@alicloud/cs20151215 4.2.0 → 4.3.0

package/dist/client.d.ts

@@ -44,6 +44,24 @@ export declare class DataDisk extends $tea.Model {
         [key: string]: any;
     });
 }
+export declare class InstancePatterns extends $tea.Model {
+    architectures?: string[];
+    burstPerformanceOption?: string;
+    core?: number;
+    excludedInstanceTypes?: string[];
+    instanceFamilyLevel?: string;
+    maxPrice?: number;
+    memory?: number;
+    static names(): {
+        [key: string]: string;
+    };
+    static types(): {
+        [key: string]: any;
+    };
+    constructor(map?: {
+        [key: string]: any;
+    });
+}
 export declare class KubeletConfig extends $tea.Model {
     allowedUnsafeSysctls?: string[];
     containerLogMaxFiles?: number;
@@ -2559,6 +2577,35 @@ export declare class DescribePolicyInstancesStatusResponse extends $tea.Model {
         [key: string]: any;
     });
 }
+export declare class DescribeResourcesDeleteProtectionRequest extends $tea.Model {
+    namespace?: string;
+    resources?: string;
+    static names(): {
+        [key: string]: string;
+    };
+    static types(): {
+        [key: string]: any;
+    };
+    constructor(map?: {
+        [key: string]: any;
+    });
+}
+export declare class DescribeResourcesDeleteProtectionResponse extends $tea.Model {
+    headers?: {
+        [key: string]: string;
+    };
+    statusCode?: number;
+    body?: DescribeResourcesDeleteProtectionResponseBody[];
+    static names(): {
+        [key: string]: string;
+    };
+    static types(): {
+        [key: string]: any;
+    };
+    constructor(map?: {
+        [key: string]: any;
+    });
+}
 export declare class DescribeSubaccountK8sClusterUserConfigRequest extends $tea.Model {
     privateIpAddress?: boolean;
     temporaryDurationMinutes?: number;
@@ -4618,6 +4665,53 @@ export declare class UpdateK8sClusterUserConfigExpireResponse extends $tea.Model
         [key: string]: any;
     });
 }
+export declare class UpdateResourcesDeleteProtectionRequest extends $tea.Model {
+    enable?: boolean;
+    namespace?: string;
+    resourceType?: string;
+    resources?: string[];
+    static names(): {
+        [key: string]: string;
+    };
+    static types(): {
+        [key: string]: any;
+    };
+    constructor(map?: {
+        [key: string]: any;
+    });
+}
+export declare class UpdateResourcesDeleteProtectionResponseBody extends $tea.Model {
+    namespace?: string;
+    protection?: string;
+    requestId?: string;
+    resourceType?: string;
+    resources?: string[];
+    static names(): {
+        [key: string]: string;
+    };
+    static types(): {
+        [key: string]: any;
+    };
+    constructor(map?: {
+        [key: string]: any;
+    });
+}
+export declare class UpdateResourcesDeleteProtectionResponse extends $tea.Model {
+    headers?: {
+        [key: string]: string;
+    };
+    statusCode?: number;
+    body?: UpdateResourcesDeleteProtectionResponseBody;
+    static names(): {
+        [key: string]: string;
+    };
+    static types(): {
+        [key: string]: any;
+    };
+    constructor(map?: {
+        [key: string]: any;
+    });
+}
 export declare class UpdateTemplateRequest extends $tea.Model {
     description?: string;
     name?: string;
@@ -5307,6 +5401,7 @@ export declare class CreateClusterNodePoolRequestScalingGroup extends $tea.Model
     imageId?: string;
     imageType?: string;
     instanceChargeType?: string;
+    instancePatterns?: InstancePatterns[];
     instanceTypes?: string[];
     internetChargeType?: string;
     internetMaxBandwidthOut?: number;
@@ -5710,6 +5805,7 @@ export declare class DescribeClusterNodePoolDetailResponseBodyScalingGroup exten
     imageId?: string;
     imageType?: string;
     instanceChargeType?: string;
+    instancePatterns?: InstancePatterns[];
     instanceTypes?: string[];
     internetChargeType?: string;
     internetMaxBandwidthOut?: number;
@@ -5980,6 +6076,7 @@ export declare class DescribeClusterNodePoolsResponseBodyNodepoolsScalingGroup e
     imageId?: string;
     imageType?: string;
     instanceChargeType?: string;
+    instancePatterns?: InstancePatterns[];
     instanceTypes?: string[];
     internetChargeType?: string;
     internetMaxBandwidthOut?: number;
@@ -6696,6 +6793,21 @@ export declare class DescribePolicyInstancesStatusResponseBodyPolicyInstances ex
         [key: string]: any;
     });
 }
+export declare class DescribeResourcesDeleteProtectionResponseBody extends $tea.Model {
+    name?: string;
+    namespace?: string;
+    resource?: string;
+    protection?: boolean;
+    static names(): {
+        [key: string]: string;
+    };
+    static types(): {
+        [key: string]: any;
+    };
+    constructor(map?: {
+        [key: string]: any;
+    });
+}
 export declare class DescribeTaskInfoResponseBodyError extends $tea.Model {
     code?: string;
     message?: string;
@@ -7329,6 +7441,7 @@ export declare class ModifyClusterNodePoolRequestScalingGroup extends $tea.Model
     imageId?: string;
     imageType?: string;
     instanceChargeType?: string;
+    instancePatterns?: InstancePatterns[];
     instanceTypes?: string[];
     internetChargeType?: string;
     internetMaxBandwidthOut?: number;
@@ -7558,7 +7671,7 @@ export default class Client extends OpenApi {
      */
     attachInstances(ClusterId: string, request: AttachInstancesRequest): Promise<AttachInstancesResponse>;
     /**
-     * @summary You can call the AttachInstancesToNodePool operation to add existing nodes to a node pool.
