google-api-python-client 2.158.0__py2.py3-none-any.whl → 2.160.0__py2.py3-none-any.whl

googleapiclient/discovery_cache/documents/gkehub.v1.json

@@ -2111,7 +2111,7 @@
 }
 }
 },
-"revision": "20241206",
+"revision": "20250113",
 "rootUrl": "https://gkehub.googleapis.com/",
 "schemas": {
 "AppDevExperienceFeatureSpec": {
@@ -2645,38 +2645,33 @@
 "description": "Configuration for Config Sync",
 "id": "ConfigManagementConfigSync",
 "properties": {
-"allowVerticalScale": {
-"deprecated": true,
-"description": "Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.",
-"type": "boolean"
-},
 "enabled": {
-"description": "Enables the installation of ConfigSync. If set to true, ConfigSync resources will be created and the other ConfigSync fields will be applied if exist. If set to false, all other ConfigSync fields will be ignored, ConfigSync resources will be deleted. If omitted, ConfigSync resources will be managed depends on the presence of the git or oci field.",
+"description": "Optional. Enables the installation of ConfigSync. If set to true, ConfigSync resources will be created and the other ConfigSync fields will be applied if exist. If set to false, all other ConfigSync fields will be ignored, ConfigSync resources will be deleted. If omitted, ConfigSync resources will be managed depends on the presence of the git or oci field.",
 "type": "boolean"
 },
 "git": {
 "$ref": "ConfigManagementGitConfig",
-"description": "Git repo configuration for the cluster."
+"description": "Optional. Git repo configuration for the cluster."
 },
 "metricsGcpServiceAccountEmail": {
 "deprecated": true,
-"description": "The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring and Cloud Monarch when Workload Identity is enabled. The GSA should have the Monitoring Metric Writer (roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount `default` in the namespace `config-management-monitoring` should be bound to the GSA. Deprecated: If Workload Identity Federation for GKE is enabled, Google Cloud Service Account is no longer needed for exporting Config Sync metrics: https://cloud.google.com/kubernetes-engine/enterprise/config-sync/docs/how-to/monitor-config-sync-cloud-monitoring#custom-monitoring.",
+"description": "Optional. The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring and Cloud Monarch when Workload Identity is enabled. The GSA should have the Monitoring Metric Writer (roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount `default` in the namespace `config-management-monitoring` should be bound to the GSA. Deprecated: If Workload Identity Federation for GKE is enabled, Google Cloud Service Account is no longer needed for exporting Config Sync metrics: https://cloud.google.com/kubernetes-engine/enterprise/config-sync/docs/how-to/monitor-config-sync-cloud-monitoring#custom-monitoring.",
 "type": "string"
 },
 "oci": {
 "$ref": "ConfigManagementOciConfig",
-"description": "OCI repo configuration for the cluster"
+"description": "Optional. OCI repo configuration for the cluster"
 },
 "preventDrift": {
-"description": "Set to true to enable the Config Sync admission webhook to prevent drifts. If set to `false`, disables the Config Sync admission webhook and does not prevent drifts.",
+"description": "Optional. Set to true to enable the Config Sync admission webhook to prevent drifts. If set to `false`, disables the Config Sync admission webhook and does not prevent drifts.",
 "type": "boolean"
 },
 "sourceFormat": {
-"description": "Specifies whether the Config Sync Repo is in \"hierarchical\" or \"unstructured\" mode.",
+"description": "Optional. Specifies whether the Config Sync Repo is in \"hierarchical\" or \"unstructured\" mode.",
 "type": "string"
 },
 "stopSyncing": {
-"description": "Set to true to stop syncing configs for a single cluster. Default to false.",
+"description": "Optional. Set to true to stop syncing configs for a single cluster. Default to false.",
 "type": "boolean"
 }
 },
@@ -2867,7 +2862,7 @@
 "id": "ConfigManagementConfigSyncState",
 "properties": {
 "clusterLevelStopSyncingState": {
-"description": "Whether syncing resources to the cluster is stopped at the cluster level.",
+"description": "Output only. Whether syncing resources to the cluster is stopped at the cluster level.",
 "enum": [
 "STOP_SYNCING_STATE_UNSPECIFIED",
 "NOT_STOPPED",
@@ -2880,6 +2875,7 @@
 "Some reconcilers stop syncing resources to the cluster, while others are still syncing.",
 "Syncing resources to the cluster is stopped at the cluster level."
