google-api-python-client 2.192.0__py3-none-any.whl → 2.193.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/gkehub.v1.json

@@ -2122,7 +2122,7 @@
 }
 }
 },
-"revision": "20260215",
+"revision": "20260226",
 "rootUrl": "https://gkehub.googleapis.com/",
 "schemas": {
 "AppDevExperienceFeatureSpec": {
@@ -4646,7 +4646,7 @@
 "type": "integer"
 },
 "nodeProviderId": {
-"description": "Output only. Node providerID as reported by the first node in the list of nodes on the Kubernetes endpoint. On Kubernetes platforms that support zero-node clusters (like GKE-on-GCP), the node_count will be zero and the node_provider_id will be empty.",
+"description": "Output only. Node providerID as reported by the first node in the list of nodes on the Kubernetes endpoint. On Kubernetes platforms that support zero-node clusters (like GKE on Google Cloud), the node_count will be zero and the node_provider_id will be empty.",
 "readOnly": true,
 "type": "string"
 },
@@ -5173,7 +5173,7 @@
 },
 "gkeCluster": {
 "$ref": "GkeCluster",
-"description": "Optional. Specific information for a GKE-on-GCP cluster."
+"description": "Optional. Specific information for a GKE on Google Cloud cluster."
 },
 "googleManaged": {
 "description": "Output only. Whether the lifecycle of this membership is managed by a google cluster platform service.",
@@ -6344,6 +6344,7 @@ false
 "QUOTA_EXCEEDED_HTTP_FILTERS",
 "QUOTA_EXCEEDED_TCP_FILTERS",
 "QUOTA_EXCEEDED_NETWORK_ENDPOINT_GROUPS",
+"CONFIG_APPLY_BLOCKED",
 "LEGACY_MC_SECRETS",
 "WORKLOAD_IDENTITY_REQUIRED",
 "NON_STANDARD_BINARY_USAGE",
@@ -6399,6 +6400,7 @@ false
 "HTTPFilter quota exceeded error code.",
 "TCPFilter quota exceeded error code.",
 "NetworkEndpointGroup quota exceeded error code.",
+"Configuration failed to apply due to fleet being blocked.",
 "Legacy istio secrets found for multicluster error code",
 "Workload identity required error code",
 "Non-standard binary usage error code",

googleapiclient/discovery_cache/documents/gkehub.v1alpha.json

@@ -2498,7 +2498,7 @@
 }
 }
 },
-"revision": "20260215",
+"revision": "20260226",
 "rootUrl": "https://gkehub.googleapis.com/",
 "schemas": {
 "AppDevExperienceFeatureSpec": {
@@ -5269,7 +5269,7 @@
 "type": "integer"
 },
 "nodeProviderId": {
-"description": "Output only. Node providerID as reported by the first node in the list of nodes on the Kubernetes endpoint. On Kubernetes platforms that support zero-node clusters (like GKE-on-GCP), the node_count will be zero and the node_provider_id will be empty.",
+"description": "Output only. Node providerID as reported by the first node in the list of nodes on the Kubernetes endpoint. On Kubernetes platforms that support zero-node clusters (like GKE on Google Cloud), the node_count will be zero and the node_provider_id will be empty.",
 "readOnly": true,
 "type": "string"
 },
@@ -5857,7 +5857,7 @@
 },
 "gkeCluster": {
 "$ref": "GkeCluster",
-"description": "Optional. Specific information for a GKE-on-GCP cluster."
+"description": "Optional. Specific information for a GKE on Google Cloud cluster."
 },
 "googleManaged": {
 "description": "Output only. Whether the lifecycle of this membership is managed by a google cluster platform service.",
@@ -7554,6 +7554,7 @@ false
 "QUOTA_EXCEEDED_HTTP_FILTERS",
 "QUOTA_EXCEEDED_TCP_FILTERS",
 "QUOTA_EXCEEDED_NETWORK_ENDPOINT_GROUPS",
+"CONFIG_APPLY_BLOCKED",
 "LEGACY_MC_SECRETS",
 "WORKLOAD_IDENTITY_REQUIRED",
 "NON_STANDARD_BINARY_USAGE",
@@ -7609,6 +7610,7 @@ false
 "HTTPFilter quota exceeded error code.",
 "TCPFilter quota exceeded error code.",
 "NetworkEndpointGroup quota exceeded error code.",
+"Configuration failed to apply due to fleet being blocked.",
 "Legacy istio secrets found for multicluster error code",
 "Workload identity required error code",
 "Non-standard binary usage error code",
@@ -7796,6 +7798,7 @@ false
 "QUOTA_EXCEEDED_HTTP_FILTERS",
 "QUOTA_EXCEEDED_TCP_FILTERS",
 "QUOTA_EXCEEDED_NETWORK_ENDPOINT_GROUPS",
+"CONFIG_APPLY_BLOCKED",
 "LEGACY_MC_SECRETS",
 "WORKLOAD_IDENTITY_REQUIRED",
 "NON_STANDARD_BINARY_USAGE",
@@ -7851,6 +7854,7 @@ false
 "HTTPFilter quota exceeded error code.",
 "TCPFilter quota exceeded error code.",
 "NetworkEndpointGroup quota exceeded error code.",
+"Configuration failed to apply due to fleet being blocked.",
 "Legacy istio secrets found for multicluster error code.",
 "Workload identity required error code.",
 "Non-standard binary usage error code.",

