google-api-python-client 2.187.0__py3-none-any.whl → 2.188.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/container.v1beta1.json

@@ -249,6 +249,34 @@
 "https://www.googleapis.com/auth/cloud-platform"
 ]
 },
+"completeControlPlaneUpgrade": {
+"description": "CompleteControlPlaneUpgrade completes the rollback-safe upgrade by performing the step two upgrade for a specific cluster.",
+"flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/clusters/{clustersId}:completeControlPlaneUpgrade",
+"httpMethod": "POST",
+"id": "container.projects.locations.clusters.completeControlPlaneUpgrade",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "The name (project, location, cluster) of the cluster to complete upgrade. Specified in the format `projects/*/locations/*/clusters/*`.",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/clusters/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1beta1/{+name}:completeControlPlaneUpgrade",
+"request": {
+"$ref": "CompleteControlPlaneUpgradeRequest"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
 "completeIpRotation": {
 "description": "Completes master IP rotation.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/clusters/{clustersId}:completeIpRotation",
@@ -1415,6 +1443,34 @@
 "https://www.googleapis.com/auth/cloud-platform"
 ]
 },
+"completeControlPlaneUpgrade": {
+"description": "CompleteControlPlaneUpgrade completes the rollback-safe upgrade by performing the step two upgrade for a specific cluster.",
+"flatPath": "v1beta1/projects/{projectsId}/zones/{zonesId}/clusters/{clustersId}:completeControlPlaneUpgrade",
+"httpMethod": "POST",
+"id": "container.projects.zones.clusters.completeControlPlaneUpgrade",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "The name (project, location, cluster) of the cluster to complete upgrade. Specified in the format `projects/*/locations/*/clusters/*`.",
+"location": "path",
+"pattern": "^projects/[^/]+/zones/[^/]+/clusters/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1beta1/{+name}:completeControlPlaneUpgrade",
+"request": {
+"$ref": "CompleteControlPlaneUpgradeRequest"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
 "completeIpRotation": {
 "description": "Completes master IP rotation.",
 "flatPath": "v1beta1/projects/{projectId}/zones/{zone}/clusters/{clusterId}:completeIpRotation",
@@ -2685,7 +2741,7 @@
 }
 }
 },
-"revision": "20251021",
+"revision": "20251216",
 "rootUrl": "https://container.googleapis.com/",
 "schemas": {
 "AcceleratorConfig": {
@@ -2871,6 +2927,10 @@
 "$ref": "ParallelstoreCsiDriverConfig",
 "description": "Configuration for the Cloud Storage Parallelstore CSI driver."
 },
+"podSnapshotConfig": {
+"$ref": "PodSnapshotConfig",
+"description": "Configuration for the Pod Snapshot feature."
+},
 "rayOperatorConfig": {
 "$ref": "RayOperatorConfig",
 "description": "Optional. Configuration for Ray Operator addon."
@@ -3442,6 +3502,32 @@
 },
 "type": "object"
 },
+"CertificateConfig": {
+"description": "CertificateConfig configures certificate for the registry.",
+"id": "CertificateConfig",
+"properties": {
+"gcpSecretManagerSecretUri": {
+"description": "The URI configures a secret from [Secret Manager](https://cloud.google.com/secret-manager) in the format \"projects/$PROJECT_ID/secrets/$SECRET_NAME/versions/$VERSION\" for global secret or \"projects/$PROJECT_ID/locations/$REGION/secrets/$SECRET_NAME/versions/$VERSION\" for regional secret. Version can be fixed (e.g. \"2\") or \"latest\"",
+"type": "string"
+}
+},
+"type": "object"
+},
+"CertificateConfigPair": {
+"description": "CertificateConfigPair configures pairs of certificates, which is used for client certificate and key pairs under a registry.",
+"id": "CertificateConfigPair",
+"properties": {
+"cert": {
+"$ref": "CertificateConfig",
+"description": "Cert configures the client certificate."
+},
+"key": {
+"$ref": "CertificateConfig",
+"description": "Key configures the client private key. Optional."
