\tB\010\342\214\317\327\010\002\010\004\"\376\001\n"
           + "\006Target\022\026\n"
@@ -609,8 +631,8 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "\030SECURE_WEB_PROXY_GATEWAY\020\n"
           + "\"\212\r\n"
           + "\tAbortInfo\022F\n"
-          + "\005cause\030\001 \001(\01627.google.cloud.n"
-          + "etworkmanagement.v1beta1.AbortInfo.Cause\022\024\n"
+          + "\005cause\030\001 \001("
+          + "\01627.google.cloud.networkmanagement.v1beta1.AbortInfo.Cause\022\024\n"
           + "\014resource_uri\030\002 \001(\t\022\034\n\n"
           + "ip_address\030\004 \001(\tB\010\342\214\317\327\010\002\010\004\022#\n"
           + "\033projects_missing_permission\030\003 \003(\t\"\333\013\n"
@@ -660,21 +682,20 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + ")UNSUPPORTED_GOOGLE_MANAGED_PROJECT_CONFIG\020\037\022\033\n"
           + "\027NO_SERVERLESS_IP_RANGES\020%\022 \n"
           + "\034IP_VERSION_PROTOCOL_MISMATCH\020(\022%\n"
-          + "!GKE_POD_UNKNOWN_ENDPOINT_LOCATION\020)\"\337!\n"
+          + "!GKE_POD_UNKNOWN_ENDPOINT_LOCATION\020)\"\266\"\n"
           + "\010DropInfo\022E\n"
-          + "\005cause\030\001"
-          + " \001(\01626.google.cloud.networkmanagement.v1beta1.DropInfo.Cause\022\024\n"
+          + "\005cause\030\001 \001(\01626."
+          + "google.cloud.networkmanagement.v1beta1.DropInfo.Cause\022\024\n"
           + "\014resource_uri\030\002 \001(\t\022\021\n"
           + "\tsource_ip\030\003 \001(\t\022\026\n"
           + "\016destination_ip\030\004 \001(\t\022\016\n"
           + "\006region\030\005 \001(\t\022\037\n"
           + "\027source_geolocation_code\030\006 \001(\t\022$\n"
-          + "\034destination_geolocation_code\030\007 \001(\t\"\363\037\n"
+          + "\034destination_geolocation_code\030\007 \001(\t\"\312 \n"
           + "\005Cause\022\025\n"
           + "\021CAUSE_UNSPECIFIED\020\000\022\034\n"
           + "\030UNKNOWN_EXTERNAL_ADDRESS\020\001\022\031\n"
-          + "\025FOREIGN_IP_DISALLOWED\020\002\022\021\n"
-          + "\r"
+          + "\025FOREIGN_IP_DISALLOWED\020\002\022\021\n\r"
           + "FIREWALL_RULE\020\003\022\014\n"
           + "\010NO_ROUTE\020\004\022\023\n"
           + "\017ROUTE_BLACKHOLE\020\005\022\027\n"
@@ -731,7 +752,8 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "*VPC_CONNECTOR_HEALTH_CHECK_TRAFFIC_BLOCKED\020=\022#\n"
           + "\037FORWARDING_RULE_REGION_MISMATCH\020\031\022\037\n"
           + "\033PSC_CONNECTION_NOT_ACCEPTED\020\032\022-\n"
-          + ")PSC_ENDPOINT_ACCESSED_FROM_PEERED_NETWORK\020)\022.\n"
+          + ")PSC_ENDPOINT_ACCESSED_FROM_PEERED",
+      "_NETWORK\020)\022.\n"
           + "*PSC_NEG_PRODUCER_ENDPOINT_NO_GLOBAL_ACCESS\0200\0223\n"
           + "/PSC_NEG_PRODUCER_FORWARDING_RULE_MULTIPLE_PORTS\0206\022!\n"
           + "\035CLOUD_SQL_PSC_NEG_UNSUPPORTED\020:\022-\n"
@@ -744,8 +766,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "!LOAD_BALANCER_HAS_NO_PROXY_SUBNET\020\'\022\032\n"
           + "\026CLOUD_NAT_NO_ADDRESSES\020(\022\020\n"
           + "\014ROUTING_LOOP\020;\022)\n"
-          + "%DROPPED_INSIDE",
-      "_GOOGLE_MANAGED_SERVICE\020>\022)\n"
+          + "%DROPPED_INSIDE_GOOGLE_MANAGED_SERVICE\020>\022)\n"
           + "%LOAD_BALANCER_BACKEND_INVALID_NETWORK\020A\022*\n"
