chore: regens API reference docs (#889)

diff --git a/docs/dyn/dns_v1beta2.managedZones.html b/docs/dyn/dns_v1beta2.managedZones.html
index d4969b1..0a24a76 100644
--- a/docs/dyn/dns_v1beta2.managedZones.html
+++ b/docs/dyn/dns_v1beta2.managedZones.html
@@ -75,7 +75,7 @@
 <h1><a href="dns_v1beta2.html">Google Cloud DNS API</a> . <a href="dns_v1beta2.managedZones.html">managedZones</a></h1>
 <h2>Instance Methods</h2>
 <p class="toc_element">
-  <code><a href="#create">create(project, body, clientOperationId=None)</a></code></p>
+  <code><a href="#create">create(project, body=None, clientOperationId=None)</a></code></p>
 <p class="firstline">Create a new ManagedZone.</p>
 <p class="toc_element">
   <code><a href="#delete">delete(project, managedZone, clientOperationId=None)</a></code></p>
@@ -90,22 +90,25 @@
   <code><a href="#list_next">list_next(previous_request, previous_response)</a></code></p>
 <p class="firstline">Retrieves the next page of results.</p>
 <p class="toc_element">
-  <code><a href="#patch">patch(project, managedZone, body, clientOperationId=None)</a></code></p>
+  <code><a href="#patch">patch(project, managedZone, body=None, clientOperationId=None)</a></code></p>
 <p class="firstline">Apply a partial update to an existing ManagedZone.</p>
 <p class="toc_element">
-  <code><a href="#update">update(project, managedZone, body, clientOperationId=None)</a></code></p>
+  <code><a href="#update">update(project, managedZone, body=None, clientOperationId=None)</a></code></p>
 <p class="firstline">Update an existing ManagedZone.</p>
 <h3>Method Details</h3>
 <div class="method">
-    <code class="details" id="create">create(project, body, clientOperationId=None)</code>
+    <code class="details" id="create">create(project, body=None, clientOperationId=None)</code>
   <pre>Create a new ManagedZone.
 
 Args:
   project: string, Identifies the project addressed by this request. (required)
-  body: object, The request body. (required)
+  body: object, The request body.
     The object takes the form of:
 
 { # A zone is a subtree of the DNS namespace under one administrative responsibility. A ManagedZone is a resource that represents a DNS zone hosted by the Cloud DNS service.
+  "reverseLookupConfig": { # The presence of this field indicates that this is a managed reverse lookup zone and Cloud DNS will resolve reverse lookup queries using automatically configured records for VPC resources. This only applies to networks listed under private_visibility_config.
+    "kind": "dns#managedZoneReverseLookupConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneReverseLookupConfig".
+  },
   "kind": "dns#managedZone", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZone".
   "labels": { # User labels.
     "a_key": "A String",
@@ -119,6 +122,7 @@
     "targetNameServers": [ # List of target name servers to forward to. Cloud DNS will select the best available name server if more than one target is given.
       {
         "ipv4Address": "A String", # IPv4 address of a target name server.
+        "forwardingPath": "A String", # Forwarding path for this NameServerTarget, if unset or set to DEFAULT, Cloud DNS will make forwarding decision based on address ranges, i.e. RFC1918 addresses go to the VPC, Non-RFC1918 addresses go to the Internet. When set to PRIVATE, Cloud DNS will always send queries through VPC for this target
         "kind": "dns#managedZoneForwardingConfigNameServerTarget", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneForwardingConfigNameServerTarget".
       },
     ],
@@ -138,7 +142,7 @@
   "dnsName": "A String", # The DNS name of this managed zone, for instance "example.com.".
   "dnssecConfig": { # DNSSEC configuration.
     "kind": "dns#managedZoneDnsSecConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneDnsSecConfig".
-    "defaultKeySpecs": [ # Specifies parameters that will be used for generating initial DnsKeys for this ManagedZone. Output only while state is not OFF.
+    "defaultKeySpecs": [ # Specifies parameters for generating initial DnsKeys for this ManagedZone. Can only be changed while the state is OFF.
       { # Parameters for DnsKey key generation. Used for generating initial keys for a new ManagedZone and as default when adding a new DnsKey.
         "keyType": "A String", # Specifies whether this is a key signing key (KSK) or a zone signing key (ZSK). Key signing keys have the Secure Entry Point flag set and, when active, will only be used to sign resource record sets of type DNSKEY. Zone signing keys do not have the Secure Entry Point flag set and will be used to sign all other types of resource record sets.
         "keyLength": 42, # Length of the keys in bits.
@@ -147,13 +151,13 @@
       },
     ],
     "state": "A String", # Specifies whether DNSSEC is enabled, and what mode it is in.
-    "nonExistence": "A String", # Specifies the mechanism used to provide authenticated denial-of-existence responses. Output only while state is not OFF.
+    "nonExistence": "A String", # Specifies the mechanism for authenticated denial-of-existence responses. Can only be changed while the state is OFF.
   },
   "peeringConfig": { # The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with.
     "kind": "dns#managedZonePeeringConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZonePeeringConfig".
     "targetNetwork": { # The network with which to peer.
       "kind": "dns#managedZonePeeringConfigTargetNetwork", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZonePeeringConfigTargetNetwork".
-      "deactivateTime": "A String", # If this zone has been deactivated due to a problem with the network it targeted, the time at which it was deactivated. The zone can be deactivated if, for instance, the network it targeted was deleted. If the targeted network is still present, this will be the empty string. This is in RFC3339 text format. Output only.
+      "deactivateTime": "A String", # The time at which the zone was deactivated, in RFC 3339 date-time format. An empty string indicates that the peering connection is active. The producer network can deactivate a zone. The zone is automatically deactivated if the producer network that the zone targeted is deleted. Output only.
       "networkUrl": "A String", # The fully qualified URL of the VPC network to forward queries to. This should be formatted like https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}
     },
   },
@@ -167,6 +171,9 @@
   An object of the form:
 
     { # A zone is a subtree of the DNS namespace under one administrative responsibility. A ManagedZone is a resource that represents a DNS zone hosted by the Cloud DNS service.
+    "reverseLookupConfig": { # The presence of this field indicates that this is a managed reverse lookup zone and Cloud DNS will resolve reverse lookup queries using automatically configured records for VPC resources. This only applies to networks listed under private_visibility_config.
+      "kind": "dns#managedZoneReverseLookupConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneReverseLookupConfig".
+    },
     "kind": "dns#managedZone", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZone".
     "labels": { # User labels.
       "a_key": "A String",
@@ -180,6 +187,7 @@
       "targetNameServers": [ # List of target name servers to forward to. Cloud DNS will select the best available name server if more than one target is given.
         {
           "ipv4Address": "A String", # IPv4 address of a target name server.
+          "forwardingPath": "A String", # Forwarding path for this NameServerTarget, if unset or set to DEFAULT, Cloud DNS will make forwarding decision based on address ranges, i.e. RFC1918 addresses go to the VPC, Non-RFC1918 addresses go to the Internet. When set to PRIVATE, Cloud DNS will always send queries through VPC for this target
           "kind": "dns#managedZoneForwardingConfigNameServerTarget", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneForwardingConfigNameServerTarget".
         },
       ],
@@ -199,7 +207,7 @@
     "dnsName": "A String", # The DNS name of this managed zone, for instance "example.com.".
     "dnssecConfig": { # DNSSEC configuration.
       "kind": "dns#managedZoneDnsSecConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneDnsSecConfig".
-      "defaultKeySpecs": [ # Specifies parameters that will be used for generating initial DnsKeys for this ManagedZone. Output only while state is not OFF.
+      "defaultKeySpecs": [ # Specifies parameters for generating initial DnsKeys for this ManagedZone. Can only be changed while the state is OFF.
         { # Parameters for DnsKey key generation. Used for generating initial keys for a new ManagedZone and as default when adding a new DnsKey.
           "keyType": "A String", # Specifies whether this is a key signing key (KSK) or a zone signing key (ZSK). Key signing keys have the Secure Entry Point flag set and, when active, will only be used to sign resource record sets of type DNSKEY. Zone signing keys do not have the Secure Entry Point flag set and will be used to sign all other types of resource record sets.
           "keyLength": 42, # Length of the keys in bits.
@@ -208,13 +216,13 @@
         },
       ],
       "state": "A String", # Specifies whether DNSSEC is enabled, and what mode it is in.
-      "nonExistence": "A String", # Specifies the mechanism used to provide authenticated denial-of-existence responses. Output only while state is not OFF.
+      "nonExistence": "A String", # Specifies the mechanism for authenticated denial-of-existence responses. Can only be changed while the state is OFF.
     },
     "peeringConfig": { # The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with.
       "kind": "dns#managedZonePeeringConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZonePeeringConfig".
       "targetNetwork": { # The network with which to peer.
         "kind": "dns#managedZonePeeringConfigTargetNetwork", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZonePeeringConfigTargetNetwork".
-        "deactivateTime": "A String", # If this zone has been deactivated due to a problem with the network it targeted, the time at which it was deactivated. The zone can be deactivated if, for instance, the network it targeted was deleted. If the targeted network is still present, this will be the empty string. This is in RFC3339 text format. Output only.
+        "deactivateTime": "A String", # The time at which the zone was deactivated, in RFC 3339 date-time format. An empty string indicates that the peering connection is active. The producer network can deactivate a zone. The zone is automatically deactivated if the producer network that the zone targeted is deleted. Output only.
         "networkUrl": "A String", # The fully qualified URL of the VPC network to forward queries to. This should be formatted like https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}
       },
     },
@@ -247,6 +255,9 @@
   An object of the form:
 
     { # A zone is a subtree of the DNS namespace under one administrative responsibility. A ManagedZone is a resource that represents a DNS zone hosted by the Cloud DNS service.
+    "reverseLookupConfig": { # The presence of this field indicates that this is a managed reverse lookup zone and Cloud DNS will resolve reverse lookup queries using automatically configured records for VPC resources. This only applies to networks listed under private_visibility_config.
+      "kind": "dns#managedZoneReverseLookupConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneReverseLookupConfig".
+    },
     "kind": "dns#managedZone", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZone".
     "labels": { # User labels.
       "a_key": "A String",
@@ -260,6 +271,7 @@
       "targetNameServers": [ # List of target name servers to forward to. Cloud DNS will select the best available name server if more than one target is given.