 ],
+"readOnly": true,
 "type": "string"
 },
 "crCount": {
@@ -2890,17 +2886,19 @@
 },
 "deploymentState": {
 "$ref": "ConfigManagementConfigSyncDeploymentState",
-"description": "Information about the deployment of ConfigSync, including the version of the various Pods deployed"
+"description": "Output only. Information about the deployment of ConfigSync, including the version of the various Pods deployed",
+"readOnly": true
 },
 "errors": {
-"description": "Errors pertaining to the installation of Config Sync.",
+"description": "Output only. Errors pertaining to the installation of Config Sync.",
 "items": {
 "$ref": "ConfigManagementConfigSyncError"
 },
+"readOnly": true,
 "type": "array"
 },
 "reposyncCrd": {
-"description": "The state of the Reposync CRD",
+"description": "Output only. The state of the Reposync CRD",
 "enum": [
 "CRD_STATE_UNSPECIFIED",
 "NOT_INSTALLED",
@@ -2915,10 +2913,11 @@
 "CRD is terminating (i.e., it has been deleted and is cleaning up)",
 "CRD is installing"
 ],
+"readOnly": true,
 "type": "string"
 },
 "rootsyncCrd": {
-"description": "The state of the RootSync CRD",
+"description": "Output only. The state of the RootSync CRD",
 "enum": [
 "CRD_STATE_UNSPECIFIED",
 "NOT_INSTALLED",
@@ -2933,10 +2932,11 @@
 "CRD is terminating (i.e., it has been deleted and is cleaning up)",
 "CRD is installing"
 ],
+"readOnly": true,
 "type": "string"
 },
 "state": {
-"description": "The state of CS This field summarizes the other fields in this message.",
+"description": "Output only. The state of CS This field summarizes the other fields in this message.",
 "enum": [
 "STATE_UNSPECIFIED",
 "CONFIG_SYNC_NOT_INSTALLED",
@@ -2951,15 +2951,18 @@
 "CS encounters errors.",
 "CS is installing or terminating."
 ],
+"readOnly": true,
 "type": "string"
 },
 "syncState": {
 "$ref": "ConfigManagementSyncState",
-"description": "The state of ConfigSync's process to sync configs to a cluster"
+"description": "Output only. The state of ConfigSync's process to sync configs to a cluster",
+"readOnly": true
 },
 "version": {
 "$ref": "ConfigManagementConfigSyncVersion",
-"description": "The version of ConfigSync deployed"
+"description": "Output only. The version of ConfigSync deployed",
+"readOnly": true
 }
 },
 "type": "object"
@@ -3096,35 +3099,35 @@
 "id": "ConfigManagementGitConfig",
 "properties": {
 "gcpServiceAccountEmail": {
-"description": "The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.",
+"description": "Optional. The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.",
 "type": "string"
 },
 "httpsProxy": {
-"description": "URL for the HTTPS proxy to be used when communicating with the Git repo.",
+"description": "Optional. URL for the HTTPS proxy to be used when communicating with the Git repo.",
 "type": "string"
 },
 "policyDir": {
-"description": "The path within the Git repository that represents the top level of the repo to sync. Default: the root directory of the repository.",
+"description": "Optional. The path within the Git repository that represents the top level of the repo to sync. Default: the root directory of the repository.",
 "type": "string"
 },
 "secretType": {
-"description": "Type of secret configured for access to the Git repo. Must be one of ssh, cookiefile, gcenode, token, gcpserviceaccount or none. The validation of this is case-sensitive. Required.",
+"description": "Required. Type of secret configured for access to the Git repo. Must be one of ssh, cookiefile, gcenode, token, gcpserviceaccount, githubapp or none. The validation of this is case-sensitive.",
 "type": "string"
 },
 "syncBranch": {
-"description": "The branch of the repository to sync from. Default: master.",
+"description": "Optional. The branch of the repository to sync from. Default: master.",
 "type": "string"
 },
 "syncRepo": {
-"description": "The URL of the Git repository to use as the source of truth.",
+"description": "Required. The URL of the Git repository to use as the source of truth.",
 "type": "string"
 },
 "syncRev": {
-"description": "Git revision (tag or hash) to check out. Default HEAD.",
+"description": "Optional. Git revision (tag or hash) to check out. Default HEAD.",
 "type": "string"
 },
 "syncWaitSecs": {
-"description": "Period in seconds between consecutive syncs. Default: 15.",
+"description": "Optional. Period in seconds between consecutive syncs. Default: 15.",
 "format": "int64",
 "type": "string"
 }
@@ -3258,19 +3261,20 @@
 "id": "ConfigManagementMembershipSpec",
 "properties": {
 "cluster": {
-"description": "The user-specified cluster name used by Config Sync cluster-name-selector annotation or ClusterSelector, for applying configs to only a subset of clusters. Omit this field if the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector. Set this field if a name different from the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector.",
+"description": "Optional. The user-specified cluster name used by Config Sync cluster-name-selector annotation or ClusterSelector, for applying configs to only a subset of clusters. Omit this field if the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector. Set this field if a name different from the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector.",
 "type": "string"
 },
 "configSync": {
 "$ref": "ConfigManagementConfigSync",
-"description": "Config Sync configuration for the cluster."
