3SrSSKJr SSKJr SSKJr SSKJr Sr "SS\R5r "S S \R5r "S S \R5r "S S\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS \R5r"S!S"\R5r"S#S$\R5r"S%S&\R5r"S'S(\R5r"S)S*\R5r"S+S,\R5r"S-S.\R5r"S/S0\R5r"S1S2\R5r "S3S4\R5r!"S5S6\R5r""S7S8\R5r#"S9S:\R5r$"S;S<\R5r%"S=S>\R5r&"S?S@\R5r'"SASB\R5r("SCSD\R5r)"SESF\R5r*"SGSH\R5r+"SISJ\R5r,"SKSL\R5r-"SMSN\R5r."SOSP\R5r/"SQSR\R5r0"SSST\R5r1"SUSV\R5r2"SWSX\R5r3"SYSZ\R5r4"S[S\\R5r5"S]S^\R5r6"S_S`\R5r7"SaSb\R5r8"ScSd\R5r9"SeSf\R5r:"SgSh\R5r;"SiSj\R5r<"SkSl\R5r="SmSn\R5r>"SoSp\R5r?"SqSr\R5r@"SsSt\R5rA"SuSv\R5rB"SwSx\R5rC"SySz\R5rD"S{S|\R5rE"S}S~\R5rF"SS\R5rG"SS\R5rH"SS\R5rI"SS\R5rJ"SS\R5rK"SS\R5rL"SS\R5rM"SS\R5rN"SS\R5rO"SS\R5rP"SS\R5rQ"SS\R5rR"SS\R5rS"SS\R5rT"SS\R5rU"SS\R5rV"SS\R5rW"SS\R5rX"SS\R5rY"SS\R5rZ"SS\R5r["SS\R5r\"SS\R5r]"SS\R5r^"SS\R5r_"SS\R5r`"SS\R5ra"SS\R5rb"SS\R5rc"SS\R5rd"SS\R5re"SS\R5rf"SS\R5rg"SS\R5rh"SS\R5ri"SS\R5rj"SS\R5rk"SS\R5rl"SS\R5rm"SS\R5rn"SS\R5ro"SS\R5rp"SS\R5rq"SS\R5rr"SS\R5rs"SS\R5rt"SS\R5ru"SS\R5rv"SS\R5rw"SS\R5rx"SS\R5ry"SS\R5rz"SS\R5r{"SS\R5r|"SS\R5r}"SS\R5r~"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GS GS \R5r"GS GS \R5r"GS GS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS \R5r"GS!GS"\R5r"GS#GS$\R5r"GS%GS&\R5r"GS'GS(\R5r"GS)GS*\R5r"GS+GS,\R5r"GS-GS.\R5r"GS/GS0\R5r"GS1GS2\R5r"GS3GS4\R5r"GS5GS6\R5r"GS7GS8\R5r"GS9GS:\R5r"GS;GS<\R5r"GS=GS>\R5r"GS?GS@\R5r"GSAGSB\R5r"GSCGSD\R5r"GSEGSF\R5r"GSGGSH\R5r"GSIGSJ\R5r"GSKGSL\R5r"GSMGSN\R5r"GSOGSP\R5r"GSQGSR\R5r"GSSGST\R5r"GSUGSV\R5r"GSWGSX\R5r"GSYGSZ\R5r"GS[GS\\R5r"GS]GS^\R5r"GS_GS`\R5r"GSaGSb\R5r"GScGSd\R5r"GSeGSf\R5r"GSgGSh\R5r"GSiGSj\R5r"GSkGSl\R5r"GSmGSn\R5r"GSoGSp\R5r"GSqGSr\R5r"GSsGSt\R5r"GSuGSv\R5r"GSwGSx\R5r"GSyGSz\R5r"GS{GS|\R5r"GS}GS~\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5Gr"GSGS\R5Gr"GSGS\R5Gr"GSGS\R5Gr"GSGS\R5Gr"GSGS\R5Gr"GSGS\R5Gr"GSGS\R5Gr"GSGS\R5Gr"GSGS\R5Gr "GSGS\R5Gr "GSGS\R5Gr "GS GS \R5Gr "GS GS \R5Gr "GS GS\R5Gr"GSGS\R5Gr"GSGS\R5Gr"GSGS\R5Gr"GSGS\R5Gr"GSGS\R5Gr"GSGS\R5Gr"GSGS\R5Gr"GSGS\R5Gr"GSGS \R5Gr"GS!GS"\R5Gr"GS#GS$\R5Gr"GS%GS&\R5Gr"GS'GS(\R5Gr"GS)GS*\R5Gr"GS+GS,\R5Gr"GS-GS.\R5Gr"GS/GS0\R5Gr"GS1GS2\R5Gr "GS3GS4\R5Gr!"GS5GS6\R5Gr""GS7GS8\R5Gr#"GS9GS:\R5Gr$"GS;GS<\R5Gr%"GS=GS>\R5Gr&"GS?GS@\R5Gr'"GSAGSB\R5Gr("GSCGSD\R5Gr)"GSEGSF\R5Gr*\GRV"G\GSGGSH5 \GRX"G\GRZGSIGSJ5 \GRX"G\GRZGSKGSL5 GgM(NzGenerated message classes for container version v1. Builds and manages container-based applications, powered by the open source Kubernetes technology. )absolute_import)messages)encoding) extra_types containerc\rSrSrSr\R "S5r\R"S5r \R"SS5r \R"S5r \R"SS 5r S rg ) AcceleratorConfigaAcceleratorConfig represents a Hardware Accelerator request. Fields: acceleratorCount: The number of the accelerator cards exposed to an instance. acceleratorType: The accelerator type resource name. List of supported accelerators [here](https://cloud.google.com/compute/docs/gpus) gpuDriverInstallationConfig: The configuration for auto installation of GPU driver. gpuPartitionSize: Size of partitions to create on the GPU. Valid values are described in the NVIDIA [mig user guide](https://docs.nvidia.com/datacenter/tesla/mig-user- guide/#partitioning). gpuSharingConfig: The configuration for GPU sharing options. GPUDriverInstallationConfigGPUSharingConfigN)__name__ __module__ __qualname____firstlineno____doc__ _messages IntegerFieldacceleratorCount StringFieldacceleratorType MessageFieldgpuDriverInstallationConfiggpuPartitionSizegpuSharingConfig__static_attributes__rOlib/googlecloudsdk/generated_clients/apis/container/v1/container_v1_messages.pyr r sd ++A.))!,/ ) 6 67TVW X**1-++,>Br"r c\rSrSrSr"SS\R 5r\R"SSS9r \R"SS5r \R"S 5r S r g ) AdditionalIPRangesConfig*apAdditionalIPRangesConfig is the configuration for individual additional subnetwork attached to the cluster Enums: StatusValueValuesEnum: Draining status of the additional subnet. Fields: podIpv4RangeNames: List of secondary ranges names within this subnetwork that can be used for pod IPs. Example1: gke-pod-range1 Example2: gke- pod-range1,gke-pod-range2 status: Draining status of the additional subnet. subnetwork: Name of the subnetwork. This can be the full path of the subnetwork or just the name. Example1: my-subnet Example2: projects/gke- project/regions/us-central1/subnetworks/my-subnet c$\rSrSrSrSrSrSrSrg).AdditionalIPRangesConfig.StatusValueValuesEnum;a#Draining status of the additional subnet. Values: STATUS_UNSPECIFIED: Not set, same as ACTIVE. ACTIVE: ACTIVE status indicates that the subnet is available for new node pool creation. DRAINING: DRAINING status indicates that the subnet is not used for new node pool creation. rr r rN) rrrrrSTATUS_UNSPECIFIEDACTIVEDRAININGr!rr"r#StatusValueValuesEnumr(;s FHr"r-r Trepeatedr rrN)rrrrrrEnumr-rpodIpv4RangeNames EnumFieldstatus subnetworkr!rr"r#r%r%*sO inn  ++A=   6 :&$$Q'*r"r%c`\rSrSrSr\R "S5r\R "S5rSr g)AdditionalNodeNetworkConfigNa AdditionalNodeNetworkConfig is the configuration for additional node networks within the NodeNetworkConfig message Fields: network: Name of the VPC where the additional interface belongs subnetwork: Name of the subnetwork where the additional interface belongs r r rN) rrrrrrrnetworkr4r!rr"r#r6r6Ns)  ! !! $'$$Q'*r"r6c\rSrSrSr\R "SS5r\R"S5r \R"S5r \R"S5r Sr g ) AdditionalPodNetworkConfig[a6AdditionalPodNetworkConfig is the configuration for additional pod networks within the NodeNetworkConfig message Fields: maxPodsPerNode: The maximum number of pods per node which use this pod network. networkAttachment: The name of the network attachment for pods to communicate to; cannot be specified along with subnetwork or secondary_pod_range. secondaryPodRange: The name of the secondary range on the subnet which provides IP address for this pod range. subnetwork: Name of the subnetwork where the additional pod network belongs. MaxPodsConstraintr r rrrN) rrrrrrrmaxPodsPerNodernetworkAttachmentsecondaryPodRanger4r!rr"r#r:r:[sN ))*=qA.++A.++A.$$Q'*r"r:c^\rSrSrSr\R "SSSS9r\R"SSS9r Sr g ) AdditionalPodRangesConfigqa&AdditionalPodRangesConfig is the configuration for additional pod secondary ranges supporting the ClusterUpdate message. Fields: podRangeInfo: Output only. Information for additional pod range. podRangeNames: Name for pod secondary ipv4 range which has the actual range defined ahead. RangeInfor Tr.r rN) rrrrrrr podRangeInfor podRangeNamesr!rr"r#rArAqs/'' QF,''D9-r"rAc\rSrSrSr\R "SS5r\R "SS5r\R "SS5r \R "S S 5r \R "S S 5r \R "S S5r \R "SS5r \R "SS5r\R "SS5r\R "SS5r\R "SS5r\R "SS5r\R "SS5r\R "SS5r\R "SS 5r\R "S!S"5r\R "S#S$5r\R "S%S&5r\R "S'S(5rS)rg*)+ AddonsConfigae Configuration for the addons that can be automatically spun up in the cluster, enabling additional functionality. Fields: cloudRunConfig: Configuration for the Cloud Run addon, which allows the user to use a managed Knative service. configConnectorConfig: Configuration for the ConfigConnector add-on, a Kubernetes extension to manage hosted Google Cloud services through the Kubernetes API. dnsCacheConfig: Configuration for NodeLocalDNS, a dns cache running on cluster nodes gcePersistentDiskCsiDriverConfig: Configuration for the Compute Engine Persistent Disk CSI driver. gcpFilestoreCsiDriverConfig: Configuration for the Filestore CSI driver. gcsFuseCsiDriverConfig: Configuration for the Cloud Storage Fuse CSI driver. gkeBackupAgentConfig: Configuration for the Backup for GKE agent addon. highScaleCheckpointingConfig: Configuration for the High Scale Checkpointing add-on. horizontalPodAutoscaling: Configuration for the horizontal pod autoscaling feature, which increases or decreases the number of replica pods a replication controller has based on the resource usage of the existing pods. httpLoadBalancing: Configuration for the HTTP (L7) load balancing controller addon, which makes it easy to set up HTTP load balancers for services in a cluster. kubernetesDashboard: Configuration for the Kubernetes Dashboard. This addon is deprecated, and will be disabled in 1.15. It is recommended to use the Cloud Console to manage and monitor your Kubernetes clusters, workloads and applications. For more information, see: https://cloud.google.com/kubernetes-engine/docs/concepts/dashboards lustreCsiDriverConfig: Configuration for the Lustre CSI driver. networkPolicyConfig: Configuration for NetworkPolicy. This only tracks whether the addon is enabled or not on the Master, it does not track whether network policy is enabled for the nodes. parallelstoreCsiDriverConfig: Configuration for the Cloud Storage Parallelstore CSI driver. podSnapshotConfig: Configuration for the Pod Snapshot feature. rayConfig: Optional. DEPRECATED. Use RayOperatorConfig instead. rayOperatorConfig: Optional. Configuration for Ray Operator addon. sliceControllerConfig: Optional. Configuration for the slice controller add-on. statefulHaConfig: Optional. Configuration for the StatefulHA add-on. CloudRunConfigr ConfigConnectorConfigr DnsCacheConfigr GcePersistentDiskCsiDriverConfigrGcpFilestoreCsiDriverConfigrGcsFuseCsiDriverConfigGkeBackupAgentConfigHighScaleCheckpointingConfigHorizontalPodAutoscaling HttpLoadBalancing KubernetesDashboard LustreCsiDriverConfig NetworkPolicyConfig ParallelstoreCsiDriverConfigPodSnapshotConfig RayConfigRayOperatorConfigSliceControllerConfigr StatefulHAConfigrN)rrrrrrrcloudRunConfigconfigConnectorConfigdnsCacheConfig gcePersistentDiskCsiDriverConfiggcpFilestoreCsiDriverConfiggcsFuseCsiDriverConfiggkeBackupAgentConfighighScaleCheckpointingConfighorizontalPodAutoscalinghttpLoadBalancingkubernetesDashboardlustreCsiDriverConfignetworkPolicyConfigparallelstoreCsiDriverConfigpodSnapshotConfig rayConfigrayOperatorConfigsliceControllerConfigstatefulHaConfigr!rr"r#rGrGs+Z))*:A>.#001H!L))*:A>.%.%;%;<^`a%b" ) 6 67TVW X$112JAN"//0FJ!*!7!78VXY!Z&334NPQR,,-@"E!../DbI#001H"M!../DbI!*!7!78VXZ![,,-@"E$$["5),,-@"E#001H"M++,>Cr"rGc\rSrSrSr"SS\R 5r\R"S5r \R"S5r \R"SS5r Sr g ) #AdvancedDatapathObservabilityConfigaBAdvancedDatapathObservabilityConfig specifies configuration of observability features of advanced datapath. Enums: RelayModeValueValuesEnum: Method used to make Relay available Fields: enableMetrics: Expose flow metrics on nodes enableRelay: Enable Relay component relayMode: Method used to make Relay available c(\rSrSrSrSrSrSrSrSr g) zAutoMonitoringConfig defines the configuration for GKE Workload Auto- Monitoring. Enums: ScopeValueValuesEnum: Scope for GKE Workload Auto-Monitoring. Fields: scope: Scope for GKE Workload Auto-Monitoring. c$\rSrSrSrSrSrSrSrg))AutoMonitoringConfig.ScopeValueValuesEnumiIzScope for GKE Workload Auto-Monitoring. Values: SCOPE_UNSPECIFIED: Not set. ALL: Auto-Monitoring is enabled for all supported applications. NONE: Disable Auto-Monitoring. rr r rN) rrrrrSCOPE_UNSPECIFIEDALLNONEr!rr"r#ScopeValueValuesEnumrIs C Dr"rr rN rrrrrrr0rr2scoper!rr"r#rr>s,  Y^^     4a 8%r"rc`\rSrSrSr\R "S5r\R "S5rSr g)AutoUpgradeOptionsiXaAutoUpgradeOptions defines the set of options for the user to control how the Auto Upgrades will proceed. Fields: autoUpgradeStartTime: Output only. This field is set when upgrades are about to commence with the approximate start time for the upgrades, in [RFC3339](https://www.ietf.org/rfc/rfc3339.txt) text format. description: Output only. This field is set when upgrades are about to commence with the description of the upgrade. r r rN) rrrrrrrautoUpgradeStartTime descriptionr!rr"r#rrXs* #..q1%%a(+r"rc\rSrSrSr\R "SS5r\R"S5r \R "SS5r \R "SS 5r S r g ) AutopilotihaAutopilot is the configuration for Autopilot settings on the cluster. Fields: conversionStatus: Output only. ConversionStatus is the status of conversion between Autopilot and standard. enabled: Enable Autopilot privilegedAdmissionConfig: PrivilegedAdmissionConfig is the configuration related to privileged admission control. workloadPolicyConfig: WorkloadPolicyConfig is the configuration related to GCW workload policy AutopilotConversionStatusr r PrivilegedAdmissionConfigrWorkloadPolicyConfigrrN) rrrrrrrconversionStatusrrprivilegedAdmissionConfigworkloadPolicyConfigr!rr"r#rrhsV ++,GK  " "1 %''445PRST"//0FJr"rc\rSrSrSr"SS\R 5r\R"S5r \R"S5r \R"S5r \R"SS5r \R"S 5r\R"S S S 9rS rg)AutopilotCompatibilityIssuei{aSAutopilotCompatibilityIssue contains information about a specific compatibility issue with Autopilot mode. Enums: IncompatibilityTypeValueValuesEnum: The incompatibility type of this issue. Fields: constraintType: The constraint type of the issue. description: The description of the issue. documentationUrl: A URL to a public documentation, which addresses resolving this issue. incompatibilityType: The incompatibility type of this issue. lastObservation: The last time when this issue was observed. subjects: The name of the resources which are subject to this issue. c(\rSrSrSrSrSrSrSrSr g) >AutopilotCompatibilityIssue.IncompatibilityTypeValueValuesEnumiaThe incompatibility type of this issue. Values: UNSPECIFIED: Default value, should not be used. INCOMPATIBILITY: Indicates that the issue is a known incompatibility between the cluster and Autopilot mode. ADDITIONAL_CONFIG_REQUIRED: Indicates the issue is an incompatibility if customers take no further action to resolve. PASSED_WITH_OPTIONAL_CONFIG: Indicates the issue is not an incompatibility, but depending on the workloads business logic, there is a potential that they won't work on Autopilot. rr r rrN) rrrrr UNSPECIFIEDINCOMPATIBILITYADDITIONAL_CONFIG_REQUIREDPASSED_WITH_OPTIONAL_CONFIGr!rr"r#"IncompatibilityTypeValueValuesEnumrs KO!""#r"rr r rrrrOTr.rN)rrrrrrr0rrconstraintTyperdocumentationUrlr2incompatibilityTypelastObservationsubjectsr!rr"r#rr{s"$9>>$$((+.%%a(+**1-!++,PRST))!,/  " "1t 4(r"rc<\rSrSrSr\R "S5rSrg)AutopilotConfigizAutopilotConfig contains configuration of autopilot feature for this nodepool. Fields: enabled: Denotes that nodes belonging to this node pool are Autopilot nodes. r rNrrr"r#rr  " "1 %'r"rcp\rSrSrSr"SS\R 5r"SS\R 5r\R"S5r \R"S\RRS 9r\R"S \RRS 9r\R "SS 5r\R "SS 5rS rg)riaAutopilotConversionStatus represents conversion status. Enums: StateValueValuesEnum: Output only. The current state of the conversion. TypeValueValuesEnum: Output only. Type represents the direction of conversion. Fields: autoCommitTime: Conversion will be automatically committed after this time. autopilotNodeCount: Output only. The number of Autopilot nodes in the cluster. This field is only updated while MIGRATING. standardNodeCount: Output only. The number of Standard nodes in the cluster. This field is only updated while MIGRATING. state: Output only. The current state of the conversion. type: Output only. Type represents the direction of conversion. c0\rSrSrSrSrSrSrSrSr Sr S r g ) .AutopilotConversionStatus.StateValueValuesEnumiaOutput only. The current state of the conversion. Values: STATE_UNSPECIFIED: STATE_UNSPECIFIED indicates the state is unspecified. CONFIGURING: CONFIGURING indicates this cluster is being configured for conversion. The KCP will be restarted in the desired mode (i.e. Autopilot or Standard) and all workloads will be migrated to new nodes. If the cluster is being converted to Autopilot, CA rotation will also begin. MIGRATING: MIGRATING indicates this cluster is migrating workloads. MIGRATED_WAITING_FOR_COMMIT: MIGRATED_WAITING_FOR_COMMIT indicates this cluster has finished migrating all the workloads to Autopilot node pools and is waiting for the customer to commit the conversion. Once migration is committed, CA rotation will be completed and old node pools will be deleted. This action will be automatically performed 72 hours after conversion. COMMITTING: COMMITTING indicates this cluster is finishing CA rotation by removing the old CA from the cluster and restarting the KCP. Additionally, old node pools will begin deletion. DONE: DONE indicates the conversion has been completed. Old node pools will continue being deleted in the background. rr r rrrrN) rrrrrSTATE_UNSPECIFIED CONFIGURING MIGRATINGMIGRATED_WAITING_FOR_COMMIT COMMITTINGDONEr!rr"r#StateValueValuesEnumrs),KI"#J Dr"rc$\rSrSrSrSrSrSrSrg)-AutopilotConversionStatus.TypeValueValuesEnumiajOutput only. Type represents the direction of conversion. Values: TYPE_UNSPECIFIED: TYPE_UNSPECIFIED indicates the conversion type is unspecified. CONVERT_TO_AUTOPILOT: CONVERT_TO_AUTOPILOT indicates the conversion is from Standard to Autopilot. CONVERT_TO_STANDARD: CONVERT_TO_STANDARD indicates the conversion is from Autopilot to Standard. rr r rN) rrrrrTYPE_UNSPECIFIEDCONVERT_TO_AUTOPILOTCONVERT_TO_STANDARDr!rr"r#TypeValueValuesEnumrs r"rr r variantrrrrN)rrrrrrr0rrrautoCommitTimerVariantINT32autopilotNodeCountstandardNodeCountr2statetyper!rr"r#rrs$ Y^^ < INN ((+. --a9J9J9P9PQ,,Q 8I8I8O8OP   4a 8%   2A 6$r"rc\rSrSrSr\R "S5r\R"S\RRS9r \R "S5r \R "S5r \R"S5r\R "S S 5r\R "S 5r\R "S S S9r\R "S5r\R "SS5r\R "SS5rSrg) AutoprovisioningNodePoolDefaultsiazAutoprovisioningNodePoolDefaults contains defaults for a node pool created by NAP. Fields: bootDiskKmsKey: The Customer Managed Encryption Key used to encrypt the boot disk attached to each node in the node pool. This should be of the form projects/[KEY_PROJECT_ID]/locations/[LOCATION]/keyRings/[RING_NAME] /cryptoKeys/[KEY_NAME]. For more information about protecting resources with Cloud KMS Keys please see: https://cloud.google.com/compute/docs/disks/customer-managed-encryption diskSizeGb: Size of the disk attached to each node, specified in GB. The smallest allowed disk size is 10GB. If unspecified, the default disk size is 100GB. diskType: Type of the disk attached to each node (e.g. 'pd-standard', 'pd- ssd' or 'pd-balanced') If unspecified, the default disk type is 'pd- standard' imageType: The image type to use for NAP created node. Please see https://cloud.google.com/kubernetes-engine/docs/concepts/node-images for available image types. insecureKubeletReadonlyPortEnabled: DEPRECATED. Use NodePoolAutoConfig.NodeKubeletConfig instead. management: Specifies the node management options for NAP created node- pools. minCpuPlatform: Deprecated. Minimum CPU platform to be used for NAP created node pools. The instance may be scheduled on the specified or newer CPU platform. Applicable values are the friendly names of CPU platforms, such as minCpuPlatform: Intel Haswell or minCpuPlatform: Intel Sandy Bridge. For more information, read [how to specify min CPU platform](https://cloud.google.com/compute/docs/instances/specify-min- cpu-platform). This field is deprecated, min_cpu_platform should be specified using `cloud.google.com/requested-min-cpu-platform` label selector on the pod. To unset the min cpu platform field pass "automatic" as field value. oauthScopes: Scopes that are used by NAP when creating node pools. serviceAccount: The Google Cloud Platform Service Account to be used by the node VMs. shieldedInstanceConfig: Shielded Instance options. upgradeSettings: Specifies the upgrade settings for NAP created node pools r r rrrrNodeManagementrOrQrSTr.rUShieldedInstanceConfigrWUpgradeSettingsrYrN)rrrrrrrbootDiskKmsKeyrrr diskSizeGbdiskType imageTyper"insecureKubeletReadonlyPortEnabledr managementminCpuPlatform oauthScopesserviceAccountshieldedInstanceConfigupgradeSettingsr!rr"r#rrs&P((+.%%a1B1B1H1HI*  " "1 %(##A&)'0'='=a'@$%%&6:*((+.%%a$7+((+.$112JBO**+5r1\R"S?5r2\R"S@SA5r3\R"SB5r4\R@"SC\RBRDS+9r5\R"SDS S9r6\R"SESF5r7\R"SG5r8\R"SHSI5r9\R"SJ5r:\R"SKS S9r;\R"SLSM5r<\R"SN5r=\R"SOSP5r>\R"SQSR5r?\R"SSST5r@\R"SUSV5rA\R"SWSX5rB\R"SYSZ5rC\R"S[S\5rD\R"S]5rE\R"S^5rF\R"S_5rG\R"S`Sa5rH\R"SbSc5rI\R"SdSe5rJ\R@"Sf\RBRDS+9rK\R"SgSh5rL\R"SiSj5rM\R"SkSlS S9rN\R"SmSn5rO\R"SoSp5rP\R"SqSr5rQ\R"SsSt5rR\R"SuSv5rS\R"SwSx5rT\R"SSy5rU\R"SzS{5rV\R"S|S}5rW\R"S~S5rX\RR"S5rY\RR"S5rZ\R"SS5r[\R"SS5r\\R"SS5r]\R"SS5r^\R"S5r_\R"S5r`\R"SS5ra\R"SS5rc\R"S5rd\R"S5re\R"S S5rf\R"S5rg\R"SS5rh\R"SS5ri\R"SS5rj\R"S5rkSrlg)Clusterikap;A Google Kubernetes Engine cluster. Enums: StatusValueValuesEnum: Output only. The current status of this cluster. Messages: ResourceLabelsValue: The resource labels for the cluster to use to annotate any related Google Compute Engine resources. TagsValue: Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example: "123/environment": "production", "123/costCenter": "marketing" Fields: addonsConfig: Configurations for the various addons available to run in the cluster. alphaClusterFeatureGates: The list of user specified Kubernetes feature gates. Each string represents the activation status of a feature gate (e.g. "featureX=true" or "featureX=false") anonymousAuthenticationConfig: Configuration for limiting anonymous access to all endpoints except the health checks. authenticatorGroupsConfig: Configuration controlling RBAC group membership information. autopilot: Autopilot configuration for the cluster. autoscaling: Cluster-level autoscaling configuration. binaryAuthorization: Configuration for Binary Authorization. clusterIpv4Cidr: The IP address range of the container pods in this cluster, in [CIDR](http://en.wikipedia.org/wiki/Classless_Inter- Domain_Routing) notation (e.g. `10.96.0.0/14`). Leave blank to have one automatically chosen or specify a `/14` block in `10.0.0.0/8`. compliancePostureConfig: Enable/Disable Compliance Posture features for the cluster. concurrentOpsConfig: Allows enabling concurrent ops for supported operations on this cluster. This flag is for EAP users only. Concurrent ops will become the only option, and thus having an opt in/out is only applicable pre-GA. Once the feature is GA, "disabling" concurrent ops will have no effect and the flag will be removed in the future. conditions: Which conditions caused the current cluster state. confidentialNodes: Configuration of Confidential Nodes. All the nodes in the cluster will be Confidential VM once enabled. controlPlaneEgress: Configuration for control plane egress control. controlPlaneEndpointsConfig: Configuration for all cluster's control plane endpoints. costManagementConfig: Configuration for the fine-grained cost management feature. createTime: Output only. The time the cluster was created, in [RFC3339](https://www.ietf.org/rfc/rfc3339.txt) text format. currentMasterVersion: Output only. The current software version of the master endpoint. currentNodeCount: Output only. The number of nodes currently in the cluster. Deprecated. Call Kubernetes API directly to retrieve node information. currentNodeVersion: Output only. Deprecated, use [NodePools.version](https://cloud.google.com/kubernetes- engine/docs/reference/rest/v1/projects.locations.clusters.nodePools) instead. The current version of the node software components. If they are currently at multiple versions because they're in the process of being upgraded, this reflects the minimum version of all nodes. databaseEncryption: Configuration of etcd encryption. defaultMaxPodsConstraint: The default constraint on the maximum number of pods that can be run simultaneously on a node in the node pool of this cluster. Only honored if cluster created with IP Alias support. description: An optional description of this cluster. enableK8sBetaApis: Beta APIs Config enableKubernetesAlpha: Kubernetes alpha features are enabled on this cluster. This includes alpha API groups (e.g. v1alpha1) and features that may not be production ready in the kubernetes version of the master and nodes. The cluster has no SLA for uptime and master/node upgrades are disabled. Alpha enabled clusters are automatically deleted thirty days after creation. enableTpu: Enable the ability to use Cloud TPUs in this cluster. This field is deprecated due to the deprecation of 2VM TPU. The end of life date for 2VM TPU is 2025-04-25. endpoint: Output only. The IP address of this cluster's master endpoint. The endpoint can be accessed from the internet at `https://username:password@endpoint/`. See the `masterAuth` property of this resource for username and password information. enterpriseConfig: GKE Enterprise Configuration. Deprecated: GKE Enterprise features are now available without an Enterprise tier. etag: This checksum is computed by the server based on the value of cluster fields, and may be sent on update requests to ensure the client has an up-to-date value before proceeding. expireTime: Output only. The time the cluster will be automatically deleted in [RFC3339](https://www.ietf.org/rfc/rfc3339.txt) text format. fleet: Fleet information for the cluster. gkeAutoUpgradeConfig: Configuration for GKE auto upgrades. id: Output only. Unique id for the cluster. identityServiceConfig: Configuration for Identity Service component. initialClusterVersion: The initial Kubernetes version for this cluster. Valid versions are those found in validMasterVersions returned by getServerConfig. The version can be upgraded over time; such upgrades are reflected in currentMasterVersion and currentNodeVersion. Users may specify either explicit versions offered by Kubernetes Engine or version aliases, which have the following behavior: - "latest": picks the highest valid Kubernetes version - "1.X": picks the highest valid patch+gke.N patch in the 1.X version - "1.X.Y": picks the highest valid gke.N patch in the 1.X.Y version - "1.X.Y-gke.N": picks an explicit Kubernetes version - "","-": picks the default Kubernetes version initialNodeCount: The number of nodes to create in this cluster. You must ensure that your Compute Engine [resource quota](https://cloud.google.com/compute/quotas) is sufficient for this number of instances. You must also have available firewall and routes quota. For requests, this field should only be used in lieu of a "node_pool" object, since this configuration (along with the "node_config") will be used to create a "NodePool" object with an auto- generated name. Do not use this and a node_pool at the same time. This field is deprecated, use node_pool.initial_node_count instead. instanceGroupUrls: Output only. Deprecated. Use node_pools.instance_group_urls. ipAllocationPolicy: Configuration for cluster IP allocation. labelFingerprint: The fingerprint of the set of labels for this cluster. legacyAbac: Configuration for the legacy ABAC authorization mode. location: Output only. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/regions-zones/regions- zones#available) or [region](https://cloud.google.com/compute/docs/regions-zones/regions- zones#available) in which the cluster resides. locations: The list of Google Compute Engine [zones](https://cloud.google.com/compute/docs/zones#available) in which the cluster's nodes should be located. This field provides a default value if [NodePool.Locations](https://cloud.google.com/kubernetes-engine /docs/reference/rest/v1/projects.locations.clusters.nodePools#NodePool.F IELDS.locations) are not specified during node pool creation. Warning: changing cluster locations will update the [NodePool.Locations](https://cloud.google.com/kubernetes-engine/docs/ref erence/rest/v1/projects.locations.clusters.nodePools#NodePool.FIELDS.loc ations) of all node pools and will result in nodes being added and/or removed. loggingConfig: Logging configuration for the cluster. loggingService: The logging service the cluster should use to write logs. Currently available options: * `logging.googleapis.com/kubernetes` - The Cloud Logging service with a Kubernetes-native resource model * `logging.googleapis.com` - The legacy Cloud Logging service (no longer available as of GKE 1.15). * `none` - no logs will be exported from the cluster. If left as an empty string,`logging.googleapis.com/kubernetes` will be used for GKE 1.14+ or `logging.googleapis.com` for earlier versions. maintenancePolicy: Configure the maintenance policy for this cluster. managedConfig: ManagedConfig configuration for the cluster. managedOpentelemetryConfig: Configuration for Managed OpenTelemetry pipeline. masterAuth: The authentication information for accessing the master endpoint. If unspecified, the defaults are used: For clusters before v1.12, if master_auth is unspecified, `username` will be set to "admin", a random password will be generated, and a client certificate will be issued. masterAuthorizedNetworksConfig: The configuration options for master authorized networks feature. Deprecated: Use ControlPlaneEndpointsConfig.IPEndpointsConfig.authorized_networks_config instead. meshCertificates: Configuration for issuance of mTLS keys and certificates to Kubernetes pods. monitoringConfig: Monitoring configuration for the cluster. monitoringService: The monitoring service the cluster should use to write metrics. Currently available options: * `monitoring.googleapis.com/kubernetes` - The Cloud Monitoring service with a Kubernetes-native resource model * `monitoring.googleapis.com` - The legacy Cloud Monitoring service (no longer available as of GKE 1.15). * `none` - No metrics will be exported from the cluster. If left as an empty string,`monitoring.googleapis.com/kubernetes` will be used for GKE 1.14+ or `monitoring.googleapis.com` for earlier versions. name: The name of this cluster. The name must be unique within this project and location (e.g. zone or region), and can be up to 40 characters with the following restrictions: * Lowercase letters, numbers, and hyphens only. * Must start with a letter. * Must end with a number or a letter. network: The name of the Google Compute Engine [network](https://cloud.google.com/compute/docs/networks-and- firewalls#networks) to which the cluster is connected. If left unspecified, the `default` network will be used. networkConfig: Configuration for cluster networking. networkPolicy: Configuration options for the NetworkPolicy feature. nodeConfig: Parameters used in creating the cluster's nodes. For requests, this field should only be used in lieu of a "node_pool" object, since this configuration (along with the "initial_node_count") will be used to create a "NodePool" object with an auto-generated name. Do not use this and a node_pool at the same time. For responses, this field will be populated with the node configuration of the first node pool. (For configuration of each node pool, see `node_pool.config`) If unspecified, the defaults are used. This field is deprecated, use node_pool.config instead. nodeIpv4CidrSize: Output only. The size of the address space on each node for hosting containers. This is provisioned from within the `container_ipv4_cidr` range. This field will only be set when cluster is in route-based network mode. nodePoolAutoConfig: Node pool configs that apply to all auto-provisioned node pools in autopilot clusters and node auto-provisioning enabled clusters. nodePoolDefaults: Default NodePool settings for the entire cluster. These settings are overridden if specified on the specific NodePool object. nodePools: The node pools associated with this cluster. This field should not be set if "node_config" or "initial_node_count" are specified. notificationConfig: Notification configuration of the cluster. parentProductConfig: The configuration of the parent product of the cluster. This field is used by Google internal products that are built on top of the GKE cluster and take the ownership of the cluster. podAutoscaling: The config for pod autoscaling. privateClusterConfig: Configuration for private cluster. rbacBindingConfig: RBACBindingConfig allows user to restrict ClusterRoleBindings an RoleBindings that can be created. releaseChannel: Release channel configuration. If left unspecified on cluster creation and a version is specified, the cluster is enrolled in the most mature release channel where the version is available (first checking STABLE, then REGULAR, and finally RAPID). Otherwise, if no release channel configuration and no version is specified, the cluster is enrolled in the REGULAR channel with its default version. resourceLabels: The resource labels for the cluster to use to annotate any related Google Compute Engine resources. resourceUsageExportConfig: Configuration for exporting resource usages. Resource usage export is disabled when this config is unspecified. rollbackSafeUpgrade: The rollback safe upgrade information of the cluster. This field is used when user manually triggers a rollback safe upgrade. runtimeVulnerabilityInsightConfig: Enable/Disable RVI features for the cluster. satisfiesPzi: Output only. Reserved for future use. satisfiesPzs: Output only. Reserved for future use. scheduleUpgradeConfig: Configuration for scheduled upgrades. secretManagerConfig: Secret CSI driver configuration. secretSyncConfig: Secret Sync controller configuration. securityPostureConfig: Enable/Disable Security Posture API features for the cluster. selfLink: Output only. Server-defined URL for the resource. servicesIpv4Cidr: Output only. The IP address range of the Kubernetes services in this cluster, in [CIDR](http://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation (e.g. `1.2.3.4/29`). Service addresses are typically put in the last `/16` from the container CIDR. shieldedNodes: Shielded Nodes configuration. status: Output only. The current status of this cluster. statusMessage: Output only. Deprecated. Use conditions instead. Additional information about the current status of this cluster, if available. subnetwork: The name of the Google Compute Engine [subnetwork](https://cloud.google.com/compute/docs/subnetworks) to which the cluster is connected. tags: Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example: "123/environment": "production", "123/costCenter": "marketing" tpuIpv4CidrBlock: Output only. The IP address range of the Cloud TPUs in this cluster, in [CIDR](http://en.wikipedia.org/wiki/Classless_Inter- Domain_Routing) notation (e.g. `1.2.3.4/29`). This field is deprecated due to the deprecation of 2VM TPU. The end of life date for 2VM TPU is 2025-04-25. userManagedKeysConfig: The Custom keys configuration for the cluster. verticalPodAutoscaling: Cluster-level Vertical Pod Autoscaling configuration. workloadIdentityConfig: Configuration for the use of Kubernetes Service Accounts in IAM policies. zone: Output only. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. This field is deprecated, use location instead. c4\rSrSrSrSrSrSrSrSr Sr S r S r g ) Cluster.StatusValueValuesEnumiga\Output only. The current status of this cluster. Values: STATUS_UNSPECIFIED: Not set. PROVISIONING: The PROVISIONING state indicates the cluster is being created. RUNNING: The RUNNING state indicates the cluster has been created and is fully usable. RECONCILING: The RECONCILING state indicates that some work is actively being done on the cluster, such as upgrading the master or node software. Details can be found in the `statusMessage` field. STOPPING: The STOPPING state indicates the cluster is being deleted. ERROR: The ERROR state indicates the cluster is unusable. It will be automatically deleted. Details can be found in the `statusMessage` field. DEGRADED: The DEGRADED state indicates the cluster requires user action to restore full functionality. Details can be found in the `statusMessage` field. rr r rrrrOrN) rrrrrr* PROVISIONINGRUNNING RECONCILINGSTOPPINGERRORDEGRADEDr!rr"r#r-r]gs-&LGKH EHr"r-additionalPropertiescf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) Cluster.ResourceLabelsValueiaThe resource labels for the cluster to use to annotate any related Google Compute Engine resources. Messages: AdditionalProperty: An additional property for a ResourceLabelsValue object. Fields: additionalProperties: Additional properties of type ResourceLabelsValue c`\rSrSrSr\R "S5r\R "S5rSr g).Cluster.ResourceLabelsValue.AdditionalPropertyiAn additional property for a ResourceLabelsValue object. Fields: key: Name of the additional property. value: A string attribute. r r rN rrrrrrrrEvaluer!rr"r#AdditionalPropertyrh)   ! !! $c##A&er"rlr Tr.rN rrrrrrMessagerlrrdr!rr"r#ResourceLabelsValuerf2  'Y.. '%112FTXYr"rpcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) Cluster.TagsValueia7Optional. Input only. Immutable. Tag keys/values directly bound to this resource. For example: "123/environment": "production", "123/costCenter": "marketing" Messages: AdditionalProperty: An additional property for a TagsValue object. Fields: additionalProperties: Additional properties of type TagsValue c`\rSrSrSr\R "S5r\R "S5rSr g)$Cluster.TagsValue.AdditionalPropertyi}An additional property for a TagsValue object. Fields: key: Name of the additional property. value: A string attribute. r r rNrjrr"r#rlrurmr"rlr Tr.rNrnrr"r# TagsValuersrqr"rwrGr r Tr.rrrrrrClusterAutoscalingrOrrQrSCompliancePostureConfigrUConcurrentOpsConfigrWStatusConditionrYConfidentialNodesr[ControlPlaneEgressr]ControlPlaneEndpointsConfigr_CostManagementConfigrarcrer rrhDatabaseEncryptionr<K8sBetaAPIConfigEnterpriseConfigFleetGkeAutoUpgradeConfig IdentityServiceConfig!"#$IPAllocationPolicy%& LegacyAbac'() LoggingConfigr&+MaintenancePolicy, ManagedConfig-ManagedOpenTelemetryConfig. MasterAuth/MasterAuthorizedNetworksConfig0MeshCertificates1MonitoringConfig2345 NetworkConfig6 NetworkPolicy7 NodeConfig89NodePoolAutoConfig:NodePoolDefaultsr)NodePool<NotificationConfig=ParentProductConfig>PodAutoscaling?PrivateClusterConfig@RBACBindingConfigAReleaseChannelBCResourceUsageExportConfigDRollbackSafeUpgradeE!RuntimeVulnerabilityInsightConfigFGHScheduleUpgradeConfigISecretManagerConfigJSecretSyncConfigKSecurityPostureConfigLMr7 ShieldedNodesOPQRSTUserManagedKeysConfigUVerticalPodAutoscalingVWorkloadIdentityConfigWXrN)mrrrrrrr0r-rMapUnrecognizedFieldsrorprwr addonsConfigralphaClusterFeatureGatesanonymousAuthenticationConfigauthenticatorGroupsConfig autopilot autoscalingbinaryAuthorizationclusterIpv4CidrcompliancePostureConfigconcurrentOpsConfig conditionsconfidentialNodescontrolPlaneEgresscontrolPlaneEndpointsConfigcostManagementConfig createTimecurrentMasterVersionrrrcurrentNodeCountcurrentNodeVersiondatabaseEncryptiondefaultMaxPodsConstraintrenableK8sBetaApisrenableKubernetesAlpha enableTpuendpointenterpriseConfigetag expireTimefleetgkeAutoUpgradeConfigididentityServiceConfiginitialClusterVersioninitialNodeCountinstanceGroupUrlsipAllocationPolicylabelFingerprint legacyAbaclocation locations loggingConfigloggingServicemaintenancePolicy managedConfigmanagedOpentelemetryConfig masterAuthmasterAuthorizedNetworksConfigmeshCertificatesmonitoringConfigmonitoringServicer6r8 networkConfig networkPolicy nodeConfignodeIpv4CidrSizenodePoolAutoConfignodePoolDefaults nodePoolsnotificationConfigparentProductConfigpodAutoscalingprivateClusterConfigrbacBindingConfigreleaseChannelresourceLabelsresourceUsageExportConfigrollbackSafeUpgrade!runtimeVulnerabilityInsightConfig satisfiesPzi satisfiesPzsscheduleUpgradeConfigsecretManagerConfigsecretSyncConfigsecurityPostureConfigselfLinkservicesIpv4Cidr shieldedNodesr2r3 statusMessager4tagstpuIpv4CidrBlockuserManagedKeysConfigverticalPodAutoscalingworkloadIdentityConfigr9r!rr"r#r[r[ksyvinn8 !!"89ZI--Z:Z2 !!"89Z)##Z:Z2'':,&221tD"+"8"89XZ["\'445PRST$$[!4)&&';Q?+!../DaH))!,/%223LaP!../DbI%%&7dK*,,-@"E --.BBG ) 6 67TVX Y"//0FK$$R(*"..r2++B 8I8I8O8OP ,,R0 --.BBG&334GL%%b)+,,-?D#004$$R()  " "2 &(++,>C   r "$$$R(*  " -%"//0FKR "#001H"M#//3++B 8I8I8O8OP++B> --.BBG**2.%%lB7*  " "2 &(##B6)(("=-((,.,,-@"E(("=-(556RTVW%%lB7*#,#9#9:Z\^#_ ++,>C++,>C++B/   r "$  ! !" %'(("=-(("=-%%lB7*++B 8I8I8O8OP --.BBG++,>C$$ZdC) --.BBG!../DbI))*:B?."//0FK,,-@"E))*:B?.))*?D.'445PRTU!../DbI&/&<&<=`bd&e#''+,''+,#001H"M!../DbI++,>C#001H"M  " "2 &(**2.(("=-   6 ;&''+-$$R(*    R 0$**2.#001H"M$112JBO$112JBO   r "$r"r[c\rSrSrSr"SS\R 5r\R"SSS9r \R"SS 5r \R"SS 5r \R"S S 5r\R"S 5r\R"SSSS9rSrg)rxiaClusterAutoscaling contains global, per-cluster information required by Cluster Autoscaler to automatically adjust the size of the cluster and create/delete node pools based on the current needs. Enums: AutoscalingProfileValueValuesEnum: Defines autoscaling behaviour. Fields: autoprovisioningLocations: The list of Google Compute Engine [zones](https://cloud.google.com/compute/docs/zones#available) in which the NodePool's nodes can be created by NAP. autoprovisioningNodePoolDefaults: AutoprovisioningNodePoolDefaults contains defaults for a node pool created by NAP. autoscalingProfile: Defines autoscaling behaviour. defaultComputeClassConfig: Default compute class is a configuration for default compute class. enableNodeAutoprovisioning: Enables automatic node pool creation and deletion. resourceLimits: Contains global constraints regarding minimum and maximum amount of resources in the cluster. c$\rSrSrSrSrSrSrSrg)4ClusterAutoscaling.AutoscalingProfileValueValuesEnumi(zDefines autoscaling behaviour. Values: PROFILE_UNSPECIFIED: No change to autoscaling configuration. OPTIMIZE_UTILIZATION: Prioritize optimizing utilization of resources. BALANCED: Use default (balanced) autoscaling configuration. rr r rN) rrrrrPROFILE_UNSPECIFIEDOPTIMIZE_UTILIZATIONBALANCEDr!rr"r#!AutoscalingProfileValueValuesEnumr>(sHr"rBr Tr.rr rDefaultComputeClassConfigrr ResourceLimitrOrN)rrrrrrr0rBrautoprovisioningLocationsr autoprovisioningNodePoolDefaultsr2autoscalingProfiledefaultComputeClassConfigrenableNodeAutoprovisioningresourceLimitsr!rr"r#rxrxs, ).. (33AE%.%;%;<^`a%b" **+NPQR'445PRST(55a8))/1tL.r"rxch\rSrSrSr"SS\R 5r\R"SS5r Sr g)ClusterNetworkPerformanceConfigi<aConfiguration of network bandwidth tiers Enums: TotalEgressBandwidthTierValueValuesEnum: Specifies the total network bandwidth tier for NodePools in the cluster. Fields: totalEgressBandwidthTier: Specifies the total network bandwidth tier for NodePools in the cluster. c \rSrSrSrSrSrSrg)GClusterNetworkPerformanceConfig.TotalEgressBandwidthTierValueValuesEnumiHzSpecifies the total network bandwidth tier for NodePools in the cluster. Values: TIER_UNSPECIFIED: Default value TIER_1: Higher bandwidth, actual values based on VM size. rr rNrrrrrTIER_UNSPECIFIEDTIER_1r!rr"r#'TotalEgressBandwidthTierValueValuesEnumrNHs Fr"rRr rN rrrrrrr0rRr2totalEgressBandwidthTierr!rr"r#rLrL<s.    '001Z\]^r"rLc \rSrSrSr"SS\R 5r"SS\R 5r"SS\R 5r "S S \R 5r \R"S S 5r \R"S S5r \R"SS5r\R"SS5r\R"SS5r\R"SS5r\R"SS5r\R&"S5r\R"SS5r\R"SS5r\R"SS5r\R"S S!5r\R"S"S#5r\R"S$S%5r\R"S&S'5r\R"S(S)5r\R"S*S+5r\R"S,S-5r\R>"SS.5r \R&"S/5r!\R"S0S15r"\R&"S25r#\R"S3S45r$\R&"S55r%\R&"S65r&\R&"S75r'\R&"S85r(\R"S9S:5r)\R"S;S<5r*\R"S=S>5r+\R"S?S@5r,\R"SASB5r-\R\"SC5r/\R\"SD5r0\R\"SE5r1\R>"SSF5r2\R"SGSH5r3\R"SISJ5r4\R"SKSL5r5\R\"SMSNSO9r6\R"SPSQ5r7\R\"SR5r8\R"SSST5r9\R"SUSV5r:\R"SWSX5r;\R"SYSZ5r<\R\"S[5r=\R"S\S]5r>\R"S^S_5r?\R\"S`5r@\R"SaSb5rA\R"ScSd5rB\R"SeSf5rC\R"SeSg5rD\R"ShSi5rE\R"SjSk5rF\R"SlSm5rG\R"SnSo5rH\R\"Sp5rI\R"SqSr5rJ\R\"Ss5rK\R"StSu5rL\R"SvSw5rM\R"SxSy5rN\R"SzS{5rO\R>"SS|5rP\R"S}S~5rQ\R"SS5rR\R"SS5rS\R"SS5rT\R"SS5rU\R"SS5rV\R"SS5rW\R"SS5rX\R"SS5rY\R"SS5rZ\R"SS5r[\R"SS5r\\R>"S S5r]\R"SS5r^\R"SS5r_\R"SS5r`\R"SIS5ra\R\"S5rb\R"SS5rc\R"S S5rd\R"SS5reSrfg) ClusterUpdateiVa+2ClusterUpdate describes an update to the cluster. Exactly one update can be applied to a cluster with each request, so at most one field can be provided. Enums: DesiredDatapathProviderValueValuesEnum: The desired datapath provider for the cluster. DesiredInTransitEncryptionConfigValueValuesEnum: Specify the details of in-transit encryption. DesiredPrivateIpv6GoogleAccessValueValuesEnum: The desired state of IPv6 connectivity to Google Services. DesiredStackTypeValueValuesEnum: The desired stack type of the cluster. If a stack type is provided and does not match the current stack type of the cluster, update will attempt to change the stack type to the new type. Fields: additionalPodRangesConfig: The additional pod ranges to be added to the cluster. These pod ranges can be used by node pools to allocate pod IPs. desiredAdditionalIpRangesConfig: The desired config for additional subnetworks attached to the cluster. desiredAddonsConfig: Configurations for the various addons available to run in the cluster. desiredAnonymousAuthenticationConfig: Configuration for limiting anonymous access to all endpoints except the health checks. desiredAuthenticatorGroupsConfig: The desired authenticator groups config for the cluster. desiredAutoIpamConfig: AutoIpamConfig contains all information related to Auto IPAM desiredAutopilot: The desired Autopilot configuration for the cluster. desiredAutopilotInsecureKubeletReadonlyPortEnabled: Enable/disable kubelet readonly port for autopilot cluster desiredAutopilotWorkloadPolicyConfig: WorkloadPolicyConfig is the configuration related to GCW workload policy desiredBinaryAuthorization: The desired configuration options for the Binary Authorization feature. desiredClusterAutoscaling: Cluster-level autoscaling configuration. desiredCompliancePostureConfig: Enable/Disable Compliance Posture features for the cluster. desiredConcurrentOpsConfig: Desired value for the cluster's concurrent_ops_config. desiredContainerdConfig: The desired containerd config for the cluster. desiredControlPlaneEgress: The desired control plane egress control config for the cluster. desiredControlPlaneEndpointsConfig: Control plane endpoints configuration. desiredCostManagementConfig: The desired configuration for the fine- grained cost management feature. desiredDatabaseEncryption: Configuration of etcd encryption. desiredDatapathProvider: The desired datapath provider for the cluster. desiredDefaultEnablePrivateNodes: Override the default setting of whether future created nodes have private IP addresses only, namely NetworkConfig.default_enable_private_nodes desiredDefaultSnatStatus: The desired status of whether to disable default sNAT for this cluster. desiredDisableL4LbFirewallReconciliation: Enable/Disable L4 LB VPC firewall reconciliation for the cluster. desiredDnsConfig: DNSConfig contains clusterDNS config for this cluster. desiredEnableCiliumClusterwideNetworkPolicy: Enable/Disable Cilium Clusterwide Network Policy for the cluster. desiredEnableFqdnNetworkPolicy: Enable/Disable FQDN Network Policy for the cluster. desiredEnableMultiNetworking: Enable/Disable Multi-Networking for the cluster desiredEnablePrivateEndpoint: Enable/Disable private endpoint for the cluster's master. Deprecated: Use desired_control_plane_endpoints_config .ip_endpoints_config.enable_public_endpoint instead. Note that the value of enable_public_endpoint is reversed: if enable_private_endpoint is false, then enable_public_endpoint will be true. desiredEnterpriseConfig: The desired enterprise configuration for the cluster. Deprecated: GKE Enterprise features are now available without an Enterprise tier. desiredFleet: The desired fleet configuration for the cluster. desiredGatewayApiConfig: The desired config of Gateway API on this cluster. desiredGcfsConfig: The desired GCFS config for the cluster desiredIdentityServiceConfig: The desired Identity Service component configuration. desiredImage: The desired name of the image to use for this node. This is used to create clusters using a custom image. NOTE: Set the "desired_node_pool" field as well. desiredImageProject: The project containing the desired image to use for this node. This is used to create clusters using a custom image. NOTE: Set the "desired_node_pool" field as well. desiredImageType: The desired image type for the node pool. NOTE: Set the "desired_node_pool" field as well. desiredInTransitEncryptionConfig: Specify the details of in-transit encryption. desiredIntraNodeVisibilityConfig: The desired config of Intra-node visibility. desiredK8sBetaApis: Desired Beta APIs to be enabled for cluster. desiredL4ilbSubsettingConfig: The desired L4 Internal Load Balancer Subsetting configuration. desiredLocations: The desired list of Google Compute Engine [zones](https://cloud.google.com/compute/docs/zones#available) in which the cluster's nodes should be located. This list must always include the cluster's primary zone. Warning: changing cluster locations will update the locations of all node pools and will result in nodes being added and/or removed. desiredLoggingConfig: The desired logging configuration. desiredLoggingService: The logging service the cluster should use to write logs. Currently available options: * `logging.googleapis.com/kubernetes` - The Cloud Logging service with a Kubernetes-native resource model * `logging.googleapis.com` - The legacy Cloud Logging service (no longer available as of GKE 1.15). * `none` - no logs will be exported from the cluster. If left as an empty string,`logging.googleapis.com/kubernetes` will be used for GKE 1.14+ or `logging.googleapis.com` for earlier versions. desiredLustreConfig: The desired lustre config for the cluster. desiredManagedConfig: The desired managed config for the cluster. desiredManagedOpentelemetryConfig: The desired managed open telemetry configuration. desiredMasterAuthorizedNetworksConfig: The desired configuration options for master authorized networks feature. Deprecated: Use desired_control_ plane_endpoints_config.ip_endpoints_config.authorized_networks_config instead. desiredMasterVersion: The Kubernetes version to change the master to. Users may specify either explicit versions offered by Kubernetes Engine or version aliases, which have the following behavior: - "latest": picks the highest valid Kubernetes version - "1.X": picks the highest valid patch+gke.N patch in the 1.X version - "1.X.Y": picks the highest valid gke.N patch in the 1.X.Y version - "1.X.Y-gke.N": picks an explicit Kubernetes version - "-": picks the default Kubernetes version desiredMeshCertificates: Configuration for issuance of mTLS keys and certificates to Kubernetes pods. desiredMonitoringConfig: The desired monitoring configuration. desiredMonitoringService: The monitoring service the cluster should use to write metrics. Currently available options: * `monitoring.googleapis.com/kubernetes` - The Cloud Monitoring service with a Kubernetes-native resource model * `monitoring.googleapis.com` - The legacy Cloud Monitoring service (no longer available as of GKE 1.15). * `none` - No metrics will be exported from the cluster. If left as an empty string,`monitoring.googleapis.com/kubernetes` will be used for GKE 1.14+ or `monitoring.googleapis.com` for earlier versions. desiredNetworkPerformanceConfig: The desired network performance config. desiredNetworkTierConfig: The desired network tier configuration for the cluster. desiredNodeKubeletConfig: The desired node kubelet config for the cluster. desiredNodePoolAutoConfigKubeletConfig: The desired node kubelet config for all auto-provisioned node pools in autopilot clusters and node auto- provisioning enabled clusters. desiredNodePoolAutoConfigLinuxNodeConfig: The desired Linux node config for all auto-provisioned node pools in autopilot clusters and node auto- provisioning enabled clusters. Currently only `cgroup_mode` can be set here. desiredNodePoolAutoConfigNetworkTags: The desired network tags that apply to all auto-provisioned node pools in autopilot clusters and node auto- provisioning enabled clusters. desiredNodePoolAutoConfigResourceManagerTags: The desired resource manager tags that apply to all auto-provisioned node pools in autopilot clusters and node auto-provisioning enabled clusters. desiredNodePoolAutoscaling: Autoscaler configuration for the node pool specified in desired_node_pool_id. If there is only one pool in the cluster and desired_node_pool_id is not provided then the change applies to that single node pool. desiredNodePoolId: The node pool to be upgraded. This field is mandatory if "desired_node_version", "desired_image_family" or "desired_node_pool_autoscaling" is specified and there is more than one node pool on the cluster. desiredNodePoolLoggingConfig: The desired node pool logging configuration defaults for the cluster. desiredNodeVersion: The Kubernetes version to change the nodes to (typically an upgrade). Users may specify either explicit versions offered by Kubernetes Engine or version aliases, which have the following behavior: - "latest": picks the highest valid Kubernetes version - "1.X": picks the highest valid patch+gke.N patch in the 1.X version - "1.X.Y": picks the highest valid gke.N patch in the 1.X.Y version - "1.X.Y-gke.N": picks an explicit Kubernetes version - "-": picks the Kubernetes master version desiredNotificationConfig: The desired notification configuration. desiredParentProductConfig: The desired parent product config for the cluster. desiredPodAutoscaling: The desired config for pod autoscaling. desiredPrivateClusterConfig: The desired private cluster configuration. master_global_access_config is the only field that can be changed via this field. See also ClusterUpdate.desired_enable_private_endpoint for modifying other fields within PrivateClusterConfig. Deprecated: Use desired_control_plane_endpoints_config.ip_endpoints_config.global_access instead. desiredPrivateIpv6GoogleAccess: The desired state of IPv6 connectivity to Google Services. desiredPrivilegedAdmissionConfig: The desired privileged admission config for the cluster. desiredRbacBindingConfig: RBACBindingConfig allows user to restrict ClusterRoleBindings an RoleBindings that can be created. desiredReleaseChannel: The desired release channel configuration. desiredResourceUsageExportConfig: The desired configuration for exporting resource usage. desiredRollbackSafeUpgrade: The desired rollback safe upgrade configuration. desiredRuntimeVulnerabilityInsightConfig: Enable/Disable RVI features for the cluster. desiredScheduleUpgradeConfig: The desired schedule upgrade configuration for the cluster. desiredSecretManagerConfig: Enable/Disable Secret Manager Config. desiredSecretSyncConfig: Enable/Disable Secret Sync Config. desiredSecurityPostureConfig: Enable/Disable Security Posture API features for the cluster. desiredServiceExternalIpsConfig: ServiceExternalIPsConfig specifies the config for the use of Services with ExternalIPs field. desiredShieldedNodes: Configuration for Shielded Nodes. desiredStackType: The desired stack type of the cluster. If a stack type is provided and does not match the current stack type of the cluster, update will attempt to change the stack type to the new type. desiredUserManagedKeysConfig: The desired user managed keys config for the cluster. desiredVerticalPodAutoscaling: Cluster-level Vertical Pod Autoscaling configuration. desiredWorkloadIdentityConfig: Configuration for Workload Identity. enableK8sBetaApis: Kubernetes open source beta apis enabled on the cluster. Only beta apis etag: The current etag of the cluster. If an etag is provided and does not match the current etag of the cluster, update will be blocked and an ABORTED error will be returned. gkeAutoUpgradeConfig: Configuration for GKE auto upgrade. removedAdditionalPodRangesConfig: The additional pod ranges that are to be removed from the cluster. The pod ranges specified here must have been specified earlier in the 'additional_pod_ranges_config' argument. userManagedKeysConfig: The Custom keys configuration for the cluster. This field is deprecated. Use ClusterUpdate.desired_user_managed_keys_config instead. c,\rSrSrSrSrSrSrSrSr Sr g ) 4ClusterUpdate.DesiredDatapathProviderValueValuesEnumi5adThe desired datapath provider for the cluster. Values: DATAPATH_PROVIDER_UNSPECIFIED: Default value. LEGACY_DATAPATH: Use the IPTables implementation based on kube-proxy. ADVANCED_DATAPATH: Use the eBPF based GKE Dataplane V2 with additional features. See the [GKE Dataplane V2 documentation](https://cloud.google.com/kubernetes-engine/docs/how- to/dataplane-v2) for more. MIGRATE_TO_ADVANCED_DATAPATH: Cluster has some existing nodes but new nodes should use ADVANCED_DATAPATH. MIGRATE_TO_LEGACY_DATAPATH: Cluster has some existing nodes but new nodes should use LEGACY_DATAPATH. rr r rrrN rrrrrDATAPATH_PROVIDER_UNSPECIFIEDLEGACY_DATAPATHADVANCED_DATAPATHMIGRATE_TO_ADVANCED_DATAPATHMIGRATE_TO_LEGACY_DATAPATHr!rr"r#&DesiredDatapathProviderValueValuesEnumrX5s& %&!O#$ !"r"r_c$\rSrSrSrSrSrSrSrg)=ClusterUpdate.DesiredInTransitEncryptionConfigValueValuesEnumiJatSpecify the details of in-transit encryption. Values: IN_TRANSIT_ENCRYPTION_CONFIG_UNSPECIFIED: Unspecified, will be inferred as default - IN_TRANSIT_ENCRYPTION_UNSPECIFIED. IN_TRANSIT_ENCRYPTION_DISABLED: In-transit encryption is disabled. IN_TRANSIT_ENCRYPTION_INTER_NODE_TRANSPARENT: Data in-transit is encrypted using inter-node transparent encryption. rr r rN rrrrr(IN_TRANSIT_ENCRYPTION_CONFIG_UNSPECIFIEDIN_TRANSIT_ENCRYPTION_DISABLED,IN_TRANSIT_ENCRYPTION_INTER_NODE_TRANSPARENTr!rr"r#/DesiredInTransitEncryptionConfigValueValuesEnumraJs01,%&"340r"rfc(\rSrSrSrSrSrSrSrSr g) ;ClusterUpdate.DesiredPrivateIpv6GoogleAccessValueValuesEnumiXaThe desired state of IPv6 connectivity to Google Services. Values: PRIVATE_IPV6_GOOGLE_ACCESS_UNSPECIFIED: Default value. Same as DISABLED PRIVATE_IPV6_GOOGLE_ACCESS_DISABLED: No private access to or from Google Services PRIVATE_IPV6_GOOGLE_ACCESS_TO_GOOGLE: Enables private IPv6 access to Google Services from GKE PRIVATE_IPV6_GOOGLE_ACCESS_BIDIRECTIONAL: Enables private IPv6 access to and from Google Services rr r rrN rrrrr&PRIVATE_IPV6_GOOGLE_ACCESS_UNSPECIFIED#PRIVATE_IPV6_GOOGLE_ACCESS_DISABLED$PRIVATE_IPV6_GOOGLE_ACCESS_TO_GOOGLE(PRIVATE_IPV6_GOOGLE_ACCESS_BIDIRECTIONALr!rr"r#-DesiredPrivateIpv6GoogleAccessValueValuesEnumrhXs! ./**+'+,(/0,r"rnc(\rSrSrSrSrSrSrSrSr g) -ClusterUpdate.DesiredStackTypeValueValuesEnumiiawThe desired stack type of the cluster. If a stack type is provided and does not match the current stack type of the cluster, update will attempt to change the stack type to the new type. Values: STACK_TYPE_UNSPECIFIED: Default value, will be defaulted as IPV4 only IPV4: Cluster is IPV4 only IPV4_IPV6: Cluster can use both IPv4 and IPv6 IPV6: Cluster is IPv6 only. rr r rrN rrrrrSTACK_TYPE_UNSPECIFIEDIPV4 IPV4_IPV6IPV6r!rr"r#DesiredStackTypeValueValuesEnumrpis  DI Dr"rvrAr DesiredAdditionalIPRangesConfigr rGrrrrrrrOrrQrSrrUrrWrxrYryr[rzr]ContainerdConfigr_r}rar~rcrrerr rhrDefaultSnatStatusrr DNSConfigrrrrrDesiredEnterpriseConfigrrrGatewayAPIConfigr GcfsConfigrrrrrrrIntraNodeVisibilityConfigrrrILBSubsettingConfigrrTr.rrr& LustreConfigrrrrrrrrrrrrrrLrNetworkTierConfigrNodeKubeletConfigrrLinuxNodeConfigr NetworkTagsrResourceManagerTagsrNodePoolAutoscalingrr)NodePoolLoggingConfigrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrServiceExternalIPsConfigrrr7rrrrrrrrrrrrrrN)grrrrrrr0r_rfrnrvradditionalPodRangesConfigdesiredAdditionalIpRangesConfigdesiredAddonsConfig$desiredAnonymousAuthenticationConfig desiredAuthenticatorGroupsConfigdesiredAutoIpamConfigdesiredAutopilotr2desiredAutopilotInsecureKubeletReadonlyPortEnabled$desiredAutopilotWorkloadPolicyConfigdesiredBinaryAuthorizationdesiredClusterAutoscalingdesiredCompliancePostureConfigdesiredConcurrentOpsConfigdesiredContainerdConfigdesiredControlPlaneEgress"desiredControlPlaneEndpointsConfigdesiredCostManagementConfigdesiredDatabaseEncryptionr2desiredDatapathProvider desiredDefaultEnablePrivateNodesdesiredDefaultSnatStatus(desiredDisableL4LbFirewallReconciliationdesiredDnsConfig+desiredEnableCiliumClusterwideNetworkPolicydesiredEnableFqdnNetworkPolicydesiredEnableMultiNetworkingdesiredEnablePrivateEndpointdesiredEnterpriseConfig desiredFleetdesiredGatewayApiConfigdesiredGcfsConfigdesiredIdentityServiceConfigr desiredImagedesiredImageProjectdesiredImageType desiredInTransitEncryptionConfig desiredIntraNodeVisibilityConfigdesiredK8sBetaApisdesiredL4ilbSubsettingConfigdesiredLocationsdesiredLoggingConfigdesiredLoggingServicedesiredLustreConfigdesiredManagedConfig!desiredManagedOpentelemetryConfig%desiredMasterAuthorizedNetworksConfigdesiredMasterVersiondesiredMeshCertificatesdesiredMonitoringConfigdesiredMonitoringServicedesiredNetworkPerformanceConfigdesiredNetworkTierConfigdesiredNodeKubeletConfig&desiredNodePoolAutoConfigKubeletConfig(desiredNodePoolAutoConfigLinuxNodeConfig$desiredNodePoolAutoConfigNetworkTags,desiredNodePoolAutoConfigResourceManagerTagsdesiredNodePoolAutoscalingdesiredNodePoolIddesiredNodePoolLoggingConfigdesiredNodeVersiondesiredNotificationConfigdesiredParentProductConfigdesiredPodAutoscalingdesiredPrivateClusterConfigdesiredPrivateIpv6GoogleAccess desiredPrivilegedAdmissionConfigdesiredRbacBindingConfigdesiredReleaseChannel desiredResourceUsageExportConfigdesiredRollbackSafeUpgrade(desiredRuntimeVulnerabilityInsightConfigdesiredScheduleUpgradeConfigdesiredSecretManagerConfigdesiredSecretSyncConfigdesiredSecurityPostureConfigdesiredServiceExternalIpsConfigdesiredShieldedNodesdesiredStackTypedesiredUserManagedKeysConfigdesiredVerticalPodAutoscalingdesiredWorkloadIdentityConfigrrr removedAdditionalPodRangesConfigr9r!rr"r#rVrVVs\|#y~~#* 5  51inn1"  (445PRST$-$:$:;\^_$`!!..~qA)2)?)?@_ab)c&%.%;%;!*!7!78OQS!T&&r*,!--b1**2.%.%8%89jln%o"%.%;%; ))*UWXcgh"+"7"7":"+"7"7": ,,Q/ ,,Q/$$%KQY]^,'445PRST))*:AM.r"rc<\rSrSrSr\R "S5rSrg)"CompleteControlPlaneUpgradeRequesti zCompleteControlPlaneUpgradeRequest sets the name of target cluster to complete upgrade. Fields: version: API request version that initiates this operation. r rN) rrrrrrrversionr!rr"r#rr s  ! !! $'r"rc\rSrSrSrSrg)!CompleteConvertToAutopilotRequesti+zZCompleteConvertToAutopilotRequest completes the Autopilot conversion for a given cluster. rNrrrrrr!rr"r#rr+r"rc\rSrSrSr\R "S5r\R "S5r\R "S5r \R "S5r Sr g) CompleteIPRotationRequesti2a:CompleteIPRotationRequest moves the cluster master back into single-IP mode. Fields: clusterId: Deprecated. The name of the cluster. This field has been deprecated and replaced by the name field. name: The name (project, location, cluster name) of the cluster to complete IP rotation. Specified in the format `projects/*/locations/*/clusters/*`. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the name field. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. This field has been deprecated and replaced by the name field. r r rrrN rrrrrrr clusterIdr6r8r9r!rr"r#rr2sI&##A&)   q !$##A&)   q !$r"rc\rSrSrSrSrg)CompleteNodePoolUpgradeRequestiLzVCompleteNodePoolUpgradeRequest sets the name of target node pool to complete upgrade. rNrrr"r#rrLrr"rc\rSrSrSr"SS\R 5r\R"SSSS9r \R"SS 5r S r g ) ryiSa@CompliancePostureConfig defines the settings needed to enable/disable features for the Compliance Posture. Enums: ModeValueValuesEnum: Defines the enablement mode for Compliance Posture. Fields: complianceStandards: List of enabled compliance standards. mode: Defines the enablement mode for Compliance Posture. c$\rSrSrSrSrSrSrSrg)+CompliancePostureConfig.ModeValueValuesEnumi_zDefines the enablement mode for Compliance Posture. Values: MODE_UNSPECIFIED: Default value not specified. DISABLED: Disables Compliance Posture features on the cluster. ENABLED: Enables Compliance Posture features on the cluster. rr r rN) rrrrrrrrr!rr"r#rr _sHGr"rComplianceStandardr Tr.r rN) rrrrrrr0rrcomplianceStandardsr2rr!rr"r#ryrySsC  INN "../CQQUV   2A 6$r"ryc<\rSrSrSr\R "S5rSrg)r iozdDefines the details of a compliance standard. Fields: standard: Name of the compliance standard. r rN) rrrrrrrstandardr!rr"r#r r os  " "1 %(r"r c\rSrSrSr\R "S5r\R "S5r\R "S5r \R "S5r \R "S5r Sr g ) rziyaConfigures operations using concurrent ops. Fields: enableConcurrentCreateNodePool: Enables concurrent ops for supported CreateNodePool cases. Some fields may still use legacy ops. enableConcurrentDeleteNodePool: Enables concurrent ops for supported DeleteNodePool cases. Some fields may still use legacy ops. enableConcurrentResizeNodePool: Enables concurrent ops for ResizeNodePool operations. enableConcurrentRollbackNodePool: Enables concurrent ops for supported RollbackNodePool cases. Some fields may still use legacy ops. enableConcurrentUpdateNodePoolVersion: Enables concurrent ops for UpdateNodePool with only the version field. Some cluster features may still use legacy ops. r r rrrrN) rrrrrrrenableConcurrentCreateNodePoolenableConcurrentDeleteNodePoolenableConcurrentResizeNodePool enableConcurrentRollbackNodePool%enableConcurrentUpdateNodePoolVersionr!rr"r#rzrzys^ $-#9#9!#< #,#9#9!#< #,#9#9!#< %.%;%;A%>"*3*@*@*C'r"rzc\rSrSrSr"SS\R 5r\R"SS5r \R"S5r Sr g) r|iaConfidentialNodes is configuration for the confidential nodes feature, which makes nodes run on confidential VMs. Enums: ConfidentialInstanceTypeValueValuesEnum: Defines the type of technology used by the confidential node. Fields: confidentialInstanceType: Defines the type of technology used by the confidential node. enabled: Whether Confidential Nodes feature is enabled. c(\rSrSrSrSrSrSrSrSr g) 9ConfidentialNodes.ConfidentialInstanceTypeValueValuesEnumia7Defines the type of technology used by the confidential node. Values: CONFIDENTIAL_INSTANCE_TYPE_UNSPECIFIED: No type specified. Do not use this value. SEV: AMD Secure Encrypted Virtualization. SEV_SNP: AMD Secure Encrypted Virtualization - Secure Nested Paging. TDX: Intel Trust Domain eXtension. rr r rrN) rrrrr&CONFIDENTIAL_INSTANCE_TYPE_UNSPECIFIEDSEVSEV_SNPTDXr!rr"r#'ConfidentialInstanceTypeValueValuesEnumrs./* CG Cr"rr r rN) rrrrrrr0rr2confidentialInstanceTyperrr!rr"r#r|r|s>     '001Z\]^  " "1 %'r"r|c<\rSrSrSr\R "S5rSrg)rJizConfiguration options for the Config Connector add-on. Fields: enabled: Whether Cloud Connector is enabled for this cluster. r rNrrr"r#rJrJrr"rJc<\rSrSrSr\R "S5rSrg)ConsumptionMeteringConfigizParameters for controlling consumption metering. Fields: enabled: Whether to enable consumption metering for this cluster. If enabled, a second BigQuery table will be created to hold resource consumption records. r rNrrr"r#r r rr"r c\rSrSrSr\R "S5r\R"S\RRS9r \R "S5r \R "SSS 9r S rg ) 7ContainerProjectsAggregatedUsableSubnetworksListRequestiaA ContainerProjectsAggregatedUsableSubnetworksListRequest object. Fields: filter: Filtering currently only supports equality on the networkProjectId and must be in the form: "networkProjectId=[PROJECTID]", where `networkProjectId` is the project which owns the listed subnetworks. This defaults to the parent project ID. pageSize: The max number of results per page that should be returned. If the number of available results is larger than `page_size`, a `next_page_token` is returned which can be used to get the next page of results in subsequent requests. Acceptable values are 0 to 500, inclusive. (Default: 500) pageToken: Specifies a page token to use. Set this to the nextPageToken returned by previous list requests to get the next page of results. parent: The parent project where subnetworks are usable. Specified in the format `projects/*`. r r rrrTrequiredrN)rrrrrrrfilterrrrpageSize pageTokenparentr!rr"r#r"r"sY$   #&  # #Ay/@/@/F/F G(##A&)  T 2&r"r"c:\rSrSrSr\R "SSS9rSrg)DContainerProjectsLocationsClustersCheckAutopilotCompatibilityRequestizA ContainerProjectsLocationsClustersCheckAutopilotCompatibilityRequest object. Fields: name: The name (project, location, cluster) of the cluster to retrieve. Specified in the format `projects/*/locations/*/clusters/*`. r Tr#rN) rrrrrrrr6r!rr"r#r*r*s   q4 0$r"r*c`\rSrSrSr\R "SS5r\R"SSS9r Sr g ) DContainerProjectsLocationsClustersCompleteControlPlaneUpgradeRequestiaeA ContainerProjectsLocationsClustersCompleteControlPlaneUpgradeRequest object. Fields: completeControlPlaneUpgradeRequest: A CompleteControlPlaneUpgradeRequest resource to be passed as the request body. name: The name (project, location, cluster) of the cluster to complete upgrade. Specified in the format `projects/*/locations/*/clusters/*`. rr r Tr#rN rrrrrrr"completeControlPlaneUpgradeRequestrr6r!rr"r#r,r,0(1'='=>bde'f$   q4 0$r"r,c`\rSrSrSr\R "SS5r\R"SSS9r Sr g ) CContainerProjectsLocationsClustersCompleteConvertToAutopilotRequestiaYA ContainerProjectsLocationsClustersCompleteConvertToAutopilotRequest object. Fields: completeConvertToAutopilotRequest: A CompleteConvertToAutopilotRequest resource to be passed as the request body. name: The name (project, location, cluster) of the cluster to convert. Specified in the format `projects/*/locations/*/clusters/*`. rr r Tr#rN) rrrrrrr!completeConvertToAutopilotRequestrr6r!rr"r#r1r1s0'0&<&<=`bc&d#   q4 0$r"r1c\rSrSrSr\R "S5r\R "SSS9r\R "S5r \R "S5r S r g ) /ContainerProjectsLocationsClustersDeleteRequesti aA ContainerProjectsLocationsClustersDeleteRequest object. Fields: clusterId: Deprecated. The name of the cluster to delete. This field has been deprecated and replaced by the name field. name: The name (project, location, cluster) of the cluster to delete. Specified in the format `projects/*/locations/*/clusters/*`. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the name field. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. This field has been deprecated and replaced by the name field. r r Tr#rrrNrrr"r#r4r4 K"##A&)   q4 0$##A&)   q !$r"r4c^\rSrSrSr\R "SSS9r\R "S5rSr g) @ContainerProjectsLocationsClustersFetchClusterUpgradeInfoRequesti#aIA ContainerProjectsLocationsClustersFetchClusterUpgradeInfoRequest object. Fields: name: Required. The name (project, location, cluster) of the cluster to get. Specified in the format `projects/*/locations/*/clusters/*` or `projects/*/zones/*/clusters/*`. version: API request version that initiates this operation. r Tr#r rN rrrrrrrr6rr!rr"r#r7r7#s+   q4 0$  ! !! $'r"r7c:\rSrSrSr\R "SSS9rSrg)0ContainerProjectsLocationsClustersGetJwksRequesti2zA ContainerProjectsLocationsClustersGetJwksRequest object. Fields: parent: The cluster (project, location, cluster name) to get keys for. Specified in the format `projects/*/locations/*/clusters/*`. r Tr#rN rrrrrrrr(r!rr"r#r:r:2s  T 2&r"r:c\rSrSrSr\R "S5r\R "SSS9r\R "S5r \R "S5r S r g ) ,ContainerProjectsLocationsClustersGetRequesti=aA ContainerProjectsLocationsClustersGetRequest object. Fields: clusterId: Deprecated. The name of the cluster to retrieve. This field has been deprecated and replaced by the name field. name: The name (project, location, cluster) of the cluster to retrieve. Specified in the format `projects/*/locations/*/clusters/*`. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the name field. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. This field has been deprecated and replaced by the name field. r r Tr#rrrNrrr"r#r=r==r5r"r=c\rSrSrSr\R "SSS9r\R "S5r\R "S5r Sr g ) -ContainerProjectsLocationsClustersListRequestiUaA ContainerProjectsLocationsClustersListRequest object. Fields: parent: The parent (project and location) where the clusters will be listed. Specified in the format `projects/*/locations/*`. Location "-" matches all zones and all regions. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the parent field. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides, or "-" for all zones. This field has been deprecated and replaced by the parent field. r Tr#r rrN rrrrrrrr(r8r9r!rr"r#r?r?U;  T 2&##A&)   q !$r"r?c`\rSrSrSr\R "SS5r\R"SSS9r Sr g ) AContainerProjectsLocationsClustersNodePoolsCompleteUpgradeRequestikazA ContainerProjectsLocationsClustersNodePoolsCompleteUpgradeRequest object. Fields: completeNodePoolUpgradeRequest: A CompleteNodePoolUpgradeRequest resource to be passed as the request body. name: The name (project, location, cluster, node pool id) of the node pool to complete upgrade. Specified in the format `projects/*/locations/*/clusters/*/nodePools/*`. rr r Tr#rN) rrrrrrrcompleteNodePoolUpgradeRequestrr6r!rr"r#rCrCks0 $-#9#9:Z\]#^   q4 0$r"rCc\rSrSrSr\R "S5r\R "SSS9r\R "S5r \R "S5r \R "S 5r S r g ) 8ContainerProjectsLocationsClustersNodePoolsDeleteRequesti{aA ContainerProjectsLocationsClustersNodePoolsDeleteRequest object. Fields: clusterId: Deprecated. The name of the cluster. This field has been deprecated and replaced by the name field. name: The name (project, location, cluster, node pool id) of the node pool to delete. Specified in the format `projects/*/locations/*/clusters/*/nodePools/*`. nodePoolId: Deprecated. The name of the node pool to delete. This field has been deprecated and replaced by the name field. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the name field. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. This field has been deprecated and replaced by the name field. r r Tr#rrrrN rrrrrrrrr6 nodePoolIdr8r9r!rr"r#rFrF{[(##A&)   q4 0$$$Q'*##A&)   q !$r"rFc^\rSrSrSr\R "SSS9r\R "S5rSr g) JContainerProjectsLocationsClustersNodePoolsFetchNodePoolUpgradeInfoRequestiazA ContainerProjectsLocationsClustersNodePoolsFetchNodePoolUpgradeInfoRequest object. Fields: name: Required. The name (project, location, cluster, nodepool) of the nodepool to get. Specified in the format `projects/*/locations/*/clusters/*/nodePools/*` or `projects/*/zones/*/clusters/*/nodePools/*`. version: API request version that initiates this operation. r Tr#r rNr8rr"r#rKrKs+    q4 0$  ! !! $'r"rKc\rSrSrSr\R "S5r\R "SSS9r\R "S5r \R "S5r \R "S 5r S r g ) 5ContainerProjectsLocationsClustersNodePoolsGetRequestiaA ContainerProjectsLocationsClustersNodePoolsGetRequest object. Fields: clusterId: Deprecated. The name of the cluster. This field has been deprecated and replaced by the name field. name: The name (project, location, cluster, node pool id) of the node pool to get. Specified in the format `projects/*/locations/*/clusters/*/nodePools/*`. nodePoolId: Deprecated. The name of the node pool. This field has been deprecated and replaced by the name field. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the name field. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. This field has been deprecated and replaced by the name field. r r Tr#rrrrNrGrr"r#rMrMrIr"rMc\rSrSrSr\R "S5r\R "SSS9r\R "S5r \R "S5r S r g ) 6ContainerProjectsLocationsClustersNodePoolsListRequestia5A ContainerProjectsLocationsClustersNodePoolsListRequest object. Fields: clusterId: Deprecated. The name of the cluster. This field has been deprecated and replaced by the parent field. parent: The parent (project, location, cluster name) where the node pools will be listed. Specified in the format `projects/*/locations/*/clusters/*`. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the parent field. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. This field has been deprecated and replaced by the parent field. r r Tr#rrrN rrrrrrrrr(r8r9r!rr"r#rOrOsK$##A&)  T 2&##A&)   q !$r"rOc:\rSrSrSr\R "SSS9rSrg)HContainerProjectsLocationsClustersWellKnownGetOpenidConfigurationRequestizA ContainerProjectsLocationsClustersWellKnownGetOpenidConfigurationRequest object. Fields: parent: The cluster (project, location, cluster name) to get the discovery document for. Specified in the format `projects/*/locations/*/clusters/*`. r Tr#rNr;rr"r#rRrRs  T 2&r"rRc\rSrSrSr\R "SSS9r\R "S5r\R "S5r Sr g ) 0ContainerProjectsLocationsGetServerConfigRequestiaA ContainerProjectsLocationsGetServerConfigRequest object. Fields: name: The name (project and location) of the server config to get, specified in the format `projects/*/locations/*`. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the name field. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) to return operations for. This field has been deprecated and replaced by the name field. r Tr#r rrN rrrrrrrr6r8r9r!rr"r#rTrTs;    q4 0$##A&)   q !$r"rTc\rSrSrSr\R "SSS9r\R "S5r\R "S5r \R "S5r S r g ) .ContainerProjectsLocationsOperationsGetRequesti a+A ContainerProjectsLocationsOperationsGetRequest object. Fields: name: The name (project, location, operation id) of the operation to get. Specified in the format `projects/*/locations/*/operations/*`. operationId: Deprecated. The server-assigned `name` of the operation. This field has been deprecated and replaced by the name field. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the name field. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. This field has been deprecated and replaced by the name field. r Tr#r rrrNr5rr"r#rWrW sK"   q4 0$%%a(+##A&)   q !$r"rWc\rSrSrSr\R "SSS9r\R "S5r\R "S5r Sr g ) /ContainerProjectsLocationsOperationsListRequesti aA ContainerProjectsLocationsOperationsListRequest object. Fields: parent: The parent (project and location) where the operations will be listed. Specified in the format `projects/*/locations/*`. Location "-" matches all zones and all regions. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the parent field. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) to return operations for, or `-` for all zones. This field has been deprecated and replaced by the parent field. r Tr#r rrNr@rr"r#rYrY rAr"rYc`\rSrSrSr\R "SS5r\R"SSS9r Sr g ) @ContainerProjectsZonesClustersCompleteControlPlaneUpgradeRequesti. aaA ContainerProjectsZonesClustersCompleteControlPlaneUpgradeRequest object. Fields: completeControlPlaneUpgradeRequest: A CompleteControlPlaneUpgradeRequest resource to be passed as the request body. name: The name (project, location, cluster) of the cluster to complete upgrade. Specified in the format `projects/*/locations/*/clusters/*`. rr r Tr#rNr-rr"r#r[r[. r/r"r[c\rSrSrSr\R "SSS9r\R "S5r\R "SSS9r \R "SSS9r S r g ) +ContainerProjectsZonesClustersDeleteRequesti= aA ContainerProjectsZonesClustersDeleteRequest object. Fields: clusterId: Deprecated. The name of the cluster to delete. This field has been deprecated and replaced by the name field. name: The name (project, location, cluster) of the cluster to delete. Specified in the format `projects/*/locations/*/clusters/*`. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the name field. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. This field has been deprecated and replaced by the name field. r Tr#r rrrNrrr"r#r]r]= O"##A5)   q !$##A5)   q4 0$r"r]c^\rSrSrSr\R "SSS9r\R "S5rSr g) \rSrSrSr\R "SS5rSrg)CustomNodeIniti zSupport for running custom init code while bootstrapping nodes. Fields: initScript: Optional. The init script to be executed on the node. InitScriptr rN) rrrrrrr initScriptr!rr"r#rr s %%lA6*r"rc\rSrSrSr"SS\R 5r\R"S5r \R"S5r \R"SS5r Sr g ) DNSAliasi aDNSAlias describes an alternate hostname for a cluster. Enums: TypeValueValuesEnum: The type of the alias. Fields: hostname: The hostname for the alias. permissionResource: If set, overrides the resource to check for IAM permissions against. Intended only for use by Multi-Tenant clusters. permission_resource should be the name of a cluster resource: projects/my-project/locations/un-moon1/clusters/tenant-123abc. type: The type of the alias. c$\rSrSrSrSrSrSrSrg)DNSAlias.TypeValueValuesEnumi zThe type of the alias. Values: DNS_ALIAS_TYPE_UNSPECIFIED: Default value. STANDARD: No changes from the default behavior. TENANT: The view of the cluster should be restricted to a tenant, with the tenant derived from the hostname. rr r rN) rrrrrDNS_ALIAS_TYPE_UNSPECIFIEDrTENANTr!rr"r#rr s"#H Fr"rr r rrN)rrrrrrr0rrhostnamepermissionResourcer2rr!rr"r#rr sM  INN  " "1 %( ,,Q/   2A 6$r"rc$\rSrSrSr"SS\R 5r"SS\R 5r\R"S5r \R"SS5r \R"S 5r \R"SS 5r\R"S 5rS rg )rzi auDNSConfig contains the desired set of options for configuring clusterDNS. Enums: ClusterDnsValueValuesEnum: cluster_dns indicates which in-cluster DNS provider should be used. ClusterDnsScopeValueValuesEnum: cluster_dns_scope indicates the scope of access to cluster DNS records. Fields: additiveVpcScopeDnsDomain: Optional. The domain used in Additive VPC scope. clusterDns: cluster_dns indicates which in-cluster DNS provider should be used. clusterDnsDomain: cluster_dns_domain is the suffix used for all cluster service records. clusterDnsScope: cluster_dns_scope indicates the scope of access to cluster DNS records. enableAdditiveVpcScope: Optional. Deprecated: additive_vpc_scope_dns_domain is used to check for enablement instead. Indicates the enablement of Additive VPC scope. Which can be enabled alongside Cluster scope. c$\rSrSrSrSrSrSrSrg)(DNSConfig.ClusterDnsScopeValueValuesEnumi acluster_dns_scope indicates the scope of access to cluster DNS records. Values: DNS_SCOPE_UNSPECIFIED: Default value, will be inferred as cluster scope. CLUSTER_SCOPE: DNS records are accessible from within the cluster. VPC_SCOPE: DNS records are accessible from within the VPC. rr r rN) rrrrrDNS_SCOPE_UNSPECIFIED CLUSTER_SCOPE VPC_SCOPEr!rr"r#ClusterDnsScopeValueValuesEnumr sMIr"rc(\rSrSrSrSrSrSrSrSr g) #DNSConfig.ClusterDnsValueValuesEnumi a cluster_dns indicates which in-cluster DNS provider should be used. Values: PROVIDER_UNSPECIFIED: Default value PLATFORM_DEFAULT: Use GKE default DNS provider(kube-dns) for DNS resolution. CLOUD_DNS: Use CloudDNS for DNS resolution. KUBE_DNS: Use KubeDNS for DNS resolution. rr r rrN) rrrrrPROVIDER_UNSPECIFIEDPLATFORM_DEFAULT CLOUD_DNSKUBE_DNSr!rr"r#ClusterDnsValueValuesEnumr sIHr"rr r rrrrN)rrrrrrr0rrradditiveVpcScopeDnsDomainr2 clusterDnsclusterDnsDomainclusterDnsScoperenableAdditiveVpcScoper!rr"r#rzrz s0 y~~  ).. (33A6""#>B***1-''(H!L/$11!4r"rzc\rSrSrSr\R "S5r\R"SSSS9r \R "S5r \R "S 5r \R"S 5r S rg ) ri# aDescribes the configuration of a DNS endpoint. Fields: allowExternalTraffic: Controls whether user traffic is allowed over this endpoint. Note that Google-managed services may still use the endpoint even if this is false. dnsAliases: Alternate hostnames for the cluster. The default hostname is not included in this list. enableK8sCertsViaDns: Controls whether the k8s certs auth is allowed via DNS. enableK8sTokensViaDns: Controls whether the k8s token auth is allowed via DNS. endpoint: Output only. The cluster's DNS endpoint configuration. A DNS format address. This is accessible from the public internet. Ex: uid.us- central1.gke.goog. Always present, but the behavior may change according to the value of DNSEndpointConfig.allow_external_traffic. r rr Tr.rrrrN)rrrrrrrallowExternalTrafficr dnsAliasesenableK8sCertsViaDnsenableK8sTokensViaDnsrrr!rr"r#rr# s`$#//2%%j!dC*"//2#003  " "1 %(r"rc`\rSrSrSr\R "S5r\R "S5rSr g)DailyMaintenanceWindowi= aTime window specified for daily maintenance operations. Fields: duration: Output only. Duration of the time window, automatically chosen to be smallest possible in the given scenario. Duration will be in [RFC3339](https://www.ietf.org/rfc/rfc3339.txt) format "PTnHnMnS". startTime: Time within the maintenance window to start the maintenance operations. Time format should be in [RFC3339](https://www.ietf.org/rfc/rfc3339.txt) format "HH:MM", where HH : [00-23] and MM : [00-59] GMT. r r rN) rrrrrrrduration startTimer!rr"r#rr= s)  " "1 %(##A&)r"rc"\rSrSrSr"SS\R 5r"SS\R 5r\R"SS5r \R"SS S 9r \R"S 5r \R"S S S S 9r\R"SS5rSrg)riN aConfiguration of etcd encryption. Enums: CurrentStateValueValuesEnum: Output only. The current state of etcd encryption. StateValueValuesEnum: The desired state of etcd encryption. Fields: currentState: Output only. The current state of etcd encryption. decryptionKeys: Output only. Keys in use by the cluster for decrypting existing objects, in addition to the key in `key_name`. Each item is a CloudKMS key resource. keyName: Name of CloudKMS key to use for the encryption of secrets in etcd. Ex. projects/my-project/locations/global/keyRings/my- ring/cryptoKeys/my-key lastOperationErrors: Output only. Records errors seen during DatabaseEncryption update operations. state: The desired state of etcd encryption. c4\rSrSrSrSrSrSrSrSr Sr S r S r g ) .DatabaseEncryption.CurrentStateValueValuesEnumic aOutput only. The current state of etcd encryption. Values: CURRENT_STATE_UNSPECIFIED: Should never be set CURRENT_STATE_ENCRYPTED: Secrets in etcd are encrypted. CURRENT_STATE_DECRYPTED: Secrets in etcd are stored in plain text (at etcd level) - this is unrelated to Compute Engine level full disk encryption. CURRENT_STATE_ENCRYPTION_PENDING: Encryption (or re-encryption with a different CloudKMS key) of Secrets is in progress. CURRENT_STATE_ENCRYPTION_ERROR: Encryption (or re-encryption with a different CloudKMS key) of Secrets in etcd encountered an error. CURRENT_STATE_DECRYPTION_PENDING: De-crypting Secrets to plain text in etcd is in progress. CURRENT_STATE_DECRYPTION_ERROR: De-crypting Secrets to plain text in etcd encountered an error. rr r rrrrOrN) rrrrrCURRENT_STATE_UNSPECIFIEDCURRENT_STATE_ENCRYPTEDCURRENT_STATE_DECRYPTED CURRENT_STATE_ENCRYPTION_PENDINGCURRENT_STATE_ENCRYPTION_ERROR CURRENT_STATE_DECRYPTION_PENDINGCURRENT_STATE_DECRYPTION_ERRORr!rr"r#CurrentStateValueValuesEnumrc s3"!"'($%&"'($%&"r"rc$\rSrSrSrSrSrSrSrg)'DatabaseEncryption.StateValueValuesEnumi} aThe desired state of etcd encryption. Values: UNKNOWN: Should never be set ENCRYPTED: Secrets in etcd are encrypted. DECRYPTED: Secrets in etcd are stored in plain text (at etcd level) - this is unrelated to Compute Engine level full disk encryption. rr r rN) rrrrrr ENCRYPTED DECRYPTEDr!rr"r#rr} sGIIr"rr r Tr.rOperationErrorrrrN)rrrrrrr0rrr2 currentStaterdecryptionKeyskeyNamerlastOperationErrorsrr!rr"r#rrN s('INN'4 Y^^ $$%BAF,((T:.  ! !! $'!../?TR   4a 8%r"rc<\rSrSrSr\R "S5rSrg)DedicatedLocalSsdProfilei zProvisions a new, separate local NVMe SSD exclusively for swap. Fields: diskCount: The number of physical local NVMe SSD disks to attach. r rN) rrrrrrr diskCountr!rr"r#rr s $$Q')r"rc<\rSrSrSr\R "S5rSrg)rCi zzDefaultComputeClassConfig defines default compute class configuration. Fields: enabled: Enables default compute class. r rNrrr"r#rCrC rr"rCc<\rSrSrSr\R "S5rSrg)ryi zDefaultSnatStatus contains the desired state of whether default sNAT should be disabled on the cluster. Fields: disabled: Disables cluster default sNAT rules. r rN rrrrrrrrXr!rr"r#ryry  # #A &(r"ryc<\rSrSrSr\R "SSSS9rSrg) rwi aDesiredAdditionalIPRangesConfig is a wrapper used for cluster update operation and contains multiple AdditionalIPRangesConfigs. Fields: additionalIpRangesConfigs: List of additional IP ranges configs where each AdditionalIPRangesConfig corresponds to one subnetwork's IP ranges r%r Tr.rN) rrrrrrradditionalIpRangesConfigsr!rr"r#rwrw s!(445OQR]abr"rwch\rSrSrSr"SS\R 5r\R"SS5r Sr g)r{i aNDesiredEnterpriseConfig is a wrapper used for updating enterprise_config. Deprecated: GKE Enterprise features are now available without an Enterprise tier. Enums: DesiredTierValueValuesEnum: desired_tier specifies the desired tier of the cluster. Fields: desiredTier: desired_tier specifies the desired tier of the cluster. c$\rSrSrSrSrSrSrSrg)2DesiredEnterpriseConfig.DesiredTierValueValuesEnumi desired_tier specifies the desired tier of the cluster. Values: CLUSTER_TIER_UNSPECIFIED: CLUSTER_TIER_UNSPECIFIED is when cluster_tier is not set. STANDARD: STANDARD indicates a standard GKE cluster. ENTERPRISE: ENTERPRISE indicates a GKE Enterprise cluster. rr r rN rrrrrCLUSTER_TIER_UNSPECIFIEDr ENTERPRISEr!rr"r#DesiredTierValueValuesEnumr  !HJr"rr rN) rrrrrrr0rr2 desiredTierr!rr"r#r{r{ s,  9>> ##$@!D+r"r{c<\rSrSrSr\R "S5rSrg)rKi zqConfiguration for NodeLocal DNSCache Fields: enabled: Whether NodeLocal DNSCache is enabled for this cluster. r rNrrr"r#rKrK rr"rKc\rSrSrSrSrg)Emptyi aA generic empty message that you can re-use to avoid defining duplicated empty messages in your APIs. A typical example is to use it as the request or the response type of an API method. For instance: service Foo { rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty); } rNrrr"r#rr sr"rc<\rSrSrSr\R "S5rSrg)EncryptionConfigi zDefines encryption settings for the swap space. Fields: disabled: Optional. If true, swap space will not be encrypted. Defaults to false (encrypted). r rNrrr"r#rr rr"rc\rSrSrSr"SS\R 5r"SS\R 5r\R"SS5r \R"SS5r S r g ) ri aEnterpriseConfig is the cluster enterprise configuration. Deprecated: GKE Enterprise features are now available without an Enterprise tier. Enums: ClusterTierValueValuesEnum: Output only. cluster_tier indicates the effective tier of the cluster. DesiredTierValueValuesEnum: desired_tier specifies the desired tier of the cluster. Fields: clusterTier: Output only. cluster_tier indicates the effective tier of the cluster. desiredTier: desired_tier specifies the desired tier of the cluster. c$\rSrSrSrSrSrSrSrg)+EnterpriseConfig.ClusterTierValueValuesEnumi aOutput only. cluster_tier indicates the effective tier of the cluster. Values: CLUSTER_TIER_UNSPECIFIED: CLUSTER_TIER_UNSPECIFIED is when cluster_tier is not set. STANDARD: STANDARD indicates a standard GKE cluster. ENTERPRISE: ENTERPRISE indicates a GKE Enterprise cluster. rr r rNrrr"r#ClusterTierValueValuesEnumr rr"rc$\rSrSrSrSrSrSrSrg)+EnterpriseConfig.DesiredTierValueValuesEnumi rrr r rNrrr"r#rr rr"rr r rN) rrrrrrr0rrr2 clusterTierrr!rr"r#rr sO  9>>  9>> ##$@!D+##$@!D+r"rc\rSrSrSr\R "S5r\R "S\RRS9r Sr g)EphemeralLocalSsdProfilei% zSwap on the local SSD shared with pod ephemeral storage. Fields: swapSizeGib: Specifies the size of the swap space in gibibytes (GiB). swapSizePercent: Specifies the size of the swap space as a percentage of the ephemeral local SSD capacity. r r rrNr/rr"r#rr% r2r"rc\rSrSrSr\R "S\RRS9r \R "S\RRS9r Sr g)EphemeralStorageLocalSsdConfigi2 aEphemeralStorageLocalSsdConfig contains configuration for the node ephemeral storage using Local SSDs. Fields: dataCacheCount: Number of local SSDs to use for GKE Data Cache. localSsdCount: Number of local SSDs to use to back ephemeral storage. Uses NVMe interfaces. A zero (or unset) value has different meanings depending on machine type being used: 1. For pre-Gen3 machines, which support flexible numbers of local ssds, zero (or unset) means to disable using local SSDs as ephemeral storage. The limit for this value is dependent upon the maximum number of disk available on a machine per zone. See: https://cloud.google.com/compute/docs/disks/local-ssd for more information. 2. For Gen3 machines which dictate a specific number of local ssds, zero (or unset) means to use the default number of local ssds that goes with that machine type. For example, for a c3-standard-8-lssd machine, 2 local ssds would be provisioned. For c3-standard-8 (which doesn't support local ssds), 0 will be provisioned. See https://cloud.google.com/compute/docs/disks/local- ssd#choose_number_local_ssds for more info. r rr rN) rrrrrrrrrdataCacheCount localSsdCountr!rr"r#rr2 sE*))!Y5F5F5L5LM.((I4E4E4K4KL-r"rc`\rSrSrSr\R "S5r\R "S5rSr g) EtcHostsEntryiL zAdditional entries to be added to /etc/hosts. Fields: host: The hostname of the host. ip: The IPv4 or IPv6 address of the host. r r rN) rrrrrrrhostipr!rr"r#rrL s)   q !$Q"r"rc\rSrSrSr\R "S5r\R "S5r\R "S5r \R "S5r \R "S5r \R "S5r S r g ) EvictionGracePeriodiX aEviction grace periods are grace periods for each eviction signal. Fields: imagefsAvailable: Optional. Grace period for eviction due to imagefs available signal. Sample format: "10s". Must be >= 0. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure- eviction/#eviction-signals imagefsInodesFree: Optional. Grace period for eviction due to imagefs inodes free signal. Sample format: "10s". Must be >= 0. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure- eviction/#eviction-signals memoryAvailable: Optional. Grace period for eviction due to memory available signal. Sample format: "10s". Must be >= 0. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure- eviction/#eviction-signals nodefsAvailable: Optional. Grace period for eviction due to nodefs available signal. Sample format: "10s". Must be >= 0. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure- eviction/#eviction-signals nodefsInodesFree: Optional. Grace period for eviction due to nodefs inodes free signal. Sample format: "10s". Must be >= 0. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure- eviction/#eviction-signals pidAvailable: Optional. Grace period for eviction due to pid available signal. Sample format: "10s". Must be >= 0. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure- eviction/#eviction-signals r r rrrrOrNrrrrrrrimagefsAvailableimagefsInodesFreememoryAvailablenodefsAvailablenodefsInodesFree pidAvailabler!rr"r#rrX sl:**1-++A.))!,/))!,/**1-&&q),r"rc\rSrSrSr\R "S5r\R "S5r\R "S5r \R "S5r \R "S5r \R "S5r S r g ) EvictionMinimumReclaimi~ aEviction minimum reclaims are the resource amounts of minimum reclaims for each eviction signal. Fields: imagefsAvailable: Optional. Minimum reclaim for eviction due to imagefs available signal. Only take percentage value for now. Sample format: "10%". Must be <=10%. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure- eviction/#eviction-signals imagefsInodesFree: Optional. Minimum reclaim for eviction due to imagefs inodes free signal. Only take percentage value for now. Sample format: "10%". Must be <=10%. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure- eviction/#eviction-signals memoryAvailable: Optional. Minimum reclaim for eviction due to memory available signal. Only take percentage value for now. Sample format: "10%". Must be <=10%. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure- eviction/#eviction-signals nodefsAvailable: Optional. Minimum reclaim for eviction due to nodefs available signal. Only take percentage value for now. Sample format: "10%". Must be <=10%. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure- eviction/#eviction-signals nodefsInodesFree: Optional. Minimum reclaim for eviction due to nodefs inodes free signal. Only take percentage value for now. Sample format: "10%". Must be <=10%. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure- eviction/#eviction-signals pidAvailable: Optional. Minimum reclaim for eviction due to pid available signal. Only take percentage value for now. Sample format: "10%". Must be <=10%. See https://kubernetes.io/docs/concepts/scheduling- eviction/node-pressure-eviction/#eviction-signals r r rrrrOrNrrr"r#rr~ sm!F**1-++A.))!,/))!,/**1-&&q),r"rc\rSrSrSr\R "S5r\R "S5r\R "S5r \R "S5r \R "S5r \R "S5r S r g ) EvictionSignalsi a4 Eviction signals are the current state of a particular resource at a specific point in time. The kubelet uses eviction signals to make eviction decisions by comparing the signals to eviction thresholds, which are the minimum amount of the resource that should be available on the node. Fields: imagefsAvailable: Optional. Amount of storage available on filesystem that container runtime uses for storing images layers. If the container filesystem and image filesystem are not separate, then imagefs can store both image layers and writeable layers. Defines the amount of "imagefs.available" signal in kubelet. Default is unset, if not specified in the kubelet config. It takses percentage value for now. Sample format: "30%". Must be >= 15% and <= 50%. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure- eviction/#eviction-signals imagefsInodesFree: Optional. Amount of inodes available on filesystem that container runtime uses for storing images layers. Defines the amount of "imagefs.inodesFree" signal in kubelet. Default is unset, if not specified in the kubelet config. Linux only. It takses percentage value for now. Sample format: "30%". Must be >= 5% and <= 50%. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure- eviction/#eviction-signals memoryAvailable: Optional. Memory available (i.e. capacity - workingSet), in bytes. Defines the amount of "memory.available" signal in kubelet. Default is unset, if not specified in the kubelet config. Format: positive number + unit, e.g. 100Ki, 10Mi, 5Gi. Valid units are Ki, Mi, Gi. Must be >= 100Mi and <= 50% of the node's memory. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure- eviction/#eviction-signals nodefsAvailable: Optional. Amount of storage available on filesystem that kubelet uses for volumes, daemon logs, etc. Defines the amount of "nodefs.available" signal in kubelet. Default is unset, if not specified in the kubelet config. It takses percentage value for now. Sample format: "30%". Must be >= 10% and <= 50%. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure- eviction/#eviction-signals nodefsInodesFree: Optional. Amount of inodes available on filesystem that kubelet uses for volumes, daemon logs, etc. Defines the amount of "nodefs.inodesFree" signal in kubelet. Default is unset, if not specified in the kubelet config. Linux only. It takses percentage value for now. Sample format: "30%". Must be >= 5% and <= 50%. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure- eviction/#eviction-signals pidAvailable: Optional. Amount of PID available for pod allocation. Defines the amount of "pid.available" signal in kubelet. Default is unset, if not specified in the kubelet config. It takses percentage value for now. Sample format: "30%". Must be >= 10% and <= 50%. See https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure- eviction/#eviction-signals r r rrrrOrNrrr"r#rr sm1f**1-++A.))!,/))!,/**1-&&q),r"rc<\rSrSrSr\R "S5rSrg) FastSocketi zuConfiguration of Fast Socket feature. Fields: enabled: Whether Fast Socket features are enabled in the node pool. r rNrrr"r#rr rr"rcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) Filteri ahAllows filtering to one or more specific event types. If event types are present, those and only those event types will be transmitted to the cluster. Other types will be skipped. If no filter is specified, or no event types are present, all event types will be sent Enums: EventTypeValueListEntryValuesEnum: Fields: eventType: Event types to allowlist. c,\rSrSrSrSrSrSrSrSr Sr g ) (Filter.EventTypeValueListEntryValuesEnumi aYEventTypeValueListEntryValuesEnum enum type. Values: EVENT_TYPE_UNSPECIFIED: Not set, will be ignored. UPGRADE_AVAILABLE_EVENT: Corresponds with UpgradeAvailableEvent. UPGRADE_EVENT: Corresponds with UpgradeEvent. SECURITY_BULLETIN_EVENT: Corresponds with SecurityBulletinEvent. UPGRADE_INFO_EVENT: Corresponds with UpgradeInfoEvent. rr r rrrN) rrrrrEVENT_TYPE_UNSPECIFIEDUPGRADE_AVAILABLE_EVENT UPGRADE_EVENTSECURITY_BULLETIN_EVENTUPGRADE_INFO_EVENTr!rr"r#!EventTypeValueListEntryValuesEnumr s&Mr"rr Tr.rN) rrrrrrr0rr2 eventTyper!rr"r#rr s/ ).. !!"EqSWX)r"rc\rSrSrSr"SS\R 5r\R"S5r \R"SS5r \R"S5r \R"S5rS rg ) ri aFleet is the fleet configuration for the cluster. Enums: MembershipTypeValueValuesEnum: The type of the cluster's fleet membership. Fields: membership: Output only. The full resource name of the registered fleet membership of the cluster, in the format `//gkehub.googleapis.com/projects/*/locations/*/memberships/*`. membershipType: The type of the cluster's fleet membership. preRegistered: Output only. Whether the cluster has been registered through the fleet API. project: The Fleet host project(project ID or project number) where this cluster will be registered to. This field cannot be changed after the cluster has been registered. c \rSrSrSrSrSrSrg)#Fleet.MembershipTypeValueValuesEnumi" zThe type of the cluster's fleet membership. Values: MEMBERSHIP_TYPE_UNSPECIFIED: The MembershipType is not set. LIGHTWEIGHT: The membership supports only lightweight compatible features. rr rN)rrrrrMEMBERSHIP_TYPE_UNSPECIFIED LIGHTWEIGHTr!rr"r#MembershipTypeValueValuesEnumr" s#$Kr"rr r rrrN)rrrrrrr0rr membershipr2membershipTyper preRegisteredprojectr!rr"r#rr s\" inn $$Q'*&&'FJ.((+-  ! !! $'r"rc<\rSrSrSr\R "S5rSrg)r<i3 aGCPSecretManagerCertificateConfig configures a secret from [Secret Manager](https://cloud.google.com/secret-manager). Fields: secretUri: Secret URI, in the form "projects/$PROJECT_ID/secrets/$SECRET_NAME/versions/$VERSION". Version can be fixed (e.g. "2") or "latest" r rN) rrrrrrr secretUrir!rr"r#r<r<3 s##A&)r"r<ch\rSrSrSr"SS\R 5r\R"SS5r Sr g)GPUDirectConfigi@ aGPUDirectConfig specifies the GPU direct strategy on the node pool. Enums: GpuDirectStrategyValueValuesEnum: The type of GPU direct strategy to enable on the node pool. Fields: gpuDirectStrategy: The type of GPU direct strategy to enable on the node pool. c$\rSrSrSrSrSrSrSrg)0GPUDirectConfig.GpuDirectStrategyValueValuesEnumiL aThe type of GPU direct strategy to enable on the node pool. Values: GPU_DIRECT_STRATEGY_UNSPECIFIED: Default value. No GPU Direct strategy is enabled on the node. TCPX: GPUDirect-TCPX on A3 RDMA: GPUDirect-RDMA on A3 Ultra, and A4 machine types rr r rN) rrrrrGPU_DIRECT_STRATEGY_UNSPECIFIEDTCPXRDMAr!rr"r# GpuDirectStrategyValueValuesEnumrL s'(# D Dr"r#r rN) rrrrrrr0r#r2gpuDirectStrategyr!rr"r#rr@ s-      ))*LaPr"rch\rSrSrSr"SS\R 5r\R"SS5r Sr g)r i\ zGPUDriverInstallationConfig specifies the version of GPU driver to be auto installed. Enums: GpuDriverVersionValueValuesEnum: Mode for how the GPU driver is installed. Fields: gpuDriverVersion: Mode for how the GPU driver is installed. c(\rSrSrSrSrSrSrSrSr g) ;GPUDriverInstallationConfig.GpuDriverVersionValueValuesEnumig aBMode for how the GPU driver is installed. Values: GPU_DRIVER_VERSION_UNSPECIFIED: Default value is to not install any GPU driver. INSTALLATION_DISABLED: Disable GPU driver auto installation and needs manual installation DEFAULT: "Default" GPU driver in COS and Ubuntu. LATEST: "Latest" GPU driver in COS. rr r rrN) rrrrrGPU_DRIVER_VERSION_UNSPECIFIEDINSTALLATION_DISABLEDDEFAULTLATESTr!rr"r#GpuDriverVersionValueValuesEnumr'g s &'"G Fr"r,r rN) rrrrrrr0r,r2gpuDriverVersionr!rr"r#r r \ s-  (()JANr"r c\rSrSrSr"SS\R 5r\R"SS5r \R"S5r Sr g) riz a{GPUSharingConfig represents the GPU sharing configuration for Hardware Accelerators. Enums: GpuSharingStrategyValueValuesEnum: The type of GPU sharing strategy to enable on the GPU node. Fields: gpuSharingStrategy: The type of GPU sharing strategy to enable on the GPU node. maxSharedClientsPerGpu: The max number of containers that can share a physical GPU. c$\rSrSrSrSrSrSrSrg)2GPUSharingConfig.GpuSharingStrategyValueValuesEnumi zThe type of GPU sharing strategy to enable on the GPU node. Values: GPU_SHARING_STRATEGY_UNSPECIFIED: Default value. TIME_SHARING: GPUs are time-shared between containers. MPS: GPUs are shared between containers with NVIDIA MPS. rr r rN) rrrrr GPU_SHARING_STRATEGY_UNSPECIFIED TIME_SHARINGMPSr!rr"r#!GpuSharingStrategyValueValuesEnumr0 s()$L Cr"r4r r rN) rrrrrrr0r4r2gpuSharingStrategyrmaxSharedClientsPerGpur!rr"r#rrz s?   )..  !**+NPQR$11!4r"rch\rSrSrSr"SS\R 5r\R"SS5r Sr g)r|i zGatewayAPIConfig contains the desired config of Gateway API on this cluster. Enums: ChannelValueValuesEnum: The Gateway API release channel to use for Gateway API. Fields: channel: The Gateway API release channel to use for Gateway API. c(\rSrSrSrSrSrSrSrSr g) 'GatewayAPIConfig.ChannelValueValuesEnumi auThe Gateway API release channel to use for Gateway API. Values: CHANNEL_UNSPECIFIED: Default value. CHANNEL_DISABLED: Gateway API support is disabled CHANNEL_EXPERIMENTAL: Deprecated: use CHANNEL_STANDARD instead. Gateway API support is enabled, experimental CRDs are installed CHANNEL_STANDARD: Gateway API support is enabled, standard CRDs are installed rr r rrN) rrrrrCHANNEL_UNSPECIFIEDCHANNEL_DISABLEDCHANNEL_EXPERIMENTALCHANNEL_STANDARDr!rr"r#ChannelValueValuesEnumr9 s! r"r>r rN rrrrrrr0r>r2channelr!rr"r#r|r| s, y~~    8! <'r"r|c<\rSrSrSr\R "S5rSrg)rLi zConfiguration for the Compute Engine PD CSI driver. Fields: enabled: Whether the Compute Engine PD CSI driver is enabled for this cluster. r rNrrr"r#rLrL   " "1 %'r"rLc<\rSrSrSr\R "S5rSrg)r}i zGcfsConfig contains configurations of Google Container File System (image streaming). Fields: enabled: Whether to use GCFS. r rNrrr"r#r}r} rBr"r}c<\rSrSrSr\R "S5rSrg)rMi z~Configuration for the Filestore CSI driver. Fields: enabled: Whether the Filestore CSI driver is enabled for this cluster. r rNrrr"r#rMrM rr"rMc<\rSrSrSr\R "S5rSrg)rNi zConfiguration for the Cloud Storage Fuse CSI driver. Fields: enabled: Whether the Cloud Storage Fuse CSI driver is enabled for this cluster. r rNrrr"r#rNrN rBr"rNcb\rSrSrSr\R "SS5r\R "SSSS9rS r g ) GetJSONWebKeysResponsei aGetJSONWebKeysResponse is a valid JSON Web Key Set as specified in rfc 7517 Fields: cacheHeader: For HTTP requests, this field is automatically extracted into the Cache-Control HTTP header. keys: The public component of the keys used by the cluster to sign token requests. HttpCacheControlResponseHeaderr Jwkr Tr.rN) rrrrrrr cacheHeaderkeysr!rr"r#rGrG s0&&'GK+   q4 8$r"rGc0\rSrSrSr\R "SS5r\R"SSS9r \R"SSS9r \R"S SS9r \R"S 5r \R"S 5r \R"S SS9r\R"S SS9rSrg)GetOpenIDConfigResponsei a?GetOpenIDConfigResponse is an OIDC discovery document for the cluster. See the OpenID Connect Discovery 1.0 specification for details. Fields: cacheHeader: For HTTP requests, this field is automatically extracted into the Cache-Control HTTP header. claims_supported: Supported claims. grant_types: Supported grant types. id_token_signing_alg_values_supported: supported ID Token signing Algorithms. issuer: OIDC Issuer. jwks_uri: JSON Web Key uri. response_types_supported: Supported response types. subject_types_supported: Supported subject types. rHr r Tr.rrrrOrQrSrN)rrrrrrrrJrclaims_supported grant_types%id_token_signing_alg_values_supportedissuerjwks_uriresponse_types_supportedsubject_types_supportedr!rr"r#rMrM s &&'GK+**1t<%%a$7+*3*?*?D*Q'   #&  " "1 %(&221tD%11!dCr"rMch\rSrSrSr"SS\R 5r\R"SS5r Sr g)ri aGkeAutoUpgradeConfig is the configuration for GKE auto upgrades. Enums: PatchModeValueValuesEnum: PatchMode specifies how auto upgrade patch builds should be selected. Fields: patchMode: PatchMode specifies how auto upgrade patch builds should be selected. c \rSrSrSrSrSrSrg)-GkeAutoUpgradeConfig.PatchModeValueValuesEnumiaPatchMode specifies how auto upgrade patch builds should be selected. Values: PATCH_MODE_UNSPECIFIED: PATCH_MODE_UNSPECIFIED defaults to using the upgrade target from the channel's patch upgrade targets as the upgrade target for the version. ACCELERATED: ACCELERATED denotes that the latest patch build in the channel should be used as the upgrade target for the version. rr rN)rrrrrPATCH_MODE_UNSPECIFIED ACCELERATEDr!rr"r#PatchModeValueValuesEnumrWsKr"rZr rN) rrrrrrr0rZr2 patchModer!rr"r#rr s,   !!"\rSrSrSr"SS\R 5r\R"SSSS9r \R"SS SS9r \R"S S SS9r \R"S 5r\R"S SSS9r\R"S5r\R""S5rSrg) HostConfigiKafHostConfig configures the registry host under a given Server. Enums: CapabilitiesValueListEntryValuesEnum: Fields: ca: CA configures the registry host certificate. capabilities: Capabilities represent the capabilities of the registry host, specifying what operations a host is capable of performing. If not set, containerd enables all capabilities by default. client: Client configures the registry host client certificate and key. dialTimeout: Specifies the maximum duration allowed for a connection attempt to complete. A shorter timeout helps reduce delays when falling back to the original registry if the mirror is unreachable. Maximum allowed value is 180s. If not set, containerd sets default 30s. The value should be a decimal number of seconds with an `s` suffix. header: Header configures the registry host headers. host: Host configures the registry host/mirror. It supports fully qualified domain names (FQDN) and IP addresses: Specifying port is supported. Wildcards are NOT supported. Examples: - my.customdomain.com - 10.0.1.2:5000 overridePath: OverridePath is used to indicate the host's API root endpoint is defined in the URL path rather than by the API specification. This may be used with non-compliant OCI registries which are missing the /v2 prefix. If not set, containerd sets default false. c(\rSrSrSrSrSrSrSrSr g) /HostConfig.CapabilitiesValueListEntryValuesEnumigaCapabilitiesValueListEntryValuesEnum enum type. Values: HOST_CAPABILITY_UNSPECIFIED: UNKNOWN should never be set. HOST_CAPABILITY_PULL: Pull represents the capability to fetch manifests and blobs by digest. HOST_CAPABILITY_RESOLVE: Resolve represents the capability to fetch manifests by name. HOST_CAPABILITY_PUSH: Push represents the capability to push blobs and manifests. rr r rrN) rrrrrHOST_CAPABILITY_UNSPECIFIEDHOST_CAPABILITY_PULLHOST_CAPABILITY_RESOLVEHOST_CAPABILITY_PUSHr!rr"r#$CapabilitiesValueListEntryValuesEnumrbgs! #$r"rgr@r Tr.r rCrrRegistryHeaderrrOrQrN)rrrrrrr0rgrcar2 capabilitiesclientr dialTimeoutheaderrr overridePathr!rr"r#r`r`Ks6Y^^"11tD"$$%KQY]^,  ! !"91t L&%%a(+  ! !"2A E&   q !$''*,r"r`c\rSrSrSr\R "S5r\R"S5r \R"S5r Sr g)rHizRFC-2616: cache control support Fields: age: 14.6 response cache age, in seconds since the response is generated directive: 14.9 request and response directives expires: 14.21 response cache expires, in RFC 1123 date format r r rrN) rrrrrrrager directiveexpiresr!rr"r#rHrHs9 q!###A&)  ! !! $'r"rHc<\rSrSrSr\R "S5rSrg)rViaKConfiguration options for the HTTP (L7) load balancing controller addon, which makes it easy to set up HTTP load balancers for services in a cluster. Fields: disabled: Whether the HTTP Load Balancing controller is enabled in the cluster. When enabled, it runs a small pod in the cluster that manages the load balancers. r rNrrr"r#rVrVs # #A &(r"rVc\rSrSrSr\R "S\RRS9r \R "S\RRS9r Sr g)HugepagesConfigizHugepages amount in both 2m and 1g size Fields: hugepageSize1g: Optional. Amount of 1G hugepages hugepageSize2m: Optional. Amount of 2M hugepages r rr rN) rrrrrrrrrhugepageSize1ghugepageSize2mr!rr"r#rurusE))!Y5F5F5L5LM.))!Y5F5F5L5LM.r"ruc<\rSrSrSr\R "S5rSrg)rizILBSubsettingConfig contains the desired config of L4 Internal LoadBalancer subsetting on this cluster. Fields: enabled: Enables l4 ILB subsetting for this cluster. r rNrrr"r#rrrBr"rc\rSrSrSr"SS\R 5r"SS\R 5r\R"SSS S 9r \R"S S 5r \R"S S5r \R"S5r\R"S5r\R"S5r\R""S5r\R&"S5r\R*"SS5r\R"SS5r\R"S5r\R"S5r\R"SS5r\R"S5r\R"S5r\R"S5r\R"S5r\R*"SS5r\R"S 5r \R"S!5r!\R"S"5r"\R""S#5r#\R""S$5r$S%r%g&)'riaConfiguration for controlling how IPs are allocated in the cluster. Enums: Ipv6AccessTypeValueValuesEnum: The ipv6 access type (internal or external) when create_subnetwork is true StackTypeValueValuesEnum: The IP stack type of the cluster Fields: additionalIpRangesConfigs: Output only. The additional IP ranges that are added to the cluster. These IP ranges can be used by new node pools to allocate node and pod IPs automatically. Each AdditionalIPRangesConfig corresponds to a single subnetwork. Once a range is removed it will not show up in IPAllocationPolicy. additionalPodRangesConfig: Output only. The additional pod ranges that are added to the cluster. These pod ranges can be used by new node pools to allocate pod IPs automatically. Once the range is removed it will not show up in IPAllocationPolicy. autoIpamConfig: Optional. AutoIpamConfig contains all information related to Auto IPAM clusterIpv4Cidr: This field is deprecated, use cluster_ipv4_cidr_block. clusterIpv4CidrBlock: The IP address range for the cluster pod IPs. If this field is set, then `cluster.cluster_ipv4_cidr` must be left blank. This field is only applicable when `use_ip_aliases` is true. Set to blank to have a range chosen with the default size. Set to /netmask (e.g. `/14`) to have a range chosen with a specific netmask. Set to a [CIDR](http://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation (e.g. `10.96.0.0/14`) from the RFC-1918 private networks (e.g. `10.0.0.0/8`, `172.16.0.0/12`, `192.168.0.0/16`) to pick a specific range to use. clusterSecondaryRangeName: The name of the secondary range to be used for the cluster CIDR block. The secondary range will be used for pod IP addresses. This must be an existing secondary range associated with the cluster subnetwork. This field is only applicable with use_ip_aliases is true and create_subnetwork is false. createSubnetwork: Whether a new subnetwork will be created automatically for the cluster. This field is only applicable when `use_ip_aliases` is true. defaultPodIpv4RangeUtilization: Output only. The utilization of the cluster default IPv4 range for the pod. The ratio is Usage/[Total number of IPs in the secondary range], Usage=numNodes*numZones*podIPsPerNode. ipv6AccessType: The ipv6 access type (internal or external) when create_subnetwork is true networkTierConfig: Cluster-level network tier configuration is used to determine the default network tier for external IP addresses on cluster resources, such as node pools and load balancers. nodeIpv4Cidr: This field is deprecated, use node_ipv4_cidr_block. nodeIpv4CidrBlock: The IP address range of the instance IPs in this cluster. This is applicable only if `create_subnetwork` is true. Set to blank to have a range chosen with the default size. Set to /netmask (e.g. `/14`) to have a range chosen with a specific netmask. Set to a [CIDR](http://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation (e.g. `10.96.0.0/14`) from the RFC-1918 private networks (e.g. `10.0.0.0/8`, `172.16.0.0/12`, `192.168.0.0/16`) to pick a specific range to use. podCidrOverprovisionConfig: [PRIVATE FIELD] Pod CIDR size overprovisioning config for the cluster. Pod CIDR size per node depends on max_pods_per_node. By default, the value of max_pods_per_node is doubled and then rounded off to next power of 2 to get the size of pod CIDR block per node. Example: max_pods_per_node of 30 would result in 64 IPs (/26). This config can disable the doubling of IPs (we still round off to next power of 2) Example: max_pods_per_node of 30 will result in 32 IPs (/27) when overprovisioning is disabled. servicesIpv4Cidr: This field is deprecated, use services_ipv4_cidr_block. servicesIpv4CidrBlock: The IP address range of the services IPs in this cluster. If blank, a range will be automatically chosen with the default size. This field is only applicable when `use_ip_aliases` is true. Set to blank to have a range chosen with the default size. Set to /netmask (e.g. `/14`) to have a range chosen with a specific netmask. Set to a [CIDR](http://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation (e.g. `10.96.0.0/14`) from the RFC-1918 private networks (e.g. `10.0.0.0/8`, `172.16.0.0/12`, `192.168.0.0/16`) to pick a specific range to use. servicesIpv6CidrBlock: Output only. The services IPv6 CIDR block for the cluster. servicesSecondaryRangeName: The name of the secondary range to be used as for the services CIDR block. The secondary range will be used for service ClusterIPs. This must be an existing secondary range associated with the cluster subnetwork. This field is only applicable with use_ip_aliases is true and create_subnetwork is false. stackType: The IP stack type of the cluster subnetIpv6CidrBlock: Output only. The subnet's IPv6 CIDR block used by nodes and pods. subnetworkName: A custom subnetwork name to be used if `create_subnetwork` is true. If this field is empty, then an automatic name will be chosen for the new subnetwork. tpuIpv4CidrBlock: The IP address range of the Cloud TPUs in this cluster. If unspecified, a range will be automatically chosen with the default size. This field is only applicable when `use_ip_aliases` is true. If unspecified, the range will use the default size. Set to /netmask (e.g. `/14`) to have a range chosen with a specific netmask. Set to a [CIDR](http://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation (e.g. `10.96.0.0/14`) from the RFC-1918 private networks (e.g. `10.0.0.0/8`, `172.16.0.0/12`, `192.168.0.0/16`) to pick a specific range to use. This field is deprecated due to the deprecation of 2VM TPU. The end of life date for 2VM TPU is 2025-04-25. useIpAliases: Whether alias IPs will be used for pod IPs in the cluster. This is used in conjunction with use_routes. It cannot be true if use_routes is true. If both use_ip_aliases and use_routes are false, then the server picks the default IP allocation mode useRoutes: Whether routes will be used for pod IPs in the cluster. This is used in conjunction with use_ip_aliases. It cannot be true if use_ip_aliases is true. If both use_ip_aliases and use_routes are false, then the server picks the default IP allocation mode c$\rSrSrSrSrSrSrSrg)0IPAllocationPolicy.Ipv6AccessTypeValueValuesEnumia5The ipv6 access type (internal or external) when create_subnetwork is true Values: IPV6_ACCESS_TYPE_UNSPECIFIED: Default value, will be defaulted as type external. INTERNAL: Access type internal (all v6 addresses are internal IPs) EXTERNAL: Access type external (all v6 addresses are external IPs) rr r rN) rrrrrIPV6_ACCESS_TYPE_UNSPECIFIEDINTERNALEXTERNALr!rr"r#Ipv6AccessTypeValueValuesEnumr{s$% HHr"rc(\rSrSrSrSrSrSrSrSr g) +IPAllocationPolicy.StackTypeValueValuesEnumi+zThe IP stack type of the cluster Values: STACK_TYPE_UNSPECIFIED: Default value, will be defaulted as IPV4 only IPV4: Cluster is IPV4 only IPV4_IPV6: Cluster can use both IPv4 and IPv6 IPV6: Cluster is IPv6 only. rr r rrNrqrr"r#StackTypeValueValuesEnumr+s DI Dr"rr%r Tr.rAr rrrrrOrQrSrUrrWrYr[PodCIDROverprovisionConfigr]r_rarcrer rhrrrrrN)&rrrrrrr0rrrrrautoIpamConfigrrclusterIpv4CidrBlockclusterSecondaryRangeNamercreateSubnetwork FloatFielddefaultPodIpv4RangeUtilizationr2ipv6AccessTypenetworkTierConfig nodeIpv4CidrnodeIpv4CidrBlockpodCidrOverprovisionConfigr4servicesIpv4CidrBlockservicesIpv6CidrBlockservicesSecondaryRangeName stackTypesubnetIpv6CidrBlocksubnetworkNamer8 useIpAliases useRoutesr!rr"r#rrsgR inn     (445OQR]ab'445PRST))*:A>.))!,/"..q1'33A6++A.#,#7#7#: &&'FJ.,,-@"E&&r*,++B/(556RTVW**2.#//3#//3(44R8!!">  !).. !##$@!D+ **+NPQRr"rcd\rSrSrSr\R "SS5r\R "SS5rSr g) KernelOverridesizParameters that can be configured on the kernel. Fields: kernelCommandlineOverrides: Optional. Allow setting for optional kernel command line arguments overrides. lruGen: Optional. lrugen (Multi-Gen LRU) options rr LRUGenr rN) rrrrrrrkernelCommandlineOverrideslruGenr!rr"r#rrs0 )556RTUV  ! !(A .&r"rc<\rSrSrSr\R "S5rSrg)rXizConfiguration for the Kubernetes Dashboard. Fields: disabled: Whether the Kubernetes Dashboard is enabled for this cluster. r rNrrr"r#rXrXs  # #A &(r"rXc\rSrSrSr\R "S5r\R"S\RRS9r Sr g)rialrugen (Multi-Gen LRU) options See https://docs.kernel.org/admin- guide/mm/multigen_lru.html Fields: enabled: Optional. Enable lrugen. minTtlMs: Optional. Users can write N to min_ttl_ms to prevent the working set of N milliseconds from getting evicted. r r rrN) rrrrrrrrrrrminTtlMsr!rr"r#rrs7  " "1 %'  # #Ay/@/@/F/F G(r"rc<\rSrSrSr\R "S5rSrg)riafConfiguration for the legacy Attribute Based Access Control authorization mode. Fields: enabled: Whether the ABAC authorizer is enabled for this cluster. When enabled, identities in the system, including service accounts, nodes, and controllers, will have statically granted permissions beyond those provided by the RBAC configuration or IAM. r rNrrr"r#rrs  " "1 %'r"rc\rSrSrSr"SS\R 5r"SS\R 5r"SS\R 5r \ R"S 5"S S \R55r \R"S S SS9r\R"SSSS9r\R"SSSS9r\R$"SS5r\R"SS5r\R"SS5r\R"SS5r\R"SS5r\R"SS5r\R"S S5r\R4"S5r\R$"SS 5r\R$"SS!5rS"rg#)$ri+aParameters that can be configured on Linux nodes. Enums: CgroupModeValueValuesEnum: cgroup_mode specifies the cgroup mode to be used on the node. TransparentHugepageDefragValueValuesEnum: Optional. Defines the transparent hugepage defrag configuration on the node. VM hugepage allocation can be managed by either limiting defragmentation for delayed allocation or skipping it entirely for immediate allocation only. See https://docs.kernel.org/admin-guide/mm/transhuge.html for more details. TransparentHugepageEnabledValueValuesEnum: Optional. Transparent hugepage support for anonymous memory can be entirely disabled (mostly for debugging purposes) or only enabled inside MADV_HUGEPAGE regions (to avoid the risk of consuming more memory resources) or enabled system wide. See https://docs.kernel.org/admin-guide/mm/transhuge.html for more details. Messages: SysctlsValue: The Linux kernel parameters to be applied to the nodes and all pods running on the nodes. The following parameters are supported. net.core.busy_poll net.core.busy_read net.core.netdev_max_backlog net.core.rmem_max net.core.rmem_default net.core.wmem_default net.core.wmem_max net.core.optmem_max net.core.somaxconn net.ipv4.tcp_rmem net.ipv4.tcp_wmem net.ipv4.tcp_tw_reuse net.ipv4.tcp_mtu_probing net.ipv4.tcp_max_orphans net.ipv4.tcp_max_tw_buckets net.ipv4.tcp_syn_retries net.ipv4.tcp_ecn net.ipv4.tcp_congestion_control net.netfilter.nf_conntrack_max net.netfilter.nf_conntrack_buckets net.netfilter.nf_conntrack_tcp_timeout_close_wait net.netfilter.nf_conntrack_tcp_timeout_time_wait net.netfilter.nf_conntrack_tcp_timeout_established net.netfilter.nf_conntrack_acct kernel.shmmni kernel.shmmax kernel.shmall kernel.perf_event_paranoid kernel.sched_rt_runtime_us kernel.softlockup_panic kernel.yama.ptrace_scope kernel.kptr_restrict kernel.dmesg_restrict kernel.sysrq fs.aio-max-nr fs.file-max fs.inotify.max_user_instances fs.inotify.max_user_watches fs.nr_open vm.dirty_background_ratio vm.dirty_background_bytes vm.dirty_expire_centisecs vm.dirty_ratio vm.dirty_bytes vm.dirty_writeback_centisecs vm.max_map_count vm.overcommit_memory vm.overcommit_ratio vm.vfs_cache_pressure vm.swappiness vm.watermark_scale_factor vm.min_free_kbytes Fields: additionalEtcHosts: Optional. Additional entries to be added to /etc/hosts. additionalEtcResolvConf: Optional. Additional entries to be added to /etc/resolv.conf. additionalEtcSystemdResolvedConf: Optional. Additional entries to be added to /etc/systemd/resolved.conf. cgroupMode: cgroup_mode specifies the cgroup mode to be used on the node. customNodeInit: Optional. Allow users to run arbitrary bash script or container on the node. hugepages: Optional. Amounts for 2M and 1G hugepages kernelOverrides: Optional. Defines the kernel overrides to be applied to the nodes. Note: sysctl changes are defined separately in the sysctls fields. nodeKernelModuleLoading: Optional. Configuration for kernel module loading on nodes. When enabled, the node pool will be provisioned with a Container-Optimized OS image that enforces kernel module signature verification. swapConfig: Optional. Enables and configures swap space on nodes. If omitted, swap is disabled. sysctls: The Linux kernel parameters to be applied to the nodes and all pods running on the nodes. The following parameters are supported. net.core.busy_poll net.core.busy_read net.core.netdev_max_backlog net.core.rmem_max net.core.rmem_default net.core.wmem_default net.core.wmem_max net.core.optmem_max net.core.somaxconn net.ipv4.tcp_rmem net.ipv4.tcp_wmem net.ipv4.tcp_tw_reuse net.ipv4.tcp_mtu_probing net.ipv4.tcp_max_orphans net.ipv4.tcp_max_tw_buckets net.ipv4.tcp_syn_retries net.ipv4.tcp_ecn net.ipv4.tcp_congestion_control net.netfilter.nf_conntrack_max net.netfilter.nf_conntrack_buckets net.netfilter.nf_conntrack_tcp_timeout_close_wait net.netfilter.nf_conntrack_tcp_timeout_time_wait net.netfilter.nf_conntrack_tcp_timeout_established net.netfilter.nf_conntrack_acct kernel.shmmni kernel.shmmax kernel.shmall kernel.perf_event_paranoid kernel.sched_rt_runtime_us kernel.softlockup_panic kernel.yama.ptrace_scope kernel.kptr_restrict kernel.dmesg_restrict kernel.sysrq fs.aio-max-nr fs.file-max fs.inotify.max_user_instances fs.inotify.max_user_watches fs.nr_open vm.dirty_background_ratio vm.dirty_background_bytes vm.dirty_expire_centisecs vm.dirty_ratio vm.dirty_bytes vm.dirty_writeback_centisecs vm.max_map_count vm.overcommit_memory vm.overcommit_ratio vm.vfs_cache_pressure vm.swappiness vm.watermark_scale_factor vm.min_free_kbytes timeZone: Optional. Configures the timezone of the node. transparentHugepageDefrag: Optional. Defines the transparent hugepage defrag configuration on the node. VM hugepage allocation can be managed by either limiting defragmentation for delayed allocation or skipping it entirely for immediate allocation only. See https://docs.kernel.org/admin-guide/mm/transhuge.html for more details. transparentHugepageEnabled: Optional. Transparent hugepage support for anonymous memory can be entirely disabled (mostly for debugging purposes) or only enabled inside MADV_HUGEPAGE regions (to avoid the risk of consuming more memory resources) or enabled system wide. See https://docs.kernel.org/admin-guide/mm/transhuge.html for more details. c$\rSrSrSrSrSrSrSrg))LinuxNodeConfig.CgroupModeValueValuesEnumiacgroup_mode specifies the cgroup mode to be used on the node. Values: CGROUP_MODE_UNSPECIFIED: CGROUP_MODE_UNSPECIFIED is when unspecified cgroup configuration is used. The default for the GKE node OS image will be used. CGROUP_MODE_V1: CGROUP_MODE_V1 specifies to use cgroupv1 for the cgroup configuration on the node image. CGROUP_MODE_V2: CGROUP_MODE_V2 specifies to use cgroupv2 for the cgroup configuration on the node image. rr r rN) rrrrrCGROUP_MODE_UNSPECIFIEDCGROUP_MODE_V1CGROUP_MODE_V2r!rr"r#CgroupModeValueValuesEnumrs  NNr"rc0\rSrSrSrSrSrSrSrSr Sr S r g ) 8LinuxNodeConfig.TransparentHugepageDefragValueValuesEnumiaXOptional. Defines the transparent hugepage defrag configuration on the node. VM hugepage allocation can be managed by either limiting defragmentation for delayed allocation or skipping it entirely for immediate allocation only. See https://docs.kernel.org/admin- guide/mm/transhuge.html for more details. Values: TRANSPARENT_HUGEPAGE_DEFRAG_UNSPECIFIED: Default value. GKE will not modify the kernel configuration. TRANSPARENT_HUGEPAGE_DEFRAG_ALWAYS: It means that an application requesting THP will stall on allocation failure and directly reclaim pages and compact memory in an effort to allocate a THP immediately. TRANSPARENT_HUGEPAGE_DEFRAG_DEFER: It means that an application will wake kswapd in the background to reclaim pages and wake kcompactd to compact memory so that THP is available in the near future. It's the responsibility of khugepaged to then install the THP pages later. TRANSPARENT_HUGEPAGE_DEFRAG_DEFER_WITH_MADVISE: It means that an application will enter direct reclaim and compaction like always, but only for regions that have used madvise(MADV_HUGEPAGE); all other regions will wake kswapd in the background to reclaim pages and wake kcompactd to compact memory so that THP is available in the near future. TRANSPARENT_HUGEPAGE_DEFRAG_MADVISE: It means that an application will enter direct reclaim like always but only for regions that are have used madvise(MADV_HUGEPAGE). This is the default kernel configuration. TRANSPARENT_HUGEPAGE_DEFRAG_NEVER: It means that an application will never enter direct reclaim or compaction. rr r rrrrN) rrrrr'TRANSPARENT_HUGEPAGE_DEFRAG_UNSPECIFIED"TRANSPARENT_HUGEPAGE_DEFRAG_ALWAYS!TRANSPARENT_HUGEPAGE_DEFRAG_DEFER.TRANSPARENT_HUGEPAGE_DEFRAG_DEFER_WITH_MADVISE#TRANSPARENT_HUGEPAGE_DEFRAG_MADVISE!TRANSPARENT_HUGEPAGE_DEFRAG_NEVERr!rr"r#(TransparentHugepageDefragValueValuesEnumrs-8/0+)*&()%562*+'()%r"rc(\rSrSrSrSrSrSrSrSr g) 9LinuxNodeConfig.TransparentHugepageEnabledValueValuesEnumiaGOptional. Transparent hugepage support for anonymous memory can be entirely disabled (mostly for debugging purposes) or only enabled inside MADV_HUGEPAGE regions (to avoid the risk of consuming more memory resources) or enabled system wide. See https://docs.kernel.org/admin- guide/mm/transhuge.html for more details. Values: TRANSPARENT_HUGEPAGE_ENABLED_UNSPECIFIED: Default value. GKE will not modify the kernel configuration. TRANSPARENT_HUGEPAGE_ENABLED_ALWAYS: Transparent hugepage support for anonymous memory is enabled system wide. TRANSPARENT_HUGEPAGE_ENABLED_MADVISE: Transparent hugepage support for anonymous memory is enabled inside MADV_HUGEPAGE regions. This is the default kernel configuration. TRANSPARENT_HUGEPAGE_ENABLED_NEVER: Transparent hugepage support for anonymous memory is disabled. rr r rrN) rrrrr(TRANSPARENT_HUGEPAGE_ENABLED_UNSPECIFIED#TRANSPARENT_HUGEPAGE_ENABLED_ALWAYS$TRANSPARENT_HUGEPAGE_ENABLED_MADVISE"TRANSPARENT_HUGEPAGE_ENABLED_NEVERr!rr"r#)TransparentHugepageEnabledValueValuesEnumrs!"01,*+'+,()*&r"rrdcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) LinuxNodeConfig.SysctlsValueiaThe Linux kernel parameters to be applied to the nodes and all pods running on the nodes. The following parameters are supported. net.core.busy_poll net.core.busy_read net.core.netdev_max_backlog net.core.rmem_max net.core.rmem_default net.core.wmem_default net.core.wmem_max net.core.optmem_max net.core.somaxconn net.ipv4.tcp_rmem net.ipv4.tcp_wmem net.ipv4.tcp_tw_reuse net.ipv4.tcp_mtu_probing net.ipv4.tcp_max_orphans net.ipv4.tcp_max_tw_buckets net.ipv4.tcp_syn_retries net.ipv4.tcp_ecn net.ipv4.tcp_congestion_control net.netfilter.nf_conntrack_max net.netfilter.nf_conntrack_buckets net.netfilter.nf_conntrack_tcp_timeout_close_wait net.netfilter.nf_conntrack_tcp_timeout_time_wait net.netfilter.nf_conntrack_tcp_timeout_established net.netfilter.nf_conntrack_acct kernel.shmmni kernel.shmmax kernel.shmall kernel.perf_event_paranoid kernel.sched_rt_runtime_us kernel.softlockup_panic kernel.yama.ptrace_scope kernel.kptr_restrict kernel.dmesg_restrict kernel.sysrq fs.aio-max-nr fs.file-max fs.inotify.max_user_instances fs.inotify.max_user_watches fs.nr_open vm.dirty_background_ratio vm.dirty_background_bytes vm.dirty_expire_centisecs vm.dirty_ratio vm.dirty_bytes vm.dirty_writeback_centisecs vm.max_map_count vm.overcommit_memory vm.overcommit_ratio vm.vfs_cache_pressure vm.swappiness vm.watermark_scale_factor vm.min_free_kbytes Messages: AdditionalProperty: An additional property for a SysctlsValue object. Fields: additionalProperties: Additional properties of type SysctlsValue c`\rSrSrSr\R "S5r\R "S5rSr g)/LinuxNodeConfig.SysctlsValue.AdditionalPropertyizAn additional property for a SysctlsValue object. Fields: key: Name of the additional property. value: A string attribute. r r rNrjrr"r#rlrrmr"rlr Tr.rNrnrr"r# SysctlsValuers2< 'Y.. '%112FTXYr"rrr Tr.ResolvedConfEntryr rrrrrurOrrQNodeKernelModuleLoadingrS SwapConfigrUrWrYr[r]rN)rrrrrrr0rrrrrrorradditionalEtcHostsadditionalEtcResolvConf additionalEtcSystemdResolvedConfr2 cgroupModecustomNodeInit hugepageskernelOverridesnodeKernelModuleLoading swapConfigsysctlsrtimeZonetransparentHugepageDefragtransparentHugepageEnabledr!rr"r#rr+so`D).. "*"*H+)..+. !!"89*ZY&&*Z:*ZX!--oq4P%223FTXY%.%;%;B*))*:A>.$$%6:)**+2 6'  " "2 &('112\^`a(223^`bcr"rc^\rSrSrSr\R "SSSS9r\R"SSS9r Sr g ) ListClustersResponseia ListClustersResponse is the result of ListClustersRequest. Fields: clusters: A list of clusters in the project in the specified zone, or across all ones. missingZones: If any zones are listed here, the list of clusters returned may be missing those zones. r[r Tr.r rN) rrrrrrrclustersr missingZonesr!rr"r#rrs/ # #Iq4 @(&&q48,r"rc<\rSrSrSr\R "SSSS9rSrg) ListNodePoolsResponsei#zwListNodePoolsResponse is the result of ListNodePoolsRequest. Fields: nodePools: A list of node pools for a cluster. rr Tr.rN) rrrrrrrr"r!rr"r#rr#s $$ZTB)r"rc^\rSrSrSr\R "SSS9r\R"SSSS9r Sr g ) ListOperationsResponsei-aListOperationsResponse is the result of ListOperationsRequest. Fields: missingZones: If any zones are listed here, the list of operations returned may be missing the operations from those zones. operations: A list of operations in the project in the specified zone. r Tr. Operationr rN) rrrrrrrrr operationsr!rr"r#rr-s/&&q48,%%k1tD*r"rc`\rSrSrSr\R "S5r\R"SSSS9r Sr g ) ListUsableSubnetworksResponsei:aListUsableSubnetworksResponse is the response of ListUsableSubnetworksRequest. Fields: nextPageToken: This token allows you to get the next page of results for list requests. If the number of results is larger than `page_size`, use the `next_page_token` as a value for the query parameter `page_token` in the next request. The value will become empty when there are no more pages. subnetworks: A list of usable subnetworks in the specified network project. r UsableSubnetworkr Tr.rN) rrrrrrr nextPageTokenr subnetworksr!rr"r#rr:s. ''*-&&'91tL+r"rcb\rSrSrSr\R "S\RRS9r Sr g)LocalNvmeSsdBlockConfigiLaLocalNvmeSsdBlockConfig contains configuration for using raw-block local NVMe SSDs Fields: localSsdCount: Number of local NVMe SSDs to use. The limit for this value is dependent upon the maximum number of disk available on a machine per zone. See: https://cloud.google.com/compute/docs/disks/local-ssd for more information. A zero (or unset) value has different meanings depending on machine type being used: 1. For pre-Gen3 machines, which support flexible numbers of local ssds, zero (or unset) means to disable using local SSDs as ephemeral storage. 2. For Gen3 machines which dictate a specific number of local ssds, zero (or unset) means to use the default number of local ssds that goes with that machine type. For example, for a c3-standard-8-lssd machine, 2 local ssds would be provisioned. For c3-standard-8 (which doesn't support local ssds), 0 will be provisioned. See https://cloud.google.com/compute/docs/disks/local- ssd#choose_number_local_ssds for more info. r rrN) rrrrrrrrrrr!rr"r#rrLs'(((I4E4E4K4KL-r"rcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) LoggingComponentConfigidzLoggingComponentConfig is cluster logging component configuration. Enums: EnableComponentsValueListEntryValuesEnum: Fields: enableComponents: Select components to collect logs. An empty set would disable all logging. c@\rSrSrSrSrSrSrSrSr Sr S r S r S r S rS rg)?LoggingComponentConfig.EnableComponentsValueListEntryValuesEnumioaEnableComponentsValueListEntryValuesEnum enum type. Values: COMPONENT_UNSPECIFIED: Default value. This shouldn't be used. SYSTEM_COMPONENTS: system components WORKLOADS: workloads APISERVER: kube-apiserver SCHEDULER: kube-scheduler CONTROLLER_MANAGER: kube-controller-manager ADDON_MANAGER: kube-addon-manager KCP_SSHD: kcp-sshd KCP_CONNECTION: kcp connection logs KCP_HPA: horizontal pod autoscaler decision logs rr r rrrrOrQrSrUrN)rrrrrCOMPONENT_UNSPECIFIEDSYSTEM_COMPONENTS WORKLOADS APISERVER SCHEDULERCONTROLLER_MANAGER ADDON_MANAGERKCP_SSHDKCP_CONNECTIONKCP_HPAr!rr"r#(EnableComponentsValueListEntryValuesEnumros> IIIMHNGr"rr Tr.rN rrrrrrr0rr2enableComponentsr!rr"r#rrds14(()SUVaefr"rcd\rSrSrSr\R "SS5r\R "SS5rSr g) rizLoggingConfig is cluster logging configuration. Fields: componentConfig: Logging components configuration rayLoggingConfig: Optional. DEPRECATED. Use RayOperatorConfig instead. rr RayLoggingConfigr rN) rrrrrrrcomponentConfigrayLoggingConfigr!rr"r#rrs0**+CQG/++,>Br"rch\rSrSrSr"SS\R 5r\R"SS5r Sr g)LoggingVariantConfigizLoggingVariantConfig specifies the behaviour of the logging component. Enums: VariantValueValuesEnum: Logging variant deployed on nodes. Fields: variant: Logging variant deployed on nodes. c$\rSrSrSrSrSrSrSrg)+LoggingVariantConfig.VariantValueValuesEnumizLogging variant deployed on nodes. Values: VARIANT_UNSPECIFIED: Default value. This shouldn't be used. DEFAULT: default logging variant. MAX_THROUGHPUT: maximum logging throughput variant. rr r rN) rrrrrVARIANT_UNSPECIFIEDr*MAX_THROUGHPUTr!rr"r#VariantValueValuesEnumrsGNr"rr rN) rrrrrrr0rr2rr!rr"r#rrs, y~~     8! <'r"rc>\rSrSrSr\R "SS5rSrg)rizConfiguration for Lustre settings on the node pool. Fields: multiRail: Optional. If true, the Lustre CSI driver will be configured to use multiple NICs on nodes in this pool. MultiRailr rN) rrrrrrr multiRailr!rr"r#rrs$$[!4)r"rc`\rSrSrSr\R "S5r\R "S5rSr g)rZiaConfiguration for the Lustre CSI driver. Fields: enableLegacyLustrePort: If set to true, the Lustre CSI driver will install Lustre kernel modules using port 6988. This serves as a workaround for a port conflict with the gke-metadata-server. This field is required ONLY under the following conditions: 1. The GKE node version is older than 1.33.2-gke.4655000. 