google-api-python-client 2.192.0__py3-none-any.whl → 2.194.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/container.v1.json

@@ -2660,7 +2660,7 @@
 }
 }
 },
-"revision": "20260209",
+"revision": "20260324",
 "rootUrl": "https://container.googleapis.com/",
 "schemas": {
 "AcceleratorConfig": {
@@ -2691,6 +2691,17 @@
 },
 "type": "object"
 },
+"AccurateTimeConfig": {
+"description": "AccurateTimeConfig contains configuration for the accurate time synchronization feature.",
+"id": "AccurateTimeConfig",
+"properties": {
+"enablePtpKvmTimeSync": {
+"description": "Enables enhanced time synchronization using PTP-KVM.",
+"type": "boolean"
+}
+},
+"type": "object"
+},
 "AdditionalIPRangesConfig": {
 "description": "AdditionalIPRangesConfig is the configuration for individual additional subnetwork attached to the cluster",
 "id": "AdditionalIPRangesConfig",
@@ -3011,6 +3022,10 @@
 "description": "Autopilot is the configuration for Autopilot settings on the cluster.",
 "id": "Autopilot",
 "properties": {
+"clusterPolicyConfig": {
+"$ref": "ClusterPolicyConfig",
+"description": "ClusterPolicyConfig denotes cluster level policies that are enforced for the cluster."
+},
 "enabled": {
 "description": "Enable Autopilot",
 "type": "boolean"
@@ -3352,7 +3367,7 @@
 "id": "CertificateAuthorityDomainConfig",
 "properties": {
 "fqdns": {
-"description": "List of fully qualified domain names (FQDN). Specifying port is supported. Wildcards are NOT supported. Examples: - my.customdomain.com - 10.0.1.2:5000",
+"description": "List of fully qualified domain names (FQDN). Specifying port is supported. Wildcards are NOT supported. Examples: - `my.customdomain.com` - `10.0.1.2:5000`",
 "items": {
 "type": "string"
 },
@@ -3515,6 +3530,10 @@
 "$ref": "ConfidentialNodes",
 "description": "Configuration of Confidential Nodes. All the nodes in the cluster will be Confidential VM once enabled."
 },
+"controlPlaneEgress": {
+"$ref": "ControlPlaneEgress",
+"description": "Configuration for control plane egress control."
+},
 "controlPlaneEndpointsConfig": {
 "$ref": "ControlPlaneEndpointsConfig",
 "description": "Configuration for all cluster's control plane endpoints."
@@ -3662,6 +3681,10 @@
 "$ref": "MaintenancePolicy",
 "description": "Configure the maintenance policy for this cluster."
 },
+"managedMachineLearningDiagnosticsConfig": {
+"$ref": "ManagedMachineLearningDiagnosticsConfig",
+"description": "Configuration for Managed Machine Learning Diagnostics."
+},
 "managedOpentelemetryConfig": {
 "$ref": "ManagedOpenTelemetryConfig",
 "description": "Configuration for Managed OpenTelemetry pipeline."
@@ -3774,10 +3797,18 @@
 "readOnly": true,
 "type": "boolean"
 },
+"scheduleUpgradeConfig": {
+"$ref": "ScheduleUpgradeConfig",
+"description": "Optional. Configuration for scheduled upgrades."
+},
 "secretManagerConfig": {
 "$ref": "SecretManagerConfig",
 "description": "Secret CSI driver configuration."
 },
+"secretSyncConfig": {
+"$ref": "SecretSyncConfig",
+"description": "Configuration for sync Secret Manager secrets as k8s secrets."
+},
 "securityPostureConfig": {
 "$ref": "SecurityPostureConfig",
 "description": "Optional. Enable/Disable Security Posture API features for the cluster."
