@alicloud/cs20151215 4.2.0 → 4.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/src/client.ts CHANGED
@@ -94,6 +94,43 @@ export class DataDisk extends $tea.Model {
94
94
  }
95
95
  }
96
96
 
97
+ export class InstancePatterns extends $tea.Model {
98
+ architectures?: string[];
99
+ burstPerformanceOption?: string;
100
+ core?: number;
101
+ excludedInstanceTypes?: string[];
102
+ instanceFamilyLevel?: string;
103
+ maxPrice?: number;
104
+ memory?: number;
105
+ static names(): { [key: string]: string } {
106
+ return {
107
+ architectures: 'architectures',
108
+ burstPerformanceOption: 'burst_performance_option',
109
+ core: 'core',
110
+ excludedInstanceTypes: 'excluded_instance_types',
111
+ instanceFamilyLevel: 'instance_family_level',
112
+ maxPrice: 'max_price',
113
+ memory: 'memory',
114
+ };
115
+ }
116
+
117
+ static types(): { [key: string]: any } {
118
+ return {
119
+ architectures: { 'type': 'array', 'itemType': 'string' },
120
+ burstPerformanceOption: 'string',
121
+ core: 'number',
122
+ excludedInstanceTypes: { 'type': 'array', 'itemType': 'string' },
123
+ instanceFamilyLevel: 'string',
124
+ maxPrice: 'number',
125
+ memory: 'number',
126
+ };
127
+ }
128
+
129
+ constructor(map?: { [key: string]: any }) {
130
+ super(map);
131
+ }
132
+ }
133
+
97
134
  export class KubeletConfig extends $tea.Model {
98
135
  allowedUnsafeSysctls?: string[];
99
136
  containerLogMaxFiles?: number;
@@ -4502,6 +4539,53 @@ export class DescribePolicyInstancesStatusResponse extends $tea.Model {
4502
4539
  }
4503
4540
  }
4504
4541
 
4542
+ export class DescribeResourcesDeleteProtectionRequest extends $tea.Model {
4543
+ namespace?: string;
4544
+ resources?: string;
4545
+ static names(): { [key: string]: string } {
4546
+ return {
4547
+ namespace: 'namespace',
4548
+ resources: 'resources',
4549
+ };
4550
+ }
4551
+
4552
+ static types(): { [key: string]: any } {
4553
+ return {
4554
+ namespace: 'string',
4555
+ resources: 'string',
4556
+ };
4557
+ }
4558
+
4559
+ constructor(map?: { [key: string]: any }) {
4560
+ super(map);
4561
+ }
4562
+ }
4563
+
4564
+ export class DescribeResourcesDeleteProtectionResponse extends $tea.Model {
4565
+ headers?: { [key: string]: string };
4566
+ statusCode?: number;
4567
+ body?: DescribeResourcesDeleteProtectionResponseBody[];
4568
+ static names(): { [key: string]: string } {
4569
+ return {
4570
+ headers: 'headers',
4571
+ statusCode: 'statusCode',
4572
+ body: 'body',
4573
+ };
4574
+ }
4575
+
4576
+ static types(): { [key: string]: any } {
4577
+ return {
4578
+ headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
4579
+ statusCode: 'number',
4580
+ body: { 'type': 'array', 'itemType': DescribeResourcesDeleteProtectionResponseBody },
4581
+ };
4582
+ }
4583
+
4584
+ constructor(map?: { [key: string]: any }) {
4585
+ super(map);
4586
+ }
4587
+ }
4588
+
4505
4589
  export class DescribeSubaccountK8sClusterUserConfigRequest extends $tea.Model {
4506
4590
  privateIpAddress?: boolean;
4507
4591
  temporaryDurationMinutes?: number;
@@ -8000,6 +8084,90 @@ export class UpdateK8sClusterUserConfigExpireResponse extends $tea.Model {
8000
8084
  }
8001
8085
  }
8002
8086
 
