google-api-python-client 2.187.0__py3-none-any.whl → 2.189.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/container.v1.json

@@ -2660,7 +2660,7 @@
 }
 }
 },
-"revision": "20251021",
+"revision": "20260120",
 "rootUrl": "https://container.googleapis.com/",
 "schemas": {
 "AcceleratorConfig": {
@@ -2702,6 +2702,20 @@
 },
 "type": "array"
 },
+"status": {
+"description": "Draining status of the additional subnet.",
+"enum": [
+"STATUS_UNSPECIFIED",
+"ACTIVE",
+"DRAINING"
+],
+"enumDescriptions": [
+"Not set, same as ACTIVE.",
+"ACTIVE status indicates that the subnet is available for new node pool creation.",
+"DRAINING status indicates that the subnet is not used for new node pool creation."
+],
+"type": "string"
+},
 "subnetwork": {
 "description": "Name of the subnetwork. This can be the full path of the subnetwork or just the name. Example1: my-subnet Example2: projects/gke-project/regions/us-central1/subnetworks/my-subnet",
 "type": "string"
@@ -2834,6 +2848,10 @@
 "$ref": "RayOperatorConfig",
 "description": "Optional. Configuration for Ray Operator addon."
 },
+"sliceControllerConfig": {
+"$ref": "SliceControllerConfig",
+"description": "Optional. Configuration for the slice controller add-on."
+},
 "statefulHaConfig": {
 "$ref": "StatefulHAConfig",
 "description": "Optional. Configuration for the StatefulHA add-on."
@@ -3286,6 +3304,23 @@
 },
 "type": "object"
 },
+"BootDiskProfile": {
+"description": "Swap on the node's boot disk.",
+"id": "BootDiskProfile",
+"properties": {
+"swapSizeGib": {
+"description": "Specifies the size of the swap space in gibibytes (GiB).",
+"format": "int64",
+"type": "string"
+},
+"swapSizePercent": {
+"description": "Specifies the size of the swap space as a percentage of the boot disk size.",
+"format": "int32",
+"type": "integer"
+}
+},
+"type": "object"
+},
 "CancelOperationRequest": {
 "description": "CancelOperationRequest cancels a single operation.",
 "id": "CancelOperationRequest",
@@ -3325,7 +3360,33 @@
 },
 "gcpSecretManagerCertificateConfig": {
 "$ref": "GCPSecretManagerCertificateConfig",
-"description": "Google Secret Manager (GCP) certificate configuration."
+"description": "Secret Manager certificate configuration."
+}
+},
+"type": "object"
+},
+"CertificateConfig": {
+"description": "CertificateConfig configures certificate for the registry.",
+"id": "CertificateConfig",
+"properties": {
+"gcpSecretManagerSecretUri": {
+"description": "The URI configures a secret from [Secret Manager](https://cloud.google.com/secret-manager) in the format \"projects/$PROJECT_ID/secrets/$SECRET_NAME/versions/$VERSION\" for global secret or \"projects/$PROJECT_ID/locations/$REGION/secrets/$SECRET_NAME/versions/$VERSION\" for regional secret. Version can be fixed (e.g. \"2\") or \"latest\"",
+"type": "string"
+}
+},
+"type": "object"
+},
+"CertificateConfigPair": {
+"description": "CertificateConfigPair configures pairs of certificates, which is used for client certificate and key pairs under a registry.",
+"id": "CertificateConfigPair",
+"properties": {
+"cert": {
+"$ref": "CertificateConfig",
+"description": "Cert configures the client certificate."
+},
+"key": {
+"$ref": "CertificateConfig",
+"description": "Key configures the client private key. Optional."
 }
 },
 "type": "object"
@@ -3435,7 +3496,7 @@
 "description": "Configuration for Binary Authorization."
 },
 "clusterIpv4Cidr": {
-"description": "The IP address range of the container pods in this cluster, in [CIDR](http://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation (e.g. `10.96.0.0/14`). Leave blank to have one automatically chosen or specify a `/14` block in `10.0.0.0/8`.",
+"description": "The IP address range of the container pods in this cluster, in [CIDR](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation (e.g. `10.96.0.0/14`). Leave blank to have one automatically chosen or specify a `/14` block in `10.0.0.0/8`.",
 "type": "string"
 },
 "compliancePostureConfig": {
@@ -3600,6 +3661,10 @@
 "$ref": "MaintenancePolicy",
 "description": "Configure the maintenance policy for this cluster."
 },
+"managedOpentelemetryConfig": {
+"$ref": "ManagedOpenTelemetryConfig",
+"description": "Configuration for Managed OpenTelemetry pipeline."
+},
 "masterAuth": {
 "$ref": "MasterAuth",
 "description": "The authentication information for accessing the master endpoint. If unspecified, the defaults are used: For clusters before v1.12, if master_auth is unspecified, `username` will be set to \"admin\", a random password will be generated, and a client certificate will be issued."
