google-api-python-client 2.107.0__py2.py3-none-any.whl → 2.109.0__py2.py3-none-any.whl

googleapiclient/discovery_cache/documents/gkehub.v1beta.json

@@ -1308,7 +1308,7 @@
                       ],
                       "parameters": {
                         "name": {
-                          "description": "The resource name for the rbacrolebinding `projects/{project}/locations/{location}/namespaces/{namespace}/rbacrolebindings/{rbacrolebinding}` or `projects/{project}/locations/{location}/memberships/{membership}/rbacrolebindings/{rbacrolebinding}`",
+                          "description": "The resource name for the rbacrolebinding `projects/{project}/locations/{location}/scopes/{scope}/rbacrolebindings/{rbacrolebinding}` or `projects/{project}/locations/{location}/memberships/{membership}/rbacrolebindings/{rbacrolebinding}`",
                           "location": "path",
                           "pattern": "^projects/[^/]+/locations/[^/]+/memberships/[^/]+/rbacrolebindings/[^/]+$",
                           "required": true,
@@ -1336,322 +1336,6 @@
                 }
               }
             },
-            "namespaces": {
-              "methods": {
-                "create": {
-                  "description": "Creates a fleet namespace.",
-                  "flatPath": "v1beta/projects/{projectsId}/locations/{locationsId}/namespaces",
-                  "httpMethod": "POST",
-                  "id": "gkehub.projects.locations.namespaces.create",
-                  "parameterOrder": [
-                    "parent"
-                  ],
-                  "parameters": {
-                    "namespaceId": {
-                      "description": "Required. Client chosen ID for the Namespace. `namespace_id` must be a valid RFC 1123 compliant DNS label: 1. At most 63 characters in length 2. It must consist of lower case alphanumeric characters or `-` 3. It must start and end with an alphanumeric character Which can be expressed as the regex: `[a-z0-9]([-a-z0-9]*[a-z0-9])?`, with a maximum length of 63 characters.",
-                      "location": "query",
-                      "type": "string"
-                    },
-                    "parent": {
-                      "description": "Required. The parent (project and location) where the Namespace will be created. Specified in the format `projects/*/locations/*`.",
-                      "location": "path",
-                      "pattern": "^projects/[^/]+/locations/[^/]+$",
-                      "required": true,
-                      "type": "string"
-                    }
-                  },
-                  "path": "v1beta/{+parent}/namespaces",
-                  "request": {
-                    "$ref": "Namespace"
-                  },
-                  "response": {
-                    "$ref": "Operation"
-                  },
-                  "scopes": [
-                    "https://www.googleapis.com/auth/cloud-platform"
-                  ]
-                },
-                "delete": {
-                  "description": "Deletes a fleet namespace.",
-                  "flatPath": "v1beta/projects/{projectsId}/locations/{locationsId}/namespaces/{namespacesId}",
-                  "httpMethod": "DELETE",
-                  "id": "gkehub.projects.locations.namespaces.delete",
-                  "parameterOrder": [
-                    "name"
-                  ],
-                  "parameters": {
-                    "name": {
-                      "description": "Required. The Namespace resource name in the format `projects/*/locations/*/namespaces/*`.",
-                      "location": "path",
-                      "pattern": "^projects/[^/]+/locations/[^/]+/namespaces/[^/]+$",
-                      "required": true,
-                      "type": "string"
-                    }
-                  },
-                  "path": "v1beta/{+name}",
-                  "response": {
-                    "$ref": "Operation"
-                  },
-                  "scopes": [
-                    "https://www.googleapis.com/auth/cloud-platform"
-                  ]
-                },
-                "get": {
-                  "description": "Returns the details of a fleet namespace.",
-                  "flatPath": "v1beta/projects/{projectsId}/locations/{locationsId}/namespaces/{namespacesId}",
-                  "httpMethod": "GET",
-                  "id": "gkehub.projects.locations.namespaces.get",
-                  "parameterOrder": [
-                    "name"
-                  ],
-                  "parameters": {
-                    "name": {
-                      "description": "Required. The Namespace resource name in the format `projects/*/locations/*/namespaces/*`.",
-                      "location": "path",
-                      "pattern": "^projects/[^/]+/locations/[^/]+/namespaces/[^/]+$",
-                      "required": true,
-                      "type": "string"
-                    }
-                  },
-                  "path": "v1beta/{+name}",
-                  "response": {
-                    "$ref": "Namespace"
-                  },
-                  "scopes": [
-                    "https://www.googleapis.com/auth/cloud-platform"
-                  ]
-                },
-                "list": {
-                  "description": "Lists fleet namespaces.",
-                  "flatPath": "v1beta/projects/{projectsId}/locations/{locationsId}/namespaces",
-                  "httpMethod": "GET",
-                  "id": "gkehub.projects.locations.namespaces.list",
-                  "parameterOrder": [
-                    "parent"
-                  ],
-                  "parameters": {
-                    "pageSize": {
-                      "description": "Optional. When requesting a 'page' of resources, `page_size` specifies number of resources to return. If unspecified or set to 0, all resources will be returned.",
-                      "format": "int32",
-                      "location": "query",
-                      "type": "integer"
-                    },
-                    "pageToken": {
-                      "description": "Optional. Token returned by previous call to `ListFeatures` which specifies the position in the list from where to continue listing the resources.",
-                      "location": "query",
-                      "type": "string"
-                    },
-                    "parent": {
-                      "description": "Required. The parent (project and location) where the Features will be listed. Specified in the format `projects/*/locations/*`.",
-                      "location": "path",
-                      "pattern": "^projects/[^/]+/locations/[^/]+$",
-                      "required": true,
-                      "type": "string"
-                    }
-                  },
-                  "path": "v1beta/{+parent}/namespaces",
-                  "response": {
-                    "$ref": "ListNamespacesResponse"
-                  },
-                  "scopes": [
-                    "https://www.googleapis.com/auth/cloud-platform"
-                  ]
-                },
-                "patch": {
-                  "description": "Updates a fleet namespace.",
-                  "flatPath": "v1beta/projects/{projectsId}/locations/{locationsId}/namespaces/{namespacesId}",
-                  "httpMethod": "PATCH",
-                  "id": "gkehub.projects.locations.namespaces.patch",
-                  "parameterOrder": [
-                    "name"
-                  ],
-                  "parameters": {
-                    "name": {
-                      "description": "The resource name for the namespace `projects/{project}/locations/{location}/namespaces/{namespace}`",
-                      "location": "path",
-                      "pattern": "^projects/[^/]+/locations/[^/]+/namespaces/[^/]+$",
-                      "required": true,
-                      "type": "string"
-                    },
-                    "updateMask": {
-                      "description": "Required. The fields to be updated.",
-                      "format": "google-fieldmask",
-                      "location": "query",
-                      "type": "string"
-                    }
-                  },
-                  "path": "v1beta/{+name}",
-                  "request": {
-                    "$ref": "Namespace"
-                  },
-                  "response": {
-                    "$ref": "Operation"
-                  },
-                  "scopes": [