+     * @summary Adds existing nodes to a specific node pool. You can add existing ECS instances to a specific node pool in a Container Service for Kubernetes (ACK) cluster as worker nodes. You can also add removed worker nodes back to the node pool.
      *
      * @param request AttachInstancesToNodePoolRequest
      * @param headers map
@@ -7569,7 +7682,7 @@ export default class Client extends OpenApi {
         [key: string]: string;
     }, runtime: $Util.RuntimeOptions): Promise<AttachInstancesToNodePoolResponse>;
     /**
-     * @summary You can call the AttachInstancesToNodePool operation to add existing nodes to a node pool.
+     * @summary Adds existing nodes to a specific node pool. You can add existing ECS instances to a specific node pool in a Container Service for Kubernetes (ACK) cluster as worker nodes. You can also add removed worker nodes back to the node pool.
      *
      * @param request AttachInstancesToNodePoolRequest
      * @return AttachInstancesToNodePoolResponse
@@ -7612,7 +7725,7 @@ export default class Client extends OpenApi {
      */
     cancelComponentUpgrade(clusterId: string, componentId: string): Promise<CancelComponentUpgradeResponse>;
     /**
-     * @summary 取消自动运维执行计划
+     * @summary You can call the CancelOperationPlan operation to cancel a pending auto O\\\\\\&M plan.
      *
      * @param headers map
      * @param runtime runtime options for this request RuntimeOptions
@@ -7622,13 +7735,13 @@ export default class Client extends OpenApi {
         [key: string]: string;
     }, runtime: $Util.RuntimeOptions): Promise<CancelOperationPlanResponse>;
     /**
-     * @summary 取消自动运维执行计划
+     * @summary You can call the CancelOperationPlan operation to cancel a pending auto O\\\\\\&M plan.
      *
      * @return CancelOperationPlanResponse
      */
     cancelOperationPlan(planId: string): Promise<CancelOperationPlanResponse>;
     /**
-     * @summary You can call the CancelTask operation to cancel a task.
+     * @summary Cancels the execution of a cluster task.
      *
      * @param headers map
      * @param runtime runtime options for this request RuntimeOptions
@@ -7638,12 +7751,14 @@ export default class Client extends OpenApi {
         [key: string]: string;
     }, runtime: $Util.RuntimeOptions): Promise<CancelTaskResponse>;
     /**
-     * @summary You can call the CancelTask operation to cancel a task.
+     * @summary Cancels the execution of a cluster task.
      *
      * @return CancelTaskResponse
      */
     cancelTask(taskId: string): Promise<CancelTaskResponse>;
     /**
+     * @deprecated OpenAPI CancelWorkflow is deprecated
+     *
      * @summary You can call the CancelWorkflow operation to cancel an ongoing workflow.
      *
      * @param request CancelWorkflowRequest
@@ -7655,6 +7770,8 @@ export default class Client extends OpenApi {
         [key: string]: string;
     }, runtime: $Util.RuntimeOptions): Promise<CancelWorkflowResponse>;
     /**
+     * @deprecated OpenAPI CancelWorkflow is deprecated
+     *
      * @summary You can call the CancelWorkflow operation to cancel an ongoing workflow.