@@ -3722,7 +3787,7 @@
 "type": "string"
 },
 "servicesIpv4Cidr": {
-"description": "Output only. The IP address range of the Kubernetes services in this cluster, in [CIDR](http://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation (e.g. `1.2.3.4/29`). Service addresses are typically put in the last `/16` from the container CIDR.",
+"description": "Output only. The IP address range of the Kubernetes services in this cluster, in [CIDR](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation (e.g. `1.2.3.4/29`). Service addresses are typically put in the last `/16` from the container CIDR.",
 "readOnly": true,
 "type": "string"
 },
@@ -3765,7 +3830,7 @@
 },
 "tpuIpv4CidrBlock": {
 "deprecated": true,
-"description": "Output only. The IP address range of the Cloud TPUs in this cluster, in [CIDR](http://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation (e.g. `1.2.3.4/29`). This field is deprecated due to the deprecation of 2VM TPU. The end of life date for 2VM TPU is 2025-04-25.",
+"description": "Output only. The IP address range of the Cloud TPUs in this cluster, in [CIDR](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation (e.g. `1.2.3.4/29`). This field is deprecated due to the deprecation of 2VM TPU. The end of life date for 2VM TPU is 2025-04-25.",
 "readOnly": true,
 "type": "string"
 },
@@ -3794,6 +3859,18 @@
 "description": "ClusterAutoscaling contains global, per-cluster information required by Cluster Autoscaler to automatically adjust the size of the cluster and create/delete node pools based on the current needs.",
 "id": "ClusterAutoscaling",
 "properties": {
+"autopilotGeneralProfile": {
+"description": "Autopilot general profile for the cluster, which defines the configuration for the cluster.",
+"enum": [
+"AUTOPILOT_GENERAL_PROFILE_UNSPECIFIED",
+"NO_PERFORMANCE"
+],
+"enumDescriptions": [
+"Use default configuration.",
+"Avoid extra IP consumption."
+],
+"type": "string"
+},
 "autoprovisioningLocations": {
 "description": "The list of Google Compute Engine [zones](https://cloud.google.com/compute/docs/zones#available) in which the NodePool's nodes can be created by NAP.",
 "items": {
@@ -4029,6 +4106,10 @@
 "description": "The logging service the cluster should use to write logs. Currently available options: * `logging.googleapis.com/kubernetes` - The Cloud Logging service with a Kubernetes-native resource model * `logging.googleapis.com` - The legacy Cloud Logging service (no longer available as of GKE 1.15). * `none` - no logs will be exported from the cluster. If left as an empty string,`logging.googleapis.com/kubernetes` will be used for GKE 1.14+ or `logging.googleapis.com` for earlier versions.",
 "type": "string"
 },
+"desiredManagedOpentelemetryConfig": {
+"$ref": "ManagedOpenTelemetryConfig",
+"description": "The desired managed open telemetry configuration."
+},
 "desiredMasterAuthorizedNetworksConfig": {
 "$ref": "MasterAuthorizedNetworksConfig",
 "deprecated": true,
@@ -4127,6 +4208,10 @@
 ],
 "type": "string"
 },
+"desiredPrivilegedAdmissionConfig": {
+"$ref": "PrivilegedAdmissionConfig",
+"description": "The desired privileged admission config for the cluster."
+},
 "desiredRbacBindingConfig": {
 "$ref": "RBACBindingConfig",
 "description": "RBACBindingConfig allows user to restrict ClusterRoleBindings an RoleBindings that can be created."
@@ -4407,6 +4492,13 @@
 "$ref": "PrivateRegistryAccessConfig",
 "description": "PrivateRegistryAccessConfig is used to configure access configuration for private container registries."
 },
+"registryHosts": {
+"description": "RegistryHostConfig configures containerd registry host configuration. Each registry_hosts represents a hosts.toml file. At most 25 registry_hosts are allowed.",
+"items": {
+"$ref": "RegistryHostConfig"
+},
+"type": "array"
+},
 "writableCgroups": {
 "$ref": "WritableCgroups",
 "description": "Optional. WritableCgroups defines writable cgroups configuration for the node pool."
@@ -4644,6 +4736,18 @@
 },
 "type": "object"
 },
+"DedicatedLocalSsdProfile": {
+"description": "Provisions a new, separate local NVMe SSD exclusively for swap.",
+"id": "DedicatedLocalSsdProfile",
+"properties": {
+"diskCount": {
+"description": "The number of physical local NVMe SSD disks to attach.",
+"format": "int64",
+"type": "string"
+}
+},
+"type": "object"
+},
 "DefaultComputeClassConfig": {
 "description": "DefaultComputeClassConfig defines default compute class configuration.",
 "id": "DefaultComputeClassConfig",
@@ -4702,6 +4806,43 @@
 },
 "type": "object"
 },
+"DisruptionEvent": {
+"description": "DisruptionEvent is a notification sent to customers about the disruption event of a resource.",
+"id": "DisruptionEvent",
+"properties": {
+"disruptionType": {
+"description": "The type of the disruption event.",
+"enum": [
+"DISRUPTION_TYPE_UNSPECIFIED",
+"POD_NOT_ENOUGH_PDB",
+"POD_PDB_VIOLATION"
+],
+"enumDescriptions": [
+"DISRUPTION_TYPE_UNSPECIFIED indicates the disruption type is unspecified.",
+"POD_NOT_ENOUGH_PDB indicates there are still running pods on the node during node drain because their evictions are blocked by PDB.",
+"POD_PDB_VIOLATION indicates that there are force pod evictions during node drain which violate the PDB."
