google-api-python-client 2.123.0__py2.py3-none-any.whl → 2.125.0__py2.py3-none-any.whl

googleapiclient/discovery_cache/documents/gkebackup.v1.json

@@ -531,6 +531,31 @@
 "https://www.googleapis.com/auth/cloud-platform"
 ]
 },
+"getBackupIndexDownloadUrl": {
+"description": "Retrieve the link to the backupIndex.",
+"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/backupPlans/{backupPlansId}/backups/{backupsId}:getBackupIndexDownloadUrl",
+"httpMethod": "GET",
+"id": "gkebackup.projects.locations.backupPlans.backups.getBackupIndexDownloadUrl",
+"parameterOrder": [
+"backup"
+],
+"parameters": {
+"backup": {
+"description": "Required. Full name of Backup resource. Format: projects/{project}/locations/{location}/backupPlans/{backup_plan}/backups/{backup}",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/backupPlans/[^/]+/backups/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+backup}:getBackupIndexDownloadUrl",
+"response": {
+"$ref": "GetBackupIndexDownloadUrlResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
 "getIamPolicy": {
 "description": "Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not have a policy set.",
 "flatPath": "v1/projects/{projectsId}/locations/{locationsId}/backupPlans/{backupPlansId}/backups/{backupsId}:getIamPolicy",
@@ -1688,7 +1713,7 @@
 }
 }
 },
-"revision": "20240306",
+"revision": "20240320",
 "rootUrl": "https://gkebackup.googleapis.com/",
 "schemas": {
 "AuditConfig": {
@@ -1740,7 +1765,7 @@
 "type": "object"
 },
 "Backup": {
-"description": "Represents a request to perform a single point-in-time capture of some portion of the state of a GKE cluster, the record of the backup operation itself, and an anchor for the underlying artifacts that comprise the Backup (the config backup and VolumeBackups). Next id: 29",
+"description": "Represents a request to perform a single point-in-time capture of some portion of the state of a GKE cluster, the record of the backup operation itself, and an anchor for the underlying artifacts that comprise the Backup (the config backup and VolumeBackups).",
 "id": "Backup",
 "properties": {
 "allNamespaces": {
@@ -1996,6 +2021,17 @@
 "$ref": "RetentionPolicy",
 "description": "Optional. RetentionPolicy governs lifecycle of Backups created under this plan."
 },
+"rpoRiskLevel": {
+"description": "Output only. A number that represents the current risk level of this BackupPlan from RPO perspective with 1 being no risk and 5 being highest risk.",
+"format": "int32",
+"readOnly": true,
+"type": "integer"
+},
+"rpoRiskReason": {
+"description": "Output only. Human-readable description of why the BackupPlan is in the current rpo_risk_level and action items if any.",
+"readOnly": true,
+"type": "string"
+},
 "state": {
 "description": "Output only. State of the BackupPlan. This State field reflects the various stages a BackupPlan can be in during the Create operation. It will be set to \"DEACTIVATED\" if the BackupPlan is deactivated on an Update",
 "enum": [
@@ -2124,6 +2160,62 @@
 },
 "type": "object"
 },
+"Date": {
+"description": "Represents a whole or partial calendar date, such as a birthday. The time of day and time zone are either specified elsewhere or are insignificant. The date is relative to the Gregorian Calendar. This can represent one of the following: * A full date, with non-zero year, month, and day values. * A month and day, with a zero year (for example, an anniversary). * A year on its own, with a zero month and a zero day. * A year and month, with a zero day (for example, a credit card expiration date). Related types: * google.type.TimeOfDay * google.type.DateTime * google.protobuf.Timestamp",
+"id": "Date",
+"properties": {
+"day": {
+"description": "Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.",
+"format": "int32",
+"type": "integer"
+},
+"month": {
+"description": "Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.",
+"format": "int32",
+"type": "integer"
+},
+"year": {
+"description": "Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.",
+"format": "int32",
+"type": "integer"
+}
+},
+"type": "object"
+},
+"DayOfWeekList": {
+"description": "Holds repeated DaysOfWeek values as a container.",
+"id": "DayOfWeekList",
+"properties": {
+"daysOfWeek": {
+"description": "Optional. A list of days of week.",
+"items": {
+"enum": [
+"DAY_OF_WEEK_UNSPECIFIED",
+"MONDAY",
+"TUESDAY",
+"WEDNESDAY",
+"THURSDAY",
+"FRIDAY",
+"SATURDAY",
+"SUNDAY"
+],
+"enumDescriptions": [
+"The day of the week is unspecified.",
+"Monday",
+"Tuesday",
+"Wednesday",
+"Thursday",
+"Friday",
+"Saturday",
+"Sunday"
+],
+"type": "string"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
 "Empty": {
 "description": "A generic empty message that you can re-use to avoid defining duplicated empty messages in your APIs. A typical example is to use it as the request or the response type of an API method. For instance: service Foo { rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty); }",
 "id": "Empty",
@@ -2141,6 +2233,34 @@
 },
 "type": "object"
 },
+"ExclusionWindow": {
+"description": "Defines a time window during which no backup should happen. All time and date are in UTC.",
+"id": "ExclusionWindow",
+"properties": {
+"daily": {
+"description": "The exclusion window occurs every day if set to \"True\". Specifying this field to \"False\" is an error.",
+"type": "boolean"
+},
+"daysOfWeek": {
+"$ref": "DayOfWeekList",
+"description": "The exclusion window occurs on these days of each week in UTC."