           + "&BACKEND_SERVICE_NAMED_PORT_NOT_DEFINED\020B\022\'\n"
           + "#DESTINATION_IS_PRIVATE_NAT_IP_RANGE\020C\022)\n"
@@ -777,7 +798,9 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "\'L2_INTERCONNECT_DESTINATION_IP_MISMATCH\020f\022.\n"
           + "*NCC_ROUTE_WITHIN_HYBRID_SUBNET_UNSUPPORTED\020h\022!\n"
           + "\035HYBRID_SUBNET_REGION_MISMATCH\020i\022\032\n"
-          + "\026HYBRID_SUBNET_NO_ROUTE\020j\"\201\001\n\r"
+          + "\026HYBRID_SUBNET_NO_ROUTE\020j\022\026\n"
+          + "\022GKE_NETWORK_POLICY\020l\022=\n"
+          + "9NO_VALID_ROUTE_FROM_GOOGLE_MANAGED_NETWORK_TO_DESTINATION\020n\"\201\001\n\r"
           + "GKEMasterInfo\022\023\n"
           + "\013cluster_uri\030\002 \001(\t\022\033\n"
           + "\023cluster_network_uri\030\004 \001(\t\022\023\n"
@@ -789,8 +812,8 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "ip_address\030\002 \001(\tB\010\342\214\317\327\010\002\010\004\022\023\n"
           + "\013network_uri\030\003 \001(\t\"\304\003\n"
           + "\031IpMasqueradingSkippedInfo\022X\n"
-          + "\006reason\030\001 \001(\0162H.google.cloud.networkmana"
-          + "gement.v1beta1.IpMasqueradingSkippedInfo.Reason\022\034\n"
+          + "\006reason\030\001 \001(\0162H"
+          + ".google.cloud.networkmanagement.v1beta1.IpMasqueradingSkippedInfo.Reason\022\034\n"
           + "\024non_masquerade_range\030\002 \001(\t\"\256\002\n"
           + "\006Reason\022\026\n"
           + "\022REASON_UNSPECIFIED\020\000\0225\n"
@@ -800,7 +823,22 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "\025DEFAULT_SNAT_DISABLED\020\004\022\034\n"
           + "\030NO_MASQUERADING_FOR_IPV6\020\005\022#\n"
           + "\037POD_USES_NODE_NETWORK_NAMESPACE\020\006\022%\n"
-          + "!NO_MASQUERADING_FOR_RETURN_PACKET\020\007\"\210\001\n"
+          + "!NO_MASQUERADING_FOR_RETURN_PACKET\020\007\"\\\n"
+          + "\024GkeNetworkPolicyInfo\022\024\n"
+          + "\014display_name\030\001 \001(\t\022\013\n"
+          + "\003uri\030\002 \001(\t\022\021\n"
+          + "\tdirection\030\003 \001(\t\022\016\n"
+          + "\006action\030\004 \001(\t\"\343\002\n"
+          + "\033GkeNetworkPolicySkippedInfo\022Z\n"
+          + "\006reason\030\001 \001(\0162J.google.c"
+          + "loud.networkmanagement.v1beta1.GkeNetworkPolicySkippedInfo.Reason\"\347\001\n"
+          + "\006Reason\022\026\n"
+          + "\022REASON_UNSPECIFIED\020\000\022\033\n"
+          + "\027NETWORK_POLICY_DISABLED\020\001\022\037\n"
+          + "\033INGRESS_SOURCE_ON_SAME_NODE\020\002\022*\n"
+          + "&EGRESS_FROM_NODE_NETWORK_NAMESPACE_POD\020\003\0222\n"
+          + ".NETWORK_POLICY_NOT_APPLIED_TO_RESPONSE_TRAFFIC\020\004\022\'\n"
+          + "#NETWORK_POLICY_ANALYSIS_UNSUPPORTED\020d\"\210\001\n"
           + "\024CloudSQLInstanceInfo\022\024\n"
           + "\014display_name\030\001 \001(\t\022\013\n"
           + "\003uri\030\002 \001(\t\022\023\n"
@@ -869,8 +907,8 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "router_uri\030\014 \001(\t\022\030\n"
           + "\020nat_gateway_name\030\r"
           + " \001(\t\022c\n"
-          + "\026cloud_nat_gateway_type\030\016 \001(\016"
-          + "2C.google.cloud.networkmanagement.v1beta1.NatInfo.CloudNatGatewayType\"\231\001\n"
+          + "\026cloud_nat_gateway_type\030\016 \001(\0162C."