-                    "https://www.googleapis.com/auth/cloud-platform"
-                  ]
-                }
-              },
-              "resources": {
-                "rbacrolebindings": {
-                  "methods": {
-                    "create": {
-                      "description": "Creates a RBACRoleBinding.",
-                      "flatPath": "v1beta/projects/{projectsId}/locations/{locationsId}/namespaces/{namespacesId}/rbacrolebindings",
-                      "httpMethod": "POST",
-                      "id": "gkehub.projects.locations.namespaces.rbacrolebindings.create",
-                      "parameterOrder": [
-                        "parent"
-                      ],
-                      "parameters": {
-                        "parent": {
-                          "description": "Required. The parent (project and location) where the RBACRoleBinding will be created. Specified in the format `projects/*/locations/*/namespaces/*`.",
-                          "location": "path",
-                          "pattern": "^projects/[^/]+/locations/[^/]+/namespaces/[^/]+$",
-                          "required": true,
-                          "type": "string"
-                        },
-                        "rbacrolebindingId": {
-                          "description": "Required. Client chosen ID for the RBACRoleBinding. `rbacrolebinding_id` must be a valid RFC 1123 compliant DNS label: 1. At most 63 characters in length 2. It must consist of lower case alphanumeric characters or `-` 3. It must start and end with an alphanumeric character Which can be expressed as the regex: `[a-z0-9]([-a-z0-9]*[a-z0-9])?`, with a maximum length of 63 characters.",
-                          "location": "query",
-                          "type": "string"
-                        }
-                      },
-                      "path": "v1beta/{+parent}/rbacrolebindings",
-                      "request": {
-                        "$ref": "RBACRoleBinding"
-                      },
-                      "response": {
-                        "$ref": "Operation"
-                      },
-                      "scopes": [
-                        "https://www.googleapis.com/auth/cloud-platform"
-                      ]
-                    },
-                    "delete": {
-                      "description": "Deletes a RBACRoleBinding.",
-                      "flatPath": "v1beta/projects/{projectsId}/locations/{locationsId}/namespaces/{namespacesId}/rbacrolebindings/{rbacrolebindingsId}",
-                      "httpMethod": "DELETE",
-                      "id": "gkehub.projects.locations.namespaces.rbacrolebindings.delete",
-                      "parameterOrder": [
-                        "name"
-                      ],
-                      "parameters": {
-                        "name": {
-                          "description": "Required. The RBACRoleBinding resource name in the format `projects/*/locations/*/namespaces/*/rbacrolebindings/*`.",
-                          "location": "path",
-                          "pattern": "^projects/[^/]+/locations/[^/]+/namespaces/[^/]+/rbacrolebindings/[^/]+$",
-                          "required": true,
-                          "type": "string"
-                        }
-                      },
-                      "path": "v1beta/{+name}",
-                      "response": {
-                        "$ref": "Operation"
-                      },
-                      "scopes": [
-                        "https://www.googleapis.com/auth/cloud-platform"
-                      ]
-                    },
-                    "get": {
-                      "description": "Returns the details of a RBACRoleBinding.",
-                      "flatPath": "v1beta/projects/{projectsId}/locations/{locationsId}/namespaces/{namespacesId}/rbacrolebindings/{rbacrolebindingsId}",
-                      "httpMethod": "GET",
-                      "id": "gkehub.projects.locations.namespaces.rbacrolebindings.get",
-                      "parameterOrder": [
-                        "name"
-                      ],
-                      "parameters": {
-                        "name": {
-                          "description": "Required. The RBACRoleBinding resource name in the format `projects/*/locations/*/namespaces/*/rbacrolebindings/*`.",
-                          "location": "path",
-                          "pattern": "^projects/[^/]+/locations/[^/]+/namespaces/[^/]+/rbacrolebindings/[^/]+$",
-                          "required": true,
-                          "type": "string"
-                        }
-                      },
-                      "path": "v1beta/{+name}",
-                      "response": {
-                        "$ref": "RBACRoleBinding"
-                      },
-                      "scopes": [
-                        "https://www.googleapis.com/auth/cloud-platform"
-                      ]
-                    },
-                    "list": {
-                      "description": "Lists RBACRoleBinding.",
-                      "flatPath": "v1beta/projects/{projectsId}/locations/{locationsId}/namespaces/{namespacesId}/rbacrolebindings",
-                      "httpMethod": "GET",
-                      "id": "gkehub.projects.locations.namespaces.rbacrolebindings.list",
-                      "parameterOrder": [
-                        "parent"
-                      ],
-                      "parameters": {
-                        "pageSize": {
-                          "description": "Optional. When requesting a 'page' of resources, `page_size` specifies number of resources to return. If unspecified or set to 0, all resources will be returned.",
-                          "format": "int32",
-                          "location": "query",
-                          "type": "integer"
-                        },
-                        "pageToken": {
-                          "description": "Optional. Token returned by previous call to `ListRBACRoleBindings` which specifies the position in the list from where to continue listing the resources.",
-                          "location": "query",
-                          "type": "string"
-                        },
-                        "parent": {
-                          "description": "Required. The parent (project and location) where the Features will be listed. Specified in the format `projects/*/locations/*/namespaces/*`.",
-                          "location": "path",
-                          "pattern": "^projects/[^/]+/locations/[^/]+/namespaces/[^/]+$",
-                          "required": true,
-                          "type": "string"
-                        }
-                      },
-                      "path": "v1beta/{+parent}/rbacrolebindings",
-                      "response": {
-                        "$ref": "ListRBACRoleBindingsResponse"
-                      },
-                      "scopes": [
-                        "https://www.googleapis.com/auth/cloud-platform"
-                      ]
-                    },
-                    "patch": {
-                      "description": "Updates a RBACRoleBinding.",
-                      "flatPath": "v1beta/projects/{projectsId}/locations/{locationsId}/namespaces/{namespacesId}/rbacrolebindings/{rbacrolebindingsId}",
-                      "httpMethod": "PATCH",
-                      "id": "gkehub.projects.locations.namespaces.rbacrolebindings.patch",
-                      "parameterOrder": [
-                        "name"
-                      ],
-                      "parameters": {
-                        "name": {
-                          "description": "The resource name for the rbacrolebinding `projects/{project}/locations/{location}/namespaces/{namespace}/rbacrolebindings/{rbacrolebinding}` or `projects/{project}/locations/{location}/memberships/{membership}/rbacrolebindings/{rbacrolebinding}`",
-                          "location": "path",
-                          "pattern": "^projects/[^/]+/locations/[^/]+/namespaces/[^/]+/rbacrolebindings/[^/]+$",
-                          "required": true,
-                          "type": "string"
-                        },
-                        "updateMask": {
-                          "description": "Required. The fields to be updated.",
-                          "format": "google-fieldmask",
-                          "location": "query",
-                          "type": "string"
-                        }