+},
+"duration": {
+"description": "Required. Specifies duration of the window. Restrictions for duration based on the recurrence type to allow some time for backup to happen: - single_occurrence_date: no restriction, but UI may warn about this when duration >= target RPO - daily window: duration < 24 hours - weekly window: - days of week includes all seven days of a week: duration < 24 hours - all other weekly window: duration < 168 hours (i.e., 24 * 7 hours)",
+"format": "google-duration",
+"type": "string"
+},
+"singleOccurrenceDate": {
+"$ref": "Date",
+"description": "No recurrence. The exclusion window occurs only once and on this date in UTC."
+},
+"startTime": {
+"$ref": "TimeOfDay",
+"description": "Required. Specifies the start time of the window using time of the day in UTC."
+}
+},
+"type": "object"
+},
 "Expr": {
 "description": "Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: \"Summary size limit\" description: \"Determines if a summary is less than 100 chars\" expression: \"document.summary.size() < 100\" Example (Equality): title: \"Requestor is owner\" description: \"Determines if requestor is the document owner\" expression: \"document.owner == request.auth.claims.email\" Example (Logic): title: \"Public documents\" description: \"Determine whether the document should be publicly visible\" expression: \"document.type != 'private' && document.type != 'internal'\" Example (Data Manipulation): title: \"Notification string\" description: \"Create a notification string with a timestamp.\" expression: \"'New message received at ' + string(document.create_time)\" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.",
 "id": "Expr",
@@ -2164,6 +2284,16 @@
 },
 "type": "object"
 },
+"GetBackupIndexDownloadUrlResponse": {
+"description": "Response message for GetBackupIndexDownloadUrl.",
+"id": "GetBackupIndexDownloadUrlResponse",
+"properties": {
+"signedUrl": {
+"type": "string"
+}
+},
+"type": "object"
+},
 "GoogleLongrunningCancelOperationRequest": {
 "description": "The request message for Operations.CancelOperation.",
 "id": "GoogleLongrunningCancelOperationRequest",
@@ -2590,7 +2720,7 @@
 "type": "object"
 },
 "Restore": {
-"description": "Represents both a request to Restore some portion of a Backup into a target GKE cluster and a record of the restore operation itself. Next id: 20",
+"description": "Represents both a request to Restore some portion of a Backup into a target GKE cluster and a record of the restore operation itself.",
 "id": "Restore",
 "properties": {
 "backup": {
@@ -2705,7 +2835,7 @@
 "type": "object"
 },
 "RestoreConfig": {
-"description": "Configuration of a restore. Next id: 14",
+"description": "Configuration of a restore.",
 "id": "RestoreConfig",
 "properties": {
 "allNamespaces": {
@@ -2794,7 +2924,7 @@
 "type": "object"
 },
 "RestorePlan": {
-"description": "The configuration of a potential series of Restore operations to be performed against Backups belong to a particular BackupPlan. Next id: 13",
+"description": "The configuration of a potential series of Restore operations to be performed against Backups belong to a particular BackupPlan.",
 "id": "RestorePlan",
 "properties": {
 "backupPlan": {
@@ -2895,6 +3025,25 @@
 },
 "type": "object"
 },
+"RpoConfig": {
+"description": "Defines RPO scheduling configuration for automatically creating Backups via this BackupPlan.",
+"id": "RpoConfig",
+"properties": {
+"exclusionWindows": {
+"description": "Optional. User specified time windows during which backup can NOT happen for this BackupPlan - backups should start and finish outside of any given exclusion window. Note: backup jobs will be scheduled to start and finish outside the duration of the window as much as possible, but running jobs will not get canceled when it runs into the window. All the time and date values in exclusion_windows entry in the API are in UTC. We only allow <=1 recurrence (daily or weekly) exclusion window for a BackupPlan while no restriction on number of single occurrence windows.",
+"items": {
+"$ref": "ExclusionWindow"
+},
+"type": "array"
+},
+"targetRpoMinutes": {
+"description": "Required. Defines the target RPO for the BackupPlan in minutes, which means the target maximum data loss in time that is acceptable for this BackupPlan. This must be at least 60, i.e., 1 hour, and at most 86400, i.e., 60 days.",
