diff --git a/networkservices/v1/networkservices-api.json b/networkservices/v1/networkservices-api.json
index 03fd77ce5ca..e2965d80d19 100644
--- a/networkservices/v1/networkservices-api.json
+++ b/networkservices/v1/networkservices-api.json
@@ -2954,7 +2954,7 @@
       }
     }
   },
-  "revision": "20250120",
+  "revision": "20250127",
   "rootUrl": "https://networkservices.googleapis.com/",
   "schemas": {
     "AuditConfig": {
@@ -3560,8 +3560,7 @@
           "type": "string"
         },
         "etag": {
-          "description": "Optional. Output only. Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.",
-          "readOnly": true,
+          "description": "Optional. Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.",
           "type": "string"
         },
         "gateways": {
@@ -3862,8 +3861,7 @@
           "type": "string"
         },
         "etag": {
-          "description": "Optional. Output only. Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.",
-          "readOnly": true,
+          "description": "Optional. Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.",
           "type": "string"
         },
         "gateways": {
@@ -5368,8 +5366,7 @@
           "type": "string"
         },
         "etag": {
-          "description": "Optional. Output only. Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.",
-          "readOnly": true,
+          "description": "Optional. Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.",
           "type": "string"
         },
         "gateways": {
@@ -5533,8 +5530,7 @@
           "type": "string"
         },
         "etag": {
-          "description": "Optional. Output only. Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.",
-          "readOnly": true,
+          "description": "Optional. Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.",
           "type": "string"
         },
         "gateways": {
@@ -5619,7 +5615,7 @@
       "type": "object"
     },
     "TlsRouteRouteMatch": {
-      "description": "RouteMatch defines the predicate used to match requests to a given action. Multiple match types are \"AND\"ed for evaluation. If no routeMatch field is specified, this rule will unconditionally match traffic.",
+      "description": "RouteMatch defines the predicate used to match requests to a given action. Multiple match types are \"AND\"ed for evaluation.",
       "id": "TlsRouteRouteMatch",
       "properties": {
         "alpn": {
@@ -5648,7 +5644,7 @@
           "description": "Required. The detailed rule defining how to route matched traffic."
         },
         "matches": {
-          "description": "Required. RouteMatch defines the predicate used to match requests to a given action. Multiple match types are \"OR\"ed for evaluation.",
+          "description": "Required. RouteMatch defines the predicate used to match requests to a given action. Multiple match types are \"OR\"ed for evaluation. Atleast one RouteMatch must be supplied.",
           "items": {
             "$ref": "TlsRouteRouteMatch"
           },
diff --git a/networkservices/v1/networkservices-gen.go b/networkservices/v1/networkservices-gen.go
index c3b3b59ab59..b686725230d 100644
--- a/networkservices/v1/networkservices-gen.go
+++ b/networkservices/v1/networkservices-gen.go
@@ -1258,9 +1258,9 @@ type GrpcRoute struct {
 	// Description: Optional. A free-text description of the resource. Max length
 	// 1024 characters.
 	Description string `json:"description,omitempty"`
-	// Etag: Optional. Output only. Etag of the resource. If this is provided, it
-	// must match the server's etag. If the provided etag does not match the
-	// server's etag, the request will fail with a 409 ABORTED error.
+	// Etag: Optional. Etag of the resource. If this is provided, it must match the
+	// server's etag. If the provided etag does not match the server's etag, the
+	// request will fail with a 409 ABORTED error.
 	Etag string `json:"etag,omitempty"`
 	// Gateways: Optional. Gateways defines a list of gateways this GrpcRoute is
 	// attached to, as one of the routing rules to route the requests served by the
@@ -1692,9 +1692,9 @@ type HttpRoute struct {
 	// Description: Optional. A free-text description of the resource. Max length
 	// 1024 characters.
 	Description string `json:"description,omitempty"`
-	// Etag: Optional. Output only. Etag of the resource. If this is provided, it
-	// must match the server's etag. If the provided etag does not match the
-	// server's etag, the request will fail with a 409 ABORTED error.
+	// Etag: Optional. Etag of the resource. If this is provided, it must match the
+	// server's etag. If the provided etag does not match the server's etag, the
+	// request will fail with a 409 ABORTED error.
 	Etag string `json:"etag,omitempty"`
 	// Gateways: Optional. Gateways defines a list of gateways this HttpRoute is
 	// attached to, as one of the routing rules to route the requests served by the
@@ -3734,9 +3734,9 @@ type TcpRoute struct {
 	// Description: Optional. A free-text description of the resource. Max length
 	// 1024 characters.
 	Description string `json:"description,omitempty"`
-	// Etag: Optional. Output only. Etag of the resource. If this is provided, it
-	// must match the server's etag. If the provided etag does not match the
-	// server's etag, the request will fail with a 409 ABORTED error.
+	// Etag: Optional. Etag of the resource. If this is provided, it must match the
+	// server's etag. If the provided etag does not match the server's etag, the
+	// request will fail with a 409 ABORTED error.