      *
      * @param request CancelWorkflowRequest
@@ -7884,7 +8001,7 @@ export default class Client extends OpenApi {
      */
     deleteAlertContactGroup(request: DeleteAlertContactGroupRequest): Promise<DeleteAlertContactGroupResponse>;
     /**
-     * @summary You can call the DeleteCluster operation to delete a cluster by cluster ID and release all nodes in the cluster.
+     * @summary You can call the DeleteCluster operation to delete a cluster and specify whether to delete or retain the relevant cluster resources. Before you delete a cluster, you must manually delete workloads in the cluster, such as Deployments, StatefulSets, Jobs, and CronJobs. Otherwise, you may fail to delete the cluster.
      *
      * @param tmpReq DeleteClusterRequest
      * @param headers map
@@ -7895,7 +8012,7 @@ export default class Client extends OpenApi {
         [key: string]: string;
     }, runtime: $Util.RuntimeOptions): Promise<DeleteClusterResponse>;
     /**
-     * @summary You can call the DeleteCluster operation to delete a cluster by cluster ID and release all nodes in the cluster.
+     * @summary You can call the DeleteCluster operation to delete a cluster and specify whether to delete or retain the relevant cluster resources. Before you delete a cluster, you must manually delete workloads in the cluster, such as Deployments, StatefulSets, Jobs, and CronJobs. Otherwise, you may fail to delete the cluster.
      *
      * @param request DeleteClusterRequest
      * @return DeleteClusterResponse
@@ -7996,7 +8113,7 @@ export default class Client extends OpenApi {
      */
     deletePolicyInstance(clusterId: string, policyName: string, request: DeletePolicyInstanceRequest): Promise<DeletePolicyInstanceResponse>;
     /**
-     * @summary You can call the DeleteTemplate operation to delete an orchestration template by template ID.
+     * @summary Deletes the orchestration templates that you no longer need.
      *
      * @param headers map
      * @param runtime runtime options for this request RuntimeOptions
@@ -8006,7 +8123,7 @@ export default class Client extends OpenApi {
         [key: string]: string;
     }, runtime: $Util.RuntimeOptions): Promise<DeleteTemplateResponse>;
     /**
-     * @summary You can call the DeleteTemplate operation to delete an orchestration template by template ID.
+     * @summary Deletes the orchestration templates that you no longer need.
      *
      * @return DeleteTemplateResponse
      */
@@ -8028,7 +8145,7 @@ export default class Client extends OpenApi {
      */
     deleteTrigger(clusterId: string, Id: string): Promise<DeleteTriggerResponse>;
     /**
-     * @summary You can call the DeployPolicyInstance operation to deploy a policy instance in a cluster.
+     * @summary Deploys a policy in the specified namespaces of a specific Container Service for Kubernetes (ACK) cluster. You can create and deploy a security policy by specifying the policy type, action of the policy such as alerting or denying, and namespaces to which the policy applies.
      *
      * @param request DeployPolicyInstanceRequest
      * @param headers map
@@ -8039,13 +8156,15 @@ export default class Client extends OpenApi {
         [key: string]: string;
     }, runtime: $Util.RuntimeOptions): Promise<DeployPolicyInstanceResponse>;
     /**
-     * @summary You can call the DeployPolicyInstance operation to deploy a policy instance in a cluster.
+     * @summary Deploys a policy in the specified namespaces of a specific Container Service for Kubernetes (ACK) cluster. You can create and deploy a security policy by specifying the policy type, action of the policy such as alerting or denying, and namespaces to which the policy applies.
      *
      * @param request DeployPolicyInstanceRequest
      * @return DeployPolicyInstanceResponse
      */
     deployPolicyInstance(clusterId: string, policyName: string, request: DeployPolicyInstanceRequest): Promise<DeployPolicyInstanceResponse>;
     /**
+     * @deprecated OpenAPI DescirbeWorkflow is deprecated
+     *
      * @summary You can call the DescirbeWorkflow operation to query detailed information about a workflow.
      *
      * @param headers map
@@ -8056,6 +8175,8 @@ export default class Client extends OpenApi {
         [key: string]: string;
     }, runtime: $Util.RuntimeOptions): Promise<DescirbeWorkflowResponse>;
     /**
+     * @deprecated OpenAPI DescirbeWorkflow is deprecated
+     *
      * @summary You can call the DescirbeWorkflow operation to query detailed information about a workflow.
      *
      * @return DescirbeWorkflowResponse
@@ -8408,7 +8529,7 @@ export default class Client extends OpenApi {
      */
     describeClusterV2UserKubeconfig(ClusterId: string, request: DescribeClusterV2UserKubeconfigRequest): Promise<DescribeClusterV2UserKubeconfigResponse>;
     /**
-     * @summary You can call the DescribeClusterVuls operation to query the vulnerability information of a cluster.