+          + "google.cloud.networkmanagement.v1beta1.NatInfo.CloudNatGatewayType\"\231\001\n"
           + "\004Type\022\024\n"
           + "\020TYPE_UNSPECIFIED\020\000\022\030\n"
           + "\024INTERNAL_TO_EXTERNAL\020\001\022\030\n"
@@ -909,8 +947,9 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "\025psc_google_api_target\030\n"
           + " \001(\t\022\030\n"
           + "\020health_check_uri\030\006 \001(\t\022\221\001\n"
-          + "#health_check_firewalls_config_state\030\007 \001(\0162_.google.cloud.networkmanagemen"
-          + "t.v1beta1.LoadBalancerBackendInfo.HealthCheckFirewallsConfigStateB\003\340A\003\"\315\001\n"
+          + "#health_check_firewalls_config_state\030\007"
+          + " \001(\0162_.google.cloud.networkmanagement.v"
+          + "1beta1.LoadBalancerBackendInfo.HealthCheckFirewallsConfigStateB\003\340A\003\"\315\001\n"
           + "\037HealthCheckFirewallsConfigState\0223\n"
           + "/HEALTH_CHECK_FIREWALLS_CONFIG_STATE_UNSPECIFIED\020\000\022\030\n"
           + "\024FIREWALLS_CONFIGURED\020\001\022\"\n"
@@ -920,7 +959,9 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "\021StorageBucketInfo\022\016\n"
           + "\006bucket\030\001 \001(\t\"$\n"
           + "\021ServerlessNegInfo\022\017\n"
-          + "\007neg_uri\030\001 \001(\t*\366\002\n"
+          + "\007neg_uri\030\001 \001(\t\">\n"
+          + "\030NgfwPacketInspectionInfo\022\"\n"
+          + "\032security_profile_group_uri\030\001 \001(\t*\366\002\n"
           + "\020LoadBalancerType\022\"\n"
           + "\036LOAD_BALANCER_TYPE_UNSPECIFIED\020\000\022 \n"
           + "\034HTTPS_ADVANCED_LOAD_BALANCER\020\001\022\027\n"
@@ -935,10 +976,10 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "\036TCP_UDP_INTERNAL_LOAD_BALANCER\020\n"
           + "B\222\002\n"
           + "*com.google.cloud.networkmanagement.v1beta1B\n"
-          + "TraceProtoP\001ZXcloud.google.com/go/networkmanagement/apiv1beta"
-          + "1/networkmanagementpb;networkmanagementpb\252\002&Google.Cloud.NetworkManagement.V1Bet"
-          + "a1\312\002&Google\\Cloud\\NetworkManagement\\V1be"
-          + "ta1\352\002)Google::Cloud::NetworkManagement::V1beta1b\006proto3"
+          + "TraceProtoP\001ZXcloud.google.com/go/networkmanagement/apiv1beta1/networkmanagement"
+          + "pb;networkmanagementpb\252\002&Google.Cloud.Ne"
+          + "tworkManagement.V1Beta1\312\002&Google\\Cloud\\N"
+          + "etworkManagement\\V1beta1\352\002)Google::Cloud::NetworkManagement::V1beta1b\006proto3"
     };
     descriptor =
         com.google.protobuf.Descriptors.FileDescriptor.internalBuildGeneratedFileFrom(
@@ -987,6 +1028,8 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "GkeMaster",
               "GkePod",
               "IpMasqueradingSkipped",
+              "GkeNetworkPolicy",
+              "GkeNetworkPolicySkipped",
               "CloudSqlInstance",
               "RedisInstance",
               "RedisCluster",
@@ -998,6 +1041,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "LoadBalancerBackendInfo",
               "StorageBucket",
               "ServerlessNeg",
+              "NgfwPacketInspection",
               "StepInfo",
             });
     internal_static_google_cloud_networkmanagement_v1beta1_InstanceInfo_descriptor =
@@ -1251,8 +1295,24 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
             new java.lang.String[] {
               "Reason", "NonMasqueradeRange",
             });
-    internal_static_google_cloud_networkmanagement_v1beta1_CloudSQLInstanceInfo_descriptor =
+    internal_static_google_cloud_networkmanagement_v1beta1_GkeNetworkPolicyInfo_descriptor =
         getDescriptor().getMessageType(22);
+    internal_static_google_cloud_networkmanagement_v1beta1_GkeNetworkPolicyInfo_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessage.FieldAccessorTable(
