state property

Each step is in one of the pre-defined states. Possible string values are:

• "STATE_UNSPECIFIED" : Unspecified state.
• "START_FROM_INSTANCE" : Initial state: packet originating from a Compute Engine instance. An InstanceInfo is populated with starting instance information.
• "START_FROM_INTERNET" : Initial state: packet originating from the internet. The endpoint information is populated.
• "START_FROM_GOOGLE_SERVICE" : Initial state: packet originating from a Google service. The google_service information is populated.
• "START_FROM_PRIVATE_NETWORK" : Initial state: packet originating from a VPC or on-premises network with internal source IP. If the source is a VPC network visible to the user, a NetworkInfo is populated with details of the network.
• "START_FROM_GKE_MASTER" : Initial state: packet originating from a Google Kubernetes Engine cluster master. A GKEMasterInfo is populated with starting instance information.
• "START_FROM_CLOUD_SQL_INSTANCE" : Initial state: packet originating from a Cloud SQL instance. A CloudSQLInstanceInfo is populated with starting instance information.
• "START_FROM_CLOUD_FUNCTION" : Initial state: packet originating from a Cloud Function. A CloudFunctionInfo is populated with starting function information.
• "START_FROM_APP_ENGINE_VERSION" : Initial state: packet originating from an App Engine service version. An AppEngineVersionInfo is populated with starting version information.
• "START_FROM_CLOUD_RUN_REVISION" : Initial state: packet originating from a Cloud Run revision. A CloudRunRevisionInfo is populated with starting revision information.
• "START_FROM_STORAGE_BUCKET" : Initial state: packet originating from a Storage Bucket. Used only for return traces. The storage_bucket information is populated.
• "START_FROM_PSC_PUBLISHED_SERVICE" : Initial state: packet originating from a published service that uses Private Service Connect. Used only for return traces.
• "APPLY_INGRESS_FIREWALL_RULE" : Config checking state: verify ingress firewall rule.
• "APPLY_EGRESS_FIREWALL_RULE" : Config checking state: verify egress firewall rule.
• "APPLY_ROUTE" : Config checking state: verify route.
• "APPLY_FORWARDING_RULE" : Config checking state: match forwarding rule.
• "ANALYZE_LOAD_BALANCER_BACKEND" : Config checking state: verify load balancer backend configuration.
• "SPOOFING_APPROVED" : Config checking state: packet sent or received under foreign IP address and allowed.
• "ARRIVE_AT_INSTANCE" : Forwarding state: arriving at a Compute Engine instance.
• "ARRIVE_AT_INTERNAL_LOAD_BALANCER" : Forwarding state: arriving at a Compute Engine internal load balancer.
• "ARRIVE_AT_EXTERNAL_LOAD_BALANCER" : Forwarding state: arriving at a Compute Engine external load balancer.
• "ARRIVE_AT_VPN_GATEWAY" : Forwarding state: arriving at a Cloud VPN gateway.
• "ARRIVE_AT_VPN_TUNNEL" : Forwarding state: arriving at a Cloud VPN tunnel.
• "ARRIVE_AT_VPC_CONNECTOR" : Forwarding state: arriving at a VPC connector.
• "NAT" : Transition state: packet header translated.
• "PROXY_CONNECTION" : Transition state: original connection is terminated and a new proxied connection is initiated.
• "DELIVER" : Final state: packet could be delivered.
• "DROP" : Final state: packet could be dropped.
• "FORWARD" : Final state: packet could be forwarded to a network with an unknown configuration.
• "ABORT" : Final state: analysis is aborted.
• "VIEWER_PERMISSION_MISSING" : Special state: viewer of the test result does not have permission to see the configuration in this step.