googleapiclient/discovery_cache/documents/gkehub.v1beta.json

@@ -2354,7 +2354,7 @@
 }
 }
 },
-"revision": "20260215",
+"revision": "20260226",
 "rootUrl": "https://gkehub.googleapis.com/",
 "schemas": {
 "AppDevExperienceFeatureSpec": {
@@ -4950,7 +4950,7 @@
 "type": "integer"
 },
 "nodeProviderId": {
-"description": "Output only. Node providerID as reported by the first node in the list of nodes on the Kubernetes endpoint. On Kubernetes platforms that support zero-node clusters (like GKE-on-GCP), the node_count will be zero and the node_provider_id will be empty.",
+"description": "Output only. Node providerID as reported by the first node in the list of nodes on the Kubernetes endpoint. On Kubernetes platforms that support zero-node clusters (like GKE on Google Cloud), the node_count will be zero and the node_provider_id will be empty.",
 "readOnly": true,
 "type": "string"
 },
@@ -5513,7 +5513,7 @@
 },
 "gkeCluster": {
 "$ref": "GkeCluster",
-"description": "Optional. Specific information for a GKE-on-GCP cluster."
+"description": "Optional. Specific information for a GKE on Google Cloud cluster."
 },
 "googleManaged": {
 "description": "Output only. Whether the lifecycle of this membership is managed by a google cluster platform service.",
@@ -7093,6 +7093,7 @@ false
 "QUOTA_EXCEEDED_HTTP_FILTERS",
 "QUOTA_EXCEEDED_TCP_FILTERS",
 "QUOTA_EXCEEDED_NETWORK_ENDPOINT_GROUPS",
+"CONFIG_APPLY_BLOCKED",
 "LEGACY_MC_SECRETS",
 "WORKLOAD_IDENTITY_REQUIRED",
 "NON_STANDARD_BINARY_USAGE",
@@ -7148,6 +7149,7 @@ false
 "HTTPFilter quota exceeded error code.",
 "TCPFilter quota exceeded error code.",
 "NetworkEndpointGroup quota exceeded error code.",
+"Configuration failed to apply due to fleet being blocked.",
 "Legacy istio secrets found for multicluster error code",
 "Workload identity required error code",
 "Non-standard binary usage error code",

