google-apis-container_v1 0.107.0 → 0.109.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 676891015ca0d4b6d51d61af744cbcbbca4d4396caa581d22f51b8f110a4e76d
-  data.tar.gz: ef762f3e7297b17775bcb457ce81f1d7ae91c1d6f7de57e12eccb20aaa32eb73
+  metadata.gz: e368e4cfb0058f5cc62e005ef9abc18f145d3aebb58497ae2b514beb72f03da9
+  data.tar.gz: f00fdcc3efad0b68efb2b6a75b5d3612298acaf6217067d4d66c07d74773dbd8
 SHA512:
-  metadata.gz: 213c4491ac0f4af69c82259552a3e83df4e48051ce76ecc0672f3544c64cd3eb3b3aa64d9680bbd77bd6a9fcc0557053bd4534233f50da8c0a9f246a9d885335
-  data.tar.gz: 32c514a374b53f123716fc8b25a688fb32da6947945f355cc7377d185bd2689cbdee31ae436acbf6ff7d8b38721898d7c8e9e2f89f0d2a92d4b35e40bfc5eab1
+  metadata.gz: 2aa0c349d46f8f67a24fb072e2d5e69e9d7407ee0751dac5361e5bf7ca91d68b630db20698fe70039f97e934ab4f01f4e621ce662cd05464a6a1112e19b334eb
+  data.tar.gz: f933f2d69ff7d0c73e45e8172a413bb1522c613964b66175b3b853f8b67091ffa7f4e7a6edf2db50a052c3536a96dafbafd6ae4c9a4493b14b6378c86f64e828

data/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Release history for google-apis-container_v1
 
+### v0.109.0 (2025-11-16)
+
+* Regenerated from discovery document revision 20251104
+
+### v0.108.0 (2025-11-09)
+
+* Regenerated from discovery document revision 20251028
+
 ### v0.107.0 (2025-11-02)
 
 * Regenerated from discovery document revision 20251021

data/lib/google/apis/container_v1/classes.rb

@@ -1008,6 +1008,55 @@ module Google
         end
       end
       
+      # CertificateConfig configures certificate for the registry.
+      class CertificateConfig
+        include Google::Apis::Core::Hashable
+      
+        # The URI configures a secret from [Secret Manager](https://cloud.google.com/
+        # secret-manager) in the format "projects/$PROJECT_ID/secrets/$SECRET_NAME/
+        # versions/$VERSION" for global secret or "projects/$PROJECT_ID/locations/$
+        # REGION/secrets/$SECRET_NAME/versions/$VERSION" for regional secret. Version
+        # can be fixed (e.g. "2") or "latest"
+        # Corresponds to the JSON property `gcpSecretManagerSecretUri`
+        # @return [String]
+        attr_accessor :gcp_secret_manager_secret_uri
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @gcp_secret_manager_secret_uri = args[:gcp_secret_manager_secret_uri] if args.key?(:gcp_secret_manager_secret_uri)
+        end
+      end
+      
+      # CertificateConfigPair configures pairs of certificates, which is used for
+      # client certificate and key pairs under a registry.
+      class CertificateConfigPair
+        include Google::Apis::Core::Hashable
+      
+        # CertificateConfig configures certificate for the registry.
+        # Corresponds to the JSON property `cert`
+        # @return [Google::Apis::ContainerV1::CertificateConfig]
+        attr_accessor :cert
+      
+        # CertificateConfig configures certificate for the registry.
+        # Corresponds to the JSON property `key`
+        # @return [Google::Apis::ContainerV1::CertificateConfig]
+        attr_accessor :key
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @cert = args[:cert] if args.key?(:cert)
+          @key = args[:key] if args.key?(:key)
+        end
+      end
+      
       # CheckAutopilotCompatibilityResponse has a list of compatibility issues.
       class CheckAutopilotCompatibilityResponse
         include Google::Apis::Core::Hashable
@@ -2134,6 +2183,12 @@ module Google
         # @return [String]
         attr_accessor :desired_private_ipv6_google_access
       
