<SrSSKJr SSKJr SSKJr SSKJr Sr "SS\R5r "S S \R5r "S S \R5r "S S\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS \R5r"S!S"\R5r"S#S$\R5r"S%S&\R5r"S'S(\R5r"S)S*\R5r"S+S,\R5r"S-S.\R5r"S/S0\R5r"S1S2\R5r "S3S4\R5r!"S5S6\R5r""S7S8\R5r#"S9S:\R5r$"S;S<\R5r%"S=S>\R5r&"S?S@\R5r'"SASB\R5r("SCSD\R5r)"SESF\R5r*"SGSH\R5r+"SISJ\R5r,"SKSL\R5r-"SMSN\R5r."SOSP\R5r/"SQSR\R5r0"SSST\R5r1"SUSV\R5r2"SWSX\R5r3"SYSZ\R5r4"S[S\\R5r5"S]S^\R5r6"S_S`\R5r7"SaSb\R5r8"ScSd\R5r9"SeSf\R5r:"SgSh\R5r;"SiSj\R5r<"SkSl\R5r="SmSn\R5r>"SoSp\R5r?"SqSr\R5r@"SsSt\R5rA"SuSv\R5rB"SwSx\R5rC"SySz\R5rD"S{S|\R5rE"S}S~\R5rF"SS\R5rG"SS\R5rH"SS\R5rI"SS\R5rJ"SS\R5rK"SS\R5rL"SS\R5rM"SS\R5rN"SS\R5rO"SS\R5rP"SS\R5rQ"SS\R5rR"SS\R5rS"SS\R5rT"SS\R5rU"SS\R5rV"SS\R5rW"SS\R5rX"SS\R5rY"SS\R5rZ"SS\R5r["SS\R5r\"SS\R5r]"SS\R5r^"SS\R5r_"SS\R5r`"SS\R5ra"SS\R5rb"SS\R5rc"SS\R5rd"SS\R5re"SS\R5rf"SS\R5rg"SS\R5rh"SS\R5ri"SS\R5rj"SS\R5rk"SS\R5rl"SS\R5rm"SS\R5rn"SS\R5ro"SS\R5rp"SS\R5rq"SS\R5rr"SS\R5rs"SS\R5rt"SS\R5ru"SS\R5rv"SS\R5rw"SS\R5rx"SS\R5ry"SS\R5rz"SS\R5r{"SS\R5r|"SS\R5r}"SS\R5r~"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GS GS \R5r"GS GS \R5r"GS GS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS\R5r"GSGS \R5r"GS!GS"\R5r"GS#GS$\R5r"GS%GS&\R5r"GS'GS(\R5r"GS)GS*\R5r"GS+GS,\R5r"GS-GS.\R5r"GS/GS0\R5r"GS1GS2\R5r"GS3GS4\R5r\GRD"\GS5GS65 \GRF"\GRHGS7GS85 \GRF"\GRHGS9GS:5 \GRD"\3GS;GS<5 \GRD"\3GS=GS>5 Gg?(@aGenerated message classes for gkemulticloud version v1. GKE Multi-Cloud provides a way to manage Kubernetes clusters that run on AWS and Azure infrastructure using the GKE Multi-Cloud API. Combined with Connect, you can manage Kubernetes clusters on Google Cloud, AWS, and Azure from the Google Cloud Console. When you create a cluster with GKE Multi-Cloud, Google creates the resources needed and brings up a cluster on your behalf. You can deploy workloads with the GKE Multi-Cloud API or the gcloud and kubectl command-line tools. )absolute_import)messages)encoding) extra_types gkemulticloudc\rSrSrSr\R "S5r\R"SS5r \R "SSS9r \R"S 5r S r g ) ;GkemulticloudProjectsLocationsAttachedClustersCreateRequestaA GkemulticloudProjectsLocationsAttachedClustersCreateRequest object. Fields: attachedClusterId: Required. A client provided ID the resource. Must be unique within the parent resource. The provided ID will be part of the AttachedCluster resource name formatted as `projects//locations//attachedClusters/`. Valid characters are `/a-z-/`. Cannot be longer than 63 characters. googleCloudGkemulticloudV1AttachedCluster: A GoogleCloudGkemulticloudV1AttachedCluster resource to be passed as the request body. parent: Required. The parent location where this AttachedCluster resource will be created. Location names are formatted as `projects//locations/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud resource names. validateOnly: If set, only validate the request, but do not actually create the cluster. )GoogleCloudGkemulticloudV1AttachedClusterTrequiredN)__name__ __module__ __qualname____firstlineno____doc__ _messages StringFieldattachedClusterId MessageField)googleCloudGkemulticloudV1AttachedClusterparent BooleanField validateOnly__static_attributes__rWlib/googlecloudsdk/generated_clients/apis/gkemulticloud/v1/gkemulticloud_v1_messages.pyr r sQ( ++A..7.D.DEprs.t+  T 2&''*,r!r c\rSrSrSr\R "S5r\R"S5r \R "S5r \R"SSS9r \R "S 5r S r g ) ;GkemulticloudProjectsLocationsAttachedClustersDeleteRequest2aA GkemulticloudProjectsLocationsAttachedClustersDeleteRequest object. Fields: allowMissing: If set to true, and the AttachedCluster resource is not found, the request will succeed but no action will be taken on the server and a completed Operation will be returned. Useful for idempotent deletion. etag: The current etag of the AttachedCluster. Allows clients to perform deletions through optimistic concurrency control. If the provided etag does not match the current etag of the cluster, the request will fail and an ABORTED error will be returned. ignoreErrors: If set to true, the deletion of AttachedCluster resource will succeed even if errors occur during deleting in cluster resources. Using this parameter may result in orphaned resources in the cluster. name: Required. The resource name the AttachedCluster to delete. `AttachedCluster` names are formatted as `projects//locations//attachedClusters/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud Platform resource names. validateOnly: If set, only validate the request, but do not actually delete the resource. r r rrTrrNrrrrrrr allowMissingretag ignoreErrorsnamerr rr!r"r$r$2[.''*,   q !$''*,   q4 0$''*,r!r$c`\rSrSrSr\R "SSS9r\R"SS5r Sr g ) VGkemulticloudProjectsLocationsAttachedClustersGenerateAttachedClusterAgentTokenRequestQaFA GkemulticloudProjectsLocationsAttachedClustersGenerateAttachedClusterA gentTokenRequest object. Fields: attachedCluster: Required. googleCloudGkemulticloudV1GenerateAttachedClusterAgentTokenRequest: A GoogleCloudGkemulticloudV1GenerateAttachedClusterAgentTokenRequest resource to be passed as the request body. r TrBGoogleCloudGkemulticloudV1GenerateAttachedClusterAgentTokenRequestr rN) rrrrrrrattachedClusterrBgoogleCloudGkemulticloudV1GenerateAttachedClusterAgentTokenRequestr rr!r"r.r.Qs<))!d;/GPG]G]_cefHgDr!r.c:\rSrSrSr\R "SSS9rSrg)8GkemulticloudProjectsLocationsAttachedClustersGetRequest`a{A GkemulticloudProjectsLocationsAttachedClustersGetRequest object. Fields: name: Required. The name of the AttachedCluster resource to describe. `AttachedCluster` names are formatted as `projects//locations//attachedClusters/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud Platform resource names. r TrrN rrrrrrrr+r rr!r"r4r4`   q4 0$r!r4c`\rSrSrSr\R "SS5r\R"SSS9r Sr g ) ;GkemulticloudProjectsLocationsAttachedClustersImportRequestnaA GkemulticloudProjectsLocationsAttachedClustersImportRequest object. Fields: googleCloudGkemulticloudV1ImportAttachedClusterRequest: A GoogleCloudGkemulticloudV1ImportAttachedClusterRequest resource to be passed as the request body. parent: Required. The parent location where this AttachedCluster resource will be created. Location names are formatted as `projects//locations/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud resource names. 6GoogleCloudGkemulticloudV1ImportAttachedClusterRequestr r TrrN) rrrrrrr6googleCloudGkemulticloudV1ImportAttachedClusterRequestrrr rr!r"r9r9ns< r>I" # #Ay/@/@/F/F G(##A&)  T 2&r!r>c\rSrSrSr\R "SS5r\R"SSS9r \R"S5r \R"S 5r S r g ) :GkemulticloudProjectsLocationsAttachedClustersPatchRequestaA GkemulticloudProjectsLocationsAttachedClustersPatchRequest object. Fields: googleCloudGkemulticloudV1AttachedCluster: A GoogleCloudGkemulticloudV1AttachedCluster resource to be passed as the request body. name: The name of this resource. Cluster names are formatted as `projects//locations//attachedClusters/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud Platform resource names. updateMask: Required. Mask of fields to update. At least one path must be supplied in this field. The elements of the repeated paths field can only include these fields from AttachedCluster: * `annotations`. * `authorization.admin_groups`. * `authorization.admin_users`. * `binary_authorization.evaluation_mode`. * `description`. * `logging_config.component_config.enable_components`. * `monitoring_config.managed_prometheus_config.enabled`. * `platform_version`. * `proxy_config.kubernetes_secret.name`. * `proxy_config.kubernetes_secret.namespace`. * `security_posture_config.vulnerability_mode` * `monitoring_config.cloud_monitoring_config.enabled` validateOnly: If set, only validate the request, but do not actually update the cluster. r r r TrrrrN)rrrrrrrrrr+ updateMaskrrr rr!r"rJrJsP2/8.D.DEprs.t+   q4 0$$$Q'*''*,r!rJc\rSrSrSr\R "S5r\R"SS5r \R "SSS9r \R"S 5r S r g ) BGkemulticloudProjectsLocationsAwsClustersAwsNodePoolsCreateRequestaA GkemulticloudProjectsLocationsAwsClustersAwsNodePoolsCreateRequest object. Fields: awsNodePoolId: Required. A client provided ID the resource. Must be unique within the parent resource. The provided ID will be part of the AwsNodePool resource name formatted as `projects//locations//awsClusters//awsNodePools/`. Valid characters are `/a-z-/`. Cannot be longer than 63 characters. googleCloudGkemulticloudV1AwsNodePool: A GoogleCloudGkemulticloudV1AwsNodePool resource to be passed as the request body. parent: Required. The AwsCluster resource where this node pool will be created. `AwsCluster` names are formatted as `projects//locations//awsClusters/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud resource names. validateOnly: If set, only validate the request, but do not actually create the node pool. r %GoogleCloudGkemulticloudV1AwsNodePoolr rTrrrN)rrrrrrr awsNodePoolIdr%googleCloudGkemulticloudV1AwsNodePoolrrrr rr!r"rNrNsP*''*-*3*@*@Ahjk*l'  T 2&''*,r!rNc\rSrSrSr\R "S5r\R"S5r \R "S5r \R"SSS9r \R "S 5r S r g ) BGkemulticloudProjectsLocationsAwsClustersAwsNodePoolsDeleteRequestaA GkemulticloudProjectsLocationsAwsClustersAwsNodePoolsDeleteRequest object. Fields: allowMissing: If set to true, and the AwsNodePool resource is not found, the request will succeed but no action will be taken on the server and a completed Operation will be returned. Useful for idempotent deletion. etag: The current ETag of the AwsNodePool. Allows clients to perform deletions through optimistic concurrency control. If the provided ETag does not match the current etag of the node pool, the request will fail and an ABORTED error will be returned. ignoreErrors: Optional. If set to true, the deletion of AwsNodePool resource will succeed even if errors occur during deleting in node pool resources. Using this parameter may result in orphaned resources in the node pool. name: Required. The resource name the AwsNodePool to delete. `AwsNodePool` names are formatted as `projects//locations//awsClusters//awsNodePools/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud resource names. validateOnly: If set, only validate the request, but do not actually delete the node pool. r r rrTrr&rNr'rr!r"rTrT[0''*,   q !$''*,   q4 0$''*,r!rTc:\rSrSrSr\R "SSS9rSrg)?GkemulticloudProjectsLocationsAwsClustersAwsNodePoolsGetRequestazA GkemulticloudProjectsLocationsAwsClustersAwsNodePoolsGetRequest object. Fields: name: Required. The name of the AwsNodePool resource to describe. `AwsNodePool` names are formatted as `projects//locations//awsClusters//awsNodePools/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud resource names. r TrrNr6rr!r"rXrX    q4 0$r!rXc\rSrSrSr\R "S\RRS9r \R"S5r \R"SSS9r S r g ) @GkemulticloudProjectsLocationsAwsClustersAwsNodePoolsListRequestia9A GkemulticloudProjectsLocationsAwsClustersAwsNodePoolsListRequest object. Fields: pageSize: The maximum number of items to return. If not specified, a default value of 50 will be used by the service. Regardless of the pageSize value, the response can include a partial list and a caller should only rely on response's nextPageToken to determine if there are more instances left to be queried. pageToken: The `nextPageToken` value returned from a previous awsNodePools.list request, if any. parent: Required. The parent `AwsCluster` which owns this collection of AwsNodePool resources. `AwsCluster` names are formatted as `projects//locations//awsClusters/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud resource names. r r@r rTrrNrBrr!r"r\r\I$ # #Ay/@/@/F/F G(##A&)  T 2&r!r\c\rSrSrSr\R "SS5r\R"SSS9r \R"S5r \R"S 5r S r g ) AGkemulticloudProjectsLocationsAwsClustersAwsNodePoolsPatchRequestiaA GkemulticloudProjectsLocationsAwsClustersAwsNodePoolsPatchRequest object. Fields: googleCloudGkemulticloudV1AwsNodePool: A GoogleCloudGkemulticloudV1AwsNodePool resource to be passed as the request body. name: The name of this resource. Node pool names are formatted as `projects//locations//awsClusters//awsNodePools/`. For more details on Google Cloud resource names, see [Resource Names](https://cloud.google.com/apis/design/resource_names) updateMask: Required. Mask of fields to update. At least one path must be supplied in this field. The elements of the repeated paths field can only include these fields from AwsNodePool: * `annotations`. * `version`. * `autoscaling.min_node_count`. * `autoscaling.max_node_count`. * `config.config_encryption.kms_key_arn`. * `config.security_group_ids`. * `config.root_volume.iops`. * `config.root_volume.throughput`. * `config.root_volume.kms_key_arn`. * `config.root_volume.volume_type`. * `config.root_volume.size_gib`. * `config.proxy_config`. * `config.proxy_config.secret_arn`. * `config.proxy_config.secret_version`. * `config.ssh_config`. * `config.ssh_config.ec2_key_pair`. * `config.instance_placement.tenancy`. * `config.iam_instance_profile`. * `config.labels`. * `config.tags`. * `config.autoscaling_metrics_collection`. * `config.autoscaling_metrics_collection.granularity`. * `config.autoscaling_metrics_collection.metrics`. * `config.instance_type`. * `management.auto_repair`. * `management`. * `update_settings`. * `update_settings.surge_settings`. * `update_settings.surge_settings.max_surge`. * `update_settings.surge_settings.max_unavailable`. validateOnly: If set, only validate the request, but don't actually update the node pool. rPr r TrrrrN)rrrrrrrrRrr+rLrrr rr!r"r_r_sQ D+4*@*@Ahjk*l'   q4 0$$$Q'*''*,r!r_c`\rSrSrSr\R "SS5r\R"SSS9r Sr g ) DGkemulticloudProjectsLocationsAwsClustersAwsNodePoolsRollbackRequestiCa-A GkemulticloudProjectsLocationsAwsClustersAwsNodePoolsRollbackRequest object. Fields: googleCloudGkemulticloudV1RollbackAwsNodePoolUpdateRequest: A GoogleCloudGkemulticloudV1RollbackAwsNodePoolUpdateRequest resource to be passed as the request body. name: Required. The name of the AwsNodePool resource to rollback. `AwsNodePool` names are formatted as `projects//locations//awsClusters//awsNodePools/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud resource names. :GoogleCloudGkemulticloudV1RollbackAwsNodePoolUpdateRequestr r TrrN) rrrrrrr:googleCloudGkemulticloudV1RollbackAwsNodePoolUpdateRequestrr+r rr!r"raraCs> @I?U?UWSUV@W<   q4 0$r!rac\rSrSrSr\R "S5r\R"SS5r \R "SSS9r \R"S 5r S r g ) 6GkemulticloudProjectsLocationsAwsClustersCreateRequestiVamA GkemulticloudProjectsLocationsAwsClustersCreateRequest object. Fields: awsClusterId: Required. A client provided ID the resource. Must be unique within the parent resource. The provided ID will be part of the AwsCluster resource name formatted as `projects//locations//awsClusters/`. Valid characters are `/a-z-/`. Cannot be longer than 63 characters. googleCloudGkemulticloudV1AwsCluster: A GoogleCloudGkemulticloudV1AwsCluster resource to be passed as the request body. parent: Required. The parent location where this AwsCluster resource will be created. Location names are formatted as `projects//locations/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud resource names. validateOnly: If set, only validate the request, but do not actually create the cluster. r $GoogleCloudGkemulticloudV1AwsClusterr rTrrrN)rrrrrrr awsClusterIdr$googleCloudGkemulticloudV1AwsClusterrrrr rr!r"rereVsP&&&q),)2)?)?@fhi)j&  T 2&''*,r!rec\rSrSrSr\R "S5r\R"S5r \R "S5r \R"SSS9r \R "S 5r S r g ) 6GkemulticloudProjectsLocationsAwsClustersDeleteRequestipaA GkemulticloudProjectsLocationsAwsClustersDeleteRequest object. Fields: allowMissing: If set to true, and the AwsCluster resource is not found, the request will succeed but no action will be taken on the server and a completed Operation will be returned. Useful for idempotent deletion. etag: The current etag of the AwsCluster. Allows clients to perform deletions through optimistic concurrency control. If the provided etag does not match the current etag of the cluster, the request will fail and an ABORTED error will be returned. ignoreErrors: Optional. If set to true, the deletion of AwsCluster resource will succeed even if errors occur during deleting in cluster resources. Using this parameter may result in orphaned resources in the cluster. name: Required. The resource name the AwsCluster to delete. `AwsCluster` names are formatted as `projects//locations//awsClusters/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud Platform resource names. validateOnly: If set, only validate the request, but do not actually delete the resource. r r rrTrr&rNr'rr!r"rjrjps[,''*,   q !$''*,   q4 0$''*,r!rjc:\rSrSrSr\R "SSS9rSrg)FGkemulticloudProjectsLocationsAwsClustersGenerateAwsAccessTokenRequestia~A GkemulticloudProjectsLocationsAwsClustersGenerateAwsAccessTokenRequest object. Fields: awsCluster: Required. The name of the AwsCluster resource to authenticate to. `AwsCluster` names are formatted as `projects//locations//awsClusters/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud resource names. r TrrN rrrrrrr awsClusterr rr!r"rlrls $$Q6*r!rlc`\rSrSrSr\R "SSS9r\R"SS5r Sr g ) LGkemulticloudProjectsLocationsAwsClustersGenerateAwsClusterAgentTokenRequestia,A GkemulticloudProjectsLocationsAwsClustersGenerateAwsClusterAgentTokenRequest object. Fields: awsCluster: Required. googleCloudGkemulticloudV1GenerateAwsClusterAgentTokenRequest: A GoogleCloudGkemulticloudV1GenerateAwsClusterAgentTokenRequest resource to be passed as the request body. r Tr=GoogleCloudGkemulticloudV1GenerateAwsClusterAgentTokenRequestr rN) rrrrrrrrnr=googleCloudGkemulticloudV1GenerateAwsClusterAgentTokenRequestr rr!r"rprps< $$Q6*BKBXBXZY[\C]?r!rpc:\rSrSrSr\R "SSS9rSrg)7GkemulticloudProjectsLocationsAwsClustersGetJwksRequestizA GkemulticloudProjectsLocationsAwsClustersGetJwksRequest object. Fields: awsCluster: Required. The AwsCluster, which owns the JsonWebKeys. Format: projects/{project}/locations/{location}/awsClusters/{cluster} r TrrNrmrr!r"rtrts$$Q6*r!rtc:\rSrSrSr\R "SSS9rSrg)3GkemulticloudProjectsLocationsAwsClustersGetRequestiagA GkemulticloudProjectsLocationsAwsClustersGetRequest object. Fields: name: Required. The name of the AwsCluster resource to describe. `AwsCluster` names are formatted as `projects//locations//awsClusters/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud Platform resource names. r TrrNr6rr!r"rvrvr7r!rvc\rSrSrSr\R "S\RRS9r \R"S5r \R"SSS9r S r g ) 4GkemulticloudProjectsLocationsAwsClustersListRequestiaA GkemulticloudProjectsLocationsAwsClustersListRequest object. Fields: pageSize: The maximum number of items to return. If not specified, a default value of 50 will be used by the service. Regardless of the pageSize value, the response can include a partial list and a caller should only rely on response's nextPageToken to determine if there are more instances left to be queried. pageToken: The `nextPageToken` value returned from a previous awsClusters.list request, if any. parent: Required. The parent location which owns this collection of AwsCluster resources. Location names are formatted as `projects//locations/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud Platform resource names. r r@r rTrrNrBrr!r"rxrxrHr!rxc\rSrSrSr\R "SS5r\R"SSS9r \R"S5r \R"S 5r S r g ) 5GkemulticloudProjectsLocationsAwsClustersPatchRequestiamA GkemulticloudProjectsLocationsAwsClustersPatchRequest object. Fields: googleCloudGkemulticloudV1AwsCluster: A GoogleCloudGkemulticloudV1AwsCluster resource to be passed as the request body. name: The name of this resource. Cluster names are formatted as `projects//locations//awsClusters/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud Platform resource names. updateMask: Required. Mask of fields to update. At least one path must be supplied in this field. The elements of the repeated paths field can only include these fields from AwsCluster: * `description`. * `annotations`. * `control_plane.version`. * `authorization.admin_users`. * `authorization.admin_groups`. * `binary_authorization.evaluation_mode`. * `control_plane.aws_services_authentication.role_arn`. * `control_plane.aws_services_authentication.role_session_name`. * `control_plane.config_encryption.kms_key_arn`. * `control_plane.instance_type`. * `control_plane.security_group_ids`. * `control_plane.proxy_config`. * `control_plane.proxy_config.secret_arn`. * `control_plane.proxy_config.secret_version`. * `control_plane.root_volume.size_gib`. * `control_plane.root_volume.volume_type`. * `control_plane.root_volume.iops`. * `control_plane.root_volume.throughput`. * `control_plane.root_volume.kms_key_arn`. * `control_plane.ssh_config`. * `control_plane.ssh_config.ec2_key_pair`. * `control_plane.instance_placement.tenancy`. * `control_plane.iam_instance_profile`. * `logging_config.component_config.enable_components`. * `control_plane.tags`. * `monitoring_config.managed_prometheus_config.enabled`. * `networking.per_node_pool_sg_rules_disabled`. validateOnly: If set, only validate the request, but do not actually update the cluster. rfr r TrrrrN)rrrrrrrrhrr+rLrrr rr!r"rzrzsQ$L*3)?)?@fhi)j&   q4 0$$$Q'*''*,r!rzc:\rSrSrSr\R "SSS9rSrg)OGkemulticloudProjectsLocationsAwsClustersWellKnownGetOpenidConfigurationRequesti aA GkemulticloudProjectsLocationsAwsClustersWellKnownGetOpenidConfigurati onRequest object. Fields: awsCluster: Required. The AwsCluster, which owns the OIDC discovery document. Format: projects/{project}/locations/{location}/awsClusters/{cluster} r TrrNrmrr!r"r|r| s$$Q6*r!r|c\rSrSrSr\R "S5r\R"SS5r \R "SSS9r \R"S 5r S r g ) 7GkemulticloudProjectsLocationsAzureClientsCreateRequestiasA GkemulticloudProjectsLocationsAzureClientsCreateRequest object. Fields: azureClientId: Required. A client provided ID the resource. Must be unique within the parent resource. The provided ID will be part of the AzureClient resource name formatted as `projects//locations//azureClients/`. Valid characters are `/a-z-/`. Cannot be longer than 63 characters. googleCloudGkemulticloudV1AzureClient: A GoogleCloudGkemulticloudV1AzureClient resource to be passed as the request body. parent: Required. The parent location where this AzureClient resource will be created. Location names are formatted as `projects//locations/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud resource names. validateOnly: If set, only validate the request, but do not actually create the client. r %GoogleCloudGkemulticloudV1AzureClientr rTrrrN)rrrrrrr azureClientIdr%googleCloudGkemulticloudV1AzureClientrrrr rr!r"r~r~sP&''*-*3*@*@Ahjk*l'  T 2&''*,r!r~c\rSrSrSr\R "S5r\R"SSS9r \R "S5r Sr g ) 7GkemulticloudProjectsLocationsAzureClientsDeleteRequesti1aA GkemulticloudProjectsLocationsAzureClientsDeleteRequest object. Fields: allowMissing: If set to true, and the AzureClient resource is not found, the request will succeed but no action will be taken on the server and a completed Operation will be returned. Useful for idempotent deletion. name: Required. The resource name the AzureClient to delete. AzureClient names are formatted as `projects//locations//azureClients/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud resource names. validateOnly: If set, only validate the request, but do not actually delete the resource. r r TrrrN) rrrrrrrr(rr+rr rr!r"rr1s; ''*,   q4 0$''*,r!rc:\rSrSrSr\R "SSS9rSrg)4GkemulticloudProjectsLocationsAzureClientsGetRequestiEa`A GkemulticloudProjectsLocationsAzureClientsGetRequest object. Fields: name: Required. The name of the AzureClient resource to describe. AzureClient names are formatted as `projects//locations//azureClients/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud resource names. r TrrNr6rr!r"rrEr7r!rc\rSrSrSr\R "S\RRS9r \R"S5r \R"SSS9r S r g ) 5GkemulticloudProjectsLocationsAzureClientsListRequestiSa"A GkemulticloudProjectsLocationsAzureClientsListRequest object. Fields: pageSize: The maximum number of items to return. If not specified, a default value of 50 will be used by the service. Regardless of the pageSize value, the response can include a partial list and a caller should only rely on response's nextPageToken to determine if there are more instances left to be queried. pageToken: The `nextPageToken` value returned from a previous azureClients.list request, if any. parent: Required. The parent location which owns this collection of AzureClient resources. Location names are formatted as `projects//locations/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud Platform resource names. r r@r rTrrNrBrr!r"rrSrHr!rc\rSrSrSr\R "S5r\R"SS5r \R "SSS9r \R"S 5r S r g ) FGkemulticloudProjectsLocationsAzureClustersAzureNodePoolsCreateRequestijaA GkemulticloudProjectsLocationsAzureClustersAzureNodePoolsCreateRequest object. Fields: azureNodePoolId: Required. A client provided ID the resource. Must be unique within the parent resource. The provided ID will be part of the AzureNodePool resource name formatted as `projects//locations//azureClusters//azureNodePools/`. Valid characters are `/a-z-/`. Cannot be longer than 63 characters. googleCloudGkemulticloudV1AzureNodePool: A GoogleCloudGkemulticloudV1AzureNodePool resource to be passed as the request body. parent: Required. The AzureCluster resource where this node pool will be created. `AzureCluster` names are formatted as `projects//locations//azureClusters/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud resource names. validateOnly: If set, only validate the request, but do not actually create the node pool. r 'GoogleCloudGkemulticloudV1AzureNodePoolr rTrrrN)rrrrrrrazureNodePoolIdr'googleCloudGkemulticloudV1AzureNodePoolrrrr rr!r"rrjsP*))!,/,5,B,BClno,p)  T 2&''*,r!rc\rSrSrSr\R "S5r\R"S5r \R "S5r \R"SSS9r \R "S 