- Resource: AgentGateway
- GoogleManaged
- GovernedAccessPath
- SelfManaged
- Protocol
- NetworkConfig
- Egress
- DnsPeeringConfig
- AgentGatewayOutputCard
- Methods
Resource: AgentGateway
AgentGateway represents the agent gateway resource.
| JSON representation |
|---|
{ "name": string, "createTime": string, "updateTime": string, "labels": { string: string, ... }, "description": string, "etag": string, "protocols": [ enum ( |
| Fields | |
|---|---|
name |
Identifier. Name of the AgentGateway resource. It matches pattern |
createTime |
Output only. The timestamp when the resource was created. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: |
updateTime |
Output only. The timestamp when the resource was updated. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: |
labels |
Optional. Set of label tags associated with the AgentGateway resource. An object containing a list of |
description |
Optional. A free-text description of the resource. Max length 1024 characters. |
etag |
Optional. Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error. |
protocols[] |
Required. List of protocols supported by an Agent Gateway |
registries[] |
Optional. A list of Agent registries containing the agents, MCP servers and tools governed by the Agent Gateway. Note: Currently limited to project-scoped registries Must be of format `//agentregistry.googleapis.com/projects/{project}/locations/{location}/ |
networkConfig |
Optional. Network configuration for the AgentGateway. |
agentGatewayCard |
Output only. Field for populated AgentGateway card. |
Union field deployment_mode. Deployment mode of the network proxy. Exactly one of the fields in this oneof must be set. deployment_mode can be only one of the following: |
|
googleManaged |
Optional. Proxy is orchestrated and managed by GoogleCloud in a tenant project. |
selfManaged |
Optional. Attach to existing Application Load Balancers or Secure Web Proxies. |
GoogleManaged
Configuration for Google Managed deployment mode. Proxy is orchestrated and managed by GoogleCloud in a tenant project.
| JSON representation |
|---|
{
"governedAccessPath": enum ( |
| Fields | |
|---|---|
governedAccessPath |
Optional. Operating Mode of Agent Gateway. |
GovernedAccessPath
GovernedAccessPath defines the type of access to protect.
| Enums | |
|---|---|
GOVERNED_ACCESS_PATH_UNSPECIFIED |
Governed access path is not specified. |
AGENT_TO_ANYWHERE |
Govern agent conections to destinations. |
CLIENT_TO_AGENT |
Protect connection to Agent or Tool. |
SelfManaged
Configuration for Self Managed deployment mode. Attach to existing Application Load Balancers or Secure Web Proxies.
| JSON representation |
|---|
{ "resourceUri": string } |
| Fields | |
|---|---|
resourceUri |
Optional. A supported Google Cloud networking proxy in the Project and Location |
Protocol
Enums of all supported protocols
| Enums | |
|---|---|
PROTOCOL_UNSPECIFIED |
Unspecified protocol. |
MCP |
Message Control Plane protocol. |
NetworkConfig
NetworkConfig contains network configurations for the AgentGateway.
| JSON representation |
|---|
{ "egress": { object ( |
| Fields | |
|---|---|
egress |
Optional. Optional PSC-Interface network attachment for connectivity to your private VPCs network. |
dnsPeeringConfig |
Optional. Optional DNS peering configuration for connectivity to your private VPC network. |
Egress
Configuration for Egress
| JSON representation |
|---|
{ "networkAttachment": string } |
| Fields | |
|---|---|
networkAttachment |
Optional. The URI of the Network Attachment resource. |
DnsPeeringConfig
DNS peering config for the user VPC network.
| JSON representation |
|---|
{ "domains": [ string ], "targetProject": string, "targetNetwork": string } |
| Fields | |
|---|---|
domains[] |
Required. Domain names for which DNS queries should be forwarded to the target network. |
targetProject |
Required. Target project ID to which DNS queries should be forwarded to. This can be the same project that contains the AgentGateway or a different project. |
targetNetwork |
Required. Target network in 'target project' to which DNS queries should be forwarded to. Must be in format of |
AgentGatewayOutputCard
AgentGatewayOutputCard contains informational output-only fields
| JSON representation |
|---|
{ "mtlsEndpoint": string, "rootCertificates": [ string ], "serviceExtensionsServiceAccount": string } |
| Fields | |
|---|---|
mtlsEndpoint |
Output only. mTLS Endpoint associated with this AgentGateway |
rootCertificates[] |
Output only. Root Certificates for Agents to validate this AgentGateway |
serviceExtensionsServiceAccount |
Output only. Service Account used by Service Extensions to operate. |
Methods |
|
|---|---|
|
Creates a new AgentGateway in a given project and location. |
|
Deletes a single AgentGateway. |
|
Gets details of a single AgentGateway. |
|
Lists AgentGateways in a given project and location. |
|
Updates the parameters of a single AgentGateway. |