feat(container): update the API

#### container:v1beta1 The following keys were added: - schemas.AdditionalPodNetworkConfig.properties.networkAttachment.description - schemas.AdditionalPodNetworkConfig.properties.networkAttachment.type - schemas.Cluster.properties.userManagedKeysConfig.$ref - schemas.Cluster.properties.userManagedKeysConfig.description - schemas.ClusterUpdate.properties.desiredCompliancePostureConfig.$ref - schemas.ClusterUpdate.properties.desiredCompliancePostureConfig.description - schemas.ClusterUpdate.properties.userManagedKeysConfig.$ref - schemas.ClusterUpdate.properties.userManagedKeysConfig.description - schemas.NodeConfig.properties.effectiveCgroupMode.description - schemas.NodeConfig.properties.effectiveCgroupMode.enum - schemas.NodeConfig.properties.effectiveCgroupMode.enumDescriptions - schemas.NodeConfig.properties.effectiveCgroupMode.readOnly - schemas.NodeConfig.properties.effectiveCgroupMode.type - schemas.UserManagedKeysConfig.description - schemas.UserManagedKeysConfig.id - schemas.UserManagedKeysConfig.properties.aggregationCa.description - schemas.UserManagedKeysConfig.properties.aggregationCa.type - schemas.UserManagedKeysConfig.properties.clusterCa.description - schemas.UserManagedKeysConfig.properties.clusterCa.type - schemas.UserManagedKeysConfig.properties.controlPlaneDiskEncryptionKey.description - schemas.UserManagedKeysConfig.properties.controlPlaneDiskEncryptionKey.type - schemas.UserManagedKeysConfig.properties.etcdApiCa.description - schemas.UserManagedKeysConfig.properties.etcdApiCa.type - schemas.UserManagedKeysConfig.properties.etcdPeerCa.description - schemas.UserManagedKeysConfig.properties.etcdPeerCa.type - schemas.UserManagedKeysConfig.properties.gkeopsEtcdBackupEncryptionKey.description - schemas.UserManagedKeysConfig.properties.gkeopsEtcdBackupEncryptionKey.type - schemas.UserManagedKeysConfig.properties.serviceAccountSigningKeys.description - schemas.UserManagedKeysConfig.properties.serviceAccountSigningKeys.items.type - schemas.UserManagedKeysConfig.properties.serviceAccountSigningKeys.type - schemas.UserManagedKeysConfig.properties.serviceAccountVerificationKeys.description - schemas.UserManagedKeysConfig.properties.serviceAccountVerificationKeys.items.type - schemas.UserManagedKeysConfig.properties.serviceAccountVerificationKeys.type - schemas.UserManagedKeysConfig.type The following keys were changed: - documentationLink - schemas.GetJSONWebKeysResponse.properties.cacheHeader.description - schemas.GetOpenIDConfigResponse.properties.cacheHeader.description - schemas.LoggingComponentConfig.properties.enableComponents.items.enum - schemas.LoggingComponentConfig.properties.enableComponents.items.enumDescriptions #### container:v1 The following keys were added: - schemas.AdditionalPodNetworkConfig.properties.networkAttachment.description - schemas.AdditionalPodNetworkConfig.properties.networkAttachment.type - schemas.Cluster.properties.compliancePostureConfig.$ref - schemas.Cluster.properties.compliancePostureConfig.description - schemas.Cluster.properties.userManagedKeysConfig.$ref - schemas.Cluster.properties.userManagedKeysConfig.description - schemas.ClusterUpdate.properties.desiredCompliancePostureConfig.$ref - schemas.ClusterUpdate.properties.desiredCompliancePostureConfig.description - schemas.ClusterUpdate.properties.userManagedKeysConfig.$ref - schemas.ClusterUpdate.properties.userManagedKeysConfig.description - schemas.CompliancePostureConfig.description - schemas.CompliancePostureConfig.id - schemas.CompliancePostureConfig.properties.complianceStandards.description - schemas.CompliancePostureConfig.properties.complianceStandards.items.