+}
+},
+"type": "object"
+},
 "CheckAutopilotCompatibilityResponse": {
 "description": "CheckAutopilotCompatibilityResponse has a list of compatibility issues.",
 "id": "CheckAutopilotCompatibilityResponse",
@@ -3582,6 +3668,11 @@
 "readOnly": true,
 "type": "string"
 },
+"currentEmulatedVersion": {
+"description": "Output only. The current emulated version of the master endpoint. The version is in minor version format, e.g. 1.30. No value or empty string means the cluster has no emulated version.",
+"readOnly": true,
+"type": "string"
+},
 "currentMasterVersion": {
 "description": "Output only. The current software version of the master endpoint.",
 "readOnly": true,
@@ -3716,6 +3807,10 @@
 "$ref": "MaintenancePolicy",
 "description": "Configure the maintenance policy for this cluster."
 },
+"managedOpentelemetryConfig": {
+"$ref": "ManagedOpenTelemetryConfig",
+"description": "Configuration for Managed OpenTelemetry pipeline."
+},
 "master": {
 "$ref": "Master",
 "description": "Configuration for master components."
@@ -3837,6 +3932,10 @@
 "$ref": "ResourceUsageExportConfig",
 "description": "Configuration for exporting resource usages. Resource usage export is disabled when this config unspecified."
 },
+"rollbackSafeUpgrade": {
+"$ref": "RollbackSafeUpgrade",
+"description": "The rollback safe upgrade information of the cluster. This field is used when user manually triggers a rollback safe upgrade."
+},
 "satisfiesPzi": {
 "description": "Output only. Reserved for future use.",
 "readOnly": true,
@@ -4216,6 +4315,10 @@
 "description": "The logging service the cluster should use to write logs. Currently available options: * `logging.googleapis.com/kubernetes` - The Cloud Logging service with a Kubernetes-native resource model * `logging.googleapis.com` - The legacy Cloud Logging service (no longer available as of GKE 1.15). * `none` - no logs will be exported from the cluster. If left as an empty string,`logging.googleapis.com/kubernetes` will be used for GKE 1.14+ or `logging.googleapis.com` for earlier versions.",
 "type": "string"
 },
+"desiredManagedOpentelemetryConfig": {
+"$ref": "ManagedOpenTelemetryConfig",
+"description": "The desired managed open telemetry configuration."
+},
 "desiredMaster": {
 "$ref": "Master",
 "description": "Configuration for master components."
@@ -4322,6 +4425,10 @@
 ],
 "type": "string"
 },
+"desiredPrivilegedAdmissionConfig": {
+"$ref": "PrivilegedAdmissionConfig",
+"description": "The desired privileged admission config for the cluster."
+},
 "desiredProtectConfig": {
 "$ref": "ProtectConfig",
 "deprecated": true,
@@ -4339,6 +4446,10 @@
 "$ref": "ResourceUsageExportConfig",
 "description": "The desired configuration for exporting resource usage."
 },
+"desiredRollbackSafeUpgrade": {
+"$ref": "RollbackSafeUpgrade",
+"description": "The desired rollback safe upgrade configuration."
+},
 "desiredSecretManagerConfig": {
 "$ref": "SecretManagerConfig",
 "description": "Enable/Disable Secret Manager Config."
@@ -4491,6 +4602,10 @@
 },
 "type": "array"
 },
+"rollbackSafeUpgradeStatus": {
+"$ref": "RollbackSafeUpgradeStatus",
+"description": "The cluster's rollback-safe upgrade status."