+            internal_static_google_cloud_networkmanagement_v1beta1_GkeNetworkPolicyInfo_descriptor,
+            new java.lang.String[] {
+              "DisplayName", "Uri", "Direction", "Action",
+            });
+    internal_static_google_cloud_networkmanagement_v1beta1_GkeNetworkPolicySkippedInfo_descriptor =
+        getDescriptor().getMessageType(23);
+    internal_static_google_cloud_networkmanagement_v1beta1_GkeNetworkPolicySkippedInfo_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessage.FieldAccessorTable(
+            internal_static_google_cloud_networkmanagement_v1beta1_GkeNetworkPolicySkippedInfo_descriptor,
+            new java.lang.String[] {
+              "Reason",
+            });
+    internal_static_google_cloud_networkmanagement_v1beta1_CloudSQLInstanceInfo_descriptor =
+        getDescriptor().getMessageType(24);
     internal_static_google_cloud_networkmanagement_v1beta1_CloudSQLInstanceInfo_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessage.FieldAccessorTable(
             internal_static_google_cloud_networkmanagement_v1beta1_CloudSQLInstanceInfo_descriptor,
@@ -1260,7 +1320,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "DisplayName", "Uri", "NetworkUri", "InternalIp", "ExternalIp", "Region",
             });
     internal_static_google_cloud_networkmanagement_v1beta1_RedisInstanceInfo_descriptor =
-        getDescriptor().getMessageType(23);
+        getDescriptor().getMessageType(25);
     internal_static_google_cloud_networkmanagement_v1beta1_RedisInstanceInfo_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessage.FieldAccessorTable(
             internal_static_google_cloud_networkmanagement_v1beta1_RedisInstanceInfo_descriptor,
@@ -1268,7 +1328,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "DisplayName", "Uri", "NetworkUri", "PrimaryEndpointIp", "ReadEndpointIp", "Region",
             });
     internal_static_google_cloud_networkmanagement_v1beta1_RedisClusterInfo_descriptor =
-        getDescriptor().getMessageType(24);
+        getDescriptor().getMessageType(26);
     internal_static_google_cloud_networkmanagement_v1beta1_RedisClusterInfo_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessage.FieldAccessorTable(
             internal_static_google_cloud_networkmanagement_v1beta1_RedisClusterInfo_descriptor,
@@ -1281,7 +1341,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Location",
             });
     internal_static_google_cloud_networkmanagement_v1beta1_CloudFunctionInfo_descriptor =
-        getDescriptor().getMessageType(25);
+        getDescriptor().getMessageType(27);
     internal_static_google_cloud_networkmanagement_v1beta1_CloudFunctionInfo_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessage.FieldAccessorTable(
             internal_static_google_cloud_networkmanagement_v1beta1_CloudFunctionInfo_descriptor,
@@ -1289,7 +1349,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "DisplayName", "Uri", "Location", "VersionId",
             });
     internal_static_google_cloud_networkmanagement_v1beta1_CloudRunRevisionInfo_descriptor =
-        getDescriptor().getMessageType(26);
+        getDescriptor().getMessageType(28);
     internal_static_google_cloud_networkmanagement_v1beta1_CloudRunRevisionInfo_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessage.FieldAccessorTable(
             internal_static_google_cloud_networkmanagement_v1beta1_CloudRunRevisionInfo_descriptor,
@@ -1297,7 +1357,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "DisplayName", "Uri", "Location", "ServiceUri",
             });
     internal_static_google_cloud_networkmanagement_v1beta1_AppEngineVersionInfo_descriptor =
-        getDescriptor().getMessageType(27);
+        getDescriptor().getMessageType(29);
     internal_static_google_cloud_networkmanagement_v1beta1_AppEngineVersionInfo_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessage.FieldAccessorTable(