+        # PrivilegedAdmissionConfig stores the list of authorized allowlist paths for
+        # the cluster.
+        # Corresponds to the JSON property `desiredPrivilegedAdmissionConfig`
+        # @return [Google::Apis::ContainerV1::PrivilegedAdmissionConfig]
+        attr_accessor :desired_privileged_admission_config
+      
         # RBACBindingConfig allows user to restrict ClusterRoleBindings an RoleBindings
         # that can be created.
         # Corresponds to the JSON property `desiredRbacBindingConfig`
@@ -2291,6 +2346,7 @@ module Google
           @desired_pod_autoscaling = args[:desired_pod_autoscaling] if args.key?(:desired_pod_autoscaling)
           @desired_private_cluster_config = args[:desired_private_cluster_config] if args.key?(:desired_private_cluster_config)
           @desired_private_ipv6_google_access = args[:desired_private_ipv6_google_access] if args.key?(:desired_private_ipv6_google_access)
+          @desired_privileged_admission_config = args[:desired_privileged_admission_config] if args.key?(:desired_privileged_admission_config)
           @desired_rbac_binding_config = args[:desired_rbac_binding_config] if args.key?(:desired_rbac_binding_config)
           @desired_release_channel = args[:desired_release_channel] if args.key?(:desired_release_channel)
           @desired_resource_usage_export_config = args[:desired_resource_usage_export_config] if args.key?(:desired_resource_usage_export_config)
@@ -2545,6 +2601,13 @@ module Google
         # @return [Google::Apis::ContainerV1::PrivateRegistryAccessConfig]
         attr_accessor :private_registry_access_config
       
+        # RegistryHostConfig configures containerd registry host configuration. Each
+        # registry_hosts represents a hosts.toml file. At most 25 registry_hosts are
+        # allowed.
+        # Corresponds to the JSON property `registryHosts`
+        # @return [Array<Google::Apis::ContainerV1::RegistryHostConfig>]
+        attr_accessor :registry_hosts
+      
         # Defines writable cgroups configuration.
         # Corresponds to the JSON property `writableCgroups`
         # @return [Google::Apis::ContainerV1::WritableCgroups]
@@ -2557,6 +2620,7 @@ module Google
         # Update properties of this object
         def update!(**args)
           @private_registry_access_config = args[:private_registry_access_config] if args.key?(:private_registry_access_config)
+          @registry_hosts = args[:registry_hosts] if args.key?(:registry_hosts)
           @writable_cgroups = args[:writable_cgroups] if args.key?(:writable_cgroups)
         end
       end
@@ -3671,6 +3735,73 @@ module Google
         end
       end
       