2. You're connecting to a Lustre instance that has the 'gke-support-enabled' flag. Deprecated: This flag is no longer required as of GKE node version 1.33.2-gke.4655000, unless you are connecting to a Lustre instance that has the `gke-support-enabled` flag. enabled: Whether the Lustre CSI driver is enabled for this cluster. r r rN) rrrrrrrenableLegacyLustrePortrr!rr"r#rZrZs* %11!4  " "1 %'r"rZc\rSrSrSr"SS\R 5r"SS\R 5r\R"SS5r \R"SS5r S r g ) MaintenanceExclusionOptionsiaRepresents the Maintenance exclusion option. Enums: EndTimeBehaviorValueValuesEnum: EndTimeBehavior specifies the behavior of the exclusion end time. ScopeValueValuesEnum: Scope specifies the upgrade scope which upgrades are blocked by the exclusion. Fields: endTimeBehavior: EndTimeBehavior specifies the behavior of the exclusion end time. scope: Scope specifies the upgrade scope which upgrades are blocked by the exclusion. c \rSrSrSrSrSrSrg):MaintenanceExclusionOptions.EndTimeBehaviorValueValuesEnumiaZEndTimeBehavior specifies the behavior of the exclusion end time. Values: END_TIME_BEHAVIOR_UNSPECIFIED: END_TIME_BEHAVIOR_UNSPECIFIED is the default behavior, which is fixed end time. UNTIL_END_OF_SUPPORT: UNTIL_END_OF_SUPPORT means the exclusion will be in effect until the end of the support of the cluster's current version. rr rN)rrrrrEND_TIME_BEHAVIOR_UNSPECIFIEDUNTIL_END_OF_SUPPORTr!rr"r#EndTimeBehaviorValueValuesEnumr(s%&!r"r+c$\rSrSrSrSrSrSrSrg)0MaintenanceExclusionOptions.ScopeValueValuesEnumia6Scope specifies the upgrade scope which upgrades are blocked by the exclusion. Values: NO_UPGRADES: NO_UPGRADES excludes all upgrades, including patch upgrades and minor upgrades across control planes and nodes. This is the default exclusion behavior. NO_MINOR_UPGRADES: NO_MINOR_UPGRADES excludes all minor upgrades for the cluster, only patches are allowed. NO_MINOR_OR_NODE_UPGRADES: NO_MINOR_OR_NODE_UPGRADES excludes all minor upgrades for the cluster, and also exclude all node pool upgrades. Only control plane patches are allowed. rr r rN) rrrrr NO_UPGRADESNO_MINOR_UPGRADESNO_MINOR_OR_NODE_UPGRADESr!rr"r#rr-s K !r"rr r rN) rrrrrrr0r+rr2endTimeBehaviorrr!rr"r#r&r&sO  y~~ "Y^^"$''(H!L/   4a 8%r"r&cb\rSrSrSr\R "S5r\R"SS5r Sr g)ria/MaintenancePolicy defines the maintenance policy to be used for the cluster. Fields: resourceVersion: A hash identifying the version of this policy, so that updates to fields of the policy won't accidentally undo intermediate changes (and so that users of the API unaware of some fields won't accidentally remove other fields). Make a `get()` request to the cluster to get the current resource version and include it with requests to set the policy. window: Specifies the maintenance window in which maintenance may be performed. r MaintenanceWindowr rN) rrrrrrrresourceVersionrwindowr!rr"r#rrs, ))!,/  ! !"5q 9&r"rc\rSrSrSr\R "S5"SS\R55r \R"SS5r \R"SS5r \R"S S 5r S rg ) r3iaMaintenanceWindow defines the maintenance window to be used for the cluster. Messages: MaintenanceExclusionsValue: Exceptions to maintenance window. Non- emergency maintenance should not occur in these windows. Fields: dailyMaintenanceWindow: DailyMaintenanceWindow specifies a daily maintenance operation window. maintenanceExclusions: Exceptions to maintenance window. Non-emergency maintenance should not occur in these windows. recurringWindow: RecurringWindow specifies some number of recurring time periods for maintenance to occur. The time windows may be overlapping. If no maintenance windows are set, maintenance can occur at any time. rdcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) ,MaintenanceWindow.MaintenanceExclusionsValuei'a"Exceptions to maintenance window. Non-emergency maintenance should not occur in these windows. Messages: AdditionalProperty: An additional property for a MaintenanceExclusionsValue object. Fields: additionalProperties: Additional properties of type MaintenanceExclusionsValue cb\rSrSrSr\R "S5r\R"SS5r Sr g)?MaintenanceWindow.MaintenanceExclusionsValue.AdditionalPropertyi5zAn additional property for a MaintenanceExclusionsValue object. Fields: key: Name of the additional property. value: A TimeWindow attribute. r TimeWindowr rN rrrrrrrrErrkr!rr"r#rlr:5s+   ! !! $c$$\15er"rlr Tr.rNrnrr"r#MaintenanceExclusionsValuer8's2  6Y.. 6%112FTXYr"r=rr r RecurringTimeWindowrrN)rrrrrrrrror=rdailyMaintenanceWindowmaintenanceExclusionsrecurringWindowr!rr"r#r3r3st" !!"89Z9#4#4Z:Z4%112JAN#001MqQ**+@!D/r"r3ch\rSrSrSr"SS\R 5r\R"SS5r Sr g)riGaManagedConfig is used for enforcing set of cluster configurations that are conforming to strandards. Enums: TypeValueValuesEnum: The type of standard configurations to enforce for cluster. Fields: type: The type of standard configurations to enforce for cluster. c$\rSrSrSrSrSrSrSrg)!ManagedConfig.TypeValueValuesEnumiSzThe type of standard configurations to enforce for cluster. Values: TYPE_UNSPECIFIED: Default value. DISABLED: ManagedConfig is disabled. AUTOFLEET: Use ManagedConfig that is conforming to Autofleet requirements. rr r rN) rrrrrrr AUTOFLEETr!rr"r#rrDSsHIr"rr rN rrrrrrr0rr2rr!rr"r#rrGs,  INN    2A 6$r"rch\rSrSrSr"SS\R 5r\R"SS5r Sr g)riczManagedOpenTelemetryConfig is the configuration for the GKE Managed OpenTelemetry pipeline. Enums: ScopeValueValuesEnum: Scope of the Managed OpenTelemetry pipeline. Fields: scope: Scope of the Managed OpenTelemetry pipeline. c$\rSrSrSrSrSrSrSrg)/ManagedOpenTelemetryConfig.ScopeValueValuesEnuminaScope of the Managed OpenTelemetry pipeline. Values: SCOPE_UNSPECIFIED: SCOPE_UNSPECIFIED is when the scope is not set. NONE: NONE is used to disable the Managed OpenTelemetry pipeline. COLLECTION_AND_INSTRUMENTATION_COMPONENTS: COLLECTION_AND_INSTRUMENTATION_COMPONENTS is used to enable the Managed OpenTelemetry pipeline for collection and instrumentation components. rr r rN) rrrrrrr)COLLECTION_AND_INSTRUMENTATION_COMPONENTSr!rr"r#rrIns  D01-r"rr rNrrr"r#rrcs, 2Y^^ 2   4a 8%r"rcb\rSrSrSr\R "SS5r\R"S5r Sr g)ManagedPrometheusConfigizManagedPrometheusConfig defines the configuration for Google Cloud Managed Service for Prometheus. Fields: autoMonitoringConfig: GKE Workload Auto-Monitoring Configuration. enabled: Enable Managed Collection. rr r rN) rrrrrrrautoMonitoringConfigrrr!rr"r#rLrLs-#//0FJ  " "1 %'r"rLc\rSrSrSr\R "S5r\R"SS5r \R "S5r \R "S5r \R "S5r \R "S 5r S rg ) riaThe authentication information for accessing the master endpoint. Authentication can be done using HTTP basic auth or using client certificates. Fields: clientCertificate: Output only. Base64-encoded public certificate used by clients to authenticate to the cluster endpoint. Issued only if client_certificate_config is set. clientCertificateConfig: Configuration for client certificate authentication on the cluster. For clusters before v1.12, if no configuration is specified, a client certificate is issued. clientKey: Output only. Base64-encoded private key used by clients to authenticate to the cluster endpoint. clusterCaCertificate: Output only. Base64-encoded public certificate that is the root of trust for the cluster. password: The password to use for HTTP basic authentication to the master endpoint. Because the master endpoint is open to the Internet, you should create a strong password. If a password is provided for cluster creation, username must be non-empty. Warning: basic authentication is deprecated, and will be removed in GKE control plane versions 1.19 and newer. For a list of recommended authentication methods, see: https://cloud.google.com/kubernetes-engine/docs/how-to/api-server- authentication username: The username to use for HTTP basic authentication to the master endpoint. For clusters v1.6.0 and later, basic authentication can be disabled by leaving username unspecified (or setting it to the empty string). Warning: basic authentication is deprecated, and will be removed in GKE control plane versions 1.19 and newer. For a list of recommended authentication methods, see: https://cloud.google.com/kubernetes-engine/docs/how-to/api-server- authentication r rOr rrrrOrN)rrrrrrrclientCertificaterclientCertificateConfig clientKeyclusterCaCertificatepasswordusernamer!rr"r#rrspB ++A.%223LaP##A&)"..q1  " "1 %(  " "1 %(r"rc\rSrSrSr\R "SSSS9r\R"S5r \R"S5r \R"S 5r S r g ) riaConfiguration options for the master authorized networks feature. Enabled master authorized networks will disallow all external traffic to access Kubernetes master through HTTPS except traffic from the given CIDR blocks, Google Compute Engine Public IPs and Google Prod IPs. Fields: cidrBlocks: cidr_blocks define up to 50 external networks that could access Kubernetes master through HTTPS. enabled: Whether or not master authorized networks is enabled. gcpPublicCidrsAccessEnabled: Whether master is accessible via Google Compute Engine Public IP addresses. privateEndpointEnforcementEnabled: Whether master authorized networks is enforced on private endpoint or not. rKr Tr.r rrrN) rrrrrrr cidrBlocksrrgcpPublicCidrsAccessEnabled!privateEndpointEnforcementEnabledr!rr"r#rrsO %%k1tD*  " "1 %' ) 6 6q 9&/&<&(>?dfg(h%**+FJ/%223LaP!../DaHr"rc<\rSrSrSr\R "S5rSrg)r!iLzMultiRail contains configuration for the Multi-Rail Lustre feature. Fields: enabled: If true, the Multi-Rail Lustre feature is enabled. r rNrrr"r#r!r!Lrr"r!c \rSrSrSr"SS\R 5r"SS\R 5r"SS\R 5r \R"SS 5r \R"S 5r \R"S S 5r\R"S 5r\R"SS5r\R"S5r\R"S5r\R"S5r\R"S5r\R"S5r\R"SS5r\R"SS5r\R2"S5r\R"SS5r\R"SS5r\R"SS5r\R2"S5rSrg )!riVa, NetworkConfig reports the relative names of network & subnetwork. Enums: DatapathProviderValueValuesEnum: The desired datapath provider for this cluster. By default, uses the IPTables-based kube-proxy implementation. InTransitEncryptionConfigValueValuesEnum: Specify the details of in- transit encryption. Now named inter-node transparent encryption. PrivateIpv6GoogleAccessValueValuesEnum: The desired state of IPv6 connectivity to Google Services. By default, no private IPv6 access to or from Google Services (all access will be via IPv4) Fields: datapathProvider: The desired datapath provider for this cluster. By default, uses the IPTables-based kube-proxy implementation. defaultEnablePrivateNodes: Controls whether by default nodes have private IP addresses only. It is invalid to specify both PrivateClusterConfig.enablePrivateNodes and this field at the same time. To update the default setting, use ClusterUpdate.desired_default_enable_private_nodes defaultSnatStatus: Whether the cluster disables default in-node sNAT rules. In-node sNAT rules will be disabled when default_snat_status is disabled. When disabled is set to false, default IP masquerade rules will be applied to the nodes to prevent sNAT on cluster internal traffic. disableL4LbFirewallReconciliation: Disable L4 load balancer VPC firewalls to enable firewall policies. dnsConfig: DNSConfig contains clusterDNS config for this cluster. enableCiliumClusterwideNetworkPolicy: Whether CiliumClusterwideNetworkPolicy is enabled on this cluster. enableFqdnNetworkPolicy: Whether FQDN Network Policy is enabled on this cluster. enableIntraNodeVisibility: Whether Intra-node visibility is enabled for this cluster. This makes same node pod to pod traffic visible for VPC network. enableL4ilbSubsetting: Whether L4ILB Subsetting is enabled for this cluster. enableMultiNetworking: Whether multi-networking is enabled for this cluster. gatewayApiConfig: GatewayAPIConfig contains the desired config of Gateway API on this cluster. inTransitEncryptionConfig: Specify the details of in-transit encryption. Now named inter-node transparent encryption. network: Output only. The relative name of the Google Compute Engine [network](https://cloud.google.com/compute/docs/networks-and- firewalls#networks) to which the cluster is connected. Example: projects/my-project/global/networks/my-network networkPerformanceConfig: Network bandwidth tier configuration. privateIpv6GoogleAccess: The desired state of IPv6 connectivity to Google Services. By default, no private IPv6 access to or from Google Services (all access will be via IPv4) serviceExternalIpsConfig: ServiceExternalIPsConfig specifies if services with externalIPs field are blocked or not. subnetwork: Output only. The relative name of the Google Compute Engine [subnetwork](https://cloud.google.com/compute/docs/vpc) to which the cluster is connected. Example: projects/my-project/regions/us- central1/subnetworks/my-subnet c,\rSrSrSrSrSrSrSrSr Sr g ) -NetworkConfig.DatapathProviderValueValuesEnumiaThe desired datapath provider for this cluster. By default, uses the IPTables-based kube-proxy implementation. Values: DATAPATH_PROVIDER_UNSPECIFIED: Default value. LEGACY_DATAPATH: Use the IPTables implementation based on kube-proxy. ADVANCED_DATAPATH: Use the eBPF based GKE Dataplane V2 with additional features. See the [GKE Dataplane V2 documentation](https://cloud.google.com/kubernetes-engine/docs/how- to/dataplane-v2) for more. MIGRATE_TO_ADVANCED_DATAPATH: Cluster has some existing nodes but new nodes should use ADVANCED_DATAPATH. MIGRATE_TO_LEGACY_DATAPATH: Cluster has some existing nodes but new nodes should use LEGACY_DATAPATH. rr r rrrNrYrr"r#DatapathProviderValueValuesEnumrzs&%&!O#$ !"r"r{c$\rSrSrSrSrSrSrSrg)6NetworkConfig.InTransitEncryptionConfigValueValuesEnumiaSpecify the details of in-transit encryption. Now named inter-node transparent encryption. Values: IN_TRANSIT_ENCRYPTION_CONFIG_UNSPECIFIED: Unspecified, will be inferred as default - IN_TRANSIT_ENCRYPTION_UNSPECIFIED. IN_TRANSIT_ENCRYPTION_DISABLED: In-transit encryption is disabled. IN_TRANSIT_ENCRYPTION_INTER_NODE_TRANSPARENT: Data in-transit is encrypted using inter-node transparent encryption. rr r rNrbrr"r#(InTransitEncryptionConfigValueValuesEnumr}s 01,%&"340r"r~c(\rSrSrSrSrSrSrSrSr g) 4NetworkConfig.PrivateIpv6GoogleAccessValueValuesEnumiaThe desired state of IPv6 connectivity to Google Services. By default, no private IPv6 access to or from Google Services (all access will be via IPv4) Values: PRIVATE_IPV6_GOOGLE_ACCESS_UNSPECIFIED: Default value. Same as DISABLED PRIVATE_IPV6_GOOGLE_ACCESS_DISABLED: No private access to or from Google Services PRIVATE_IPV6_GOOGLE_ACCESS_TO_GOOGLE: Enables private IPv6 access to Google Services from GKE PRIVATE_IPV6_GOOGLE_ACCESS_BIDIRECTIONAL: Enables private IPv6 access to and from Google Services rr r rrNrirr"r#&PrivateIpv6GoogleAccessValueValuesEnumrs! ./**+'+,(/0,r"rr r ryrrrzrrOrQrSrUrWr|rYr[r]rLr_rarrcrerN) rrrrrrr0r{r~rr2datapathProviderrdefaultEnablePrivateNodesrdefaultSnatStatus!disableL4LbFirewallReconciliation dnsConfig$enableCiliumClusterwideNetworkPolicyenableFqdnNetworkPolicyenableIntraNodeVisibilityenableL4ilbSubsettingenableMultiNetworkinggatewayApiConfiginTransitEncryptionConfigrr8networkPerformanceConfigprivateIpv6GoogleAccessserviceExternalIpsConfigr4r!rr"r#rrVss8t# #, 5 51y~~1&(()JAN'44Q7,,-@!D&/&<&C'112\^`a  ! !" %'&334UWYZ%//0XZ\]&334NPRS$$R(*r"rch\rSrSrSr"SS\R 5r\R"SS5r Sr g)NetworkPerformanceConfigiaConfiguration of all network bandwidth tiers Enums: TotalEgressBandwidthTierValueValuesEnum: Specifies the total network bandwidth tier for the NodePool. Fields: totalEgressBandwidthTier: Specifies the total network bandwidth tier for the NodePool. c \rSrSrSrSrSrSrg)@NetworkPerformanceConfig.TotalEgressBandwidthTierValueValuesEnumizSpecifies the total network bandwidth tier for the NodePool. Values: TIER_UNSPECIFIED: Default value TIER_1: Higher bandwidth, actual values based on VM size. rr rNrOrr"r#rRrs  Fr"rRr rNrSrr"r#rrs.  '001Z\]^r"rc\rSrSrSr"SS\R 5r\R"S5r \R"SS5r Sr g) ria?Configuration options for the NetworkPolicy feature. https://kubernetes.io/docs/concepts/services-networking/networkpolicies/ Enums: ProviderValueValuesEnum: The selected network policy provider. Fields: enabled: Whether network policy is enabled on the cluster. provider: The selected network policy provider. c \rSrSrSrSrSrSrg)%NetworkPolicy.ProviderValueValuesEnumizpThe selected network policy provider. Values: PROVIDER_UNSPECIFIED: Not set CALICO: Tigera (Calico Felix). rr rN)rrrrrrCALICOr!rr"r#ProviderValueValuesEnumrs  Fr"rr r rN) rrrrrrr0rrrr2providerr!rr"r#rrs<    " "1 %'  !:A >(r"rc<\rSrSrSr\R "S5rSrg)r\izConfiguration for NetworkPolicy. This only tracks whether the addon is enabled or not on the Master, it does not track whether network policy is enabled for the nodes. Fields: disabled: Whether NetworkPolicy is enabled for this cluster. r rNrrr"r#r\r\s # #A &(r"r\c:\rSrSrSr\R "SSS9rSrg)rizCollection of Compute Engine network tags that can be applied to a node's underlying VM instance. Fields: tags: List of network tags. r Tr.rN) rrrrrrrr7r!rr"r#rrs   q4 0$r"rch\rSrSrSr"SS\R 5r\R"SS5r Sr g)ri&zNetworkTierConfig contains network tier information. Enums: NetworkTierValueValuesEnum: Network tier configuration. Fields: networkTier: Network tier configuration. c(\rSrSrSrSrSrSrSrSr g) ,NetworkTierConfig.NetworkTierValueValuesEnumi0aNetwork tier configuration. Values: NETWORK_TIER_UNSPECIFIED: By default, use project-level configuration. When unspecified, the behavior defaults to NETWORK_TIER_DEFAULT. For cluster updates, this implies no action (no-op). NETWORK_TIER_DEFAULT: Default network tier. Use project-level configuration. User can specify this value, meaning they want to keep the same behaviour as before cluster level network tier configuration is introduced. This field ensures backward compatibility for the network tier of cluster resources, such as node pools and load balancers, for their external IP addresses. NETWORK_TIER_PREMIUM: Premium network tier. NETWORK_TIER_STANDARD: Standard network tier. rr r rrN) rrrrrNETWORK_TIER_UNSPECIFIEDNETWORK_TIER_DEFAULTNETWORK_TIER_PREMIUMNETWORK_TIER_STANDARDr!rr"r#NetworkTierValueValuesEnumr0s! !r"rr rN) rrrrrrr0rr2 networkTierr!rr"r#rr&s,9>>*##$@!D+r"rc\rSrSrSr"SS\R 5r\R"S5r \R"SS5r \R"SSS 9r S r g ) NodeAffinityiHaSpecifies the NodeAffinity key, values, and affinity operator according to [shared sole tenant node group affinities](https://cloud.google.com/compute/docs/nodes/sole-tenant- nodes#node_affinity_and_anti-affinity). Enums: OperatorValueValuesEnum: Operator for NodeAffinity. Fields: key: Key for NodeAffinity. operator: Operator for NodeAffinity. values: Values for NodeAffinity. c$\rSrSrSrSrSrSrSrg)$NodeAffinity.OperatorValueValuesEnumiWzOperator for NodeAffinity. Values: OPERATOR_UNSPECIFIED: Invalid or unspecified affinity operator. IN: Affinity operator. NOT_IN: Anti-affinity operator. rr r rN) rrrrrOPERATOR_UNSPECIFIEDINNOT_INr!rr"r#OperatorValueValuesEnumrWs B Fr"rr r rTr.rN)rrrrrrr0rrrEr2operatorvaluesr!rr"r#rrHsN     a #  !:A >(  T 2&r"rc\rSrSrSr"SS\R 5r"SS\R 5r\ R"S5"SS \R55r \ R"S5"S S \R55r \ R"S5"S S \R55r\R"SSSS9r\R"SS5r\R"SS5r\R&"S5r\R"SS5r\R&"S5r\R"SS5r\R0"S\R2R4S9r\R&"S5r\R:"SS5r\R>"S 5r \R"S!S"5r!\R"S#S$5r"\R>"S%5r#\R"S&S'5r$\R"S(S)5r%\R"S*S+5r&\R&"S,5r'\R"S-S.5r(\R"S S/5r)\R"S0S15r*\R"S2S35r+\R0"S4\R2R4S9r,\R:"SS55r-\R"S6S75r.\R"S8S95r/\R&"S:5r0\R&"S;5r1\R"S S<5r2\R&"S=5r3\R&"S>5r4\R"S?S@5r5\R&"SASS9r6\R>"SB5r7\R"SCSD5r8\R"S SE5r9\R"SFSG5r:\R"SHSI5r;\R"SJSK5r<\R"SLSMSS9r=\R&"SN5r>\R"SOSP5r?\R"SQSR5r@\R>"SS5rA\R&"STSS9rB\R&"SUSS9rC\R"SVSWSS9rD\R"SXSY5rE\R"SZS[5rFS\rGg])^riha+Parameters that describe the nodes in a cluster. GKE Autopilot clusters do not recognize parameters in `NodeConfig`. Use AutoprovisioningNodePoolDefaults instead. Enums: EffectiveCgroupModeValueValuesEnum: Output only. effective_cgroup_mode is the cgroup mode actually used by the node pool. It is determined by the cgroup mode specified in the LinuxNodeConfig or the default cgroup mode based on the cluster creation version. LocalSsdEncryptionModeValueValuesEnum: Specifies which method should be used for encrypting the Local SSDs attached to the node. Messages: LabelsValue: The map of Kubernetes labels (key/value pairs) to be applied to each node. These will added in addition to any default label(s) that Kubernetes may apply to the node. In case of conflict in label keys, the applied set may differ depending on the Kubernetes version -- it's best to assume the behavior is undefined and conflicts should be avoided. For more information, including usage and the valid values, see: https://kubernetes.io/docs/concepts/overview/working-with- objects/labels/ MetadataValue: The metadata key/value pairs assigned to instances in the cluster. Keys must conform to the regexp `[a-zA-Z0-9-_]+` and be less than 128 bytes in length. These are reflected as part of a URL in the metadata server. Additionally, to avoid ambiguity, keys must not conflict with any other metadata keys for the project or be one of the reserved keys: - "cluster-location" - "cluster-name" - "cluster-uid" - "configure-sh" - "containerd-configure-sh" - "enable-os-login" - "gci- ensure-gke-docker" - "gci-metrics-enabled" - "gci-update-strategy" - "instance-template" - "kube-env" - "startup-script" - "user-data" - "disable-address-manager" - "windows-startup-script-ps1" - "common-psm1" - "k8s-node-setup-psm1" - "install-ssh-psm1" - "user-profile-psm1" Values are free-form strings, and only have meaning as interpreted by the image running in the instance. The only restriction placed on them is that each value's size must be less than or equal to 32 KB. The total size of all keys and values must be less than 512 KB. ResourceLabelsValue: The resource labels for the node pool to use to annotate any related Google Compute Engine resources. Fields: accelerators: A list of hardware accelerators to be attached to each node. See https://cloud.google.com/compute/docs/gpus for more information about support for GPUs. advancedMachineFeatures: Advanced features for the Compute Engine VM. bootDisk: The boot disk configuration for the node pool. bootDiskKmsKey: The Customer Managed Encryption Key used to encrypt the boot disk attached to each node in the node pool. This should be of the form projects/[KEY_PROJECT_ID]/locations/[LOCATION]/keyRings/[RING_NAME] /cryptoKeys/[KEY_NAME]. For more information about protecting resources with Cloud KMS Keys please see: https://cloud.google.com/compute/docs/disks/customer-managed-encryption confidentialNodes: Confidential nodes config. All the nodes in the node pool will be Confidential VM once enabled. consolidationDelay: Consolidation delay defines duration after which the Cluster Autoscaler can scale down underutilized nodes. If not set, nodes are scaled down by default behavior, i.e. according to the chosen autoscaling profile. containerdConfig: Parameters for containerd customization. diskSizeGb: Size of the disk attached to each node, specified in GB. The smallest allowed disk size is 10GB. If unspecified, the default disk size is 100GB. diskType: Type of the disk attached to each node (e.g. 'pd-standard', 'pd- ssd' or 'pd-balanced') If unspecified, the default disk type is 'pd- standard' effectiveCgroupMode: Output only. effective_cgroup_mode is the cgroup mode actually used by the node pool. It is determined by the cgroup mode specified in the LinuxNodeConfig or the default cgroup mode based on the cluster creation version. enableConfidentialStorage: Optional. Reserved for future use. ephemeralStorageLocalSsdConfig: Parameters for the node ephemeral storage using Local SSDs. If unspecified, ephemeral storage is backed by the boot disk. fastSocket: Enable or disable NCCL fast socket for the node pool. flexStart: Flex Start flag for enabling Flex Start VM. gcfsConfig: Google Container File System (image streaming) configs. gpuDirectConfig: The configuration for GPU Direct gvnic: Enable or disable gvnic in the node pool. imageType: The image type to use for this node. Note that for a given image type, the latest version of it will be used. Please see https://cloud.google.com/kubernetes-engine/docs/concepts/node-images for available image types. kubeletConfig: Node kubelet configs. labels: The map of Kubernetes labels (key/value pairs) to be applied to each node. These will added in addition to any default label(s) that Kubernetes may apply to the node. In case of conflict in label keys, the applied set may differ depending on the Kubernetes version -- it's best to assume the behavior is undefined and conflicts should be avoided. For more information, including usage and the valid values, see: https://kubernetes.io/docs/concepts/overview/working-with- objects/labels/ linuxNodeConfig: Parameters that can be configured on Linux nodes. localNvmeSsdBlockConfig: Parameters for using raw-block Local NVMe SSDs. localSsdCount: The number of local SSD disks to be attached to the node. The limit for this value is dependent upon the maximum number of disks available on a machine per zone. See: https://cloud.google.com/compute/docs/disks/local-ssd for more information. localSsdEncryptionMode: Specifies which method should be used for encrypting the Local SSDs attached to the node. loggingConfig: Logging configuration. lustreConfig: Optional. Configuration for Lustre settings on the node pool. machineType: The name of a Google Compute Engine [machine type](https://cloud.google.com/compute/docs/machine-types) If unspecified, the default machine type is `e2-medium`. maxRunDuration: The maximum duration for the nodes to exist. If unspecified, the nodes can exist indefinitely. metadata: The metadata key/value pairs assigned to instances in the cluster. Keys must conform to the regexp `[a-zA-Z0-9-_]+` and be less than 128 bytes in length. These are reflected as part of a URL in the metadata server. Additionally, to avoid ambiguity, keys must not conflict with any other metadata keys for the project or be one of the reserved keys: - "cluster-location" - "cluster-name" - "cluster-uid" - "configure-sh" - "containerd-configure-sh" - "enable-os-login" - "gci- ensure-gke-docker" - "gci-metrics-enabled" - "gci-update-strategy" - "instance-template" - "kube-env" - "startup-script" - "user-data" - "disable-address-manager" - "windows-startup-script-ps1" - "common-psm1" - "k8s-node-setup-psm1" - "install-ssh-psm1" - "user-profile-psm1" Values are free-form strings, and only have meaning as interpreted by the image running in the instance. The only restriction placed on them is that each value's size must be less than or equal to 32 KB. The total size of all keys and values must be less than 512 KB. minCpuPlatform: Minimum CPU platform to be used by this instance. The instance may be scheduled on the specified or newer CPU platform. Applicable values are the friendly names of CPU platforms, such as `minCpuPlatform: "Intel Haswell"` or `minCpuPlatform: "Intel Sandy Bridge"`. For more information, read [how to specify min CPU platform](https://cloud.google.com/compute/docs/instances/specify-min- cpu-platform) nodeGroup: Setting this field will assign instances of this pool to run on the specified node group. This is useful for running workloads on [sole tenant nodes](https://cloud.google.com/compute/docs/nodes/sole-tenant- nodes). nodeImageConfig: The node image configuration to use for this node pool. Note that this is only applicable for node pools using image_type=CUSTOM. oauthScopes: The set of Google API scopes to be made available on all of the node VMs under the "default" service account. The following scopes are recommended, but not required, and by default are not included: * `https://www.googleapis.com/auth/compute` is required for mounting persistent storage on your nodes. * `https://www.googleapis.com/auth/devstorage.read_only` is required for communicating with **gcr.io** (the [Artifact Registry](https://cloud.google.com/artifact-registry/)). If unspecified, no scopes are added, unless Cloud Logging or Cloud Monitoring are enabled, in which case their required scopes will be added. preemptible: Whether the nodes are created as preemptible VM instances. See: https://cloud.google.com/compute/docs/instances/preemptible for more information about preemptible VM instances. reservationAffinity: The optional reservation affinity. Setting this field will apply the specified [Zonal Compute Reservation](https://cloud.google.com/compute/docs/instances/reserving- zonal-resources) to this node pool. resourceLabels: The resource labels for the node pool to use to annotate any related Google Compute Engine resources. resourceManagerTags: A map of resource manager tag keys and values to be attached to the nodes. sandboxConfig: Sandbox configuration for this node. secondaryBootDiskUpdateStrategy: Secondary boot disk update strategy. secondaryBootDisks: List of secondary boot disks attached to the nodes. serviceAccount: The Google Cloud Platform Service Account to be used by the node VMs. Specify the email address of the Service Account; otherwise, if no Service Account is specified, the "default" service account is used. shieldedInstanceConfig: Shielded Instance options. soleTenantConfig: Parameters for node pools to be backed by shared sole tenant node groups. spot: Spot flag for enabling Spot VM, which is a rebrand of the existing preemptible flag. storagePools: List of Storage Pools where boot disks are provisioned. tags: The list of instance tags applied to all nodes. Tags are used to identify valid sources or targets for network firewalls and are specified by the client during cluster or node pool creation. Each tag within the list must comply with RFC1035. taints: List of kubernetes taints to be applied to each node. For more information, including usage and the valid values, see: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/ windowsNodeConfig: Parameters that can be configured on Windows nodes. workloadMetadataConfig: The workload metadata configuration for this node. c$\rSrSrSrSrSrSrSrg)-NodeConfig.EffectiveCgroupModeValueValuesEnumiaOutput only. effective_cgroup_mode is the cgroup mode actually used by the node pool. It is determined by the cgroup mode specified in the LinuxNodeConfig or the default cgroup mode based on the cluster creation version. Values: EFFECTIVE_CGROUP_MODE_UNSPECIFIED: EFFECTIVE_CGROUP_MODE_UNSPECIFIED means the cgroup configuration for the node pool is unspecified, i.e. the node pool is a Windows node pool. EFFECTIVE_CGROUP_MODE_V1: CGROUP_MODE_V1 means the node pool is configured to use cgroupv1 for the cgroup configuration. EFFECTIVE_CGROUP_MODE_V2: CGROUP_MODE_V2 means the node pool is configured to use cgroupv2 for the cgroup configuration. rr r rN) rrrrr!EFFECTIVE_CGROUP_MODE_UNSPECIFIEDEFFECTIVE_CGROUP_MODE_V1EFFECTIVE_CGROUP_MODE_V2r!rr"r#"EffectiveCgroupModeValueValuesEnumrs )*%  r"rc$\rSrSrSrSrSrSrSrg)0NodeConfig.LocalSsdEncryptionModeValueValuesEnumi1awSpecifies which method should be used for encrypting the Local SSDs attached to the node. Values: LOCAL_SSD_ENCRYPTION_MODE_UNSPECIFIED: The given node will be encrypted using keys managed by Google infrastructure and the keys will be deleted when the node is deleted. STANDARD_ENCRYPTION: The given node will be encrypted using keys managed by Google infrastructure and the keys will be deleted when the node is deleted. EPHEMERAL_KEY_ENCRYPTION: The given node will opt-in for using ephemeral key for encryption of Local SSDs. The Local SSDs will not be able to recover data in case of node crash. rr r rN) rrrrr%LOCAL_SSD_ENCRYPTION_MODE_UNSPECIFIEDSTANDARD_ENCRYPTIONEPHEMERAL_KEY_ENCRYPTIONr!rr"r#%LocalSsdEncryptionModeValueValuesEnumr1s -.) r"rrdcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) NodeConfig.LabelsValueiDaThe map of Kubernetes labels (key/value pairs) to be applied to each node. These will added in addition to any default label(s) that Kubernetes may apply to the node. In case of conflict in label keys, the applied set may differ depending on the Kubernetes version -- it's best to assume the behavior is undefined and conflicts should be avoided. For more information, including usage and the valid values, see: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ Messages: AdditionalProperty: An additional property for a LabelsValue object. Fields: additionalProperties: Additional properties of type LabelsValue c`\rSrSrSr\R "S5r\R "S5rSr g))NodeConfig.LabelsValue.AdditionalPropertyiUAn additional property for a LabelsValue object. Fields: key: Name of the additional property. value: A string attribute. r r rNrjrr"r#rlrUrmr"rlr Tr.rNrnrr"r# LabelsValuerDs2  'Y.. '%112FTXYr"rcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) NodeConfig.MetadataValueibaThe metadata key/value pairs assigned to instances in the cluster. Keys must conform to the regexp `[a-zA-Z0-9-_]+` and be less than 128 bytes in length. These are reflected as part of a URL in the metadata server. Additionally, to avoid ambiguity, keys must not conflict with any other metadata keys for the project or be one of the reserved keys: - "cluster-location" - "cluster-name" - "cluster-uid" - "configure-sh" - "containerd-configure-sh" - "enable-os-login" - "gci-ensure-gke-docker" - "gci-metrics-enabled" - "gci-update-strategy" - "instance-template" - "kube-env" - "startup-script" - "user-data" - "disable-address-manager" - "windows-startup-script-ps1" - "common-psm1" - "k8s-node-setup-psm1" - "install-ssh-psm1" - "user-profile-psm1" Values are free-form strings, and only have meaning as interpreted by the image running in the instance. The only restriction placed on them is that each value's size must be less than or equal to 32 KB. The total size of all keys and values must be less than 512 KB. Messages: AdditionalProperty: An additional property for a MetadataValue object. Fields: additionalProperties: Additional properties of type MetadataValue c`\rSrSrSr\R "S5r\R "S5rSr g)+NodeConfig.MetadataValue.AdditionalPropertyi{zAn additional property for a MetadataValue object. Fields: key: Name of the additional property. value: A string attribute. r r rNrjrr"r#rlr{rmr"rlr Tr.rNrnrr"r# MetadataValuerbs2. 