+],
+"type": "string"
+},
+"pdbBlockedNode": {
+"description": "The node whose drain is blocked by PDB. This field is set for both POD_PDB_VIOLATION and POD_NOT_ENOUGH_PDB event.",
+"type": "string"
+},
+"pdbBlockedPod": {
+"description": "The pods whose evictions are blocked by PDB. This field is set for both POD_PDB_VIOLATION and POD_NOT_ENOUGH_PDB event.",
+"items": {
+"$ref": "PdbBlockedPod"
+},
+"type": "array"
+},
+"pdbViolationTimeout": {
+"description": "The timeout in seconds for which the node drain is blocked by PDB. After this timeout, pods are forcefully evicted. This field is only populated when event_type is POD_PDB_VIOLATION.",
+"format": "google-duration",
+"type": "string"
+}
+},
+"type": "object"
+},
 "DnsCacheConfig": {
 "description": "Configuration for NodeLocal DNSCache",
 "id": "DnsCacheConfig",
@@ -4719,6 +4860,17 @@
 "properties": {},
 "type": "object"
 },
+"EncryptionConfig": {
+"description": "Defines encryption settings for the swap space.",
+"id": "EncryptionConfig",
+"properties": {
+"disabled": {
+"description": "Optional. If true, swap space will not be encrypted. Defaults to false (encrypted).",
+"type": "boolean"
+}
+},
+"type": "object"
+},
 "EnterpriseConfig": {
 "deprecated": true,
 "description": "EnterpriseConfig is the cluster enterprise configuration. Deprecated: GKE Enterprise features are now available without an Enterprise tier.",
@@ -4756,6 +4908,23 @@
 },
 "type": "object"
 },
+"EphemeralLocalSsdProfile": {
+"description": "Swap on the local SSD shared with pod ephemeral storage.",
+"id": "EphemeralLocalSsdProfile",
+"properties": {
+"swapSizeGib": {
+"description": "Specifies the size of the swap space in gibibytes (GiB).",
+"format": "int64",
+"type": "string"
+},
+"swapSizePercent": {
+"description": "Specifies the size of the swap space as a percentage of the ephemeral local SSD capacity.",
+"format": "int32",
+"type": "integer"
+}
+},
+"type": "object"
+},
 "EphemeralStorageLocalSsdConfig": {
 "description": "EphemeralStorageLocalSsdConfig contains configuration for the node ephemeral storage using Local SSDs.",
 "id": "EphemeralStorageLocalSsdConfig",
@@ -4949,6 +5118,25 @@
 },
 "type": "object"
 },
+"GPUDirectConfig": {
+"description": "GPUDirectConfig specifies the GPU direct strategy on the node pool.",
+"id": "GPUDirectConfig",
+"properties": {
+"gpuDirectStrategy": {
+"description": "The type of GPU direct strategy to enable on the node pool.",
+"enum": [
+"GPU_DIRECT_STRATEGY_UNSPECIFIED",
+"RDMA"
+],
+"enumDescriptions": [
+"Default value. No GPU Direct strategy is enabled on the node.",
+"GPUDirect-RDMA on A3 Ultra, and A4 machine types"
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "GPUDriverInstallationConfig": {
 "description": "GPUDriverInstallationConfig specifies the version of GPU driver to be auto installed.",
 "id": "GPUDriverInstallationConfig",
@@ -5195,6 +5383,66 @@ false
 },
 "type": "object"
 },
+"HostConfig": {
+"description": "HostConfig configures the registry host under a given Server.",
+"id": "HostConfig",
+"properties": {
+"ca": {
+"description": "CA configures the registry host certificate.",
+"items": {
+"$ref": "CertificateConfig"
+},
+"type": "array"
+},
+"capabilities": {
+"description": "Capabilities represent the capabilities of the registry host, specifying what operations a host is capable of performing. If not set, containerd enables all capabilities by default.",
+"items": {
+"enum": [
+"HOST_CAPABILITY_UNSPECIFIED",
+"HOST_CAPABILITY_PULL",
+"HOST_CAPABILITY_RESOLVE",
+"HOST_CAPABILITY_PUSH"
+],
+"enumDescriptions": [
+"UNKNOWN should never be set.",
+"Pull represents the capability to fetch manifests and blobs by digest.",
+"Resolve represents the capability to fetch manifests by name.",
+"Push represents the capability to push blobs and manifests."