             internal_static_google_cloud_networkmanagement_v1beta1_AppEngineVersionInfo_descriptor,
@@ -1305,7 +1365,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "DisplayName", "Uri", "Runtime", "Environment",
             });
     internal_static_google_cloud_networkmanagement_v1beta1_VpcConnectorInfo_descriptor =
-        getDescriptor().getMessageType(28);
+        getDescriptor().getMessageType(30);
     internal_static_google_cloud_networkmanagement_v1beta1_VpcConnectorInfo_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessage.FieldAccessorTable(
             internal_static_google_cloud_networkmanagement_v1beta1_VpcConnectorInfo_descriptor,
@@ -1313,7 +1373,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "DisplayName", "Uri", "Location",
             });
     internal_static_google_cloud_networkmanagement_v1beta1_DirectVpcEgressConnectionInfo_descriptor =
-        getDescriptor().getMessageType(29);
+        getDescriptor().getMessageType(31);
     internal_static_google_cloud_networkmanagement_v1beta1_DirectVpcEgressConnectionInfo_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessage.FieldAccessorTable(
             internal_static_google_cloud_networkmanagement_v1beta1_DirectVpcEgressConnectionInfo_descriptor,
@@ -1321,7 +1381,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "NetworkUri", "SubnetworkUri", "SelectedIpRange", "SelectedIpAddress", "Region",
             });
     internal_static_google_cloud_networkmanagement_v1beta1_ServerlessExternalConnectionInfo_descriptor =
-        getDescriptor().getMessageType(30);
+        getDescriptor().getMessageType(32);
     internal_static_google_cloud_networkmanagement_v1beta1_ServerlessExternalConnectionInfo_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessage.FieldAccessorTable(
             internal_static_google_cloud_networkmanagement_v1beta1_ServerlessExternalConnectionInfo_descriptor,
@@ -1329,7 +1389,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "SelectedIpAddress",
             });
     internal_static_google_cloud_networkmanagement_v1beta1_NatInfo_descriptor =
-        getDescriptor().getMessageType(31);
+        getDescriptor().getMessageType(33);
     internal_static_google_cloud_networkmanagement_v1beta1_NatInfo_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessage.FieldAccessorTable(
             internal_static_google_cloud_networkmanagement_v1beta1_NatInfo_descriptor,
@@ -1350,7 +1410,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "CloudNatGatewayType",
             });
     internal_static_google_cloud_networkmanagement_v1beta1_ProxyConnectionInfo_descriptor =
-        getDescriptor().getMessageType(32);
+        getDescriptor().getMessageType(34);
     internal_static_google_cloud_networkmanagement_v1beta1_ProxyConnectionInfo_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessage.FieldAccessorTable(
             internal_static_google_cloud_networkmanagement_v1beta1_ProxyConnectionInfo_descriptor,
@@ -1368,7 +1428,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "NetworkUri",
             });
     internal_static_google_cloud_networkmanagement_v1beta1_LoadBalancerBackendInfo_descriptor =
-        getDescriptor().getMessageType(33);
+        getDescriptor().getMessageType(35);
     internal_static_google_cloud_networkmanagement_v1beta1_LoadBalancerBackendInfo_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessage.FieldAccessorTable(
             internal_static_google_cloud_networkmanagement_v1beta1_LoadBalancerBackendInfo_descriptor,
@@ -1385,7 +1445,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "HealthCheckFirewallsConfigState",
             });
     internal_static_google_cloud_networkmanagement_v1beta1_StorageBucketInfo_descriptor =
-        getDescriptor().getMessageType(34);
+        getDescriptor().getMessageType(36);