-                      },
-                      "path": "v1beta/{+name}",
-                      "request": {
-                        "$ref": "RBACRoleBinding"
-                      },
-                      "response": {
-                        "$ref": "Operation"
-                      },
-                      "scopes": [
-                        "https://www.googleapis.com/auth/cloud-platform"
-                      ]
-                    }
-                  }
-                }
-              }
-            },
             "operations": {
               "methods": {
                 "cancel": {
@@ -2307,7 +1991,7 @@
                       ],
                       "parameters": {
                         "name": {
-                          "description": "The resource name for the rbacrolebinding `projects/{project}/locations/{location}/namespaces/{namespace}/rbacrolebindings/{rbacrolebinding}` or `projects/{project}/locations/{location}/memberships/{membership}/rbacrolebindings/{rbacrolebinding}`",
+                          "description": "The resource name for the rbacrolebinding `projects/{project}/locations/{location}/scopes/{scope}/rbacrolebindings/{rbacrolebinding}` or `projects/{project}/locations/{location}/memberships/{membership}/rbacrolebindings/{rbacrolebinding}`",
                           "location": "path",
                           "pattern": "^projects/[^/]+/locations/[^/]+/scopes/[^/]+/rbacrolebindings/[^/]+$",
                           "required": true,
@@ -2340,7 +2024,7 @@
       }
     }
   },
-  "revision": "20231030",
+  "revision": "20231114",
   "rootUrl": "https://gkehub.googleapis.com/",
   "schemas": {
     "AnthosObservabilityFeatureSpec": {
@@ -2354,153 +2038,439 @@
       },
       "type": "object"
     },
-    "AnthosObservabilityMembershipSpec": {
-      "description": "**Anthosobservability**: Per-Membership Feature spec.",
-      "id": "AnthosObservabilityMembershipSpec",
+    "AnthosObservabilityMembershipSpec": {
+      "description": "**Anthosobservability**: Per-Membership Feature spec.",
+      "id": "AnthosObservabilityMembershipSpec",
+      "properties": {
+        "doNotOptimizeMetrics": {
+          "description": "Use full of metrics rather than optimized metrics. See https://cloud.google.com/anthos/clusters/docs/on-prem/1.8/concepts/logging-and-monitoring#optimized_metrics_default_metrics",
+          "type": "boolean"
+        },
+        "enableStackdriverOnApplications": {
+          "description": "Enable collecting and reporting metrics and logs from user apps.",
+          "type": "boolean"
+        },
+        "version": {
+          "description": "the version of stackdriver operator used by this feature",
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
+    "AppDevExperienceFeatureSpec": {
+      "description": "Spec for App Dev Experience Feature.",
+      "id": "AppDevExperienceFeatureSpec",
+      "properties": {},
+      "type": "object"
+    },
+    "AppDevExperienceFeatureState": {
+      "description": "State for App Dev Exp Feature.",
+      "id": "AppDevExperienceFeatureState",
+      "properties": {
+        "networkingInstallSucceeded": {
+          "$ref": "Status",
+          "description": "Status of subcomponent that detects configured Service Mesh resources."
+        }
+      },
+      "type": "object"
+    },
+    "ApplianceCluster": {
+      "description": "ApplianceCluster contains information specific to GDC Edge Appliance Clusters.",
+      "id": "ApplianceCluster",
+      "properties": {
+        "resourceLink": {
+          "description": "Immutable. Self-link of the Google Cloud resource for the Appliance Cluster. For example: //transferappliance.googleapis.com/projects/my-project/locations/us-west1-a/appliances/my-appliance",
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
+    "AuditConfig": {
+      "description": "Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { \"audit_configs\": [ { \"service\": \"allServices\", \"audit_log_configs\": [ { \"log_type\": \"DATA_READ\", \"exempted_members\": [ \"user:jose@example.com\" ] }, { \"log_type\": \"DATA_WRITE\" }, { \"log_type\": \"ADMIN_READ\" } ] }, { \"service\": \"sampleservice.googleapis.com\", \"audit_log_configs\": [ { \"log_type\": \"DATA_READ\" }, { \"log_type\": \"DATA_WRITE\", \"exempted_members\": [ \"user:aliya@example.com\" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.",
+      "id": "AuditConfig",
+      "properties": {
+        "auditLogConfigs": {
+          "description": "The configuration for logging of each type of permission.",
+          "items": {
+            "$ref": "AuditLogConfig"
+          },
+          "type": "array"
+        },
+        "service": {
+          "description": "Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.",
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
+    "AuditLogConfig": {
+      "description": "Provides the configuration for logging a type of permissions. Example: { \"audit_log_configs\": [ { \"log_type\": \"DATA_READ\", \"exempted_members\": [ \"user:jose@example.com\" ] }, { \"log_type\": \"DATA_WRITE\" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.",
+      "id": "AuditLogConfig",
+      "properties": {
+        "exemptedMembers": {
+          "description": "Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "logType": {
+          "description": "The log type that this config enables.",
+          "enum": [
+            "LOG_TYPE_UNSPECIFIED",
+            "ADMIN_READ",
+            "DATA_WRITE",
+            "DATA_READ"
+          ],
+          "enumDescriptions": [
+            "Default case. Should never be this.",
+            "Admin reads. Example: CloudIAM getIamPolicy",
+            "Data writes. Example: CloudSQL Users create",
+            "Data reads. Example: CloudSQL Users list"
+          ],
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
+    "Authority": {
+      "description": "Authority encodes how Google will recognize identities from this Membership. See the workload identity documentation for more details: https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity",
+      "id": "Authority",
+      "properties": {
+        "identityProvider": {
+          "description": "Output only. An identity provider that reflects the `issuer` in the workload identity pool.",
+          "readOnly": true,
+          "type": "string"
+        },
+        "issuer": {
+          "description": "Optional. A JSON Web Token (JWT) issuer URI. `issuer` must start with `https://` and be a valid URL with length <2000 characters, it must use `location` rather than `zone` for GKE clusters. If set, then Google will allow valid OIDC tokens from this issuer to authenticate within the workload_identity_pool. OIDC discovery will be performed on this URI to validate tokens from the issuer. Clearing `issuer` disables Workload Identity. `issuer` cannot be directly modified; it must be cleared (and Workload Identity disabled) before using a new issuer (and re-enabling Workload Identity).",
+          "type": "string"
+        },
+        "oidcJwks": {
+          "description": "Optional. OIDC verification keys for this Membership in JWKS format (RFC 7517). When this field is set, OIDC discovery will NOT be performed on `issuer`, and instead OIDC tokens will be validated using this field.",
+          "format": "byte",
+          "type": "string"
+        },
+        "workloadIdentityPool": {
+          "description": "Output only. The name of the workload identity pool in which `issuer` will be recognized. There is a single Workload Identity Pool per Hub that is shared between all Memberships that belong to that Hub. For a Hub hosted in {PROJECT_ID}, the workload pool format is `{PROJECT_ID}.hub.id.goog`, although this is subject to change in newer versions of this API.",
+          "readOnly": true,
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
+    "BinaryAuthorizationConfig": {
+      "description": "BinaryAuthorizationConfig defines the fleet level configuration of binary authorization feature.",
+      "id": "BinaryAuthorizationConfig",
+      "properties": {
+        "evaluationMode": {
+          "description": "Optional. Mode of operation for binauthz policy evaluation.",
+          "enum": [
+            "EVALUATION_MODE_UNSPECIFIED",
+            "DISABLED",
+            "POLICY_BINDINGS"
+          ],
+          "enumDescriptions": [
+            "Default value",
+            "Disable BinaryAuthorization",
+            "Use Binary Authorization with the policies specified in policy_bindings."