+],
+"type": "string"
+},
+"type": "array"
+},
+"client": {
+"description": "Client configures the registry host client certificate and key.",
+"items": {
+"$ref": "CertificateConfigPair"
+},
+"type": "array"
+},
+"dialTimeout": {
+"description": "Specifies the maximum duration allowed for a connection attempt to complete. A shorter timeout helps reduce delays when falling back to the original registry if the mirror is unreachable. Maximum allowed value is 180s. If not set, containerd sets default 30s. The value should be a decimal number of seconds with an `s` suffix.",
+"format": "google-duration",
+"type": "string"
+},
+"header": {
+"description": "Header configures the registry host headers.",
+"items": {
+"$ref": "RegistryHeader"
+},
+"type": "array"
+},
+"host": {
+"description": "Host configures the registry host/mirror. It supports fully qualified domain names (FQDN) and IP addresses: Specifying port is supported. Wildcards are NOT supported. Examples: - my.customdomain.com - 10.0.1.2:5000",
+"type": "string"
+},
+"overridePath": {
+"description": "OverridePath is used to indicate the host's API root endpoint is defined in the URL path rather than by the API specification. This may be used with non-compliant OCI registries which are missing the /v2 prefix. If not set, containerd sets default false.",
+"type": "boolean"
+}
+},
+"type": "object"
+},
 "HttpCacheControlResponseHeader": {
 "description": "RFC-2616: cache control support",
 "id": "HttpCacheControlResponseHeader",
@@ -5281,7 +5529,7 @@ false
 "type": "string"
 },
 "clusterIpv4CidrBlock": {
-"description": "The IP address range for the cluster pod IPs. If this field is set, then `cluster.cluster_ipv4_cidr` must be left blank. This field is only applicable when `use_ip_aliases` is true. Set to blank to have a range chosen with the default size. Set to /netmask (e.g. `/14`) to have a range chosen with a specific netmask. Set to a [CIDR](http://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation (e.g. `10.96.0.0/14`) from the RFC-1918 private networks (e.g. `10.0.0.0/8`, `172.16.0.0/12`, `192.168.0.0/16`) to pick a specific range to use.",
+"description": "The IP address range for the cluster pod IPs. If this field is set, then `cluster.cluster_ipv4_cidr` must be left blank. This field is only applicable when `use_ip_aliases` is true. Set to blank to have a range chosen with the default size. Set to /netmask (e.g. `/14`) to have a range chosen with a specific netmask. Set to a [CIDR](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation (e.g. `10.96.0.0/14`) from the RFC-1918 private networks (e.g. `10.0.0.0/8`, `172.16.0.0/12`, `192.168.0.0/16`) to pick a specific range to use.",
 "type": "string"
 },
 "clusterSecondaryRangeName": {
@@ -5322,7 +5570,7 @@ false
 "type": "string"
 },
 "nodeIpv4CidrBlock": {
-"description": "The IP address range of the instance IPs in this cluster. This is applicable only if `create_subnetwork` is true. Set to blank to have a range chosen with the default size. Set to /netmask (e.g. `/14`) to have a range chosen with a specific netmask. Set to a [CIDR](http://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation (e.g. `10.96.0.0/14`) from the RFC-1918 private networks (e.g. `10.0.0.0/8`, `172.16.0.0/12`, `192.168.0.0/16`) to pick a specific range to use.",
+"description": "The IP address range of the instance IPs in this cluster. This is applicable only if `create_subnetwork` is true. Set to blank to have a range chosen with the default size. Set to /netmask (e.g. `/14`) to have a range chosen with a specific netmask. Set to a [CIDR](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation (e.g. `10.96.0.0/14`) from the RFC-1918 private networks (e.g. `10.0.0.0/8`, `172.16.0.0/12`, `192.168.0.0/16`) to pick a specific range to use.",
 "type": "string"
 },
 "podCidrOverprovisionConfig": {
@@ -5335,7 +5583,7 @@ false
 "type": "string"
 },
 "servicesIpv4CidrBlock": {
-"description": "The IP address range of the services IPs in this cluster. If blank, a range will be automatically chosen with the default size. This field is only applicable when `use_ip_aliases` is true. Set to blank to have a range chosen with the default size. Set to /netmask (e.g. `/14`) to have a range chosen with a specific netmask. Set to a [CIDR](http://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation (e.g. `10.96.0.0/14`) from the RFC-1918 private networks (e.g. `10.0.0.0/8`, `172.16.0.0/12`, `192.168.0.0/16`) to pick a specific range to use.",
+"description": "The IP address range of the services IPs in this cluster. If blank, a range will be automatically chosen with the default size. This field is only applicable when `use_ip_aliases` is true. Set to blank to have a range chosen with the default size. Set to /netmask (e.g. `/14`) to have a range chosen with a specific netmask. Set to a [CIDR](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation (e.g. `10.96.0.0/14`) from the RFC-1918 private networks (e.g. `10.0.0.0/8`, `172.16.0.0/12`, `192.168.0.0/16`) to pick a specific range to use.",
 "type": "string"
 },
 "servicesIpv6CidrBlock": {
@@ -5372,7 +5620,7 @@ false
 },
 "tpuIpv4CidrBlock": {
 "deprecated": true,
-"description": "The IP address range of the Cloud TPUs in this cluster. If unspecified, a range will be automatically chosen with the default size. This field is only applicable when `use_ip_aliases` is true. If unspecified, the range will use the default size. Set to /netmask (e.g. `/14`) to have a range chosen with a specific netmask. Set to a [CIDR](http://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation (e.g. `10.96.0.0/14`) from the RFC-1918 private networks (e.g. `10.0.0.0/8`, `172.16.0.0/12`, `192.168.0.0/16`) to pick a specific range to use. This field is deprecated due to the deprecation of 2VM TPU. The end of life date for 2VM TPU is 2025-04-25.",
+"description": "The IP address range of the Cloud TPUs in this cluster. If unspecified, a range will be automatically chosen with the default size. This field is only applicable when `use_ip_aliases` is true. If unspecified, the range will use the default size. Set to /netmask (e.g. `/14`) to have a range chosen with a specific netmask. Set to a [CIDR](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation (e.g. `10.96.0.0/14`) from the RFC-1918 private networks (e.g. `10.0.0.0/8`, `172.16.0.0/12`, `192.168.0.0/16`) to pick a specific range to use. This field is deprecated due to the deprecation of 2VM TPU. The end of life date for 2VM TPU is 2025-04-25.",
 "type": "string"
 },
 "useIpAliases": {
@@ -5550,11 +5798,15 @@ false
 "$ref": "NodeKernelModuleLoading",
 "description": "Optional. Configuration for kernel module loading on nodes. When enabled, the node pool will be provisioned with a Container-Optimized OS image that enforces kernel module signature verification."