+     * @summary Queries the security vulnerability details of a cluster by cluster ID. The details include vulnerability name, vulnerability type, and vulnerability severity. We recommend that you scan your cluster on a regular basis to ensure cluster security.
      *
      * @param headers map
      * @param runtime runtime options for this request RuntimeOptions
@@ -8418,7 +8539,7 @@ export default class Client extends OpenApi {
         [key: string]: string;
     }, runtime: $Util.RuntimeOptions): Promise<DescribeClusterVulsResponse>;
     /**
-     * @summary You can call the DescribeClusterVuls operation to query the vulnerability information of a cluster.
+     * @summary Queries the security vulnerability details of a cluster by cluster ID. The details include vulnerability name, vulnerability type, and vulnerability severity. We recommend that you scan your cluster on a regular basis to ensure cluster security.
      *
      * @return DescribeClusterVulsResponse
      */
@@ -8606,7 +8727,7 @@ export default class Client extends OpenApi {
      */
     describeNodePoolVuls(clusterId: string, nodepoolId: string, request: DescribeNodePoolVulsRequest): Promise<DescribeNodePoolVulsResponse>;
     /**
-     * @summary You can call the DescribePolicies operation to query a list of policies.
+     * @summary Queries the policies for a Container Service for Kubernetes (ACK) cluster. Container security policies for ACK clusters offer a variety of built-in policies, including cis-k8s, infra, k8s-general, and PodSecurityPolicy. You can use these policies to ensure the security of containers running in a production environment.
      *
      * @param headers map
      * @param runtime runtime options for this request RuntimeOptions
@@ -8616,7 +8737,7 @@ export default class Client extends OpenApi {
         [key: string]: string;
     }, runtime: $Util.RuntimeOptions): Promise<DescribePoliciesResponse>;
     /**
-     * @summary You can call the DescribePolicies operation to query a list of policies.
+     * @summary Queries the policies for a Container Service for Kubernetes (ACK) cluster. Container security policies for ACK clusters offer a variety of built-in policies, including cis-k8s, infra, k8s-general, and PodSecurityPolicy. You can use these policies to ensure the security of containers running in a production environment.
      *
      * @return DescribePoliciesResponse
      */
@@ -8638,7 +8759,7 @@ export default class Client extends OpenApi {
      */
     describePolicyDetails(policyName: string): Promise<DescribePolicyDetailsResponse>;
     /**
-     * @summary You can call the DescribePolicyGovernanceInCluster operation to query information about policies in a Container Service for Kubernetes (ACK) cluster.
+     * @summary Queries the details of policies for a Container Service for Kubernetes (ACK) cluster. For example, you can query the number of multi-level policies that are enabled for the cluster, audit logs of the policies, and denying and alerting information. Container security policies for ACK clusters offer a variety of built-in policies, such as cis-k8s, infra, k8s-general, and PodSecurityPolicy. You can use these policies to ensure the security of containers running in a production environment.
      *
      * @param headers map
      * @param runtime runtime options for this request RuntimeOptions
@@ -8648,7 +8769,7 @@ export default class Client extends OpenApi {
         [key: string]: string;
     }, runtime: $Util.RuntimeOptions): Promise<DescribePolicyGovernanceInClusterResponse>;
     /**
-     * @summary You can call the DescribePolicyGovernanceInCluster operation to query information about policies in a Container Service for Kubernetes (ACK) cluster.
+     * @summary Queries the details of policies for a Container Service for Kubernetes (ACK) cluster. For example, you can query the number of multi-level policies that are enabled for the cluster, audit logs of the policies, and denying and alerting information. Container security policies for ACK clusters offer a variety of built-in policies, such as cis-k8s, infra, k8s-general, and PodSecurityPolicy. You can use these policies to ensure the security of containers running in a production environment.
      *
      * @return DescribePolicyGovernanceInClusterResponse
      */
@@ -8688,7 +8809,25 @@ export default class Client extends OpenApi {
      */
     describePolicyInstancesStatus(clusterId: string): Promise<DescribePolicyInstancesStatusResponse>;
     /**
-     * @summary You can use an Alibaba Cloud account to call the DescribeSubaccountK8sClusterUserConfig operation to obtain the cluster kubeconfig file of a RAM user or RAM role.