5r S r g ) FGkemulticloudProjectsLocationsAzureClustersAzureNodePoolsDeleteRequestiaA GkemulticloudProjectsLocationsAzureClustersAzureNodePoolsDeleteRequest object. Fields: allowMissing: If set to true, and the AzureNodePool resource is not found, the request will succeed but no action will be taken on the server and a completed Operation will be returned. Useful for idempotent deletion. etag: The current ETag of the AzureNodePool. Allows clients to perform deletions through optimistic concurrency control. If the provided ETag does not match the current etag of the node pool, the request will fail and an ABORTED error will be returned. ignoreErrors: Optional. If set to true, the deletion of AzureNodePool resource will succeed even if errors occur during deleting in node pool resources. Using this parameter may result in orphaned resources in the node pool. name: Required. The resource name the AzureNodePool to delete. `AzureNodePool` names are formatted as `projects//locations//azureClusters//azureNodePools/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud resource names. validateOnly: If set, only validate the request, but do not actually delete the node pool. r r rrTrr&rNr'rr!r"rrrVr!rc:\rSrSrSr\R "SSS9rSrg)CGkemulticloudProjectsLocationsAzureClustersAzureNodePoolsGetRequestiaA GkemulticloudProjectsLocationsAzureClustersAzureNodePoolsGetRequest object. Fields: name: Required. The name of the AzureNodePool resource to describe. `AzureNodePool` names are formatted as `projects//locations//azureClusters//azureNodePools/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud resource names. r TrrNr6rr!r"rrrZr!rc\rSrSrSr\R "S\RRS9r \R"S5r \R"SSS9r S r g ) DGkemulticloudProjectsLocationsAzureClustersAzureNodePoolsListRequestiaGA GkemulticloudProjectsLocationsAzureClustersAzureNodePoolsListRequest object. Fields: pageSize: The maximum number of items to return. If not specified, a default value of 50 will be used by the service. Regardless of the pageSize value, the response can include a partial list and a caller should only rely on response's nextPageToken to determine if there are more instances left to be queried. pageToken: The `nextPageToken` value returned from a previous azureNodePools.list request, if any. parent: Required. The parent `AzureCluster` which owns this collection of AzureNodePool resources. `AzureCluster` names are formatted as `projects//locations//azureClusters/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud resource names. r r@r rTrrNrBrr!r"rrr]r!rc\rSrSrSr\R "SS5r\R"SSS9r \R"S5r \R"S 5r S r g ) EGkemulticloudProjectsLocationsAzureClustersAzureNodePoolsPatchRequestiaA GkemulticloudProjectsLocationsAzureClustersAzureNodePoolsPatchRequest object. Fields: googleCloudGkemulticloudV1AzureNodePool: A GoogleCloudGkemulticloudV1AzureNodePool resource to be passed as the request body. name: The name of this resource. Node pool names are formatted as `projects//locations//azureClusters//azureNodePools/`. For more details on Google Cloud resource names, see [Resource Names](https://cloud.google.com/apis/design/resource_names) updateMask: Required. Mask of fields to update. At least one path must be supplied in this field. The elements of the repeated paths field can only include these fields from AzureNodePool: *. `annotations`. * `version`. * `autoscaling.min_node_count`. * `autoscaling.max_node_count`. * `config.ssh_config.authorized_key`. * `management.auto_repair`. * `management`. validateOnly: If set, only validate the request, but don't actually update the node pool. rr r TrrrrN)rrrrrrrrrr+rLrrr rr!r"rrsP*-6,B,BClno,p)   q4 0$$$Q'*''*,r!rc\rSrSrSr\R "S5r\R"SS5r \R "SSS9r \R"S 5r S r g ) 8GkemulticloudProjectsLocationsAzureClustersCreateRequestiaA GkemulticloudProjectsLocationsAzureClustersCreateRequest object. Fields: azureClusterId: Required. A client provided ID the resource. Must be unique within the parent resource. The provided ID will be part of the AzureCluster resource name formatted as `projects//locations//azureClusters/`. Valid characters are `/a-z-/`. Cannot be longer than 63 characters. googleCloudGkemulticloudV1AzureCluster: A GoogleCloudGkemulticloudV1AzureCluster resource to be passed as the request body. parent: Required. The parent location where this AzureCluster resource will be created. Location names are formatted as `projects//locations/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud resource names. validateOnly: If set, only validate the request, but do not actually create the cluster. r &GoogleCloudGkemulticloudV1AzureClusterr rTrrrN)rrrrrrrazureClusterIdr&googleCloudGkemulticloudV1AzureClusterrrrr rr!r"rrsP(((+.+4+A+ABjlm+n(  T 2&''*,r!rc\rSrSrSr\R "S5r\R"S5r \R "S5r \R"SSS9r \R "S 5r S r g ) 8GkemulticloudProjectsLocationsAzureClustersDeleteRequestiaA GkemulticloudProjectsLocationsAzureClustersDeleteRequest object. Fields: allowMissing: If set to true, and the AzureCluster resource is not found, the request will succeed but no action will be taken on the server and a completed Operation will be returned. Useful for idempotent deletion. etag: The current etag of the AzureCluster. Allows clients to perform deletions through optimistic concurrency control. If the provided etag does not match the current etag of the cluster, the request will fail and an ABORTED error will be returned. ignoreErrors: Optional. If set to true, the deletion of AzureCluster resource will succeed even if errors occur during deleting in cluster resources. Using this parameter may result in orphaned resources in the cluster. name: Required. The resource name the AzureCluster to delete. `AzureCluster` names are formatted as `projects//locations//azureClusters/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud Platform resource names. validateOnly: If set, only validate the request, but do not actually delete the resource. r r rrTrr&rNr'rr!r"rrr,r!rc:\rSrSrSr\R "SSS9rSrg)JGkemulticloudProjectsLocationsAzureClustersGenerateAzureAccessTokenRequesti#aA GkemulticloudProjectsLocationsAzureClustersGenerateAzureAccessTokenRequest object. Fields: azureCluster: Required. The name of the AzureCluster resource to authenticate to. `AzureCluster` names are formatted as `projects//locations//azureClusters/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud resource names. r TrrN rrrrrrr azureClusterr rr!r"rr#s &&q48,r!rc`\rSrSrSr\R "SSS9r\R"SS5r Sr g ) PGkemulticloudProjectsLocationsAzureClustersGenerateAzureClusterAgentTokenRequesti3a7A GkemulticloudProjectsLocationsAzureClustersGenerateAzureClusterAgentTo kenRequest object. Fields: azureCluster: Required. googleCloudGkemulticloudV1GenerateAzureClusterAgentTokenRequest: A GoogleCloudGkemulticloudV1GenerateAzureClusterAgentTokenRequest resource to be passed as the request body. r Tr?GoogleCloudGkemulticloudV1GenerateAzureClusterAgentTokenRequestr rN) rrrrrrrrr?googleCloudGkemulticloudV1GenerateAzureClusterAgentTokenRequestr rr!r"rr3s<&&q48,DMDZDZ\]_`EaAr!rc:\rSrSrSr\R "SSS9rSrg)9GkemulticloudProjectsLocationsAzureClustersGetJwksRequestiBzA GkemulticloudProjectsLocationsAzureClustersGetJwksRequest object. Fields: azureCluster: Required. The AzureCluster, which owns the JsonWebKeys. Format: `projects//locations//azureClusters/` r TrrNrrr!r"rrBs&&q48,r!rc:\rSrSrSr\R "SSS9rSrg)5GkemulticloudProjectsLocationsAzureClustersGetRequestiMaoA GkemulticloudProjectsLocationsAzureClustersGetRequest object. Fields: name: Required. The name of the AzureCluster resource to describe. `AzureCluster` names are formatted as `projects//locations//azureClusters/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud Platform resource names. r TrrNr6rr!r"rrMr7r!rc\rSrSrSr\R "S\RRS9r \R"S5r \R"SSS9r S r g ) 6GkemulticloudProjectsLocationsAzureClustersListRequesti[a%A GkemulticloudProjectsLocationsAzureClustersListRequest object. Fields: pageSize: The maximum number of items to return. If not specified, a default value of 50 will be used by the service. Regardless of the pageSize value, the response can include a partial list and a caller should only rely on response's nextPageToken to determine if there are more instances left to be queried. pageToken: The `nextPageToken` value returned from a previous azureClusters.list request, if any. parent: Required. The parent location which owns this collection of AzureCluster resources. Location names are formatted as `projects//locations/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud Platform resource names. r r@r rTrrNrBrr!r"rr[rHr!rc\rSrSrSr\R "SS5r\R"SSS9r \R"S5r \R"S 5r S r g ) 7GkemulticloudProjectsLocationsAzureClustersPatchRequestiraA GkemulticloudProjectsLocationsAzureClustersPatchRequest object. Fields: googleCloudGkemulticloudV1AzureCluster: A GoogleCloudGkemulticloudV1AzureCluster resource to be passed as the request body. name: The name of this resource. Cluster names are formatted as `projects//locations//azureClusters/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud Platform resource names. updateMask: Required. Mask of fields to update. At least one path must be supplied in this field. The elements of the repeated paths field can only include these fields from AzureCluster: * `description`. * `azureClient`. * `control_plane.version`. * `control_plane.vm_size`. * `annotations`. * `authorization.admin_users`. * `authorization.admin_groups`. * `control_plane.root_volume.size_gib`. * `azure_services_authentication`. * `azure_services_authentication.tenant_id`. * `azure_services_authentication.application_id`. * `control_plane.proxy_config`. * `control_plane.proxy_config.resource_group_id`. * `control_plane.proxy_config.secret_id`. * `control_plane.ssh_config.authorized_key`. * `logging_config.component_config.enable_components` * `monitoring_config.managed_prometheus_config.enabled`. validateOnly: If set, only validate the request, but do not actually update the cluster. rr r TrrrrN)rrrrrrrrrr+rLrrr rr!r"rrrsP:,5+A+ABjlm+n(   q4 0$$$Q'*''*,r!rc:\rSrSrSr\R "SSS9rSrg)QGkemulticloudProjectsLocationsAzureClustersWellKnownGetOpenidConfigurationRequestizA GkemulticloudProjectsLocationsAzureClustersWellKnownGetOpenidConfigura tionRequest object. Fields: azureCluster: Required. The AzureCluster, which owns the OIDC discovery document. Format: projects//locations//azureClusters/ r TrrNrrr!r"rrs&&q48,r!rc\rSrSrSr\R "S5r\R "SSS9r\R "S5r \R "S5r \R "S 5r S r g ) KGkemulticloudProjectsLocationsGenerateAttachedClusterInstallManifestRequestia A GkemulticloudProjectsLocationsGenerateAttachedClusterInstallManifestRequest object. Fields: attachedClusterId: Required. A client provided ID of the resource. Must be unique within the parent resource. The provided ID will be part of the AttachedCluster resource name formatted as `projects//locations//attachedClusters/`. Valid characters are `/a-z-/`. Cannot be longer than 63 characters. When generating an install manifest for importing an existing Membership resource, the attached_cluster_id field must be the Membership id. Membership names are formatted as `projects//locations//memberships/`. parent: Required. The parent location where this AttachedCluster resource will be created. Location names are formatted as `projects//locations/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud resource names. platformVersion: Required. The platform version for the cluster (e.g. `1.19.0-gke.1000`). You can list all supported versions on a given Google Cloud region by calling GetAttachedServerConfig. proxyConfig_kubernetesSecret_name: Name of the kubernetes secret. proxyConfig_kubernetesSecret_namespace: Namespace in which the kubernetes secret is stored. r r Trrrr&rN) rrrrrrrrrplatformVersion!proxyConfig_kubernetesSecret_name&proxyConfig_kubernetesSecret_namespacer rr!r"rrs^4 ++A.  