$ref - schemas.CompliancePostureConfig.properties.complianceStandards.type - schemas.CompliancePostureConfig.properties.mode.description - schemas.CompliancePostureConfig.properties.mode.enum - schemas.CompliancePostureConfig.properties.mode.enumDescriptions - schemas.CompliancePostureConfig.properties.mode.type - schemas.CompliancePostureConfig.type - schemas.ComplianceStandard.description - schemas.ComplianceStandard.id - schemas.ComplianceStandard.properties.standard.description - schemas.ComplianceStandard.properties.standard.type - schemas.ComplianceStandard.type - schemas.NodeConfig.properties.effectiveCgroupMode.description - schemas.NodeConfig.properties.effectiveCgroupMode.enum - schemas.NodeConfig.properties.effectiveCgroupMode.enumDescriptions - schemas.NodeConfig.properties.effectiveCgroupMode.readOnly - schemas.NodeConfig.properties.effectiveCgroupMode.type - schemas.UserManagedKeysConfig.description - schemas.UserManagedKeysConfig.id - schemas.UserManagedKeysConfig.properties.aggregationCa.description - schemas.UserManagedKeysConfig.properties.aggregationCa.type - schemas.UserManagedKeysConfig.properties.clusterCa.description - schemas.UserManagedKeysConfig.properties.clusterCa.type - schemas.UserManagedKeysConfig.properties.controlPlaneDiskEncryptionKey.description - schemas.UserManagedKeysConfig.properties.controlPlaneDiskEncryptionKey.type - schemas.UserManagedKeysConfig.properties.etcdApiCa.description - schemas.UserManagedKeysConfig.properties.etcdApiCa.type - schemas.UserManagedKeysConfig.properties.etcdPeerCa.description - schemas.UserManagedKeysConfig.properties.etcdPeerCa.type - schemas.UserManagedKeysConfig.properties.gkeopsEtcdBackupEncryptionKey.description - schemas.UserManagedKeysConfig.properties.gkeopsEtcdBackupEncryptionKey.type - schemas.UserManagedKeysConfig.properties.serviceAccountSigningKeys.description - schemas.UserManagedKeysConfig.properties.serviceAccountSigningKeys.items.type - schemas.UserManagedKeysConfig.properties.serviceAccountSigningKeys.type - schemas.UserManagedKeysConfig.properties.serviceAccountVerificationKeys.description - schemas.UserManagedKeysConfig.properties.serviceAccountVerificationKeys.items.type - schemas.UserManagedKeysConfig.properties.serviceAccountVerificationKeys.type - schemas.UserManagedKeysConfig.type The following keys were changed: - documentationLink - schemas.GetJSONWebKeysResponse.properties.cacheHeader.description - schemas.GetOpenIDConfigResponse.properties.cacheHeader.description - schemas.LoggingComponentConfig.properties.enableComponents.items.enum - schemas.LoggingComponentConfig.properties.enableComponents.items.enumDescriptions
googleapis · Oct 10, 2024 · 6305f3c · 6305f3c
1 parent 00ff65c
commit 6305f3c
Show file tree

Hide file tree

Showing 4 changed files with 359 additions and 16 deletions.
diff --git a/discovery/container-v1.json b/discovery/container-v1.json
@@ -14,7 +14,7 @@
   "canonicalName": "Container",
   "description": "Builds and manages container-based applications, powered by the open source Kubernetes technology.",
   "discoveryVersion": "v1",
-  "documentationLink": "https://cloud.google.com/container-engine/",
+  "documentationLink": "https://cloud.google.com/kubernetes-engine/docs/",
   "fullyEncodeReservedExpansion": true,
   "icons": {
     "x16": "http://www.google.com/images/icons/product/search-16.gif",
@@ -2540,7 +2540,7 @@
       }
     }
   },
-  "revision": "20240806",
+  "revision": "20240912",
   "rootUrl": "https://container.googleapis.com/",
   "schemas": {
     "AcceleratorConfig": {
@@ -2594,6 +2594,10 @@
           "$ref": "MaxPodsConstraint",
           "description": "The maximum number of pods per node which use this pod network."
