google-api-python-client 2.187.0__py3-none-any.whl → 2.189.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/gkehub.v1beta.json

@@ -183,7 +183,7 @@
 ]
 },
 "list": {
-"description": "Lists information about the supported locations for this service.",
+"description": "Lists information about the supported locations for this service. This method can be called in two ways: * **List all public locations:** Use the path `GET /v1/locations`. * **List project-visible locations:** Use the path `GET /v1/projects/{project_id}/locations`. This may include public locations as well as private or other locations specifically visible to the project.",
 "flatPath": "v1beta/projects/{projectsId}/locations",
 "httpMethod": "GET",
 "id": "gkehub.projects.locations.list",
@@ -1465,7 +1465,7 @@
 "type": "string"
 },
 "returnPartialSuccess": {
-"description": "When set to `true`, operations that are reachable are returned as normal, and those that are unreachable are returned in the [ListOperationsResponse.unreachable] field. This can only be `true` when reading across collections e.g. when `parent` is set to `\"projects/example/locations/-\"`. This field is not by default supported and will result in an `UNIMPLEMENTED` error if set unless explicitly documented otherwise in service or product specific documentation.",
+"description": "When set to `true`, operations that are reachable are returned as normal, and those that are unreachable are returned in the ListOperationsResponse.unreachable field. This can only be `true` when reading across collections. For example, when `parent` is set to `\"projects/example/locations/-\"`. This field is not supported by default and will result in an `UNIMPLEMENTED` error if set unless explicitly documented otherwise in service or product specific documentation.",
 "location": "query",
 "type": "boolean"
 }
@@ -1480,6 +1480,238 @@
 }
 }
 },
+"rolloutSequences": {
+"methods": {
+"create": {
+"description": "Create a new rollout sequence resource.",
+"flatPath": "v1beta/projects/{projectsId}/locations/{locationsId}/rolloutSequences",
+"httpMethod": "POST",
+"id": "gkehub.projects.locations.rolloutSequences.create",
+"parameterOrder": [
+"parent"
+],
+"parameters": {
+"parent": {
+"description": "Required. The parent resource where this rollout sequence will be created. projects/{project}/locations/{location}",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+$",
+"required": true,
+"type": "string"
+},
+"rolloutSequenceId": {
+"description": "Required. User provided identifier that is used as part of the resource name; must conform to RFC-1034 and additionally restrict to lower-cased letters. This comes out roughly to: /^a-z+[a-z0-9]$/",
+"location": "query",
+"type": "string"
+}
+},
+"path": "v1beta/{+parent}/rolloutSequences",
+"request": {
+"$ref": "RolloutSequence"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"delete": {
+"description": "Remove a RolloutSequence.",
+"flatPath": "v1beta/projects/{projectsId}/locations/{locationsId}/rolloutSequences/{rolloutSequencesId}",
+"httpMethod": "DELETE",
+"id": "gkehub.projects.locations.rolloutSequences.delete",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. The name of the rollout sequence to delete. projects/{project}/locations/{location}/rolloutSequences/{rollout_sequence}",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/rolloutSequences/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1beta/{+name}",
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"get": {
+"description": "Retrieve a single rollout sequence.",
+"flatPath": "v1beta/projects/{projectsId}/locations/{locationsId}/rolloutSequences/{rolloutSequencesId}",
+"httpMethod": "GET",
+"id": "gkehub.projects.locations.rolloutSequences.get",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. The name of the rollout sequence to retrieve. projects/{project}/locations/{location}/rolloutSequences/{rollout_sequence}",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/rolloutSequences/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1beta/{+name}",
+"response": {
+"$ref": "RolloutSequence"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"list": {
+"description": "Retrieve the list of all rollout sequences.",
+"flatPath": "v1beta/projects/{projectsId}/locations/{locationsId}/rolloutSequences",
+"httpMethod": "GET",
+"id": "gkehub.projects.locations.rolloutSequences.list",
+"parameterOrder": [
+"parent"
+],
+"parameters": {
+"filter": {
+"description": "Optional. Lists Rollout Sequences that match the filter expression, following the syntax outlined in https://google.aip.dev/160.",
+"location": "query",
+"type": "string"
+},
+"pageSize": {
+"description": "Optional. The maximum number of rollout sequences to return. The service may return fewer than this value. If unspecified, at most 50 rollout sequences will be returned. The maximum value is 1000; values above 1000 will be coerced to 1000.",