T 2&))!,/&/&;&;A&>#+4+@+@+C(r!rc:\rSrSrSr\R "SSS9rSrg)GoogleCloudGkemulticloudV1AttachedCluster.StateValueValuesEnumi|aOutput only. The current state of the cluster. Values: STATE_UNSPECIFIED: Not set. PROVISIONING: The PROVISIONING state indicates the cluster is being registered. RUNNING: The RUNNING state indicates the cluster has been register and is fully usable. RECONCILING: The RECONCILING state indicates that some work is actively being done on the cluster, such as upgrading software components. STOPPING: The STOPPING state indicates the cluster is being de- registered. ERROR: The ERROR state indicates the cluster is in a broken unrecoverable state. DEGRADED: The DEGRADED state indicates the cluster requires user action to restore full functionality. rr r rrr&rN rrrrrSTATE_UNSPECIFIED PROVISIONINGRUNNING RECONCILINGSTOPPINGERRORDEGRADEDr rr!r"StateValueValuesEnumr|-"LGKH EHr!radditionalPropertiescf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) :GoogleCloudGkemulticloudV1AttachedCluster.AnnotationsValuei[Optional. Annotations on the cluster. This field has the same restrictions as Kubernetes annotations. The total size of all keys and values combined is limited to 256k. Key can have 2 segments: prefix (optional) and name (required), separated by a slash (/). Prefix must be a DNS subdomain. Name must be 63 characters or less, begin and end with alphanumerics, with dashes (-), underscores (_), dots (.), and alphanumerics between. Messages: AdditionalProperty: An additional property for a AnnotationsValue object. Fields: additionalProperties: Additional properties of type AnnotationsValue c`\rSrSrSr\R "S5r\R "S5rSr g)MGoogleCloudGkemulticloudV1AttachedCluster.AnnotationsValue.AdditionalPropertyiAn additional property for a AnnotationsValue object. Fields: key: Name of the additional property. value: A string attribute. r r rN rrrrrrrkeyvaluer rr!r"AdditionalPropertyr)   ! !! $c##A&er!rr TrepeatedrN rrrrrrMessagerrrr rr!r"AnnotationsValuer2 'Y.. '%112FTXYr!rcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) 3GoogleCloudGkemulticloudV1AttachedCluster.TagsValueiaOptional. Input only. Tag keys and values directly bound to this resource. The tag key must be specified in the format `/,` where the tag namespace is the ID of the organization or name of the project that the tag key is defined in. The short name of a tag key or value can have a maximum length of 256 characters. The permitted character set for the short name includes UTF-8 encoded Unicode characters except single quotation marks (`'`), double quotation marks (`"`), backslashes (`\`), and forward slashes (`/`). See [Tags](https://cloud.google.com/resource- manager/docs/tags/tags-overview) for more details on Google Cloud Platform tags. Messages: AdditionalProperty: An additional property for a TagsValue object. Fields: additionalProperties: Additional properties of type TagsValue c`\rSrSrSr\R "S5r\R "S5rSr g)FGoogleCloudGkemulticloudV1AttachedCluster.TagsValue.AdditionalPropertyi}An additional property for a TagsValue object. Fields: key: Name of the additional property. value: A string attribute. r r rNrrr!r"rrrr!rr TrrNrrr!r" TagsValuers2$ 'Y.. '%112FTXYr!rr 7GoogleCloudGkemulticloudV1AttachedClustersAuthorizationr -GoogleCloudGkemulticloudV1BinaryAuthorizationrrr&r.GoogleCloudGkemulticloudV1AttachedClusterErrorTr GoogleCloudGkemulticloudV1Fleet 'GoogleCloudGkemulticloudV1LoggingConfig *GoogleCloudGkemulticloudV1MonitoringConfig ,GoogleCloudGkemulticloudV1AttachedOidcConfig-GoogleCloudGkemulticloudV1AttachedProxyConfig/GoogleCloudGkemulticloudV1SecurityPostureConfig0GoogleCloudGkemulticloudV1SystemComponentsConfigr 0GoogleCloudGkemulticloudV1WorkloadIdentityConfigrN)+rrrrrrEnumrrMapUnrecognizedFieldsrrrr annotations authorizationbinaryAuthorizationr clusterRegion createTime description distributionerrorsr)fleetkubernetesVersion loggingConfigmonitoringConfigr+ oidcConfigr proxyConfigr reconcilingsecurityPostureConfig EnumFieldstatesystemComponentsConfigtagsuid updateTimeworkloadIdentityConfigr rr!r"r r (sHQfY^^4 !!"89Z**Z:Z< !!"89Z)##Z:Z@&&'91=+(()bdef-!../^`ab''*-$$Q'*%%a(+&&q),  ! !"RTU`d e&   q !$  !BB G%++B/(()RTVW-++,XZ\]   r "$%%&TVXY*))"-/&&'VXZ[+&&r*+#001bdfg   4b 9%$112dfhi    R 0$b!#$$R(*$112dfhir!r c<\rSrSrSr\R "S5rSrg)rizAttachedClusterError describes errors found on attached clusters. Fields: message: Human-friendly description of the error. r rN rrrrrrrmessager rr!r"rr  ! !! $'r!rc<\rSrSrSr\R "S5rSrg).GoogleCloudGkemulticloudV1AttachedClusterGroupizIdentities of a group-type subject for Attached clusters. Fields: group: Required. The name of the group, e.g. `my-group@domain.com`. r rN rrrrrrrgroupr rr!r"r'r'    "%r!r'c<\rSrSrSr\R "S5rSrg)-GoogleCloudGkemulticloudV1AttachedClusterUserizIdentities of a user-type subject for Attached clusters. Fields: username: Required. The name of the user, e.g. `my-gcp-id@gmail.com`. r rN rrrrrrrusernamer rr!r"r,r,  " "1 %(r!r,c`\rSrSrSr\R "SSSS9r\R "SSSS9rS r g ) riConfiguration related to the cluster RBAC settings. Fields: adminGroups: Optional. Groups of users that can perform operations as a cluster admin. A managed ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole to the groups. Up to ten admin groups can be provided. For more info on RBAC, see https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user- facing-roles adminUsers: Optional. Users that can perform operations as a cluster admin. A managed ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole to the users. Up to ten admin users can be provided. For more info on RBAC, see https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user- facing-roles r'r Trr,r rN rrrrrrr adminGroups adminUsersr rr!r"rrs7"&&'WYZeij+%%&UWXcgh*r!rc`\rSrSrSr\R "S5r\R"S5r Sr g)ri%aOIDC discovery information of the target cluster. Kubernetes Service Account (KSA) tokens are JWT tokens signed by the cluster API server. This fields indicates how Google Cloud Platform services validate KSA tokens in order to allow system workloads (such as GKE Connect and telemetry agents) to authenticate back to Google Cloud Platform. Both clusters with public and private issuer URLs are supported. Clusters with public issuers only need to specify the `issuer_url` field while clusters with private issuers need to provide both `issuer_url` and `oidc_jwks`. Fields: issuerUrl: A JSON Web Token (JWT) issuer URI. `issuer` must start with `https://`. jwks: Optional. OIDC verification keys in JWKS format (RFC 7517). It contains a list of OIDC verification keys that can be used to verify OIDC JWTs. This field is required for cluster that doesn't have a publicly available discovery endpoint. When provided, it will be directly used to verify the OIDC JWT asserted by the IDP. r r rN) rrrrrrr issuerUrl BytesFieldjwksr rr!r"rr%s)&##A&)   a $r!rc\rSrSrSr\R "S5r\R "S5r\R"SS5r \R"SS5r \R"S5r S rg ) 5GoogleCloudGkemulticloudV1AttachedPlatformVersionInfoi=a@Information about a supported Attached Clusters platform version. Fields: enabled: Optional. True if the version is available for attachedcluster creation. If a version is enabled, it can be used to attach new clusters. endOfLife: Optional. True if this cluster version belongs to a minor version that has reached its end of life and is no longer in scope to receive security and bug fixes. endOfLifeDate: Optional. The estimated date (in Pacific Time) when this cluster version will reach its end of life. Or if this version is no longer supported (the `end_of_life` field is true), this is the actual date (in Pacific time) when the version reached its end of life. releaseDate: Optional. The date (in Pacific Time) when the cluster version was released. version: Platform version name. r r GoogleTypeDaterrr&rNrrrrrrrenabled endOfLifer endOfLifeDate releaseDaterversionr rr!r"r:r:=s_$  " "1 %'$$Q')(()91=-&&'7;+  ! !! $'r!r:c>\rSrSrSr\R "SS5rSrg)riWaDetails of a proxy config. Fields: kubernetesSecret: The Kubernetes Secret resource that contains the HTTP(S) proxy configuration. The secret must be a JSON encoded proxy configuration as described in https://cloud.google.com/kubernetes- engine/multi-cloud/docs/attached/eks/how-to/use-a-proxy#configure-proxy- support for EKS clusters and https://cloud.google.com/kubernetes- engine/multi-cloud/docs/attached/aks/how-to/use-a-proxy#configure-proxy- support for AKS clusters. *GoogleCloudGkemulticloudV1KubernetesSecretr rN) rrrrrrrkubernetesSecretr rr!r"rrWs ++,XZ[\r!rc`\rSrSrSr\R "S5r\R"SSSS9r Sr g ) .GoogleCloudGkemulticloudV1AttachedServerConfigigzAttachedServerConfig provides information about supported Kubernetes versions Fields: name: The resource name of the config. validVersions: List of valid platform versions. r r:r TrrN) rrrrrrrr+r validVersionsr rr!r"rFrFgs0   q !$(()`bcnrs-r!rFc`\rSrSrSr\R "SSSS9r\R "SSSS9rS r g ) *GoogleCloudGkemulticloudV1AwsAuthorizationitr1)GoogleCloudGkemulticloudV1AwsClusterGroupr Tr(GoogleCloudGkemulticloudV1AwsClusterUserr rNr2rr!r"rIrIts7"&&'RTU`de+%%&PRS^bc*r!rIc^\rSrSrSr\R "S5r\R "SSS9rSr g) >GoogleCloudGkemulticloudV1AwsAutoscalingGroupMetricsCollectioniaConfiguration related to CloudWatch metrics collection in an AWS Auto Scaling group. Fields: granularity: Required. The frequency at which EC2 Auto Scaling sends aggregated data to AWS CloudWatch. The only valid value is "1Minute". metrics: Optional. The metrics to enable. For a list of valid metrics, see https://docs.aws.amazon.com/autoscaling/ec2/APIReference/API_EnableMetri csCollection.html. If you specify Granularity and don't specify any metrics, all metrics are enabled. r r TrrN) rrrrrrr granularitymetricsr rr!r"rMrMs+ %%a(+  ! !!d 3'r!rMc\rSrSrSr"SS\R 5r\R"S5"SS\R55r \R"SS5r \R"S S 5r\R"S 5r\R"S S 5r\R"S5r\R"SS5r\R"S5r\R"S5r\R"S5r\R"SSSS9r\R"S5r\R"SS5r\R"SS5r\R"SS5r\R"S5r\R"S S!5r\R<"S"5r\R@"SS#5r!\R"S$5r"\R"S%5r#\R"S&S'5r$S(r%g))*rfia An Anthos cluster running on AWS. Enums: StateValueValuesEnum: Output only. The current state of the cluster. Messages: AnnotationsValue: Optional. Annotations on the cluster. This field has the same restrictions as Kubernetes annotations. The total size of all keys and values combined is limited to 256k. Key can have 2 segments: prefix (optional) and name (required), separated by a slash (/). Prefix must be a DNS subdomain. Name must be 63 characters or less, begin and end with alphanumerics, with dashes (-), underscores (_), dots (.), and alphanumerics between. Fields: annotations: Optional. Annotations on the cluster. This field has the same restrictions as Kubernetes annotations. The total size of all keys and values combined is limited to 256k. Key can have 2 segments: prefix (optional) and name (required), separated by a slash (/). Prefix must be a DNS subdomain. Name must be 63 characters or less, begin and end with alphanumerics, with dashes (-), underscores (_), dots (.), and alphanumerics between. authorization: Required. Configuration related to the cluster RBAC settings. awsRegion: Required. The AWS region where the cluster runs. Each Google Cloud region supports a subset of nearby AWS regions. You can call GetAwsServerConfig to list all supported AWS regions within a given Google Cloud region. binaryAuthorization: Optional. Binary Authorization configuration for this cluster. clusterCaCertificate: Output only. PEM encoded x509 certificate of the cluster root of trust. controlPlane: Required. Configuration related to the cluster control plane. createTime: Output only. The time at which this cluster was created. description: Optional. A human readable description of this cluster. Cannot be longer than 255 UTF-8 encoded bytes. endpoint: Output only. The endpoint of the cluster's API server. errors: Output only. A set of errors found in the cluster. etag: Allows clients to perform consistent read-modify-writes through optimistic concurrency control. Can be sent on update and delete requests to ensure the client has an up-to-date value before proceeding. fleet: Required. Fleet configuration. loggingConfig: Optional. Logging configuration for this cluster. monitoringConfig: Optional. Monitoring configuration for this cluster. name: The name of this resource. Cluster names are formatted as `projects//locations//awsClusters/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud Platform resource names. networking: Required. Cluster-wide networking configuration. reconciling: Output only. If set, there are currently changes in flight to the cluster. state: Output only. The current state of the cluster. uid: Output only. A globally unique identifier for the cluster. updateTime: Output only. The time at which this cluster was last updated. workloadIdentityConfig: Output only. Workload Identity settings. c4\rSrSrSrSrSrSrSrSr Sr S r S r g ) 9GoogleCloudGkemulticloudV1AwsCluster.StateValueValuesEnumiOutput only. The current state of the cluster. Values: STATE_UNSPECIFIED: Not set. PROVISIONING: The PROVISIONING state indicates the cluster is being created. RUNNING: The RUNNING state indicates the cluster has been created and is fully usable. RECONCILING: The RECONCILING state indicates that some work is actively being done on the cluster, such as upgrading the control plane replicas. STOPPING: The STOPPING state indicates the cluster is being deleted. ERROR: The ERROR state indicates the cluster is in a broken unrecoverable state. DEGRADED: The DEGRADED state indicates the cluster requires user action to restore full functionality. rr r rrr&rrNrrr!r"rrRrr!rrcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) 5GoogleCloudGkemulticloudV1AwsCluster.AnnotationsValueirc`\rSrSrSr\R "S5r\R "S5rSr g)HGoogleCloudGkemulticloudV1AwsCluster.AnnotationsValue.AdditionalPropertyirr r rNrrr!r"rrWrr!rr TrrNrrr!r"rrUrr!rr rIr rrrr&)GoogleCloudGkemulticloudV1AwsControlPlanerrrr)GoogleCloudGkemulticloudV1AwsClusterErrorrTrrrrrrrrr.GoogleCloudGkemulticloudV1AwsClusterNetworkingrrrrrrrrN)&rrrrrrr rrr rrrr r r awsRegionr clusterCaCertificate controlPlanerrendpointrr)rrrr+ networkingrrrrrr r!r rr!r"rfrfs8tY^^4 !!"89Z**Z:Z<&&'91=+(()UWXY-##A&)!../^`ab"..q1''(SUVW,$$Q'*%%a(+  " "1 %(  ! !"Mr\` a&   r "$  !BB G%(()RTVW-++,XZ\]   r "$%%&VXZ[*&&r*+   4b 9%b!