+      # HostConfig configures the registry host under a given Server.
+      class HostConfig
+        include Google::Apis::Core::Hashable
+      
+        # CA configures the registry host certificate.
+        # Corresponds to the JSON property `ca`
+        # @return [Array<Google::Apis::ContainerV1::CertificateConfig>]
+        attr_accessor :ca
+      
+        # Capabilities represent the capabilities of the registry host, specifying what
+        # operations a host is capable of performing. If not set, containerd enables all
+        # capabilities by default.
+        # Corresponds to the JSON property `capabilities`
+        # @return [Array<String>]
+        attr_accessor :capabilities
+      
+        # Client configures the registry host client certificate and key.
+        # Corresponds to the JSON property `client`
+        # @return [Array<Google::Apis::ContainerV1::CertificateConfigPair>]
+        attr_accessor :client
+      
+        # Specifies the maximum duration allowed for a connection attempt to complete. A
+        # shorter timeout helps reduce delays when falling back to the original registry
+        # if the mirror is unreachable. Maximum allowed value is 180s. If not set,
+        # containerd sets default 30s. The value should be a decimal number of seconds
+        # with an `s` suffix.
+        # Corresponds to the JSON property `dialTimeout`
+        # @return [String]
+        attr_accessor :dial_timeout
+      
+        # Header configures the registry host headers.
+        # Corresponds to the JSON property `header`
+        # @return [Array<Google::Apis::ContainerV1::RegistryHeader>]
+        attr_accessor :header
+      
+        # Host configures the registry host/mirror. It supports fully qualified domain
+        # names (FQDN) and IP addresses: Specifying port is supported. Wildcards are NOT
+        # supported. Examples: - my.customdomain.com - 10.0.1.2:5000
+        # Corresponds to the JSON property `host`
+        # @return [String]
+        attr_accessor :host
+      
+        # OverridePath is used to indicate the host's API root endpoint is defined in
+        # the URL path rather than by the API specification. This may be used with non-
+        # compliant OCI registries which are missing the /v2 prefix. If not set,
+        # containerd sets default false.
+        # Corresponds to the JSON property `overridePath`
+        # @return [Boolean]
+        attr_accessor :override_path
+        alias_method :override_path?, :override_path
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @ca = args[:ca] if args.key?(:ca)
+          @capabilities = args[:capabilities] if args.key?(:capabilities)
+          @client = args[:client] if args.key?(:client)
+          @dial_timeout = args[:dial_timeout] if args.key?(:dial_timeout)
+          @header = args[:header] if args.key?(:header)
+          @host = args[:host] if args.key?(:host)
+          @override_path = args[:override_path] if args.key?(:override_path)
+        end
+      end
+      
       # RFC-2616: cache control support
       class HttpCacheControlResponseHeader
         include Google::Apis::Core::Hashable
@@ -4237,16 +4368,20 @@ module Google
         # busy_read net.core.netdev_max_backlog net.core.rmem_max net.core.rmem_default
         # net.core.wmem_default net.core.wmem_max net.core.optmem_max net.core.somaxconn
         # net.ipv4.tcp_rmem net.ipv4.tcp_wmem net.ipv4.tcp_tw_reuse net.ipv4.
-        # tcp_max_orphans net.netfilter.nf_conntrack_max net.netfilter.
-        # nf_conntrack_buckets net.netfilter.nf_conntrack_tcp_timeout_close_wait net.
-        # netfilter.nf_conntrack_tcp_timeout_time_wait net.netfilter.
+        # tcp_mtu_probing net.ipv4.tcp_max_orphans net.ipv4.tcp_max_tw_buckets net.ipv4.
+        # tcp_syn_retries net.ipv4.tcp_ecn net.ipv4.tcp_congestion_control net.netfilter.
+        # nf_conntrack_max net.netfilter.nf_conntrack_buckets net.netfilter.
+        # nf_conntrack_tcp_timeout_close_wait net.netfilter.
+        # nf_conntrack_tcp_timeout_time_wait net.netfilter.
         # nf_conntrack_tcp_timeout_established net.netfilter.nf_conntrack_acct kernel.
-        # shmmni kernel.shmmax kernel.shmall fs.aio-max-nr fs.file-max fs.inotify.
-        # max_user_instances fs.inotify.max_user_watches fs.nr_open vm.
-        # dirty_background_ratio vm.dirty_expire_centisecs vm.dirty_ratio vm.
-        # dirty_writeback_centisecs vm.max_map_count vm.overcommit_memory vm.
-        # overcommit_ratio vm.vfs_cache_pressure vm.swappiness vm.watermark_scale_factor
-        # vm.min_free_kbytes
+        # shmmni kernel.shmmax kernel.shmall kernel.perf_event_paranoid kernel.
+        # sched_rt_runtime_us kernel.softlockup_panic kernel.yama.ptrace_scope kernel.
+        # kptr_restrict kernel.dmesg_restrict kernel.sysrq fs.aio-max-nr fs.file-max fs.
+        # inotify.max_user_instances fs.inotify.max_user_watches fs.nr_open vm.
+        # dirty_background_ratio vm.dirty_background_bytes vm.dirty_expire_centisecs vm.
+        # dirty_ratio vm.dirty_bytes vm.dirty_writeback_centisecs vm.max_map_count vm.
+        # overcommit_memory vm.overcommit_ratio vm.vfs_cache_pressure vm.swappiness vm.
+        # watermark_scale_factor vm.min_free_kbytes
         # Corresponds to the JSON property `sysctls`
         # @return [Hash<String,String>]
         attr_accessor :sysctls
@@ -4478,7 +4613,10 @@ module Google
         # port 6988. This serves as a workaround for a port conflict with the gke-
         # metadata-server. This field is required ONLY under the following conditions: 1.
         # The GKE node version is older than 1.33.2-gke.4655000. 2. You're connecting
-        # to a Lustre instance that has the 'gke-support-enabled' flag.
+        # to a Lustre instance that has the 'gke-support-enabled' flag. Deprecated: This
+        # flag is no longer required as of GKE node version 1.33.2-gke.4655000, unless
+        # you are connecting to a Lustre instance that has the `gke-support-enabled`
+        # flag.
         # Corresponds to the JSON property `enableLegacyLustrePort`
         # @return [Boolean]
         attr_accessor :enable_legacy_lustre_port
@@ -7119,6 +7257,62 @@ module Google
         end
       end
       