+"format": "int32",
+"location": "query",
+"type": "integer"
+},
+"pageToken": {
+"description": "Optional. A page token, received from a previous `ListRolloutSequences` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListRolloutSequences` must match the call that provided the page token.",
+"location": "query",
+"type": "string"
+},
+"parent": {
+"description": "Required. The parent, which owns this collection of rollout sequences. Format: projects/{project}/locations/{location}",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1beta/{+parent}/rolloutSequences",
+"response": {
+"$ref": "ListRolloutSequencesResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"patch": {
+"description": "Update a rollout sequence.",
+"flatPath": "v1beta/projects/{projectsId}/locations/{locationsId}/rolloutSequences/{rolloutSequencesId}",
+"httpMethod": "PATCH",
+"id": "gkehub.projects.locations.rolloutSequences.patch",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Identifier. Name of the rollout sequence in the format of: projects/{PROJECT_ID}/locations/global/rolloutSequences/{NAME}",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/rolloutSequences/[^/]+$",
+"required": true,
+"type": "string"
+},
+"updateMask": {
+"description": "Optional. The list of fields to update.",
+"format": "google-fieldmask",
+"location": "query",
+"type": "string"
+}
+},
+"path": "v1beta/{+name}",
+"request": {
+"$ref": "RolloutSequence"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+}
+}
+},
+"rollouts": {
+"methods": {
+"get": {
+"description": "Retrieve a single rollout.",
+"flatPath": "v1beta/projects/{projectsId}/locations/{locationsId}/rollouts/{rolloutsId}",
+"httpMethod": "GET",
+"id": "gkehub.projects.locations.rollouts.get",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. The name of the rollout to retrieve. projects/{project}/locations/{location}/rollouts/{rollout}",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/rollouts/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1beta/{+name}",
+"response": {
+"$ref": "Rollout"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+},
+"list": {
+"description": "Retrieve the list of all rollouts.",
+"flatPath": "v1beta/projects/{projectsId}/locations/{locationsId}/rollouts",
+"httpMethod": "GET",
+"id": "gkehub.projects.locations.rollouts.list",
+"parameterOrder": [
+"parent"
+],
+"parameters": {
+"filter": {
+"description": "Optional. Lists Rollouts that match the filter expression, following the syntax outlined in https://google.aip.dev/160.",
+"location": "query",
+"type": "string"
+},
+"pageSize": {
+"description": "The maximum number of rollout to return. The service may return fewer than this value. If unspecified, at most 50 rollouts will be returned. The maximum value is 1000; values above 1000 will be coerced to 1000.",
+"format": "int32",
+"location": "query",
+"type": "integer"
+},
+"pageToken": {
+"description": "A page token, received from a previous `ListRollouts` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListRollouts` must match the call that provided the page token.",
+"location": "query",
+"type": "string"
+},
+"parent": {
+"description": "Required. The parent, which owns this collection of rollout. Format: projects/{project}/locations/{location}",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1beta/{+parent}/rollouts",
+"response": {
+"$ref": "ListRolloutsResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+}
+}
+},
 "scopes": {
 "methods": {
 "create": {
@@ -2122,7 +2354,7 @@
 }
 }
 },
-"revision": "20251026",
+"revision": "20260126",
 "rootUrl": "https://gkehub.googleapis.com/",
 "schemas": {
 "AppDevExperienceFeatureSpec": {
@@ -2293,6 +2525,17 @@
 "properties": {},
 "type": "object"
 },
+"ClusterSelector": {
+"description": "Selector for clusters.",
+"id": "ClusterSelector",
+"properties": {
+"labelSelector": {
+"description": "Required. A valid CEL (Common Expression Language) expression which evaluates `resource.labels`.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "ClusterUpgradeFleetSpec": {
 "description": "**ClusterUpgrade**: The configuration for the fleet-level ClusterUpgrade feature.",
 "id": "ClusterUpgradeFleetSpec",
@@ -2567,6 +2810,10 @@
 "rbacrolebindingactuation": {
 "$ref": "RBACRoleBindingActuationFeatureSpec",
 "description": "RBAC Role Binding Actuation feature spec"
+},
+"workloadidentity": {
+"$ref": "WorkloadIdentityFeatureSpec",
+"description": "Workload Identity feature spec."
 }
 },
 "type": "object"
@@ -2595,6 +2842,10 @@
 "$ref": "FeatureState",
 "description": "Output only. The \"running state\" of the Feature in this Fleet.",
 "readOnly": true
+},
+"workloadidentity": {
+"$ref": "WorkloadIdentityFeatureState",
+"description": "WorkloadIdentity fleet-level state."