+"format": "int32",
+"type": "integer"
+}
+},
+"type": "object"
+},
 "Schedule": {
 "description": "Defines scheduling parameters for automatically creating Backups via this BackupPlan.",
 "id": "Schedule",
@@ -2903,9 +3052,19 @@
 "description": "Optional. A standard [cron](https://wikipedia.com/wiki/cron) string that defines a repeating schedule for creating Backups via this BackupPlan. This is mutually exclusive with the rpo_config field since at most one schedule can be defined for a BackupPlan. If this is defined, then backup_retain_days must also be defined. Default (empty): no automatic backup creation will occur.",
 "type": "string"
 },
+"nextScheduledBackupTime": {
+"description": "Output only. Start time of next scheduled backup under this BackupPlan by either cron_schedule or rpo config.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+},
 "paused": {
 "description": "Optional. This flag denotes whether automatic Backup creation is paused for this BackupPlan. Default: False",
 "type": "boolean"
+},
+"rpoConfig": {
+"$ref": "RpoConfig",
+"description": "Optional. Defines the RPO schedule configuration for this BackupPlan. This is mutually exclusive with the cron_schedule field since at most one schedule can be defined for a BackupPLan. If this is defined, then backup_retain_days must also be defined. Default (empty): no automatic backup creation will occur."
 }
 },
 "type": "object"
@@ -2987,6 +3146,33 @@
 },
 "type": "object"
 },
+"TimeOfDay": {
+"description": "Represents a time of day. The date and time zone are either not significant or are specified elsewhere. An API may choose to allow leap seconds. Related types are google.type.Date and `google.protobuf.Timestamp`.",
+"id": "TimeOfDay",
+"properties": {
+"hours": {
+"description": "Hours of day in 24 hour format. Should be from 0 to 23. An API may choose to allow the value \"24:00:00\" for scenarios like business closing time.",
+"format": "int32",
+"type": "integer"
+},
+"minutes": {
+"description": "Minutes of hour of day. Must be from 0 to 59.",
+"format": "int32",
+"type": "integer"
+},
+"nanos": {
+"description": "Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.",
+"format": "int32",
+"type": "integer"
+},
+"seconds": {
+"description": "Seconds of minutes of the time. Must normally be from 0 to 59. An API may allow the value 60 if it allows leap-seconds.",
+"format": "int32",
+"type": "integer"
+}
+},
+"type": "object"
+},
 "TransformationRule": {
 "description": "A transformation rule to be applied against Kubernetes resources as they are selected for restoration from a Backup. A rule contains both filtering logic (which resources are subject to transform) and transformation logic.",
 "id": "TransformationRule",
@@ -3051,7 +3237,7 @@
 "type": "object"
 },
 "VolumeBackup": {
-"description": "Represents the backup of a specific persistent volume as a component of a Backup - both the record of the operation and a pointer to the underlying storage-specific artifacts. Next id: 14",
+"description": "Represents the backup of a specific persistent volume as a component of a Backup - both the record of the operation and a pointer to the underlying storage-specific artifacts.",
 "id": "VolumeBackup",
 "properties": {
 "completeTime": {
@@ -3154,7 +3340,7 @@
 "type": "object"
 },
 "VolumeRestore": {
-"description": "Represents the operation of restoring a volume from a VolumeBackup. Next id: 13",
+"description": "Represents the operation of restoring a volume from a VolumeBackup.",
 "id": "VolumeRestore",
 "properties": {
 "completeTime": {

googleapiclient/discovery_cache/documents/gkehub.v1.json

@@ -1421,6 +1421,83 @@
 "https://www.googleapis.com/auth/cloud-platform"
 ]
 },
+"listMemberships": {
+"description": "Lists Memberships bound to a Scope. The response includes relevant Memberships from all regions.",
+"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/scopes/{scopesId}:listMemberships",
+"httpMethod": "GET",
+"id": "gkehub.projects.locations.scopes.listMemberships",
+"parameterOrder": [
+"scopeName"
+],
+"parameters": {
+"filter": {