+          ],
+          "type": "string"
+        },
+        "policyBindings": {
+          "description": "Optional. Binauthz policies that apply to this cluster.",
+          "items": {
+            "$ref": "PolicyBinding"
+          },
+          "type": "array"
+        }
+      },
+      "type": "object"
+    },
+    "Binding": {
+      "description": "Associates `members`, or principals, with a `role`.",
+      "id": "Binding",
+      "properties": {
+        "condition": {
+          "$ref": "Expr",
+          "description": "The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies)."
+        },
+        "members": {
+          "description": "Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "role": {
+          "description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.",
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
+    "CancelOperationRequest": {
+      "description": "The request message for Operations.CancelOperation.",
+      "id": "CancelOperationRequest",
+      "properties": {},
+      "type": "object"
+    },
+    "ClusterUpgradeFleetSpec": {
+      "description": "**ClusterUpgrade**: The configuration for the fleet-level ClusterUpgrade feature.",
+      "id": "ClusterUpgradeFleetSpec",
+      "properties": {
+        "gkeUpgradeOverrides": {
+          "description": "Allow users to override some properties of each GKE upgrade.",
+          "items": {
+            "$ref": "ClusterUpgradeGKEUpgradeOverride"
+          },
+          "type": "array"
+        },
+        "postConditions": {
+          "$ref": "ClusterUpgradePostConditions",
+          "description": "Required. Post conditions to evaluate to mark an upgrade COMPLETE. Required."
+        },
+        "upstreamFleets": {
+          "description": "This fleet consumes upgrades that have COMPLETE status code in the upstream fleets. See UpgradeStatus.Code for code definitions. The fleet name should be either fleet project number or id. This is defined as repeated for future proof reasons. Initial implementation will enforce at most one upstream fleet.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        }
+      },
+      "type": "object"
+    },
+    "ClusterUpgradeFleetState": {
+      "description": "**ClusterUpgrade**: The state for the fleet-level ClusterUpgrade feature.",
+      "id": "ClusterUpgradeFleetState",
+      "properties": {
+        "downstreamFleets": {
+          "description": "This fleets whose upstream_fleets contain the current fleet. The fleet name should be either fleet project number or id.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "gkeState": {
+          "$ref": "ClusterUpgradeGKEUpgradeFeatureState",
+          "description": "Feature state for GKE clusters."
+        },
+        "ignored": {
+          "additionalProperties": {
+            "$ref": "ClusterUpgradeIgnoredMembership"
+          },
+          "description": "A list of memberships ignored by the feature. For example, manually upgraded clusters can be ignored if they are newer than the default versions of its release channel. The membership resource is in the format: `projects/{p}/locations/{l}/membership/{m}`.",
+          "type": "object"
+        }
+      },
+      "type": "object"
+    },
+    "ClusterUpgradeGKEUpgrade": {
+      "description": "GKEUpgrade represents a GKE provided upgrade, e.g., control plane upgrade.",
+      "id": "ClusterUpgradeGKEUpgrade",
       "properties": {
-        "doNotOptimizeMetrics": {
-          "description": "Use full of metrics rather than optimized metrics. See https://cloud.google.com/anthos/clusters/docs/on-prem/1.8/concepts/logging-and-monitoring#optimized_metrics_default_metrics",
-          "type": "boolean"
-        },
-        "enableStackdriverOnApplications": {
-          "description": "Enable collecting and reporting metrics and logs from user apps.",
-          "type": "boolean"
+        "name": {
+          "description": "Name of the upgrade, e.g., \"k8s_control_plane\". It should be a valid upgrade name. It must not exceet 99 characters.",
+          "type": "string"
         },
         "version": {
-          "description": "the version of stackdriver operator used by this feature",
+          "description": "Version of the upgrade, e.g., \"1.22.1-gke.100\". It should be a valid version. It must not exceet 99 characters.",
           "type": "string"
         }
       },
       "type": "object"
     },
-    "AppDevExperienceFeatureSpec": {
-      "description": "Spec for App Dev Experience Feature.",
-      "id": "AppDevExperienceFeatureSpec",
-      "properties": {},
-      "type": "object"
-    },
-    "AppDevExperienceFeatureState": {
-      "description": "State for App Dev Exp Feature.",
-      "id": "AppDevExperienceFeatureState",
+    "ClusterUpgradeGKEUpgradeFeatureCondition": {
+      "description": "GKEUpgradeFeatureCondition describes the condition of the feature for GKE clusters at a certain point of time.",
+      "id": "ClusterUpgradeGKEUpgradeFeatureCondition",
       "properties": {
-        "networkingInstallSucceeded": {
-          "$ref": "Status",
-          "description": "Status of subcomponent that detects configured Service Mesh resources."