 }
 },
 "type": "object"
@@ -2716,14 +2967,14 @@
 "id": "ConfigManagementConfigSync",
 "properties": {
 "deploymentOverrides": {
-"description": "Optional. Configuration for deployment overrides.",
+"description": "Optional. Configuration for deployment overrides. Applies only to Config Sync deployments with containers that are not a root or namespace reconciler: `reconciler-manager`, `otel-collector`, `resource-group-controller-manager`, `admission-webhook`. To override a root or namespace reconciler, use the rootsync or reposync fields at https://docs.cloud.google.com/kubernetes-engine/config-sync/docs/reference/rootsync-reposync-fields#override-resources instead.",
 "items": {
 "$ref": "ConfigManagementDeploymentOverride"
 },
 "type": "array"
 },
 "enabled": {
-"description": "Optional. Enables the installation of ConfigSync. If set to true, ConfigSync resources will be created and the other ConfigSync fields will be applied if exist. If set to false, all other ConfigSync fields will be ignored, ConfigSync resources will be deleted. If omitted, ConfigSync resources will be managed depends on the presence of the git or oci field.",
+"description": "Optional. Enables the installation of Config Sync. If set to true, the Feature will manage Config Sync resources, and apply the other ConfigSync fields if they exist. If set to false, the Feature will ignore all other ConfigSync fields and delete the Config Sync resources. If omitted, ConfigSync is considered enabled if the git or oci field is present.",
 "type": "boolean"
 },
 "git": {
@@ -2740,11 +2991,11 @@
 "description": "Optional. OCI repo configuration for the cluster"
 },
 "preventDrift": {
-"description": "Optional. Set to true to enable the Config Sync admission webhook to prevent drifts. If set to `false`, disables the Config Sync admission webhook and does not prevent drifts.",
+"description": "Optional. Set to true to enable the Config Sync admission webhook to prevent drifts. If set to false, disables the Config Sync admission webhook and does not prevent drifts. Defaults to false. See https://docs.cloud.google.com/kubernetes-engine/config-sync/docs/how-to/prevent-config-drift for details.",
 "type": "boolean"
 },
 "sourceFormat": {
-"description": "Optional. Specifies whether the Config Sync Repo is in \"hierarchical\" or \"unstructured\" mode.",
+"description": "Optional. Specifies whether the Config Sync repo is in `hierarchical` or `unstructured` mode. Defaults to `hierarchical`. See https://docs.cloud.google.com/kubernetes-engine/config-sync/docs/concepts/configs#organize-configs for an explanation.",
 "type": "string"
 },
 "stopSyncing": {
@@ -3096,19 +3347,19 @@
 "type": "string"
 },
 "cpuLimit": {
-"description": "Optional. The cpu limit of the container.",
+"description": "Optional. The cpu limit of the container. Use the following CPU resource units: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#meaning-of-cpu.",
 "type": "string"
 },
 "cpuRequest": {
-"description": "Optional. The cpu request of the container.",
+"description": "Optional. The cpu request of the container. Use the following CPU resource units: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#meaning-of-cpu.",
 "type": "string"
 },
 "memoryLimit": {
-"description": "Optional. The memory limit of the container.",
+"description": "Optional. The memory limit of the container. Use the following memory resource units: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#meaning-of-memory.",
 "type": "string"
 },
 "memoryRequest": {
-"description": "Optional. The memory request of the container.",
+"description": "Optional. The memory request of the container. Use the following memory resource units: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#meaning-of-memory.",
 "type": "string"
 }
 },
@@ -3225,11 +3476,11 @@
 "id": "ConfigManagementGitConfig",
 "properties": {
 "gcpServiceAccountEmail": {
-"description": "Optional. The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.",
+"description": "Optional. The Google Cloud Service Account Email used for auth when secret_type is `gcpserviceaccount`.",
 "type": "string"
 },
 "httpsProxy": {
-"description": "Optional. URL for the HTTPS proxy to be used when communicating with the Git repo.",
+"description": "Optional. URL for the HTTPS proxy to be used when communicating with the Git repo. Only specify when secret_type is `cookiefile`, `token`, or `none`.",
 "type": "string"
 },
 "policyDir": {
@@ -3237,7 +3488,7 @@
 "type": "string"
 },
 "secretType": {
-"description": "Required. Type of secret configured for access to the Git repo. Must be one of ssh, cookiefile, gcenode, token, gcpserviceaccount, githubapp or none. The validation of this is case-sensitive.",
+"description": "Required. Type of secret configured for access to the Git repo. Must be one of `ssh`, `cookiefile`, `gcenode`, `token`, `gcpserviceaccount`, `githubapp` or `none`. The validation of this is case-sensitive.",
 "type": "string"
 },
 "syncBranch": {
@@ -3389,10 +3640,10 @@
 "binauthz": {
 "$ref": "ConfigManagementBinauthzConfig",
 "deprecated": true,
-"description": "Optional. Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set."
+"description": "Optional. Deprecated: Binauthz configuration will be ignored and should not be set."
 },
 "cluster": {
-"description": "Optional. The user-specified cluster name used by Config Sync cluster-name-selector annotation or ClusterSelector, for applying configs to only a subset of clusters. Omit this field if the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector. Set this field if a name different from the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector.",
+"description": "Optional. User-specified cluster name used by the Config Sync cluster-name-selector annotation or ClusterSelector object, for applying configs to only a subset of clusters. Read more about the cluster-name-selector annotation and ClusterSelector object at https://docs.cloud.google.com/kubernetes-engine/config-sync/docs/how-to/cluster-scoped-objects#limiting-configs. Only set this field if a name different from the cluster's fleet membership name is used by the Config Sync cluster-name-selector annotation or ClusterSelector.",
 "type": "string"
 },
 "configSync": {
@@ -3405,7 +3656,8 @@
 "description": "Optional. Hierarchy Controller configuration for the cluster. Deprecated: Configuring Hierarchy Controller through the configmanagement feature is no longer recommended. Use https://github.com/kubernetes-sigs/hierarchical-namespaces instead."