+      # RegistryHeader configures headers for the registry.
+      class RegistryHeader
+        include Google::Apis::Core::Hashable
+      
+        # Key configures the header key.
+        # Corresponds to the JSON property `key`
+        # @return [String]
+        attr_accessor :key
+      
+        # Value configures the header value.
+        # Corresponds to the JSON property `value`
+        # @return [Array<String>]
+        attr_accessor :value
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @key = args[:key] if args.key?(:key)
+          @value = args[:value] if args.key?(:value)
+        end
+      end
+      
+      # RegistryHostConfig configures the top-level structure for a single containerd
+      # registry server's configuration, which represents one hosts.toml file on the
+      # node. It will override the same fqdns in PrivateRegistryAccessConfig.
+      class RegistryHostConfig
+        include Google::Apis::Core::Hashable
+      
+        # HostConfig configures a list of host-specific configurations for the server.
+        # Each server can have at most 10 host configurations.
+        # Corresponds to the JSON property `hosts`
+        # @return [Array<Google::Apis::ContainerV1::HostConfig>]
+        attr_accessor :hosts
+      
+        # Defines the host name of the registry server, which will be used to create
+        # configuration file as /etc/containerd/hosts.d//hosts.toml. It supports fully
+        # qualified domain names (FQDN) and IP addresses: Specifying port is supported.
+        # Wildcards are NOT supported. Examples: - my.customdomain.com - 10.0.1.2:5000
+        # Corresponds to the JSON property `server`
+        # @return [String]
+        attr_accessor :server
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @hosts = args[:hosts] if args.key?(:hosts)
+          @server = args[:server] if args.key?(:server)
+        end
+      end
+      
       # ReleaseChannel indicates which release channel a cluster is subscribed to.
       # Release channels are arranged in order of risk. When a cluster is subscribed
       # to a release channel, Google maintains both the master version and the node
@@ -9492,6 +9686,12 @@ module Google
         # @return [String]
         attr_accessor :control_plane_disk_encryption_key
       
+        # Output only. All of the versions of the Cloud KMS cryptoKey that are used by
+        # Confidential Hyperdisks on the control plane nodes.
+        # Corresponds to the JSON property `controlPlaneDiskEncryptionKeyVersions`
+        # @return [Array<String>]
+        attr_accessor :control_plane_disk_encryption_key_versions
+      
         # Resource path of the Certificate Authority Service caPool to use for the etcd
         # API CA in this cluster.
         # Corresponds to the JSON property `etcdApiCa`
@@ -9533,6 +9733,7 @@ module Google
           @aggregation_ca = args[:aggregation_ca] if args.key?(:aggregation_ca)
           @cluster_ca = args[:cluster_ca] if args.key?(:cluster_ca)
           @control_plane_disk_encryption_key = args[:control_plane_disk_encryption_key] if args.key?(:control_plane_disk_encryption_key)
+          @control_plane_disk_encryption_key_versions = args[:control_plane_disk_encryption_key_versions] if args.key?(:control_plane_disk_encryption_key_versions)
           @etcd_api_ca = args[:etcd_api_ca] if args.key?(:etcd_api_ca)
           @etcd_peer_ca = args[:etcd_peer_ca] if args.key?(:etcd_peer_ca)
           @gkeops_etcd_backup_encryption_key = args[:gkeops_etcd_backup_encryption_key] if args.key?(:gkeops_etcd_backup_encryption_key)

data/lib/google/apis/container_v1/gem_version.rb

@@ -16,13 +16,13 @@ module Google
   module Apis
     module ContainerV1
       # Version of the google-apis-container_v1 gem
-      GEM_VERSION = "0.107.0"
+      GEM_VERSION = "0.109.0"
 
       # Version of the code generator used to generate this client
       GENERATOR_VERSION = "0.18.0"
 
       # Revision of the discovery document this client was generated from
-      REVISION = "20251021"
+      REVISION = "20251104"
     end
   end
 end

data/lib/google/apis/container_v1/representations.rb

@@ -178,6 +178,18 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class CertificateConfig
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class CertificateConfigPair
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class CheckAutopilotCompatibilityResponse
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -496,6 +508,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class HostConfig
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class HttpCacheControlResponseHeader
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -958,6 +976,18 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class RegistryHeader
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class RegistryHostConfig
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class ReleaseChannel
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -1579,6 +1609,23 @@ module Google
         end
       end
       