+        "reason": {
+          "description": "Reason why the feature is in this status.",
+          "type": "string"
+        },
+        "status": {
+          "description": "Status of the condition, one of True, False, Unknown.",
+          "type": "string"
+        },
+        "type": {
+          "description": "Type of the condition, for example, \"ready\".",
+          "type": "string"
+        },
+        "updateTime": {
+          "description": "Last timestamp the condition was updated.",
+          "format": "google-datetime",
+          "type": "string"
         }
       },
       "type": "object"
     },
-    "ApplianceCluster": {
-      "description": "ApplianceCluster contains information specific to GDC Edge Appliance Clusters.",
-      "id": "ApplianceCluster",
+    "ClusterUpgradeGKEUpgradeFeatureState": {
+      "description": "GKEUpgradeFeatureState contains feature states for GKE clusters in the scope.",
+      "id": "ClusterUpgradeGKEUpgradeFeatureState",
       "properties": {
-        "resourceLink": {
-          "description": "Immutable. Self-link of the Google Cloud resource for the Appliance Cluster. For example: //transferappliance.googleapis.com/projects/my-project/locations/us-west1-a/appliances/my-appliance",
-          "type": "string"
+        "conditions": {
+          "description": "Current conditions of the feature.",
+          "items": {
+            "$ref": "ClusterUpgradeGKEUpgradeFeatureCondition"
+          },
+          "type": "array"
+        },
+        "upgradeState": {
+          "description": "Upgrade state. It will eventually replace `state`.",
+          "items": {
+            "$ref": "ClusterUpgradeGKEUpgradeState"
+          },
+          "type": "array"
         }
       },
       "type": "object"
     },
-    "AuditConfig": {
-      "description": "Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { \"audit_configs\": [ { \"service\": \"allServices\", \"audit_log_configs\": [ { \"log_type\": \"DATA_READ\", \"exempted_members\": [ \"user:jose@example.com\" ] }, { \"log_type\": \"DATA_WRITE\" }, { \"log_type\": \"ADMIN_READ\" } ] }, { \"service\": \"sampleservice.googleapis.com\", \"audit_log_configs\": [ { \"log_type\": \"DATA_READ\" }, { \"log_type\": \"DATA_WRITE\", \"exempted_members\": [ \"user:aliya@example.com\" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.",
-      "id": "AuditConfig",
+    "ClusterUpgradeGKEUpgradeOverride": {
+      "description": "Properties of a GKE upgrade that can be overridden by the user. For example, a user can skip soaking by overriding the soaking to 0.",
+      "id": "ClusterUpgradeGKEUpgradeOverride",
       "properties": {
-        "auditLogConfigs": {
-          "description": "The configuration for logging of each type of permission.",
-          "items": {
-            "$ref": "AuditLogConfig"
-          },
-          "type": "array"
+        "postConditions": {
+          "$ref": "ClusterUpgradePostConditions",
+          "description": "Required. Post conditions to override for the specified upgrade (name + version). Required."
         },
-        "service": {
-          "description": "Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.",
-          "type": "string"
+        "upgrade": {
+          "$ref": "ClusterUpgradeGKEUpgrade",
+          "description": "Required. Which upgrade to override. Required."
         }
       },
       "type": "object"
     },
-    "AuditLogConfig": {
-      "description": "Provides the configuration for logging a type of permissions. Example: { \"audit_log_configs\": [ { \"log_type\": \"DATA_READ\", \"exempted_members\": [ \"user:jose@example.com\" ] }, { \"log_type\": \"DATA_WRITE\" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.",
-      "id": "AuditLogConfig",
+    "ClusterUpgradeGKEUpgradeState": {
+      "description": "GKEUpgradeState is a GKEUpgrade and its state at the scope and fleet level.",
+      "id": "ClusterUpgradeGKEUpgradeState",
       "properties": {
-        "exemptedMembers": {
-          "description": "Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.",
-          "items": {
+        "stats": {
+          "additionalProperties": {
+            "format": "int64",
             "type": "string"
           },
-          "type": "array"
+          "description": "Number of GKE clusters in each status code.",
+          "type": "object"
         },
-        "logType": {
-          "description": "The log type that this config enables.",
-          "enum": [
-            "LOG_TYPE_UNSPECIFIED",
-            "ADMIN_READ",
-            "DATA_WRITE",
-            "DATA_READ"
-          ],
-          "enumDescriptions": [
-            "Default case. Should never be this.",
-            "Admin reads. Example: CloudIAM getIamPolicy",
-            "Data writes. Example: CloudSQL Users create",
-            "Data reads. Example: CloudSQL Users list"
-          ],
-          "type": "string"
+        "status": {
+          "$ref": "ClusterUpgradeUpgradeStatus",
+          "description": "Status of the upgrade."
+        },
+        "upgrade": {
+          "$ref": "ClusterUpgradeGKEUpgrade",
+          "description": "Which upgrade to track the state."
         }
       },
       "type": "object"
     },
-    "Authority": {
-      "description": "Authority encodes how Google will recognize identities from this Membership. See the workload identity documentation for more details: https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity",
-      "id": "Authority",
+    "ClusterUpgradeIgnoredMembership": {
+      "description": "IgnoredMembership represents a membership ignored by the feature. A membership can be ignored because it was manually upgraded to a newer version than RC default.",
+      "id": "ClusterUpgradeIgnoredMembership",
       "properties": {
-        "identityProvider": {
-          "description": "Output only. An identity provider that reflects the `issuer` in the workload identity pool.",
-          "readOnly": true,
-          "type": "string"
-        },
-        "issuer": {
-          "description": "Optional. A JSON Web Token (JWT) issuer URI. `issuer` must start with `https://` and be a valid URL with length <2000 characters, it must use `location` rather than `zone` for GKE clusters. If set, then Google will allow valid OIDC tokens from this issuer to authenticate within the workload_identity_pool. OIDC discovery will be performed on this URI to validate tokens from the issuer. Clearing `issuer` disables Workload Identity. `issuer` cannot be directly modified; it must be cleared (and Workload Identity disabled) before using a new issuer (and re-enabling Workload Identity).",
+        "ignoredTime": {
+          "description": "Time when the membership was first set to ignored.",
+          "format": "google-datetime",
           "type": "string"
         },
-        "oidcJwks": {
-          "description": "Optional. OIDC verification keys for this Membership in JWKS format (RFC 7517). When this field is set, OIDC discovery will NOT be performed on `issuer`, and instead OIDC tokens will be validated using this field.",
-          "format": "byte",
+        "reason": {
+          "description": "Reason why the membership is ignored.",
           "type": "string"
+        }
+      },
+      "type": "object"
+    },
+    "ClusterUpgradeMembershipGKEUpgradeState": {
+      "description": "ScopeGKEUpgradeState is a GKEUpgrade and its state per-membership.",
+      "id": "ClusterUpgradeMembershipGKEUpgradeState",
+      "properties": {
+        "status": {
+          "$ref": "ClusterUpgradeUpgradeStatus",
+          "description": "Status of the upgrade."