 },
 "management": {
-"description": "Optional. Enables automatic Feature management.",
+"deprecated": true,
+"description": "Optional. Deprecated: From version 1.21.0, automatic Feature management is unavailable, and Config Sync only supports manual upgrades.",
 "enum": [
 "MANAGEMENT_UNSPECIFIED",
 "MANAGEMENT_AUTOMATIC",
@@ -3424,7 +3676,7 @@
 "description": "Optional. Policy Controller configuration for the cluster. Deprecated: Configuring Policy Controller through the configmanagement feature is no longer recommended. Use the policycontroller feature instead."
 },
 "version": {
-"description": "Optional. Version of ACM installed.",
+"description": "Optional. Version of Config Sync to install. Defaults to the latest supported Config Sync version if the config_sync field is enabled. See supported versions at https://cloud.google.com/kubernetes-engine/config-sync/docs/get-support-config-sync#version_support_policy.",
 "type": "string"
 }
 },
@@ -3482,7 +3734,7 @@
 "id": "ConfigManagementOciConfig",
 "properties": {
 "gcpServiceAccountEmail": {
-"description": "Optional. The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.",
+"description": "Optional. The Google Cloud Service Account Email used for auth when secret_type is `gcpserviceaccount`.",
 "type": "string"
 },
 "policyDir": {
@@ -3490,7 +3742,7 @@
 "type": "string"
 },
 "secretType": {
-"description": "Required. Type of secret configured for access to the OCI repo. Must be one of gcenode, gcpserviceaccount, k8sserviceaccount or none. The validation of this is case-sensitive.",
+"description": "Required. Type of secret configured for access to the OCI repo. Must be one of `gcenode`, `gcpserviceaccount`, `k8sserviceaccount` or `none`. The validation of this is case-sensitive.",
 "type": "string"
 },
 "syncRepo": {
@@ -3814,6 +4066,35 @@
 "properties": {},
 "type": "object"
 },
+"ExcludedCluster": {
+"description": "An excluded cluster from the rollout.",
+"id": "ExcludedCluster",
+"properties": {
+"membership": {
+"description": "Output only. The name of the fleet Membership resource associated to the excluded cluster.",
+"readOnly": true,
+"type": "string"
+},
+"reason": {
+"description": "Output only. The reason for excluding the cluster from the rollout.",
+"enum": [
+"REASON_UNSPECIFIED",
+"EXCLUDED_BY_FILTER",
+"ALREADY_UPGRADED",
+"VERSION_TOO_OLD"
+],
+"enumDescriptions": [
+"Default value.",
+"The cluster was excluded by the rollout filter.",
+"The cluster was already upgraded.",
+"The cluster version is too old."
+],
+"readOnly": true,
+"type": "string"
+}
+},
+"type": "object"
+},
 "Expr": {
 "description": "Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: \"Summary size limit\" description: \"Determines if a summary is less than 100 chars\" expression: \"document.summary.size() < 100\" Example (Equality): title: \"Requestor is owner\" description: \"Determines if requestor is the document owner\" expression: \"document.owner == request.auth.claims.email\" Example (Logic): title: \"Public documents\" description: \"Determine whether the document should be publicly visible\" expression: \"document.type != 'private' && document.type != 'internal'\" Example (Data Manipulation): title: \"Notification string\" description: \"Create a notification string with a timestamp.\" expression: \"'New message received at ' + string(document.create_time)\" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.",
 "id": "Expr",
@@ -3989,6 +4270,21 @@
 },
 "type": "object"
 },
+"FeatureUpdate": {
+"description": "Feature config to use for Rollout.",
+"id": "FeatureUpdate",
+"properties": {
+"binaryAuthorizationConfig": {
+"$ref": "BinaryAuthorizationConfig",
+"description": "Optional. Configuration for Binary Authorization."
+},
+"securityPostureConfig": {
+"$ref": "SecurityPostureConfig",
+"description": "Optional. Configuration for Security Posture."