 },
+"swapConfig": {
+"$ref": "SwapConfig",
+"description": "Optional. Enables and configures swap space on nodes. If omitted, swap is disabled."
+},
 "sysctls": {
 "additionalProperties": {
 "type": "string"
 },
-"description": "The Linux kernel parameters to be applied to the nodes and all pods running on the nodes. The following parameters are supported. net.core.busy_poll net.core.busy_read net.core.netdev_max_backlog net.core.rmem_max net.core.rmem_default net.core.wmem_default net.core.wmem_max net.core.optmem_max net.core.somaxconn net.ipv4.tcp_rmem net.ipv4.tcp_wmem net.ipv4.tcp_tw_reuse net.ipv4.tcp_max_orphans net.netfilter.nf_conntrack_max net.netfilter.nf_conntrack_buckets net.netfilter.nf_conntrack_tcp_timeout_close_wait net.netfilter.nf_conntrack_tcp_timeout_time_wait net.netfilter.nf_conntrack_tcp_timeout_established net.netfilter.nf_conntrack_acct kernel.shmmni kernel.shmmax kernel.shmall fs.aio-max-nr fs.file-max fs.inotify.max_user_instances fs.inotify.max_user_watches fs.nr_open vm.dirty_background_ratio vm.dirty_expire_centisecs vm.dirty_ratio vm.dirty_writeback_centisecs vm.max_map_count vm.overcommit_memory vm.overcommit_ratio vm.vfs_cache_pressure vm.swappiness vm.watermark_scale_factor vm.min_free_kbytes",
+"description": "The Linux kernel parameters to be applied to the nodes and all pods running on the nodes. The following parameters are supported. net.core.busy_poll net.core.busy_read net.core.netdev_max_backlog net.core.rmem_max net.core.rmem_default net.core.wmem_default net.core.wmem_max net.core.optmem_max net.core.somaxconn net.ipv4.tcp_rmem net.ipv4.tcp_wmem net.ipv4.tcp_tw_reuse net.ipv4.tcp_mtu_probing net.ipv4.tcp_max_orphans net.ipv4.tcp_max_tw_buckets net.ipv4.tcp_syn_retries net.ipv4.tcp_ecn net.ipv4.tcp_congestion_control net.netfilter.nf_conntrack_max net.netfilter.nf_conntrack_buckets net.netfilter.nf_conntrack_tcp_timeout_close_wait net.netfilter.nf_conntrack_tcp_timeout_time_wait net.netfilter.nf_conntrack_tcp_timeout_established net.netfilter.nf_conntrack_acct kernel.shmmni kernel.shmmax kernel.shmall kernel.perf_event_paranoid kernel.sched_rt_runtime_us kernel.softlockup_panic kernel.yama.ptrace_scope kernel.kptr_restrict kernel.dmesg_restrict kernel.sysrq fs.aio-max-nr fs.file-max fs.inotify.max_user_instances fs.inotify.max_user_watches fs.nr_open vm.dirty_background_ratio vm.dirty_background_bytes vm.dirty_expire_centisecs vm.dirty_ratio vm.dirty_bytes vm.dirty_writeback_centisecs vm.max_map_count vm.overcommit_memory vm.overcommit_ratio vm.vfs_cache_pressure vm.swappiness vm.watermark_scale_factor vm.min_free_kbytes",
 "type": "object"
 },
 "transparentHugepageDefrag": {
@@ -5756,7 +6008,7 @@ false
 "properties": {
 "enableLegacyLustrePort": {
 "deprecated": true,
-"description": "If set to true, the Lustre CSI driver will install Lustre kernel modules using port 6988. This serves as a workaround for a port conflict with the gke-metadata-server. This field is required ONLY under the following conditions: 1. The GKE node version is older than 1.33.2-gke.4655000. 2. You're connecting to a Lustre instance that has the 'gke-support-enabled' flag.",
+"description": "If set to true, the Lustre CSI driver will install Lustre kernel modules using port 6988. This serves as a workaround for a port conflict with the gke-metadata-server. This field is required ONLY under the following conditions: 1. The GKE node version is older than 1.33.2-gke.4655000. 2. You're connecting to a Lustre instance that has the 'gke-support-enabled' flag. Deprecated: This flag is no longer required as of GKE node version 1.33.2-gke.4655000, unless you are connecting to a Lustre instance that has the `gke-support-enabled` flag.",
 "type": "boolean"