8087
+ export class UpdateResourcesDeleteProtectionRequest extends $tea.Model {
8088
+ enable?: boolean;
8089
+ namespace?: string;
8090
+ resourceType?: string;
8091
+ resources?: string[];
8092
+ static names(): { [key: string]: string } {
8093
+ return {
8094
+ enable: 'enable',
8095
+ namespace: 'namespace',
8096
+ resourceType: 'resource_type',
8097
+ resources: 'resources',
8098
+ };
8099
+ }
8100
+
8101
+ static types(): { [key: string]: any } {
8102
+ return {
8103
+ enable: 'boolean',
8104
+ namespace: 'string',
8105
+ resourceType: 'string',
8106
+ resources: { 'type': 'array', 'itemType': 'string' },
8107
+ };
8108
+ }
8109
+
8110
+ constructor(map?: { [key: string]: any }) {
8111
+ super(map);
8112
+ }
8113
+ }
8114
+
8115
+ export class UpdateResourcesDeleteProtectionResponseBody extends $tea.Model {
8116
+ namespace?: string;
8117
+ protection?: string;
8118
+ requestId?: string;
8119
+ resourceType?: string;
8120
+ resources?: string[];
8121
+ static names(): { [key: string]: string } {
8122
+ return {
8123
+ namespace: 'namespace',
8124
+ protection: 'protection',
8125
+ requestId: 'requestId',
8126
+ resourceType: 'resource_type',
8127
+ resources: 'resources',
8128
+ };
8129
+ }
8130
+
8131
+ static types(): { [key: string]: any } {
8132
+ return {
8133
+ namespace: 'string',
8134
+ protection: 'string',
8135
+ requestId: 'string',
8136
+ resourceType: 'string',
8137
+ resources: { 'type': 'array', 'itemType': 'string' },
8138
+ };
8139
+ }
8140
+
8141
+ constructor(map?: { [key: string]: any }) {
8142
+ super(map);
8143
+ }
8144
+ }
8145
+
8146
+ export class UpdateResourcesDeleteProtectionResponse extends $tea.Model {
8147
+ headers?: { [key: string]: string };
8148
+ statusCode?: number;
8149
+ body?: UpdateResourcesDeleteProtectionResponseBody;
8150
+ static names(): { [key: string]: string } {
8151
+ return {
8152
+ headers: 'headers',
8153
+ statusCode: 'statusCode',
8154
+ body: 'body',
8155
+ };
8156
+ }
8157
+
8158
+ static types(): { [key: string]: any } {
8159
+ return {
8160
+ headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
8161
+ statusCode: 'number',
8162
+ body: UpdateResourcesDeleteProtectionResponseBody,
8163
+ };
8164
+ }
8165
+
8166
+ constructor(map?: { [key: string]: any }) {
8167
+ super(map);
8168
+ }
8169
+ }
8170
+
8003
8171
  export class UpdateTemplateRequest extends $tea.Model {
8004
8172
  description?: string;
8005
8173
  name?: string;
@@ -9267,6 +9435,7 @@ export class CreateClusterNodePoolRequestScalingGroup extends $tea.Model {
9267
9435
  imageId?: string;
9268
9436
  imageType?: string;
9269
9437
  instanceChargeType?: string;
9438
+ instancePatterns?: InstancePatterns[];
9270
9439
  instanceTypes?: string[];
9271
9440
  internetChargeType?: string;
9272
9441
  internetMaxBandwidthOut?: number;
@@ -9313,6 +9482,7 @@ export class CreateClusterNodePoolRequestScalingGroup extends $tea.Model {
9313
9482
  imageId: 'image_id',
9314
9483
  imageType: 'image_type',
9315
9484
  instanceChargeType: 'instance_charge_type',
9485
+ instancePatterns: 'instance_patterns',
9316
9486
  instanceTypes: 'instance_types',
9317
9487
  internetChargeType: 'internet_charge_type',
9318
9488
  internetMaxBandwidthOut: 'internet_max_bandwidth_out',
@@ -9362,6 +9532,7 @@ export class CreateClusterNodePoolRequestScalingGroup extends $tea.Model {
9362
9532
  imageId: 'string',
9363
9533
  imageType: 'string',
9364
9534
  instanceChargeType: 'string',
9535
+ instancePatterns: { 'type': 'array', 'itemType': InstancePatterns },
9365
9536
  instanceTypes: { 'type': 'array', 'itemType': 'string' },
9366
9537
  internetChargeType: 'string',
9367
9538
  internetMaxBandwidthOut: 'number',
@@ -10051,6 +10222,7 @@ export class DescribeClusterNodePoolDetailResponseBodyScalingGroup extends $tea.
10051
10222
  imageId?: string;
10052
10223
  imageType?: string;
10053
10224
  instanceChargeType?: string;
10225
+ instancePatterns?: InstancePatterns[];
10054
10226
  instanceTypes?: string[];
10055
10227
  internetChargeType?: string;
10056
10228
  internetMaxBandwidthOut?: number;
@@ -10099,6 +10271,7 @@ export class DescribeClusterNodePoolDetailResponseBodyScalingGroup extends $tea.
10099
10271
  imageId: 'image_id',
10100
10272
  imageType: 'image_type',
10101
10273
  instanceChargeType: 'instance_charge_type',
10274
+ instancePatterns: 'instance_patterns',
10102
10275
  instanceTypes: 'instance_types',
10103
10276
  internetChargeType: 'internet_charge_type',
10104
10277
  internetMaxBandwidthOut: 'internet_max_bandwidth_out',
@@ -10150,6 +10323,7 @@ export class DescribeClusterNodePoolDetailResponseBodyScalingGroup extends $tea.
10150
10323
  imageId: 'string',
10151
10324
  imageType: 'string',
10152
10325
  instanceChargeType: 'string',
10326
+ instancePatterns: { 'type': 'array', 'itemType': InstancePatterns },
10153
10327
  instanceTypes: { 'type': 'array', 'itemType': 'string' },
10154
10328
  internetChargeType: 'string',
10155
10329
  internetMaxBandwidthOut: 'number',
@@ -10606,6 +10780,7 @@ export class DescribeClusterNodePoolsResponseBodyNodepoolsScalingGroup extends $
10606
10780
  imageId?: string;
10607
10781
  imageType?: string;
10608
10782
  instanceChargeType?: string;
10783
+ instancePatterns?: InstancePatterns[];
10609
10784
  instanceTypes?: string[];
10610
10785
  internetChargeType?: string;
10611
10786
  internetMaxBandwidthOut?: number;
@@ -10654,6 +10829,7 @@ export class DescribeClusterNodePoolsResponseBodyNodepoolsScalingGroup extends $
10654
10829
  imageId: 'image_id',
10655
10830
  imageType: 'image_type',
10656
10831
  instanceChargeType: 'instance_charge_type',
10832
+ instancePatterns: 'instance_patterns',
10657
10833
  instanceTypes: 'instance_types',
10658
10834
  internetChargeType: 'internet_charge_type',
10659
10835
  internetMaxBandwidthOut: 'internet_max_bandwidth_out',
@@ -10705,6 +10881,7 @@ export class DescribeClusterNodePoolsResponseBodyNodepoolsScalingGroup extends $
10705
10881
  imageId: 'string',
10706
10882
  imageType: 'string',
10707
10883
  instanceChargeType: 'string',
10884
+ instancePatterns: { 'type': 'array', 'itemType': InstancePatterns },
10708
10885
  instanceTypes: { 'type': 'array', 'itemType': 'string' },
10709
10886
  internetChargeType: 'string',
10710
10887
  internetMaxBandwidthOut: 'number',
@@ -12095,6 +12272,34 @@ export class DescribePolicyInstancesStatusResponseBodyPolicyInstances extends $t
12095
12272
  }
12096
12273
  }
12097
12274
 
12275
+ export class DescribeResourcesDeleteProtectionResponseBody extends $tea.Model {
12276
+ name?: string;
12277
+ namespace?: string;
12278
+ resource?: string;
12279
+ protection?: boolean;
12280
+ static names(): { [key: string]: string } {
12281
+ return {
12282
+ name: 'name',
12283
+ namespace: 'namespace',
12284
+ resource: 'resource',
12285
+ protection: 'protection',
12286
+ };
12287
+ }
12288
+
12289
+ static types(): { [key: string]: any } {
12290
+ return {
12291
+ name: 'string',
12292
+ namespace: 'string',
12293
+ resource: 'string',
12294
+ protection: 'boolean',
12295
+ };
12296
+ }
12297
+
12298
+ constructor(map?: { [key: string]: any }) {
12299
+ super(map);
12300
+ }
12301
+ }
12302
+
12098
12303
  export class DescribeTaskInfoResponseBodyError extends $tea.Model {
12099
12304
  code?: string;
12100
12305
  message?: string;
@@ -13273,6 +13478,7 @@ export class ModifyClusterNodePoolRequestScalingGroup extends $tea.Model {
13273
13478
  imageId?: string;
13274
13479
  imageType?: string;
13275
13480
  instanceChargeType?: string;
13481
+ instancePatterns?: InstancePatterns[];
13276
13482
  instanceTypes?: string[];
13277
13483
  internetChargeType?: string;
13278
13484
  internetMaxBandwidthOut?: number;
@@ -13312,6 +13518,7 @@ export class ModifyClusterNodePoolRequestScalingGroup extends $tea.Model {
13312
13518
  imageId: 'image_id',
13313
13519
  imageType: 'image_type',
13314
13520
  instanceChargeType: 'instance_charge_type',
13521
+ instancePatterns: 'instance_patterns',
13315
13522
  instanceTypes: 'instance_types',
13316
13523
  internetChargeType: 'internet_charge_type',
13317
13524
  internetMaxBandwidthOut: 'internet_max_bandwidth_out',
@@ -13354,6 +13561,7 @@ export class ModifyClusterNodePoolRequestScalingGroup extends $tea.Model {
13354
13561
  imageId: 'string',
13355
13562
  imageType: 'string',
13356
13563
  instanceChargeType: 'string',
13564
+ instancePatterns: { 'type': 'array', 'itemType': InstancePatterns },
13357
13565
  instanceTypes: { 'type': 'array', 'itemType': 'string' },
13358
13566
  internetChargeType: 'string',
13359
13567
  internetMaxBandwidthOut: 'number',
@@ -13829,7 +14037,7 @@ export default class Client extends OpenApi {
13829
14037
  }
13830
14038
 