         },
-        "workloadIdentityPool": {
-          "description": "Output only. The name of the workload identity pool in which `issuer` will be recognized. There is a single Workload Identity Pool per Hub that is shared between all Memberships that belong to that Hub. For a Hub hosted in {PROJECT_ID}, the workload pool format is `{PROJECT_ID}.hub.id.goog`, although this is subject to change in newer versions of this API.",
-          "readOnly": true,
-          "type": "string"
+        "upgrade": {
+          "$ref": "ClusterUpgradeGKEUpgrade",
+          "description": "Which upgrade to track the state."
         }
       },
       "type": "object"
     },
-    "Binding": {
-      "description": "Associates `members`, or principals, with a `role`.",
-      "id": "Binding",
+    "ClusterUpgradeMembershipState": {
+      "description": "Per-membership state for this feature.",
+      "id": "ClusterUpgradeMembershipState",
       "properties": {
-        "condition": {
-          "$ref": "Expr",
-          "description": "The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies)."
+        "fleet": {
+          "description": "Project number or id of the fleet. It is set only for Memberships that are part of fleet-based Rollout Sequencing.",
+          "type": "string"
         },
-        "members": {
-          "description": "Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.",
+        "ignored": {
+          "$ref": "ClusterUpgradeIgnoredMembership",
+          "description": "Whether this membership is ignored by the feature. For example, manually upgraded clusters can be ignored if they are newer than the default versions of its release channel."
+        },
+        "scopes": {
+          "description": "Fully qualified scope names that this clusters is bound to which also have rollout sequencing enabled.",
           "items": {
             "type": "string"
           },
           "type": "array"
         },
-        "role": {
-          "description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.",
+        "upgrades": {
+          "description": "Actual upgrade state against desired.",
+          "items": {
+            "$ref": "ClusterUpgradeMembershipGKEUpgradeState"
+          },
+          "type": "array"
+        }
+      },
+      "type": "object"
+    },
+    "ClusterUpgradePostConditions": {
+      "description": "Post conditional checks after an upgrade has been applied on all eligible clusters.",
+      "id": "ClusterUpgradePostConditions",
+      "properties": {
+        "soaking": {
+          "description": "Required. Amount of time to \"soak\" after a rollout has been finished before marking it COMPLETE. Cannot exceed 30 days. Required.",
+          "format": "google-duration",
           "type": "string"
         }
       },
       "type": "object"
     },
-    "CancelOperationRequest": {
-      "description": "The request message for Operations.CancelOperation.",
-      "id": "CancelOperationRequest",
-      "properties": {},
+    "ClusterUpgradeUpgradeStatus": {
+      "description": "UpgradeStatus provides status information for each upgrade.",
+      "id": "ClusterUpgradeUpgradeStatus",
+      "properties": {
+        "code": {
+          "description": "Status code of the upgrade.",
+          "enum": [
+            "CODE_UNSPECIFIED",
+            "INELIGIBLE",
+            "PENDING",
+            "IN_PROGRESS",
+            "SOAKING",
+            "FORCED_SOAKING",
+            "COMPLETE"
+          ],
+          "enumDescriptions": [
+            "Required by https://linter.aip.dev/126/unspecified.",
+            "The upgrade is ineligible. At the scope level, this means the upgrade is ineligible for all the clusters in the scope.",
+            "The upgrade is pending. At the scope level, this means the upgrade is pending for all the clusters in the scope.",
+            "The upgrade is in progress. At the scope level, this means the upgrade is in progress for at least one cluster in the scope.",
+            "The upgrade has finished and is soaking until the soaking time is up. At the scope level, this means at least one cluster is in soaking while the rest are either soaking or complete.",
+            "A cluster will be forced to enter soaking if an upgrade doesn't finish within a certain limit, despite it's actual status.",
+            "The upgrade has passed all post conditions (soaking). At the scope level, this means all eligible clusters are in COMPLETE status."
+          ],
+          "type": "string"
+        },
+        "reason": {
+          "description": "Reason for this status.",
+          "type": "string"
+        },
+        "updateTime": {
+          "description": "Last timestamp the status was updated.",
+          "format": "google-datetime",
+          "type": "string"
+        }
+      },
       "type": "object"
     },
     "CommonFeatureSpec": {
@@ -2515,6 +2485,10 @@
           "$ref": "AppDevExperienceFeatureSpec",
           "description": "Appdevexperience specific spec."
         },
+        "clusterupgrade": {
+          "$ref": "ClusterUpgradeFleetSpec",
+          "description": "ClusterUpgrade (fleet-based) feature spec."
+        },
         "fleetobservability": {
           "$ref": "FleetObservabilityFeatureSpec",
           "description": "FleetObservability feature spec."
@@ -2534,6 +2508,10 @@
           "$ref": "AppDevExperienceFeatureState",
           "description": "Appdevexperience specific state."
         },
+        "clusterupgrade": {
+          "$ref": "ClusterUpgradeFleetState",
+          "description": "ClusterUpgrade fleet-level state."
+        },
         "fleetobservability": {
           "$ref": "FleetObservabilityFeatureState",
           "description": "FleetObservability feature state."