         {
           "ipv4Address": "A String", # IPv4 address of a target name server.
+          "forwardingPath": "A String", # Forwarding path for this NameServerTarget, if unset or set to DEFAULT, Cloud DNS will make forwarding decision based on address ranges, i.e. RFC1918 addresses go to the VPC, Non-RFC1918 addresses go to the Internet. When set to PRIVATE, Cloud DNS will always send queries through VPC for this target
           "kind": "dns#managedZoneForwardingConfigNameServerTarget", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneForwardingConfigNameServerTarget".
         },
       ],
@@ -279,7 +291,7 @@
     "dnsName": "A String", # The DNS name of this managed zone, for instance "example.com.".
     "dnssecConfig": { # DNSSEC configuration.
       "kind": "dns#managedZoneDnsSecConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneDnsSecConfig".
-      "defaultKeySpecs": [ # Specifies parameters that will be used for generating initial DnsKeys for this ManagedZone. Output only while state is not OFF.
+      "defaultKeySpecs": [ # Specifies parameters for generating initial DnsKeys for this ManagedZone. Can only be changed while the state is OFF.
         { # Parameters for DnsKey key generation. Used for generating initial keys for a new ManagedZone and as default when adding a new DnsKey.
           "keyType": "A String", # Specifies whether this is a key signing key (KSK) or a zone signing key (ZSK). Key signing keys have the Secure Entry Point flag set and, when active, will only be used to sign resource record sets of type DNSKEY. Zone signing keys do not have the Secure Entry Point flag set and will be used to sign all other types of resource record sets.
           "keyLength": 42, # Length of the keys in bits.
@@ -288,13 +300,13 @@
         },
       ],
       "state": "A String", # Specifies whether DNSSEC is enabled, and what mode it is in.
-      "nonExistence": "A String", # Specifies the mechanism used to provide authenticated denial-of-existence responses. Output only while state is not OFF.
+      "nonExistence": "A String", # Specifies the mechanism for authenticated denial-of-existence responses. Can only be changed while the state is OFF.
     },
     "peeringConfig": { # The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with.
       "kind": "dns#managedZonePeeringConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZonePeeringConfig".
       "targetNetwork": { # The network with which to peer.
         "kind": "dns#managedZonePeeringConfigTargetNetwork", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZonePeeringConfigTargetNetwork".
-        "deactivateTime": "A String", # If this zone has been deactivated due to a problem with the network it targeted, the time at which it was deactivated. The zone can be deactivated if, for instance, the network it targeted was deleted. If the targeted network is still present, this will be the empty string. This is in RFC3339 text format. Output only.
+        "deactivateTime": "A String", # The time at which the zone was deactivated, in RFC 3339 date-time format. An empty string indicates that the peering connection is active. The producer network can deactivate a zone. The zone is automatically deactivated if the producer network that the zone targeted is deleted. Output only.
         "networkUrl": "A String", # The fully qualified URL of the VPC network to forward queries to. This should be formatted like https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}
       },
     },
@@ -326,6 +338,9 @@
     "kind": "dns#managedZonesListResponse", # Type of resource.
     "managedZones": [ # The managed zone resources.
       { # A zone is a subtree of the DNS namespace under one administrative responsibility. A ManagedZone is a resource that represents a DNS zone hosted by the Cloud DNS service.
+        "reverseLookupConfig": { # The presence of this field indicates that this is a managed reverse lookup zone and Cloud DNS will resolve reverse lookup queries using automatically configured records for VPC resources. This only applies to networks listed under private_visibility_config.
+          "kind": "dns#managedZoneReverseLookupConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneReverseLookupConfig".
+        },
         "kind": "dns#managedZone", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZone".
         "labels": { # User labels.
           "a_key": "A String",
@@ -339,6 +354,7 @@
           "targetNameServers": [ # List of target name servers to forward to. Cloud DNS will select the best available name server if more than one target is given.
             {
               "ipv4Address": "A String", # IPv4 address of a target name server.
+              "forwardingPath": "A String", # Forwarding path for this NameServerTarget, if unset or set to DEFAULT, Cloud DNS will make forwarding decision based on address ranges, i.e. RFC1918 addresses go to the VPC, Non-RFC1918 addresses go to the Internet. When set to PRIVATE, Cloud DNS will always send queries through VPC for this target
               "kind": "dns#managedZoneForwardingConfigNameServerTarget", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneForwardingConfigNameServerTarget".
             },
           ],
@@ -358,7 +374,7 @@
         "dnsName": "A String", # The DNS name of this managed zone, for instance "example.com.".
         "dnssecConfig": { # DNSSEC configuration.
           "kind": "dns#managedZoneDnsSecConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneDnsSecConfig".
-          "defaultKeySpecs": [ # Specifies parameters that will be used for generating initial DnsKeys for this ManagedZone. Output only while state is not OFF.
+          "defaultKeySpecs": [ # Specifies parameters for generating initial DnsKeys for this ManagedZone. Can only be changed while the state is OFF.
             { # Parameters for DnsKey key generation. Used for generating initial keys for a new ManagedZone and as default when adding a new DnsKey.