 },
 "enabled": {
@@ -5836,6 +6088,27 @@ false
 },
 "type": "object"
 },
+"ManagedOpenTelemetryConfig": {
+"description": "ManagedOpenTelemetryConfig is the configuration for the GKE Managed OpenTelemetry pipeline.",
+"id": "ManagedOpenTelemetryConfig",
+"properties": {
+"scope": {
+"description": "Scope of the Managed OpenTelemetry pipeline.",
+"enum": [
+"SCOPE_UNSPECIFIED",
+"NONE",
+"COLLECTION_AND_INSTRUMENTATION_COMPONENTS"
+],
+"enumDescriptions": [
+"SCOPE_UNSPECIFIED is when the scope is not set.",
+"NONE is used to disable the Managed OpenTelemetry pipeline.",
+"COLLECTION_AND_INSTRUMENTATION_COMPONENTS is used to enable the Managed OpenTelemetry pipeline for collection and instrumentation components."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "ManagedPrometheusConfig": {
 "description": "ManagedPrometheusConfig defines the configuration for Google Cloud Managed Service for Prometheus.",
 "id": "ManagedPrometheusConfig",
@@ -6297,6 +6570,11 @@ false
 "$ref": "ConfidentialNodes",
 "description": "Confidential nodes config. All the nodes in the node pool will be Confidential VM once enabled."
 },
+"consolidationDelay": {
+"description": "Consolidation delay defines duration after which the Cluster Autoscaler can scale down underutilized nodes. If not set, nodes are scaled down by default behavior, i.e. according to the chosen autoscaling profile.",
+"format": "google-duration",
+"type": "string"
+},
 "containerdConfig": {
 "$ref": "ContainerdConfig",
 "description": "Parameters for containerd customization."
@@ -6345,6 +6623,10 @@ false
 "$ref": "GcfsConfig",
 "description": "Google Container File System (image streaming) configs."
 },
+"gpuDirectConfig": {
+"$ref": "GPUDirectConfig",
+"description": "The configuration for GPU Direct"
+},
 "gvnic": {
 "$ref": "VirtualNIC",
 "description": "Enable or disable gvnic in the node pool."
@@ -6531,6 +6813,17 @@ false
 },
 "type": "object"
 },
+"NodeDrainConfig": {
+"description": "NodeDrainConfig contains the node drain related configurations for this nodepool.",
+"id": "NodeDrainConfig",
+"properties": {
+"respectPdbDuringNodePoolDeletion": {
+"description": "Whether to respect PDB during node pool deletion.",
+"type": "boolean"
+}
+},
+"type": "object"
+},
 "NodeKernelModuleLoading": {
 "description": "Configuration for kernel module loading on nodes.",
 "id": "NodeKernelModuleLoading",
@@ -6735,8 +7028,7 @@ false
 "type": "string"
 },
 "subnetwork": {
-"description": "Output only. The subnetwork path for the node pool. Format: projects/{project}/regions/{region}/subnetworks/{subnetwork} If the cluster is associated with multiple subnetworks, the subnetwork for the node pool is picked based on the IP utilization during node pool creation and is immutable.",
-"readOnly": true,
+"description": "Optional. The subnetwork name/path for the node pool. Format: projects/{project}/regions/{region}/subnetworks/{subnetwork} If the cluster is associated with multiple subnetworks, the subnetwork can be either: 1. A user supplied subnetwork name/full path during node pool creation. Example1: my-subnet Example2: projects/gke-project/regions/us-central1/subnetworks/my-subnet 2. A subnetwork path picked based on the IP utilization during node pool creation and is immutable.",
 "type": "string"
 }
 },
@@ -6809,6 +7101,10 @@ false
 "$ref": "NodeNetworkConfig",
 "description": "Networking configuration for this NodePool. If specified, it overrides the cluster-level defaults."
 },
+"nodeDrainConfig": {
+"$ref": "NodeDrainConfig",
+"description": "Specifies the node drain configuration for this node pool."
+},
 "placementPolicy": {
 "$ref": "PlacementPolicy",
 "description": "Specifies the node placement policy."