13831
14039
  /**
13832
- * @summary You can call the AttachInstancesToNodePool operation to add existing nodes to a node pool.
14040
+ * @summary Adds existing nodes to a specific node pool. You can add existing ECS instances to a specific node pool in a Container Service for Kubernetes (ACK) cluster as worker nodes. You can also add removed worker nodes back to the node pool.
13833
14041
  *
13834
14042
  * @param request AttachInstancesToNodePoolRequest
13835
14043
  * @param headers map
@@ -13874,7 +14082,7 @@ export default class Client extends OpenApi {
13874
14082
  }
13875
14083
 
13876
14084
  /**
13877
- * @summary You can call the AttachInstancesToNodePool operation to add existing nodes to a node pool.
14085
+ * @summary Adds existing nodes to a specific node pool. You can add existing ECS instances to a specific node pool in a Container Service for Kubernetes (ACK) cluster as worker nodes. You can also add removed worker nodes back to the node pool.
13878
14086
  *
13879
14087
  * @param request AttachInstancesToNodePoolRequest
13880
14088
  * @return AttachInstancesToNodePoolResponse
@@ -13964,7 +14172,7 @@ export default class Client extends OpenApi {
13964
14172
  }
13965
14173
 
13966
14174
  /**
13967
- * @summary 取消自动运维执行计划
14175
+ * @summary You can call the CancelOperationPlan operation to cancel a pending auto O\\\\\\&M plan.
13968
14176
  *
13969
14177
  * @param headers map
13970
14178
  * @param runtime runtime options for this request RuntimeOptions
@@ -13989,7 +14197,7 @@ export default class Client extends OpenApi {
13989
14197
  }
13990
14198
 
13991
14199
  /**
13992
- * @summary 取消自动运维执行计划
14200
+ * @summary You can call the CancelOperationPlan operation to cancel a pending auto O\\\\\\&M plan.
13993
14201
  *
13994
14202
  * @return CancelOperationPlanResponse
13995
14203
  */
@@ -14000,7 +14208,7 @@ export default class Client extends OpenApi {
14000
14208
  }
14001
14209
 
14002
14210
  /**
14003
- * @summary You can call the CancelTask operation to cancel a task.
14211
+ * @summary Cancels the execution of a cluster task.
14004
14212
  *
14005
14213
  * @param headers map
14006
14214
  * @param runtime runtime options for this request RuntimeOptions
@@ -14025,7 +14233,7 @@ export default class Client extends OpenApi {
14025
14233
  }
14026
14234
 
14027
14235
  /**
14028
- * @summary You can call the CancelTask operation to cancel a task.
14236
+ * @summary Cancels the execution of a cluster task.
14029
14237
  *
14030
14238
  * @return CancelTaskResponse
14031
14239
  */
@@ -14036,6 +14244,8 @@ export default class Client extends OpenApi {
14036
14244
  }
14037
14245
 
14038
14246
  /**
14247
+ * @deprecated OpenAPI CancelWorkflow is deprecated
14248
+ *
14039
14249
  * @summary You can call the CancelWorkflow operation to cancel an ongoing workflow.
14040
14250
  *
14041
14251
  * @param request CancelWorkflowRequest
@@ -14043,6 +14253,7 @@ export default class Client extends OpenApi {
14043
14253
  * @param runtime runtime options for this request RuntimeOptions
14044
14254
  * @return CancelWorkflowResponse
14045
14255
  */
14256
+ // Deprecated
14046
14257
  async cancelWorkflowWithOptions(workflowName: string, request: CancelWorkflowRequest, headers: {[key: string ]: string}, runtime: $Util.RuntimeOptions): Promise<CancelWorkflowResponse> {
14047
14258
  Util.validateModel(request);
14048
14259
  let body : {[key: string ]: any} = { };
@@ -14069,11 +14280,14 @@ export default class Client extends OpenApi {
14069
14280
  }
14070
14281
 
14071
14282
  /**
14283
+ * @deprecated OpenAPI CancelWorkflow is deprecated
14284
+ *
14072
14285
  * @summary You can call the CancelWorkflow operation to cancel an ongoing workflow.
14073
14286
  *
14074
14287
  * @param request CancelWorkflowRequest
14075
14288
  * @return CancelWorkflowResponse
14076
14289
  */
14290
+ // Deprecated
14077
14291
  async cancelWorkflow(workflowName: string, request: CancelWorkflowRequest): Promise<CancelWorkflowResponse> {
14078
14292
  let runtime = new $Util.RuntimeOptions({ });
14079
14293
  let headers : {[key: string ]: string} = { };
@@ -15136,7 +15350,7 @@ export default class Client extends OpenApi {
15136
15350
  }
15137
15351
 
15138
15352
  /**
15139
- * @summary You can call the DeleteCluster operation to delete a cluster by cluster ID and release all nodes in the cluster.
15353
+ * @summary You can call the DeleteCluster operation to delete a cluster and specify whether to delete or retain the relevant cluster resources. Before you delete a cluster, you must manually delete workloads in the cluster, such as Deployments, StatefulSets, Jobs, and CronJobs. Otherwise, you may fail to delete the cluster.
15140
15354
  *
15141
15355
  * @param tmpReq DeleteClusterRequest
15142
15356
  * @param headers map
@@ -15191,7 +15405,7 @@ export default class Client extends OpenApi {
15191
15405
  }
15192
15406
 