+"description": "Optional. Lists Memberships that match the filter expression, following the syntax outlined in https://google.aip.dev/160. Currently, filtering can be done only based on Memberships's `name`, `labels`, `create_time`, `update_time`, and `unique_id`.",
+"location": "query",
+"type": "string"
+},
+"pageSize": {
+"description": "Optional. When requesting a 'page' of resources, `page_size` specifies number of resources to return. If unspecified or set to 0, all resources will be returned. Pagination is currently not supported; therefore, setting this field does not have any impact for now.",
+"format": "int32",
+"location": "query",
+"type": "integer"
+},
+"pageToken": {
+"description": "Optional. Token returned by previous call to `ListBoundMemberships` which specifies the position in the list from where to continue listing the resources.",
+"location": "query",
+"type": "string"
+},
+"scopeName": {
+"description": "Required. Name of the Scope, in the format `projects/*/locations/global/scopes/*`, to which the Memberships are bound.",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/scopes/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+scopeName}:listMemberships",
+"response": {
+"$ref": "ListBoundMembershipsResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"listPermitted": {
+"description": "Lists permitted Scopes.",
+"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/scopes:listPermitted",
+"httpMethod": "GET",
+"id": "gkehub.projects.locations.scopes.listPermitted",
+"parameterOrder": [
+"parent"
+],
+"parameters": {
+"pageSize": {
+"description": "Optional. When requesting a 'page' of resources, `page_size` specifies number of resources to return. If unspecified or set to 0, all resources will be returned.",
+"format": "int32",
+"location": "query",
+"type": "integer"
+},
+"pageToken": {
+"description": "Optional. Token returned by previous call to `ListPermittedScopes` which specifies the position in the list from where to continue listing the resources.",
+"location": "query",
+"type": "string"
+},
+"parent": {
+"description": "Required. The parent (project and location) where the Scope will be listed. Specified in the format `projects/*/locations/*`.",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+parent}/scopes:listPermitted",
+"response": {
+"$ref": "ListPermittedScopesResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
 "patch": {
 "description": "Updates a scopes.",
 "flatPath": "v1/projects/{projectsId}/locations/{locationsId}/scopes/{scopesId}",
@@ -1834,7 +1911,7 @@
 }
 }
 },
-"revision": "20240307",
+"revision": "20240322",
 "rootUrl": "https://gkehub.googleapis.com/",
 "schemas": {
 "AppDevExperienceFeatureSpec": {
@@ -3722,6 +3799,10 @@
 "$ref": "IdentityServiceGoogleConfig",
 "description": "GoogleConfig specific configuration."
 },
+"ldapConfig": {
+"$ref": "IdentityServiceLdapConfig",
+"description": "LDAP specific configuration."
+},
 "name": {
 "description": "Identifier for auth config.",
 "type": "string"
@@ -3789,6 +3870,48 @@
 },
 "type": "object"
 },
+"IdentityServiceGroupConfig": {
+"description": "Contains the properties for locating and authenticating groups in the directory.",
+"id": "IdentityServiceGroupConfig",
+"properties": {
+"baseDn": {
+"description": "Required. The location of the subtree in the LDAP directory to search for group entries.",
+"type": "string"
+},
+"filter": {
+"description": "Optional. Optional filter to be used when searching for groups a user belongs to. This can be used to explicitly match only certain groups in order to reduce the amount of groups returned for each user. This defaults to \"(objectClass=Group)\".",
+"type": "string"
+},
+"idAttribute": {
+"description": "Optional. The identifying name of each group a user belongs to. For example, if this is set to \"distinguishedName\" then RBACs and other group expectations should be written as full DNs. This defaults to \"distinguishedName\".",
+"type": "string"
+}
+},
+"type": "object"
+},
+"IdentityServiceLdapConfig": {
+"description": "Configuration for the LDAP Auth flow.",
+"id": "IdentityServiceLdapConfig",
+"properties": {
+"group": {
+"$ref": "IdentityServiceGroupConfig",
+"description": "Optional. Contains the properties for locating and authenticating groups in the directory."