               "keyType": "A String", # Specifies whether this is a key signing key (KSK) or a zone signing key (ZSK). Key signing keys have the Secure Entry Point flag set and, when active, will only be used to sign resource record sets of type DNSKEY. Zone signing keys do not have the Secure Entry Point flag set and will be used to sign all other types of resource record sets.
               "keyLength": 42, # Length of the keys in bits.
@@ -367,13 +383,13 @@
             },
           ],
           "state": "A String", # Specifies whether DNSSEC is enabled, and what mode it is in.
-          "nonExistence": "A String", # Specifies the mechanism used to provide authenticated denial-of-existence responses. Output only while state is not OFF.
+          "nonExistence": "A String", # Specifies the mechanism for authenticated denial-of-existence responses. Can only be changed while the state is OFF.
         },
         "peeringConfig": { # The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with.
           "kind": "dns#managedZonePeeringConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZonePeeringConfig".
           "targetNetwork": { # The network with which to peer.
             "kind": "dns#managedZonePeeringConfigTargetNetwork", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZonePeeringConfigTargetNetwork".
-            "deactivateTime": "A String", # If this zone has been deactivated due to a problem with the network it targeted, the time at which it was deactivated. The zone can be deactivated if, for instance, the network it targeted was deleted. If the targeted network is still present, this will be the empty string. This is in RFC3339 text format. Output only.
+            "deactivateTime": "A String", # The time at which the zone was deactivated, in RFC 3339 date-time format. An empty string indicates that the peering connection is active. The producer network can deactivate a zone. The zone is automatically deactivated if the producer network that the zone targeted is deleted. Output only.
             "networkUrl": "A String", # The fully qualified URL of the VPC network to forward queries to. This should be formatted like https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}
           },
         },
@@ -399,16 +415,19 @@
 </div>
 
 <div class="method">
-    <code class="details" id="patch">patch(project, managedZone, body, clientOperationId=None)</code>
+    <code class="details" id="patch">patch(project, managedZone, body=None, clientOperationId=None)</code>
   <pre>Apply a partial update to an existing ManagedZone.
 
 Args:
   project: string, Identifies the project addressed by this request. (required)
   managedZone: string, Identifies the managed zone addressed by this request. Can be the managed zone name or id. (required)
-  body: object, The request body. (required)
+  body: object, The request body.
     The object takes the form of:
 
 { # A zone is a subtree of the DNS namespace under one administrative responsibility. A ManagedZone is a resource that represents a DNS zone hosted by the Cloud DNS service.
+  "reverseLookupConfig": { # The presence of this field indicates that this is a managed reverse lookup zone and Cloud DNS will resolve reverse lookup queries using automatically configured records for VPC resources. This only applies to networks listed under private_visibility_config.
+    "kind": "dns#managedZoneReverseLookupConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneReverseLookupConfig".
+  },
   "kind": "dns#managedZone", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZone".
   "labels": { # User labels.
     "a_key": "A String",
@@ -422,6 +441,7 @@
     "targetNameServers": [ # List of target name servers to forward to. Cloud DNS will select the best available name server if more than one target is given.
       {
         "ipv4Address": "A String", # IPv4 address of a target name server.
+        "forwardingPath": "A String", # Forwarding path for this NameServerTarget, if unset or set to DEFAULT, Cloud DNS will make forwarding decision based on address ranges, i.e. RFC1918 addresses go to the VPC, Non-RFC1918 addresses go to the Internet. When set to PRIVATE, Cloud DNS will always send queries through VPC for this target
         "kind": "dns#managedZoneForwardingConfigNameServerTarget", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneForwardingConfigNameServerTarget".
       },
     ],
@@ -441,7 +461,7 @@
   "dnsName": "A String", # The DNS name of this managed zone, for instance "example.com.".
   "dnssecConfig": { # DNSSEC configuration.
     "kind": "dns#managedZoneDnsSecConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneDnsSecConfig".
-    "defaultKeySpecs": [ # Specifies parameters that will be used for generating initial DnsKeys for this ManagedZone. Output only while state is not OFF.
+    "defaultKeySpecs": [ # Specifies parameters for generating initial DnsKeys for this ManagedZone. Can only be changed while the state is OFF.
       { # Parameters for DnsKey key generation. Used for generating initial keys for a new ManagedZone and as default when adding a new DnsKey.
         "keyType": "A String", # Specifies whether this is a key signing key (KSK) or a zone signing key (ZSK). Key signing keys have the Secure Entry Point flag set and, when active, will only be used to sign resource record sets of type DNSKEY. Zone signing keys do not have the Secure Entry Point flag set and will be used to sign all other types of resource record sets.
         "keyLength": 42, # Length of the keys in bits.
@@ -450,13 +470,13 @@
       },
     ],
     "state": "A String", # Specifies whether DNSSEC is enabled, and what mode it is in.
-    "nonExistence": "A String", # Specifies the mechanism used to provide authenticated denial-of-existence responses. Output only while state is not OFF.
+    "nonExistence": "A String", # Specifies the mechanism for authenticated denial-of-existence responses. Can only be changed while the state is OFF.
   },
   "peeringConfig": { # The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with.
     "kind": "dns#managedZonePeeringConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZonePeeringConfig".
     "targetNetwork": { # The network with which to peer.
       "kind": "dns#managedZonePeeringConfigTargetNetwork", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZonePeeringConfigTargetNetwork".
-      "deactivateTime": "A String", # If this zone has been deactivated due to a problem with the network it targeted, the time at which it was deactivated. The zone can be deactivated if, for instance, the network it targeted was deleted. If the targeted network is still present, this will be the empty string. This is in RFC3339 text format. Output only.
+      "deactivateTime": "A String", # The time at which the zone was deactivated, in RFC 3339 date-time format. An empty string indicates that the peering connection is active. The producer network can deactivate a zone. The zone is automatically deactivated if the producer network that the zone targeted is deleted. Output only.
       "networkUrl": "A String", # The fully qualified URL of the VPC network to forward queries to. This should be formatted like https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}
     },
   },
@@ -512,6 +532,9 @@
     },
     "zoneContext": { # Only populated if the operation targeted a ManagedZone (output only).
       "newValue": { # A zone is a subtree of the DNS namespace under one administrative responsibility. A ManagedZone is a resource that represents a DNS zone hosted by the Cloud DNS service. # The post-operation ManagedZone resource.
+        "reverseLookupConfig": { # The presence of this field indicates that this is a managed reverse lookup zone and Cloud DNS will resolve reverse lookup queries using automatically configured records for VPC resources. This only applies to networks listed under private_visibility_config.
+          "kind": "dns#managedZoneReverseLookupConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneReverseLookupConfig".
+        },
         "kind": "dns#managedZone", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZone".
         "labels": { # User labels.
           "a_key": "A String",
@@ -525,6 +548,7 @@
           "targetNameServers": [ # List of target name servers to forward to. Cloud DNS will select the best available name server if more than one target is given.
             {
               "ipv4Address": "A String", # IPv4 address of a target name server.
+              "forwardingPath": "A String", # Forwarding path for this NameServerTarget, if unset or set to DEFAULT, Cloud DNS will make forwarding decision based on address ranges, i.e. RFC1918 addresses go to the VPC, Non-RFC1918 addresses go to the Internet. When set to PRIVATE, Cloud DNS will always send queries through VPC for this target
               "kind": "dns#managedZoneForwardingConfigNameServerTarget", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneForwardingConfigNameServerTarget".
             },
           ],
@@ -544,7 +568,7 @@
         "dnsName": "A String", # The DNS name of this managed zone, for instance "example.com.".
         "dnssecConfig": { # DNSSEC configuration.
           "kind": "dns#managedZoneDnsSecConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneDnsSecConfig".
-          "defaultKeySpecs": [ # Specifies parameters that will be used for generating initial DnsKeys for this ManagedZone. Output only while state is not OFF.
+          "defaultKeySpecs": [ # Specifies parameters for generating initial DnsKeys for this ManagedZone. Can only be changed while the state is OFF.
             { # Parameters for DnsKey key generation. Used for generating initial keys for a new ManagedZone and as default when adding a new DnsKey.
               "keyType": "A String", # Specifies whether this is a key signing key (KSK) or a zone signing key (ZSK). Key signing keys have the Secure Entry Point flag set and, when active, will only be used to sign resource record sets of type DNSKEY. Zone signing keys do not have the Secure Entry Point flag set and will be used to sign all other types of resource record sets.
               "keyLength": 42, # Length of the keys in bits.
@@ -553,13 +577,13 @@
             },
           ],
           "state": "A String", # Specifies whether DNSSEC is enabled, and what mode it is in.
-          "nonExistence": "A String", # Specifies the mechanism used to provide authenticated denial-of-existence responses. Output only while state is not OFF.
+          "nonExistence": "A String", # Specifies the mechanism for authenticated denial-of-existence responses. Can only be changed while the state is OFF.
         },
         "peeringConfig": { # The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with.
           "kind": "dns#managedZonePeeringConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZonePeeringConfig".
           "targetNetwork": { # The network with which to peer.
             "kind": "dns#managedZonePeeringConfigTargetNetwork", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZonePeeringConfigTargetNetwork".
-            "deactivateTime": "A String", # If this zone has been deactivated due to a problem with the network it targeted, the time at which it was deactivated. The zone can be deactivated if, for instance, the network it targeted was deleted. If the targeted network is still present, this will be the empty string. This is in RFC3339 text format. Output only.
+            "deactivateTime": "A String", # The time at which the zone was deactivated, in RFC 3339 date-time format. An empty string indicates that the peering connection is active. The producer network can deactivate a zone. The zone is automatically deactivated if the producer network that the zone targeted is deleted. Output only.
             "networkUrl": "A String", # The fully qualified URL of the VPC network to forward queries to. This should be formatted like https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}
           },
         },
@@ -567,6 +591,9 @@
         "name": "A String", # User assigned name for this resource. Must be unique within the project. The name must be 1-63 characters long, must begin with a letter, end with a letter or digit, and only contain lowercase letters, digits or dashes.
       },
       "oldValue": { # A zone is a subtree of the DNS namespace under one administrative responsibility. A ManagedZone is a resource that represents a DNS zone hosted by the Cloud DNS service. # The pre-operation ManagedZone resource.
+        "reverseLookupConfig": { # The presence of this field indicates that this is a managed reverse lookup zone and Cloud DNS will resolve reverse lookup queries using automatically configured records for VPC resources. This only applies to networks listed under private_visibility_config.