#$$R(*$112dfhir!rfc<\rSrSrSr\R "S5rSrg)rYi&zuAwsClusterError describes errors found on AWS clusters. Fields: message: Human-friendly description of the error. r rNr#rr!r"rYrY&r%r!rYc<\rSrSrSr\R "S5rSrg)rJi0zIdentities of a group-type subject for AWS clusters. Fields: group: Required. The name of the group, e.g. `my-group@domain.com`. r rNr(rr!r"rJrJ0r*r!rJc\rSrSrSr\R "S5r\R"SSS9r \R"SSS9r \R"S5r S r g ) rZi:adClusterNetworking defines cluster-wide networking configuration. Anthos clusters on AWS run on a single VPC. This includes control plane replicas and node pool nodes. Fields: perNodePoolSgRulesDisabled: Optional. Disable the per node pool subnet security group rules on the control plane security group. When set to true, you must also provide one or more security groups that ensure node pools are able to send requests to the control plane on TCP/443 and TCP/8132. Failure to do so may result in unavailable node pools. podAddressCidrBlocks: Required. All pods in the cluster are assigned an IPv4 address from these ranges. Only a single range is supported. This field cannot be changed after creation. serviceAddressCidrBlocks: Required. All services in the cluster are assigned an IPv4 address from these ranges. Only a single range is supported. This field cannot be changed after creation. vpcId: Required. The VPC associated with the cluster. All component clusters (i.e. control plane and node pools) run on a single VPC. This field cannot be changed after creation. r r TrrrrN) rrrrrrrperNodePoolSgRulesDisabledrpodAddressCidrBlocksserviceAddressCidrBlocksvpcIdr rr!r"rZrZ:sP* )55a8"..q4@&221tD    "%r!rZc<\rSrSrSr\R "S5rSrg)rKiVzIdentities of a user-type subject for AWS clusters. Fields: username: Required. The name of the user, e.g. `my-gcp-id@gmail.com`. r rNr-rr!r"rKrKVr/r!rKc<\rSrSrSr\R "S5rSrg)-GoogleCloudGkemulticloudV1AwsConfigEncryptioni`zwConfig encryption for user data. Fields: kmsKeyArn: Required. The ARN of the AWS KMS key used to encrypt user data. r rN rrrrrrr kmsKeyArnr rr!r"riri`s ##A&)r!ricr\rSrSrSr\R "S5"SS\R55r \R"SS5r \R"SS 5r \R"S S 5r \R"S 5r\R"S S5r\R"S5r\R"SS5r\R"SS5r\R"SS5r\R"SSS9r\R"SS5r\R"SSS9r\R"SS5r\R"S5rSrg)rXija ControlPlane defines common parameters between control plane nodes. Messages: TagsValue: Optional. A set of AWS resource tags to propagate to all underlying managed AWS resources. Specify at most 50 pairs containing alphanumerics, spaces, and symbols (.+-=_:@/). Keys can be up to 127 Unicode characters. Values can be up to 255 Unicode characters. Fields: awsServicesAuthentication: Required. Authentication configuration for management of AWS resources. configEncryption: Required. Config encryption for user data. databaseEncryption: Required. The ARN of the AWS KMS key used to encrypt cluster secrets. iamInstanceProfile: Required. The name or ARN of the AWS IAM instance profile to assign to each control plane replica. instancePlacement: Optional. The placement to use on control plane instances. When unspecified, the VPC's default tenancy will be used. instanceType: Optional. The AWS instance type. When unspecified, it uses a default based on the cluster's version. mainVolume: Optional. Configuration related to the main volume provisioned for each control plane replica. The main volume is in charge of storing all of the cluster's etcd state. Volumes will be provisioned in the availability zone associated with the corresponding subnet. When unspecified, it defaults to 8 GiB with the GP2 volume type. proxyConfig: Optional. Proxy configuration for outbound HTTP(S) traffic. rootVolume: Optional. Configuration related to the root volume provisioned for each control plane replica. Volumes will be provisioned in the availability zone associated with the corresponding subnet. When unspecified, it defaults to 32 GiB with the GP2 volume type. securityGroupIds: Optional. The IDs of additional security groups to add to control plane replicas. The Anthos Multi-Cloud API will automatically create and manage security groups with the minimum rules needed for a functioning cluster. sshConfig: Optional. SSH configuration for how to access the underlying control plane machines. subnetIds: Required. The list of subnets where control plane replicas will run. A replica will be provisioned on each subnet and up to three values can be provided. Each subnet must be in a different AWS Availability Zone (AZ). tags: Optional. A set of AWS resource tags to propagate to all underlying managed AWS resources. Specify at most 50 pairs containing alphanumerics, spaces, and symbols (.+-=_:@/). Keys can be up to 127 Unicode characters. Values can be up to 255 Unicode characters. version: Required. The Kubernetes version to run on control plane replicas (e.g. `1.19.10-gke.1000`). You can list all supported versions on a given Google Cloud region by calling GetAwsServerConfig. rcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) 3GoogleCloudGkemulticloudV1AwsControlPlane.TagsValueiaOptional. A set of AWS resource tags to propagate to all underlying managed AWS resources. Specify at most 50 pairs containing alphanumerics, spaces, and symbols (.+-=_:@/). Keys can be up to 127 Unicode characters. Values can be up to 255 Unicode characters. Messages: AdditionalProperty: An additional property for a TagsValue object. Fields: additionalProperties: Additional properties of type TagsValue c`\rSrSrSr\R "S5r\R "S5rSr g)FGoogleCloudGkemulticloudV1AwsControlPlane.TagsValue.AdditionalPropertyirr r rNrrr!r"rrprr!rr TrrNrrr!r"rrn2  'Y.. '%112FTXYr!r3GoogleCloudGkemulticloudV1AwsServicesAuthenticationr rir /GoogleCloudGkemulticloudV1AwsDatabaseEncryptionrr.GoogleCloudGkemulticloudV1AwsInstancePlacementr&r+GoogleCloudGkemulticloudV1AwsVolumeTemplater(GoogleCloudGkemulticloudV1AwsProxyConfigrrrTr&GoogleCloudGkemulticloudV1AwsSshConfigrrrrrN)rrrrrrr rrrrawsServicesAuthenticationconfigEncryptiondatabaseEncryptionriamInstanceProfileinstancePlacement instanceType mainVolumer rootVolumesecurityGroupIds sshConfig subnetIdsrrAr rr!r"rXrXjsE/b !!"89Z)##Z:Z4(445jlmn++,[]^_ --._abc ,,Q/,,-]_`a&&q),%%&SUVW*&&'QSTU+%%&SUVW***2=$$%MrR)##B6)    R 0$  ! !" %'r!rXc<\rSrSrSr\R "S5rSrg)rsizConfiguration related to application-layer secrets encryption. Fields: kmsKeyArn: Required. The ARN of the AWS KMS key used to encrypt cluster secrets. r rNrjrr!r"rsrss##A&)r!rsch\rSrSrSr"SS\R 5r\R"SS5r Sr g)rtia.Details of placement information for an instance. Limitations for using the `host` tenancy: * T3 instances that use the unlimited CPU credit option don't support host tenancy. Enums: TenancyValueValuesEnum: Required. The tenancy for instance. Fields: tenancy: Required. The tenancy for instance. c(\rSrSrSrSrSrSrSrSr g) EGoogleCloudGkemulticloudV1AwsInstancePlacement.TenancyValueValuesEnumizRequired. The tenancy for instance. Values: TENANCY_UNSPECIFIED: Not set. DEFAULT: Use default VPC tenancy. DEDICATED: Run a dedicated instance. HOST: Launch this instance to a dedicated host. rr r rrN) rrrrrTENANCY_UNSPECIFIEDDEFAULT DEDICATEDHOSTr rr!r"TenancyValueValuesEnumrsGI Dr!rr rN) rrrrrrr rrtenancyr rr!r"rtrts,   y~~      8! <'r!rtc<\rSrSrSr\R "SSSS9rSrg) (GoogleCloudGkemulticloudV1AwsJsonWebKeysizAwsJsonWebKeys is a valid JSON Web Key Set as specififed in RFC 7517. Fields: keys: The public component of the keys used by the cluster to sign token requests. GoogleCloudGkemulticloudV1Jwkr TrrN rrrrrrrkeysr rr!r"rr    ?T R$r!rc\rSrSrSr\R "S5r\R "S5r\R"SS5r \R"SS5r \R"S5r S rg ) +GoogleCloudGkemulticloudV1AwsK8sVersionInfoiaKubernetes version information of GKE cluster on AWS. Fields: enabled: Optional. True if the version is available for cluster creation. If a version is enabled for creation, it can be used to create new clusters. Otherwise, cluster creation will fail. However, cluster upgrade operations may succeed, even if the version is not enabled. endOfLife: Optional. True if this cluster version belongs to a minor version that has reached its end of life and is no longer in scope to receive security and bug fixes. endOfLifeDate: Optional. The estimated date (in Pacific Time) when this cluster version will reach its end of life. Or if this version is no longer supported (the `end_of_life` field is true), this is the actual date (in Pacific time) when the version reached its end of life. releaseDate: Optional. The date (in Pacific Time) when the cluster version was released. version: Kubernetes version name. r r r;rrr&rNr<rr!r"rr_&  " "1 %'$$Q')(()91=-&&'7;+  ! !! $'r!rc\rSrSrSr\R "S5"SS\R55r \R "S5"SS\R55r \R"SS 5r \R"S S 5r \R"S 5r\R"S 5r\R"SS5r\R"S5r\R"SS5r\R"SS5r\R"SS5r\R"SSS9r\R"SS5r\R"SS5r\R"SS5r\R"SSSS9rS rg!)"'GoogleCloudGkemulticloudV1AwsNodeConfigia Parameters that describe the nodes in a cluster. Messages: LabelsValue: Optional. The initial labels assigned to nodes of this node pool. An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }. TagsValue: Optional. Key/value metadata to assign to each underlying AWS resource. Specify at most 50 pairs containing alphanumerics, spaces, and symbols (.+-=_:@/). Keys can be up to 127 Unicode characters. Values can be up to 255 Unicode characters. Fields: autoscalingMetricsCollection: Optional. Configuration related to CloudWatch metrics collection on the Auto Scaling group of the node pool. When unspecified, metrics collection is disabled. configEncryption: Required. Config encryption for user data. iamInstanceProfile: Required. The name or ARN of the AWS IAM instance profile to assign to nodes in the pool. imageType: Optional. The OS image type to use on node pool instances. Can be unspecified, or have a value of `ubuntu`. When unspecified, it defaults to `ubuntu`. instancePlacement: Optional. Placement related info for this node. When unspecified, the VPC's default tenancy will be used. instanceType: Optional. The EC2 instance type when creating on-Demand instances. If unspecified during node pool creation, a default will be chosen based on the node pool version, and assigned to this field. labels: Optional. The initial labels assigned to nodes of this node pool. An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }. proxyConfig: Optional. Proxy configuration for outbound HTTP(S) traffic. rootVolume: Optional. Template for the root volume provisioned for node pool nodes. Volumes will be provisioned in the availability zone assigned to the node pool subnet. When unspecified, it defaults to 32 GiB with the GP2 volume type. securityGroupIds: Optional. The IDs of additional security groups to add to nodes in this pool. The manager will automatically create security groups with minimum rules needed for a functioning cluster. spotConfig: Optional. Configuration for provisioning EC2 Spot instances When specified, the node pool will provision Spot instances from the set of spot_config.instance_types. This field is mutually exclusive with `instance_type`. sshConfig: Optional. The SSH configuration. tags: Optional. Key/value metadata to assign to each underlying AWS resource. Specify at most 50 pairs containing alphanumerics, spaces, and symbols (.+-=_:@/). Keys can be up to 127 Unicode characters. Values can be up to 255 Unicode characters. taints: Optional. The initial taints assigned to nodes of this node pool. rcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) 3GoogleCloudGkemulticloudV1AwsNodeConfig.LabelsValueiGPOptional. The initial labels assigned to nodes of this node pool. An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }. Messages: AdditionalProperty: An additional property for a LabelsValue object. Fields: additionalProperties: Additional properties of type LabelsValue c`\rSrSrSr\R "S5r\R "S5rSr g)FGoogleCloudGkemulticloudV1AwsNodeConfig.LabelsValue.AdditionalPropertyiTAn additional property for a LabelsValue object. Fields: key: Name of the additional property. value: A string attribute. r r rNrrr!r"rrTrr!rr TrrNrrr!r" LabelsValuerG2  'Y.. '%112FTXYr!rcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) 1GoogleCloudGkemulticloudV1AwsNodeConfig.TagsValueiaaOptional. Key/value metadata to assign to each underlying AWS resource. Specify at most 50 pairs containing alphanumerics, spaces, and symbols (.