15193
15407
  /**
15194
- * @summary You can call the DeleteCluster operation to delete a cluster by cluster ID and release all nodes in the cluster.
15408
+ * @summary You can call the DeleteCluster operation to delete a cluster and specify whether to delete or retain the relevant cluster resources. Before you delete a cluster, you must manually delete workloads in the cluster, such as Deployments, StatefulSets, Jobs, and CronJobs. Otherwise, you may fail to delete the cluster.
15195
15409
  *
15196
15410
  * @param request DeleteClusterRequest
15197
15411
  * @return DeleteClusterResponse
@@ -15433,7 +15647,7 @@ export default class Client extends OpenApi {
15433
15647
  }
15434
15648
 
15435
15649
  /**
15436
- * @summary You can call the DeleteTemplate operation to delete an orchestration template by template ID.
15650
+ * @summary Deletes the orchestration templates that you no longer need.
15437
15651
  *
15438
15652
  * @param headers map
15439
15653
  * @param runtime runtime options for this request RuntimeOptions
@@ -15458,7 +15672,7 @@ export default class Client extends OpenApi {
15458
15672
  }
15459
15673
 
15460
15674
  /**
15461
- * @summary You can call the DeleteTemplate operation to delete an orchestration template by template ID.
15675
+ * @summary Deletes the orchestration templates that you no longer need.
15462
15676
  *
15463
15677
  * @return DeleteTemplateResponse
15464
15678
  */
@@ -15505,7 +15719,7 @@ export default class Client extends OpenApi {
15505
15719
  }
15506
15720
 
15507
15721
  /**
15508
- * @summary You can call the DeployPolicyInstance operation to deploy a policy instance in a cluster.
15722
+ * @summary Deploys a policy in the specified namespaces of a specific Container Service for Kubernetes (ACK) cluster. You can create and deploy a security policy by specifying the policy type, action of the policy such as alerting or denying, and namespaces to which the policy applies.
15509
15723
  *
15510
15724
  * @param request DeployPolicyInstanceRequest
15511
15725
  * @param headers map
@@ -15546,7 +15760,7 @@ export default class Client extends OpenApi {
15546
15760
  }
15547
15761
 
15548
15762
  /**
15549
- * @summary You can call the DeployPolicyInstance operation to deploy a policy instance in a cluster.
15763
+ * @summary Deploys a policy in the specified namespaces of a specific Container Service for Kubernetes (ACK) cluster. You can create and deploy a security policy by specifying the policy type, action of the policy such as alerting or denying, and namespaces to which the policy applies.
15550
15764
  *
15551
15765
  * @param request DeployPolicyInstanceRequest
15552
15766
  * @return DeployPolicyInstanceResponse
@@ -15558,12 +15772,15 @@ export default class Client extends OpenApi {
15558
15772
  }
15559
15773
 
15560
15774
  /**
15775
+ * @deprecated OpenAPI DescirbeWorkflow is deprecated
15776
+ *
15561
15777
  * @summary You can call the DescirbeWorkflow operation to query detailed information about a workflow.
15562
15778
  *
15563
15779
  * @param headers map
15564
15780
  * @param runtime runtime options for this request RuntimeOptions
15565
15781
  * @return DescirbeWorkflowResponse
15566
15782
  */
15783
+ // Deprecated
15567
15784
  async descirbeWorkflowWithOptions(workflowName: string, headers: {[key: string ]: string}, runtime: $Util.RuntimeOptions): Promise<DescirbeWorkflowResponse> {
15568
15785
  let req = new $OpenApi.OpenApiRequest({
15569
15786
  headers: headers,
@@ -15583,10 +15800,13 @@ export default class Client extends OpenApi {
15583
15800
  }
15584
15801
 
15585
15802
  /**
15803
+ * @deprecated OpenAPI DescirbeWorkflow is deprecated
15804
+ *
15586
15805
  * @summary You can call the DescirbeWorkflow operation to query detailed information about a workflow.
15587
15806
  *
15588
15807
  * @return DescirbeWorkflowResponse
15589
15808
  */
15809
+ // Deprecated
15590
15810
  async descirbeWorkflow(workflowName: string): Promise<DescirbeWorkflowResponse> {
15591
15811
  let runtime = new $Util.RuntimeOptions({ });
15592
15812
  let headers : {[key: string ]: string} = { };
@@ -16496,7 +16716,7 @@ export default class Client extends OpenApi {
16496
16716
  }
16497
16717
 
16498
16718
  /**
16499
- * @summary You can call the DescribeClusterVuls operation to query the vulnerability information of a cluster.
16719
+ * @summary Queries the security vulnerability details of a cluster by cluster ID. The details include vulnerability name, vulnerability type, and vulnerability severity. We recommend that you scan your cluster on a regular basis to ensure cluster security.
16500
16720
  *
16501
16721
  * @param headers map
16502
16722
  * @param runtime runtime options for this request RuntimeOptions
@@ -16521,7 +16741,7 @@ export default class Client extends OpenApi {
16521
16741
  }
16522
16742
 
16523
16743
  /**
16524
- * @summary You can call the DescribeClusterVuls operation to query the vulnerability information of a cluster.
16744
+ * @summary Queries the security vulnerability details of a cluster by cluster ID. The details include vulnerability name, vulnerability type, and vulnerability severity. We recommend that you scan your cluster on a regular basis to ensure cluster security.
16525
16745
  *
16526
16746
  * @return DescribeClusterVulsResponse
16527
16747
  */
@@ -17057,7 +17277,7 @@ export default class Client extends OpenApi {
17057
17277
  }
17058
17278
 
17059
17279
  /**
17060
- * @summary You can call the DescribePolicies operation to query a list of policies.
17280
+ * @summary Queries the policies for a Container Service for Kubernetes (ACK) cluster. Container security policies for ACK clusters offer a variety of built-in policies, including cis-k8s, infra, k8s-general, and PodSecurityPolicy. You can use these policies to ensure the security of containers running in a production environment.
17061
17281
  *
17062
17282
  * @param headers map
17063
17283
  * @param runtime runtime options for this request RuntimeOptions
@@ -17082,7 +17302,7 @@ export default class Client extends OpenApi {
17082
17302
  }
17083
17303
 
17084
17304
  /**
17085
- * @summary You can call the DescribePolicies operation to query a list of policies.
17305
+ * @summary Queries the policies for a Container Service for Kubernetes (ACK) cluster. Container security policies for ACK clusters offer a variety of built-in policies, including cis-k8s, infra, k8s-general, and PodSecurityPolicy. You can use these policies to ensure the security of containers running in a production environment.
17086
17306
  *
17087
17307
  * @return DescribePoliciesResponse
17088
17308
  */
@@ -17129,7 +17349,7 @@ export default class Client extends OpenApi {
17129
17349
  }
17130
17350
 