+     * @summary 修改资源删除保护配置
+     *
+     * @param request DescribeResourcesDeleteProtectionRequest
+     * @param headers map
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return DescribeResourcesDeleteProtectionResponse
+     */
+    describeResourcesDeleteProtectionWithOptions(ClusterId: string, ResourceType: string, request: DescribeResourcesDeleteProtectionRequest, headers: {
+        [key: string]: string;
+    }, runtime: $Util.RuntimeOptions): Promise<DescribeResourcesDeleteProtectionResponse>;
+    /**
+     * @summary 修改资源删除保护配置
+     *
+     * @param request DescribeResourcesDeleteProtectionRequest
+     * @return DescribeResourcesDeleteProtectionResponse
+     */
+    describeResourcesDeleteProtection(ClusterId: string, ResourceType: string, request: DescribeResourcesDeleteProtectionRequest): Promise<DescribeResourcesDeleteProtectionResponse>;
+    /**
+     * @summary Queries or issues the kubeconfig credentials of a Resource Access Management (RAM) user or RAM role of the account. If you are the permission manager of a Container Service for Kubernetes (ACK) cluster, you can issue the kubeconfig credentials to a specific RAM user or RAM role of the account by using the Alibaba Cloud account. The kubeconfig credentials, which are used to connect to the ACK cluster, contain the identity information about the RAM user or RAM role.
      *
      * @description **
      * ****Only Alibaba Cloud accounts can call this API operation.
@@ -8702,7 +8841,7 @@ export default class Client extends OpenApi {
         [key: string]: string;
     }, runtime: $Util.RuntimeOptions): Promise<DescribeSubaccountK8sClusterUserConfigResponse>;
     /**
-     * @summary You can use an Alibaba Cloud account to call the DescribeSubaccountK8sClusterUserConfig operation to obtain the cluster kubeconfig file of a RAM user or RAM role.
+     * @summary Queries or issues the kubeconfig credentials of a Resource Access Management (RAM) user or RAM role of the account. If you are the permission manager of a Container Service for Kubernetes (ACK) cluster, you can issue the kubeconfig credentials to a specific RAM user or RAM role of the account by using the Alibaba Cloud account. The kubeconfig credentials, which are used to connect to the ACK cluster, contain the identity information about the RAM user or RAM role.
      *
      * @description **
      * ****Only Alibaba Cloud accounts can call this API operation.
@@ -8830,6 +8969,8 @@ export default class Client extends OpenApi {
      */
     describeUserQuota(): Promise<DescribeUserQuotaResponse>;
     /**
+     * @deprecated OpenAPI DescribeWorkflows is deprecated
+     *
      * @summary You can call the DescribeWorkflows operation to query all workflows.
      *
      * @param headers map
@@ -8840,6 +8981,8 @@ export default class Client extends OpenApi {
         [key: string]: string;
     }, runtime: $Util.RuntimeOptions): Promise<DescribeWorkflowsResponse>;
     /**
+     * @deprecated OpenAPI DescribeWorkflows is deprecated
+     *
      * @summary You can call the DescribeWorkflows operation to query all workflows.
      *
      * @return DescribeWorkflowsResponse
@@ -8990,12 +9133,12 @@ export default class Client extends OpenApi {
      */
     getUpgradeStatus(ClusterId: string): Promise<GetUpgradeStatusResponse>;
     /**
-     * @summary You can call the GrantPermissions operation to grant a Resource Access Management (RAM) user the permissions to manage Container Service for Kubernetes (ACK) clusters.
+     * @summary Updates the role-based access control (RBAC) permissions of a Resource Access Management (RAM) user or RAM role. By default, you do not have the RBAC permissions on a Container Service for Kubernetes (ACK) cluster if you are not the cluster owner or you are not using an Alibaba Cloud account. You can call this operation to specify the resources that can be accessed, permission scope, and predefined roles. This helps you better manage the access control on resources in ACK clusters.
      *
-     * @description ****
-     * *   Make sure that you have granted the RAM user at least read-only permissions on the desired ACK clusters in the RAM console. Otherwise, the `ErrorRamPolicyConfig` error code is returned. For more information about how to authorize a RAM user by attaching RAM policies, see [Create a custom RAM policy](https://help.aliyun.com/document_detail/86485.html).
-     * *   If you use a RAM user to call this API operation, make sure that the RAM user is authorized to modify the permissions of other RAM users on the desired ACK clusters. Otherwise, the `StatusForbidden` or `ForbiddenGrantPermissions` error code is returned. For more information, see [Use a RAM user to grant RBAC permissions to other RAM users](https://help.aliyun.com/document_detail/119035.html).