+          "kind": "dns#managedZoneReverseLookupConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneReverseLookupConfig".
+        },
         "kind": "dns#managedZone", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZone".
         "labels": { # User labels.
           "a_key": "A String",
@@ -580,6 +607,7 @@
           "targetNameServers": [ # List of target name servers to forward to. Cloud DNS will select the best available name server if more than one target is given.
             {
               "ipv4Address": "A String", # IPv4 address of a target name server.
+              "forwardingPath": "A String", # Forwarding path for this NameServerTarget, if unset or set to DEFAULT, Cloud DNS will make forwarding decision based on address ranges, i.e. RFC1918 addresses go to the VPC, Non-RFC1918 addresses go to the Internet. When set to PRIVATE, Cloud DNS will always send queries through VPC for this target
               "kind": "dns#managedZoneForwardingConfigNameServerTarget", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneForwardingConfigNameServerTarget".
             },
           ],
@@ -599,7 +627,7 @@
         "dnsName": "A String", # The DNS name of this managed zone, for instance "example.com.".
         "dnssecConfig": { # DNSSEC configuration.
           "kind": "dns#managedZoneDnsSecConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneDnsSecConfig".
-          "defaultKeySpecs": [ # Specifies parameters that will be used for generating initial DnsKeys for this ManagedZone. Output only while state is not OFF.
+          "defaultKeySpecs": [ # Specifies parameters for generating initial DnsKeys for this ManagedZone. Can only be changed while the state is OFF.
             { # Parameters for DnsKey key generation. Used for generating initial keys for a new ManagedZone and as default when adding a new DnsKey.
               "keyType": "A String", # Specifies whether this is a key signing key (KSK) or a zone signing key (ZSK). Key signing keys have the Secure Entry Point flag set and, when active, will only be used to sign resource record sets of type DNSKEY. Zone signing keys do not have the Secure Entry Point flag set and will be used to sign all other types of resource record sets.
               "keyLength": 42, # Length of the keys in bits.
@@ -608,13 +636,13 @@
             },
           ],
           "state": "A String", # Specifies whether DNSSEC is enabled, and what mode it is in.
-          "nonExistence": "A String", # Specifies the mechanism used to provide authenticated denial-of-existence responses. Output only while state is not OFF.
+          "nonExistence": "A String", # Specifies the mechanism for authenticated denial-of-existence responses. Can only be changed while the state is OFF.
         },
         "peeringConfig": { # The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with.
           "kind": "dns#managedZonePeeringConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZonePeeringConfig".
           "targetNetwork": { # The network with which to peer.
             "kind": "dns#managedZonePeeringConfigTargetNetwork", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZonePeeringConfigTargetNetwork".
-            "deactivateTime": "A String", # If this zone has been deactivated due to a problem with the network it targeted, the time at which it was deactivated. The zone can be deactivated if, for instance, the network it targeted was deleted. If the targeted network is still present, this will be the empty string. This is in RFC3339 text format. Output only.
+            "deactivateTime": "A String", # The time at which the zone was deactivated, in RFC 3339 date-time format. An empty string indicates that the peering connection is active. The producer network can deactivate a zone. The zone is automatically deactivated if the producer network that the zone targeted is deleted. Output only.
             "networkUrl": "A String", # The fully qualified URL of the VPC network to forward queries to. This should be formatted like https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}
           },
         },
@@ -630,16 +658,19 @@
 </div>
 
 <div class="method">
-    <code class="details" id="update">update(project, managedZone, body, clientOperationId=None)</code>
+    <code class="details" id="update">update(project, managedZone, body=None, clientOperationId=None)</code>
   <pre>Update an existing ManagedZone.
 
 Args:
   project: string, Identifies the project addressed by this request. (required)
   managedZone: string, Identifies the managed zone addressed by this request. Can be the managed zone name or id. (required)
-  body: object, The request body. (required)
+  body: object, The request body.
     The object takes the form of:
 
 { # A zone is a subtree of the DNS namespace under one administrative responsibility. A ManagedZone is a resource that represents a DNS zone hosted by the Cloud DNS service.
+  "reverseLookupConfig": { # The presence of this field indicates that this is a managed reverse lookup zone and Cloud DNS will resolve reverse lookup queries using automatically configured records for VPC resources. This only applies to networks listed under private_visibility_config.
+    "kind": "dns#managedZoneReverseLookupConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneReverseLookupConfig".
+  },
   "kind": "dns#managedZone", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZone".
   "labels": { # User labels.
     "a_key": "A String",
@@ -653,6 +684,7 @@
     "targetNameServers": [ # List of target name servers to forward to. Cloud DNS will select the best available name server if more than one target is given.
       {
         "ipv4Address": "A String", # IPv4 address of a target name server.
+        "forwardingPath": "A String", # Forwarding path for this NameServerTarget, if unset or set to DEFAULT, Cloud DNS will make forwarding decision based on address ranges, i.e. RFC1918 addresses go to the VPC, Non-RFC1918 addresses go to the Internet. When set to PRIVATE, Cloud DNS will always send queries through VPC for this target
         "kind": "dns#managedZoneForwardingConfigNameServerTarget", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneForwardingConfigNameServerTarget".
       },
     ],
@@ -672,7 +704,7 @@
   "dnsName": "A String", # The DNS name of this managed zone, for instance "example.com.".
   "dnssecConfig": { # DNSSEC configuration.
     "kind": "dns#managedZoneDnsSecConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneDnsSecConfig".
-    "defaultKeySpecs": [ # Specifies parameters that will be used for generating initial DnsKeys for this ManagedZone. Output only while state is not OFF.
+    "defaultKeySpecs": [ # Specifies parameters for generating initial DnsKeys for this ManagedZone. Can only be changed while the state is OFF.
       { # Parameters for DnsKey key generation. Used for generating initial keys for a new ManagedZone and as default when adding a new DnsKey.
         "keyType": "A String", # Specifies whether this is a key signing key (KSK) or a zone signing key (ZSK). Key signing keys have the Secure Entry Point flag set and, when active, will only be used to sign resource record sets of type DNSKEY. Zone signing keys do not have the Secure Entry Point flag set and will be used to sign all other types of resource record sets.
         "keyLength": 42, # Length of the keys in bits.
@@ -681,13 +713,13 @@
       },
     ],
     "state": "A String", # Specifies whether DNSSEC is enabled, and what mode it is in.
-    "nonExistence": "A String", # Specifies the mechanism used to provide authenticated denial-of-existence responses. Output only while state is not OFF.
+    "nonExistence": "A String", # Specifies the mechanism for authenticated denial-of-existence responses. Can only be changed while the state is OFF.
   },
   "peeringConfig": { # The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with.
     "kind": "dns#managedZonePeeringConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZonePeeringConfig".
     "targetNetwork": { # The network with which to peer.
       "kind": "dns#managedZonePeeringConfigTargetNetwork", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZonePeeringConfigTargetNetwork".
-      "deactivateTime": "A String", # If this zone has been deactivated due to a problem with the network it targeted, the time at which it was deactivated. The zone can be deactivated if, for instance, the network it targeted was deleted. If the targeted network is still present, this will be the empty string. This is in RFC3339 text format. Output only.
+      "deactivateTime": "A String", # The time at which the zone was deactivated, in RFC 3339 date-time format. An empty string indicates that the peering connection is active. The producer network can deactivate a zone. The zone is automatically deactivated if the producer network that the zone targeted is deleted. Output only.
       "networkUrl": "A String", # The fully qualified URL of the VPC network to forward queries to. This should be formatted like https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}
     },
   },
@@ -743,6 +775,9 @@
     },
     "zoneContext": { # Only populated if the operation targeted a ManagedZone (output only).
       "newValue": { # A zone is a subtree of the DNS namespace under one administrative responsibility. A ManagedZone is a resource that represents a DNS zone hosted by the Cloud DNS service. # The post-operation ManagedZone resource.
+        "reverseLookupConfig": { # The presence of this field indicates that this is a managed reverse lookup zone and Cloud DNS will resolve reverse lookup queries using automatically configured records for VPC resources. This only applies to networks listed under private_visibility_config.
+          "kind": "dns#managedZoneReverseLookupConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneReverseLookupConfig".
+        },
         "kind": "dns#managedZone", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZone".
         "labels": { # User labels.
           "a_key": "A String",
@@ -756,6 +791,7 @@
           "targetNameServers": [ # List of target name servers to forward to. Cloud DNS will select the best available name server if more than one target is given.
             {
               "ipv4Address": "A String", # IPv4 address of a target name server.
+              "forwardingPath": "A String", # Forwarding path for this NameServerTarget, if unset or set to DEFAULT, Cloud DNS will make forwarding decision based on address ranges, i.e. RFC1918 addresses go to the VPC, Non-RFC1918 addresses go to the Internet. When set to PRIVATE, Cloud DNS will always send queries through VPC for this target
               "kind": "dns#managedZoneForwardingConfigNameServerTarget", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneForwardingConfigNameServerTarget".
             },
           ],
@@ -775,7 +811,7 @@
         "dnsName": "A String", # The DNS name of this managed zone, for instance "example.com.".
         "dnssecConfig": { # DNSSEC configuration.
           "kind": "dns#managedZoneDnsSecConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneDnsSecConfig".
-          "defaultKeySpecs": [ # Specifies parameters that will be used for generating initial DnsKeys for this ManagedZone. Output only while state is not OFF.
+          "defaultKeySpecs": [ # Specifies parameters for generating initial DnsKeys for this ManagedZone. Can only be changed while the state is OFF.
             { # Parameters for DnsKey key generation. Used for generating initial keys for a new ManagedZone and as default when adding a new DnsKey.
               "keyType": "A String", # Specifies whether this is a key signing key (KSK) or a zone signing key (ZSK). Key signing keys have the Secure Entry Point flag set and, when active, will only be used to sign resource record sets of type DNSKEY. Zone signing keys do not have the Secure Entry Point flag set and will be used to sign all other types of resource record sets.
               "keyLength": 42, # Length of the keys in bits.
@@ -784,13 +820,13 @@
             },
           ],
           "state": "A String", # Specifies whether DNSSEC is enabled, and what mode it is in.
-          "nonExistence": "A String", # Specifies the mechanism used to provide authenticated denial-of-existence responses. Output only while state is not OFF.