+},
 "upgradeDetails": {
 "description": "The list of past auto upgrades.",
 "items": {
@@ -4501,6 +4616,35 @@
 },
 "type": "object"
 },
+"CompatibilityStatus": {
+"description": "CompatibilityStatus is the status regarding the control plane's compatibility.",
+"id": "CompatibilityStatus",
+"properties": {
+"downgradableVersion": {
+"description": "Output only. The GKE version that the cluster can be safely downgraded to if the cluster is emulating the previous minor version. It is usually the cluster's previous version before a minor version upgrade.",
+"readOnly": true,
+"type": "string"
+},
+"emulatedVersionTime": {
+"description": "Output only. Last time the control plane became available after a minor version binary upgrade with emulated version set. It indicates the last time the cluster entered the rollback safe mode.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+}
+},
+"type": "object"
+},
+"CompleteControlPlaneUpgradeRequest": {
+"description": "CompleteControlPlaneUpgradeRequest sets the name of target cluster to complete upgrade.",
+"id": "CompleteControlPlaneUpgradeRequest",
+"properties": {
+"version": {
+"description": "API request version that initiates this operation.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "CompleteIPRotationRequest": {
 "description": "CompleteIPRotationRequest moves the cluster master back into single-IP mode.",
 "id": "CompleteIPRotationRequest",
@@ -4629,6 +4773,13 @@
 "$ref": "PrivateRegistryAccessConfig",
 "description": "PrivateRegistryAccessConfig is used to configure access configuration for private container registries."
 },
+"registryHosts": {
+"description": "RegistryHostConfig configures containerd registry host configuration. Each registry_hosts represents a hosts.toml file. At most 25 registry_hosts are allowed.",
+"items": {
+"$ref": "RegistryHostConfig"
+},
+"type": "array"
+},
 "writableCgroups": {
 "$ref": "WritableCgroups",
 "description": "Optional. WritableCgroups defines writable cgroups configuration for the node pool."
@@ -4958,6 +5109,43 @@
 },
 "type": "object"
 },
+"DisruptionEvent": {
+"description": "DisruptionEvent is a notification sent to customers about the disruption event of a resource.",
+"id": "DisruptionEvent",
+"properties": {
+"disruptionType": {
+"description": "The type of the disruption event.",
+"enum": [
+"DISRUPTION_TYPE_UNSPECIFIED",
+"POD_NOT_ENOUGH_PDB",
+"POD_PDB_VIOLATION"
+],
+"enumDescriptions": [
+"DISRUPTION_TYPE_UNSPECIFIED indicates the disruption type is unspecified.",
+"POD_NOT_ENOUGH_PDB indicates there are still running pods on the node during node drain because their evictions are blocked by PDB.",
+"POD_PDB_VIOLATION indicates that there are force pod evictions during node drain which violate the PDB."
+],
+"type": "string"
+},
+"pdbBlockedNode": {
+"description": "The node whose drain is blocked by PDB. This field is set for both POD_PDB_VIOLATION and POD_NOT_ENOUGH_PDB event.",
+"type": "string"
+},
+"pdbBlockedPod": {
+"description": "The pods whose evictions are blocked by PDB. This field is set for both POD_PDB_VIOLATION and POD_NOT_ENOUGH_PDB event.",
+"items": {
+"$ref": "PdbBlockedPod"
+},
+"type": "array"
+},
+"pdbViolationTimeout": {
+"description": "The timeout in seconds for which the node drain is blocked by PDB. After this timeout, pods are forcefully evicted. This field is only populated when event_type is POD_PDB_VIOLATION.",
+"format": "google-duration",
+"type": "string"
+}
+},
+"type": "object"
+},
 "DnsCacheConfig": {
 "description": "Configuration for NodeLocal DNSCache",
 "id": "DnsCacheConfig",
@@ -5491,6 +5679,66 @@ false
 },
 "type": "object"
 },
+"HostConfig": {
+"description": "HostConfig configures the registry host under a given Server.",
+"id": "HostConfig",
+"properties": {
+"ca": {
+"description": "CA configures the registry host certificate.",
+"items": {
+"$ref": "CertificateConfig"
+},
+"type": "array"
+},
+"capabilities": {
+"description": "Capabilities represent the capabilities of the registry host, specifying what operations a host is capable of performing. If not set, containerd enables all capabilities by default.",
+"items": {
+"enum": [
+"HOST_CAPABILITY_UNSPECIFIED",
+"HOST_CAPABILITY_PULL",
+"HOST_CAPABILITY_RESOLVE",
+"HOST_CAPABILITY_PUSH"
+],
+"enumDescriptions": [
+"UNKNOWN should never be set.",
+"Pull represents the capability to fetch manifests and blobs by digest.",
+"Resolve represents the capability to fetch manifests by name.",
+"Push represents the capability to push blobs and manifests."