'Y.. '%112FTXYr"rcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) NodeConfig.ResourceLabelsValueiaThe resource labels for the node pool to use to annotate any related Google Compute Engine resources. Messages: AdditionalProperty: An additional property for a ResourceLabelsValue object. Fields: additionalProperties: Additional properties of type ResourceLabelsValue c`\rSrSrSr\R "S5r\R "S5rSr g)1NodeConfig.ResourceLabelsValue.AdditionalPropertyirir r rNrjrr"r#rlrrmr"rlr Tr.rNrnrr"r#rprrqr"rpr r Tr.rr r)rrr|rrOrxrQrSrrUrWrYrr[rr]r_r}rarrc VirtualNICrer rrhrrrrrrrrrrrrrrrrrrrrReservationAffinityrrrr SandboxConfigrSecondaryBootDiskUpdateStrategyrSecondaryBootDiskrrrr&SoleTenantConfigrrrr NodeTaintrWindowsNodeConfigrWorkloadMetadataConfigrrN)Hrrrrrrr0rrrrrorrrpr acceleratorsadvancedMachineFeaturesbootDiskrrrconsolidationDelaycontainerdConfigrrrrrr2effectiveCgroupModerenableConfidentialStorageephemeralStorageLocalSsdConfig fastSocket flexStart gcfsConfiggpuDirectConfiggvnicr kubeletConfiglabelslinuxNodeConfiglocalNvmeSsdBlockConfigrlocalSsdEncryptionModer lustreConfig machineTypemaxRunDurationmetadatar nodeGroupnodeImageConfigr preemptiblereservationAffinityr)resourceManagerTags sandboxConfigsecondaryBootDiskUpdateStrategysecondaryBootDisksrrsoleTenantConfigspot storagePoolsr7taintswindowsNodeConfigworkloadMetadataConfigr!rr"r#rrhs^sj!9>>!&!inn!& !!"89ZI%%Z:Z: !!"89#Zi''#Z:#ZJ !!"89ZI--Z:Z2''(;QN,%223LaP  # #J 2(((+.,,-@!D ,,Q/++,>B%%a1B1B1H1HI*  " "1 %(!++,PRTU'44R8#,#9#9:Z\^#_ %%lB7*$$R()%%lB7***+C/%%b48+&&r*+!../DbI))*?D.!../DbI(("=-$-$:$:;\^`$a! --.A2PTU((,.$112JBO++,>C    #$&&rD9,   rD 1$  ! !+rD A&,,-@"E$112JBOr"rc\rSrSrSr\R "SS5r\R "SS5r\R "SS5r \R "S S 5r S r g ) NodeConfigDefaultsiaSubset of NodeConfig message that has defaults. Fields: containerdConfig: Parameters for containerd customization. gcfsConfig: GCFS (Google Container File System, also known as Riptide) options. loggingConfig: Logging configuration for node pools. nodeKubeletConfig: NodeKubeletConfig controls the defaults for new node- pools. Currently only `insecure_kubelet_readonly_port_enabled` can be set here. rxr r}r rrrrrN) rrrrrrrrrrnodeKubeletConfigr!rr"r#rrsV ++,>B%%lA6*(()@!D-,,-@!Dr"rc\rSrSrSr\R "S5r\R "S5r\R"S5r Sr g)NodeDrainConfigia_NodeDrainConfig contains the node drain related configurations for this nodepool. Fields: graceTerminationDuration: The duration of the grace termination period for node drain. pdbTimeoutDuration: The duration of the PDB timeout period for node drain. respectPdbDuringNodePoolDeletion: Whether to respect PDB during node pool deletion. r r rrN) rrrrrrrgraceTerminationDurationpdbTimeoutDurationr respectPdbDuringNodePoolDeletionr!rr"r#rrs< '2215 ,,Q/%.%;%;A%>"r"rch\rSrSrSr"SS\R 5r\R"SS5r Sr g)rizConfiguration for kernel module loading on nodes. Enums: PolicyValueValuesEnum: Set the node module loading policy for nodes in the node pool. Fields: policy: Set the node module loading policy for nodes in the node pool. c$\rSrSrSrSrSrSrSrg)-NodeKernelModuleLoading.PolicyValueValuesEnumiapSet the node module loading policy for nodes in the node pool. Values: POLICY_UNSPECIFIED: Default behavior. GKE selects the image based on node type. For CPU and TPU nodes, the image will not allow loading external kernel modules. For GPU nodes, the image will allow loading any module, whether it is signed or not. ENFORCE_SIGNED_MODULES: Enforced signature verification: Node pools will use a Container-Optimized OS image configured to allow loading of *Google-signed* external kernel modules. Loadpin is enabled but configured to exclude modules, and kernel module signature checking is enforced. DO_NOT_ENFORCE_SIGNED_MODULES: Mirrors existing DEFAULT behavior: For CPU and TPU nodes, the image will not allow loading external kernel modules. For GPU nodes, the image will allow loading any module, whether it is signed or not. rr r rN) rrrrrPOLICY_UNSPECIFIEDENFORCE_SIGNED_MODULESDO_NOT_ENFORCE_SIGNED_MODULESr!rr"r#PolicyValueValuesEnumrs"$%!r"rr rN) rrrrrrr0rr2r\r!rr"r#rrs,&inn&,   6 :&r"rc\rSrSrSr\R "SSS9r\R"S\RRS9r \R "S5r \R"S 5r\R "S 5r\R "S 5r\R"S \RRS9r\R$"S S5r\R$"SS5r\R$"SS5r\R"S\RRS9r\R"S\RRS9r\R "S5r\R "S5r\R"S5r\R"S\RRS9r\R$"SS5r\R"S5r\R"S5r\R"S5r\R$"SS5r S r!g!)"riaNode kubelet configs. Fields: allowedUnsafeSysctls: Optional. Defines a comma-separated allowlist of unsafe sysctls or sysctl patterns (ending in `*`). The unsafe namespaced sysctl groups are `kernel.shm*`, `kernel.msg*`, `kernel.sem`, `fs.mqueue.*`, and `net.*`. Leaving this allowlist empty means they cannot be set on Pods. To allow certain sysctls or sysctl patterns to be set on Pods, list them separated by commas. For example: `kernel.msg*,net.ipv4.route.min_pmtu`. See https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/ for more details. containerLogMaxFiles: Optional. Defines the maximum number of container log files that can be present for a container. See https://kubernetes.io/docs/concepts/cluster-administration/logging/#log- rotation The value must be an integer between 2 and 10, inclusive. The default value is 5 if unspecified. containerLogMaxSize: Optional. Defines the maximum size of the container log file before it is rotated. See https://kubernetes.io/docs/concepts/cluster-administration/logging/#log- rotation Valid format is positive number + unit, e.g. 100Ki, 10Mi. Valid units are Ki, Mi, Gi. The value must be between 10Mi and 500Mi, inclusive. Note that the total container log size (container_log_max_size * container_log_max_files) cannot exceed 1% of the total storage of the node, to avoid disk pressure caused by log files. The default value is 10Mi if unspecified. cpuCfsQuota: Enable CPU CFS quota enforcement for containers that specify CPU limits. This option is enabled by default which makes kubelet use CFS quota (https://www.kernel.org/doc/Documentation/scheduler/sched- bwc.txt) to enforce container CPU limits. Otherwise, CPU limits will not be enforced at all. Disable this option to mitigate CPU throttling problems while still having your pods to be in Guaranteed QoS class by specifying the CPU limits. The default value is 'true' if unspecified. cpuCfsQuotaPeriod: Set the CPU CFS quota period value 'cpu.cfs_period_us'. The string must be a sequence of decimal numbers, each with optional fraction and a unit suffix, such as "300ms". Valid time units are "ns", "us" (or "\xb5s"), "ms", "s", "m", "h". The value must be a positive duration between 1ms and 1 second, inclusive. cpuManagerPolicy: Control the CPU management policy on the node. See https://kubernetes.io/docs/tasks/administer-cluster/cpu-management- policies/ The following values are allowed. * "none": the default, which represents the existing scheduling behavior. * "static": allows pods with certain resource characteristics to be granted increased CPU affinity and exclusivity on the node. The default value is 'none' if unspecified. evictionMaxPodGracePeriodSeconds: Optional. eviction_max_pod_grace_period_seconds is the maximum allowed grace period (in seconds) to use when terminating pods in response to a soft eviction threshold being met. This value effectively caps the Pod's terminationGracePeriodSeconds value during soft evictions. Default: 0. Range: [0, 300]. evictionMinimumReclaim: Optional. eviction_minimum_reclaim is a map of signal names to quantities that defines minimum reclaims, which describe the minimum amount of a given resource the kubelet will reclaim when performing a pod eviction while that resource is under pressure. evictionSoft: Optional. eviction_soft is a map of signal names to quantities that defines soft eviction thresholds. Each signal is compared to its corresponding threshold to determine if a pod eviction should occur. evictionSoftGracePeriod: Optional. eviction_soft_grace_period is a map of signal names to quantities that defines grace periods for each soft eviction signal. The grace period is the amount of time that a pod must be under pressure before an eviction occurs. imageGcHighThresholdPercent: Optional. Defines the percent of disk usage after which image garbage collection is always run. The percent is calculated as this field value out of 100. The value must be between 10 and 85, inclusive and greater than image_gc_low_threshold_percent. The default value is 85 if unspecified. imageGcLowThresholdPercent: Optional. Defines the percent of disk usage before which image garbage collection is never run. Lowest disk usage to garbage collect to. The percent is calculated as this field value out of 100. The value must be between 10 and 85, inclusive and smaller than image_gc_high_threshold_percent. The default value is 80 if unspecified. imageMaximumGcAge: Optional. Defines the maximum age an image can be unused before it is garbage collected. The string must be a sequence of decimal numbers, each with optional fraction and a unit suffix, such as "300s", "1.5h", and "2h45m". Valid time units are "ns", "us" (or "\xb5s"), "ms", "s", "m", "h". The value must be a positive duration greater than image_minimum_gc_age or "0s". The default value is "0s" if unspecified, which disables this field, meaning images won't be garbage collected based on being unused for too long. imageMinimumGcAge: Optional. Defines the minimum age for an unused image before it is garbage collected. The string must be a sequence of decimal numbers, each with optional fraction and a unit suffix, such as "300s", "1.5h", and "2h45m". Valid time units are "ns", "us" (or "\xb5s"), "ms", "s", "m", "h". The value must be a positive duration less than or equal to 2 minutes. The default value is "2m0s" if unspecified. insecureKubeletReadonlyPortEnabled: Enable or disable Kubelet read only port. maxParallelImagePulls: Optional. Defines the maximum number of image pulls in parallel. The range is 2 to 5, inclusive. The default value is 2 or 3 depending on the disk type. See https://kubernetes.io/docs/concepts/containers/images/#maximum-parallel- image-pulls for more details. memoryManager: Optional. Controls NUMA-aware Memory Manager configuration on the node. For more information, see: https://kubernetes.io/docs/tasks/administer-cluster/memory-manager/ nodeSwapSizeGib: Optional. Defines Swap memory size available to container workloads. To enable Swap, set a positive integer which does not exceed 50% of the boot disk size. The swap file is placed on boot disk by default. Swap_size is subtracted from the boot disk size when calculating reserved ephemeral storage https://cloud.google.com/kubernetes-engine/docs/concepts/plan-node- sizes#local_ephemeral_storage_reservation. System pods cannot use swap. Swap is not supported on all TPU machines and some GPU (A4X, A4, A3) machines. Swap is not supported on CgroupV1. Swap is disabled if the field is unspecified or set to 0. podPidsLimit: Set the Pod PID limits. See https://kubernetes.io/docs/concepts/policy/pid-limiting/#pod-pid-limits Controls the maximum number of processes allowed to run in a pod. The value must be greater than or equal to 1024 and less than 4194304. singleProcessOomKill: Optional. Defines whether to enable single process OOM killer. If true, will prevent the memory.oom.group flag from being set for container cgroups in cgroups v2. This causes processes in the container to be OOM killed individually instead of as a group. topologyManager: Optional. Controls Topology Manager configuration on the node. For more information, see: https://kubernetes.io/docs/tasks/administer-cluster/topology-manager/ r Tr.r rrrrrOrQrrSrrUrrWrYr[r]r_rarcr[rer rhrTopologyManagerrrN)"rrrrrrrallowedUnsafeSysctlsrrrcontainerLogMaxFilescontainerLogMaxSizer cpuCfsQuotacpuCfsQuotaPeriodcpuManagerPolicy evictionMaxPodGracePeriodSecondsrevictionMinimumReclaim evictionSoftevictionSoftGracePeriodimageGcHighThresholdPercentimageGcLowThresholdPercentimageMaximumGcAgeimageMinimumGcAgermaxParallelImagePulls memoryManagernodeSwapSizeGib podPidsLimitsingleProcessOomKilltopologyManagerr!rr"r#rrsvp#..q4@"//9;L;L;R;RS!--a0&&q)+++A.**1-%.%;%;AyGXGXG^G^%_"$112JAN''(91=,%223H"M ) 6 6r9CTCTCZCZ [(55b)BSBSBYBYZ++B/++B/'0'='=b'A$#00Y=N=N=T=TU(("=-**2./''+,"//3**+B.r"rc\rSrSrSr\R "S5r\R"SSSS9r \R"SS SS9r \R"S 5r \R"S 5r \R"S S 5r\R"SS5r\R"SS5r\R "S5r\R$"S5r\R "S5r\R "S5rSrg)NodeNetworkConfigiadParameters for node pool-level network config. Fields: acceleratorNetworkProfile: Immutable. The accelerator network profile for the node pool. For now the only valid value is "auto". If specified, the network configuration of the nodes in this node pool will be managed by this profile for the supported machine types, zone, etc. additionalNodeNetworkConfigs: We specify the additional node networks for this node pool using this list. Each node network corresponds to an additional interface additionalPodNetworkConfigs: We specify the additional pod networks for this node pool using this list. Each pod network corresponds to an additional alias IP range for the node createPodRange: Input only. Whether to create a new range for pod IPs in this node pool. Defaults are provided for `pod_range` and `pod_ipv4_cidr_block` if they are not specified. If neither `create_pod_range` or `pod_range` are specified, the cluster-level default (`ip_allocation_policy.cluster_ipv4_cidr_block`) is used. Only applicable if `ip_allocation_policy.use_ip_aliases` is true. This field cannot be changed after the node pool has been created. enablePrivateNodes: Whether nodes have internal IP addresses only. If enable_private_nodes is not specified, then the value is derived from Cluster.NetworkConfig.default_enable_private_nodes networkPerformanceConfig: Network bandwidth tier configuration. networkTierConfig: Output only. The network tier configuration for the node pool inherits from the cluster-level configuration and remains immutable throughout the node pool's lifecycle, including during upgrades. podCidrOverprovisionConfig: [PRIVATE FIELD] Pod CIDR size overprovisioning config for the nodepool. Pod CIDR size per node depends on max_pods_per_node. By default, the value of max_pods_per_node is rounded off to next power of 2 and we then double that to get the size of pod CIDR block per node. Example: max_pods_per_node of 30 would result in 64 IPs (/26). This config can disable the doubling of IPs (we still round off to next power of 2) Example: max_pods_per_node of 30 will result in 32 IPs (/27) when overprovisioning is disabled. podIpv4CidrBlock: The IP address range for pod IPs in this node pool. Only applicable if `create_pod_range` is true. Set to blank to have a range chosen with the default size. Set to /netmask (e.g. `/14`) to have a range chosen with a specific netmask. Set to a [CIDR](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) notation (e.g. `10.96.0.0/14`) to pick a specific range to use. Only applicable if `ip_allocation_policy.use_ip_aliases` is true. This field cannot be changed after the node pool has been created. podIpv4RangeUtilization: Output only. The utilization of the IPv4 range for the pod. The ratio is Usage/[Total number of IPs in the secondary range], Usage=numNodes*numZones*podIPsPerNode. podRange: The ID of the secondary range for pod IPs. If `create_pod_range` is true, this ID is used for the new range. If `create_pod_range` is false, uses an existing secondary range with this ID. Only applicable if `ip_allocation_policy.use_ip_aliases` is true. This field cannot be changed after the node pool has been created. subnetwork: Output only. The subnetwork path for the node pool. Format: projects/{project}/regions/{region}/subnetworks/{subnetwork} If the cluster is associated with multiple subnetworks, the subnetwork for the node pool is picked based on the IP utilization during node pool creation and is immutable. r r6r Tr.r:rrrrrOrrQrrSrUrWrYr[rN)rrrrrrracceleratorNetworkProfileradditionalNodeNetworkConfigsadditionalPodNetworkConfigsrcreatePodRangeenablePrivateNodesrrrpodIpv4CidrBlockrpodIpv4RangeUtilizationpodRanger4r!rr"r#r-r-s9v(33A6!*!7!78UWXcg!h ) 6 67SUVae f))!,. --a0&334NPQR,,-@!D(556RTUV**1-%004  " "2 &($$R(*r"r-c\rSrSrSr"SS\R 5r\R"SS5r \R"SS5r \R"S S 5r \R"S S S S9r \R"SS5r \R"S5r\R "S\R"R$S9r\R"SS S9r\R"SS S9r\R"SS5r\R"SS5r\R"S5r\R"SS5r\R"SS5r\R"SS 5r\R "S!\R"R$S9r\R"S"S#5r\R"S$5r\R>"SS%5r \R"S&5r!\R"S'S(5r"\R"S)S*5r#\R"S+5r$S,r%g-).ri2a NodePool contains the name and configuration for a cluster's node pool. Node pools are a set of nodes (i.e. VM's), with a common configuration and specification, under the control of the cluster master. They may have a set of Kubernetes labels applied to them, which may be used to reference them during pod scheduling. They may also be resized up or down, to accommodate the workload. Enums: StatusValueValuesEnum: Output only. The status of the nodes in this pool instance. Fields: autopilotConfig: Specifies the autopilot configuration for this node pool. This field is exclusively reserved for Cluster Autoscaler. autoscaling: Autoscaler configuration for this NodePool. Autoscaler is enabled only if a valid configuration is present. bestEffortProvisioning: Enable best effort provisioning for nodes conditions: Which conditions caused the current node pool state. config: The node configuration of the pool. etag: This checksum is computed by the server based on the value of node pool fields, and may be sent on update requests to ensure the client has an up-to-date value before proceeding. initialNodeCount: The initial node count for the pool. You must ensure that your Compute Engine [resource quota](https://cloud.google.com/compute/quotas) is sufficient for this number of instances. You must also have available firewall and routes quota. instanceGroupUrls: Output only. The resource URLs of the [managed instance groups](https://cloud.google.com/compute/docs/instance-groups/creating- groups-of-managed-instances) associated with this node pool. During the node pool blue-green upgrade operation, the URLs contain both blue and green resources. locations: The list of Google Compute Engine [zones](https://cloud.google.com/compute/docs/zones#available) in which the NodePool's nodes should be located. If this value is unspecified during node pool creation, the [Cluster.Locations](https://cloud.google.com/kubernetes-engine/docs/refe rence/rest/v1/projects.locations.clusters#Cluster.FIELDS.locations) value will be used, instead. Warning: changing node pool locations will result in nodes being added and/or removed. management: NodeManagement configuration for this NodePool. maxPodsConstraint: The constraint on the maximum number of pods that can be run simultaneously on a node in the node pool. name: The name of the node pool. networkConfig: Networking configuration for this NodePool. If specified, it overrides the cluster-level defaults. nodeDrainConfig: Specifies the node drain configuration for this node pool. placementPolicy: Specifies the node placement policy. podIpv4CidrSize: Output only. The pod CIDR block size per node in this node pool. queuedProvisioning: Specifies the configuration of queued provisioning. selfLink: Output only. Server-defined URL for the resource. status: Output only. The status of the nodes in this pool instance. statusMessage: Output only. Deprecated. Use conditions instead. Additional information about the current status of this node pool instance, if available. updateInfo: Output only. Update info contains relevant information during a node pool update. upgradeSettings: Upgrade settings control disruption and speed of the upgrade. version: The version of Kubernetes running on this NodePool's nodes. If unspecified, it defaults as described [here](https://cloud.google.com/kubernetes- engine/versioning#specifying_node_version). c4\rSrSrSrSrSrSrSrSr Sr S r S r g ) NodePool.StatusValueValuesEnumivaOutput only. The status of the nodes in this pool instance. Values: STATUS_UNSPECIFIED: Not set. PROVISIONING: The PROVISIONING state indicates the node pool is being created. RUNNING: The RUNNING state indicates the node pool has been created and is fully usable. RUNNING_WITH_ERROR: The RUNNING_WITH_ERROR state indicates the node pool has been created and is partially usable. Some error state has occurred and some functionality may be impaired. Customer may need to reissue a request or trigger a new update. RECONCILING: The RECONCILING state indicates that some work is actively being done on the node pool, such as upgrading node software. Details can be found in the `statusMessage` field. STOPPING: The STOPPING state indicates the node pool is being deleted. ERROR: The ERROR state indicates the node pool may be unusable. Details can be found in the `statusMessage` field. rr r rrrrOrN) rrrrrr*r^r_RUNNING_WITH_ERRORr`rarbr!rr"r#r-r8vs.&LGKH Er"r-rr rr rrr{rTr.rrrOrQrrSrUrrWr<rYr[r-r]rr_PlacementPolicyrarcQueuedProvisioningrer rhr UpdateInforrrrrN)&rrrrrrr0r-rautopilotConfigrbestEffortProvisioningrconfigrrrrrr r rrmaxPodsConstraintr6rnodeDrainConfigplacementPolicypodIpv4CidrSizequeuedProvisioningr3r2r3r6 updateInforrr!rr"r#rr2sAFinn8**+= min_node_count. There has to be enough quota to scale up the cluster. minNodeCount: Minimum number of nodes for one location in the node pool. Must be greater than or equal to 0 and less than or equal to max_node_count. totalMaxNodeCount: Maximum number of nodes in the node pool. Must be greater than or equal to total_min_node_count. There has to be enough quota to scale up the cluster. The total_*_node_count fields are mutually exclusive with the *_node_count fields. totalMinNodeCount: Minimum number of nodes in the node pool. Must be greater than or equal to 0 and less than or equal to total_max_node_count. The total_*_node_count fields are mutually exclusive with the *_node_count fields. c$\rSrSrSrSrSrSrSrg)1NodePoolAutoscaling.LocationPolicyValueValuesEnumiaLocation policy used when scaling up a nodepool. Values: LOCATION_POLICY_UNSPECIFIED: Not set. BALANCED: BALANCED is a best effort policy that aims to balance the sizes of different zones. ANY: ANY policy picks zones that have the highest capacity available. rr r rN) rrrrrLOCATION_POLICY_UNSPECIFIEDrAANYr!rr"r#LocationPolicyValueValuesEnumrJs#$H Cr"rMr r rrrrrOrQrN)rrrrrrr0rMrautoprovisionedrr2locationPolicyrrr maxNodeCount minNodeCounttotalMaxNodeCounttotalMinNodeCountr!rr"r#rrs6  inn  **1-/  " "1 %'&&'FJ.''93D3D3J3JK,''93D3D3J3JK,,,Q 8I8I8O8OP,,Q 8I8I8O8OPr"rc>\rSrSrSr\R "SS5rSrg)riz}Subset of Nodepool message that has defaults. Fields: nodeConfigDefaults: Subset of NodeConfig message that has defaults. rr rN) rrrrrrrnodeConfigDefaultsr!rr"r#rrs !--.BAFr"rc>\rSrSrSr\R "SS5rSrg)riz~NodePoolLoggingConfig specifies logging configuration for nodepools. Fields: variantConfig: Logging variant configuration. rr rN) rrrrrrr variantConfigr!rr"r#rrs (()?C-r"rch\rSrSrSr"SS\R 5r"SS\R 5r\R"SSSS 9r \R"S 5r \R"S 5r \R"S 5r\R"S 5r\R"SSSS 9r\R""SSSS 9rSrg)NodePoolUpgradeInfoi aNodePoolUpgradeInfo contains the upgrade information of a nodepool. Enums: AutoUpgradeStatusValueListEntryValuesEnum: PausedReasonValueListEntryValuesEnum: Fields: autoUpgradeStatus: The auto upgrade status. endOfExtendedSupportTimestamp: The nodepool's current minor version's end of extended support timestamp. endOfStandardSupportTimestamp: The nodepool's current minor version's end of standard support timestamp. minorTargetVersion: minor_target_version indicates the target version for minor upgrade. patchTargetVersion: patch_target_version indicates the target version for patch upgrade. pausedReason: The auto upgrade paused reason. upgradeDetails: The list of past auto upgrades. c(\rSrSrSrSrSrSrSrSr g) =NodePoolUpgradeInfo.AutoUpgradeStatusValueListEntryValuesEnumirrr r rrNrrr"r#rr[rr"rc,\rSrSrSrSrSrSrSrSr Sr g ) 8NodePoolUpgradeInfo.PausedReasonValueListEntryValuesEnumi-aPausedReasonValueListEntryValuesEnum enum type. Values: AUTO_UPGRADE_PAUSED_REASON_UNSPECIFIED: AUTO_UPGRADE_PAUSED_REASON_UNSPECIFIED indicates an unspecified reason. MAINTENANCE_WINDOW: MAINTENANCE_WINDOW indicates the cluster is outside customer maintenance window. MAINTENANCE_EXCLUSION_NO_UPGRADES: MAINTENANCE_EXCLUSION_NO_UPGRADES indicates the cluster is in a maintenance exclusion with scope NO_UPGRADES. MAINTENANCE_EXCLUSION_NO_MINOR_UPGRADES: MAINTENANCE_EXCLUSION_NO_MINOR_UPGRADES indicates the cluster is in a maintenance exclusion with scope NO_MINOR_UPGRADES. SYSTEM_CONFIG: SYSTEM_CONFIG indicates the cluster upgrade is paused by system config. rr r rrrN) rrrrrrrrrrr!rr"r#rr]-s&"./*()%./+Mr"rr Tr.r rrrrOrrQrN)rrrrrrr0rrr2rrrrrrrrrr!rr"r#rYrY s( ).. Y^^0 ))*UWXcgh"+"7"7":"+"7"7": ,,Q/ ,,Q/$$%KQY]^,))*:AM.r"rYc\rSrSrSr"SS\R 5r\R"SS5r \R"S5r \R"S5r Sr g ) riNaKubernetes taint is composed of three fields: key, value, and effect. Effect can only be one of three types: NoSchedule, PreferNoSchedule or NoExecute. See [here](https://kubernetes.io/docs/concepts/configuration/taint-and- toleration) for more information, including usage and the valid values. Enums: EffectValueValuesEnum: Effect for taint. Fields: effect: Effect for taint. key: Key for taint. value: Value for taint. c(\rSrSrSrSrSrSrSrSr g) NodeTaint.EffectValueValuesEnumi^zEffect for taint. Values: EFFECT_UNSPECIFIED: Not set NO_SCHEDULE: NoSchedule PREFER_NO_SCHEDULE: PreferNoSchedule NO_EXECUTE: NoExecute rr r rrN) rrrrrEFFECT_UNSPECIFIED NO_SCHEDULEPREFER_NO_SCHEDULE NO_EXECUTEr!rr"r#EffectValueValuesEnumr`^sKJr"rer r rrN)rrrrrrr0rer2effectrrErkr!rr"r#rrNsL  inn    6 :&a #    "%r"rc<\rSrSrSr\R "SSSS9rSrg) NodeTaintsiqzCollection of Kubernetes [node taints](https://kubernetes.io/docs/concepts/configuration/taint-and- toleration). Fields: taints: List of node taints. rr Tr.rN) rrrrrrrrr!rr"r#rhrhqs  ! !+q4 @&r"rhc>\rSrSrSr\R "SS5rSrg)ri}znNotificationConfig is the configuration of notifications. Fields: pubsub: Notification config for Pub/Sub. PubSubr rN) rrrrrrrpubsubr!rr"r#rr}s  ! !(A .&r"rc\rSrSrSr"SS\R 5r"SS\R 5r\R"SSS S 9r \R"S 5r \R"S 5r \R"S S5r\R"S5r\R"S5r\R"SSS S 9r\R$"SS5r\R"SS5r\R"S5r\R"S5r\R$"SS5r\R"S5r\R"S5r\R"S5rSrg)ria> This operation resource represents operations that may have happened or are happening on the cluster. All fields are output only. Enums: OperationTypeValueValuesEnum: Output only. The operation type. StatusValueValuesEnum: Output only. The current status of the operation. Fields: clusterConditions: Which conditions caused the current cluster state. Deprecated. Use field error instead. detail: Output only. Detailed operation progress, if available. endTime: Output only. The time the operation completed, in [RFC3339](https://www.ietf.org/rfc/rfc3339.txt) text format. error: The error result of the operation in case of failure. location: Output only. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/regions-zones/regions- zones#available) or [region](https://cloud.google.com/compute/docs/regions-zones/regions- zones#available) in which the cluster resides. name: Output only. The server-assigned ID for the operation. nodepoolConditions: Which conditions caused the current node pool state. Deprecated. Use field error instead. operationType: Output only. The operation type. progress: Output only. Progress information for an operation. selfLink: Output only. Server-defined URI for the operation. Example: `https://container.googleapis.com/v1alpha1/projects/123/locations/us- central1/operations/operation-123`. startTime: Output only. The time the operation started, in [RFC3339](https://www.ietf.org/rfc/rfc3339.txt) text format. status: Output only. The current status of the operation. statusMessage: Output only. If an error has occurred, a textual description of the error. Deprecated. Use the field error instead. targetLink: Output only. Server-defined URI for the target of the operation. The format of this is a URI to the resource being modified (such as a cluster, node pool, or node). For node pool repairs, there may be multiple nodes being repaired, but only one will be the target. Examples: - ## `https://container.googleapis.com/v1/projects/123/locations/us- central1/clusters/my-cluster` ## `https://container.googleapis.com/v1/projects/123/zones/us- central1-c/clusters/my-cluster/nodePools/my-np` `https://container.googleapis.com/v1/projects/123/zones/us- central1-c/clusters/my-cluster/nodePools/my-np/node/my-node` zone: Output only. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the operation is taking place. This field is deprecated, use location instead. cd\rSrSrSrSrSrSrSrSr Sr S r S r S r S rS rSrSrSrSrSrSrSrSrSrg)&Operation.OperationTypeValueValuesEnumiaOutput only. The operation type. Values: TYPE_UNSPECIFIED: Not set. CREATE_CLUSTER: The cluster is being created. The cluster should be assumed to be unusable until the operation finishes. In the event of the operation failing, the cluster will enter the ERROR state and eventually be deleted. DELETE_CLUSTER: The cluster is being deleted. The cluster should be assumed to be unusable as soon as this operation starts. In the event of the operation failing, the cluster will enter the ERROR state and the deletion will be automatically retried until completed. UPGRADE_MASTER: The cluster version is being updated. Note that this includes "upgrades" to the same version, which are simply a recreation. This also includes [auto- upgrades](https://cloud.google.com/kubernetes- engine/docs/concepts/cluster-upgrades#upgrading_automatically). For more details, see [documentation on cluster upgrades](https://cloud.google.com/kubernetes- engine/docs/concepts/cluster-upgrades#cluster_upgrades). UPGRADE_NODES: A node pool is being updated. Despite calling this an "upgrade", this includes most forms of updates to node pools. This also includes [auto-upgrades](https://cloud.google.com/kubernetes- engine/docs/how-to/node-auto-upgrades). This operation sets the progress field and may be canceled. The upgrade strategy depends on [node pool configuration](https://cloud.google.com/kubernetes- engine/docs/concepts/node-pool-upgrade-strategies). The nodes are generally still usable during this operation. REPAIR_CLUSTER: A problem has been detected with the control plane and is being repaired. This operation type is initiated by GKE. For more details, see [documentation on repairs](https://cloud.google.com/kubernetes- engine/docs/concepts/maintenance-windows-and-exclusions#repairs). UPDATE_CLUSTER: The cluster is being updated. This is a broad category of operations and includes operations that only change metadata as well as those that must recreate the entire cluster. If the control plane must be recreated, this will cause temporary downtime for zonal clusters. Some features require recreating the nodes as well. Those will be recreated as separate operations and the update may not be completely functional until the node pools recreations finish. Node recreations will generally follow [maintenance policies](https://cloud.google.com/kubernetes- engine/docs/concepts/maintenance-windows-and-exclusions). Some GKE- initiated operations use this type. This includes certain types of auto-upgrades and incident mitigations. CREATE_NODE_POOL: A node pool is being created. The node pool should be assumed to be unusable until this operation finishes. In the event of an error, the node pool may be partially created. If enabled, [node autoprovisioning](https://cloud.google.com/kubernetes-engine/docs/how- to/node-auto-provisioning) may have automatically initiated such operations. DELETE_NODE_POOL: The node pool is being deleted. The node pool should be assumed to be unusable as soon as this operation starts. SET_NODE_POOL_MANAGEMENT: The node pool's manamagent field is being updated. These operations only update metadata and may be concurrent with most other operations. AUTO_REPAIR_NODES: A problem has been detected with nodes and [they are being repaired](https://cloud.google.com/kubernetes-engine/docs/how- to/node-auto-repair). This operation type is initiated by GKE, typically automatically. This operation may be concurrent with other operations and there may be multiple repairs occurring on the same node pool. AUTO_UPGRADE_NODES: Unused. Automatic node upgrade uses UPGRADE_NODES. SET_LABELS: Unused. Updating labels uses UPDATE_CLUSTER. SET_MASTER_AUTH: Unused. Updating master auth uses UPDATE_CLUSTER. SET_NODE_POOL_SIZE: The node pool is being resized. With the exception of resizing to or from size zero, the node pool is generally usable during this operation. SET_NETWORK_POLICY: Unused. Updating network policy uses UPDATE_CLUSTER. SET_MAINTENANCE_POLICY: Unused. Updating maintenance policy uses UPDATE_CLUSTER. RESIZE_CLUSTER: The control plane is being resized. This operation type is initiated by GKE. These operations are often performed preemptively to ensure that the control plane has sufficient resources and is not typically an indication of issues. For more details, see [documentation on resizes](https://cloud.google.com/kubernetes- engine/docs/concepts/maintenance-windows-and-exclusions#repairs). FLEET_FEATURE_UPGRADE: Fleet features of GKE Enterprise are being upgraded. The cluster should be assumed to be blocked for other upgrades until the operation finishes. rr r rrrrOrQrSrUrWrYr[r]r_rarcrer rN)rrrrrrCREATE_CLUSTERDELETE_CLUSTERUPGRADE_MASTER UPGRADE_NODESREPAIR_CLUSTERUPDATE_CLUSTERCREATE_NODE_POOLDELETE_NODE_POOLSET_NODE_POOL_MANAGEMENTAUTO_REPAIR_NODESAUTO_UPGRADE_NODES SET_LABELSSET_MASTER_AUTHSET_NODE_POOL_SIZESET_NETWORK_POLICYSET_MAINTENANCE_POLICYRESIZE_CLUSTERFLEET_FEATURE_UPGRADEr!rr"r#OperationTypeValueValuesEnumrnstPbNNNMNN JONr"rc,\rSrSrSrSrSrSrSrSr Sr g ) Operation.StatusValueValuesEnumiaOutput only. The current status of the operation. Values: STATUS_UNSPECIFIED: Not set. PENDING: The operation has been created. RUNNING: The operation is currently running. DONE: The operation is done, either cancelled or completed. ABORTING: The operation is aborting. rr r rrrN rrrrrr*PENDINGr_rABORTINGr!rr"r#r-r#GG DHr"r-r{r Tr.r rStatusrrrOrQrSOperationProgressrUrWrYr[r]r_rarN)rrrrrrr0rr-rclusterConditionsrdetailendTimeerrorrr6nodepoolConditionsr2 operationTypeprogressr3rr3r6 targetLinkr9r!rr"r#rrs4/bdY^^dLinn  ,,->DQ   #&  ! !! $'  1 -%  " "1 %(   q !