googleapiclient/discovery_cache/documents/gkehub.v1beta1.json

@@ -723,7 +723,7 @@
 }
 }
 },
-"revision": "20260126",
+"revision": "20260226",
 "rootUrl": "https://gkehub.googleapis.com/",
 "schemas": {
 "ApplianceCluster": {
@@ -731,7 +731,7 @@
 "id": "ApplianceCluster",
 "properties": {
 "resourceLink": {
-"description": "Immutable. Self-link of the GCP resource for the Appliance Cluster. For example: //transferappliance.googleapis.com/projects/my-project/locations/us-west1-a/appliances/my-appliance",
+"description": "Immutable. Self-link of the Google Cloud resource for the Appliance Cluster. For example: //transferappliance.googleapis.com/projects/my-project/locations/us-west1-a/appliances/my-appliance",
 "type": "string"
 }
 },
@@ -869,7 +869,7 @@
 "id": "EdgeCluster",
 "properties": {
 "resourceLink": {
-"description": "Immutable. Self-link of the GCP resource for the Edge Cluster. For example: //edgecontainer.googleapis.com/projects/my-project/locations/us-west1-a/clusters/my-cluster",
+"description": "Immutable. Self-link of the Google Cloud resource for the Edge Cluster. For example: //edgecontainer.googleapis.com/projects/my-project/locations/us-west1-a/clusters/my-cluster",
 "type": "string"
 }
 },
@@ -943,7 +943,7 @@
 "type": "boolean"
 },
 "resourceLink": {
-"description": "Immutable. Self-link of the GCP resource for the GKE cluster. For example: //container.googleapis.com/projects/my-project/locations/us-west1-a/clusters/my-cluster Zonal clusters are also supported.",
+"description": "Immutable. Self-link of the Google Cloud resource for the GKE cluster. For example: //container.googleapis.com/projects/my-project/locations/us-west1-a/clusters/my-cluster Zonal clusters are also supported.",
 "type": "string"
 }
 },
@@ -998,7 +998,7 @@
 "type": "integer"
 },
 "nodeProviderId": {
-"description": "Output only. Node providerID as reported by the first node in the list of nodes on the Kubernetes endpoint. On Kubernetes platforms that support zero-node clusters (like GKE-on-GCP), the node_count will be zero and the node_provider_id will be empty.",
+"description": "Output only. Node providerID as reported by the first node in the list of nodes on the Kubernetes endpoint. On Kubernetes platforms that support zero-node clusters (like GKE-on-Google Cloud), the node_count will be zero and the node_provider_id will be empty.",
 "readOnly": true,
 "type": "string"
 },
@@ -1200,7 +1200,7 @@
 "additionalProperties": {
 "type": "string"
 },
-"description": "Optional. GCP labels for this membership. These labels are not leveraged by multi-cluster features, instead, we prefer cluster labels, which can be set on GKE cluster or other cluster types.",
+"description": "Optional. Google Cloud labels for this membership. These labels are not leveraged by multi-cluster features, instead, we prefer cluster labels, which can be set on GKE cluster or other cluster types.",
 "type": "object"
 },
 "lastConnectionTime": {
@@ -1264,7 +1264,7 @@
 },
 "gkeCluster": {
 "$ref": "GkeCluster",
-"description": "Optional. Specific information for a GKE-on-GCP cluster."
+"description": "Optional. Specific information for a GKE-on-Google Cloud cluster."
 },
 "kubernetesMetadata": {
 "$ref": "KubernetesMetadata",
@@ -1362,7 +1362,7 @@
 "type": "boolean"
 },
 "resourceLink": {
-"description": "Immutable. Self-link of the GCP resource for the GKE Multi-Cloud cluster. For example: //gkemulticloud.googleapis.com/projects/my-project/locations/us-west1-a/awsClusters/my-cluster //gkemulticloud.googleapis.com/projects/my-project/locations/us-west1-a/azureClusters/my-cluster //gkemulticloud.googleapis.com/projects/my-project/locations/us-west1-a/attachedClusters/my-cluster",
+"description": "Immutable. Self-link of the Google Cloud resource for the GKE Multi-Cloud cluster. For example: //gkemulticloud.googleapis.com/projects/my-project/locations/us-west1-a/awsClusters/my-cluster //gkemulticloud.googleapis.com/projects/my-project/locations/us-west1-a/azureClusters/my-cluster //gkemulticloud.googleapis.com/projects/my-project/locations/us-west1-a/attachedClusters/my-cluster",
 "type": "string"
 }
 },
@@ -1400,7 +1400,7 @@
 "type": "string"
 },
 "resourceLink": {
-"description": "Immutable. Self-link of the GCP resource for the GKE On-Prem cluster. For example: //gkeonprem.googleapis.com/projects/my-project/locations/us-west1-a/vmwareClusters/my-cluster //gkeonprem.googleapis.com/projects/my-project/locations/us-west1-a/bareMetalClusters/my-cluster",
+"description": "Immutable. Self-link of the Google Cloud resource for the GKE On-Prem cluster. For example: //gkeonprem.googleapis.com/projects/my-project/locations/us-west1-a/vmwareClusters/my-cluster //gkeonprem.googleapis.com/projects/my-project/locations/us-west1-a/bareMetalClusters/my-cluster",
 "type": "string"
 }
 },