+],
+"type": "string"
+},
+"type": "array"
+},
+"client": {
+"description": "Client configures the registry host client certificate and key.",
+"items": {
+"$ref": "CertificateConfigPair"
+},
+"type": "array"
+},
+"dialTimeout": {
+"description": "Specifies the maximum duration allowed for a connection attempt to complete. A shorter timeout helps reduce delays when falling back to the original registry if the mirror is unreachable. Maximum allowed value is 180s. If not set, containerd sets default 30s. The value should be a decimal number of seconds with an `s` suffix.",
+"format": "google-duration",
+"type": "string"
+},
+"header": {
+"description": "Header configures the registry host headers.",
+"items": {
+"$ref": "RegistryHeader"
+},
+"type": "array"
+},
+"host": {
+"description": "Host configures the registry host/mirror. It supports fully qualified domain names (FQDN) and IP addresses: Specifying port is supported. Wildcards are NOT supported. Examples: - my.customdomain.com - 10.0.1.2:5000",
+"type": "string"
+},
+"overridePath": {
+"description": "OverridePath is used to indicate the host's API root endpoint is defined in the URL path rather than by the API specification. This may be used with non-compliant OCI registries which are missing the /v2 prefix. If not set, containerd sets default false.",
+"type": "boolean"
+}
+},
+"type": "object"
+},
 "HostMaintenancePolicy": {
 "description": "HostMaintenancePolicy contains the maintenance policy for the hosts on which the GKE VMs run on.",
 "id": "HostMaintenancePolicy",
@@ -5920,7 +6168,7 @@ false
 "additionalProperties": {
 "type": "string"
 },
-"description": "The Linux kernel parameters to be applied to the nodes and all pods running on the nodes. The following parameters are supported. net.core.busy_poll net.core.busy_read net.core.netdev_max_backlog net.core.rmem_max net.core.rmem_default net.core.wmem_default net.core.wmem_max net.core.optmem_max net.core.somaxconn net.ipv4.tcp_rmem net.ipv4.tcp_wmem net.ipv4.tcp_tw_reuse net.ipv4.tcp_max_orphans net.netfilter.nf_conntrack_max net.netfilter.nf_conntrack_buckets net.netfilter.nf_conntrack_tcp_timeout_close_wait net.netfilter.nf_conntrack_tcp_timeout_time_wait net.netfilter.nf_conntrack_tcp_timeout_established net.netfilter.nf_conntrack_acct kernel.shmmni kernel.shmmax kernel.shmall fs.aio-max-nr fs.file-max fs.inotify.max_user_instances fs.inotify.max_user_watches fs.nr_open vm.dirty_background_ratio vm.dirty_expire_centisecs vm.dirty_ratio vm.dirty_writeback_centisecs vm.max_map_count vm.overcommit_memory vm.overcommit_ratio vm.vfs_cache_pressure vm.swappiness vm.watermark_scale_factor vm.min_free_kbytes",
+"description": "The Linux kernel parameters to be applied to the nodes and all pods running on the nodes. The following parameters are supported. net.core.busy_poll net.core.busy_read net.core.netdev_max_backlog net.core.rmem_max net.core.rmem_default net.core.wmem_default net.core.wmem_max net.core.optmem_max net.core.somaxconn net.ipv4.tcp_rmem net.ipv4.tcp_wmem net.ipv4.tcp_tw_reuse net.ipv4.tcp_mtu_probing net.ipv4.tcp_max_orphans net.ipv4.tcp_max_tw_buckets net.ipv4.tcp_syn_retries net.ipv4.tcp_ecn net.ipv4.tcp_congestion_control net.netfilter.nf_conntrack_max net.netfilter.nf_conntrack_buckets net.netfilter.nf_conntrack_tcp_timeout_close_wait net.netfilter.nf_conntrack_tcp_timeout_time_wait net.netfilter.nf_conntrack_tcp_timeout_established net.netfilter.nf_conntrack_acct kernel.shmmni kernel.shmmax kernel.shmall kernel.perf_event_paranoid kernel.sched_rt_runtime_us kernel.softlockup_panic kernel.yama.ptrace_scope kernel.kptr_restrict kernel.dmesg_restrict kernel.sysrq fs.aio-max-nr fs.file-max fs.inotify.max_user_instances fs.inotify.max_user_watches fs.nr_open vm.dirty_background_ratio vm.dirty_background_bytes vm.dirty_expire_centisecs vm.dirty_ratio vm.dirty_bytes vm.dirty_writeback_centisecs vm.max_map_count vm.overcommit_memory vm.overcommit_ratio vm.vfs_cache_pressure vm.swappiness vm.watermark_scale_factor vm.min_free_kbytes",