+}
+},
+"type": "object"
+},
 "Fleet": {
 "description": "Fleet contains the Fleet-wide metadata and configuration.",
 "id": "Fleet",
@@ -4916,7 +5212,7 @@
 "type": "array"
 },
 "unreachable": {
-"description": "Unordered list. Unreachable resources. Populated when the request sets `ListOperationsRequest.return_partial_success` and reads across collections e.g. when attempting to list all resources across all supported locations.",
+"description": "Unordered list. Unreachable resources. Populated when the request sets `ListOperationsRequest.return_partial_success` and reads across collections. For example, when attempting to list all resources across all supported locations.",
 "items": {
 "type": "string"
 },
@@ -4943,6 +5239,42 @@
 },
 "type": "object"
 },
+"ListRolloutSequencesResponse": {
+"description": "Response message for listing rollout sequences.",
+"id": "ListRolloutSequencesResponse",
+"properties": {
+"nextPageToken": {
+"description": "A token, which can be sent as `page_token` to retrieve the next page. If this field is omitted, there are no subsequent pages.",
+"type": "string"
+},
+"rolloutSequences": {
+"description": "The rollout sequences from the specified parent resource.",
+"items": {
+"$ref": "RolloutSequence"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"ListRolloutsResponse": {
+"description": "Response message for listing rollouts.",
+"id": "ListRolloutsResponse",
+"properties": {
+"nextPageToken": {
+"description": "A token, which can be sent as `page_token` to retrieve the next page. If this field is omitted, there are no subsequent pages.",
+"type": "string"
+},
+"rollouts": {
+"description": "The rollouts from the specified parent resource.",
+"items": {
+"$ref": "Rollout"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
 "ListScopeNamespacesResponse": {
 "description": "List of fleet namespaces.",
 "id": "ListScopeNamespacesResponse",
@@ -5324,6 +5656,10 @@
 "state": {
 "$ref": "FeatureState",
 "description": "The high-level state of this Feature for a single membership."
+},
+"workloadidentity": {
+"$ref": "WorkloadIdentityMembershipState",
+"description": "Workload Identity membership specific state."
 }
 },
 "type": "object"
@@ -6268,31 +6604,356 @@
 },
 "type": "object"
 },
-"Scope": {
-"description": "Scope represents a Scope in a Fleet.",
-"id": "Scope",
+"Rollout": {
+"description": "Rollout contains the Rollout metadata and configuration.",
+"id": "Rollout",
 "properties": {
+"completeTime": {
+"description": "Output only. The timestamp at which the Rollout was completed.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+},
 "createTime": {
-"description": "Output only. When the scope was created.",
+"description": "Output only. The timestamp at which the Rollout was created.",
 "format": "google-datetime",
 "readOnly": true,
 "type": "string"
 },
 "deleteTime": {
-"description": "Output only. When the scope was deleted.",
+"description": "Output only. The timestamp at the Rollout was deleted.",
 "format": "google-datetime",
 "readOnly": true,
 "type": "string"
 },
-"labels": {
-"additionalProperties": {
+"displayName": {
+"description": "Optional. Human readable display name of the Rollout.",
 "type": "string"
 },
-"description": "Optional. Labels for this Scope.",
-"type": "object"
-},
-"name": {
-"description": "The resource name for the scope `projects/{project}/locations/{location}/scopes/{scope}`",
+"etag": {
+"description": "Output only. etag of the Rollout Ex. abc1234",
+"readOnly": true,
+"type": "string"
+},
+"excludedClusters": {
+"description": "Optional. Output only. The excluded clusters from the rollout.",
+"items": {
+"$ref": "ExcludedCluster"
+},
+"readOnly": true,
+"type": "array"
+},
+"feature": {
+"$ref": "FeatureUpdate",
+"description": "Optional. Feature config to use for Rollout."
+},
+"labels": {
+"additionalProperties": {
+"type": "string"
+},
+"description": "Optional. Labels for this Rollout.",
+"type": "object"
+},
+"membershipStates": {
+"additionalProperties": {
+"$ref": "RolloutMembershipState"
+},
+"description": "Output only. States of upgrading control plane or node pool targets of a single cluster (GKE Hub membership) that's part of this Rollout. The key is the membership name of the cluster. The value is the state of the cluster.",
+"readOnly": true,
+"type": "object"
+},
+"name": {
+"description": "Identifier. The full, unique resource name of this Rollout in the format of `projects/{project}/locations/global/rollouts/{rollout}`.",
+"type": "string"
+},
+"rolloutSequence": {
+"description": "Optional. Immutable. The full, unique resource name of the rollout sequence that initiatied this Rollout. In the format of `projects/{project}/locations/global/rolloutSequences/{rollout_sequence}`.",
+"type": "string"
+},
+"schedule": {
+"$ref": "Schedule",
+"description": "Output only. The schedule of the Rollout.",
+"readOnly": true
+},
+"stages": {
+"description": "Output only. The stages of the Rollout.",
+"items": {
+"$ref": "RolloutStage"
+},
+"readOnly": true,
+"type": "array"
+},
+"state": {
+"description": "Output only. State specifies various states of the Rollout.",
+"enum": [
+"STATE_UNSPECIFIED",
+"RUNNING",
+"PAUSED",
+"CANCELLED",
+"COMPLETED",
+"SCHEDULED"
+],
+"enumDescriptions": [
+"Unspecified state.",
+"The Rollout is running.",
+"The Rollout is paused.",
+"The Rollout is in a failure terminal state.",
+"The Rollout is in a terminal state.",
+"The Rollout is scheduled to start."