+},
+"server": {
+"$ref": "IdentityServiceServerConfig",
+"description": "Required. Server settings for the external LDAP server."
+},
+"serviceAccount": {
+"$ref": "IdentityServiceServiceAccountConfig",
+"description": "Required. Contains the credentials of the service account which is authorized to perform the LDAP search in the directory. The credentials can be supplied by the combination of the DN and password or the client certificate."
+},
+"user": {
+"$ref": "IdentityServiceUserConfig",
+"description": "Required. Defines where users exist in the LDAP directory."
+}
+},
+"type": "object"
+},
 "IdentityServiceMembershipSpec": {
 "description": "**Anthos Identity Service**: Configuration for a single Membership.",
 "id": "IdentityServiceMembershipSpec",
@@ -3946,6 +4069,81 @@
 },
 "type": "object"
 },
+"IdentityServiceServerConfig": {
+"description": "Server settings for the external LDAP server.",
+"id": "IdentityServiceServerConfig",
+"properties": {
+"certificateAuthorityData": {
+"description": "Optional. Contains a Base64 encoded, PEM formatted certificate authority certificate for the LDAP server. This must be provided for the \"ldaps\" and \"startTLS\" connections.",
+"format": "byte",
+"type": "string"
+},
+"connectionType": {
+"description": "Optional. Defines the connection type to communicate with the LDAP server. If `starttls` or `ldaps` is specified, the certificate_authority_data should not be empty.",
+"type": "string"
+},
+"host": {
+"description": "Required. Defines the hostname or IP of the LDAP server. Port is optional and will default to 389, if unspecified. For example, \"ldap.server.example\" or \"10.10.10.10:389\".",
+"type": "string"
+}
+},
+"type": "object"
+},
+"IdentityServiceServiceAccountConfig": {
+"description": "Contains the credentials of the service account which is authorized to perform the LDAP search in the directory. The credentials can be supplied by the combination of the DN and password or the client certificate.",
+"id": "IdentityServiceServiceAccountConfig",
+"properties": {
+"simpleBindCredentials": {
+"$ref": "IdentityServiceSimpleBindCredentials",
+"description": "Credentials for basic auth."
+}
+},
+"type": "object"
+},
+"IdentityServiceSimpleBindCredentials": {
+"description": "The structure holds the LDAP simple binding credential.",
+"id": "IdentityServiceSimpleBindCredentials",
+"properties": {
+"dn": {
+"description": "Required. The distinguished name(DN) of the service account object/user.",
+"type": "string"
+},
+"encryptedPassword": {
+"description": "Output only. The encrypted password of the service account object/user.",
+"format": "byte",
+"readOnly": true,
+"type": "string"
+},
+"password": {
+"description": "Required. Input only. The password of the service account object/user.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"IdentityServiceUserConfig": {
+"description": "Defines where users exist in the LDAP directory.",
+"id": "IdentityServiceUserConfig",
+"properties": {
+"baseDn": {
+"description": "Required. The location of the subtree in the LDAP directory to search for user entries.",
+"type": "string"
+},
+"filter": {
+"description": "Optional. Filter to apply when searching for the user. This can be used to further restrict the user accounts which are allowed to login. This defaults to \"(objectClass=User)\".",
+"type": "string"
+},
+"idAttribute": {
+"description": "Optional. Determines which attribute to use as the user's identity after they are authenticated. This is distinct from the loginAttribute field to allow users to login with a username, but then have their actual identifier be an email address or full Distinguished Name (DN). For example, setting loginAttribute to \"sAMAccountName\" and identifierAttribute to \"userPrincipalName\" would allow a user to login as \"bsmith\", but actual RBAC policies for the user would be written as \"bsmith@example.com\". Using \"userPrincipalName\" is recommended since this will be unique for each user. This defaults to \"userPrincipalName\".",
+"type": "string"
+},
+"loginAttribute": {