-     * *   This operation overwrites the permissions that have been granted to the specified RAM user. When you call this operation, make sure that the required permissions are included.
+     * @description **Precautions**:
+     * *   Make sure that you have attached a RAM policy that has at least the read-only permissions on the cluster to the RAM user or RAM role in the RAM console. Otherwise, the `ErrorRamPolicyConfig` error code is returned when you call the operation. For more information about how to authorize a RAM user by attaching RAM policies, see [Create a custom RAM policy](https://help.aliyun.com/document_detail/86485.html).
+     * *   If you use a RAM user to call the operation, make sure that the RAM user has the permissions to modify the permissions of other RAM users or RAM roles. Otherwise, the `StatusForbidden` or `ForbiddenGrantPermissions` error code is returned when you call the operation. For more information, see [Use a RAM user to grant RBAC permissions to other RAM users](https://help.aliyun.com/document_detail/119035.html).
+     * *   If you update full permissions, the existing permissions of the RAM user or RAM role on the cluster are overwritten. You must specify all the permissions that you want to grant to the RAM user or RAM role in the request parameters when you call the operation.
      *
      * @param request GrantPermissionsRequest
      * @param headers map
@@ -9006,12 +9149,12 @@ export default class Client extends OpenApi {
         [key: string]: string;
     }, runtime: $Util.RuntimeOptions): Promise<GrantPermissionsResponse>;
     /**
-     * @summary You can call the GrantPermissions operation to grant a Resource Access Management (RAM) user the permissions to manage Container Service for Kubernetes (ACK) clusters.
+     * @summary Updates the role-based access control (RBAC) permissions of a Resource Access Management (RAM) user or RAM role. By default, you do not have the RBAC permissions on a Container Service for Kubernetes (ACK) cluster if you are not the cluster owner or you are not using an Alibaba Cloud account. You can call this operation to specify the resources that can be accessed, permission scope, and predefined roles. This helps you better manage the access control on resources in ACK clusters.
      *
-     * @description ****
-     * *   Make sure that you have granted the RAM user at least read-only permissions on the desired ACK clusters in the RAM console. Otherwise, the `ErrorRamPolicyConfig` error code is returned. For more information about how to authorize a RAM user by attaching RAM policies, see [Create a custom RAM policy](https://help.aliyun.com/document_detail/86485.html).
-     * *   If you use a RAM user to call this API operation, make sure that the RAM user is authorized to modify the permissions of other RAM users on the desired ACK clusters. Otherwise, the `StatusForbidden` or `ForbiddenGrantPermissions` error code is returned. For more information, see [Use a RAM user to grant RBAC permissions to other RAM users](https://help.aliyun.com/document_detail/119035.html).
-     * *   This operation overwrites the permissions that have been granted to the specified RAM user. When you call this operation, make sure that the required permissions are included.
+     * @description **Precautions**:
+     * *   Make sure that you have attached a RAM policy that has at least the read-only permissions on the cluster to the RAM user or RAM role in the RAM console. Otherwise, the `ErrorRamPolicyConfig` error code is returned when you call the operation. For more information about how to authorize a RAM user by attaching RAM policies, see [Create a custom RAM policy](https://help.aliyun.com/document_detail/86485.html).
+     * *   If you use a RAM user to call the operation, make sure that the RAM user has the permissions to modify the permissions of other RAM users or RAM roles. Otherwise, the `StatusForbidden` or `ForbiddenGrantPermissions` error code is returned when you call the operation. For more information, see [Use a RAM user to grant RBAC permissions to other RAM users](https://help.aliyun.com/document_detail/119035.html).
+     * *   If you update full permissions, the existing permissions of the RAM user or RAM role on the cluster are overwritten. You must specify all the permissions that you want to grant to the RAM user or RAM role in the request parameters when you call the operation.
      *
      * @param request GrantPermissionsRequest
      * @return GrantPermissionsResponse
@@ -9264,7 +9407,7 @@ export default class Client extends OpenApi {
      */
     modifyNodePoolNodeConfig(ClusterId: string, NodepoolId: string, request: ModifyNodePoolNodeConfigRequest): Promise<ModifyNodePoolNodeConfigResponse>;
     /**
-     * @summary You can call the ModifyPolicyInstance operation to update policy instances in a Container Service for Kubernetes (ACK) cluster.
+     * @summary Updates a policy in a specific Container Service for Kubernetes (ACK) cluster. You can modify the action of the policy such as alerting or denying and namespaces to which the policy applies.