 	Etag string `json:"etag,omitempty"`
 	// Gateways: Optional. Gateways defines a list of gateways this TcpRoute is
 	// attached to, as one of the routing rules to route the requests served by the
@@ -3971,9 +3971,9 @@ type TlsRoute struct {
 	// Description: Optional. A free-text description of the resource. Max length
 	// 1024 characters.
 	Description string `json:"description,omitempty"`
-	// Etag: Optional. Output only. Etag of the resource. If this is provided, it
-	// must match the server's etag. If the provided etag does not match the
-	// server's etag, the request will fail with a 409 ABORTED error.
+	// Etag: Optional. Etag of the resource. If this is provided, it must match the
+	// server's etag. If the provided etag does not match the server's etag, the
+	// request will fail with a 409 ABORTED error.
 	Etag string `json:"etag,omitempty"`
 	// Gateways: Optional. Gateways defines a list of gateways this TlsRoute is
 	// attached to, as one of the routing rules to route the requests served by the
@@ -4078,8 +4078,7 @@ func (s TlsRouteRouteDestination) MarshalJSON() ([]byte, error) {
 }
 
 // TlsRouteRouteMatch: RouteMatch defines the predicate used to match requests
-// to a given action. Multiple match types are "AND"ed for evaluation. If no
-// routeMatch field is specified, this rule will unconditionally match traffic.
+// to a given action. Multiple match types are "AND"ed for evaluation.
 type TlsRouteRouteMatch struct {
 	// Alpn: Optional. ALPN (Application-Layer Protocol Negotiation) to match
 	// against. Examples: "http/1.1", "h2". At least one of sni_host and alpn is
@@ -4116,7 +4115,8 @@ type TlsRouteRouteRule struct {
 	// Action: Required. The detailed rule defining how to route matched traffic.
 	Action *TlsRouteRouteAction `json:"action,omitempty"`
 	// Matches: Required. RouteMatch defines the predicate used to match requests
-	// to a given action. Multiple match types are "OR"ed for evaluation.
+	// to a given action. Multiple match types are "OR"ed for evaluation. Atleast
+	// one RouteMatch must be supplied.
 	Matches []*TlsRouteRouteMatch `json:"matches,omitempty"`
 	// ForceSendFields is a list of field names (e.g. "Action") to unconditionally
 	// include in API requests. By default, fields with empty or default values are
diff --git a/networkservices/v1beta1/networkservices-api.json b/networkservices/v1beta1/networkservices-api.json
index 5728d89685b..f847acadd29 100644
--- a/networkservices/v1beta1/networkservices-api.json
+++ b/networkservices/v1beta1/networkservices-api.json
@@ -2681,7 +2681,7 @@
       }
     }
   },
-  "revision": "20250120",
+  "revision": "20250127",
   "rootUrl": "https://networkservices.googleapis.com/",
   "schemas": {
     "AuthzExtension": {
@@ -3151,8 +3151,7 @@
           "type": "string"
         },
         "etag": {
-          "description": "Optional. Output only. Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.",
-          "readOnly": true,
+          "description": "Optional. Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.",
           "type": "string"
         },
         "gateways": {
@@ -3453,8 +3452,7 @@
           "type": "string"
         },
         "etag": {
-          "description": "Optional. Output only. Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.",
-          "readOnly": true,
+          "description": "Optional. Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.",
           "type": "string"
         },
         "gateways": {
@@ -4955,8 +4953,7 @@
           "type": "string"
         },
         "etag": {
-          "description": "Optional. Output only. Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.",
-          "readOnly": true,
+          "description": "Optional. Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.",
           "type": "string"
         },
         "gateways": {
@@ -5092,8 +5089,7 @@
           "type": "string"
         },
         "etag": {
-          "description": "Optional. Output only. Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.",
-          "readOnly": true,
+          "description": "Optional. Etag of the resource. If this is provided, it must match the server's etag. If the provided etag does not match the server's etag, the request will fail with a 409 ABORTED error.",
           "type": "string"
         },
         "gateways": {
@@ -5178,7 +5174,7 @@
       "type": "object"
     },
     "TlsRouteRouteMatch": {
-      "description": "RouteMatch defines the predicate used to match requests to a given action. Multiple match types are \"AND\"ed for evaluation. If no routeMatch field is specified, this rule will unconditionally match traffic.",
+      "description": "RouteMatch defines the predicate used to match requests to a given action. Multiple match types are \"AND\"ed for evaluation.",
       "id": "TlsRouteRouteMatch",
       "properties": {
         "alpn": {
@@ -5207,7 +5203,7 @@
           "description": "Required. The detailed rule defining how to route matched traffic."