17131
17351
  /**
17132
- * @summary You can call the DescribePolicyGovernanceInCluster operation to query information about policies in a Container Service for Kubernetes (ACK) cluster.
17352
+ * @summary Queries the details of policies for a Container Service for Kubernetes (ACK) cluster. For example, you can query the number of multi-level policies that are enabled for the cluster, audit logs of the policies, and denying and alerting information. Container security policies for ACK clusters offer a variety of built-in policies, such as cis-k8s, infra, k8s-general, and PodSecurityPolicy. You can use these policies to ensure the security of containers running in a production environment.
17133
17353
  *
17134
17354
  * @param headers map
17135
17355
  * @param runtime runtime options for this request RuntimeOptions
@@ -17154,7 +17374,7 @@ export default class Client extends OpenApi {
17154
17374
  }
17155
17375
 
17156
17376
  /**
17157
- * @summary You can call the DescribePolicyGovernanceInCluster operation to query information about policies in a Container Service for Kubernetes (ACK) cluster.
17377
+ * @summary Queries the details of policies for a Container Service for Kubernetes (ACK) cluster. For example, you can query the number of multi-level policies that are enabled for the cluster, audit logs of the policies, and denying and alerting information. Container security policies for ACK clusters offer a variety of built-in policies, such as cis-k8s, infra, k8s-general, and PodSecurityPolicy. You can use these policies to ensure the security of containers running in a production environment.
17158
17378
  *
17159
17379
  * @return DescribePolicyGovernanceInClusterResponse
17160
17380
  */
@@ -17250,7 +17470,56 @@ export default class Client extends OpenApi {
17250
17470
  }
17251
17471
 
17252
17472
  /**
17253
- * @summary You can use an Alibaba Cloud account to call the DescribeSubaccountK8sClusterUserConfig operation to obtain the cluster kubeconfig file of a RAM user or RAM role.
17473
+ * @summary 修改资源删除保护配置
17474
+ *
17475
+ * @param request DescribeResourcesDeleteProtectionRequest
17476
+ * @param headers map
17477
+ * @param runtime runtime options for this request RuntimeOptions
17478
+ * @return DescribeResourcesDeleteProtectionResponse
17479
+ */
17480
+ async describeResourcesDeleteProtectionWithOptions(ClusterId: string, ResourceType: string, request: DescribeResourcesDeleteProtectionRequest, headers: {[key: string ]: string}, runtime: $Util.RuntimeOptions): Promise<DescribeResourcesDeleteProtectionResponse> {
17481
+ Util.validateModel(request);
17482
+ let query : {[key: string ]: any} = { };
17483
+ if (!Util.isUnset(request.namespace)) {
17484
+ query["namespace"] = request.namespace;
17485
+ }
17486
+
17487
+ if (!Util.isUnset(request.resources)) {
17488
+ query["resources"] = request.resources;
17489
+ }
17490
+
17491
+ let req = new $OpenApi.OpenApiRequest({
17492
+ headers: headers,
17493
+ query: OpenApiUtil.query(query),
17494
+ });
17495
+ let params = new $OpenApi.Params({
17496
+ action: "DescribeResourcesDeleteProtection",
17497
+ version: "2015-12-15",
17498
+ protocol: "HTTPS",
17499
+ pathname: `/clusters/${OpenApiUtil.getEncodeParam(ClusterId)}/resources/${OpenApiUtil.getEncodeParam(ResourceType)}/protection`,
17500
+ method: "GET",
17501
+ authType: "AK",
17502
+ style: "ROA",
17503
+ reqBodyType: "json",
17504
+ bodyType: "array",
17505
+ });
17506
+ return $tea.cast<DescribeResourcesDeleteProtectionResponse>(await this.callApi(params, req, runtime), new DescribeResourcesDeleteProtectionResponse({}));
17507
+ }
17508
+
17509
+ /**
17510
+ * @summary 修改资源删除保护配置
17511
+ *
17512
+ * @param request DescribeResourcesDeleteProtectionRequest
17513
+ * @return DescribeResourcesDeleteProtectionResponse
17514
+ */
17515
+ async describeResourcesDeleteProtection(ClusterId: string, ResourceType: string, request: DescribeResourcesDeleteProtectionRequest): Promise<DescribeResourcesDeleteProtectionResponse> {
17516
+ let runtime = new $Util.RuntimeOptions({ });
17517
+ let headers : {[key: string ]: string} = { };
17518
+ return await this.describeResourcesDeleteProtectionWithOptions(ClusterId, ResourceType, request, headers, runtime);
17519
+ }
17520
+
17521
+ /**
17522
+ * @summary Queries or issues the kubeconfig credentials of a Resource Access Management (RAM) user or RAM role of the account. If you are the permission manager of a Container Service for Kubernetes (ACK) cluster, you can issue the kubeconfig credentials to a specific RAM user or RAM role of the account by using the Alibaba Cloud account. The kubeconfig credentials, which are used to connect to the ACK cluster, contain the identity information about the RAM user or RAM role.
17254
17523
  *
17255
17524
  * @description **
17256
17525
  * ****Only Alibaba Cloud accounts can call this API operation.
@@ -17290,7 +17559,7 @@ export default class Client extends OpenApi {
17290
17559
  }
17291
17560
 
17292
17561
  /**
17293
- * @summary You can use an Alibaba Cloud account to call the DescribeSubaccountK8sClusterUserConfig operation to obtain the cluster kubeconfig file of a RAM user or RAM role.
17562
+ * @summary Queries or issues the kubeconfig credentials of a Resource Access Management (RAM) user or RAM role of the account. If you are the permission manager of a Container Service for Kubernetes (ACK) cluster, you can issue the kubeconfig credentials to a specific RAM user or RAM role of the account by using the Alibaba Cloud account. The kubeconfig credentials, which are used to connect to the ACK cluster, contain the identity information about the RAM user or RAM role.
17294
17563
  *
17295
17564
  * @description **
17296
17565
  * ****Only Alibaba Cloud accounts can call this API operation.
@@ -17604,12 +17873,15 @@ export default class Client extends OpenApi {
17604
17873
  }
17605
17874
 