      *
      * @param request ModifyPolicyInstanceRequest
      * @param headers map
@@ -9275,7 +9418,7 @@ export default class Client extends OpenApi {
         [key: string]: string;
     }, runtime: $Util.RuntimeOptions): Promise<ModifyPolicyInstanceResponse>;
     /**
-     * @summary You can call the ModifyPolicyInstance operation to update policy instances in a Container Service for Kubernetes (ACK) cluster.
+     * @summary Updates a policy in a specific Container Service for Kubernetes (ACK) cluster. You can modify the action of the policy such as alerting or denying and namespaces to which the policy applies.
      *
      * @param request ModifyPolicyInstanceRequest
      * @return ModifyPolicyInstanceResponse
@@ -9418,6 +9561,8 @@ export default class Client extends OpenApi {
      */
     removeNodePoolNodes(ClusterId: string, NodepoolId: string, request: RemoveNodePoolNodesRequest): Promise<RemoveNodePoolNodesResponse>;
     /**
+     * @deprecated OpenAPI RemoveWorkflow is deprecated
+     *
      * @summary You can call the RemoveWorkflow operation to delete a workflow.
      *
      * @param headers map
@@ -9428,6 +9573,8 @@ export default class Client extends OpenApi {
         [key: string]: string;
     }, runtime: $Util.RuntimeOptions): Promise<RemoveWorkflowResponse>;
     /**
+     * @deprecated OpenAPI RemoveWorkflow is deprecated
+     *
      * @summary You can call the RemoveWorkflow operation to delete a workflow.
      *
      * @return RemoveWorkflowResponse
@@ -9504,7 +9651,7 @@ export default class Client extends OpenApi {
      */
     resumeUpgradeCluster(ClusterId: string): Promise<ResumeUpgradeClusterResponse>;
     /**
-     * @summary You can call the RunClusterCheck operation to initiate cluster checks, such as cluster update prechecks.
+     * @summary Initiates cluster checks such as cluster update checks.
      *
      * @param request RunClusterCheckRequest
      * @param headers map
@@ -9515,7 +9662,7 @@ export default class Client extends OpenApi {
         [key: string]: string;
     }, runtime: $Util.RuntimeOptions): Promise<RunClusterCheckResponse>;
     /**
-     * @summary You can call the RunClusterCheck operation to initiate cluster checks, such as cluster update prechecks.
+     * @summary Initiates cluster checks such as cluster update checks.
      *
      * @param request RunClusterCheckRequest
      * @return RunClusterCheckResponse
@@ -9616,6 +9763,8 @@ export default class Client extends OpenApi {
      */
     startAlert(ClusterId: string, request: StartAlertRequest): Promise<StartAlertResponse>;
     /**
+     * @deprecated OpenAPI StartWorkflow is deprecated
+     *
      * @summary You can call the StartWorkflow operation to create a workflow.
      *
      * @param request StartWorkflowRequest
@@ -9627,6 +9776,8 @@ export default class Client extends OpenApi {
         [key: string]: string;
     }, runtime: $Util.RuntimeOptions): Promise<StartWorkflowResponse>;
     /**
+     * @deprecated OpenAPI StartWorkflow is deprecated
+     *
      * @summary You can call the StartWorkflow operation to create a workflow.
      *
      * @param request StartWorkflowRequest
@@ -9686,7 +9837,7 @@ export default class Client extends OpenApi {
      */
     tagResources(request: TagResourcesRequest): Promise<TagResourcesResponse>;
     /**
-     * @summary You can call the UnInstallClusterAddons operation to uninstall the components in a cluster by component names.
+     * @summary Uninstalls components that you no longer need from a cluster. You must specify the name of the components and specify whether to release associated Alibaba Cloud resources from the cluster.
      *
      * @param request UnInstallClusterAddonsRequest
      * @param headers map
@@ -9697,7 +9848,7 @@ export default class Client extends OpenApi {
         [key: string]: string;
     }, runtime: $Util.RuntimeOptions): Promise<UnInstallClusterAddonsResponse>;
     /**
-     * @summary You can call the UnInstallClusterAddons operation to uninstall the components in a cluster by component names.
+     * @summary Uninstalls components that you no longer need from a cluster. You must specify the name of the components and specify whether to release associated Alibaba Cloud resources from the cluster.
      *
      * @param request UnInstallClusterAddonsRequest
      * @return UnInstallClusterAddonsResponse
@@ -9776,7 +9927,25 @@ export default class Client extends OpenApi {
      */
     updateK8sClusterUserConfigExpire(ClusterId: string, request: UpdateK8sClusterUserConfigExpireRequest): Promise<UpdateK8sClusterUserConfigExpireResponse>;
     /**
-     * @summary You can call the UpdateTemplate operation to update an orchestration template by template ID.