 "type": "object"
 },
 "transparentHugepageDefrag": {
@@ -6169,7 +6417,7 @@ false
 "properties": {
 "enableLegacyLustrePort": {
 "deprecated": true,
-"description": "If set to true, the Lustre CSI driver will install Lustre kernel modules using port 6988. This serves as a workaround for a port conflict with the gke-metadata-server. This field is required ONLY under the following conditions: 1. The GKE node version is older than 1.33.2-gke.4655000. 2. You're connecting to a Lustre instance that has the 'gke-support-enabled' flag.",
+"description": "If set to true, the Lustre CSI driver will install Lustre kernel modules using port 6988. This serves as a workaround for a port conflict with the gke-metadata-server. This field is required ONLY under the following conditions: 1. The GKE node version is older than 1.33.2-gke.4655000. 2. You're connecting to a Lustre instance that has the 'gke-support-enabled' flag. Deprecated: This flag is no longer required as of GKE node version 1.33.2-gke.4655000, unless you are connecting to a Lustre instance that has the `gke-support-enabled` flag.",
 "type": "boolean"
 },
 "enabled": {
@@ -6249,6 +6497,27 @@ false
 },
 "type": "object"
 },
+"ManagedOpenTelemetryConfig": {
+"description": "ManagedOpenTelemetryConfig is the configuration for the GKE Managed OpenTelemetry pipeline.",
+"id": "ManagedOpenTelemetryConfig",
+"properties": {
+"scope": {
+"description": "Scope of the Managed OpenTelemetry pipeline.",
+"enum": [
+"SCOPE_UNSPECIFIED",
+"NONE",
+"COLLECTION_AND_INSTRUMENTATION_COMPONENTS"
+],
+"enumDescriptions": [
+"SCOPE_UNSPECIFIED is when the scope is not set.",
+"NONE is used to disable the Managed OpenTelemetry pipeline.",
+"COLLECTION_AND_INSTRUMENTATION_COMPONENTS is used to enable the Managed OpenTelemetry pipeline for collection and instrumentation components."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "ManagedPrometheusConfig": {
 "description": "ManagedPrometheusConfig defines the configuration for Google Cloud Managed Service for Prometheus.",
 "id": "ManagedPrometheusConfig",
@@ -6267,7 +6536,13 @@ false
 "Master": {
 "description": "Master is the configuration for components on master.",
 "id": "Master",
-"properties": {},
+"properties": {
+"compatibilityStatus": {
+"$ref": "CompatibilityStatus",
+"description": "Output only. The compatibility status of the control plane. It should be empty if the cluster does not have emulated version.",
+"readOnly": true
+}
+},
 "type": "object"
 },
 "MasterAuth": {
@@ -6994,6 +7269,17 @@ false
 },
 "type": "object"
 },
+"NodeDrainConfig": {
+"description": "NodeDrainConfig contains the node drain related configurations for this nodepool.",
+"id": "NodeDrainConfig",
+"properties": {
+"respectPdbDuringNodePoolDeletion": {
+"description": "Whether to respect PDB during node pool deletion.",
+"type": "boolean"
+}
+},
+"type": "object"
+},
 "NodeKernelModuleLoading": {
 "description": "Configuration for kernel module loading on nodes.",
 "id": "NodeKernelModuleLoading",
@@ -7202,8 +7488,7 @@ false
 "type": "string"
 },
 "subnetwork": {
-"description": "Output only. The subnetwork path for the node pool. Format: projects/{project}/regions/{region}/subnetworks/{subnetwork} If the cluster is associated with multiple subnetworks, the subnetwork for the node pool is picked based on the IP utilization during node pool creation and is immutable.",
-"readOnly": true,
+"description": "The subnetwork path for the node pool. Format: projects/{project}/regions/{region}/subnetworks/{subnetwork} If the cluster is associated with multiple subnetworks, the subnetwork for the node pool is picked based on the IP utilization during node pool creation and is immutable.",
 "type": "string"
 }
 },
@@ -7276,6 +7561,10 @@ false
 "$ref": "NodeNetworkConfig",
 "description": "Networking configuration for this NodePool. If specified, it overrides the cluster-level defaults."