+"description": "Optional. Config Sync configuration for the cluster."
 },
 "hierarchyController": {
 "$ref": "ConfigManagementHierarchyControllerConfig",
-"description": "Hierarchy Controller configuration for the cluster. Deprecated: Configuring Hierarchy Controller through the configmanagement feature is no longer recommended. Use https://github.com/kubernetes-sigs/hierarchical-namespaces instead."
+"deprecated": true,
+"description": "Optional. Hierarchy Controller configuration for the cluster. Deprecated: Configuring Hierarchy Controller through the configmanagement feature is no longer recommended. Use https://github.com/kubernetes-sigs/hierarchical-namespaces instead."
 },
 "management": {
-"description": "Enables automatic Feature management.",
+"description": "Optional. Enables automatic Feature management.",
 "enum": [
 "MANAGEMENT_UNSPECIFIED",
 "MANAGEMENT_AUTOMATIC",
@@ -3285,10 +3289,11 @@
 },
 "policyController": {
 "$ref": "ConfigManagementPolicyController",
-"description": "Policy Controller configuration for the cluster. Deprecated: Configuring Policy Controller through the configmanagement feature is no longer recommended. Use the policycontroller feature instead."
+"deprecated": true,
+"description": "Optional. Policy Controller configuration for the cluster. Deprecated: Configuring Policy Controller through the configmanagement feature is no longer recommended. Use the policycontroller feature instead."
 },
 "version": {
-"description": "Version of ACM installed.",
+"description": "Optional. Version of ACM installed.",
 "type": "string"
 }
 },
@@ -3299,28 +3304,34 @@
 "id": "ConfigManagementMembershipState",
 "properties": {
 "clusterName": {
-"description": "This field is set to the `cluster_name` field of the Membership Spec if it is not empty. Otherwise, it is set to the cluster's fleet membership name.",
+"description": "Output only. This field is set to the `cluster_name` field of the Membership Spec if it is not empty. Otherwise, it is set to the cluster's fleet membership name.",
+"readOnly": true,
 "type": "string"
 },
 "configSyncState": {
 "$ref": "ConfigManagementConfigSyncState",
-"description": "Current sync status"
+"description": "Output only. Current sync status",
+"readOnly": true
 },
 "hierarchyControllerState": {
 "$ref": "ConfigManagementHierarchyControllerState",
-"description": "Hierarchy Controller status"
+"description": "Output only. Hierarchy Controller status",
+"readOnly": true
 },
 "membershipSpec": {
 "$ref": "ConfigManagementMembershipSpec",
-"description": "Membership configuration in the cluster. This represents the actual state in the cluster, while the MembershipSpec in the FeatureSpec represents the intended state"
+"description": "Output only. Membership configuration in the cluster. This represents the actual state in the cluster, while the MembershipSpec in the FeatureSpec represents the intended state",
+"readOnly": true
 },
 "operatorState": {
 "$ref": "ConfigManagementOperatorState",
-"description": "Current install status of ACM's Operator"
+"description": "Output only. Current install status of ACM's Operator",
+"readOnly": true
 },