+      class CertificateConfig
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :gcp_secret_manager_secret_uri, as: 'gcpSecretManagerSecretUri'
+        end
+      end
+      
+      class CertificateConfigPair
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :cert, as: 'cert', class: Google::Apis::ContainerV1::CertificateConfig, decorator: Google::Apis::ContainerV1::CertificateConfig::Representation
+      
+          property :key, as: 'key', class: Google::Apis::ContainerV1::CertificateConfig, decorator: Google::Apis::ContainerV1::CertificateConfig::Representation
+      
+        end
+      end
+      
       class CheckAutopilotCompatibilityResponse
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -1864,6 +1911,8 @@ module Google
           property :desired_private_cluster_config, as: 'desiredPrivateClusterConfig', class: Google::Apis::ContainerV1::PrivateClusterConfig, decorator: Google::Apis::ContainerV1::PrivateClusterConfig::Representation
       
           property :desired_private_ipv6_google_access, as: 'desiredPrivateIpv6GoogleAccess'
+          property :desired_privileged_admission_config, as: 'desiredPrivilegedAdmissionConfig', class: Google::Apis::ContainerV1::PrivilegedAdmissionConfig, decorator: Google::Apis::ContainerV1::PrivilegedAdmissionConfig::Representation
+      
           property :desired_rbac_binding_config, as: 'desiredRbacBindingConfig', class: Google::Apis::ContainerV1::RbacBindingConfig, decorator: Google::Apis::ContainerV1::RbacBindingConfig::Representation
       
           property :desired_release_channel, as: 'desiredReleaseChannel', class: Google::Apis::ContainerV1::ReleaseChannel, decorator: Google::Apis::ContainerV1::ReleaseChannel::Representation
@@ -1970,6 +2019,8 @@ module Google
         class Representation < Google::Apis::Core::JsonRepresentation
           property :private_registry_access_config, as: 'privateRegistryAccessConfig', class: Google::Apis::ContainerV1::PrivateRegistryAccessConfig, decorator: Google::Apis::ContainerV1::PrivateRegistryAccessConfig::Representation
       
+          collection :registry_hosts, as: 'registryHosts', class: Google::Apis::ContainerV1::RegistryHostConfig, decorator: Google::Apis::ContainerV1::RegistryHostConfig::Representation
+      
           property :writable_cgroups, as: 'writableCgroups', class: Google::Apis::ContainerV1::WritableCgroups, decorator: Google::Apis::ContainerV1::WritableCgroups::Representation
       
         end
@@ -2283,6 +2334,22 @@ module Google
         end
       end
       
+      class HostConfig
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :ca, as: 'ca', class: Google::Apis::ContainerV1::CertificateConfig, decorator: Google::Apis::ContainerV1::CertificateConfig::Representation
+      
+          collection :capabilities, as: 'capabilities'
+          collection :client, as: 'client', class: Google::Apis::ContainerV1::CertificateConfigPair, decorator: Google::Apis::ContainerV1::CertificateConfigPair::Representation
+      
+          property :dial_timeout, as: 'dialTimeout'
+          collection :header, as: 'header', class: Google::Apis::ContainerV1::RegistryHeader, decorator: Google::Apis::ContainerV1::RegistryHeader::Representation
+      
+          property :host, as: 'host'
+          property :override_path, as: 'overridePath'
+        end
+      end
+      
       class HttpCacheControlResponseHeader
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -3159,6 +3226,23 @@ module Google
         end
       end
       
+      class RegistryHeader
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :key, as: 'key'
+          collection :value, as: 'value'
+        end
+      end
+      
+      class RegistryHostConfig
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :hosts, as: 'hosts', class: Google::Apis::ContainerV1::HostConfig, decorator: Google::Apis::ContainerV1::HostConfig::Representation
+      
+          property :server, as: 'server'
+        end
+      end
+      
       class ReleaseChannel
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -3727,6 +3811,7 @@ module Google
           property :aggregation_ca, as: 'aggregationCa'
           property :cluster_ca, as: 'clusterCa'
           property :control_plane_disk_encryption_key, as: 'controlPlaneDiskEncryptionKey'
+          collection :control_plane_disk_encryption_key_versions, as: 'controlPlaneDiskEncryptionKeyVersions'
           property :etcd_api_ca, as: 'etcdApiCa'
           property :etcd_peer_ca, as: 'etcdPeerCa'
           property :gkeops_etcd_backup_encryption_key, as: 'gkeopsEtcdBackupEncryptionKey'

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: google-apis-container_v1
 version: !ruby/object:Gem::Version
-  version: 0.107.0
+  version: 0.109.0
 platform: ruby
 authors:
 - Google LLC
@@ -57,7 +57,7 @@ licenses:
 metadata:
   bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
   changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-container_v1/CHANGELOG.md
-  documentation_uri: https://googleapis.dev/ruby/google-apis-container_v1/v0.107.0
+  documentation_uri: https://googleapis.dev/ruby/google-apis-container_v1/v0.109.0
   source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/main/generated/google-apis-container_v1
 rdoc_options: []
 require_paths: