Sync: sync/1299a0f9d8

nebius/ai/v1/devlab.proto

@@ -142,8 +142,8 @@ message DevlabSpec {
   ];
 
   // Subnet ID where the Devlab will be deployed.
+  // If omitted, the service uses the project's default subnet in the workload region.
   string subnet_id = 24 [
-    (buf.validate.field).required = true,
     (field_behavior) = IMMUTABLE,
     (nid) = {
       resource: ["vpcsubnet"]

nebius/ai/v1/endpoint.proto

@@ -87,12 +87,10 @@ message EndpointSpec {
   DiskSpec disk = 23 [(buf.validate.field).required = true];
 
   // Subnet ID where the endpoint will be deployed.
-  string subnet_id = 24 [
-    (buf.validate.field).required = true,
-    (nid) = {
-      resource: ["vpcsubnet"]
-    }
-  ];
+  // If omitted, the service uses the project's default subnet in the workload region.
+  string subnet_id = 24 [(nid) = {
+    resource: ["vpcsubnet"]
+  }];
 
   // Whether to assign a public IP to the endpoint.
   bool public_ip = 25;

nebius/ai/v1/job.proto

@@ -84,12 +84,10 @@ message JobSpec {
   DiskSpec disk = 23 [(buf.validate.field).required = true];
 
   // Subnet ID where the job will be deployed.
-  string subnet_id = 24 [
-    (buf.validate.field).required = true,
-    (nid) = {
-      resource: ["vpcsubnet"]
-    }
-  ];
+  // If omitted, the service uses the project's default subnet in the workload region.
+  string subnet_id = 24 [(nid) = {
+    resource: ["vpcsubnet"]
+  }];
 
   // Whether to assign a public IP to the job.
   bool public_ip = 25;

nebius/audit/v2/audit_event_export.proto

@@ -76,7 +76,6 @@ message AuditEventExportParams {
   // authentication.subject.service_account_id
   // authentication.subject.tenant_user_id
   // authentication.token_credential.masked_token
-  // project_region.name
   // resource.hierarchy.id
   // resource.hierarchy.name
   // resource.metadata.id

nebius/audit/v2/audit_event_service.proto

@@ -51,7 +51,6 @@ message ListAuditEventRequest {
   // authentication.subject.service_account_id
   // authentication.subject.tenant_user_id
   // authentication.token_credential.masked_token
-  // project_region.name
   // resource.hierarchy.id
   // resource.hierarchy.name
   // resource.metadata.id

nebius/mk8s/v1/cluster.proto

@@ -103,8 +103,10 @@ message ControlPlaneEndpointsSpec {
 message PublicEndpointSpec {
   // List of CIDR blocks from which access to public endpoint is allowed.
   // If field is not set, or list is empty, it means that access is not restricted at all.
+  // You can specify a maximum of 8 CIDRs.
   repeated string allowed_cidrs = 2 [(buf.validate.field) = {
     repeated: {
+      max_items: 8
       items: {
         cel: [
           {

nebius/storage/v1/bucket.proto

@@ -142,6 +142,8 @@ message BucketSpec {
       ]
     }];
   }
+
+  reserved 14;
 }
 
 message BucketStatus {