     internal_static_google_cloud_networkmanagement_v1beta1_StorageBucketInfo_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessage.FieldAccessorTable(
             internal_static_google_cloud_networkmanagement_v1beta1_StorageBucketInfo_descriptor,
@@ -1393,13 +1453,21 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Bucket",
             });
     internal_static_google_cloud_networkmanagement_v1beta1_ServerlessNegInfo_descriptor =
-        getDescriptor().getMessageType(35);
+        getDescriptor().getMessageType(37);
     internal_static_google_cloud_networkmanagement_v1beta1_ServerlessNegInfo_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessage.FieldAccessorTable(
             internal_static_google_cloud_networkmanagement_v1beta1_ServerlessNegInfo_descriptor,
             new java.lang.String[] {
               "NegUri",
             });
+    internal_static_google_cloud_networkmanagement_v1beta1_NgfwPacketInspectionInfo_descriptor =
+        getDescriptor().getMessageType(38);
+    internal_static_google_cloud_networkmanagement_v1beta1_NgfwPacketInspectionInfo_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessage.FieldAccessorTable(
+            internal_static_google_cloud_networkmanagement_v1beta1_NgfwPacketInspectionInfo_descriptor,
+            new java.lang.String[] {
+              "SecurityProfileGroupUri",
+            });
     descriptor.resolveAllFeaturesImmutable();
     com.google.api.FieldBehaviorProto.getDescriptor();
     com.google.api.FieldInfoProto.getDescriptor();
diff --git a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/proto/google/cloud/networkmanagement/v1beta1/trace.proto b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/proto/google/cloud/networkmanagement/v1beta1/trace.proto
index 9dde226c1a9d..bd1feefbda57 100644
--- a/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/proto/google/cloud/networkmanagement/v1beta1/trace.proto
+++ b/java-network-management/proto-google-cloud-network-management-v1beta1/src/main/proto/google/cloud/networkmanagement/v1beta1/trace.proto
@@ -180,6 +180,9 @@ message Step {
     // Forwarding state: arriving at a VPC connector.
     ARRIVE_AT_VPC_CONNECTOR = 24;
 
+    // Forwarding state: arriving at a GKE Pod.
+    ARRIVE_AT_GKE_POD = 44;
+
     // Forwarding state: for packets originating from a serverless endpoint
     // forwarded through Direct VPC egress.
     DIRECT_VPC_EGRESS_CONNECTION = 35;
@@ -188,6 +191,10 @@ message Step {
     // forwarded through public (external) connectivity.
     SERVERLESS_EXTERNAL_CONNECTION = 36;
 
+    // Forwarding state: Layer 7 packet inspection by the firewall endpoint
+    // based on the configured security profile group.
+    NGFW_PACKET_INSPECTION = 47;
+
     // Transition state: packet header translated. The `nat` field is populated
     // with the translation information.
     NAT = 14;
@@ -196,6 +203,20 @@ message Step {
     // `ip_masquerading_skipped` field is populated with the reason.
     SKIP_GKE_POD_IP_MASQUERADING = 40;
 
+    // Transition state: GKE Ingress Network Policy is skipped. The
+    // `gke_network_policy_skipped` field is populated with the reason.
+    SKIP_GKE_INGRESS_NETWORK_POLICY = 41;
+
+    // Transition state: GKE Egress Network Policy is skipped. The
+    // `gke_network_policy_skipped` field is populated with the reason.
+    SKIP_GKE_EGRESS_NETWORK_POLICY = 42;
+
+    // Config checking state: verify ingress GKE network policy.
+    APPLY_INGRESS_GKE_NETWORK_POLICY = 45;
+
+    // Config checking state: verify egress GKE network policy.
+    APPLY_EGRESS_GKE_NETWORK_POLICY = 46;
+
     // Transition state: original connection is terminated and a new proxied
     // connection is initiated.
     PROXY_CONNECTION = 15;
@@ -307,6 +328,13 @@ message Step {
     // skipped.
     IpMasqueradingSkippedInfo ip_masquerading_skipped = 38;
 
+    // Display information of a GKE Network Policy.