+-=_:@/). Keys can be up to 127 Unicode characters. Values can be up to 255 Unicode characters. Messages: AdditionalProperty: An additional property for a TagsValue object. Fields: additionalProperties: Additional properties of type TagsValue c`\rSrSrSr\R "S5r\R "S5rSr g)DGoogleCloudGkemulticloudV1AwsNodeConfig.TagsValue.AdditionalPropertyiorr r rNrrr!r"rrorr!rr TrrNrrr!r"rrarqr!rrMr rir rrrtr&rrrvrrurrTr$GoogleCloudGkemulticloudV1SpotConfigrrwrr#GoogleCloudGkemulticloudV1NodeTaintrrN)rrrrrrr rrrrrautoscalingMetricsCollectionryrr{ imageTyper|r}labelsrrr spotConfigrrtaintsr rr!r"rrsu/b !!"89ZI%%Z:Z2 !!"89Z)##Z:Z4"+!7!78xz{!|++,[]^_ ,,Q/##A&),,-]_`a&&q),  ! !- 3&&&'QSTU+%%&SUVW***2=%%&LbQ*$$%MrR)    R 0$  ! !"GVZ [&r!rc<\rSrSrSr\R "S5rSrg)+GoogleCloudGkemulticloudV1AwsNodeManagementiaAwsNodeManagement defines the set of node management features turned on for an AWS node pool. Fields: autoRepair: Optional. Whether or not the nodes will be automatically repaired. When set to true, the nodes in this node pool will be monitored and if they fail health checks consistently over a period of time, an automatic repair action will be triggered to replace them with new nodes. r rN rrrrrrr autoRepairr rr!r"rr %%a(*r!rc \rSrSrSr"SS\R 5r\R"S5"SS\R55r \R"SS5r \R"S S 5r\R"S S 5r\R "S 5r\R"SSSS9r\R "S5r\R"SS5r\R"SS5r\R"SS5r\R "S5r\R0"S5r\R4"SS5r\R "S5r\R "S5r\R"SS5r\R "S 5r\R "S!5r S"r!g#)$rPia An Anthos node pool running on AWS. Enums: StateValueValuesEnum: Output only. The lifecycle state of the node pool. Messages: AnnotationsValue: Optional. Annotations on the node pool. This field has the same restrictions as Kubernetes annotations. The total size of all keys and values combined is limited to 256k. Key can have 2 segments: prefix (optional) and name (required), separated by a slash (/). Prefix must be a DNS subdomain. Name must be 63 characters or less, begin and end with alphanumerics, with dashes (-), underscores (_), dots (.), and alphanumerics between. Fields: annotations: Optional. Annotations on the node pool. This field has the same restrictions as Kubernetes annotations. The total size of all keys and values combined is limited to 256k. Key can have 2 segments: prefix (optional) and name (required), separated by a slash (/). Prefix must be a DNS subdomain. Name must be 63 characters or less, begin and end with alphanumerics, with dashes (-), underscores (_), dots (.), and alphanumerics between. autoscaling: Required. Autoscaler configuration for this node pool. config: Required. The configuration of the node pool. createTime: Output only. The time at which this node pool was created. errors: Output only. A set of errors found in the node pool. etag: Allows clients to perform consistent read-modify-writes through optimistic concurrency control. Can be sent on update and delete requests to ensure the client has an up-to-date value before proceeding. kubeletConfig: Optional. Node kubelet configs. management: Optional. The Management configuration for this node pool. maxPodsConstraint: Required. The constraint on the maximum number of pods that can be run simultaneously on a node in the node pool. name: The name of this resource. Node pool names are formatted as `projects//locations//awsClusters//awsNodePools/`. For more details on Google Cloud resource names, see [Resource Names](https://cloud.google.com/apis/design/resource_names) reconciling: Output only. If set, there are currently changes in flight to the node pool. state: Output only. The lifecycle state of the node pool. subnetId: Required. The subnet where the node pool node run. uid: Output only. A globally unique identifier for the node pool. updateSettings: Optional. Update settings control the speed and disruption of the update. updateTime: Output only. The time at which this node pool was last updated. version: Required. The Kubernetes version to run on this node pool (e.g. `1.19.10-gke.1000`). You can list all supported versions on a given Google Cloud region by calling GetAwsServerConfig. c4\rSrSrSrSrSrSrSrSr Sr S r S r g ) :GoogleCloudGkemulticloudV1AwsNodePool.StateValueValuesEnumiazOutput only. The lifecycle state of the node pool. Values: STATE_UNSPECIFIED: Not set. PROVISIONING: The PROVISIONING state indicates the node pool is being created. RUNNING: The RUNNING state indicates the node pool has been created and is fully usable. RECONCILING: The RECONCILING state indicates that the node pool is being reconciled. STOPPING: The STOPPING state indicates the node pool is being deleted. ERROR: The ERROR state indicates the node pool is in a broken unrecoverable state. DEGRADED: The DEGRADED state indicates the node pool requires user action to restore full functionality. rr r rrr&rrNrrr!r"rr- LGKH EHr!rrcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) 6GoogleCloudGkemulticloudV1AwsNodePool.AnnotationsValueia]Optional. Annotations on the node pool. This field has the same restrictions as Kubernetes annotations. The total size of all keys and values combined is limited to 256k. Key can have 2 segments: prefix (optional) and name (required), separated by a slash (/). Prefix must be a DNS subdomain. Name must be 63 characters or less, begin and end with alphanumerics, with dashes (-), underscores (_), dots (.), and alphanumerics between. Messages: AdditionalProperty: An additional property for a AnnotationsValue object. Fields: additionalProperties: Additional properties of type AnnotationsValue c`\rSrSrSr\R "S5r\R "S5rSr g)IGoogleCloudGkemulticloudV1AwsNodePool.AnnotationsValue.AdditionalPropertyirr r rNrrr!r"rrrr!rr TrrNrrr!r"rrrr!rr 0GoogleCloudGkemulticloudV1AwsNodePoolAutoscalingr rrr*GoogleCloudGkemulticloudV1AwsNodePoolErrorr&Trr+GoogleCloudGkemulticloudV1NodeKubeletConfigrrr+GoogleCloudGkemulticloudV1MaxPodsConstraintrrrrrr(GoogleCloudGkemulticloudV1UpdateSettingsrrrrN)"rrrrrrr rrr rrrr  autoscalingconfigrrrr) kubeletConfig managementmaxPodsConstraintr+rrrrsubnetIdrupdateSettingsr rAr rr!r"rPrPs1fY^^2 !!"89Z**Z:Z<&&'91=+&&'Y[\]+  ! !"KQ O&$$Q'*  ! !"NPQ\` a&   q !$(()VXYZ-%%&SUVW*,,-Z\]^   r "$&&r*+   4b 9%  " "2 &(b!#))*TVXY.$$R(*  ! !" %'r!rPc\rSrSrSr\R "S\RRS9r \R "S\RRS9r Sr g)riaAwsNodePoolAutoscaling contains information required by cluster autoscaler to adjust the size of the node pool to the current cluster usage. Fields: maxNodeCount: Required. Maximum number of nodes in the node pool. Must be greater than or equal to min_node_count and less than or equal to 50. minNodeCount: Required. Minimum number of nodes in the node pool. Must be greater than or equal to 1 and less than or equal to max_node_count. r r@r rN rrrrrrrCrDrE maxNodeCount minNodeCountr rr!r"rrsE''93D3D3J3JK,''93D3D3J3JK,r!rc<\rSrSrSr\R "S5rSrg)ri)zxAwsNodePoolError describes errors found on AWS node pools. Fields: message: Human-friendly description of the error. r rNr#rr!r"rr)r%r!rc \rSrSrSr\R "SSS9r\R "SSS9r\R "SSS9r \R "S5r \R "S 5r \R "S SS9r \R "S SS9r S rg ))GoogleCloudGkemulticloudV1AwsOpenIdConfigi3aAwsOpenIdConfig is an OIDC discovery document for the cluster. See the OpenID Connect Discovery 1.0 specification for details. Fields: claims_supported: Supported claims. grant_types: Supported grant types. id_token_signing_alg_values_supported: supported ID Token signing Algorithms. issuer: OIDC Issuer. jwks_uri: JSON Web Key uri. response_types_supported: Supported response types. subject_types_supported: Supported subject types. r Trr rrr&rrrNrrrrrrrclaims_supported grant_types%id_token_signing_alg_values_supportedissuerjwks_uriresponse_types_supportedsubject_types_supportedr rr!r"rr3 **1t<%%a$7+*3*?*?D*Q'   #&  " "1 %(&221tD%11!dCr!rc`\rSrSrSr\R "S5r\R "S5rSr g)rviKaDetails of a proxy config stored in AWS Secret Manager. Fields: secretArn: The ARN of the AWS Secret Manager secret that contains the HTTP(S) proxy configuration. The secret must be a JSON encoded proxy configuration as described in https://cloud.google.com/kubernetes- engine/multi-cloud/docs/aws/how-to/use-a- proxy#create_a_proxy_configuration_file secretVersion: The version string of the AWS Secret Manager secret that contains the HTTP(S) proxy configuration. r r rN) rrrrrrr secretArn secretVersionr rr!r"rvrvKs) ##A&)''*-r!rvc\rSrSrSr\R "S5r\R "SSS9r\R"SSSS9r S r g ) )GoogleCloudGkemulticloudV1AwsServerConfigi\aAwsServerConfig is the configuration of GKE cluster on AWS. Fields: name: The resource name of the config. supportedAwsRegions: The list of supported AWS regions. validVersions: List of all released Kubernetes versions, including ones which are end of life and can no longer be used. Filter by the `enabled` property to limit to currently available versions. Valid versions supported for both create and update operations r r TrrrrN) rrrrrrrr+supportedAwsRegionsrrGr rr!r"rr\sC    q !$!--a$?(()VXYdhi-r!rc`\rSrSrSr\R "S5r\R "S5rSr g)rrimavAuthentication configuration for the management of AWS resources. Fields: roleArn: Required. The Amazon Resource Name (ARN) of the role that the Anthos Multi-Cloud API will assume when managing AWS resources on your account. roleSessionName: Optional. An identifier for the assumed role session. When unspecified, it defaults to `multicloud-service-agent`. r r rN) rrrrrrrroleArnroleSessionNamer rr!r"rrrrms)  ! !! $'))!,/r!rrc<\rSrSrSr\R "S5rSrg)rwi|zSSH configuration for AWS resources. Fields: ec2KeyPair: Required. The name of the EC2 key pair used to login into cluster machines. r rN) rrrrrrr ec2KeyPairr rr!r"rwrw|s$$Q'*r!rwcj\rSrSrSr"SS\R 5r\R"S\RRS9r \R"S5r \R"S\RRS9r\R"S \RRS9r\R "SS 5rS rg ) ruiaConfiguration template for AWS EBS volumes. Enums: VolumeTypeValueValuesEnum: Optional. Type of the EBS volume. When unspecified, it defaults to GP2 volume. Fields: iops: Optional. The number of I/O operations per second (IOPS) to provision for GP3 volume. kmsKeyArn: Optional. The Amazon Resource Name (ARN) of the Customer Managed Key (CMK) used to encrypt AWS EBS volumes. If not specified, the default Amazon managed key associated to the AWS region where this cluster runs will be used. sizeGib: Optional. The size of the volume, in GiBs. When unspecified, a default value is provided. See the specific reference in the parent resource. throughput: Optional. The throughput that the volume supports, in MiB/s. Only valid if volume_type is GP3. If the volume_type is GP3 and this is not specified, it defaults to 125. volumeType: Optional. Type of the EBS volume. When unspecified, it defaults to GP2 volume. c$\rSrSrSrSrSrSrSrg)EGoogleCloudGkemulticloudV1AwsVolumeTemplate.VolumeTypeValueValuesEnumizOptional. Type of the EBS volume. When unspecified, it defaults to GP2 volume. Values: VOLUME_TYPE_UNSPECIFIED: Not set. GP2: GP2 (General Purpose SSD volume type). GP3: GP3 (General Purpose SSD volume type). rr r rN) rrrrrVOLUME_TYPE_UNSPECIFIEDGP2GP3r rr!r"VolumeTypeValueValuesEnumrs  C Cr!rr r@r rrr&rN)rrrrrrr rrCrDrEiopsrrksizeGib throughputr volumeTyper rr!r"rurus.  )..     