17606
17875
  /**
17876
+ * @deprecated OpenAPI DescribeWorkflows is deprecated
17877
+ *
17607
17878
  * @summary You can call the DescribeWorkflows operation to query all workflows.
17608
17879
  *
17609
17880
  * @param headers map
17610
17881
  * @param runtime runtime options for this request RuntimeOptions
17611
17882
  * @return DescribeWorkflowsResponse
17612
17883
  */
17884
+ // Deprecated
17613
17885
  async describeWorkflowsWithOptions(headers: {[key: string ]: string}, runtime: $Util.RuntimeOptions): Promise<DescribeWorkflowsResponse> {
17614
17886
  let req = new $OpenApi.OpenApiRequest({
17615
17887
  headers: headers,
@@ -17629,10 +17901,13 @@ export default class Client extends OpenApi {
17629
17901
  }
17630
17902
 
17631
17903
  /**
17904
+ * @deprecated OpenAPI DescribeWorkflows is deprecated
17905
+ *
17632
17906
  * @summary You can call the DescribeWorkflows operation to query all workflows.
17633
17907
  *
17634
17908
  * @return DescribeWorkflowsResponse
17635
17909
  */
17910
+ // Deprecated
17636
17911
  async describeWorkflows(): Promise<DescribeWorkflowsResponse> {
17637
17912
  let runtime = new $Util.RuntimeOptions({ });
17638
17913
  let headers : {[key: string ]: string} = { };
@@ -17997,12 +18272,12 @@ export default class Client extends OpenApi {
17997
18272
  }
17998
18273
 
17999
18274
  /**
18000
- * @summary You can call the GrantPermissions operation to grant a Resource Access Management (RAM) user the permissions to manage Container Service for Kubernetes (ACK) clusters.
18275
+ * @summary Updates the role-based access control (RBAC) permissions of a Resource Access Management (RAM) user or RAM role. By default, you do not have the RBAC permissions on a Container Service for Kubernetes (ACK) cluster if you are not the cluster owner or you are not using an Alibaba Cloud account. You can call this operation to specify the resources that can be accessed, permission scope, and predefined roles. This helps you better manage the access control on resources in ACK clusters.
18001
18276
  *
18002
- * @description ****
18003
- * * Make sure that you have granted the RAM user at least read-only permissions on the desired ACK clusters in the RAM console. Otherwise, the `ErrorRamPolicyConfig` error code is returned. For more information about how to authorize a RAM user by attaching RAM policies, see [Create a custom RAM policy](https://help.aliyun.com/document_detail/86485.html).
18004
- * * If you use a RAM user to call this API operation, make sure that the RAM user is authorized to modify the permissions of other RAM users on the desired ACK clusters. Otherwise, the `StatusForbidden` or `ForbiddenGrantPermissions` error code is returned. For more information, see [Use a RAM user to grant RBAC permissions to other RAM users](https://help.aliyun.com/document_detail/119035.html).
18005
- * * This operation overwrites the permissions that have been granted to the specified RAM user. When you call this operation, make sure that the required permissions are included.
18277
+ * @description **Precautions**:
18278
+ * * Make sure that you have attached a RAM policy that has at least the read-only permissions on the cluster to the RAM user or RAM role in the RAM console. Otherwise, the `ErrorRamPolicyConfig` error code is returned when you call the operation. For more information about how to authorize a RAM user by attaching RAM policies, see [Create a custom RAM policy](https://help.aliyun.com/document_detail/86485.html).
18279
+ * * If you use a RAM user to call the operation, make sure that the RAM user has the permissions to modify the permissions of other RAM users or RAM roles. Otherwise, the `StatusForbidden` or `ForbiddenGrantPermissions` error code is returned when you call the operation. For more information, see [Use a RAM user to grant RBAC permissions to other RAM users](https://help.aliyun.com/document_detail/119035.html).
18280
+ * * If you update full permissions, the existing permissions of the RAM user or RAM role on the cluster are overwritten. You must specify all the permissions that you want to grant to the RAM user or RAM role in the request parameters when you call the operation.
18006
18281
  *
18007
18282
  * @param request GrantPermissionsRequest
18008
18283
  * @param headers map
@@ -18030,12 +18305,12 @@ export default class Client extends OpenApi {
18030
18305
  }
18031
18306
 
18032
18307
  /**
18033
- * @summary You can call the GrantPermissions operation to grant a Resource Access Management (RAM) user the permissions to manage Container Service for Kubernetes (ACK) clusters.
18308
+ * @summary Updates the role-based access control (RBAC) permissions of a Resource Access Management (RAM) user or RAM role. By default, you do not have the RBAC permissions on a Container Service for Kubernetes (ACK) cluster if you are not the cluster owner or you are not using an Alibaba Cloud account. You can call this operation to specify the resources that can be accessed, permission scope, and predefined roles. This helps you better manage the access control on resources in ACK clusters.
18034
18309
  *
18035
- * @description ****
18036
- * * Make sure that you have granted the RAM user at least read-only permissions on the desired ACK clusters in the RAM console. Otherwise, the `ErrorRamPolicyConfig` error code is returned. For more information about how to authorize a RAM user by attaching RAM policies, see [Create a custom RAM policy](https://help.aliyun.com/document_detail/86485.html).
18037
- * * If you use a RAM user to call this API operation, make sure that the RAM user is authorized to modify the permissions of other RAM users on the desired ACK clusters. Otherwise, the `StatusForbidden` or `ForbiddenGrantPermissions` error code is returned. For more information, see [Use a RAM user to grant RBAC permissions to other RAM users](https://help.aliyun.com/document_detail/119035.html).
18038
- * * This operation overwrites the permissions that have been granted to the specified RAM user. When you call this operation, make sure that the required permissions are included.
18310
+ * @description **Precautions**:
18311
+ * * Make sure that you have attached a RAM policy that has at least the read-only permissions on the cluster to the RAM user or RAM role in the RAM console. Otherwise, the `ErrorRamPolicyConfig` error code is returned when you call the operation. For more information about how to authorize a RAM user by attaching RAM policies, see [Create a custom RAM policy](https://help.aliyun.com/document_detail/86485.html).
18312
+ * * If you use a RAM user to call the operation, make sure that the RAM user has the permissions to modify the permissions of other RAM users or RAM roles. Otherwise, the `StatusForbidden` or `ForbiddenGrantPermissions` error code is returned when you call the operation. For more information, see [Use a RAM user to grant RBAC permissions to other RAM users](https://help.aliyun.com/document_detail/119035.html).
18313
+ * * If you update full permissions, the existing permissions of the RAM user or RAM role on the cluster are overwritten. You must specify all the permissions that you want to grant to the RAM user or RAM role in the request parameters when you call the operation.
18039
18314
  *
18040
18315
  * @param request GrantPermissionsRequest
18041
18316
  * @return GrantPermissionsResponse
@@ -18773,7 +19048,7 @@ export default class Client extends OpenApi {
18773
19048
  }
18774
19049
 