@@ -3936,6 +3967,29 @@
 },
 "type": "object"
 },
+"ClusterPolicyConfig": {
+"description": "ClusterPolicyConfig stores the configuration for cluster wide policies.",
+"id": "ClusterPolicyConfig",
+"properties": {
+"noStandardNodePools": {
+"description": "Denotes preventing standard node pools and requiring only autopilot node pools.",
+"type": "boolean"
+},
+"noSystemImpersonation": {
+"description": "Denotes preventing impersonation and CSRs for GKE System users.",
+"type": "boolean"
+},
+"noSystemMutation": {
+"description": "Denotes that preventing creation and mutation of resources in GKE managed namespaces and cluster-scoped GKE managed resources .",
+"type": "boolean"
+},
+"noUnsafeWebhooks": {
+"description": "Denotes preventing unsafe webhooks.",
+"type": "boolean"
+}
+},
+"type": "object"
+},
 "ClusterUpdate": {
 "description": "ClusterUpdate describes an update to the cluster. Exactly one update can be applied to a cluster with each request, so at most one field can be provided.",
 "id": "ClusterUpdate",
@@ -3964,6 +4018,10 @@
 "$ref": "AutoIpamConfig",
 "description": "AutoIpamConfig contains all information related to Auto IPAM"
 },
+"desiredAutopilotClusterPolicyConfig": {
+"$ref": "ClusterPolicyConfig",
+"description": "The desired autopilot cluster policies that to be enforced in the cluster."
+},
 "desiredAutopilotWorkloadPolicyConfig": {
 "$ref": "WorkloadPolicyConfig",
 "description": "WorkloadPolicyConfig is the configuration related to GCW workload policy"
@@ -3985,6 +4043,10 @@
 "$ref": "ContainerdConfig",
 "description": "The desired containerd config for the cluster."
 },
+"desiredControlPlaneEgress": {
+"$ref": "ControlPlaneEgress",
+"description": "The desired control plane egress control config for the cluster."
+},
 "desiredControlPlaneEndpointsConfig": {
 "$ref": "ControlPlaneEndpointsConfig",
 "description": "Control plane endpoints configuration."
@@ -4110,6 +4172,10 @@
 "description": "The logging service the cluster should use to write logs. Currently available options: * `logging.googleapis.com/kubernetes` - The Cloud Logging service with a Kubernetes-native resource model * `logging.googleapis.com` - The legacy Cloud Logging service (no longer available as of GKE 1.15). * `none` - no logs will be exported from the cluster. If left as an empty string,`logging.googleapis.com/kubernetes` will be used for GKE 1.14+ or `logging.googleapis.com` for earlier versions.",
 "type": "string"
 },
+"desiredManagedMachineLearningDiagnosticsConfig": {
+"$ref": "ManagedMachineLearningDiagnosticsConfig",
+"description": "The desired managed machine learning diagnostics configuration."
+},
 "desiredManagedOpentelemetryConfig": {
 "$ref": "ManagedOpenTelemetryConfig",
 "description": "The desired managed open telemetry configuration."
@@ -4232,6 +4298,10 @@
 "$ref": "SecretManagerConfig",
 "description": "Enable/Disable Secret Manager Config."
 },
+"desiredSecretSyncConfig": {
+"$ref": "SecretSyncConfig",
+"description": "Configuration for sync Secret Manager secrets as k8s secrets."
+},
 "desiredSecurityPostureConfig": {
 "$ref": "SecurityPostureConfig",
 "description": "Enable/Disable Security Posture API features for the cluster."