+    GkeNetworkPolicyInfo gke_network_policy = 39;
+
+    // Display information of the reason why GKE Network Policy evaluation was
+    // skipped.
+    GkeNetworkPolicySkippedInfo gke_network_policy_skipped = 40;
+
     // Display information of a Cloud SQL instance.
     CloudSQLInstanceInfo cloud_sql_instance = 19;
 
@@ -340,6 +368,9 @@ message Step {
     // Display information of a Serverless network endpoint group backend. Used
     // only for return traces.
     ServerlessNegInfo serverless_neg = 29;
+
+    // Display information of a layer 7 packet inspection by the firewall.
+    NgfwPacketInspectionInfo ngfw_packet_inspection = 42;
   }
 }
 
@@ -1827,6 +1858,13 @@ message DropInfo {
     // Packet is dropped because no matching route was found in the hybrid
     // subnet.
     HYBRID_SUBNET_NO_ROUTE = 106;
+
+    // Packet is dropped by GKE Network Policy.
+    GKE_NETWORK_POLICY = 108;
+
+    // Packet is dropped because there is no valid matching route from the
+    // network of the Google-managed service to the destination.
+    NO_VALID_ROUTE_FROM_GOOGLE_MANAGED_NETWORK_TO_DESTINATION = 110;
   }
 
   // Cause that the packet is dropped.
@@ -1931,6 +1969,57 @@ message IpMasqueradingSkippedInfo {
   string non_masquerade_range = 2;
 }
 
+// For display only. Metadata associated with a GKE Network Policy.
+message GkeNetworkPolicyInfo {
+  // The name of the Network Policy.
+  string display_name = 1;
+
+  // The URI of the Network Policy.
+  // Format for a Network Policy in a zonal cluster:
+  // `projects/<project_id>/zones/<zone>/clusters/<cluster>/k8s/namespaces/<namespace>/networking.k8s.io/networkpolicies/<networkpolicy>`
+  // Format for a Network Policy in a regional cluster:
+  // `projects/<project_id>/locations/<location>/clusters/<cluster>/k8s/namespaces/<namespace>/networking.k8s.io/networkpolicies/<networkpolicy>`
+  string uri = 2;
+
+  // Possible values: INGRESS, EGRESS
+  string direction = 3;
+
+  // Possible values: ALLOW, DENY
+  string action = 4;
+}
+
+// For display only. Contains information about why GKE Network Policy
+// evaluation was skipped.
+message GkeNetworkPolicySkippedInfo {
+  enum Reason {
+    // Unused default value.
+    REASON_UNSPECIFIED = 0;
+
+    // Network Policy is disabled on the cluster.
+    NETWORK_POLICY_DISABLED = 1;
+
+    // Ingress traffic to a Pod from a source on the same Node is always
+    // allowed.
+    INGRESS_SOURCE_ON_SAME_NODE = 2;
+
+    // Egress traffic from a Pod that uses the Node's network namespace is not
+    // subject to Network Policy.
+    EGRESS_FROM_NODE_NETWORK_NAMESPACE_POD = 3;
+
+    // Network Policy is not applied to response traffic. This is because GKE
+    // Network Policy evaluation is stateful in both GKE Dataplane V2 (eBPF) and
+    // legacy (iptables) implementations.
+    NETWORK_POLICY_NOT_APPLIED_TO_RESPONSE_TRAFFIC = 4;
+
+    // Network Policy evaluation is currently not supported for clusters with
+    // FQDN Network Policies enabled.
+    NETWORK_POLICY_ANALYSIS_UNSUPPORTED = 100;
+  }
+
+  // Reason why Network Policy evaluation was skipped.
+  Reason reason = 1;
+}
+
 // For display only. Metadata associated with a Cloud SQL instance.
 message CloudSQLInstanceInfo {
   // Name of a Cloud SQL instance.
@@ -2332,3 +2421,11 @@ message ServerlessNegInfo {
   // URI of the serverless network endpoint group.
   string neg_uri = 1;
 }
+
+// For display only. Metadata associated with a layer 7 packet inspection by the
+// firewall.
+message NgfwPacketInspectionInfo {
+  // URI of the security profile group associated with this firewall packet
+  // inspection.
+  string security_profile_group_uri = 1;
+}