 "policyControllerState": {
 "$ref": "ConfigManagementPolicyControllerState",
-"description": "PolicyController status"
+"description": "Output only. PolicyController status",
+"readOnly": true
 }
 },
 "type": "object"
@@ -3330,23 +3341,23 @@
 "id": "ConfigManagementOciConfig",
 "properties": {
 "gcpServiceAccountEmail": {
-"description": "The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.",
+"description": "Optional. The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.",
 "type": "string"
 },
 "policyDir": {
-"description": "The absolute path of the directory that contains the local resources. Default: the root directory of the image.",
+"description": "Optional. The absolute path of the directory that contains the local resources. Default: the root directory of the image.",
 "type": "string"
 },
 "secretType": {
-"description": "Type of secret configured for access to the Git repo.",
+"description": "Required. Type of secret configured for access to the OCI repo. Must be one of gcenode, gcpserviceaccount, k8sserviceaccount or none. The validation of this is case-sensitive.",
 "type": "string"
 },
 "syncRepo": {
-"description": "The OCI image repository URL for the package to sync from. e.g. `LOCATION-docker.pkg.dev/PROJECT_ID/REPOSITORY_NAME/PACKAGE_NAME`.",
+"description": "Required. The OCI image repository URL for the package to sync from. e.g. `LOCATION-docker.pkg.dev/PROJECT_ID/REPOSITORY_NAME/PACKAGE_NAME`.",
 "type": "string"
 },
 "syncWaitSecs": {
-"description": "Period in seconds between consecutive syncs. Default: 15.",
+"description": "Optional. Period in seconds between consecutive syncs. Default: 15.",
 "format": "int64",
 "type": "string"
 }

googleapiclient/discovery_cache/documents/gkehub.v1alpha.json

@@ -2255,7 +2255,7 @@
 }
 }
 },
-"revision": "20241206",
+"revision": "20250113",
 "rootUrl": "https://gkehub.googleapis.com/",
 "schemas": {
 "AnthosObservabilityFeatureSpec": {
@@ -2990,38 +2990,33 @@
 "description": "Configuration for Config Sync",
 "id": "ConfigManagementConfigSync",
 "properties": {
-"allowVerticalScale": {
-"deprecated": true,
-"description": "Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.",
-"type": "boolean"
-},
 "enabled": {
-"description": "Enables the installation of ConfigSync. If set to true, ConfigSync resources will be created and the other ConfigSync fields will be applied if exist. If set to false, all other ConfigSync fields will be ignored, ConfigSync resources will be deleted. If omitted, ConfigSync resources will be managed depends on the presence of the git or oci field.",
+"description": "Optional. Enables the installation of ConfigSync. If set to true, ConfigSync resources will be created and the other ConfigSync fields will be applied if exist. If set to false, all other ConfigSync fields will be ignored, ConfigSync resources will be deleted. If omitted, ConfigSync resources will be managed depends on the presence of the git or oci field.",
 "type": "boolean"
 },
 "git": {
 "$ref": "ConfigManagementGitConfig",
-"description": "Git repo configuration for the cluster."
+"description": "Optional. Git repo configuration for the cluster."