+],
+"readOnly": true,
+"type": "string"
+},
+"stateReason": {
+"description": "Output only. A human-readable description explaining the reason for the current state.",
+"readOnly": true,
+"type": "string"
+},
+"uid": {
+"description": "Output only. Google-generated UUID for this resource. This is unique across all Rollout resources. If a Rollout resource is deleted and another resource with the same name is created, it gets a different uid.",
+"readOnly": true,
+"type": "string"
+},
+"updateTime": {
+"description": "Output only. The timestamp at which the Rollout was last updated.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+},
+"versionUpgrade": {
+"$ref": "VersionUpgrade",
+"description": "Optional. Config for version upgrade of clusters."
+}
+},
+"type": "object"
+},
+"RolloutMembershipState": {
+"description": "Metadata about single cluster (GKE Hub membership) that's part of this Rollout.",
+"id": "RolloutMembershipState",
+"properties": {
+"lastUpdateTime": {
+"description": "Optional. Output only. The time this status and any related Rollout-specific details for the membership were updated.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+},
+"stageAssignment": {
+"description": "Output only. The stage assignment of this cluster in this rollout.",
+"format": "int32",
+"readOnly": true,
+"type": "integer"
+},
+"targets": {
+"description": "Output only. The targets of the rollout - clusters or node pools that are being upgraded. All targets belongs to the same cluster, identified by the membership name (key of membership_states map).",
+"items": {
+"$ref": "RolloutTarget"
+},
+"readOnly": true,
+"type": "array"
+}
+},
+"type": "object"
+},
+"RolloutSequence": {
+"description": "RolloutSequence defines the desired order of upgrades.",
+"id": "RolloutSequence",
+"properties": {
+"createTime": {
+"description": "Output only. The timestamp at which the Rollout Sequence was created.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+},
+"deleteTime": {
+"description": "Output only. The timestamp at the Rollout Sequence was deleted.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+},
+"displayName": {
+"description": "Optional. Human readable display name of the Rollout Sequence.",
+"type": "string"
+},
+"etag": {
+"description": "Output only. etag of the Rollout Sequence Ex. abc1234",
+"readOnly": true,
+"type": "string"
+},
+"labels": {
+"additionalProperties": {
+"type": "string"
+},
+"description": "Optional. Labels for this Rollout Sequence.",
+"type": "object"
+},
+"name": {
+"description": "Identifier. Name of the rollout sequence in the format of: projects/{PROJECT_ID}/locations/global/rolloutSequences/{NAME}",
+"type": "string"
+},
+"stages": {
+"description": "Required. Ordered list of stages that constitutes this Rollout.",
+"items": {
+"$ref": "Stage"
+},
+"type": "array"
+},
+"uid": {
+"description": "Output only. Google-generated UUID for this resource. This is unique across all Rollout Sequence resources. If a Rollout Sequence resource is deleted and another resource with the same name is created, it gets a different uid.",
+"readOnly": true,
+"type": "string"
+},
+"updateTime": {
+"description": "Output only. The timestamp at which the Rollout Sequence was last updated.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+}
+},
+"type": "object"
+},
+"RolloutStage": {
+"description": "Stage represents a single stage in the Rollout.",
+"id": "RolloutStage",
+"properties": {
+"endTime": {
+"description": "Optional. Output only. The time at which the wave ended.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+},
+"soakDuration": {
+"description": "Optional. Duration to soak after this wave before starting the next wave.",
+"format": "google-duration",
+"type": "string"
+},
+"stageNumber": {
+"description": "Output only. The wave number to which this status applies.",
+"format": "int32",
+"readOnly": true,
+"type": "integer"
+},
+"startTime": {
+"description": "Optional. Output only. The time at which the wave started.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+},
+"state": {
+"description": "Output only. The state of the wave.",
+"enum": [
+"STATE_UNSPECIFIED",
+"PENDING",
+"RUNNING",
+"SOAKING",
+"COMPLETED",
+"FORCED_SOAKING"
+],
+"enumDescriptions": [
+"Default value.",
+"The wave is pending.",
+"The wave is running.",
+"The wave is soaking.",
+"The wave is completed.",
+"The wave is force soaking."