         },
         "matches": {
-          "description": "Required. RouteMatch defines the predicate used to match requests to a given action. Multiple match types are \"OR\"ed for evaluation.",
+          "description": "Required. RouteMatch defines the predicate used to match requests to a given action. Multiple match types are \"OR\"ed for evaluation. Atleast one RouteMatch must be supplied.",
           "items": {
             "$ref": "TlsRouteRouteMatch"
           },
diff --git a/networkservices/v1beta1/networkservices-gen.go b/networkservices/v1beta1/networkservices-gen.go
index 5d95be1d6e2..640ad2b0fee 100644
--- a/networkservices/v1beta1/networkservices-gen.go
+++ b/networkservices/v1beta1/networkservices-gen.go
@@ -926,9 +926,9 @@ type GrpcRoute struct {
 	// Description: Optional. A free-text description of the resource. Max length
 	// 1024 characters.
 	Description string `json:"description,omitempty"`
-	// Etag: Optional. Output only. Etag of the resource. If this is provided, it
-	// must match the server's etag. If the provided etag does not match the
-	// server's etag, the request will fail with a 409 ABORTED error.
+	// Etag: Optional. Etag of the resource. If this is provided, it must match the
+	// server's etag. If the provided etag does not match the server's etag, the
+	// request will fail with a 409 ABORTED error.
 	Etag string `json:"etag,omitempty"`
 	// Gateways: Optional. Gateways defines a list of gateways this GrpcRoute is
 	// attached to, as one of the routing rules to route the requests served by the
@@ -1360,9 +1360,9 @@ type HttpRoute struct {
 	// Description: Optional. A free-text description of the resource. Max length
 	// 1024 characters.
 	Description string `json:"description,omitempty"`
-	// Etag: Optional. Output only. Etag of the resource. If this is provided, it
-	// must match the server's etag. If the provided etag does not match the
-	// server's etag, the request will fail with a 409 ABORTED error.
+	// Etag: Optional. Etag of the resource. If this is provided, it must match the
+	// server's etag. If the provided etag does not match the server's etag, the
+	// request will fail with a 409 ABORTED error.
 	Etag string `json:"etag,omitempty"`
 	// Gateways: Optional. Gateways defines a list of gateways this HttpRoute is
 	// attached to, as one of the routing rules to route the requests served by the
@@ -3353,9 +3353,9 @@ type TcpRoute struct {
 	// Description: Optional. A free-text description of the resource. Max length
 	// 1024 characters.
 	Description string `json:"description,omitempty"`
-	// Etag: Optional. Output only. Etag of the resource. If this is provided, it
-	// must match the server's etag. If the provided etag does not match the
-	// server's etag, the request will fail with a 409 ABORTED error.
+	// Etag: Optional. Etag of the resource. If this is provided, it must match the
+	// server's etag. If the provided etag does not match the server's etag, the
+	// request will fail with a 409 ABORTED error.
 	Etag string `json:"etag,omitempty"`
 	// Gateways: Optional. Gateways defines a list of gateways this TcpRoute is
 	// attached to, as one of the routing rules to route the requests served by the
@@ -3538,9 +3538,9 @@ type TlsRoute struct {
 	// Description: Optional. A free-text description of the resource. Max length
 	// 1024 characters.
 	Description string `json:"description,omitempty"`
-	// Etag: Optional. Output only. Etag of the resource. If this is provided, it
-	// must match the server's etag. If the provided etag does not match the
-	// server's etag, the request will fail with a 409 ABORTED error.
+	// Etag: Optional. Etag of the resource. If this is provided, it must match the
+	// server's etag. If the provided etag does not match the server's etag, the
+	// request will fail with a 409 ABORTED error.
 	Etag string `json:"etag,omitempty"`
 	// Gateways: Optional. Gateways defines a list of gateways this TlsRoute is
 	// attached to, as one of the routing rules to route the requests served by the
@@ -3645,8 +3645,7 @@ func (s TlsRouteRouteDestination) MarshalJSON() ([]byte, error) {
 }
 
 // TlsRouteRouteMatch: RouteMatch defines the predicate used to match requests
-// to a given action. Multiple match types are "AND"ed for evaluation. If no
-// routeMatch field is specified, this rule will unconditionally match traffic.
+// to a given action. Multiple match types are "AND"ed for evaluation.
 type TlsRouteRouteMatch struct {
 	// Alpn: Optional. ALPN (Application-Layer Protocol Negotiation) to match
 	// against. Examples: "http/1.1", "h2". At least one of sni_host and alpn is
@@ -3683,7 +3682,8 @@ type TlsRouteRouteRule struct {
 	// Action: Required. The detailed rule defining how to route matched traffic.
 	Action *TlsRouteRouteAction `json:"action,omitempty"`
 	// Matches: Required. RouteMatch defines the predicate used to match requests
-	// to a given action. Multiple match types are "OR"ed for evaluation.
+	// to a given action. Multiple match types are "OR"ed for evaluation. Atleast
+	// one RouteMatch must be supplied.
 	Matches []*TlsRouteRouteMatch `json:"matches,omitempty"`
 	// ForceSendFields is a list of field names (e.g. "Action") to unconditionally
 	// include in API requests. By default, fields with empty or default values are