 },
 "metricsGcpServiceAccountEmail": {
 "deprecated": true,
-"description": "The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring and Cloud Monarch when Workload Identity is enabled. The GSA should have the Monitoring Metric Writer (roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount `default` in the namespace `config-management-monitoring` should be bound to the GSA. Deprecated: If Workload Identity Federation for GKE is enabled, Google Cloud Service Account is no longer needed for exporting Config Sync metrics: https://cloud.google.com/kubernetes-engine/enterprise/config-sync/docs/how-to/monitor-config-sync-cloud-monitoring#custom-monitoring.",
+"description": "Optional. The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring and Cloud Monarch when Workload Identity is enabled. The GSA should have the Monitoring Metric Writer (roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount `default` in the namespace `config-management-monitoring` should be bound to the GSA. Deprecated: If Workload Identity Federation for GKE is enabled, Google Cloud Service Account is no longer needed for exporting Config Sync metrics: https://cloud.google.com/kubernetes-engine/enterprise/config-sync/docs/how-to/monitor-config-sync-cloud-monitoring#custom-monitoring.",
 "type": "string"
 },
 "oci": {
 "$ref": "ConfigManagementOciConfig",
-"description": "OCI repo configuration for the cluster"
+"description": "Optional. OCI repo configuration for the cluster"
 },
 "preventDrift": {
-"description": "Set to true to enable the Config Sync admission webhook to prevent drifts. If set to `false`, disables the Config Sync admission webhook and does not prevent drifts.",
+"description": "Optional. Set to true to enable the Config Sync admission webhook to prevent drifts. If set to `false`, disables the Config Sync admission webhook and does not prevent drifts.",
 "type": "boolean"
 },
 "sourceFormat": {
-"description": "Specifies whether the Config Sync Repo is in \"hierarchical\" or \"unstructured\" mode.",
+"description": "Optional. Specifies whether the Config Sync Repo is in \"hierarchical\" or \"unstructured\" mode.",
 "type": "string"
 },
 "stopSyncing": {
-"description": "Set to true to stop syncing configs for a single cluster. Default to false.",
+"description": "Optional. Set to true to stop syncing configs for a single cluster. Default to false.",
 "type": "boolean"
 }
 },
@@ -3212,7 +3207,7 @@
 "id": "ConfigManagementConfigSyncState",
 "properties": {
 "clusterLevelStopSyncingState": {
-"description": "Whether syncing resources to the cluster is stopped at the cluster level.",
+"description": "Output only. Whether syncing resources to the cluster is stopped at the cluster level.",
 "enum": [
 "STOP_SYNCING_STATE_UNSPECIFIED",
 "NOT_STOPPED",
@@ -3225,6 +3220,7 @@
 "Some reconcilers stop syncing resources to the cluster, while others are still syncing.",
 "Syncing resources to the cluster is stopped at the cluster level."
 ],
+"readOnly": true,
 "type": "string"
 },
 "crCount": {
@@ -3235,17 +3231,19 @@
 },
 "deploymentState": {
 "$ref": "ConfigManagementConfigSyncDeploymentState",
-"description": "Information about the deployment of ConfigSync, including the version of the various Pods deployed"
+"description": "Output only. Information about the deployment of ConfigSync, including the version of the various Pods deployed",
+"readOnly": true
 },
 "errors": {
-"description": "Errors pertaining to the installation of Config Sync.",
+"description": "Output only. Errors pertaining to the installation of Config Sync.",
 "items": {
 "$ref": "ConfigManagementConfigSyncError"
 },
+"readOnly": true,
 "type": "array"
 },
 "reposyncCrd": {
-"description": "The state of the Reposync CRD",
+"description": "Output only. The state of the Reposync CRD",
 "enum": [
 "CRD_STATE_UNSPECIFIED",
 "NOT_INSTALLED",
@@ -3260,10 +3258,11 @@
 "CRD is terminating (i.e., it has been deleted and is cleaning up)",
 "CRD is installing"
 ],
+"readOnly": true,
 "type": "string"
 },
 "rootsyncCrd": {
-"description": "The state of the RootSync CRD",
+"description": "Output only. The state of the RootSync CRD",
 "enum": [
 "CRD_STATE_UNSPECIFIED",
 "NOT_INSTALLED",
@@ -3278,10 +3277,11 @@
 "CRD is terminating (i.e., it has been deleted and is cleaning up)",
 "CRD is installing"
 ],
+"readOnly": true,
 "type": "string"
 },
 "state": {
-"description": "The state of CS This field summarizes the other fields in this message.",
+"description": "Output only. The state of CS This field summarizes the other fields in this message.",
 "enum": [
 "STATE_UNSPECIFIED",
 "CONFIG_SYNC_NOT_INSTALLED",
@@ -3296,15 +3296,18 @@
 "CS encounters errors.",
 "CS is installing or terminating."