+],
+"readOnly": true,
+"type": "string"
+}
+},
+"type": "object"
+},
+"RolloutTarget": {
+"description": "Metadata about the status of targets (clusters or node pools) involved in the Rollout.",
+"id": "RolloutTarget",
+"properties": {
+"cluster": {
+"description": "Optional. Output only. The resource link of the Cluster resource upgraded in this Rollout. It is formatted as: `//{api_service}/projects/{project_number}/locations/{location}/clusters/{cluster_name}`. .",
+"readOnly": true,
+"type": "string"
+},
+"nodePool": {
+"description": "Optional. Output only. The resource link of the NodePool resource upgraded in this Rollout. It is formatted as: `//{api_service}/projects/{project_number}/locations/{location}/clusters/{cluster_name}/nodePools/{node_pool_name}`.",
+"readOnly": true,
+"type": "string"
+},
+"operation": {
+"description": "Optional. Output only. The operation resource name performing the mutation.",
+"readOnly": true,
+"type": "string"
+},
+"reason": {
+"description": "Optional. Output only. A human-readable description of the current status.",
+"readOnly": true,
+"type": "string"
+},
+"state": {
+"description": "Output only. The high-level, machine-readable status of this Rollout for the target.",
+"enum": [
+"STATE_UNSPECIFIED",
+"PENDING",
+"RUNNING",
+"FAILED",
+"SUCCEEDED",
+"PAUSED",
+"REMOVED",
+"INELIGIBLE"
+],
+"enumDescriptions": [
+"Unspecified state.",
+"The Rollout is pending for the target.",
+"The Rollout is running for the target.",
+"The Rollout failed for the target.",
+"The Rollout succeeded for the target.",
+"The Rollout is paused for the target.",
+"The target was removed from the Rollout.",
+"The target is ineligible for the Rollout."
+],
+"readOnly": true,
+"type": "string"
+}
+},
+"type": "object"
+},
+"Schedule": {
+"description": "Schedule represents the schedule of the Rollout.",
+"id": "Schedule",
+"properties": {
+"waves": {
+"description": "Output only. The schedule of each wave in the Rollout.",
+"items": {
+"$ref": "WaveSchedule"
+},
+"readOnly": true,
+"type": "array"
+}
+},
+"type": "object"
+},
+"Scope": {
+"description": "Scope represents a Scope in a Fleet.",
+"id": "Scope",
+"properties": {
+"createTime": {
+"description": "Output only. When the scope was created.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+},
+"deleteTime": {
+"description": "Output only. When the scope was deleted.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+},
+"labels": {
+"additionalProperties": {
+"type": "string"
+},
+"description": "Optional. Labels for this Scope.",
+"type": "object"
+},
+"name": {
+"description": "The resource name for the scope `projects/{project}/locations/{location}/scopes/{scope}`",
 "type": "string"
 },
 "namespaceLabels": {
@@ -6754,6 +7415,29 @@
 },
 "type": "object"
 },
+"Stage": {
+"description": "Rollout stage.",
+"id": "Stage",
+"properties": {
+"clusterSelector": {
+"$ref": "ClusterSelector",
+"description": "Optional. Filter members of fleets (above) to a subset of clusters. If not specified, all clusters in the fleets are selected."
+},
+"fleetProjects": {
+"description": "Required. List of Fleet projects to select the clusters from. Expected format: projects/{project}",
+"items": {
+"type": "string"
+},
+"type": "array"
+},
+"soakDuration": {
+"description": "Optional. Soak time after upgrading all the clusters in the stage.",
+"format": "google-duration",
+"type": "string"
+}
+},
+"type": "object"
+},
 "Status": {
 "description": "Status specifies state for the subcomponent.",
 "id": "Status",
@@ -6823,6 +7507,208 @@
 }
 },
 "type": "object"
+},
+"VersionUpgrade": {
+"description": "Config for version upgrade of clusters.",
+"id": "VersionUpgrade",
+"properties": {
+"desiredVersion": {
+"description": "Optional. Desired version of the component.",
+"type": "string"
+},
+"type": {
+"description": "Optional. Type of version upgrade specifies which component should be upgraded.",
+"enum": [
+"TYPE_UNSPECIFIED",
+"TYPE_CONTROL_PLANE",
+"TYPE_NODE_POOL",
+"TYPE_CONFIG_SYNC"
+],
+"enumDescriptions": [
+"Default value.",
+"Control plane upgrade.",
+"Node pool upgrade.",
+"Config Sync upgrade."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
+"WaveSchedule": {
+"description": "WaveSchedule represents the schedule of a single rollout wave.",
+"id": "WaveSchedule",
+"properties": {
+"waveEndTime": {
+"description": "Output only. The time at which the wave ends.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+},
+"waveNumber": {
+"description": "Output only. The wave number to which this schedule applies.",
+"format": "int32",
+"readOnly": true,
+"type": "integer"
+},
+"waveStartTime": {
+"description": "Output only. The time at which the wave starts.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+}
+},
+"type": "object"
+},
+"WorkloadIdentityFeatureSpec": {
+"description": "**WorkloadIdentity**: Global feature specification.",
+"id": "WorkloadIdentityFeatureSpec",
+"properties": {
+"scopeTenancyPool": {
+"description": "Pool to be used for Workload Identity. This pool in trust-domain mode is used with Fleet Tenancy, so that sameness can be enforced. ex: projects/example/locations/global/workloadidentitypools/custompool",
+"type": "string"
+}
+},
+"type": "object"
+},
+"WorkloadIdentityFeatureState": {
+"description": "**WorkloadIdentity**: Global feature state.",
+"id": "WorkloadIdentityFeatureState",
+"properties": {
+"namespaceStateDetails": {
+"additionalProperties": {
+"$ref": "WorkloadIdentityNamespaceStateDetail"
+},
+"description": "The state of the IAM namespaces for the fleet.",
+"type": "object"
+},
+"namespaceStates": {
+"additionalProperties": {
+"enum": [
+"NAMESPACE_STATE_UNSPECIFIED",
+"NAMESPACE_STATE_OK",
+"NAMESPACE_STATE_ERROR"
+],
+"enumDescriptions": [
+"Unknown state.",
+"The Namespace was created/updated successfully.",
+"The Namespace was not created/updated successfully. The error message is in the description field."