 },
+"nodeDrainConfig": {
+"$ref": "NodeDrainConfig",
+"description": "Specifies the node drain configuration for this node pool."
+},
 "placementPolicy": {
 "$ref": "PlacementPolicy",
 "description": "Specifies the node placement policy."
@@ -7841,6 +8130,21 @@ false
 },
 "type": "object"
 },
+"PdbBlockedPod": {
+"description": "The namespace/name of the pod whose eviction is blocked by PDB.",
+"id": "PdbBlockedPod",
+"properties": {
+"name": {
+"description": "The name of the pod.",
+"type": "string"
+},
+"namespace": {
+"description": "The namespace of the pod.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "PlacementPolicy": {
 "description": "PlacementPolicy defines the placement policy used by the node pool.",
 "id": "PlacementPolicy",
@@ -7911,6 +8215,17 @@ false
 },
 "type": "object"
 },
+"PodSnapshotConfig": {
+"description": "PodSnapshotConfig is the configuration for GKE Pod Snapshots feature.",
+"id": "PodSnapshotConfig",
+"properties": {
+"enabled": {
+"description": "Whether or not the Pod Snapshots feature is enabled.",
+"type": "boolean"
+}
+},
+"type": "object"
+},
 "PolicyBinding": {
 "description": "Binauthz policy that applies to this cluster.",
 "id": "PolicyBinding",
@@ -8157,6 +8472,42 @@ false
 },
 "type": "object"
 },
+"RegistryHeader": {
+"description": "RegistryHeader configures headers for the registry.",
+"id": "RegistryHeader",
+"properties": {
+"key": {
+"description": "Key configures the header key.",
+"type": "string"
+},
+"value": {
+"description": "Value configures the header value.",
+"items": {
+"type": "string"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"RegistryHostConfig": {
+"description": "RegistryHostConfig configures the top-level structure for a single containerd registry server's configuration, which represents one hosts.toml file on the node. It will override the same fqdns in PrivateRegistryAccessConfig.",
+"id": "RegistryHostConfig",
+"properties": {
+"hosts": {
+"description": "HostConfig configures a list of host-specific configurations for the server. Each server can have at most 10 host configurations.",
+"items": {
+"$ref": "HostConfig"
+},
+"type": "array"
+},
+"server": {
+"description": "Defines the host name of the registry server, which will be used to create configuration file as /etc/containerd/hosts.d//hosts.toml. It supports fully qualified domain names (FQDN) and IP addresses: Specifying port is supported. Wildcards are NOT supported. Examples: - my.customdomain.com - 10.0.1.2:5000",
+"type": "string"
+}
+},
+"type": "object"
+},
 "ReleaseChannel": {
 "description": "ReleaseChannel indicates which release channel a cluster is subscribed to. Release channels are arranged in order of risk. When a cluster is subscribed to a release channel, Google maintains both the master version and the node version. Node auto-upgrade defaults to true and cannot be disabled.",
 "id": "ReleaseChannel",
@@ -8367,6 +8718,46 @@ false
 },
 "type": "object"
 },
+"RollbackSafeUpgrade": {
+"description": "RollbackSafeUpgrade is the configuration for the rollback safe upgrade.",
+"id": "RollbackSafeUpgrade",
+"properties": {
+"controlPlaneSoakDuration": {
+"description": "A user-defined period for the cluster remains in the rollbackable state. ex: {seconds: 21600}.",
+"format": "google-duration",
+"type": "string"
+}
+},
+"type": "object"
+},
+"RollbackSafeUpgradeStatus": {
+"description": "RollbackSafeUpgradeStatus contains the rollback-safe upgrade status of a cluster.",
+"id": "RollbackSafeUpgradeStatus",
+"properties": {
+"controlPlaneUpgradeRollbackEndTime": {
+"description": "The rollback-safe mode expiration time.",
+"format": "google-datetime",
+"type": "string"
+},
+"mode": {
+"description": "The mode of the rollback-safe upgrade.",
+"enum": [
+"MODE_UNSPECIFIED",
+"KCP_MINOR_UPGRADE_ROLLBACK_SAFE_MODE"
+],
+"enumDescriptions": [
+"MODE_UNSPECIFIED means it's in regular upgrade mode.",
+"KCP_MINOR_UPGRADE_ROLLBACK_SAFE_MODE means it's in rollback-safe mode after a KCP minor version step-one upgrade."