@@ -2594,13 +2572,15 @@
             "DEPLOYMENT_STATE_UNSPECIFIED",
             "NOT_INSTALLED",
             "INSTALLED",
-            "ERROR"
+            "ERROR",
+            "PENDING"
           ],
           "enumDescriptions": [
             "Deployment's state cannot be determined",
             "Deployment is not installed",
             "Deployment is installed",
-            "Deployment was attempted to be installed, but has errors"
+            "Deployment was attempted to be installed, but has errors",
+            "Deployment is installing or terminating"
           ],
           "type": "string"
         }
@@ -2650,10 +2630,6 @@
         "sourceFormat": {
           "description": "Specifies whether the Config Sync Repo is in \"hierarchical\" or \"unstructured\" mode.",
           "type": "string"
-        },
-        "stopSyncing": {
-          "description": "Set to true to stop syncing configs for a single cluster when automatic Feature management is enabled. Default to false. The field will be ignored when automatic Feature management is disabled.",
-          "type": "boolean"
         }
       },
       "type": "object"
@@ -2668,13 +2644,15 @@
             "DEPLOYMENT_STATE_UNSPECIFIED",
             "NOT_INSTALLED",
             "INSTALLED",
-            "ERROR"
+            "ERROR",
+            "PENDING"
           ],
           "enumDescriptions": [
             "Deployment's state cannot be determined",
             "Deployment is not installed",
             "Deployment is installed",
-            "Deployment was attempted to be installed, but has errors"
+            "Deployment was attempted to be installed, but has errors",
+            "Deployment is installing or terminating"
           ],
           "type": "string"
         },
@@ -2684,13 +2662,15 @@
             "DEPLOYMENT_STATE_UNSPECIFIED",
             "NOT_INSTALLED",
             "INSTALLED",
-            "ERROR"
+            "ERROR",
+            "PENDING"
           ],
           "enumDescriptions": [
             "Deployment's state cannot be determined",
             "Deployment is not installed",
             "Deployment is installed",
-            "Deployment was attempted to be installed, but has errors"
+            "Deployment was attempted to be installed, but has errors",
+            "Deployment is installing or terminating"
           ],
           "type": "string"
         },
@@ -2700,13 +2680,15 @@
             "DEPLOYMENT_STATE_UNSPECIFIED",
             "NOT_INSTALLED",
             "INSTALLED",
-            "ERROR"
+            "ERROR",
+            "PENDING"
           ],
           "enumDescriptions": [
             "Deployment's state cannot be determined",
             "Deployment is not installed",
             "Deployment is installed",
-            "Deployment was attempted to be installed, but has errors"
+            "Deployment was attempted to be installed, but has errors",
+            "Deployment is installing or terminating"
           ],
           "type": "string"
         },
@@ -2716,13 +2698,15 @@
             "DEPLOYMENT_STATE_UNSPECIFIED",
             "NOT_INSTALLED",
             "INSTALLED",
-            "ERROR"
+            "ERROR",
+            "PENDING"
           ],
           "enumDescriptions": [
             "Deployment's state cannot be determined",
             "Deployment is not installed",
             "Deployment is installed",
-            "Deployment was attempted to be installed, but has errors"
+            "Deployment was attempted to be installed, but has errors",
+            "Deployment is installing or terminating"
           ],
           "type": "string"
         },
@@ -2732,13 +2716,15 @@
             "DEPLOYMENT_STATE_UNSPECIFIED",
             "NOT_INSTALLED",
             "INSTALLED",
-            "ERROR"
+            "ERROR",
+            "PENDING"
           ],
           "enumDescriptions": [
             "Deployment's state cannot be determined",
             "Deployment is not installed",
             "Deployment is installed",
-            "Deployment was attempted to be installed, but has errors"
+            "Deployment was attempted to be installed, but has errors",
+            "Deployment is installing or terminating"
           ],
           "type": "string"
         },
@@ -2748,13 +2734,15 @@
             "DEPLOYMENT_STATE_UNSPECIFIED",
             "NOT_INSTALLED",
             "INSTALLED",
-            "ERROR"
+            "ERROR",
+            "PENDING"
           ],
           "enumDescriptions": [
             "Deployment's state cannot be determined",
             "Deployment is not installed",
             "Deployment is installed",
-            "Deployment was attempted to be installed, but has errors"
+            "Deployment was attempted to be installed, but has errors",
+            "Deployment is installing or terminating"
           ],
           "type": "string"
         },
@@ -2764,13 +2752,15 @@
             "DEPLOYMENT_STATE_UNSPECIFIED",
             "NOT_INSTALLED",
             "INSTALLED",
-            "ERROR"
+            "ERROR",
+            "PENDING"
           ],
           "enumDescriptions": [
             "Deployment's state cannot be determined",
             "Deployment is not installed",
             "Deployment is installed",
-            "Deployment was attempted to be installed, but has errors"
+            "Deployment was attempted to be installed, but has errors",
+            "Deployment is installing or terminating"
           ],
           "type": "string"
         }
@@ -2882,13 +2872,15 @@
             "DEPLOYMENT_STATE_UNSPECIFIED",
             "NOT_INSTALLED",
             "INSTALLED",
-            "ERROR"
+            "ERROR",
+            "PENDING"
           ],
           "enumDescriptions": [
             "Deployment's state cannot be determined",
             "Deployment is not installed",
             "Deployment is installed",
-            "Deployment was attempted to be installed, but has errors"
+            "Deployment was attempted to be installed, but has errors",
+            "Deployment is installing or terminating"
           ],
           "type": "string"
         },
@@ -2898,13 +2890,15 @@
             "DEPLOYMENT_STATE_UNSPECIFIED",
             "NOT_INSTALLED",
             "INSTALLED",
-            "ERROR"
+            "ERROR",
+            "PENDING"
           ],
           "enumDescriptions": [
             "Deployment's state cannot be determined",
             "Deployment is not installed",
             "Deployment is installed",
-            "Deployment was attempted to be installed, but has errors"
+            "Deployment was attempted to be installed, but has errors",
+            "Deployment is installing or terminating"
           ],
           "type": "string"
         },
@@ -2914,13 +2908,15 @@
             "DEPLOYMENT_STATE_UNSPECIFIED",
             "NOT_INSTALLED",
             "INSTALLED",
-            "ERROR"
+            "ERROR",
+            "PENDING"
           ],
           "enumDescriptions": [
             "Deployment's state cannot be determined",
             "Deployment is not installed",
             "Deployment is installed",
-            "Deployment was attempted to be installed, but has errors"
+            "Deployment was attempted to be installed, but has errors",
+            "Deployment is installing or terminating"
           ],
           "type": "string"
         }
@@ -3015,13 +3011,15 @@
             "DEPLOYMENT_STATE_UNSPECIFIED",
             "NOT_INSTALLED",
             "INSTALLED",
-            "ERROR"
+            "ERROR",
+            "PENDING"
           ],
           "enumDescriptions": [
             "Deployment's state cannot be determined",
             "Deployment is not installed",
             "Deployment is installed",
-            "Deployment was attempted to be installed, but has errors"
+            "Deployment was attempted to be installed, but has errors",
+            "Deployment is installing or terminating"
           ],
           "type": "string"
         },
@@ -3031,13 +3029,15 @@
             "DEPLOYMENT_STATE_UNSPECIFIED",
             "NOT_INSTALLED",
             "INSTALLED",
-            "ERROR"
+            "ERROR",
+            "PENDING"
           ],
           "enumDescriptions": [
             "Deployment's state cannot be determined",
             "Deployment is not installed",
             "Deployment is installed",
-            "Deployment was attempted to be installed, but has errors"
+            "Deployment was attempted to be installed, but has errors",
+            "Deployment is installing or terminating"
           ],
           "type": "string"
         }
@@ -3106,20 +3106,6 @@
           "$ref": "ConfigManagementHierarchyControllerConfig",
           "description": "Hierarchy Controller configuration for the cluster."
         },
-        "management": {
-          "description": "Enables automatic Feature management.",
-          "enum": [
-            "MANAGEMENT_UNSPECIFIED",
-            "MANAGEMENT_AUTOMATIC",
-            "MANAGEMENT_MANUAL"
-          ],
-          "enumDescriptions": [
-            "Unspecified",
-            "Google will manage the Feature for the cluster.",
-            "User will manually manage the Feature for the cluster."