@@ -4511,6 +4581,27 @@
 },
 "type": "object"
 },
+"ControlPlaneEgress": {
+"description": "ControlPlaneEgress defines the settings needed to enable control plane egress control.",
+"id": "ControlPlaneEgress",
+"properties": {
+"mode": {
+"description": "Defines the mode of control plane egress.",
+"enum": [
+"MODE_UNSPECIFIED",
+"VIA_CONTROL_PLANE",
+"NONE"
+],
+"enumDescriptions": [
+"Default value not specified.",
+"Control plane has public IP and no restriction on egress.",
+"No public IP on control plane and only internal allowlisted egress."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "ControlPlaneEndpointsConfig": {
 "description": "Configuration for all of the cluster's control plane endpoints.",
 "id": "ControlPlaneEndpointsConfig",
@@ -4701,7 +4792,10 @@
 "CURRENT_STATE_ENCRYPTION_PENDING",
 "CURRENT_STATE_ENCRYPTION_ERROR",
 "CURRENT_STATE_DECRYPTION_PENDING",
-"CURRENT_STATE_DECRYPTION_ERROR"
+"CURRENT_STATE_DECRYPTION_ERROR",
+"CURRENT_STATE_ALL_OBJECTS_ENCRYPTION_ENABLED",
+"CURRENT_STATE_ALL_OBJECTS_ENCRYPTION_PENDING",
+"CURRENT_STATE_ALL_OBJECTS_ENCRYPTION_ERROR"
 ],
 "enumDescriptions": [
 "Should never be set",
@@ -4710,7 +4804,10 @@
 "Encryption (or re-encryption with a different CloudKMS key) of Secrets is in progress.",
 "Encryption (or re-encryption with a different CloudKMS key) of Secrets in etcd encountered an error.",
 "De-crypting Secrets to plain text in etcd is in progress.",
-"De-crypting Secrets to plain text in etcd encountered an error."
+"De-crypting Secrets to plain text in etcd encountered an error.",
+"Encryption of all objects in the storage is enabled. It does not guarantee that all objects in the storage are encrypted, but eventually they will be.",
+"Enablement of the encryption of all objects in storage is pending.",
+"Enabling encryption of all objects in storage encountered an error."
 ],
 "readOnly": true,
 "type": "string"
@@ -4740,12 +4837,14 @@
 "enum": [
 "UNKNOWN",
 "ENCRYPTED",
-"DECRYPTED"
+"DECRYPTED",
+"ALL_OBJECTS_ENCRYPTION_ENABLED"
 ],
 "enumDescriptions": [
 "Should never be set",
 "Secrets in etcd are encrypted.",
-"Secrets in etcd are stored in plain text (at etcd level) - this is unrelated to Compute Engine level full disk encryption."
+"Secrets in etcd are stored in plain text (at etcd level) - this is unrelated to Compute Engine level full disk encryption.",
+"Encryption of all objects in the storage is enabled. There is no guarantee that all objects in the storage are encrypted, but eventually they will be."
 ],
 "type": "string"
 }
@@ -5478,7 +5577,7 @@ false
 "type": "array"
 },
 "host": {
-"description": "Host configures the registry host/mirror. It supports fully qualified domain names (FQDN) and IP addresses: Specifying port is supported. Wildcards are NOT supported. Examples: - my.customdomain.com - 10.0.1.2:5000",
+"description": "Host configures the registry host/mirror. It supports fully qualified domain names (FQDNs) and IP addresses. Specifying scheme, port or path is supported. Scheme can only be http or https. Wildcards are NOT supported. Examples: - `my.customdomain.com` - `https://my.customdomain.com/path` - `10.0.1.2:5000`",
 "type": "string"
 },
 "overridePath": {
@@ -5821,6 +5920,10 @@ false
 "description": "Parameters that can be configured on Linux nodes.",
 "id": "LinuxNodeConfig",
 "properties": {
+"accurateTimeConfig": {
+"$ref": "AccurateTimeConfig",
+"description": "Optional. The accurate time configuration for the node pool."