18775
19050
  /**
18776
- * @summary You can call the ModifyPolicyInstance operation to update policy instances in a Container Service for Kubernetes (ACK) cluster.
19051
+ * @summary Updates a policy in a specific Container Service for Kubernetes (ACK) cluster. You can modify the action of the policy such as alerting or denying and namespaces to which the policy applies.
18777
19052
  *
18778
19053
  * @param request ModifyPolicyInstanceRequest
18779
19054
  * @param headers map
@@ -18818,7 +19093,7 @@ export default class Client extends OpenApi {
18818
19093
  }
18819
19094
 
18820
19095
  /**
18821
- * @summary You can call the ModifyPolicyInstance operation to update policy instances in a Container Service for Kubernetes (ACK) cluster.
19096
+ * @summary Updates a policy in a specific Container Service for Kubernetes (ACK) cluster. You can modify the action of the policy such as alerting or denying and namespaces to which the policy applies.
18822
19097
  *
18823
19098
  * @param request ModifyPolicyInstanceRequest
18824
19099
  * @return ModifyPolicyInstanceResponse
@@ -19145,12 +19420,15 @@ export default class Client extends OpenApi {
19145
19420
  }
19146
19421
 
19147
19422
  /**
19423
+ * @deprecated OpenAPI RemoveWorkflow is deprecated
19424
+ *
19148
19425
  * @summary You can call the RemoveWorkflow operation to delete a workflow.
19149
19426
  *
19150
19427
  * @param headers map
19151
19428
  * @param runtime runtime options for this request RuntimeOptions
19152
19429
  * @return RemoveWorkflowResponse
19153
19430
  */
19431
+ // Deprecated
19154
19432
  async removeWorkflowWithOptions(workflowName: string, headers: {[key: string ]: string}, runtime: $Util.RuntimeOptions): Promise<RemoveWorkflowResponse> {
19155
19433
  let req = new $OpenApi.OpenApiRequest({
19156
19434
  headers: headers,
@@ -19170,10 +19448,13 @@ export default class Client extends OpenApi {
19170
19448
  }
19171
19449
 
19172
19450
  /**
19451
+ * @deprecated OpenAPI RemoveWorkflow is deprecated
19452
+ *
19173
19453
  * @summary You can call the RemoveWorkflow operation to delete a workflow.
19174
19454
  *
19175
19455
  * @return RemoveWorkflowResponse
19176
19456
  */
19457
+ // Deprecated
19177
19458
  async removeWorkflow(workflowName: string): Promise<RemoveWorkflowResponse> {
19178
19459
  let runtime = new $Util.RuntimeOptions({ });
19179
19460
  let headers : {[key: string ]: string} = { };
@@ -19348,7 +19629,7 @@ export default class Client extends OpenApi {
19348
19629
  }
19349
19630
 
19350
19631
  /**
19351
- * @summary You can call the RunClusterCheck operation to initiate cluster checks, such as cluster update prechecks.
19632
+ * @summary Initiates cluster checks such as cluster update checks.
19352
19633
  *
19353
19634
  * @param request RunClusterCheckRequest
19354
19635
  * @param headers map
@@ -19389,7 +19670,7 @@ export default class Client extends OpenApi {
19389
19670
  }
19390
19671
 
19391
19672
  /**
19392
- * @summary You can call the RunClusterCheck operation to initiate cluster checks, such as cluster update prechecks.
19673
+ * @summary Initiates cluster checks such as cluster update checks.
19393
19674
  *
19394
19675
  * @param request RunClusterCheckRequest
19395
19676
  * @return RunClusterCheckResponse
@@ -19781,6 +20062,8 @@ export default class Client extends OpenApi {
19781
20062
  }
19782
20063
 
19783
20064
  /**
20065
+ * @deprecated OpenAPI StartWorkflow is deprecated
20066
+ *
19784
20067
  * @summary You can call the StartWorkflow operation to create a workflow.
19785
20068
  *
19786
20069
  * @param request StartWorkflowRequest
@@ -19788,6 +20071,7 @@ export default class Client extends OpenApi {
19788
20071
  * @param runtime runtime options for this request RuntimeOptions
19789
20072
  * @return StartWorkflowResponse
19790
20073
  */
20074
+ // Deprecated
19791
20075
  async startWorkflowWithOptions(request: StartWorkflowRequest, headers: {[key: string ]: string}, runtime: $Util.RuntimeOptions): Promise<StartWorkflowResponse> {
19792
20076
  Util.validateModel(request);
19793
20077
  let body : {[key: string ]: any} = { };
@@ -19886,11 +20170,14 @@ export default class Client extends OpenApi {
19886
20170
  }
19887
20171
 
19888
20172
  /**
20173
+ * @deprecated OpenAPI StartWorkflow is deprecated
20174
+ *
19889
20175
  * @summary You can call the StartWorkflow operation to create a workflow.
19890
20176
  *
19891
20177
  * @param request StartWorkflowRequest
19892
20178
  * @return StartWorkflowResponse
19893
20179
  */
20180
+ // Deprecated
19894
20181
  async startWorkflow(request: StartWorkflowRequest): Promise<StartWorkflowResponse> {
19895
20182
  let runtime = new $Util.RuntimeOptions({ });
19896
20183
  let headers : {[key: string ]: string} = { };
@@ -20040,7 +20327,7 @@ export default class Client extends OpenApi {
20040
20327
  }
20041
20328
 
20042
20329
  /**
20043
- * @summary You can call the UnInstallClusterAddons operation to uninstall the components in a cluster by component names.
20330
+ * @summary Uninstalls components that you no longer need from a cluster. You must specify the name of the components and specify whether to release associated Alibaba Cloud resources from the cluster.
20044
20331
  *
20045
20332
  * @param request UnInstallClusterAddonsRequest
20046
20333
  * @param headers map
@@ -20068,7 +20355,7 @@ export default class Client extends OpenApi {
20068
20355
  }
20069
20356
 
20070
20357
  /**
20071
- * @summary You can call the UnInstallClusterAddons operation to uninstall the components in a cluster by component names.
20358
+ * @summary Uninstalls components that you no longer need from a cluster. You must specify the name of the components and specify whether to release associated Alibaba Cloud resources from the cluster.
20072
20359
  *
20073
20360
  * @param request UnInstallClusterAddonsRequest
20074
20361
  * @return UnInstallClusterAddonsResponse
@@ -20295,7 +20582,64 @@ export default class Client extends OpenApi {
20295
20582
  }
20296
20583
 