+"description": "Optional. The name of the attribute which matches against the input username. This is used to find the user in the LDAP database e.g. \"(=)\" and is combined with the optional filter field. This defaults to \"userPrincipalName\".",
+"type": "string"
+}
+},
+"type": "object"
+},
 "KubernetesMetadata": {
 "description": "KubernetesMetadata provides informational metadata for Memberships representing Kubernetes clusters.",
 "id": "KubernetesMetadata",
@@ -4018,6 +4216,31 @@
 },
 "type": "object"
 },
+"ListBoundMembershipsResponse": {
+"description": "List of Memberships bound to a Scope.",
+"id": "ListBoundMembershipsResponse",
+"properties": {
+"memberships": {
+"description": "The list of Memberships bound to the given Scope.",
+"items": {
+"$ref": "Membership"
+},
+"type": "array"
+},
+"nextPageToken": {
+"description": "A token to request the next page of resources from the `ListBoundMemberships` method. The value of an empty string means that there are no more resources to return.",
+"type": "string"
+},
+"unreachable": {
+"description": "List of locations that could not be reached while fetching this list.",
+"items": {
+"type": "string"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
 "ListFeaturesResponse": {
 "description": "Response message for the `GkeHub.ListFeatures` method.",
 "id": "ListFeaturesResponse",
@@ -4133,6 +4356,24 @@
 },
 "type": "object"
 },
+"ListPermittedScopesResponse": {
+"description": "List of permitted Scopes.",
+"id": "ListPermittedScopesResponse",
+"properties": {
+"nextPageToken": {
+"description": "A token to request the next page of resources from the `ListPermittedScopes` method. The value of an empty string means that there are no more resources to return.",
+"type": "string"
+},
+"scopes": {
+"description": "The list of permitted Scopes",
+"items": {
+"$ref": "Scope"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
 "ListScopeNamespacesResponse": {
 "description": "List of fleet namespaces.",
 "id": "ListScopeNamespacesResponse",
@@ -5469,6 +5710,61 @@
 },
 "type": "object"
 },
+"ServiceMeshCondition": {
+"description": "Condition being reported.",
+"id": "ServiceMeshCondition",
+"properties": {
+"code": {
+"description": "Unique identifier of the condition which describes the condition recognizable to the user.",
+"enum": [
+"CODE_UNSPECIFIED",
+"MESH_IAM_PERMISSION_DENIED",
+"CNI_CONFIG_UNSUPPORTED",
+"GKE_SANDBOX_UNSUPPORTED",
+"NODEPOOL_WORKLOAD_IDENTITY_FEDERATION_REQUIRED",
+"CNI_INSTALLATION_FAILED",
+"CNI_POD_UNSCHEDULABLE",
+"UNSUPPORTED_MULTIPLE_CONTROL_PLANES"
+],
+"enumDescriptions": [
+"Default Unspecified code",
+"Mesh IAM permission denied error code",
+"CNI config unsupported error code",
+"GKE sandbox unsupported error code",
+"Nodepool workload identity federation required error code",
+"CNI installation failed error code",
+"CNI pod unschedulable error code",
+"Multiple control planes unsupported error code"
+],
+"type": "string"
+},
+"details": {
+"description": "A short summary about the issue.",
+"type": "string"
+},
+"documentationLink": {
+"description": "Links contains actionable information.",
+"type": "string"
+},
+"severity": {
+"description": "Severity level of the condition.",
+"enum": [
+"SEVERITY_UNSPECIFIED",
+"ERROR",
+"WARNING",
+"INFO"
+],
+"enumDescriptions": [
+"Unspecified severity",
+"Indicates an issue that prevents the mesh from operating correctly",
+"Indicates a setting is likely wrong, but the mesh is still able to operate",
+"An informational message, not requiring any action"
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "ServiceMeshControlPlaneManagement": {
 "description": "Status of control plane management.",
 "id": "ServiceMeshControlPlaneManagement",
@@ -5585,6 +5881,14 @@
 "description": "**Service Mesh**: State for a single Membership, as analyzed by the Service Mesh Hub Controller.",
 "id": "ServiceMeshMembershipState",
 "properties": {
+"conditions": {
+"description": "Output only. List of condition reporting membership statues",
+"items": {
+"$ref": "ServiceMeshCondition"
+},
+"readOnly": true,
+"type": "array"
+},
 "controlPlaneManagement": {
 "$ref": "ServiceMeshControlPlaneManagement",
 "description": "Output only. Status of control plane management",