 ],
+"readOnly": true,
 "type": "string"
 },
 "syncState": {
 "$ref": "ConfigManagementSyncState",
-"description": "The state of ConfigSync's process to sync configs to a cluster"
+"description": "Output only. The state of ConfigSync's process to sync configs to a cluster",
+"readOnly": true
 },
 "version": {
 "$ref": "ConfigManagementConfigSyncVersion",
-"description": "The version of ConfigSync deployed"
+"description": "Output only. The version of ConfigSync deployed",
+"readOnly": true
 }
 },
 "type": "object"
@@ -3441,35 +3444,35 @@
 "id": "ConfigManagementGitConfig",
 "properties": {
 "gcpServiceAccountEmail": {
-"description": "The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.",
+"description": "Optional. The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.",
 "type": "string"
 },
 "httpsProxy": {
-"description": "URL for the HTTPS proxy to be used when communicating with the Git repo.",
+"description": "Optional. URL for the HTTPS proxy to be used when communicating with the Git repo.",
 "type": "string"
 },
 "policyDir": {
-"description": "The path within the Git repository that represents the top level of the repo to sync. Default: the root directory of the repository.",
+"description": "Optional. The path within the Git repository that represents the top level of the repo to sync. Default: the root directory of the repository.",
 "type": "string"
 },
 "secretType": {
-"description": "Type of secret configured for access to the Git repo. Must be one of ssh, cookiefile, gcenode, token, gcpserviceaccount or none. The validation of this is case-sensitive. Required.",
+"description": "Required. Type of secret configured for access to the Git repo. Must be one of ssh, cookiefile, gcenode, token, gcpserviceaccount, githubapp or none. The validation of this is case-sensitive.",
 "type": "string"
 },
 "syncBranch": {
-"description": "The branch of the repository to sync from. Default: master.",
+"description": "Optional. The branch of the repository to sync from. Default: master.",
 "type": "string"
 },
 "syncRepo": {
-"description": "The URL of the Git repository to use as the source of truth.",
+"description": "Required. The URL of the Git repository to use as the source of truth.",
 "type": "string"
 },
 "syncRev": {
-"description": "Git revision (tag or hash) to check out. Default HEAD.",
+"description": "Optional. Git revision (tag or hash) to check out. Default HEAD.",
 "type": "string"
 },
 "syncWaitSecs": {
-"description": "Period in seconds between consecutive syncs. Default: 15.",
+"description": "Optional. Period in seconds between consecutive syncs. Default: 15.",
 "format": "int64",
 "type": "string"
 }
@@ -3605,22 +3608,23 @@
 "binauthz": {
 "$ref": "ConfigManagementBinauthzConfig",
 "deprecated": true,
-"description": "Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set."
+"description": "Optional. Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set."
 },
 "cluster": {
-"description": "The user-specified cluster name used by Config Sync cluster-name-selector annotation or ClusterSelector, for applying configs to only a subset of clusters. Omit this field if the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector. Set this field if a name different from the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector.",
+"description": "Optional. The user-specified cluster name used by Config Sync cluster-name-selector annotation or ClusterSelector, for applying configs to only a subset of clusters. Omit this field if the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector. Set this field if a name different from the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector.",
 "type": "string"
 },
 "configSync": {
 "$ref": "ConfigManagementConfigSync",
-"description": "Config Sync configuration for the cluster."
+"description": "Optional. Config Sync configuration for the cluster."
 },
 "hierarchyController": {
 "$ref": "ConfigManagementHierarchyControllerConfig",
-"description": "Hierarchy Controller configuration for the cluster. Deprecated: Configuring Hierarchy Controller through the configmanagement feature is no longer recommended. Use https://github.com/kubernetes-sigs/hierarchical-namespaces instead."
+"deprecated": true,
+"description": "Optional. Hierarchy Controller configuration for the cluster. Deprecated: Configuring Hierarchy Controller through the configmanagement feature is no longer recommended. Use https://github.com/kubernetes-sigs/hierarchical-namespaces instead."
 },
 "management": {
-"description": "Enables automatic Feature management.",
+"description": "Optional. Enables automatic Feature management.",
 "enum": [
 "MANAGEMENT_UNSPECIFIED",
 "MANAGEMENT_AUTOMATIC",
@@ -3635,10 +3639,11 @@
 },
 "policyController": {
 "$ref": "ConfigManagementPolicyController",
-"description": "Policy Controller configuration for the cluster. Deprecated: Configuring Policy Controller through the configmanagement feature is no longer recommended. Use the policycontroller feature instead."
+"deprecated": true,
+"description": "Optional. Policy Controller configuration for the cluster. Deprecated: Configuring Policy Controller through the configmanagement feature is no longer recommended. Use the policycontroller feature instead."