@@ -7352,6 +7648,21 @@ false
 },
 "type": "object"
 },
+"PdbBlockedPod": {
+"description": "The namespace/name of the pod whose eviction is blocked by PDB.",
+"id": "PdbBlockedPod",
+"properties": {
+"name": {
+"description": "The name of the pod.",
+"type": "string"
+},
+"namespace": {
+"description": "The namespace of the pod.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "PlacementPolicy": {
 "description": "PlacementPolicy defines the placement policy used by the node pool.",
 "id": "PlacementPolicy",
@@ -7611,7 +7922,7 @@ false
 "id": "RecurringTimeWindow",
 "properties": {
 "recurrence": {
-"description": "An RRULE (https://tools.ietf.org/html/rfc5545#section-3.8.5.3) for how this window reccurs. They go on for the span of time between the start and end time. For example, to have something repeat every weekday, you'd use: `FREQ=WEEKLY;BYDAY=MO,TU,WE,TH,FR` To repeat some window daily (equivalent to the DailyMaintenanceWindow): `FREQ=DAILY` For the first weekend of every month: `FREQ=MONTHLY;BYSETPOS=1;BYDAY=SA,SU` This specifies how frequently the window starts. Eg, if you wanted to have a 9-5 UTC-4 window every weekday, you'd use something like: ``` start time = 2019-01-01T09:00:00-0400 end time = 2019-01-01T17:00:00-0400 recurrence = FREQ=WEEKLY;BYDAY=MO,TU,WE,TH,FR ``` Windows can span multiple days. Eg, to make the window encompass every weekend from midnight Saturday till the last minute of Sunday UTC: ``` start time = 2019-01-05T00:00:00Z end time = 2019-01-07T23:59:00Z recurrence = FREQ=WEEKLY;BYDAY=SA ``` Note the start and end time's specific dates are largely arbitrary except to specify duration of the window and when it first starts. The FREQ values of HOURLY, MINUTELY, and SECONDLY are not supported.",
+"description": "An RRULE (https://tools.ietf.org/html/rfc5545#section-3.8.5.3) for how this window recurs. They go on for the span of time between the start and end time. For example, to have something repeat every weekday, you'd use: `FREQ=WEEKLY;BYDAY=MO,TU,WE,TH,FR` To repeat some window daily (equivalent to the DailyMaintenanceWindow): `FREQ=DAILY` For the first weekend of every month: `FREQ=MONTHLY;BYSETPOS=1;BYDAY=SA,SU` This specifies how frequently the window starts. Eg, if you wanted to have a 9-5 UTC-4 window every weekday, you'd use something like: ``` start time = 2019-01-01T09:00:00-0400 end time = 2019-01-01T17:00:00-0400 recurrence = FREQ=WEEKLY;BYDAY=MO,TU,WE,TH,FR ``` Windows can span multiple days. Eg, to make the window encompass every weekend from midnight Saturday till the last minute of Sunday UTC: ``` start time = 2019-01-05T00:00:00Z end time = 2019-01-07T23:59:00Z recurrence = FREQ=WEEKLY;BYDAY=SA ``` Note the start and end time's specific dates are largely arbitrary except to specify duration of the window and when it first starts. The FREQ values of HOURLY, MINUTELY, and SECONDLY are not supported.",
 "type": "string"
 },
 "window": {
@@ -7621,6 +7932,42 @@ false
 },
 "type": "object"
 },
+"RegistryHeader": {
+"description": "RegistryHeader configures headers for the registry.",
+"id": "RegistryHeader",
+"properties": {
+"key": {
+"description": "Key configures the header key.",
+"type": "string"
+},
+"value": {
+"description": "Value configures the header value.",
+"items": {
+"type": "string"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"RegistryHostConfig": {
+"description": "RegistryHostConfig configures the top-level structure for a single containerd registry server's configuration, which represents one hosts.toml file on the node. It will override the same fqdns in PrivateRegistryAccessConfig.",
+"id": "RegistryHostConfig",
+"properties": {
+"hosts": {
+"description": "HostConfig configures a list of host-specific configurations for the server. Each server can have at most 10 host configurations.",
+"items": {
+"$ref": "HostConfig"
+},
+"type": "array"
+},
+"server": {
+"description": "Defines the host name of the registry server, which will be used to create configuration file as /etc/containerd/hosts.d//hosts.toml. It supports fully qualified domain names (FQDN) and IP addresses: Specifying port is supported. Wildcards are NOT supported. Examples: - my.customdomain.com - 10.0.1.2:5000",
+"type": "string"
+}
+},
+"type": "object"
+},
 "ReleaseChannel": {
 "description": "ReleaseChannel indicates which release channel a cluster is subscribed to. Release channels are arranged in order of risk. When a cluster is subscribed to a release channel, Google maintains both the master version and the node version. Node auto-upgrade defaults to true and cannot be disabled.",
 "id": "ReleaseChannel",
@@ -8483,6 +8830,17 @@ false
 },
 "type": "object"
 },
+"SliceControllerConfig": {
+"description": "Configuration for the Slice Controller.",
+"id": "SliceControllerConfig",
+"properties": {
+"enabled": {
+"description": "Optional. Indicates whether Slice Controller is enabled in the cluster.",
+"type": "boolean"
+}
+},
+"type": "object"
+},
 "SoleTenantConfig": {
 "description": "SoleTenantConfig contains the NodeAffinities to specify what shared sole tenant node groups should back the node pool.",
 "id": "SoleTenantConfig",
@@ -8672,6 +9030,33 @@ false
 },
 "type": "object"
 },
+"SwapConfig": {
+"description": "Configuration for swap memory on a node pool.",
+"id": "SwapConfig",
+"properties": {
+"bootDiskProfile": {
+"$ref": "BootDiskProfile",
+"description": "Swap on the node's boot disk."