googleapiclient/discovery_cache/documents/gkehub.v2.json

@@ -482,7 +482,7 @@
 }
 }
 },
-"revision": "20260126",
+"revision": "20260226",
 "rootUrl": "https://gkehub.googleapis.com/",
 "schemas": {
 "AppDevExperienceState": {
@@ -2411,7 +2411,7 @@
 "additionalProperties": {
 "type": "string"
 },
-"description": "GCP labels for this MembershipFeature.",
+"description": "Google Cloud labels for this MembershipFeature.",
 "type": "object"
 },
 "lifecycleState": {
@@ -3076,6 +3076,7 @@
 "QUOTA_EXCEEDED_HTTP_FILTERS",
 "QUOTA_EXCEEDED_TCP_FILTERS",
 "QUOTA_EXCEEDED_NETWORK_ENDPOINT_GROUPS",
+"CONFIG_APPLY_BLOCKED",
 "LEGACY_MC_SECRETS",
 "WORKLOAD_IDENTITY_REQUIRED",
 "NON_STANDARD_BINARY_USAGE",
@@ -3131,6 +3132,7 @@
 "HTTPFilter quota exceeded error code.",
 "TCPFilter quota exceeded error code.",
 "NetworkEndpointGroup quota exceeded error code.",
+"Configuration failed to apply due to fleet being blocked.",
 "Legacy istio secrets found for multicluster error code",
 "Workload identity required error code",
 "Non-standard binary usage error code",

googleapiclient/discovery_cache/documents/gkehub.v2alpha.json

@@ -482,7 +482,7 @@
 }
 }
 },
-"revision": "20260126",
+"revision": "20260226",
 "rootUrl": "https://gkehub.googleapis.com/",
 "schemas": {
 "AppDevExperienceState": {
@@ -2411,7 +2411,7 @@
 "additionalProperties": {
 "type": "string"
 },
-"description": "GCP labels for this MembershipFeature.",
+"description": "Google Cloud labels for this MembershipFeature.",
 "type": "object"
 },
 "lifecycleState": {
@@ -3076,6 +3076,7 @@
 "QUOTA_EXCEEDED_HTTP_FILTERS",
 "QUOTA_EXCEEDED_TCP_FILTERS",
 "QUOTA_EXCEEDED_NETWORK_ENDPOINT_GROUPS",
+"CONFIG_APPLY_BLOCKED",
 "LEGACY_MC_SECRETS",
 "WORKLOAD_IDENTITY_REQUIRED",
 "NON_STANDARD_BINARY_USAGE",
@@ -3131,6 +3132,7 @@
 "HTTPFilter quota exceeded error code.",
 "TCPFilter quota exceeded error code.",
 "NetworkEndpointGroup quota exceeded error code.",
+"Configuration failed to apply due to fleet being blocked.",
 "Legacy istio secrets found for multicluster error code",
 "Workload identity required error code",
 "Non-standard binary usage error code",

googleapiclient/discovery_cache/documents/gkehub.v2beta.json

@@ -482,7 +482,7 @@
 }
 }
 },
-"revision": "20260126",
+"revision": "20260226",
 "rootUrl": "https://gkehub.googleapis.com/",
 "schemas": {
 "AppDevExperienceState": {
@@ -2411,7 +2411,7 @@
 "additionalProperties": {
 "type": "string"
 },
-"description": "GCP labels for this MembershipFeature.",
+"description": "Google Cloud labels for this MembershipFeature.",
 "type": "object"
 },
 "lifecycleState": {
@@ -3076,6 +3076,7 @@
 "QUOTA_EXCEEDED_HTTP_FILTERS",
 "QUOTA_EXCEEDED_TCP_FILTERS",
 "QUOTA_EXCEEDED_NETWORK_ENDPOINT_GROUPS",
+"CONFIG_APPLY_BLOCKED",
 "LEGACY_MC_SECRETS",
 "WORKLOAD_IDENTITY_REQUIRED",
 "NON_STANDARD_BINARY_USAGE",
@@ -3131,6 +3132,7 @@
 "HTTPFilter quota exceeded error code.",
 "TCPFilter quota exceeded error code.",
 "NetworkEndpointGroup quota exceeded error code.",
+"Configuration failed to apply due to fleet being blocked.",
 "Legacy istio secrets found for multicluster error code",
 "Workload identity required error code",
 "Non-standard binary usage error code",