+          "nonExistence": "A String", # Specifies the mechanism for authenticated denial-of-existence responses. Can only be changed while the state is OFF.
         },
         "peeringConfig": { # The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with.
           "kind": "dns#managedZonePeeringConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZonePeeringConfig".
           "targetNetwork": { # The network with which to peer.
             "kind": "dns#managedZonePeeringConfigTargetNetwork", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZonePeeringConfigTargetNetwork".
-            "deactivateTime": "A String", # If this zone has been deactivated due to a problem with the network it targeted, the time at which it was deactivated. The zone can be deactivated if, for instance, the network it targeted was deleted. If the targeted network is still present, this will be the empty string. This is in RFC3339 text format. Output only.
+            "deactivateTime": "A String", # The time at which the zone was deactivated, in RFC 3339 date-time format. An empty string indicates that the peering connection is active. The producer network can deactivate a zone. The zone is automatically deactivated if the producer network that the zone targeted is deleted. Output only.
             "networkUrl": "A String", # The fully qualified URL of the VPC network to forward queries to. This should be formatted like https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}
           },
         },
@@ -798,6 +834,9 @@
         "name": "A String", # User assigned name for this resource. Must be unique within the project. The name must be 1-63 characters long, must begin with a letter, end with a letter or digit, and only contain lowercase letters, digits or dashes.
       },
       "oldValue": { # A zone is a subtree of the DNS namespace under one administrative responsibility. A ManagedZone is a resource that represents a DNS zone hosted by the Cloud DNS service. # The pre-operation ManagedZone resource.
+        "reverseLookupConfig": { # The presence of this field indicates that this is a managed reverse lookup zone and Cloud DNS will resolve reverse lookup queries using automatically configured records for VPC resources. This only applies to networks listed under private_visibility_config.
+          "kind": "dns#managedZoneReverseLookupConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneReverseLookupConfig".
+        },
         "kind": "dns#managedZone", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZone".
         "labels": { # User labels.
           "a_key": "A String",
@@ -811,6 +850,7 @@
           "targetNameServers": [ # List of target name servers to forward to. Cloud DNS will select the best available name server if more than one target is given.
             {
               "ipv4Address": "A String", # IPv4 address of a target name server.
+              "forwardingPath": "A String", # Forwarding path for this NameServerTarget, if unset or set to DEFAULT, Cloud DNS will make forwarding decision based on address ranges, i.e. RFC1918 addresses go to the VPC, Non-RFC1918 addresses go to the Internet. When set to PRIVATE, Cloud DNS will always send queries through VPC for this target
               "kind": "dns#managedZoneForwardingConfigNameServerTarget", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneForwardingConfigNameServerTarget".
             },
           ],
@@ -830,7 +870,7 @@
         "dnsName": "A String", # The DNS name of this managed zone, for instance "example.com.".
         "dnssecConfig": { # DNSSEC configuration.
           "kind": "dns#managedZoneDnsSecConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZoneDnsSecConfig".
-          "defaultKeySpecs": [ # Specifies parameters that will be used for generating initial DnsKeys for this ManagedZone. Output only while state is not OFF.
+          "defaultKeySpecs": [ # Specifies parameters for generating initial DnsKeys for this ManagedZone. Can only be changed while the state is OFF.
             { # Parameters for DnsKey key generation. Used for generating initial keys for a new ManagedZone and as default when adding a new DnsKey.
               "keyType": "A String", # Specifies whether this is a key signing key (KSK) or a zone signing key (ZSK). Key signing keys have the Secure Entry Point flag set and, when active, will only be used to sign resource record sets of type DNSKEY. Zone signing keys do not have the Secure Entry Point flag set and will be used to sign all other types of resource record sets.
               "keyLength": 42, # Length of the keys in bits.
@@ -839,13 +879,13 @@
             },
           ],
           "state": "A String", # Specifies whether DNSSEC is enabled, and what mode it is in.
-          "nonExistence": "A String", # Specifies the mechanism used to provide authenticated denial-of-existence responses. Output only while state is not OFF.
+          "nonExistence": "A String", # Specifies the mechanism for authenticated denial-of-existence responses. Can only be changed while the state is OFF.
         },
         "peeringConfig": { # The presence of this field indicates that DNS Peering is enabled for this zone. The value of this field contains the network to peer with.
           "kind": "dns#managedZonePeeringConfig", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZonePeeringConfig".
           "targetNetwork": { # The network with which to peer.
             "kind": "dns#managedZonePeeringConfigTargetNetwork", # Identifies what kind of resource this is. Value: the fixed string "dns#managedZonePeeringConfigTargetNetwork".
-            "deactivateTime": "A String", # If this zone has been deactivated due to a problem with the network it targeted, the time at which it was deactivated. The zone can be deactivated if, for instance, the network it targeted was deleted. If the targeted network is still present, this will be the empty string. This is in RFC3339 text format. Output only.
+            "deactivateTime": "A String", # The time at which the zone was deactivated, in RFC 3339 date-time format. An empty string indicates that the peering connection is active. The producer network can deactivate a zone. The zone is automatically deactivated if the producer network that the zone targeted is deleted. Output only.
             "networkUrl": "A String", # The fully qualified URL of the VPC network to forward queries to. This should be formatted like https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}
           },
         },