+],
+"type": "string"
+},
+"previousVersion": {
+"description": "The GKE version that the cluster previously used before step-one upgrade.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "RotationConfig": {
 "description": "RotationConfig is config for secret manager auto rotation.",
 "id": "RotationConfig",
@@ -9510,6 +9901,10 @@ false
 "description": "The name (project, location, cluster, node pool) of the node pool to update. Specified in the format `projects/*/locations/*/clusters/*/nodePools/*`.",
 "type": "string"
 },
+"nodeDrainConfig": {
+"$ref": "NodeDrainConfig",
+"description": "The desired node drain configuration for nodes in the node pool."
+},
 "nodeNetworkConfig": {
 "$ref": "NodeNetworkConfig",
 "description": "Node network config."
@@ -9621,6 +10016,10 @@ false
 "format": "google-datetime",
 "type": "string"
 },
+"initialEmulatedVersion": {
+"description": "The emulated version before the upgrade.",
+"type": "string"
+},
 "initialVersion": {
 "description": "The version before the upgrade.",
 "type": "string"
@@ -9663,6 +10062,10 @@ false
 "readOnly": true,
 "type": "string"
 },
+"targetEmulatedVersion": {
+"description": "The emulated version after the upgrade.",
+"type": "string"
+},
 "targetVersion": {
 "description": "The version after the upgrade.",
 "type": "string"
@@ -9736,6 +10139,10 @@ false
 "description": "A brief description of the event.",
 "type": "string"
 },
+"disruptionEvent": {
+"$ref": "DisruptionEvent",
+"description": "The information about the disruption event. This field is only populated when event_type is DISRUPTION_EVENT."
+},
 "endTime": {
 "description": "The time when the operation ended.",
 "format": "google-datetime",
@@ -9747,13 +10154,15 @@ false
 "EVENT_TYPE_UNSPECIFIED",
 "END_OF_SUPPORT",
 "COS_MILESTONE_VERSION_UPDATE",
-"UPGRADE_LIFECYCLE"
+"UPGRADE_LIFECYCLE",
+"DISRUPTION_EVENT"
 ],
 "enumDescriptions": [
 "EVENT_TYPE_UNSPECIFIED indicates the event type is unspecified.",
 "END_OF_SUPPORT indicates GKE version reaches end of support, check standard_support_end_time and extended_support_end_time for more details.",
 "COS_MILESTONE_VERSION_UPDATE indicates that the COS node image will update COS milestone version for new patch versions starting with the one in the description.",
-"UPGRADE_LIFECYCLE indicates the event is about the upgrade lifecycle."
+"UPGRADE_LIFECYCLE indicates the event is about the upgrade lifecycle.",
+"DISRUPTION_EVENT indicates the event is about the disruption."
 ],
 "type": "string"
 },
@@ -9938,6 +10347,14 @@ false
 "description": "The Cloud KMS cryptoKey to use for Confidential Hyperdisk on the control plane nodes.",
 "type": "string"
 },
+"controlPlaneDiskEncryptionKeyVersions": {
+"description": "Output only. All of the versions of the Cloud KMS cryptoKey that are used by Confidential Hyperdisks on the control plane nodes.",
+"items": {
+"type": "string"
+},
+"readOnly": true,
+"type": "array"
+},
 "etcdApiCa": {
 "description": "Resource path of the Certificate Authority Service caPool to use for the etcd API CA in this cluster.",
 "type": "string"