+],
+"type": "string"
+},
+"description": "Deprecated, this field will be erased after code is changed to use the new field.",
+"type": "object"
+},
+"scopeTenancyWorkloadIdentityPool": {
+"description": "The full name of the scope-tenancy pool for the fleet.",
+"type": "string"
+},
+"workloadIdentityPool": {
+"description": "The full name of the svc.id.goog pool for the fleet.",
+"type": "string"
+},
+"workloadIdentityPoolStateDetails": {
+"additionalProperties": {
+"$ref": "WorkloadIdentityWorkloadIdentityPoolStateDetail"
+},
+"description": "The state of the Workload Identity Pools for the fleet.",
+"type": "object"
+}
+},
+"type": "object"
+},
+"WorkloadIdentityIdentityProviderStateDetail": {
+"description": "IdentityProviderStateDetail represents the state of an Identity Provider.",
+"id": "WorkloadIdentityIdentityProviderStateDetail",
+"properties": {
+"code": {
+"description": "The state of the Identity Provider.",
+"enum": [
+"IDENTITY_PROVIDER_STATE_UNSPECIFIED",
+"IDENTITY_PROVIDER_STATE_OK",
+"IDENTITY_PROVIDER_STATE_ERROR"
+],
+"enumDescriptions": [
+"Unknown state.",
+"The Identity Provider was created/updated successfully.",
+"The Identity Provider was not created/updated successfully. The error message is in the description field."
+],
+"type": "string"
+},
+"description": {
+"description": "A human-readable description of the current state or returned error.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"WorkloadIdentityMembershipState": {
+"description": "**WorkloadIdentity**: The membership-specific state for WorkloadIdentity feature.",
+"id": "WorkloadIdentityMembershipState",
+"properties": {
+"description": {
+"description": "Deprecated, this field will be erased after code is changed to use the new field.",
+"type": "string"
+},
+"identityProviderStateDetails": {
+"additionalProperties": {
+"$ref": "WorkloadIdentityIdentityProviderStateDetail"
+},
+"description": "The state of the Identity Providers corresponding to the membership.",
+"type": "object"
+}
+},
+"type": "object"
+},
+"WorkloadIdentityNamespaceStateDetail": {
+"description": "NamespaceStateDetail represents the state of a IAM namespace.",
+"id": "WorkloadIdentityNamespaceStateDetail",
+"properties": {
+"code": {
+"description": "The state of the IAM namespace.",
+"enum": [
+"NAMESPACE_STATE_UNSPECIFIED",
+"NAMESPACE_STATE_OK",
+"NAMESPACE_STATE_ERROR"
+],
+"enumDescriptions": [
+"Unknown state.",
+"The Namespace was created/updated successfully.",
+"The Namespace was not created/updated successfully. The error message is in the description field."
+],
+"type": "string"
+},
+"description": {
+"description": "A human-readable description of the current state or returned error.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"WorkloadIdentityWorkloadIdentityPoolStateDetail": {
+"description": "WorkloadIdentityPoolStateDetail represents the state of the Workload Identity Pools for the fleet.",
+"id": "WorkloadIdentityWorkloadIdentityPoolStateDetail",
+"properties": {
+"code": {
+"description": "The state of the Workload Identity Pool.",
+"enum": [
+"WORKLOAD_IDENTITY_POOL_STATE_UNSPECIFIED",
+"WORKLOAD_IDENTITY_POOL_STATE_OK",
+"WORKLOAD_IDENTITY_POOL_STATE_ERROR"
+],
+"enumDescriptions": [
+"Unknown state.",
+"The Workload Identity Pool was created/updated successfully.",
+"The Workload Identity Pool was not created/updated successfully. The error message is in the description field."
+],
+"type": "string"
+},
+"description": {
+"description": "A human-readable description of the current state or returned error.",
+"type": "string"
+}
+},
+"type": "object"
 }
 },
 "servicePath": "",