 },
 "version": {
-"description": "Version of ACM installed.",
+"description": "Optional. Version of ACM installed.",
 "type": "string"
 }
 },
@@ -3650,31 +3655,38 @@
 "properties": {
 "binauthzState": {
 "$ref": "ConfigManagementBinauthzState",
-"description": "Binauthz status"
+"description": "Output only. Binauthz status",
+"readOnly": true
 },
 "clusterName": {
-"description": "This field is set to the `cluster_name` field of the Membership Spec if it is not empty. Otherwise, it is set to the cluster's fleet membership name.",
+"description": "Output only. This field is set to the `cluster_name` field of the Membership Spec if it is not empty. Otherwise, it is set to the cluster's fleet membership name.",
+"readOnly": true,
 "type": "string"
 },
 "configSyncState": {
 "$ref": "ConfigManagementConfigSyncState",
-"description": "Current sync status"
+"description": "Output only. Current sync status",
+"readOnly": true
 },
 "hierarchyControllerState": {
 "$ref": "ConfigManagementHierarchyControllerState",
-"description": "Hierarchy Controller status"
+"description": "Output only. Hierarchy Controller status",
+"readOnly": true
 },
 "membershipSpec": {
 "$ref": "ConfigManagementMembershipSpec",
-"description": "Membership configuration in the cluster. This represents the actual state in the cluster, while the MembershipSpec in the FeatureSpec represents the intended state"
+"description": "Output only. Membership configuration in the cluster. This represents the actual state in the cluster, while the MembershipSpec in the FeatureSpec represents the intended state",
+"readOnly": true
 },
 "operatorState": {
 "$ref": "ConfigManagementOperatorState",
-"description": "Current install status of ACM's Operator"
+"description": "Output only. Current install status of ACM's Operator",
+"readOnly": true
 },
 "policyControllerState": {
 "$ref": "ConfigManagementPolicyControllerState",
-"description": "PolicyController status"
+"description": "Output only. PolicyController status",
+"readOnly": true
 }
 },
 "type": "object"
@@ -3684,23 +3696,23 @@
 "id": "ConfigManagementOciConfig",
 "properties": {
 "gcpServiceAccountEmail": {
-"description": "The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.",
+"description": "Optional. The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.",
 "type": "string"
 },
 "policyDir": {
-"description": "The absolute path of the directory that contains the local resources. Default: the root directory of the image.",
+"description": "Optional. The absolute path of the directory that contains the local resources. Default: the root directory of the image.",
 "type": "string"
 },
 "secretType": {
-"description": "Type of secret configured for access to the Git repo.",
+"description": "Required. Type of secret configured for access to the OCI repo. Must be one of gcenode, gcpserviceaccount, k8sserviceaccount or none. The validation of this is case-sensitive.",
 "type": "string"
 },
 "syncRepo": {
-"description": "The OCI image repository URL for the package to sync from. e.g. `LOCATION-docker.pkg.dev/PROJECT_ID/REPOSITORY_NAME/PACKAGE_NAME`.",
+"description": "Required. The OCI image repository URL for the package to sync from. e.g. `LOCATION-docker.pkg.dev/PROJECT_ID/REPOSITORY_NAME/PACKAGE_NAME`.",
 "type": "string"
 },
 "syncWaitSecs": {
-"description": "Period in seconds between consecutive syncs. Default: 15.",
+"description": "Optional. Period in seconds between consecutive syncs. Default: 15.",
 "format": "int64",
 "type": "string"
 }
@@ -7242,12 +7254,14 @@
 "enum": [
 "VALIDATOR_TYPE_UNSPECIFIED",
 "MEMBERSHIP_ID",
-"CROSS_PROJECT_PERMISSION"
+"CROSS_PROJECT_PERMISSION",
+"FLEET_ALLOWED_FOR_PROJECT_GUARDRAIL"
 ],
 "enumDescriptions": [
 "UNSPECIFIED validator.",
 "MEMBERSHIP_ID validator validates that the membership_id is still available.",
-"CROSS_PROJECT_PERMISSION validator validates that the cross-project role binding for the service agent is in place."
+"CROSS_PROJECT_PERMISSION validator validates that the cross-project role binding for the service agent is in place.",
+"FLEET_ALLOWED_FOR_PROJECT_GUARDRAIL validator validates that the fleet project is allowed for the project guardrail."
 ],
 "type": "string"
 }