-          ],
-          "type": "string"
-        },
         "policyController": {
           "$ref": "ConfigManagementPolicyController",
           "description": "Policy Controller configuration for the cluster."
@@ -3204,13 +3190,15 @@
             "DEPLOYMENT_STATE_UNSPECIFIED",
             "NOT_INSTALLED",
             "INSTALLED",
-            "ERROR"
+            "ERROR",
+            "PENDING"
           ],
           "enumDescriptions": [
             "Deployment's state cannot be determined",
             "Deployment is not installed",
             "Deployment is installed",
-            "Deployment was attempted to be installed, but has errors"
+            "Deployment was attempted to be installed, but has errors",
+            "Deployment is installing or terminating"
           ],
           "type": "string"
         },
@@ -3454,6 +3442,21 @@
       },
       "type": "object"
     },
+    "DefaultClusterConfig": {
+      "description": "DefaultClusterConfig describes the default cluster configurations to be applied to all clusters born-in-fleet.",
+      "id": "DefaultClusterConfig",
+      "properties": {
+        "binaryAuthorizationConfig": {
+          "$ref": "BinaryAuthorizationConfig",
+          "description": "Optional. Enable/Disable binary authorization features for the cluster."
+        },
+        "securityPostureConfig": {
+          "$ref": "SecurityPostureConfig",
+          "description": "Enable/Disable Security Posture features for the cluster."
+        }
+      },
+      "type": "object"
+    },
     "EdgeCluster": {
       "description": "EdgeCluster contains information specific to Google Edge Clusters.",
       "id": "EdgeCluster",
@@ -3648,6 +3651,10 @@
           "readOnly": true,
           "type": "string"
         },
+        "defaultClusterConfig": {
+          "$ref": "DefaultClusterConfig",
+          "description": "Optional. The default cluster configurations to apply across the fleet."
+        },
         "deleteTime": {
           "description": "Output only. When the Fleet was deleted.",
           "format": "google-datetime",
@@ -4292,24 +4299,6 @@
       },
       "type": "object"
     },
-    "ListNamespacesResponse": {
-      "description": "List of fleet namespaces.",
-      "id": "ListNamespacesResponse",
-      "properties": {
-        "namespaces": {
-          "description": "The list of fleet namespaces",
-          "items": {
-            "$ref": "Namespace"
-          },
-          "type": "array"
-        },
-        "nextPageToken": {
-          "description": "A token to request the next page of resources from the `ListNamespaces` method. The value of an empty string means that there are no more resources to return.",
-          "type": "string"
-        }
-      },
-      "type": "object"
-    },
     "ListOperationsResponse": {
       "description": "The response message for Operations.ListOperations.",
       "id": "ListOperationsResponse",
@@ -4328,24 +4317,6 @@
       },
       "type": "object"
     },
-    "ListRBACRoleBindingsResponse": {
-      "description": "List of RBACRoleBindings.",
-      "id": "ListRBACRoleBindingsResponse",
-      "properties": {
-        "nextPageToken": {
-          "description": "A token to request the next page of resources from the `ListRBACRoleBindings` method. The value of an empty string means that there are no more resources to return.",
-          "type": "string"
-        },
-        "rbacrolebindings": {
-          "description": "The list of RBACRoleBindings",
-          "items": {
-            "$ref": "RBACRoleBinding"
-          },
-          "type": "array"
-        }
-      },
-      "type": "object"
-    },
     "ListScopeNamespacesResponse": {
       "description": "List of fleet namespaces.",
       "id": "ListScopeNamespacesResponse",
@@ -4672,6 +4643,10 @@
           "$ref": "AppDevExperienceFeatureState",
           "description": "Appdevexperience specific state."
         },
+        "clusterupgrade": {
+          "$ref": "ClusterUpgradeMembershipState",
+          "description": "ClusterUpgrade state."
+        },
         "configmanagement": {
           "$ref": "ConfigManagementMembershipState",
           "description": "Config Management-specific state."
@@ -5096,6 +5071,17 @@
       },
       "type": "object"
     },
+    "PolicyBinding": {
+      "description": "Binauthz policy that applies to this cluster.",
+      "id": "PolicyBinding",
+      "properties": {
+        "name": {
+          "description": "The relative resource name of the binauthz platform policy to audit. GKE platform policies have the following format: `projects/{project_number}/platforms/gke/policies/{policy_id}`.",
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
     "PolicyControllerBundleInstallSpec": {
       "description": "BundleInstallSpec is the specification configuration for a single managed bundle.",
       "id": "PolicyControllerBundleInstallSpec",
@@ -5486,7 +5472,7 @@
           "type": "object"
         },
         "name": {
-          "description": "The resource name for the rbacrolebinding `projects/{project}/locations/{location}/namespaces/{namespace}/rbacrolebindings/{rbacrolebinding}` or `projects/{project}/locations/{location}/memberships/{membership}/rbacrolebindings/{rbacrolebinding}`",
+          "description": "The resource name for the rbacrolebinding `projects/{project}/locations/{location}/scopes/{scope}/rbacrolebindings/{rbacrolebinding}` or `projects/{project}/locations/{location}/memberships/{membership}/rbacrolebindings/{rbacrolebinding}`",
           "type": "string"
         },
         "role": {
@@ -5698,6 +5684,43 @@
       },
       "type": "object"
     },
+    "SecurityPostureConfig": {
+      "description": "SecurityPostureConfig defines the flags needed to enable/disable features for the Security Posture API.",
+      "id": "SecurityPostureConfig",
+      "properties": {
+        "mode": {
+          "description": "Sets which mode to use for Security Posture features.",
+          "enum": [
+            "MODE_UNSPECIFIED",
+            "DISABLED",
+            "BASIC"
+          ],
+          "enumDescriptions": [
+            "Default value not specified.",
+            "Disables Security Posture features on the cluster.",
+            "Applies Security Posture features on the cluster."
+          ],
+          "type": "string"
+        },
+        "vulnerabilityMode": {
+          "description": "Sets which mode to use for vulnerability scanning.",
+          "enum": [
+            "VULNERABILITY_MODE_UNSPECIFIED",
+            "VULNERABILITY_DISABLED",
+            "VULNERABILITY_BASIC",
+            "VULNERABILITY_ENTERPRISE"
+          ],
+          "enumDescriptions": [
+            "Default value not specified.",
+            "Disables vulnerability scanning on the cluster.",
+            "Applies basic vulnerability scanning on the cluster.",
+            "Applies the Security Posture's vulnerability on cluster Enterprise level features."
+          ],
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
     "ServiceMeshControlPlaneManagement": {
       "description": "Status of control plane management.",
       "id": "ServiceMeshControlPlaneManagement",