20297
20584
  /**
20298
- * @summary You can call the UpdateTemplate operation to update an orchestration template by template ID.
20585
+ * @summary 修改资源删除保护配置
20586
+ *
20587
+ * @param request UpdateResourcesDeleteProtectionRequest
20588
+ * @param headers map
20589
+ * @param runtime runtime options for this request RuntimeOptions
20590
+ * @return UpdateResourcesDeleteProtectionResponse
20591
+ */
20592
+ async updateResourcesDeleteProtectionWithOptions(ClusterId: string, request: UpdateResourcesDeleteProtectionRequest, headers: {[key: string ]: string}, runtime: $Util.RuntimeOptions): Promise<UpdateResourcesDeleteProtectionResponse> {
20593
+ Util.validateModel(request);
20594
+ let body : {[key: string ]: any} = { };
20595
+ if (!Util.isUnset(request.enable)) {
20596
+ body["enable"] = request.enable;
20597
+ }
20598
+
20599
+ if (!Util.isUnset(request.namespace)) {
20600
+ body["namespace"] = request.namespace;
20601
+ }
20602
+
20603
+ if (!Util.isUnset(request.resourceType)) {
20604
+ body["resource_type"] = request.resourceType;
20605
+ }
20606
+
20607
+ if (!Util.isUnset(request.resources)) {
20608
+ body["resources"] = request.resources;
20609
+ }
20610
+
20611
+ let req = new $OpenApi.OpenApiRequest({
20612
+ headers: headers,
20613
+ body: OpenApiUtil.parseToMap(body),
20614
+ });
20615
+ let params = new $OpenApi.Params({
20616
+ action: "UpdateResourcesDeleteProtection",
20617
+ version: "2015-12-15",
20618
+ protocol: "HTTPS",
20619
+ pathname: `/clusters/${OpenApiUtil.getEncodeParam(ClusterId)}/resources/protection`,
20620
+ method: "PUT",
20621
+ authType: "AK",
20622
+ style: "ROA",
20623
+ reqBodyType: "json",
20624
+ bodyType: "json",
20625
+ });
20626
+ return $tea.cast<UpdateResourcesDeleteProtectionResponse>(await this.callApi(params, req, runtime), new UpdateResourcesDeleteProtectionResponse({}));
20627
+ }
20628
+
20629
+ /**
20630
+ * @summary 修改资源删除保护配置
20631
+ *
20632
+ * @param request UpdateResourcesDeleteProtectionRequest
20633
+ * @return UpdateResourcesDeleteProtectionResponse
20634
+ */
20635
+ async updateResourcesDeleteProtection(ClusterId: string, request: UpdateResourcesDeleteProtectionRequest): Promise<UpdateResourcesDeleteProtectionResponse> {
20636
+ let runtime = new $Util.RuntimeOptions({ });
20637
+ let headers : {[key: string ]: string} = { };
20638
+ return await this.updateResourcesDeleteProtectionWithOptions(ClusterId, request, headers, runtime);
20639
+ }
20640
+
20641
+ /**
20642
+ * @summary Updates the configurations of an orchestration template. An orchestration template defines and describes a group of Container Service for Kubernetes (ACK) resources. An orchestration template describes the configurations of an application or how an application runs in a declarative manner.
20299
20643
  *
20300
20644
  * @param request UpdateTemplateRequest
20301
20645
  * @param headers map
@@ -20344,7 +20688,7 @@ export default class Client extends OpenApi {
20344
20688
  }
20345
20689
 
20346
20690
  /**
20347
- * @summary You can call the UpdateTemplate operation to update an orchestration template by template ID.
20691
+ * @summary Updates the configurations of an orchestration template. An orchestration template defines and describes a group of Container Service for Kubernetes (ACK) resources. An orchestration template describes the configurations of an application or how an application runs in a declarative manner.
20348
20692
  *
20349
20693
  * @param request UpdateTemplateRequest
20350
20694
  * @return UpdateTemplateResponse
@@ -20356,7 +20700,10 @@ export default class Client extends OpenApi {
20356
20700
  }
20357
20701
 
20358
20702
  /**
20359
- * @summary 更新指定RAM用户/角色的RBAC权限
20703
+ * @summary Updates the role-based access control (RBAC) permissions of a Resource Access Management (RAM) user or RAM role. By default, you do not have the RBAC permissions on a Container Service for Kubernetes (ACK) cluster if you are not the cluster owner or you are not using an Alibaba Cloud account. You can call this operation to specify the resources that can be accessed, permission scope, and predefined roles. This helps you better manage the access control on resources in ACK clusters.
20704
+ *
20705
+ * @description **Precautions**:
20706
+ * * You can update the permissions of a RAM user or RAM role on a cluster by using full update or incremental update. If you use full update, the existing permissions of the RAM user or RAM role on the cluster are overwritten. You must specify all the permissions that you want to grant to the RAM user or RAM role in the request parameters when you call the operation. If you use incremental update, you can grant permissions to or revoke permissions from the RAM user or RAM role on the cluster. In this case, only the permissions that you specify in the request parameters when you call the operation are granted or revoked, other permissions of the RAM user or RAM role on the cluster are not affected.
20360
20707
  *
20361
20708
  * @param request UpdateUserPermissionsRequest
20362
20709
  * @param headers map
@@ -20390,7 +20737,10 @@ export default class Client extends OpenApi {
20390
20737
  }
20391
20738
 
20392
20739
  /**
20393
- * @summary 更新指定RAM用户/角色的RBAC权限
20740
+ * @summary Updates the role-based access control (RBAC) permissions of a Resource Access Management (RAM) user or RAM role. By default, you do not have the RBAC permissions on a Container Service for Kubernetes (ACK) cluster if you are not the cluster owner or you are not using an Alibaba Cloud account. You can call this operation to specify the resources that can be accessed, permission scope, and predefined roles. This helps you better manage the access control on resources in ACK clusters.
20741
+ *
20742
+ * @description **Precautions**:
20743
+ * * You can update the permissions of a RAM user or RAM role on a cluster by using full update or incremental update. If you use full update, the existing permissions of the RAM user or RAM role on the cluster are overwritten. You must specify all the permissions that you want to grant to the RAM user or RAM role in the request parameters when you call the operation. If you use incremental update, you can grant permissions to or revoke permissions from the RAM user or RAM role on the cluster. In this case, only the permissions that you specify in the request parameters when you call the operation are granted or revoked, other permissions of the RAM user or RAM role on the cluster are not affected.
20394
20744
  *
20395
20745
  * @param request UpdateUserPermissionsRequest
20396
20746
  * @return UpdateUserPermissionsResponse