$ --.?TR%%&DaH-  # #$7 ;(  " "2 &(##B')   6 ;&''+-$$R(*   r "$r"rc\rSrSrSr\R "S5r\R "S5r\R "S5r Sr g)ri@a,OperationError records errors seen from CloudKMS keys encountered during updates to DatabaseEncryption configuration. Fields: errorMessage: Description of the error seen during the operation. keyName: CloudKMS key resource that had the error. timestamp: Time when the CloudKMS error was seen. r r rrN) rrrrrrr errorMessager timestampr!rr"r#rr@s9&&q),  ! !! $'##A&)r"rc\rSrSrSr"SS\R 5r\R"SSSS9r \R"S 5r \R"SS SS9r \R"SS 5rS rg )riOaInformation about operation (or operation stage) progress. Enums: StatusValueValuesEnum: Status of an operation stage. Unset for single- stage operations. Fields: metrics: Progress metric bundle, for example: metrics: [{name: "nodes done", int_value: 15}, {name: "nodes total", int_value: 32}] or metrics: [{name: "progress", double_value: 0.56}, {name: "progress scale", double_value: 1.0}] name: A non-parameterized string describing an operation stage. Unset for single-stage operations. stages: Substages of an operation or a stage. status: Status of an operation stage. Unset for single-stage operations. c,\rSrSrSrSrSrSrSrSr Sr g ) 'OperationProgress.StatusValueValuesEnumiaa(Status of an operation stage. Unset for single-stage operations. Values: STATUS_UNSPECIFIED: Not set. PENDING: The operation has been created. RUNNING: The operation is currently running. DONE: The operation is done, either cancelled or completed. ABORTING: The operation is aborting. rr r rrrNrrr"r#r-rarr"r-r`r Tr.r rrrN)rrrrrrr0r-rmetricsrr6stagesr2r3r!rr"r#rrOse"inn  " "8Q >'   q !$  ! !"5q4 H&   6 :&r"rc<\rSrSrSr\R "S5rSrg)r^iwzConfiguration for the Cloud Storage Parallelstore CSI driver. Fields: enabled: Whether the Cloud Storage Parallelstore CSI driver is enabled for this cluster. r rNrrr"r#r^r^wrBr"r^c\rSrSrSr\R "S5"SS\R55r \R"SS5r \R"S5r Srg ) riaParentProductConfig is the configuration of the parent product of the cluster. This field is used by Google internal products that are built on top of a GKE cluster and take the ownership of the cluster. Messages: LabelsValue: Labels contain the configuration of the parent product. Fields: labels: Labels contain the configuration of the parent product. productName: Name of the parent product associated with the cluster. rdcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) ParentProductConfig.LabelsValueizLabels contain the configuration of the parent product. Messages: AdditionalProperty: An additional property for a LabelsValue object. Fields: additionalProperties: Additional properties of type LabelsValue c`\rSrSrSr\R "S5r\R "S5rSr g)2ParentProductConfig.LabelsValue.AdditionalPropertyirr r rNrjrr"r#rlrrmr"rlr Tr.rNrnrr"r#rrr%r"rr r rN)rrrrrrrrrorrrr productNamer!rr"r#rrs[  !!"89ZI%%Z:Z.  ! !- 3&%%a(+r"rc\rSrSrSr"SS\R 5r\R"S5r \R"S5r \R"SS5r Sr g ) r:iaPlacementPolicy defines the placement policy used by the node pool. Enums: TypeValueValuesEnum: The type of placement. Fields: policyName: If set, refers to the name of a custom resource policy supplied by the user. The resource policy must be in the same project and region as the node pool. If not found, InvalidArgument error is returned. tpuTopology: Optional. TPU placement topology for pod slice node pool. https://cloud.google.com/tpu/docs/types-topologies#tpu_topologies type: The type of placement. c \rSrSrSrSrSrSrg)#PlacementPolicy.TypeValueValuesEnumizThe type of placement. Values: TYPE_UNSPECIFIED: TYPE_UNSPECIFIED specifies no requirements on nodes placement. COMPACT: COMPACT specifies node placement in the same availability domain to ensure low communication latency. rr rN)rrrrrrCOMPACTr!rr"r#rrsGr"rr r rrN)rrrrrrr0rr policyName tpuTopologyr2rr!rr"r#r:r:sL  INN $$Q'*%%a(+   2A 6$r"r:c\rSrSrSr"SS\R 5r\R"S5r \R"SS5r Sr g) riaePodAutoscaling is used for configuration of parameters for workload autoscaling. Enums: HpaProfileValueValuesEnum: Selected Horizontal Pod Autoscaling profile. Fields: directMetricsOptIn: DEPRECATED: use HPAProfile instead. Indicates the cluster has opted-into direct metrics collection. hpaProfile: Selected Horizontal Pod Autoscaling profile. c$\rSrSrSrSrSrSrSrg)(PodAutoscaling.HpaProfileValueValuesEnumiaSelected Horizontal Pod Autoscaling profile. Values: HPA_PROFILE_UNSPECIFIED: HPA_PROFILE_UNSPECIFIED is used when no custom HPA profile is set. NONE: Customers explicitly opt-out of HPA profiles. PERFORMANCE: PERFORMANCE is used when customers opt-in to the performance HPA profile. In this profile we support a higher number of HPAs per cluster and faster metrics collection for workload autoscaling. rr r rN) rrrrrHPA_PROFILE_UNSPECIFIEDr PERFORMANCEr!rr"r#HpaProfileValueValuesEnumrs   DKr"rr r rN) rrrrrrr0rrdirectMetricsOptInr2 hpaProfiler!rr"r#rrs= ).. !--a0""#>B*r"rc<\rSrSrSr\R "S5rSrg)riz[PRIVATE FIELD] Config for pod CIDR size overprovisioning. Fields: disable: Whether Pod CIDR overprovisioning is disabled. Note: Pod CIDR overprovisioning is enabled by default. r rN) rrrrrrrdisabler!rr"r#rrrBr"rc<\rSrSrSr\R "S5rSrg)r`izPodSnapshotConfig is the configuration for GKE Pod Snapshots feature. Fields: enabled: Whether or not the Pod Snapshots feature is enabled. r rNrrr"r#r`r`rr"r`c\rSrSrSr"SS\R 5r\R"SS5r \R"S5r Sr g) r iaBinauthz policy that applies to this cluster. Enums: EnforcementModeValueValuesEnum: Mode of operation for binauthz policy enforcement. Fields: enforcementMode: Mode of operation for binauthz policy enforcement. name: The relative resource name of the binauthz platform policy to evaluate. GKE platform policies have the following format: `projects/{project_number}/platforms/gke/policies/{policy_id}`. c(\rSrSrSrSrSrSrSrSr g) ,PolicyBinding.EnforcementModeValueValuesEnumiaMode of operation for binauthz policy enforcement. Values: ENFORCEMENT_MODE_UNSPECIFIED: Default value. For backwards compatibility, this has the same behavior as AUDIT. AUDIT: Enable Continuous Validation only. AUDIT_AND_DRYRUN: Enable Continuous Validation and produce warnings, but do not block workloads which are not conformant with the policy. AUDIT_AND_ENFORCE: Enable Continuous Validation and block workloads which are not conformant with the policy. rr r rrN) rrrrrENFORCEMENT_MODE_UNSPECIFIEDAUDITAUDIT_AND_DRYRUNAUDIT_AND_ENFORCEr!rr"r#EnforcementModeValueValuesEnumrs  $% Er"rr r rN) rrrrrrr0rr2enforcementModerr6r!rr"r#r r s< y~~"''(H!L/   q !$r"r c:\rSrSrSr\R "S5r\R "S5r\R"SS5r \R"S5r \R"S5r \R"S 5r\R"S 5r\R"S 5rS rg )ri%abConfiguration options for private clusters. Fields: enablePrivateEndpoint: Whether the master's internal IP address is used as the cluster endpoint. Deprecated: Use ControlPlaneEndpointsConfig.IPEndpointsConfig.enable_public_endpoint instead. Note that the value of enable_public_endpoint is reversed: if enable_private_endpoint is false, then enable_public_endpoint will be true. enablePrivateNodes: Whether nodes have internal IP addresses only. If enabled, all nodes are given only RFC 1918 private addresses and communicate with the master via private networking. Deprecated: Use NetworkConfig.default_enable_private_nodes instead. masterGlobalAccessConfig: Controls master global access settings. Deprecated: Use ControlPlaneEndpointsConfig.IPEndpointsConfig.enable_global_access instead. masterIpv4CidrBlock: The IP range in CIDR notation to use for the hosted master network. This range will be used for assigning internal IP addresses to the master or set of masters, as well as the ILB VIP. This range must not overlap with any other ranges in use within the cluster's network. peeringName: Output only. The peering name in the customer VPC used by this cluster. privateEndpoint: Output only. The internal IP address of this cluster's master endpoint. Deprecated: Use ControlPlaneEndpointsConfig.IPEndpointsConfig.private_endpoint instead. privateEndpointSubnetwork: Subnet to provision the master's private endpoint during cluster creation. Specified in projects/*/regions/*/subnetworks/* format. Deprecated: Use ControlPlaneE ndpointsConfig.IPEndpointsConfig.private_endpoint_subnetwork instead. publicEndpoint: Output only. The external IP address of this cluster's master endpoint. Deprecated:Use ControlPlaneEndpointsConfig.IPEndpointsConfig.public_endpoint instead. r r &PrivateClusterMasterGlobalAccessConfigrrrrOrQrSrN)rrrrrrrenablePrivateEndpointr2rmasterGlobalAccessConfigrmasterIpv4CidrBlock peeringNamerrrr!rr"r#rr%s"H$003 --a0&334\^_`!--a0%%a(+))!,/'33A6((+.r"rc<\rSrSrSr\R "S5rSrg)riTzConfiguration for controlling master global access settings. Fields: enabled: Whenever master is accessible globally or not. r rNrrr"r#rrTrr"rc`\rSrSrSr\R "SSSS9r\R"S5r Sr g ) rvi^zPrivateRegistryAccessConfig contains access configuration for private container registries. Fields: certificateAuthorityDomainConfig: Private registry access configuration. enabled: Private registry access is enabled. r;r Tr.r rN) rrrrrrr certificateAuthorityDomainConfigrrr!rr"r#rvrv^s1&/%;%;<^`alp%q"  " "1 %'r"rvc:\rSrSrSr\R "SSS9rSrg)rika]PrivilegedAdmissionConfig stores the list of authorized allowlist paths for the cluster. Fields: allowlistPaths: The customer allowlist Cloud Storage paths for the cluster. These paths are used with the `--autopilot-privileged- admission` flag to authorize privileged workloads in Autopilot clusters. Paths can be GKE-owned, in the format `gke:////`, or customer-owned, in the format `gs:///`. Wildcards (`*`) are supported to authorize all allowlists under specific paths or directories. Example: `gs://my- bucket/*` will authorize all allowlists under the `my-bucket` bucket. r Tr.rN) rrrrrrrallowlistPathsr!rr"r#rrks ((T:.r"rc\rSrSrSr\R "S5r\R"SS5r \R"S5r Sr g) rji|aPub/Sub specific notification config. Fields: enabled: Enable notifications for Pub/Sub. filter: Allows filtering to one or more specific event types. If no filter is specified, or if a filter is specified with no event types, all event types will be sent topic: The desired Pub/Sub topic to which notifications will be sent by GKE. Format is `projects/{project}/topics/{topic}`. r rr rrN) rrrrrrrrrr%rtopicr!rr"r#rjrj|s;   " "1 %'  ! !(A .&    "%r"rjc<\rSrSrSr\R "S5rSrg)r;izQueuedProvisioning defines the queued provisioning used by the node pool. Fields: enabled: Denotes that this nodepool is QRM specific, meaning nodes can be only obtained through queuing via the Cluster Autoscaler ProvisioningRequest API. r rNrrr"r#r;r;s  " "1 %'r"r;c`\rSrSrSr\R "S5r\R "S5rSr g)riaRBACBindingConfig allows user to restrict ClusterRoleBindings an RoleBindings that can be created. Fields: enableInsecureBindingSystemAuthenticated: Setting this to true will allow any ClusterRoleBinding and RoleBinding with subjects system:authenticated. enableInsecureBindingSystemUnauthenticated: Setting this to true will allow any ClusterRoleBinding and RoleBinding with subjets system:anonymous or system:unauthenticated. r r rN) rrrrrrr(enableInsecureBindingSystemAuthenticated*enableInsecureBindingSystemUnauthenticatedr!rr"r#rrs+ .7-C-CA-F*/8/E/Ea/H,r"rc`\rSrSrSr\R "S5r\R"S5r Sr g)rCizRangeInfo contains the range name and the range utilization by this cluster. Fields: rangeName: Output only. Name of a range. utilization: Output only. The utilization of the range. r r rN) rrrrrrr rangeNamer utilizationr!rr"r#rCrCs)##A&)$$Q'+r"rCc<\rSrSrSr\R "S5rSrg)RayClusterLoggingConfigiz|RayClusterLoggingConfig specifies configuration of Ray logging. Fields: enabled: Enable log collection for Ray clusters. r rNrrr"r#rrrr"rc<\rSrSrSr\R "S5rSrg)RayClusterMonitoringConfigizRayClusterMonitoringConfig specifies monitoring configuration for Ray clusters. Fields: enabled: Enable metrics collection for Ray clusters. r rNrrr"r#rrrBr"rc<\rSrSrSr\R "S5rSrg)rbizDEPRECATED. Use RayOperatorConfig instead. Configuration options for the Ray add-on. Fields: enabled: Whether the Ray addon is enabled for this cluster. r rNrrr"r#rbrbrBr"rbc<\rSrSrSr\R "S5rSrg)rizuRayLoggingConfig specifies configuration of Ray logging. Fields: enabled: Enable log collection for Ray clusters. r rNrrr"r#rrrr"rc<\rSrSrSr\R "S5rSrg)rsizRayMonitoringConfig specifies configuration of Ray Monitoring feature. Fields: enabled: Enable metrics collection for Ray clusters. r rNrrr"r#rsrsrr"rsc\rSrSrSr\R "S5r\R"SS5r \R"SS5r Sr g ) rdia'Configuration options for the Ray Operator add-on. Fields: enabled: Whether the Ray Operator addon is enabled for this cluster. rayClusterLoggingConfig: Optional. Logging configuration for Ray clusters. rayClusterMonitoringConfig: Optional. Monitoring configuration for Ray clusters. r rr rrrN) rrrrrrrrrrayClusterLoggingConfigrayClusterMonitoringConfigr!rr"r#rdrdsB  " "1 %'%223LaP(556RTUVr"rdcb\rSrSrSr\R "S5r\R"SS5r Sr g)r>ia Represents an arbitrary window of time that recurs. Fields: recurrence: An RRULE (https://tools.ietf.org/html/rfc5545#section-3.8.5.3) for how this window recurs. They go on for the span of time between the start and end time. For example, to have something repeat every weekday, you'd use: `FREQ=WEEKLY;BYDAY=MO,TU,WE,TH,FR` To repeat some window daily (equivalent to the DailyMaintenanceWindow): `FREQ=DAILY` For the first weekend of every month: `FREQ=MONTHLY;BYSETPOS=1;BYDAY=SA,SU` This specifies how frequently the window starts. Eg, if you wanted to have a 9-5 UTC-4 window every weekday, you'd use something like: ``` start time = 2019-01-01T09:00:00-0400 end time = 2019-01-01T17:00:00-0400 recurrence = FREQ=WEEKLY;BYDAY=MO,TU,WE,TH,FR ``` Windows can span multiple days. Eg, to make the window encompass every weekend from midnight Saturday till the last minute of Sunday UTC: ``` start time = 2019-01-05T00:00:00Z end time = 2019-01-07T23:59:00Z recurrence = FREQ=WEEKLY;BYDAY=SA ``` Note the start and end time's specific dates are largely arbitrary except to specify duration of the window and when it first starts. The FREQ values of HOURLY, MINUTELY, and SECONDLY are not supported. window: The window of the first recurrence. r r;r rN) rrrrrrr recurrencerr5r!rr"r#r>r>s+.$$Q'*  ! !, 2&r"r>c^\rSrSrSr\R "S5r\R "SSS9rSr g) rhizRegistryHeader configures headers for the registry. Fields: key: Key configures the header key. value: Value configures the header value. r r Tr.rNrjrr"r#rhrh+ a #   D 1%r"rhc`\rSrSrSr\R "SSSS9r\R"S5r Sr g ) rwi#aRegistryHostConfig configures the top-level structure for a single containerd registry server's configuration, which represents one hosts.toml file on the node. It will override the same fqdns in PrivateRegistryAccessConfig. Fields: hosts: HostConfig configures a list of host-specific configurations for the server. Each server can have at most 10 host configurations. server: Defines the host name of the registry server, which will be used to create configuration file as /etc/containerd/hosts.d//hosts.toml. It supports fully qualified domain names (FQDN) and IP addresses: Specifying port is supported. Wildcards are NOT supported. Examples: - my.customdomain.com - 10.0.1.2:5000 r`r Tr.r rN) rrrrrrrhostsrserverr!rr"r#rwrw#s-   q4 @%   #&r"rwch\rSrSrSr"SS\R 5r\R"SS5r Sr g)ri7aReleaseChannel indicates which release channel a cluster is subscribed to. Release channels are arranged in order of risk. When a cluster is subscribed to a release channel, Google maintains both the master version and the node version. Node auto-upgrade defaults to true and cannot be disabled. Enums: ChannelValueValuesEnum: channel specifies which release channel the cluster is subscribed to. Fields: channel: channel specifies which release channel the cluster is subscribed to. c,\rSrSrSrSrSrSrSrSr Sr g ) %ReleaseChannel.ChannelValueValuesEnumiGaHchannel specifies which release channel the cluster is subscribed to. Values: UNSPECIFIED: No channel specified. RAPID: RAPID channel is offered on an early access basis for customers who want to test new releases. WARNING: Versions available in the RAPID Channel may be subject to unresolved issues with no known workaround and are not subject to any SLAs. REGULAR: Clusters subscribed to REGULAR receive versions that are considered GA quality. REGULAR is intended for production users who want to take advantage of new features. STABLE: Clusters subscribed to STABLE receive versions that are known to be stable and reliable in production. EXTENDED: Clusters subscribed to EXTENDED receive extended support and availability for versions which are known to be stable and reliable in production. rr r rrrN rrrrrrRAPIDREGULARSTABLEEXTENDEDr!rr"r#r>rG""K EG FHr"r>r rNr?rr"r#rr7s, y~~0    8! <'r"rc\rSrSrSr"SS\R 5r\R"SS5r \R"S5r \R"S5r \R"SS S 9r S rg ) ReleaseChannelConfigibaReleaseChannelConfig exposes configuration for a release channel. Enums: ChannelValueValuesEnum: The release channel this configuration applies to. Fields: channel: The release channel this configuration applies to. defaultVersion: The default version for newly created clusters on the channel. upgradeTargetVersion: The auto upgrade target version for clusters on the channel. validVersions: List of valid versions for the channel. c,\rSrSrSrSrSrSrSrSr Sr g ) +ReleaseChannelConfig.ChannelValueValuesEnumiqa5The release channel this configuration applies to. Values: UNSPECIFIED: No channel specified. RAPID: RAPID channel is offered on an early access basis for customers who want to test new releases. WARNING: Versions available in the RAPID Channel may be subject to unresolved issues with no known workaround and are not subject to any SLAs. REGULAR: Clusters subscribed to REGULAR receive versions that are considered GA quality. REGULAR is intended for production users who want to take advantage of new features. STABLE: Clusters subscribed to STABLE receive versions that are known to be stable and reliable in production. EXTENDED: Clusters subscribed to EXTENDED receive extended support and availability for versions which are known to be stable and reliable in production. rr r rrrNrrr"r#r>rqrr"r>r r rrTr.rN)rrrrrrr0r>r2r@rdefaultVersionupgradeTargetVersion validVersionsr!rr"r#rrbs_ y~~0    8! <'((+."..q1''D9-r"rc\rSrSrSr"SS\R 5r\R"SS5r \R"S5r \R"SSS 9r S r g ) ria[ReservationAffinity](https://cloud.google.com/compute/docs/instances/re serving-zonal-resources) is the configuration of desired reservation which instances could take capacity from. Enums: ConsumeReservationTypeValueValuesEnum: Corresponds to the type of reservation consumption. Fields: consumeReservationType: Corresponds to the type of reservation consumption. key: Corresponds to the label key of a reservation resource. To target a SPECIFIC_RESERVATION by name, specify "compute.googleapis.com/reservation-name" as the key and specify the name of your reservation as its value. values: Corresponds to the label value(s) of reservation resource(s). c(\rSrSrSrSrSrSrSrSr g) 9ReservationAffinity.ConsumeReservationTypeValueValuesEnumialCorresponds to the type of reservation consumption. Values: UNSPECIFIED: Default value. This should not be used. NO_RESERVATION: Do not consume from any reserved capacity. ANY_RESERVATION: Consume any reservation available. SPECIFIC_RESERVATION: Must consume from a specific reservation. Must specify key value fields for specifying the reservations. rr r rrN) rrrrrrNO_RESERVATIONANY_RESERVATIONSPECIFIC_RESERVATIONr!rr"r#%ConsumeReservationTypeValueValuesEnumrsKNOr"rr r rTr.rN)rrrrrrr0rr2consumeReservationTyperrErr!rr"r#rrsP$ inn %../VXYZa #  T 2&r"rc^\rSrSrSr\R "S5r\R "SSS9rSr g) rizAdditional entries to be added to resolved.conf. Fields: key: The key of resolved.conf value: Optional. The value of resolved.conf r r Tr.rNrjrr"r#rrrr"rc\rSrSrSr\R "S5"SS\R55r \R"SS5r Sr g) ResourceLabelsizCollection of [Resource Manager labels](https://cloud.google.com/resource-manager/docs/creating-managing- labels). Messages: LabelsValue: Map of node label keys and node label values. Fields: labels: Map of node label keys and node label values. rdcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) ResourceLabels.LabelsValueir"c`\rSrSrSr\R "S5r\R "S5rSr g)-ResourceLabels.LabelsValue.AdditionalPropertyirr r rNrjrr"r#rlrrmr"rlr Tr.rNrnrr"r#rrr%r"rr rNr&rr"r#rrr'r"rc\rSrSrSr\R "S5r\R "S5r\R"S5r Sr g)rDia)Contains information about amount of some resource in the cluster. For memory, value should be in GB. Fields: maximum: Maximum amount of the resource in the cluster. minimum: Minimum amount of the resource in the cluster. resourceType: Resource name "cpu", "memory" or gpu-specific string. r r rrN) rrrrrrrmaximumminimumr resourceTyper!rr"r#rDrDs9  " "1 %'  " "1 %'&&q),r"rDc\rSrSrSr\R "S5"SS\R55r \R"SS5r Sr g) ria[A map of resource manager tag keys and values to be attached to the nodes for managing Compute Engine firewalls using Network Firewall Policies. Tags must be according to specifications in https://cloud.google.com/vpc/docs/tags-firewalls-overview#specifications. A maximum of 5 tag key-value pairs can be specified. Existing tags will be replaced with new values. Messages: TagsValue: TagKeyValue must be in one of the following formats ([KEY]=[VALUE]) 1. `tagKeys/{tag_key_id}=tagValues/{tag_value_id}` 2. `{org_id}/{tag_key_name}={tag_value_name}` 3. `{project_id}/{tag_key_name}={tag_value_name}` Fields: tags: TagKeyValue must be in one of the following formats ([KEY]=[VALUE]) 1. `tagKeys/{tag_key_id}=tagValues/{tag_value_id}` 2. `{org_id}/{tag_key_name}={tag_value_name}` 3. `{project_id}/{tag_key_name}={tag_value_name}` rdcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) ResourceManagerTags.TagsValuei apTagKeyValue must be in one of the following formats ([KEY]=[VALUE]) 1. `tagKeys/{tag_key_id}=tagValues/{tag_value_id}` 2. `{org_id}/{tag_key_name}={tag_value_name}` 3. `{project_id}/{tag_key_name}={tag_value_name}` Messages: AdditionalProperty: An additional property for a TagsValue object. Fields: additionalProperties: Additional properties of type TagsValue c`\rSrSrSr\R "S5r\R "S5rSr g)0ResourceManagerTags.TagsValue.AdditionalPropertyirvr r rNrjrr"r#rlrrmr"rlr Tr.rNrnrr"r#rwr s2  'Y.. '%112FTXYr"rwr rN) rrrrrrrrrorwrr7r!rr"r#rrsK( !!"89Z)##Z:Z4    Q /$r"rc\rSrSrSr\R "SS5r\R "SS5r\R"S5r Sr g ) ri+aConfiguration for exporting cluster resource usages. Fields: bigqueryDestination: Configuration to use BigQuery as usage export destination. consumptionMeteringConfig: Configuration to enable resource consumption metering. enableNetworkEgressMetering: Whether to enable network egress metering for this cluster. If enabled, a daemonset will be created in the cluster to meter network egress traffic. rr r r rrN) rrrrrrrbigqueryDestinationconsumptionMeteringConfigrenableNetworkEgressMeteringr!rr"r#rr+sC "../DaH'445PRST ) 6 6q 9r"rc\rSrSrSr\R "S5r\R "S5r\R "S5r \R "S5r \R"S5r \R "S5r S rg ) RollbackNodePoolUpgradeRequesti=aRollbackNodePoolUpgradeRequest rollbacks the previously Aborted or Failed NodePool upgrade. This will be an no-op if the last upgrade successfully completed. Fields: clusterId: Deprecated. The name of the cluster to rollback. This field has been deprecated and replaced by the name field. name: The name (project, location, cluster, node pool id) of the node poll to rollback upgrade. Specified in the format `projects/*/locations/*/clusters/*/nodePools/*`. nodePoolId: Deprecated. The name of the node pool to rollback. This field has been deprecated and replaced by the name field. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the name field. respectPdb: Option for rollback to ignore the PodDisruptionBudget. Default value is false. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. This field has been deprecated and replaced by the name field. r r rrrrOrN)rrrrrrrrr6rHr8r respectPdbr9r!rr"r#r r =si0##A&)   q !$$$Q'*##A&)%%a(*   q !$r"r c<\rSrSrSr\R "S5rSrg)ri^zRollbackSafeUpgrade is the configuration for the rollback safe upgrade. Fields: controlPlaneSoakDuration: A user-defined period for the cluster remains in the rollbackable state. ex: {seconds: 21600}. r rN) rrrrrrrcontrolPlaneSoakDurationr!rr"r#rr^s'2215r"rc\rSrSrSr"SS\R 5r\R"S5r \R"SS5r \R"S5r Sr g ) riiaRollbackSafeUpgradeStatus contains the rollback-safe upgrade status of a cluster. Enums: ModeValueValuesEnum: The mode of the rollback-safe upgrade. Fields: controlPlaneUpgradeRollbackEndTime: The rollback-safe mode expiration time. mode: The mode of the rollback-safe upgrade. previousVersion: The GKE version that the cluster previously used before step-one upgrade. c \rSrSrSrSrSrSrg)-RollbackSafeUpgradeStatus.ModeValueValuesEnumixaThe mode of the rollback-safe upgrade. Values: MODE_UNSPECIFIED: MODE_UNSPECIFIED means it's in regular upgrade mode. KCP_MINOR_UPGRADE_ROLLBACK_SAFE_MODE: KCP_MINOR_UPGRADE_ROLLBACK_SAFE_MODE means it's in rollback-safe mode after a KCP minor version step-one upgrade. rr rN)rrrrrr$KCP_MINOR_UPGRADE_ROLLBACK_SAFE_MODEr!rr"r#rrxs+,(r"rr r rrN)rrrrrrr0rr"controlPlaneUpgradeRollbackEndTimer2rpreviousVersionr!rr"r#rrisM  -INN -(1'<'.r"rcb\rSrSrSr\R "S5r\R"SS5r Sr g)rizConfiguration for sync Secret Manager secrets as k8s secrets. Fields: enabled: Enable/Disable Secret Sync Config. rotationConfig: Rotation config for secret manager. r SyncRotationConfigr rNr0rr"r#rrs,  " "1 %'))*>B.r"rc\rSrSrSr\R "SSS9r\R "S5r\R "S5r \R "S5r \R "S SS9r \R"S 5r \R "S SS9r\R "S SS9r\R "S 5r\R "S5r\R "S5rSrg)SecurityBulletinEventia SecurityBulletinEvent is a notification sent to customers when a security bulletin has been posted that they are vulnerable to. Fields: affectedSupportedMinors: The GKE minor versions affected by this vulnerability. briefDescription: A brief description of the bulletin. See the bulletin pointed to by the bulletin_uri field for an expanded description. bulletinId: The ID of the bulletin corresponding to the vulnerability. bulletinUri: The URI link to the bulletin on the website for more information. cveIds: The CVEs associated with this bulletin. manualStepsRequired: If this field is specified, it means there are manual steps that the user must take to make their clusters safe. mitigatedVersions: The GKE versions where this vulnerability is mitigated. patchedVersions: The GKE versions where this vulnerability is patched. resourceTypeAffected: The resource type (node/control plane) that has the vulnerability. Multiple notifications (1 notification per resource type) will be sent for a vulnerability that affects > 1 resource type. severity: The severity of this bulletin as it relates to GKE. suggestedUpgradeTarget: This represents a version selected from the patched_versions field that the cluster receiving this notification should most likely want to upgrade to based on its current version. Note that if this notification is being received by a given cluster, it means that this version is currently available as an upgrade target in that cluster's location. r Tr.r rrrrOrQrSrUrWrYrN)rrrrrrraffectedSupportedMinorsbriefDescription bulletinId bulletinUricveIdsrmanualStepsRequiredmitigatedVersionspatchedVersionsresourceTypeAffectedseveritysuggestedUpgradeTargetr!rr"r#r5r5s8&11!dC**1-$$Q'*%%a(+  T 2&!..q1++A=))!d;/"..q1  " "2 &($004r"r5c\rSrSrSr"SS\R 5r"SS\R 5r\R"SS5r \R"SS5r S r g ) riHaSecurityPostureConfig defines the flags needed to enable/disable features for the Security Posture API. Enums: ModeValueValuesEnum: Sets which mode to use for Security Posture features. VulnerabilityModeValueValuesEnum: Sets which mode to use for vulnerability scanning. Fields: mode: Sets which mode to use for Security Posture features. vulnerabilityMode: Sets which mode to use for vulnerability scanning. c(\rSrSrSrSrSrSrSrSr g) )SecurityPostureConfig.ModeValueValuesEnumiVa@Sets which mode to use for Security Posture features. Values: MODE_UNSPECIFIED: Default value not specified. DISABLED: Disables Security Posture features on the cluster. BASIC: Applies Security Posture features on the cluster. ENTERPRISE: Applies the Security Posture off cluster Enterprise level features. rr r rrN) rrrrrrrBASICrr!rr"r#rrCVsH EJr"rc(\rSrSrSrSrSrSrSrSr g) 6SecurityPostureConfig.VulnerabilityModeValueValuesEnumieaSets which mode to use for vulnerability scanning. Values: VULNERABILITY_MODE_UNSPECIFIED: Default value not specified. VULNERABILITY_DISABLED: Disables vulnerability scanning on the cluster. VULNERABILITY_BASIC: Applies basic vulnerability scanning on the cluster. VULNERABILITY_ENTERPRISE: Applies the Security Posture's vulnerability on cluster Enterprise level features. rr r rrN) rrrrrVULNERABILITY_MODE_UNSPECIFIEDVULNERABILITY_DISABLEDVULNERABILITY_BASICVULNERABILITY_ENTERPRISEr!rr"r# VulnerabilityModeValueValuesEnumrFes! &'" r"rKr r rN) rrrrrrr0rrKr2rvulnerabilityModer!rr"r#rrHsP  INN !!   2A 6$))*LaPr"rc\rSrSrSr\R "SSSS9r\R"S5r \R"S5r \R"S SS9r \R"S SS9r \R"S SS9r S rg ) ServerConfigiyaKubernetes Engine service configuration. Fields: channels: List of release channel configurations. defaultClusterVersion: Version of Kubernetes the service deploys by default. defaultImageType: Default image type. validImageTypes: List of valid image types. validMasterVersions: List of valid master versions, in descending order. validNodeVersions: List of valid node upgrade target versions, in descending order. rr Tr.r rrrrOrN)rrrrrrrchannelsrdefaultClusterVersiondefaultImageTypevalidImageTypesvalidMasterVersionsvalidNodeVersionsr!rr"r#rNrNysx  # #$:A M(#//2**1-))!d;/!--a$?++A=r"rNc<\rSrSrSr\R "S5rSrg)rizConfig to block services with externalIPs field. Fields: enabled: Whether Services with ExternalIPs field are allowed or not. r rNrrr"r#rrrr"rc\rSrSrSr\R "SS5r\R"S5r \R"S5r \R"S5r \R"S5r S r g ) SetAddonsConfigRequestiaSetAddonsConfigRequest sets the addons associated with the cluster. Fields: addonsConfig: Required. The desired configurations for the various addons available to run in the cluster. clusterId: Deprecated. The name of the cluster to upgrade. This field has been deprecated and replaced by the name field. name: The name (project, location, cluster) of the cluster to set addons. Specified in the format `projects/*/locations/*/clusters/*`. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the name field. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. This field has been deprecated and replaced by the name field. rGr r rrrrN)rrrrrrrrrrr6r8r9r!rr"r#rWrWs[&'':,##A&)   q !$##A&)   q !$r"rWcF\rSrSrSr\R "S5"SS\R55r \R"S5r \R"S5r \R"S5r \R"S 5r\R"SS 5r\R"S 5rS rg )SetLabelsRequestiaSetLabelsRequest sets the Google Cloud Platform labels on a Google Container Engine cluster, which will in turn set them for Google Compute Engine resources used by that cluster Messages: ResourceLabelsValue: Required. The labels to set for that cluster. Fields: clusterId: Deprecated. The name of the cluster. This field has been deprecated and replaced by the name field. labelFingerprint: Required. The fingerprint of the previous set of labels for this resource, used to detect conflicts. The fingerprint is initially generated by Kubernetes Engine and changes after every request to modify or update labels. You must always provide an up-to-date fingerprint hash when updating or changing labels. Make a `get()` request to the resource to get the latest fingerprint. name: The name (project, location, cluster name) of the cluster to set labels. Specified in the format `projects/*/locations/*/clusters/*`. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the name field. resourceLabels: Required. The labels to set for that cluster. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. This field has been deprecated and replaced by the name field. rdcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) $SetLabelsRequest.ResourceLabelsValueizRequired. The labels to set for that cluster. Messages: AdditionalProperty: An additional property for a ResourceLabelsValue object. Fields: additionalProperties: Additional properties of type ResourceLabelsValue c`\rSrSrSr\R "S5r\R "S5rSr g)7SetLabelsRequest.ResourceLabelsValue.AdditionalPropertyirir r rNrjrr"r#rlr]rmr"rlr Tr.rNrnrr"r#rpr[s2 'Y.. '%112FTXYr"rpr r rrrrOrN)rrrrrrrrrorprrrr6r8rr)r9r!rr"r#rYrYs: !!"89ZI--Z:Z0##A&)**1-   q !$##A&)))*?C.   q !$r"rYc\rSrSrSr\R "S5r\R"S5r \R "S5r \R "S5r \R "S5r Sr g ) SetLegacyAbacRequestiaSetLegacyAbacRequest enables or disables the ABAC authorization mechanism for a cluster. Fields: clusterId: Deprecated. The name of the cluster to update. This field has been deprecated and replaced by the name field. enabled: Required. Whether ABAC authorization will be enabled in the cluster. name: The name (project, location, cluster name) of the cluster to set legacy abac. Specified in the format `projects/*/locations/*/clusters/*`. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the name field. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. This field has been deprecated and replaced by the name field. r r rrrrN)rrrrrrrrrrr6r8r9r!rr"r#r_r_sY*##A&)  " "1 %'   q !$##A&)   q !$r"r_c\rSrSrSr\R "S5r\R "SSS9r\R "S5r \R "S5r \R "S 5r S r g ) SetLocationsRequestiaSetLocationsRequest sets the locations of the cluster. Fields: clusterId: Deprecated. The name of the cluster to upgrade. This field has been deprecated and replaced by the name field. locations: Required. The desired list of Google Compute Engine [zones](https://cloud.google.com/compute/docs/zones#available) in which the cluster's nodes should be located. Changing the locations a cluster is in will result in nodes being either created or removed from the cluster, depending on whether locations are being added or removed. This list must always include the cluster's primary zone. name: The name (project, location, cluster) of the cluster to set locations. Specified in the format `projects/*/locations/*/clusters/*`. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the name field. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. This field has been deprecated and replaced by the name field. r r Tr.rrrrN) rrrrrrrrrr6r8r9r!rr"r#raras[.##A&)##A5)   q !$##A&)   q !$r"rac\rSrSrSr\R "S5r\R "S5r\R "S5r \R "S5r \R "S5r Sr g ) SetLoggingServiceRequesti/aESetLoggingServiceRequest sets the logging service of a cluster. Fields: clusterId: Deprecated. The name of the cluster to upgrade. This field has been deprecated and replaced by the name field. loggingService: Required. The logging service the cluster should use to write logs. Currently available options: * `logging.googleapis.com/kubernetes` - The Cloud Logging service with a Kubernetes-native resource model * `logging.googleapis.com` - The legacy Cloud Logging service (no longer available as of GKE 1.15). * `none` - no logs will be exported from the cluster. If left as an empty string,`logging.googleapis.com/kubernetes` will be used for GKE 1.14+ or `logging.googleapis.com` for earlier versions. name: The name (project, location, cluster) of the cluster to set logging. Specified in the format `projects/*/locations/*/clusters/*`. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the name field. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. This field has been deprecated and replaced by the name field. r r rrrrN) rrrrrrrrrr6r8r9r!rr"r#rcrc/sY2##A&)((+.   q !$##A&)   q !$r"rcc\rSrSrSr\R "S5r\R"SS5r \R "S5r \R "S5r \R "S5r S r g ) SetMaintenancePolicyRequestiPaSetMaintenancePolicyRequest sets the maintenance policy for a cluster. Fields: clusterId: Required. The name of the cluster to update. maintenancePolicy: Required. The maintenance policy to be set for the cluster. An empty field clears the existing maintenance policy. name: The name (project, location, cluster name) of the cluster to set maintenance policy. Specified in the format `projects/*/locations/*/clusters/*`. projectId: Required. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). zone: Required. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. r rr rrrrN)rrrrrrrrrrr6r8r9r!rr"r#rerePs]"##A&),,-@!D   q !$##A&)   q !$r"rec\rSrSrSr"SS\R 5r\R"SS5r \R"S5r \R"S5r \R"S5r \R"S S 5r\R"S 5rS rg )SetMasterAuthRequestiiaSetMasterAuthRequest updates the admin password of a cluster. Enums: ActionValueValuesEnum: Required. The exact form of action to be taken on the master auth. Fields: action: Required. The exact form of action to be taken on the master auth. clusterId: Deprecated. The name of the cluster to upgrade. This field has been deprecated and replaced by the name field. name: The name (project, location, cluster) of the cluster to set auth. Specified in the format `projects/*/locations/*/clusters/*`. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the name field. update: Required. A description of the update. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. This field has been deprecated and replaced by the name field. c(\rSrSrSrSrSrSrSrSr g) *SetMasterAuthRequest.ActionValueValuesEnumiaRequired. The exact form of action to be taken on the master auth. Values: UNKNOWN: Operation is unknown and will error out. SET_PASSWORD: Set the password to a user generated value. GENERATE_PASSWORD: Generate a new password and set it to that. SET_USERNAME: Set the username. If an empty username is provided, basic authentication is disabled for the cluster. If a non-empty username is provided, basic authentication is enabled, with either a provided password or a generated one. rr r rrN) rrrrrr SET_PASSWORDGENERATE_PASSWORD SET_USERNAMEr!rr"r#ActionValueValuesEnumris GLLr"rmr r rrrrrOrN)rrrrrrr0rmr2actionrrr6r8rupdater9r!rr"r#rgrgis~.inn"   6 :&##A&)   q !$##A&)  ! !, 2&   q !$r"rgc\rSrSrSr\R "S5r\R "S5r\R "S5r \R "S5r \R "S5r Sr g ) SetMonitoringServiceRequestialSetMonitoringServiceRequest sets the monitoring service of a cluster. Fields: clusterId: Deprecated. The name of the cluster to upgrade. This field has been deprecated and replaced by the name field. monitoringService: Required. The monitoring service the cluster should use to write metrics. Currently available options: * `monitoring.googleapis.com/kubernetes` - The Cloud Monitoring service with a Kubernetes-native resource model * `monitoring.googleapis.com` - The legacy Cloud Monitoring service (no longer available as of GKE 1.15). * `none` - No metrics will be exported from the cluster. If left as an empty string,`monitoring.googleapis.com/kubernetes` will be used for GKE 1.14+ or `monitoring.googleapis.com` for earlier versions. name: The name (project, location, cluster) of the cluster to set monitoring. Specified in the format `projects/*/locations/*/clusters/*`. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the name field. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. This field has been deprecated and replaced by the name field. r r rrrrN) rrrrrrrrrr6r8r9r!rr"r#rqrqsZ2##A&)++A.   q !$##A&)   q !$r"rqc\rSrSrSr\R "S5r\R "S5r\R"SS5r \R "S5r \R "S5r S r g ) SetNetworkPolicyRequestiaSetNetworkPolicyRequest enables/disables network policy for a cluster. Fields: clusterId: Deprecated. The name of the cluster. This field has been deprecated and replaced by the name field. name: The name (project, location, cluster name) of the cluster to set networking policy. Specified in the format `projects/*/locations/*/clusters/*`. networkPolicy: Required. Configuration options for the NetworkPolicy feature. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the name field. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. This field has been deprecated and replaced by the name field. r r rrrrrN)rrrrrrrrr6rrr8r9r!rr"r#rsrss[(##A&)   q !$((!<-##A&)   q !$r"rsc\rSrSrSr\R "SS5r\R"S5r \R"S5r \R"S5r \R"S5r \R"S 5r S rg ) SetNodePoolAutoscalingRequestia#SetNodePoolAutoscalingRequest sets the autoscaler settings of a node pool. Fields: autoscaling: Required. Autoscaling configuration for the node pool. clusterId: Deprecated. The name of the cluster to upgrade. This field has been deprecated and replaced by the name field. name: The name (project, location, cluster, node pool) of the node pool to set autoscaler settings. Specified in the format `projects/*/locations/*/clusters/*/nodePools/*`. nodePoolId: Deprecated. The name of the node pool to upgrade. This field has been deprecated and replaced by the name field. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the name field. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. This field has been deprecated and replaced by the name field. rr r rrrrOrN)rrrrrrrrrrr6rHr8r9r!rr"r#rurusl,&&'" to include in api requests. uploadType: Legacy upload protocol for media (e.g. "media", "multipart"). upload_protocol: Upload protocol for media (e.g. "raw", "multipart"). c$\rSrSrSrSrSrSrSrg)*StandardQueryParameters.AltValueValuesEnumizData format for response. Values: json: Responses with Content-Type of application/json media: Media download with context-dependent Content-Type proto: Responses with Content-Type of application/x-protobuf rr r rN) rrrrrjsonmediaprotor!rr"r#AltValueValuesEnumrs D E Er"rc \rSrSrSrSrSrSrg)-StandardQueryParameters.FXgafvValueValuesEnumizFV1 error format. Values: _1: v1 error format _2: v2 error format rr rN)rrrrr_1_2r!rr"r#FXgafvValueValuesEnumrs B Br"rr r rr)defaultrrrOrQrSTrUrWrYr[rN)rrrrrrr0rrr2f__xgafvr access_tokenaltcallbackfieldsrE oauth_tokenr prettyPrint quotaUsertrace uploadTypeupload_protocolr!rr"r#rrks4 9>>  inn  !8! <(&&q),0!VD#  " "1 %(   #&a #%%a(+&&q$7+##A&)    #%$$R(*))"-/r"rc\rSrSrSr\R "S\RRS9r \R"S\RRS9r \R"S5rSrg) r$iaRStandard rollout policy is the default policy for blue-green. Fields: batchNodeCount: Number of blue nodes to drain in a batch. batchPercentage: Percentage of the blue pool nodes to drain in a batch. The range of this field should be (0.0, 1.0]. batchSoakDuration: Soak time after each batch gets drained. Default to zero. r rr rrN)rrrrrrrrrbatchNodeCountrFLOATbatchPercentagerbatchSoakDurationr!rr"r#r$r$sV))!Y5F5F5L5LM.((I4E4E4K4KL/++A.r"r$c\rSrSrSr\R "S5r\R "S5r\R "S5r \R"S5r \R "S5r Sr g ) StartIPRotationRequestiaStartIPRotationRequest creates a new IP for the cluster and then performs a node upgrade on each node pool to point to the new IP. Fields: clusterId: Deprecated. The name of the cluster. This field has been deprecated and replaced by the name field. name: The name (project, location, cluster name) of the cluster to start IP rotation. Specified in the format `projects/*/locations/*/clusters/*`. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the name field. rotateCredentials: Whether to rotate credentials during IP rotation. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. This field has been deprecated and replaced by the name field. r r rrrrN)rrrrrrrrr6r8rrotateCredentialsr9r!rr"r#rrsZ(##A&)   q !$##A&),,Q/   q !$r"rc<\rSrSrSr\R "S5rSrg)rgizzConfiguration for the Stateful HA add-on. Fields: enabled: Whether the Stateful HA add-on is enabled for this cluster. r rNrrr"r#rgrgrr"rgc\rSrSrSr\R "S5"SS\R55r \R"S\RRS9r \R"SSS S 9r\R "S 5rS rg )riaThe `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors). Messages: DetailsValueListEntry: A DetailsValueListEntry object. Fields: code: The status code, which should be an enum value of google.rpc.Code. details: A list of messages that carry the error details. There is a common set of message types for APIs to use. message: A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client. rdcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) Status.DetailsValueListEntryizA DetailsValueListEntry object. Messages: AdditionalProperty: An additional property for a DetailsValueListEntry object. Fields: additionalProperties: Properties of the object. Contains field @type with type URL. cb\rSrSrSr\R "S5r\R"SS5r Sr g)/Status.DetailsValueListEntry.AdditionalPropertyi zAn additional property for a DetailsValueListEntry object. Fields: key: Name of the additional property. value: A extra_types.JsonValue attribute. r zextra_types.JsonValuer rNr<rr"r#rlr s,   ! !! $c$$%%%&DaH-   2A 6$  ! !! $'r"r{c\rSrSrSr\R "SS5r\R "SS5r\R"S5r \R "SS 5r \R "S S 5r S r g )ri aConfiguration for swap memory on a node pool. Fields: bootDiskProfile: Swap on the node's boot disk. dedicatedLocalSsdProfile: Provisions a new, separate local NVMe SSD exclusively for swap. enabled: Optional. Enables or disables swap for the node pool. encryptionConfig: Optional. If omitted, swap space is encrypted by default. ephemeralLocalSsdProfile: Swap on the local SSD shared with pod ephemeral storage. r.r rr rrrrrrN)rrrrrrrbootDiskProfilededicatedLocalSsdProfilerrencryptionConfigephemeralLocalSsdProfiler!rr"r#rr sj **+B&334NPQRr"rc`\rSrSrSr\R "S5r\R"S5r Sr g)r3i zSyncRotationConfig is config for secret manager auto rotation. Fields: enabled: Whether the rotation is enabled. rotationInterval: The interval between two consecutive rotations. Default rotation interval is 2 minutes. r r rNrrr"r#r3r3 rr"r3c\rSrSrSr\R "S5r\R"SS5r \R "S5r Sr g) r;i a7Represents an arbitrary window of time. Fields: endTime: The time that the window ends. The end time should take place after the start time. maintenanceExclusionOptions: MaintenanceExclusionOptions provides maintenance exclusion related options. startTime: The time that the window first starts. r r&r rrN) rrrrrrrrrmaintenanceExclusionOptionsrr!rr"r#r;r; s>  ! !! $' ) 6 67TVW X##A&)r"r;c`\rSrSrSr\R "S5r\R "S5rSr g)r i a%TopologyManager defines the configuration options for Topology Manager feature. See https://kubernetes.io/docs/tasks/administer-cluster/topology- manager/ Fields: policy: Configures the strategy for resource alignment. Allowed values are: * none: the default policy, and does not perform any topology alignment. * restricted: the topology manager stores the preferred NUMA node affinity for the container, and will reject the pod if the affinity if not preferred. * best-effort: the topology manager stores the preferred NUMA node affinity for the container. If the affinity is not preferred, the topology manager will admit the pod to the node anyway. * single-numa-node: the topology manager determines if the single NUMA node affinity is possible. If it is, Topology Manager will store this and the Hint Providers can then use this information when making the resource allocation decision. If, however, this is not possible then the Topology Manager will reject the pod from the node. This will result in a pod in a Terminated state with a pod admission failure. The default policy value is 'none' if unspecified. Details about each strategy can be found [here](https://kubernetes.io/docs/tasks/administer- cluster/topology-manager/#topology-manager-policies). scope: The Topology Manager aligns resources in following scopes: * container * pod The default scope is 'container' if unspecified. See https://kubernetes.io/docs/tasks/administer-cluster/topology- manager/#topology-manager-scopes r r rN) rrrrrrrr\rr!rr"r#r r  s)6   #&    "%r"r c\rSrSrSr\R "S5r\R "S5r\R "S5r \R"SS5r \R "S5r S r g ) UpdateClusterRequesti!aJUpdateClusterRequest updates the settings of a cluster. Fields: clusterId: Deprecated. The name of the cluster to upgrade. This field has been deprecated and replaced by the name field. name: The name (project, location, cluster) of the cluster to update. Specified in the format `projects/*/locations/*/clusters/*`. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the name field. update: Required. A description of the update. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. This field has been deprecated and replaced by the name field. r r rrVrrrN)rrrrrrrrr6r8rror9r!rr"r#rr!s[$##A&)   q !$##A&)  ! !/1 5&   q !$r"rc>\rSrSrSr\R "SS5rSrg)r<i!zUpdateInfo contains resource (instance groups, etc), status and other intermediate information relevant to a node pool upgrade. Fields: blueGreenInfo: Information of a blue-green upgrade. rr rN) rrrrrrr blueGreenInfor!rr"r#r<r<!s((!<-r"r<c\rSrSrSr\R "S5r\R "S5r\R "S5r \R "S5r \R "S5r Sr g ) UpdateMasterRequesti(!aUpdateMasterRequest updates the master of the cluster. Fields: clusterId: Deprecated. The name of the cluster to upgrade. This field has been deprecated and replaced by the name field. masterVersion: Required. The Kubernetes version to change the master to. Users may specify either explicit versions offered by Kubernetes Engine or version aliases, which have the following behavior: - "latest": picks the highest valid Kubernetes version - "1.X": picks the highest valid patch+gke.N patch in the 1.X version - "1.X.Y": picks the highest valid gke.N patch in the 1.X.Y version - "1.X.Y-gke.N": picks an explicit Kubernetes version - "-": picks the default Kubernetes version name: The name (project, location, cluster) of the cluster to update. Specified in the format `projects/*/locations/*/clusters/*`. projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the name field. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. This field has been deprecated and replaced by the name field. r r rrrrN) rrrrrrrr masterVersionr6r8r9r!rr"r#rr(!sY0##A&)''*-   q !$##A&)   q !$r"rc\rSrSrSr\R "SSSS9r\R "SS5r\R"S 5r \R "S S 5r \R"S 5r \R "S S5r \R"S5r\R"S5r\R"S5r\R "SS5r\R&"S5r\R "SS5r\R "SS5r\R"S5r\R"S5r\R"S5r\R "SS5r\R "SS5r\R "S S!5r\R"S"SS9r\R "S#S$5r\R "S%S&5r\R"S'5r \R"S(5r!\R"S)5r"\R "S*S+5r#\R "S,S-5r$\R"S.5r%\R"S/5r&\R"S05r'\R "S1S25r(\R "S3S45r)\R "S5S65r*\R"S7SS9r+\R "S8S95r,\R "S:S;5r-\R "SS?5r/\R "S@SA5r0\R"SB5r1SCr2gD)EUpdateNodePoolRequestiH!aUpdateNodePoolRequests update a node pool's image and/or version. Fields: accelerators: A list of hardware accelerators to be attached to each node. See https://cloud.google.com/compute/docs/gpus for more information about support for GPUs. bootDisk: The desired boot disk config for nodes in the node pool. Initiates an upgrade operation that migrates the nodes in the node pool to the specified boot disk config. clusterId: Deprecated. The name of the cluster to upgrade. This field has been deprecated and replaced by the name field. confidentialNodes: Confidential nodes config. All the nodes in the node pool will be Confidential VM once enabled. consolidationDelay: Consolidation delay defines duration after which the Cluster Autoscaler can scale down underutilized nodes. If not set, nodes are scaled down by default behavior, i.e. according to the chosen autoscaling profile. containerdConfig: The desired containerd config for nodes in the node pool. Initiates an upgrade operation that recreates the nodes with the new config. diskSizeGb: Optional. The desired disk size for nodes in the node pool specified in GB. The smallest allowed disk size is 10GB. Initiates an upgrade operation that migrates the nodes in the node pool to the specified disk size. diskType: Optional. The desired disk type (e.g. 'pd-standard', 'pd-ssd' or 'pd-balanced') for nodes in the node pool. Initiates an upgrade operation that migrates the nodes in the node pool to the specified disk type. etag: The current etag of the node pool. If an etag is provided and does not match the current etag of the node pool, update will be blocked and an ABORTED error will be returned. fastSocket: Enable or disable NCCL fast socket for the node pool. flexStart: Flex Start flag for enabling Flex Start VM. gcfsConfig: GCFS config. gvnic: Enable or disable gvnic on the node pool. image: The desired name of the image name to use for this node. This is used to create clusters using a custom image. imageProject: The project containing the desired image to use for this node pool. This is used to create clusters using a custom image. imageType: Required. The desired image type for the node pool. Please see https://cloud.google.com/kubernetes-engine/docs/concepts/node-images for available image types. kubeletConfig: Node kubelet configs. labels: The desired node labels to be applied to all nodes in the node pool. If this field is not present, the labels will not be changed. Otherwise, the existing node labels will be *replaced* with the provided labels. linuxNodeConfig: Parameters that can be configured on Linux nodes. locations: The desired list of Google Compute Engine [zones](https://cloud.google.com/compute/docs/zones#available) in which the node pool's nodes should be located. Changing the locations for a node pool will result in nodes being either created or removed from the node pool, depending on whether locations are being added or removed. Warning: It is recommended to update node pool locations in a standalone API call. Do not combine a location update with changes to other fields (such as `tags`, `labels`, `taints`, etc.) in the same request. Otherwise, the API performs a structural modification where changes to other fields will only apply to newly created nodes and will not be applied to existing nodes in the node pool. To ensure all nodes are updated consistently, use a separate API call for location changes. loggingConfig: Logging configuration. lustreConfig: Configuration for Lustre settings on the node pool. machineType: Optional. The desired [Google Compute Engine machine type](https://cloud.google.com/compute/docs/machine-types) for nodes in the node pool. Initiates an upgrade operation that migrates the nodes in the node pool to the specified machine type. maxRunDuration: The maximum duration for the nodes to exist. If unspecified, the nodes can exist indefinitely. name: The name (project, location, cluster, node pool) of the node pool to update. Specified in the format `projects/*/locations/*/clusters/*/nodePools/*`. nodeDrainConfig: The desired node drain configuration for nodes in the node pool. nodeNetworkConfig: Node network config. nodePoolId: Deprecated. The name of the node pool to upgrade. This field has been deprecated and replaced by the name field. nodeVersion: Required. The Kubernetes version to change the nodes to (typically an upgrade). Users may specify either explicit versions offered by Kubernetes Engine or version aliases, which have the following behavior: - "latest": picks the highest valid Kubernetes version - "1.X": picks the highest valid patch+gke.N patch in the 1.X version - "1.X.Y": picks the highest valid gke.N patch in the 1.X.Y version - "1.X.Y-gke.N": picks an explicit Kubernetes version - "-": picks the Kubernetes master version projectId: Deprecated. The Google Developers Console [project ID or project number](https://cloud.google.com/resource-manager/docs/creating- managing-projects). This field has been deprecated and replaced by the name field. queuedProvisioning: Specifies the configuration of queued provisioning. resourceLabels: The resource labels for the node pool to use to annotate any related Google Compute Engine resources. resourceManagerTags: Desired resource manager tag keys and values to be attached to the nodes for managing Compute Engine firewalls using Network Firewall Policies. Existing tags will be replaced with new values. storagePools: List of Storage Pools where boot disks are provisioned. Existing Storage Pools will be replaced with storage-pools. tags: The desired network tags to be applied to all nodes in the node pool. If this field is not present, the tags will not be changed. Otherwise, the existing network tags will be *replaced* with the provided tags. taints: The desired node taints to be applied to all nodes in the node pool. If this field is not present, the taints will not be changed. Otherwise, the existing node taints will be *replaced* with the provided taints. upgradeSettings: Upgrade settings control disruption and speed of the upgrade. windowsNodeConfig: Parameters that can be configured on Windows nodes. workloadMetadataConfig: The desired workload metadata config for the node pool. zone: Deprecated. The name of the Google Compute Engine [zone](https://cloud.google.com/compute/docs/zones#available) in which the cluster resides. This field has been deprecated and replaced by the name field. r r Tr.r)r rr|rrrxrOrQrSrUrrWrYr}r[rr]r_rarcrrerr rrhrrrrrrrrrrr-rrrrr;rrrrrrrrrhrrrrrrrrrN)3rrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr6rAnodeNetworkConfigrH nodeVersionr8rDr)rrr7rrrrr9r!rr"r#rrH!srh''(;QN,  # #J 2(##A&),,-@!D ,,Q/++,>B%%a(*  " "1 %(   q !$%%lB7*$$R()%%lB7*  r 2%    #%&&r*,##B')(().  " "1 %($$%BAF,  ! !! $'r"rc\rSrSrSr"SS\R 5r"SS\R 5r\R"S5r \R"S5r \R"S 5r \R"S 5r \R"SS 5r\R"SS 5r\R"S 5r\R"S5rSrg)ri "a~UpgradeDetails contains detailed information of each individual upgrade operation. Enums: StartTypeValueValuesEnum: The start type of the upgrade. StateValueValuesEnum: Output only. The state of the upgrade. Fields: endTime: The end timestamp of the upgrade. initialEmulatedVersion: The emulated version before the upgrade. initialVersion: The version before the upgrade. startTime: The start timestamp of the upgrade. startType: The start type of the upgrade. state: Output only. The state of the upgrade. targetEmulatedVersion: The emulated version after the upgrade. targetVersion: The version after the upgrade. c$\rSrSrSrSrSrSrSrg)'UpgradeDetails.StartTypeValueValuesEnumi"zThe start type of the upgrade. Values: START_TYPE_UNSPECIFIED: Upgrade start type is unspecified. AUTOMATIC: Upgrade started automatically. MANUAL: Upgrade started manually. rr r rN) rrrrrSTART_TYPE_UNSPECIFIED AUTOMATICMANUALr!rr"r#StartTypeValueValuesEnumr"sI Fr"rc,\rSrSrSrSrSrSrSrSr Sr g ) #UpgradeDetails.StateValueValuesEnumi)"zOutput only. The state of the upgrade. Values: UNKNOWN: Upgrade state is unknown. FAILED: Upgrade has failed with an error. SUCCEEDED: Upgrade has succeeded. CANCELED: Upgrade has been canceled. RUNNING: Upgrade is running. rr r rrrN) rrrrrrFAILED SUCCEEDEDCANCELEDr_r!rr"r#rr)"s"G FIHGr"rr r rrrrOrQrSrN)rrrrrrr0rrrrinitialEmulatedVersioninitialVersionrr2 startTypertargetEmulatedVersion targetVersionr!rr"r#rr "s$  Y^^  ! !! $'$003((+.##A&)!!"(r"rc\rSrSrSr\R "S5r\R "S5r\R"SSSS9r \R "S 5r \R "S 5r S r g ) ri#aUsableSubnetwork resource returns the subnetwork name, its associated network and the primary CIDR range. Fields: ipCidrRange: The range of internal addresses that are owned by this subnetwork. network: Network Name. Example: projects/my-project/global/networks/my- network secondaryIpRanges: Secondary IP ranges. statusMessage: A human readable status message representing the reasons for cases where the caller cannot use the secondary ranges under the subnet. For example if the secondary_ip_ranges is empty due to a permission issue, an insufficient permission message will be given by status_message. subnetwork: Subnetwork Name. Example: projects/my-project/regions/us- central1/subnetworks/my-subnet r r UsableSubnetworkSecondaryRangerTr.rrrN)rrrrrrr ipCidrRanger8rsecondaryIpRangesr6r4r!rr"r#rr#s`$%%a(+  ! !! $',,-Mq[_`''*-$$Q'*r"rc\rSrSrSr"SS\R 5r\R"S5r \R"S5r \R"SS5r Sr g ) r#i.#aSecondary IP range of a usable subnetwork. Enums: StatusValueValuesEnum: This field is to determine the status of the secondary range programmably. Fields: ipCidrRange: The range of IP addresses belonging to this subnetwork secondary range. rangeName: The name associated with this subnetwork secondary range, used when adding an alias IP range to a VM instance. status: This field is to determine the status of the secondary range programmably. c,\rSrSrSrSrSrSrSrSr Sr g ) 4UsableSubnetworkSecondaryRange.StatusValueValuesEnumi>#aThis field is to determine the status of the secondary range programmably. Values: UNKNOWN: UNKNOWN is the zero value of the Status enum. It's not a valid status. UNUSED: UNUSED denotes that this range is unclaimed by any cluster. IN_USE_SERVICE: IN_USE_SERVICE denotes that this range is claimed by cluster(s) for services. User-managed services range can be shared between clusters within the same subnetwork. IN_USE_SHAREABLE_POD: IN_USE_SHAREABLE_POD denotes this range was created by the network admin and is currently claimed by a cluster for pods. It can only be used by other clusters as a pod range. IN_USE_MANAGED_POD: IN_USE_MANAGED_POD denotes this range was created by GKE and is claimed for pods. It cannot be used for other clusters. rr r rrrN) rrrrrrUNUSEDIN_USE_SERVICEIN_USE_SHAREABLE_PODIN_USE_MANAGED_PODr!rr"r#r-r(>#s$ G FNr"r-r r rrN)rrrrrrr0r-rr$rr2r3r!rr"r#r#r#.#sL inn.%%a(+##A&)   6 :&r"r#cV\rSrSrSr\R "S5r\R "S5r\R "S5r \R "SSS9r \R "S 5r \R "S 5r \R "S 5r \R "S SS9r\R "S SS9rSrg)riZ#a)UserManagedKeysConfig holds the resource address to Keys which are used for signing certs and token that are used for communication within cluster. Fields: aggregationCa: The Certificate Authority Service caPool to use for the aggregation CA in this cluster. clusterCa: The Certificate Authority Service caPool to use for the cluster CA in this cluster. controlPlaneDiskEncryptionKey: The Cloud KMS cryptoKey to use for Confidential Hyperdisk on the control plane nodes. controlPlaneDiskEncryptionKeyVersions: Output only. All of the versions of the Cloud KMS cryptoKey that are used by Confidential Hyperdisks on the control plane nodes. etcdApiCa: Resource path of the Certificate Authority Service caPool to use for the etcd API CA in this cluster. etcdPeerCa: Resource path of the Certificate Authority Service caPool to use for the etcd peer CA in this cluster. gkeopsEtcdBackupEncryptionKey: Resource path of the Cloud KMS cryptoKey to use for encryption of internal etcd backups. serviceAccountSigningKeys: The Cloud KMS cryptoKeyVersions to use for signing service account JWTs issued by this cluster. Format: `projects/{ project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/ cryptoKeyVersions/{cryptoKeyVersion}` serviceAccountVerificationKeys: The Cloud KMS cryptoKeyVersions to use for verifying service account JWTs issued by this cluster. Format: `projects /{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey }/cryptoKeyVersions/{cryptoKeyVersion}` r r rrTr.rrOrQrSrUrN)rrrrrrr aggregationCa clusterCacontrolPlaneDiskEncryptionKey%controlPlaneDiskEncryptionKeyVersions etcdApiCa etcdPeerCagkeopsEtcdBackupEncryptionKeyserviceAccountSigningKeysserviceAccountVerificationKeysr!rr"r#rrZ#s:''*-##A&)"+"7"7":*3*?*?D*Q'##A&)$$Q'*"+"7"7":'33AE#,#8#8T#J r"rc<\rSrSrSr\R "S5rSrg)ri#zVerticalPodAutoscaling contains global, per-cluster information required by Vertical Pod Autoscaler to automatically adjust the resources of pods controlled by it. Fields: enabled: Enables vertical pod autoscaling. r rNrrr"r#rr#rr"rc<\rSrSrSr\R "S5rSrg)ri#ziConfiguration of gVNIC feature. Fields: enabled: Whether gVNIC features are enabled in the node pool. r rNrrr"r#rr#rr"rch\rSrSrSr"SS\R 5r\R"SS5r Sr g)ri#alParameters that can be configured on Windows nodes. Windows Node Config that define the parameters that will be used to configure the Windows node pool settings. Enums: OsVersionValueValuesEnum: OSVersion specifies the Windows node config to be used on the node. Fields: osVersion: OSVersion specifies the Windows node config to be used on the node. c$\rSrSrSrSrSrSrSrg)*WindowsNodeConfig.OsVersionValueValuesEnumi#aPOSVersion specifies the Windows node config to be used on the node. Values: OS_VERSION_UNSPECIFIED: When OSVersion is not specified. OS_VERSION_LTSC2019: LTSC2019 specifies to use LTSC2019 as the Windows Servercore Base Image. OS_VERSION_LTSC2022: LTSC2022 specifies to use LTSC2022 as the Windows Servercore Base Image. rr r rN) rrrrrOS_VERSION_UNSPECIFIEDOS_VERSION_LTSC2019OS_VERSION_LTSC2022r!rr"r#OsVersionValueValuesEnumr;#sr"r?r rN) rrrrrrr0r?r2 osVersionr!rr"r#rr#s,   !!"rhrwrrrrrrDrrr rrrrrrrrrrrr5rrNrrWrYr_rarcrergrqrsrurwryrrrfrrr$rrgrr{rr3r;r rr<rrrrrrrrr#rrrrrrrrxAddCustomJsonFieldMappingAddCustomJsonEnumMappingrrr"r#rTs'<%( C ))C0!(y00!(H ()"3"3 ((!2!2(, : 1 1 :@D9$$@DFA)*;*;A@%-i//%-P7I$5$578 + 1 1 +&Y&&&99,,94 )** ) K !!K&)5)"3"3)5X &i'' &D7 1 1D7N3By'8'83Bl 2i// 2 QY.. Q ')++')M)++)MX.9I%%.9b M )) M %y  %& Oi'' O"Y.."0 ey'8'8 e 7 )) 7 7I-- 7 %)*;*; % ) !! )5i//5OY&&O>c#ic#L (M**(MV_i&7&7_4yNI%%yNx KN**KN\%):):% (9(9" 1 1"4Y%6%67i//78&**&D)++D0& ))&B&I--& & 1 1 &3i>O>O32 19K\K\ 1 19K\K\ 1 1)J[J[ 1"i6G6G"0 %yGXGX %3y7H7H3"93D3D"0"I4E4E", 1 HYHY 1 "y?P?P"8%QZQbQb%""I=y((=>&y'8'8&&""&&)"3"3&&Y..& 9Y.. 9Di//D6A9,,A8&9,,&&9#4#4& 'y00 '3+""3+l %Y%6%6 % ' )) ' Ni'' N&)++&\)**\)~", ))",J&I--&$""$>& 1 1&)  48y((8%S!2!2%SP /i'' /')++' HY   H &"" &gdi''gdT 99,, 9CI--C EY.. EMI$5$5M$Mi//M0%gY..%gP CI%% C=9,,=259$$5&I--&&09)"3"309f: )):&/E ))/Ed7I%%789!2!29: &i// &'&""'&T@Y%6%6@,- ))- $I%% $ 1y(( 1)Y  )"1g 1 11ghIy((I$& !!&C)I%%C)L_y00_2?I%%?4 ')++ '1)##1E ))ED39$$3@jP""jPZ E**E&?i''?"!;i//!;HMB ))MB`$4""$4NCY&&C(G) ))G)Tv&y  v&rI**I0/Q)++/QdGy((GDI--DBN)++BNJ # !! #F A"" A/**/v# !!v#r 'Y&& '%; ))%;P&9#4#4&&))++&)R7i''7BCY&&CB&!2!2&& ))& "I%% "F,,9,,,,^&Y->->& &)"3"3 &; 1 1;"#Y  #" &** &I ))I" ( !! (&i//&&!2!2&& !!&&y((&&)++& W )) W3)++38 2Y&& 2$**$((=Y&&(=V*:9,,*:Z$3)++$3N 2 )) 2$4Y&&$4N *I%% *00)++00f: 1 1:$"Y%6%6"B6)++6- 1 1-@ Xi'' X .Y&& .7 (9(9787I%%70&I--&7 ))76i&7&7 ?)++ ? Cy(( C'5I--'5T.QI--.Qb>9$$>,&y00&"Y.."6<"y((<"~"9,,":")++">"y00"B")"3"3"2."9,,."b")"3"3"B"i//"8"I$5$5">"9#4#4">"Y.."</Y../&&I%%&&I--& Ly(( L <.i//<.~ /I-- / "Y.."8&y((&0%Y  0%f[%i''[%|S""S* .** . '"" ' #i''#@"9,,"4=""=")++"@\#I--\#~ %I-- %F6+Y&&6+r#+9$$#+LV,y((V,rO?i''O?d(y(((4);Y%6%6);X&KI--&KR &Y.. &&""&A ))A> *Y.. *7Y..7B D9,, D&i''& ""Z4!!114>!!114>r"