googleapiclient/discovery_cache/documents/gkeonprem.v1.json

@@ -135,7 +135,7 @@
 ]
 },
 "list": {
-"description": "Lists information about the supported locations for this service.",
+"description": "Lists information about the supported locations for this service. This method can be called in two ways: * **List all public locations:** Use the path `GET /v1/locations`. * **List project-visible locations:** Use the path `GET /v1/projects/{project_id}/locations`. This may include public locations as well as private or other locations specifically visible to the project.",
 "flatPath": "v1/projects/{projectsId}/locations",
 "httpMethod": "GET",
 "id": "gkeonprem.projects.locations.list",
@@ -3163,7 +3163,7 @@
 }
 }
 },
-"revision": "20251203",
+"revision": "20260225",
 "rootUrl": "https://gkeonprem.googleapis.com/",
 "schemas": {
 "Authorization": {

googleapiclient/discovery_cache/documents/iam.v1.json

@@ -4160,7 +4160,7 @@
 }
 }
 },
-"revision": "20260213",
+"revision": "20260306",
 "rootUrl": "https://iam.googleapis.com/",
 "schemas": {
 "AccessRestrictions": {
@@ -4546,12 +4546,14 @@
 "enum": [
 "ATTRIBUTES_TYPE_UNSPECIFIED",
 "AZURE_AD_GROUPS_MAIL",
-"AZURE_AD_GROUPS_ID"
+"AZURE_AD_GROUPS_ID",
+"AZURE_AD_GROUPS_DISPLAY_NAME"
 ],
 "enumDescriptions": [
 "No AttributesType specified.",
 "Used to get the user's group claims from the Microsoft Entra ID identity provider using the configuration provided in ExtraAttributesOAuth2Client. The `mail` property of the `microsoft.graph.group` object is used for claim mapping. See https://learn.microsoft.com/en-us/graph/api/resources/group?view=graph-rest-1.0#properties for more details on `microsoft.graph.group` properties. The group mail addresses of the user's groups that are returned from Microsoft Entra ID can be mapped by using the following attributes: * OIDC: `assertion.groups` * SAML: `assertion.attributes.groups`",
-"Used to get the user's group claims from the Microsoft Entra ID identity provider using the configuration provided in ExtraAttributesOAuth2Client. The `id` property of the `microsoft.graph.group` object is used for claim mapping. See https://learn.microsoft.com/en-us/graph/api/resources/group?view=graph-rest-1.0#properties for more details on `microsoft.graph.group` properties. The group IDs of the user's groups that are returned from Microsoft Entra ID can be mapped by using the following attributes: * OIDC: `assertion.groups` * SAML: `assertion.attributes.groups`"
+"Used to get the user's group claims from the Microsoft Entra ID identity provider using the configuration provided in ExtraAttributesOAuth2Client. The `id` property of the `microsoft.graph.group` object is used for claim mapping. See https://learn.microsoft.com/en-us/graph/api/resources/group?view=graph-rest-1.0#properties for more details on `microsoft.graph.group` properties. The group IDs of the user's groups that are returned from Microsoft Entra ID can be mapped by using the following attributes: * OIDC: `assertion.groups` * SAML: `assertion.attributes.groups`",
+"Used to get the user's group claims from the Microsoft Entra ID identity provider using the configuration provided in ExtraAttributesOAuth2Client. The `displayName` property of the `microsoft.graph.group` object is used for claim mapping. See https://learn.microsoft.com/en-us/graph/api/resources/group?view=graph-rest-1.0#properties for more details on `microsoft.graph.group` properties. The display names of the user's groups that are returned from Microsoft Entra ID can be mapped by using the following attributes: * OIDC: `assertion.groups` * SAML: `assertion.attributes.groups`"
 ],
 "type": "string"
 },
@@ -4732,6 +4734,10 @@
 "description": "Optional. Rotation window percentage, the percentage of remaining lifetime after which certificate rotation is initiated. Must be between 50 and 80. If no value is specified, rotation window percentage is defaulted to 50.",
 "format": "int32",
 "type": "integer"
+},
+"useDefaultSharedCa": {
+"description": "Optional. If set to true, the trust domain will utilize the GCP-provisioned default CA. A default CA in the same region as the workload will be selected to issue the certificate. Enabling this will clear any existing `ca_pools` configuration to provision the certificates. NOTE: This field is mutually exclusive with `ca_pools`. If this flag is enabled, certificates will be automatically provisioned from the default shared CAs. This flag should not be set if you want to use your own CA pools to provision the certificates.",
+"type": "boolean"
 }
 },
 "type": "object"
@@ -6122,6 +6128,10 @@ false
 "$ref": "TrustAnchor"
 },
 "type": "array"
+},
+"trustDefaultSharedCa": {
+"description": "Optional. If set to True, the trust bundle will include the private ca managed identity regional root public certificates. Important: `trust_default_shared_ca` is only supported for managed identity trust domain resource.",
+"type": "boolean"
 }
 },
 "type": "object"

