Add VPC sample for retrieving Google APIs and services IP ranges

[ersin-ertan]

Adds get_google_ip_ranges under vpc/ as the modernized and hardened replacement for the archived networking-tools-python/tools/cidr tool. This sample computes the IP address ranges (CIDRs) used exclusively for Google APIs and default domain services by calculating the set difference (goog.json - cloud.json). Key improvements over the archived implementation:

• Python 3.9+ baseline with full PEP 484 type annotations.
• Network hardening with explicit 30s timeouts (urlopen(url, timeout=30)).
• Safe JSON & prefix parsing with graceful recovery on malformed entries.
• Replaced legacy unittest + localhost HTTP server with hermetic pytest unit tests (8/8 passing).
• Fully compliant with flake8, black, and nox style standards. Output Comparison:
• Normal Execution: Outputs the exact same 360+ default domain CIDR blocks as the legacy tool.
• Error Handling: Fixes a legacy bug where network/parsing failures caused an unhandled TypeError: unsupported operand type(s) for -: 'NoneType' and 'IPSet' crash; the new implementation exits cleanly with a descriptive ValueError. Testing:
• Live verification: Ran python get_google_ip_ranges.py against live gstatic.com endpoints.
• Unit testing: pytest -v (8/8 tests passing).
• Linter & formatter: flake8 . (0 errors) and black --check . (clean).

Description

Fixes #

Checklist

Testing

• I have tested this change on a live environment and verified it works as intended.

Compliance & Style

• I have followed the Sample Guidelines.
• The README is updated with all relevant information (if applicable).
• If this PR adds a new sample directory: I updated the CODEOWNERS file.

---

Post-Approval Actions

• Please merge this PR for me once it is approved

[snippet-bot]

Here is the summary of changes.

You are about to add 1 region tag.

• vpc/get_google_ip_ranges/get_google_ip_ranges.py:15, tag vpc_get_google_ip_ranges

---

This comment is generated by snippet-bot.
If you find problems with this result, please file an issue at:
https://github.com/googleapis/repo-automation-bots/issues.
To update this comment, add snippet-bot:force-run label or use the checkbox below:

• Refresh this comment

[gemini-code-assist]

Code Review

This pull request introduces a new Python sample script that retrieves Google's public IP range feeds and calculates the IP set difference to isolate CIDR ranges used exclusively for Google APIs and default services. The reviewer feedback focuses on improving the script's usability by redirecting all non-data output (status, warning, and error messages) to sys.stderr to keep stdout clean for CIDR data. Additionally, the feedback suggests handling potential TypeError exceptions when parsing invalid prefix entries, updating the test suite to assert against sys.stderr output, and adjusting the ignored_versions in noxfile_config.py to align with the repository's Python testing guidelines.

[ersin-ertan]

Adds get_google_ip_ranges under vpc/ as the modernized and hardened replacement for the archived networking-tools-python/tools/cidr tool.

This sample computes the IP address ranges (CIDRs) used exclusively for Google APIs and default domain services by calculating the set difference (goog.json - cloud.json).

Key improvements over the archived implementation:

• Python 3.9+ baseline with full PEP 484 type annotations.
• Network hardening with explicit 30s timeouts (urlopen(url, timeout=30)).
• Safe JSON & prefix parsing with graceful recovery on malformed entries.
• Replaced legacy unittest + localhost HTTP server with hermetic pytest unit tests (8/8 passing).
• Fully compliant with flake8, black, and nox style standards.

Output Comparison:

• Normal Execution: Outputs the exact same 360+ default domain CIDR blocks as the legacy tool.
• Error Handling: Fixes a legacy bug where network/parsing failures caused an unhandled TypeError: unsupported operand type(s) for -: 'NoneType' and 'IPSet' crash; the new implementation exits cleanly with a descriptive ValueError.

[iennae]

Is this a sample or a tool that customers would use?

[ersin-ertan]

Yes, hopefully replacing the sample at https://docs.cloud.google.com/vpc/docs/configure-private-google-access#ip-addr-defaults