+},
+"dedicatedLocalSsdProfile": {
+"$ref": "DedicatedLocalSsdProfile",
+"description": "Provisions a new, separate local NVMe SSD exclusively for swap."
+},
+"enabled": {
+"description": "Optional. Enables or disables swap for the node pool.",
+"type": "boolean"
+},
+"encryptionConfig": {
+"$ref": "EncryptionConfig",
+"description": "Optional. If omitted, swap space is encrypted by default."
+},
+"ephemeralLocalSsdProfile": {
+"$ref": "EphemeralLocalSsdProfile",
+"description": "Swap on the local SSD shared with pod ephemeral storage."
+}
+},
+"type": "object"
+},
 "TimeWindow": {
 "description": "Represents an arbitrary window of time.",
 "id": "TimeWindow",
@@ -8803,6 +9188,11 @@ false
 "$ref": "ConfidentialNodes",
 "description": "Confidential nodes config. All the nodes in the node pool will be Confidential VM once enabled."
 },
+"consolidationDelay": {
+"description": "Consolidation delay defines duration after which the Cluster Autoscaler can scale down underutilized nodes. If not set, nodes are scaled down by default behavior, i.e. according to the chosen autoscaling profile.",
+"format": "google-duration",
+"type": "string"
+},
 "containerdConfig": {
 "$ref": "ContainerdConfig",
 "description": "The desired containerd config for nodes in the node pool. Initiates an upgrade operation that recreates the nodes with the new config."
@@ -8876,6 +9266,10 @@ false
 "description": "The name (project, location, cluster, node pool) of the node pool to update. Specified in the format `projects/*/locations/*/clusters/*/nodePools/*`.",
 "type": "string"
 },
+"nodeDrainConfig": {
+"$ref": "NodeDrainConfig",
+"description": "The desired node drain configuration for nodes in the node pool."
+},
 "nodeNetworkConfig": {
 "$ref": "NodeNetworkConfig",
 "description": "Node network config."
@@ -9086,6 +9480,10 @@ false
 "description": "A brief description of the event.",
 "type": "string"
 },
+"disruptionEvent": {
+"$ref": "DisruptionEvent",
+"description": "The information about the disruption event. This field is only populated when event_type is DISRUPTION_EVENT."
+},
 "endTime": {
 "description": "The time when the operation ended.",
 "format": "google-datetime",
@@ -9097,13 +9495,15 @@ false
 "EVENT_TYPE_UNSPECIFIED",
 "END_OF_SUPPORT",
 "COS_MILESTONE_VERSION_UPDATE",
-"UPGRADE_LIFECYCLE"
+"UPGRADE_LIFECYCLE",
+"DISRUPTION_EVENT"
 ],
 "enumDescriptions": [
 "EVENT_TYPE_UNSPECIFIED indicates the event type is unspecified.",
 "END_OF_SUPPORT indicates GKE version reaches end of support, check standard_support_end_time and extended_support_end_time for more details.",
 "COS_MILESTONE_VERSION_UPDATE indicates that the COS node image will update COS milestone version for new patch versions starting with the one in the description.",
-"UPGRADE_LIFECYCLE indicates the event is about the upgrade lifecycle."
+"UPGRADE_LIFECYCLE indicates the event is about the upgrade lifecycle.",
+"DISRUPTION_EVENT indicates the event is about the disruption."
 ],
 "type": "string"
 },
@@ -9193,12 +9593,14 @@ false
 "enum": [
 "NODE_POOL_UPDATE_STRATEGY_UNSPECIFIED",
 "BLUE_GREEN",
-"SURGE"
+"SURGE",
+"SHORT_LIVED"
 ],
 "enumDescriptions": [
 "Default value if unset. GKE internally defaults the update strategy to SURGE for unspecified strategies.",
 "blue-green upgrade.",
-"SURGE is the traditional way of upgrade a node pool. max_surge and max_unavailable determines the level of upgrade parallelism."
+"SURGE is the traditional way of upgrade a node pool. max_surge and max_unavailable determines the level of upgrade parallelism.",
+"SHORT_LIVED is the dedicated upgrade strategy for QueuedProvisioning and flex start nodepools scaled up only by enqueueing to the Dynamic Workload Scheduler (DWS)."
 ],
 "type": "string"
 }
@@ -9284,6 +9686,14 @@ false
 "description": "The Cloud KMS cryptoKey to use for Confidential Hyperdisk on the control plane nodes.",
 "type": "string"
 },
+"controlPlaneDiskEncryptionKeyVersions": {
+"description": "Output only. All of the versions of the Cloud KMS cryptoKey that are used by Confidential Hyperdisks on the control plane nodes.",
+"items": {
+"type": "string"
+},
+"readOnly": true,
+"type": "array"
+},
 "etcdApiCa": {
 "description": "Resource path of the Certificate Authority Service caPool to use for the etcd API CA in this cluster.",
 "type": "string"