googleapiclient/discovery_cache/documents/kmsinventory.v1.json

@@ -306,7 +306,7 @@
 }
 }
 },
-"revision": "20260216",
+"revision": "20260308",
 "rootUrl": "https://kmsinventory.googleapis.com/",
 "schemas": {
 "GoogleCloudKmsInventoryV1ListCryptoKeysResponse": {
@@ -504,7 +504,7 @@
 },
 "keyAccessJustificationsPolicy": {
 "$ref": "GoogleCloudKmsV1KeyAccessJustificationsPolicy",
-"description": "Optional. The policy used for Key Access Justifications Policy Enforcement. If this field is present and this key is enrolled in Key Access Justifications Policy Enforcement, the policy will be evaluated in encrypt, decrypt, and sign operations, and the operation will fail if rejected by the policy. The policy is defined by specifying zero or more allowed justification codes. https://cloud.google.com/assured-workloads/key-access-justifications/docs/justification-codes By default, this field is absent, and all justification codes are allowed."
+"description": "Optional. The policy used for Key Access Justifications Policy Enforcement. If this field is present and this key is enrolled in Key Access Justifications Policy Enforcement, the policy will be evaluated in encrypt, decrypt, and sign operations, and the operation will fail if rejected by the policy. The policy is defined by specifying zero or more allowed justification codes. https://cloud.google.com/assured-workloads/key-access-justifications/docs/justification-codes By default, this field is absent, and all justification codes are allowed. If the `key_access_justifications_policy.allowed_access_reasons` is empty (zero allowed justification code), all encrypt, decrypt, and sign operations will fail."
 },
 "labels": {
 "additionalProperties": {
@@ -937,11 +937,11 @@
 "type": "object"
 },
 "GoogleCloudKmsV1KeyAccessJustificationsPolicy": {
-"description": "A KeyAccessJustificationsPolicy specifies zero or more allowed AccessReason values for encrypt, decrypt, and sign operations on a CryptoKey.",
+"description": "A KeyAccessJustificationsPolicy specifies zero or more allowed AccessReason values for encrypt, decrypt, and sign operations on a CryptoKey or KeyAccessJustificationsPolicyConfig (the default Key Access Justifications policy).",
 "id": "GoogleCloudKmsV1KeyAccessJustificationsPolicy",
 "properties": {
 "allowedAccessReasons": {
-"description": "The list of allowed reasons for access to a CryptoKey. Zero allowed access reasons means all encrypt, decrypt, and sign operations for the CryptoKey associated with this policy will fail.",
+"description": "The list of allowed reasons for access to a CryptoKey. Note that empty allowed_access_reasons has a different meaning depending on where this message appears. If this is under KeyAccessJustificationsPolicyConfig, it means allow-all. If this is under CryptoKey, it means deny-all.",
 "items": {
 "enum": [
 "REASON_UNSPECIFIED",