+},
 "cgroupMode": {
 "description": "cgroup_mode specifies the cgroup mode to be used on the node.",
 "enum": [
@@ -6051,6 +6154,10 @@ false
 "description": "Configuration for the Lustre CSI driver.",
 "id": "LustreCsiDriverConfig",
 "properties": {
+"disableMultiNic": {
+"description": "When set to true, this disables multi-NIC support for the Lustre CSI driver. By default, GKE enables multi-NIC support, which allows the Lustre CSI driver to automatically detect and configure all suitable network interfaces on a node to maximize I/O performance for demanding workloads.",
+"type": "boolean"
+},
 "enableLegacyLustrePort": {
 "deprecated": true,
 "description": "If set to true, the Lustre CSI driver will install Lustre kernel modules using port 6988. This serves as a workaround for a port conflict with the gke-metadata-server. This field is required ONLY under the following conditions: 1. The GKE node version is older than 1.33.2-gke.4655000. 2. You're connecting to a Lustre instance that has the 'gke-support-enabled' flag. Deprecated: This flag is no longer required as of GKE node version 1.33.2-gke.4655000, unless you are connecting to a Lustre instance that has the `gke-support-enabled` flag.",
@@ -6137,6 +6244,17 @@ false
 },
 "type": "object"
 },
+"ManagedMachineLearningDiagnosticsConfig": {
+"description": "ManagedMachineLearningDiagnosticsConfig is the configuration for the GKE Managed Machine Learning Diagnostics pipeline.",
+"id": "ManagedMachineLearningDiagnosticsConfig",
+"properties": {
+"enabled": {
+"description": "Enable/Disable Managed Machine Learning Diagnostics.",
+"type": "boolean"
+}
+},
+"type": "object"
+},
 "ManagedOpenTelemetryConfig": {
 "description": "ManagedOpenTelemetryConfig is the configuration for the GKE Managed OpenTelemetry pipeline.",
 "id": "ManagedOpenTelemetryConfig",
@@ -6692,7 +6810,7 @@ false
 "additionalProperties": {
 "type": "string"
 },
-"description": "The map of Kubernetes labels (key/value pairs) to be applied to each node. These will added in addition to any default label(s) that Kubernetes may apply to the node. In case of conflict in label keys, the applied set may differ depending on the Kubernetes version -- it's best to assume the behavior is undefined and conflicts should be avoided. For more information, including usage and the valid values, see: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/",
+"description": "The Kubernetes labels (key/value pairs) to apply to each node. The values in this field are added to the set of default labels Kubernetes applies to nodes. This field has the following restrictions: * Labels must use a valid Kubernetes syntax and character set, as defined in https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#syntax-and-character-set. * This field supports up to 1,024 total characters in a single request. Depending on the Kubernetes version, keys in this field might conflict with the keys of the default labels, which might change which of your labels are applied to the nodes. Assume that the behavior is unpredictable and avoid label key conflicts. For more information about the default labels, see: https://kubernetes.io/docs/reference/labels-annotations-taints/",
 "type": "object"
 },
 "linuxNodeConfig": {
@@ -6821,6 +6939,10 @@ false
 },
 "type": "array"
 },
+"taintConfig": {
+"$ref": "TaintConfig",
+"description": "Optional. The taint configuration for the node pool."
+},
 "taints": {
 "description": "List of kubernetes taints to be applied to each node. For more information, including usage and the valid values, see: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/",
 "items": {
@@ -7041,6 +7163,10 @@ false
 "description": "Parameters for node pool-level network config.",
 "id": "NodeNetworkConfig",
 "properties": {
+"acceleratorNetworkProfile": {
+"description": "Immutable. The accelerator network profile for the node pool. For now the only valid value is \"auto\". If specified, the network configuration of the nodes in this node pool will be managed by this profile for the supported machine types, zone, etc.",
+"type": "string"
+},
 "additionalNodeNetworkConfigs": {
 "description": "We specify the additional node networks for this node pool using this list. Each node network corresponds to an additional interface",
 "items": {
@@ -8025,7 +8151,7 @@ false
 "type": "array"
 },
 "server": {
-"description": "Defines the host name of the registry server, which will be used to create configuration file as /etc/containerd/hosts.d//hosts.toml. It supports fully qualified domain names (FQDN) and IP addresses: Specifying port is supported. Wildcards are NOT supported. Examples: - my.customdomain.com - 10.0.1.2:5000",
+"description": "Defines the host name of the registry server, which will be used to create configuration file as /etc/containerd/hosts.d//hosts.toml. It supports fully qualified domain names (FQDN) and IP addresses: Specifying port is supported, while scheme and path are NOT supported. Wildcards are NOT supported. Examples: - `my.customdomain.com` - `10.0.1.2:5000`",
 "type": "string"
 }
 },
@@ -8268,6 +8394,17 @@ false
 },
 "type": "object"
 },
+"ScheduleUpgradeConfig": {
+"description": "Configuration for scheduled upgrades on the cluster.",
+"id": "ScheduleUpgradeConfig",
+"properties": {
+"enabled": {
+"description": "Optional. Whether or not scheduled upgrades are enabled.",
+"type": "boolean"
+}
+},
+"type": "object"
+},
 "SecondaryBootDisk": {
 "description": "SecondaryBootDisk represents a persistent disk attached to a node with special configurations based on its mode.",
 "id": "SecondaryBootDisk",
@@ -8312,6 +8449,21 @@ false
 },
 "type": "object"
 },
+"SecretSyncConfig": {
+"description": "Configuration for sync Secret Manager secrets as k8s secrets.",
+"id": "SecretSyncConfig",
+"properties": {
+"enabled": {
+"description": "Enable/Disable Secret Sync Config.",
+"type": "boolean"
+},
+"rotationConfig": {
+"$ref": "SyncRotationConfig",
+"description": "Rotation config for secret manager."
+}
+},
+"type": "object"
+},
 "SecurityBulletinEvent": {
 "description": "SecurityBulletinEvent is a notification sent to customers when a security bulletin has been posted that they are vulnerable to.",
 "id": "SecurityBulletinEvent",
@@ -9132,6 +9284,43 @@ false
 },
 "type": "object"
 },
+"SyncRotationConfig": {
+"description": "SyncRotationConfig is config for secret manager auto rotation.",
+"id": "SyncRotationConfig",
+"properties": {
+"enabled": {
+"description": "Whether the rotation is enabled.",
+"type": "boolean"
+},
+"rotationInterval": {
+"description": "The interval between two consecutive rotations. Default rotation interval is 2 minutes.",
+"format": "google-duration",
+"type": "string"
+}
+},
+"type": "object"
+},
+"TaintConfig": {
+"description": "TaintConfig contains the configuration for the taints of the node pool.",
+"id": "TaintConfig",
+"properties": {
+"architectureTaintBehavior": {
+"description": "Optional. Controls architecture tainting behavior.",
+"enum": [
+"ARCHITECTURE_TAINT_BEHAVIOR_UNSPECIFIED",
+"NONE",
+"ARM"
+],
+"enumDescriptions": [
+"Specifies that the behavior is unspecified, defaults to ARM.",
+"Disables default architecture taints on the node pool.",
+"Taints all the nodes in the node pool with the default ARM taint."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "TimeWindow": {
 "description": "Represents an arbitrary window of time.",
 "id": "TimeWindow",
@@ -9623,6 +9812,7 @@ false
 "description": "Output only. The state of the upgrade.",
 "enum": [
 "STATE_UNSPECIFIED",
+"SCHEDULED",
 "STARTED",
 "SUCCEEDED",
 "FAILED",
@@ -9630,6 +9820,7 @@ false
 ],
 "enumDescriptions": [
 "STATE_UNSPECIFIED indicates the state is unspecified.",
+"SCHEDULED indicates the upgrade was scheduled.",
 "STARTED indicates the upgrade has started.",
 "SUCCEEDED indicates the upgrade has completed successfully.",
 "FAILED indicates the upgrade has failed.",