+     * @summary 修改资源删除保护配置
+     *
+     * @param request UpdateResourcesDeleteProtectionRequest
+     * @param headers map
+     * @param runtime runtime options for this request RuntimeOptions
+     * @return UpdateResourcesDeleteProtectionResponse
+     */
+    updateResourcesDeleteProtectionWithOptions(ClusterId: string, request: UpdateResourcesDeleteProtectionRequest, headers: {
+        [key: string]: string;
+    }, runtime: $Util.RuntimeOptions): Promise<UpdateResourcesDeleteProtectionResponse>;
+    /**
+     * @summary 修改资源删除保护配置
+     *
+     * @param request UpdateResourcesDeleteProtectionRequest
+     * @return UpdateResourcesDeleteProtectionResponse
+     */
+    updateResourcesDeleteProtection(ClusterId: string, request: UpdateResourcesDeleteProtectionRequest): Promise<UpdateResourcesDeleteProtectionResponse>;
+    /**
+     * @summary Updates the configurations of an orchestration template. An orchestration template defines and describes a group of Container Service for Kubernetes (ACK) resources. An orchestration template describes the configurations of an application or how an application runs in a declarative manner.
      *
      * @param request UpdateTemplateRequest
      * @param headers map
@@ -9787,14 +9956,17 @@ export default class Client extends OpenApi {
         [key: string]: string;
     }, runtime: $Util.RuntimeOptions): Promise<UpdateTemplateResponse>;
     /**
-     * @summary You can call the UpdateTemplate operation to update an orchestration template by template ID.
+     * @summary Updates the configurations of an orchestration template. An orchestration template defines and describes a group of Container Service for Kubernetes (ACK) resources. An orchestration template describes the configurations of an application or how an application runs in a declarative manner.
      *
      * @param request UpdateTemplateRequest
      * @return UpdateTemplateResponse
      */
     updateTemplate(TemplateId: string, request: UpdateTemplateRequest): Promise<UpdateTemplateResponse>;
     /**
-     * @summary 更新指定RAM用户/角色的RBAC权限
+     * @summary Updates the role-based access control (RBAC) permissions of a Resource Access Management (RAM) user or RAM role. By default, you do not have the RBAC permissions on a Container Service for Kubernetes (ACK) cluster if you are not the cluster owner or you are not using an Alibaba Cloud account. You can call this operation to specify the resources that can be accessed, permission scope, and predefined roles. This helps you better manage the access control on resources in ACK clusters.
+     *
+     * @description **Precautions**:
+     * *   You can update the permissions of a RAM user or RAM role on a cluster by using full update or incremental update. If you use full update, the existing permissions of the RAM user or RAM role on the cluster are overwritten. You must specify all the permissions that you want to grant to the RAM user or RAM role in the request parameters when you call the operation. If you use incremental update, you can grant permissions to or revoke permissions from the RAM user or RAM role on the cluster. In this case, only the permissions that you specify in the request parameters when you call the operation are granted or revoked, other permissions of the RAM user or RAM role on the cluster are not affected.
      *
      * @param request UpdateUserPermissionsRequest
      * @param headers map
@@ -9805,7 +9977,10 @@ export default class Client extends OpenApi {
         [key: string]: string;
     }, runtime: $Util.RuntimeOptions): Promise<UpdateUserPermissionsResponse>;
     /**
-     * @summary 更新指定RAM用户/角色的RBAC权限
+     * @summary Updates the role-based access control (RBAC) permissions of a Resource Access Management (RAM) user or RAM role. By default, you do not have the RBAC permissions on a Container Service for Kubernetes (ACK) cluster if you are not the cluster owner or you are not using an Alibaba Cloud account. You can call this operation to specify the resources that can be accessed, permission scope, and predefined roles. This helps you better manage the access control on resources in ACK clusters.
+     *
+     * @description **Precautions**:
+     * *   You can update the permissions of a RAM user or RAM role on a cluster by using full update or incremental update. If you use full update, the existing permissions of the RAM user or RAM role on the cluster are overwritten. You must specify all the permissions that you want to grant to the RAM user or RAM role in the request parameters when you call the operation. If you use incremental update, you can grant permissions to or revoke permissions from the RAM user or RAM role on the cluster. In this case, only the permissions that you specify in the request parameters when you call the operation are granted or revoked, other permissions of the RAM user or RAM role on the cluster are not affected.
      *
      * @param request UpdateUserPermissionsRequest
      * @return UpdateUserPermissionsResponse