         },
+        "networkAttachment": {
+          "description": "The name of the network attachment for pods to communicate to; cannot be specified along with subnetwork or secondary_pod_range.",
+          "type": "string"
+        },
         "secondaryPodRange": {
           "description": "The name of the secondary range on the subnet which provides IP address for this pod range.",
           "type": "string"
@@ -3147,6 +3151,10 @@
           "description": "The IP address range of the container pods in this cluster, in [CIDR](http://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation (e.g. `10.96.0.0/14`). Leave blank to have one automatically chosen or specify a `/14` block in `10.0.0.0/8`.",
           "type": "string"
         },
+        "compliancePostureConfig": {
+          "$ref": "CompliancePostureConfig",
+          "description": "Enable/Disable Compliance Posture features for the cluster."
+        },
         "conditions": {
           "description": "Which conditions caused the current cluster state.",
           "items": {
@@ -3458,6 +3466,10 @@
           "readOnly": true,
           "type": "string"
         },
+        "userManagedKeysConfig": {
+          "$ref": "UserManagedKeysConfig",
+          "description": "The Custom keys configuration for the cluster."
+        },
         "verticalPodAutoscaling": {
           "$ref": "VerticalPodAutoscaling",
           "description": "Cluster-level Vertical Pod Autoscaling configuration."
@@ -3565,6 +3577,10 @@
           "$ref": "ClusterAutoscaling",
           "description": "Cluster-level autoscaling configuration."
         },
+        "desiredCompliancePostureConfig": {
+          "$ref": "CompliancePostureConfig",
+          "description": "Enable/Disable Compliance Posture features for the cluster."
+        },
         "desiredContainerdConfig": {
           "$ref": "ContainerdConfig",
           "description": "The desired containerd config for the cluster."
@@ -3821,6 +3837,10 @@
         "removedAdditionalPodRangesConfig": {
           "$ref": "AdditionalPodRangesConfig",
           "description": "The additional pod ranges that are to be removed from the cluster. The pod ranges specified here must have been specified earlier in the 'additional_pod_ranges_config' argument."
+        },
+        "userManagedKeysConfig": {
+          "$ref": "UserManagedKeysConfig",
+          "description": "The Custom keys configuration for the cluster."
         }
       },
       "type": "object"
@@ -3857,6 +3877,45 @@
       "properties": {},
       "type": "object"
     },
+    "CompliancePostureConfig": {
+      "description": "CompliancePostureConfig defines the settings needed to enable/disable features for the Compliance Posture.",
+      "id": "CompliancePostureConfig",
+      "properties": {
+        "complianceStandards": {
+          "description": "List of enabled compliance standards.",
+          "items": {
+            "$ref": "ComplianceStandard"
+          },
+          "type": "array"
+        },
+        "mode": {
+          "description": "Defines the enablement mode for Compliance Posture.",
+          "enum": [
+            "MODE_UNSPECIFIED",
+            "DISABLED",
+            "ENABLED"
+          ],
+          "enumDescriptions": [
+            "Default value not specified.",
+            "Disables Compliance Posture features on the cluster.",
+            "Enables Compliance Posture features on the cluster."
+          ],
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
+    "ComplianceStandard": {
+      "description": "Defines the details of a compliance standard.",
+      "id": "ComplianceStandard",
+      "properties": {
+        "standard": {
+          "description": "Name of the compliance standard.",
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
     "ConfidentialNodes": {
       "description": "ConfidentialNodes is configuration for the confidential nodes feature, which makes nodes run on confidential VMs.",
       "id": "ConfidentialNodes",
@@ -4351,7 +4410,7 @@
       "properties": {
         "cacheHeader": {
           "$ref": "HttpCacheControlResponseHeader",
-          "description": "OnePlatform automatically extracts this field and uses it to set the HTTP Cache-Control header."
+          "description": "For HTTP requests, this field is automatically extracted into the Cache-Control HTTP header."
         },
         "keys": {
           "description": "The public component of the keys used by the cluster to sign token requests.",
@@ -4369,7 +4428,7 @@
       "properties": {
         "cacheHeader": {
           "$ref": "HttpCacheControlResponseHeader",
-          "description": "OnePlatform automatically extracts this field and uses it to set the HTTP Cache-Control header."
+          "description": "For HTTP requests, this field is automatically extracted into the Cache-Control HTTP header."
         },
         "claims_supported": {
           "description": "Supported claims.",
@@ -4845,15 +4904,19 @@
               "WORKLOADS",
               "APISERVER",
               "SCHEDULER",
-              "CONTROLLER_MANAGER"
+              "CONTROLLER_MANAGER",
+              "KCP_SSHD",
+              "KCP_CONNECTION"
             ],
             "enumDescriptions": [
               "Default value. This shouldn't be used.",
               "system components",
               "workloads",
               "kube-apiserver",
               "kube-scheduler",
-              "kube-controller-manager"
+              "kube-controller-manager",
+              "kcp-sshd",
+              "kcp connection logs"
             ],
             "type": "string"
           },
@@ -5370,6 +5433,21 @@
           "description": "Type of the disk attached to each node (e.g. 'pd-standard', 'pd-ssd' or 'pd-balanced') If unspecified, the default disk type is 'pd-standard'",
           "type": "string"
         },
+        "effectiveCgroupMode": {
+          "description": "Output only. effective_cgroup_mode is the cgroup mode actually used by the node pool. It is determined by the cgroup mode specified in the LinuxNodeConfig or the default cgroup mode based on the cluster creation version.",
+          "enum": [
+            "EFFECTIVE_CGROUP_MODE_UNSPECIFIED",
+            "EFFECTIVE_CGROUP_MODE_V1",
+            "EFFECTIVE_CGROUP_MODE_V2"
+          ],
+          "enumDescriptions": [
+            "EFFECTIVE_CGROUP_MODE_UNSPECIFIED means the cgroup configuration for the node pool is unspecified, i.e. the node pool is a Windows node pool.",
+            "CGROUP_MODE_V1 means the node pool is configured to use cgroupv1 for the cgroup configuration.",
+            "CGROUP_MODE_V2 means the node pool is configured to use cgroupv2 for the cgroup configuration."
+          ],
+          "readOnly": true,
+          "type": "string"
+        },
         "enableConfidentialStorage": {
           "description": "Optional. Reserved for future use.",
           "type": "boolean"
@@ -7838,6 +7916,51 @@
       },
       "type": "object"
     },
+    "UserManagedKeysConfig": {
+      "description": "UserManagedKeysConfig holds the resource address to Keys which are used for signing certs and token that are used for communication within cluster.",
+      "id": "UserManagedKeysConfig",
+      "properties": {
+        "aggregationCa": {
+          "description": "The Certificate Authority Service caPool to use for the aggregation CA in this cluster.",
+          "type": "string"
+        },
+        "clusterCa": {
+          "description": "The Certificate Authority Service caPool to use for the cluster CA in this cluster.",
+          "type": "string"
+        },
+        "controlPlaneDiskEncryptionKey": {
+          "description": "The Cloud KMS cryptoKey to use for Confidential Hyperdisk on the control plane nodes.",
+          "type": "string"
+        },
+        "etcdApiCa": {
+          "description": "Resource path of the Certificate Authority Service caPool to use for the etcd API CA in this cluster.",
+          "type": "string"
+        },
+        "etcdPeerCa": {
+          "description": "Resource path of the Certificate Authority Service caPool to use for the etcd peer CA in this cluster.",
+          "type": "string"
+        },
+        "gkeopsEtcdBackupEncryptionKey": {
+          "description": "Resource path of the Cloud KMS cryptoKey to use for encryption of internal etcd backups.",
+          "type": "string"
+        },
+        "serviceAccountSigningKeys": {
+          "description": "The Cloud KMS cryptoKeyVersions to use for signing service account JWTs issued by this cluster. Format: `projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}`",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "serviceAccountVerificationKeys": {
+          "description": "The Cloud KMS cryptoKeyVersions to use for verifying service account JWTs issued by this cluster. Format: `projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}`",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        }
+      },
+      "type": "object"
+    },
     "VerticalPodAutoscaling": {
       "description": "VerticalPodAutoscaling contains global, per-cluster information required by Vertical Pod Autoscaler to automatically adjust the resources of pods controlled by it.",
       "id": "VerticalPodAutoscaling",