9+<+<+B+B C$##A&)  " "1i.?.?.E.E F'%%a1B1B1H1HI*""#>B*r!ruc`\rSrSrSr\R "SSSS9r\R "SSSS9rS r g ) ,GoogleCloudGkemulticloudV1AzureAuthorizationir1+GoogleCloudGkemulticloudV1AzureClusterGroupr Tr*GoogleCloudGkemulticloudV1AzureClusterUserr rNr2rr!r"rrs7"&&'TVWbfg+%%&RTU`de*r!rc\rSrSrSr\R "S5"SS\R55r \R"SS5r \R"S5r \R"S5r\R"S 5r\R"S 5r\R""S 5r\R"S 5r\R"S 5r\R"S5rSrg)ria`AzureClient` resources hold client authentication information needed by the Anthos Multi-Cloud API to manage Azure resources on your Azure subscription. When an AzureCluster is created, an `AzureClient` resource needs to be provided and all operations on Azure resources associated to that cluster will authenticate to Azure services using the given client. `AzureClient` resources are immutable and cannot be modified upon creation. Each `AzureClient` resource is bound to a single Azure Active Directory Application and tenant. Messages: AnnotationsValue: Optional. Annotations on the resource. This field has the same restrictions as Kubernetes annotations. The total size of all keys and values combined is limited to 256k. Keys can have 2 segments: prefix (optional) and name (required), separated by a slash (/). Prefix must be a DNS subdomain. Name must be 63 characters or less, begin and end with alphanumerics, with dashes (-), underscores (_), dots (.), and alphanumerics between. Fields: annotations: Optional. Annotations on the resource. This field has the same restrictions as Kubernetes annotations. The total size of all keys and values combined is limited to 256k. Keys can have 2 segments: prefix (optional) and name (required), separated by a slash (/). Prefix must be a DNS subdomain. Name must be 63 characters or less, begin and end with alphanumerics, with dashes (-), underscores (_), dots (.), and alphanumerics between. applicationId: Required. The Azure Active Directory Application ID. createTime: Output only. The time at which this resource was created. name: The name of this resource. `AzureClient` resource names are formatted as `projects//locations//azureClients/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud resource names. pemCertificate: Output only. The PEM encoded x509 certificate. reconciling: Output only. If set, there are currently pending changes to the client. tenantId: Required. The Azure Active Directory Tenant ID. uid: Output only. A globally unique identifier for the client. updateTime: Output only. The time at which this client was last updated. rcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) 6GoogleCloudGkemulticloudV1AzureClient.AnnotationsValueia]Optional. Annotations on the resource. This field has the same restrictions as Kubernetes annotations. The total size of all keys and values combined is limited to 256k. Keys can have 2 segments: prefix (optional) and name (required), separated by a slash (/). Prefix must be a DNS subdomain. Name must be 63 characters or less, begin and end with alphanumerics, with dashes (-), underscores (_), dots (.), and alphanumerics between. Messages: AdditionalProperty: An additional property for a AnnotationsValue object. Fields: additionalProperties: Additional properties of type AnnotationsValue c`\rSrSrSr\R "S5r\R "S5rSr g)IGoogleCloudGkemulticloudV1AzureClient.AnnotationsValue.AdditionalPropertyi rr r rNrrr!r"rr rr!rr TrrNrrr!r"rrrr!rr r rrr&rrrrrN)rrrrrrr rrrrr r applicationIdrr+pemCertificaterrtenantIdrr r rr!r"rrs&P !!"89Z**Z:Z<&&'91=+''*-$$Q'*   q !$((+.&&q)+  " "1 %(a #$$Q'*r!rc \rSrSrSr"SS\R 5r\R"S5"SS\R55r \R"SS5r \R"S S 5r\R"S 5r\R"S 5r\R"S S5r\R"S5r\R"SS5r\R"S5r\R"S5r\R"S5r\R"SSSS9r\R"S5r\R"SS5r\R"SS5r\R"SS5r\R"S S!5r\R"S"5r\R"S#S$5r\R@"S%5r!\R"S&5r"\RF"SS'5r$\R"S(5r%\R"S)5r&\R"S*S+5r'S,r(g-).ri aAn Anthos cluster running on Azure. Enums: StateValueValuesEnum: Output only. The current state of the cluster. Messages: AnnotationsValue: Optional. Annotations on the cluster. This field has the same restrictions as Kubernetes annotations. The total size of all keys and values combined is limited to 256k. Keys can have 2 segments: prefix (optional) and name (required), separated by a slash (/). Prefix must be a DNS subdomain. Name must be 63 characters or less, begin and end with alphanumerics, with dashes (-), underscores (_), dots (.), and alphanumerics between. Fields: annotations: Optional. Annotations on the cluster. This field has the same restrictions as Kubernetes annotations. The total size of all keys and values combined is limited to 256k. Keys can have 2 segments: prefix (optional) and name (required), separated by a slash (/). Prefix must be a DNS subdomain. Name must be 63 characters or less, begin and end with alphanumerics, with dashes (-), underscores (_), dots (.), and alphanumerics between. authorization: Required. Configuration related to the cluster RBAC settings. azureClient: Optional. Name of the AzureClient that contains authentication configuration for how the Anthos Multi-Cloud API connects to Azure APIs. Either azure_client or azure_services_authentication should be provided. The `AzureClient` resource must reside on the same Google Cloud Platform project and region as the `AzureCluster`. `AzureClient` names are formatted as `projects//locations//azureClients/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud resource names. azureRegion: Required. The Azure region where the cluster runs. Each Google Cloud region supports a subset of nearby Azure regions. You can call GetAzureServerConfig to list all supported Azure regions within a given Google Cloud region. azureServicesAuthentication: Optional. Authentication configuration for management of Azure resources. Either azure_client or azure_services_authentication should be provided. clusterCaCertificate: Output only. PEM encoded x509 certificate of the cluster root of trust. controlPlane: Required. Configuration related to the cluster control plane. createTime: Output only. The time at which this cluster was created. description: Optional. A human readable description of this cluster. Cannot be longer than 255 UTF-8 encoded bytes. endpoint: Output only. The endpoint of the cluster's API server. errors: Output only. A set of errors found in the cluster. etag: Allows clients to perform consistent read-modify-writes through optimistic concurrency control. Can be sent on update and delete requests to ensure the client has an up-to-date value before proceeding. fleet: Required. Fleet configuration. loggingConfig: Optional. Logging configuration for this cluster. managedResources: Output only. Managed Azure resources for this cluster. monitoringConfig: Optional. Monitoring configuration for this cluster. name: The name of this resource. Cluster names are formatted as `projects//locations//azureClusters/`. See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more details on Google Cloud Platform resource names. networking: Required. Cluster-wide networking configuration. reconciling: Output only. If set, there are currently changes in flight to the cluster. resourceGroupId: Required. The ARM ID of the resource group where the cluster resources are deployed. For example: `/subscriptions//resourceGroups/` state: Output only. The current state of the cluster. uid: Output only. A globally unique identifier for the cluster. updateTime: Output only. The time at which this cluster was last updated. workloadIdentityConfig: Output only. Workload Identity settings. c4\rSrSrSrSrSrSrSrSr Sr S r S r g ) ;GoogleCloudGkemulticloudV1AzureCluster.StateValueValuesEnumie rSrr r rrr&rrNrrr!r"rre rr!rrcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) 7GoogleCloudGkemulticloudV1AzureCluster.AnnotationsValuei a\Optional. Annotations on the cluster. This field has the same restrictions as Kubernetes annotations. The total size of all keys and values combined is limited to 256k. Keys can have 2 segments: prefix (optional) and name (required), separated by a slash (/). Prefix must be a DNS subdomain. Name must be 63 characters or less, begin and end with alphanumerics, with dashes (-), underscores (_), dots (.), and alphanumerics between. Messages: AdditionalProperty: An additional property for a AnnotationsValue object. Fields: additionalProperties: Additional properties of type AnnotationsValue c`\rSrSrSr\R "S5r\R "S5rSr g)JGoogleCloudGkemulticloudV1AzureCluster.AnnotationsValue.AdditionalPropertyi rr r rNrrr!r"rr rr!rr TrrNrrr!r"rr rr!rr rr rr5GoogleCloudGkemulticloudV1AzureServicesAuthenticationr&r+GoogleCloudGkemulticloudV1AzureControlPlanerrrr+GoogleCloudGkemulticloudV1AzureClusterErrorrTrrrrrr/GoogleCloudGkemulticloudV1AzureClusterResourcesrrrr0GoogleCloudGkemulticloudV1AzureClusterNetworkingrrrrrr rrrN))rrrrrrr rrr rrrr r r azureClient azureRegionazureServicesAuthenticationr\r]rrr^rr)rrmanagedResourcesrr+r_rrresourceGroupIdrrrr r!r rr!r"rr sFPY^^4 !!"89Z**Z:Z<&&'91=+(()WYZ[-%%a(+%%a(+ ) 6 67npq r"..q1''(UWXY,$$Q'*%%a(+  " "2 &(  ! !"OQS^b c&   r "$  !BB G%(()RTVW-++,]_ab++,XZ\]   r "$%%&XZ\]*&&r*+))"-/   4b 9%b!#$$R(*$112dfhir!rc<\rSrSrSr\R "S5rSrg)ri zyAzureClusterError describes errors found on Azure clusters. Fields: message: Human-friendly description of the error. r rNr#rr!r"rr r%r!rc<\rSrSrSr\R "S5rSrg)ri zIdentities of a group-type subject for Azure clusters. Fields: group: Required. The name of the group, e.g. `my-group@domain.com`. r rNr(rr!r"rr r*r!rc\rSrSrSr\R "SSS9r\R "SSS9r\R "S5r \R "S5r S r g ) ri aClusterNetworking contains cluster-wide networking configuration. Fields: podAddressCidrBlocks: Required. The IP address range of the pods in this cluster, in CIDR notation (e.g. `10.96.0.0/14`). All pods in the cluster get assigned a unique IPv4 address from these ranges. Only a single range is supported. This field cannot be changed after creation. serviceAddressCidrBlocks: Required. The IP address range for services in this cluster, in CIDR notation (e.g. `10.96.0.0/14`). All services in the cluster get assigned a unique IPv4 address from these ranges. Only a single range is supported. This field cannot be changed after creating a cluster. serviceLoadBalancerSubnetId: Optional. The ARM ID of the subnet where Kubernetes private service type load balancers are deployed. When unspecified, it defaults to AzureControlPlane.subnet_id. Example: "/subs criptions/d00494d6-6f3c-4280-bbb2- 899e163d1d30/resourceGroups/anthos_cluster_gkeust4/providers/Microsoft.N etwork/virtualNetworks/gke-vnet-gkeust4/subnets/subnetid456" virtualNetworkId: Required. The Azure Resource Manager (ARM) ID of the VNet associated with your cluster. All components in the cluster (i.e. control plane and node pools) run on a single VNet. Example: `/subscript ions//resourceGroups//providers/Microsoft.Network/virtualNetworks/` This field cannot be changed after creation. r Trr rrrN) rrrrrrrrdreserviceLoadBalancerSubnetIdvirtualNetworkIdr rr!r"rr sQ2#..q4@&221tD ) 5 5a 8**1-r!rc`\rSrSrSr\R "S5r\R "S5rSr g)ri aSManaged Azure resources for the cluster. The values could change and be empty, depending on the state of the cluster. Fields: controlPlaneApplicationSecurityGroupId: Output only. The ARM ID of the control plane application security group. networkSecurityGroupId: Output only. The ARM ID of the cluster network security group. r r rN) rrrrrrr&controlPlaneApplicationSecurityGroupIdnetworkSecurityGroupIdr rr!r"rr s+,5+@+@+C($003r!rc<\rSrSrSr\R "S5rSrg)ri zIdentities of a user-type subject for Azure clusters. Fields: username: Required. The name of the user, e.g. `my-gcp-id@gmail.com`. r rNr-rr!r"rr r/r!rc`\rSrSrSr\R "S5r\R "S5rSr g)/GoogleCloudGkemulticloudV1AzureConfigEncryptioni a^Configuration related to config data encryption. Azure VM bootstrap secret is envelope encrypted with the provided key vault key. Fields: keyId: Required. The ARM ID of the Azure Key Vault key to encrypt / decrypt config data. For example: `/subscriptions//resourceGroups//provi ders/Microsoft.KeyVault/vaults//keys/` publicKey: Optional. RSA key of the Azure Key Vault public key to use for encrypting the data. This key must be formatted as a PEM-encoded SubjectPublicKeyInfo (RFC 5280) in ASN.1 DER form. The string must be comprised of a single PEM block of type "PUBLIC KEY". r r rN) rrrrrrrkeyId publicKeyr rr!r"rr s)     "%##A&)r!rc*\rSrSrSr\R "S5"SS\R55r \R"SS5r \R"SS 5r \R"S 5r\R"S S 5r\R"S S5r\R"SSSS9r\R"S S5r\R"SS5r\R"S5r\R"SS5r\R"S5r\R"S5rSrg)ri a AzureControlPlane represents the control plane configurations. Messages: TagsValue: Optional. A set of tags to apply to all underlying control plane Azure resources. Fields: configEncryption: Optional. Configuration related to vm config encryption. databaseEncryption: Optional. Configuration related to application-layer secrets encryption. endpointSubnetId: Optional. The ARM ID of the subnet where the control plane load balancer is deployed. When unspecified, it defaults to AzureControlPlane.subnet_id. Example: "/subscriptions/d00494d6-6f3c- 4280-bbb2- 899e163d1d30/resourceGroups/anthos_cluster_gkeust4/providers/Microsoft.N etwork/virtualNetworks/gke-vnet-gkeust4/subnets/subnetid123" mainVolume: Optional. Configuration related to the main volume provisioned for each control plane replica. The main volume is in charge of storing all of the cluster's etcd state. When unspecified, it defaults to a 8-GiB Azure Disk. proxyConfig: Optional. Proxy configuration for outbound HTTP(S) traffic. replicaPlacements: Optional. Configuration for where to place the control plane replicas. Up to three replica placement instances can be specified. If replica_placements is set, the replica placement instances will be applied to the three control plane replicas as evenly as possible. rootVolume: Optional. Configuration related to the root volume provisioned for each control plane replica. When unspecified, it defaults to 32-GiB Azure Disk. sshConfig: Required. SSH configuration for how to access the underlying control plane machines. subnetId: Optional. The ARM ID of the default subnet for the control plane. The control plane VMs are deployed in this subnet, unless `AzureControlPlane.replica_placements` is specified. This subnet will also be used as default for `AzureControlPlane.endpoint_subnet_id` if `AzureControlPlane.endpoint_subnet_id` is not specified. Similarly it will be used as default for `AzureClusterNetworking.service_load_balancer_subnet_id`. Example: `/sub scriptions//resourceGroups//providers/Microsoft.Network/virtualNetworks/ /subnets/default`. tags: Optional. A set of tags to apply to all underlying control plane Azure resources. version: Required. The Kubernetes version to run on control plane replicas (e.g. `1.19.10-gke.1000`). You can list all supported versions on a given Google Cloud region by calling GetAzureServerConfig. vmSize: Optional. The Azure VM size name. Example: `Standard_DS2_v2`. For available VM sizes, see https://docs.microsoft.com/en-us/azure/virtual- machines/vm-naming-conventions. When unspecified, it defaults to `Standard_DS2_v2`. rcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) 5GoogleCloudGkemulticloudV1AzureControlPlane.TagsValueiK zOptional. A set of tags to apply to all underlying control plane Azure resources. Messages: AdditionalProperty: An additional property for a TagsValue object. Fields: additionalProperties: Additional properties of type TagsValue c`\rSrSrSr\R "S5r\R "S5rSr g)HGoogleCloudGkemulticloudV1AzureControlPlane.TagsValue.AdditionalPropertyiW rr r rNrrr!r"rrW rr!rr TrrNrrr!r"rrK s2 'Y.. '%112FTXYr!rrr 1GoogleCloudGkemulticloudV1AzureDatabaseEncryptionr r+GoogleCloudGkemulticloudV1AzureDiskTemplater*GoogleCloudGkemulticloudV1AzureProxyConfigr&*GoogleCloudGkemulticloudV1ReplicaPlacementrTrr(GoogleCloudGkemulticloudV1AzureSshConfigrrrrrrN)rrrrrrr rrrrryrzrendpointSubnetIdr~rreplicaPlacementsrrrrrAvmSizer rr!r"rr s1f !!"89Z)##Z:Z0++,]_`a --.acde**1-%%&SUVW*&&'SUVW+,,-Y[\gkl%%&SUVW*$$%OQRS)  " "1 %(    R 0$  ! !" %'   $&r!rc<\rSrSrSr\R "S5rSrg)rir aConfiguration related to application-layer secrets encryption. Anthos clusters on Azure encrypts your Kubernetes data at rest in etcd using Azure Key Vault. Fields: keyId: Required. The ARM ID of the Azure Key Vault key to encrypt / decrypt data. For example: `/subscriptions//resourceGroups//providers/Mi crosoft.KeyVault/vaults//keys/` Encryption will always take the latest version of the key and hence specific version is not supported. r rN) rrrrrrrrr rr!r"rrr s     "%r!rcb\rSrSrSr\R "S\RRS9r Sr g)ri zConfiguration for Azure Disks. Fields: sizeGib: Optional. The size of the disk, in GiBs. When unspecified, a default value is provided. See the specific reference in the parent resource. r r@rN) rrrrrrrCrDrErr rr!r"rr s'  " "1i.?.?.E.E F'r!rc<\rSrSrSr\R "SSSS9rSrg) *GoogleCloudGkemulticloudV1AzureJsonWebKeysi zAzureJsonWebKeys is a valid JSON Web Key Set as specififed in RFC 7517. Fields: keys: The public component of the keys used by the cluster to sign token requests. rr TrrNrrr!r"r$r$ rr!r$c\rSrSrSr\R "S5r\R "S5r\R"SS5r \R"SS5r \R"S5r S rg ) -GoogleCloudGkemulticloudV1AzureK8sVersionInfoi aKubernetes version information of GKE cluster on Azure. Fields: enabled: Optional. True if the version is available for cluster creation. If a version is enabled for creation, it can be used to create new clusters. Otherwise, cluster creation will fail. However, cluster upgrade operations may succeed, even if the version is not enabled. endOfLife: Optional. True if this cluster version belongs to a minor version that has reached its end of life and is no longer in scope to receive security and bug fixes. endOfLifeDate: Optional. The estimated date (in Pacific Time) when this cluster version will reach its end of life. Or if this version is no longer supported (the `end_of_life` field is true), this is the actual date (in Pacific time) when the version reached its end of life. releaseDate: Optional. The date (in Pacific Time) when the cluster version was released. version: Kubernetes version name (for example, `1.19.10-gke.1000`) r r r;rrr&rNr<rr!r"r&r& rr!r&c\rSrSrSr\R "S5"SS\R55r \R "S5"SS\R55r \R"SS 5r \R"S 5r\R"SS 5r\R"S S 5r\R"SS5r\R"SS5r\R"SS5r\R"SSSS9r\R"S5rSrg))GoogleCloudGkemulticloudV1AzureNodeConfigi aParameters that describe the configuration of all node machines on a given node pool. Messages: LabelsValue: Optional. The initial labels assigned to nodes of this node pool. An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }. TagsValue: Optional. A set of tags to apply to all underlying Azure resources for this node pool. This currently only includes Virtual Machine Scale Sets. Specify at most 50 pairs containing alphanumerics, spaces, and symbols (.+-=_:@/). Keys can be up to 127 Unicode characters. Values can be up to 255 Unicode characters. Fields: configEncryption: Optional. Configuration related to vm config encryption. imageType: Optional. The OS image type to use on node pool instances. Can be unspecified, or have a value of `ubuntu`. When unspecified, it defaults to `ubuntu`. labels: Optional. The initial labels assigned to nodes of this node pool. An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }. proxyConfig: Optional. Proxy configuration for outbound HTTP(S) traffic. rootVolume: Optional. Configuration related to the root volume provisioned for each node pool machine. When unspecified, it defaults to a 32-GiB Azure Disk. sshConfig: Required. SSH configuration for how to access the node pool machines. tags: Optional. A set of tags to apply to all underlying Azure resources for this node pool. This currently only includes Virtual Machine Scale Sets. Specify at most 50 pairs containing alphanumerics, spaces, and symbols (.+-=_:@/). Keys can be up to 127 Unicode characters. Values can be up to 255 Unicode characters. taints: Optional. The initial taints assigned to nodes of this node pool. vmSize: Optional. The Azure VM size name. Example: `Standard_DS2_v2`. See [Supported VM sizes](/anthos/clusters/docs/azure/reference/supported- vms) for options. When unspecified, it defaults to `Standard_DS2_v2`. rcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) 5GoogleCloudGkemulticloudV1AzureNodeConfig.LabelsValuei rc`\rSrSrSr\R "S5r\R "S5rSr g)HGoogleCloudGkemulticloudV1AzureNodeConfig.LabelsValue.AdditionalPropertyi rr r rNrrr!r"rr, rr!rr TrrNrrr!r"rr* rr!rcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) 3GoogleCloudGkemulticloudV1AzureNodeConfig.TagsValuei aOptional. A set of tags to apply to all underlying Azure resources for this node pool. This currently only includes Virtual Machine Scale Sets. Specify at most 50 pairs containing alphanumerics, spaces, and symbols (.+-=_:@/). Keys can be up to 127 Unicode characters. Values can be up to 255 Unicode characters. Messages: AdditionalProperty: An additional property for a TagsValue object. Fields: additionalProperties: Additional properties of type TagsValue c`\rSrSrSr\R "S5r\R "S5rSr g)FGoogleCloudGkemulticloudV1AzureNodeConfig.TagsValue.AdditionalPropertyi rr r rNrrr!r"rr0 rr!rr TrrNrrr!r"rr. s2  'Y.. '%112FTXYr!rrr r rrrrr&rrrrrTrrrN)rrrrrrr rrrrrryrrrrrrrrr r rr!r"r(r( s$L !!"89ZI%%Z:Z2 !!"89Z)##Z:Z6++,]_`a##A&)  ! !- 3&&&'SUVW+%%&SUVW*$$%OQRS)    Q /$  ! !"GUY Z&   #&r!r(c<\rSrSrSr\R "S5rSrg)-GoogleCloudGkemulticloudV1AzureNodeManagementi aAzureNodeManagement defines the set of node management features turned on for an Azure node pool. Fields: autoRepair: Optional. Whether or not the nodes will be automatically repaired. When set to true, the nodes in this node pool will be monitored and if they fail health checks consistently over a period of time, an automatic repair action will be triggered to replace them with new nodes. r rNrrr!r"r2r2 rr!r2c\rSrSrSr"SS\R 5r\R"S5"SS\R55r \R"SS5r \R"S S 5r\R"S 5r\R"S S 5r\R"S5r\R"SSSS9r\R"S5r\R"SS5r\R"SS5r\R"S5r\R0"S5r\R4"SS5r\R"S5r\R"S5r\R"S5r\R"S5rSr g )!ri* a An Anthos node pool running on Azure. Enums: StateValueValuesEnum: Output only. The current state of the node pool. Messages: AnnotationsValue: Optional. Annotations on the node pool. This field has the same restrictions as Kubernetes annotations. The total size of all keys and values combined is limited to 256k. Keys can have 2 segments: prefix (optional) and name (required), separated by a slash (/). Prefix must be a DNS subdomain. Name must be 63 characters or less, begin and end with alphanumerics, with dashes (-), underscores (_), dots (.), and alphanumerics between. Fields: annotations: Optional. Annotations on the node pool. This field has the same restrictions as Kubernetes annotations. The total size of all keys and values combined is limited to 256k. Keys can have 2 segments: prefix (optional) and name (required), separated by a slash (/). Prefix must be a DNS subdomain. Name must be 63 characters or less, begin and end with alphanumerics, with dashes (-), underscores (_), dots (.), and alphanumerics between. autoscaling: Required. Autoscaler configuration for this node pool. azureAvailabilityZone: Optional. The Azure availability zone of the nodes in this nodepool. When unspecified, it defaults to `1`. config: Required. The node configuration of the node pool. createTime: Output only. The time at which this node pool was created. errors: Output only. A set of errors found in the node pool. etag: Allows clients to perform consistent read-modify-writes through optimistic concurrency control. Can be sent on update and delete requests to ensure the client has an up-to-date value before proceeding. management: Optional. The Management configuration for this node pool. maxPodsConstraint: Required. The constraint on the maximum number of pods that can be run simultaneously on a node in the node pool. name: The name of this resource. Node pool names are formatted as `projects//locations//azureClusters//azureNodePools/`. For more details on Google Cloud resource names, see [Resource Names](https://cloud.google.com/apis/design/resource_names) reconciling: Output only. If set, there are currently pending changes to the node pool. state: Output only. The current state of the node pool. subnetId: Required. The ARM ID of the subnet where the node pool VMs run. Make sure it's a subnet under the virtual network in the cluster configuration. uid: Output only. A globally unique identifier for the node pool. updateTime: Output only. The time at which this node pool was last updated. version: Required. The Kubernetes version (e.g. `1.19.10-gke.1000`) running on this node pool. c4\rSrSrSrSrSrSrSrSr Sr S r S r g ) GoogleCloudGkemulticloudV1GenerateAwsClusterAgentTokenResponsei zA GoogleCloudGkemulticloudV1GenerateAwsClusterAgentTokenResponse object. Fields: access_token: A string attribute. expires_in: A integer attribute. token_type: A string attribute. r r r@rrNrarr!r"rsrs sG&&q),%%a1B1B1H1HI*$$Q'*r!rsc`\rSrSrSr\R "S5r\R "S5rSr g):GoogleCloudGkemulticloudV1GenerateAzureAccessTokenResponsei zResponse message for `AzureClusters.GenerateAzureAccessToken` method. Fields: accessToken: Output only. Access token to authenticate to k8s api-server. expirationTime: Output only. Timestamp at which the token will expire. r r rNrkrr!r"ruru rnr!ruc\\rSrSrSr\R "S5r\R "S5r\R "S5r \R "S5r \R "S5r \R "S5r \R "S 5r \R "S 5r\R "S 5rS rg )ri a-A GoogleCloudGkemulticloudV1GenerateAzureClusterAgentTokenRequest object. Fields: audience: Optional. grantType: Optional. nodePoolId: Optional. options: Optional. requestedTokenType: Optional. scope: Optional. subjectToken: Required. subjectTokenType: Required. version: Required. r r rrr&rrrrrNrprr!r"rr s  " "1 %(##A&)$$Q'*  ! !! $' ,,Q/    "%&&q),**1-  ! !! $'r!rc\rSrSrSr\R "S5r\R"S\RRS9r \R "S5r Sr g) @GoogleCloudGkemulticloudV1GenerateAzureClusterAgentTokenResponsei zA GoogleCloudGkemulticloudV1GenerateAzureClusterAgentTokenResponse object. Fields: access_token: A string attribute. expires_in: A integer attribute. token_type: A string attribute. r r r@rrNrarr!r"rxrx rer!rxc\rSrSrSr\R "S5r\R "S5r\R "S5r \R"SS5r \R"S5r S rg ) r;i aRequest message for `AttachedClusters.ImportAttachedCluster` method. Fields: distribution: Required. The Kubernetes distribution of the underlying attached cluster. Supported values: ["eks", "aks", "generic"]. fleetMembership: Required. The name of the fleet membership resource to import. platformVersion: Required. The platform version for the cluster (e.g. `1.19.0-gke.1000`). You can list all supported versions on a given Google Cloud region by calling GetAttachedServerConfig. proxyConfig: Optional. Proxy configuration for outbound HTTP(S) traffic. validateOnly: If set, only validate the request, but do not actually import the cluster. r r rrrr&rN)rrrrrrrrfleetMembershiprrrrrr rr!r"r;r; s] &&q),))!,/))!,/&&'VXYZ+''*,r!r;c\\rSrSrSr\R "S5r\R "S5r\R "S5r \R "S5r \R "S5r \R "S5r \R "S 5r \R "S 5r\R "S 5rS rg )ri aJwk is a JSON Web Key as specified in RFC 7517. Fields: alg: Algorithm. crv: Used for ECDSA keys. e: Used for RSA keys. kid: Key ID. kty: Key Type. n: Used for RSA keys. use: Permitted uses for the public keys. x: Used for ECDSA keys. y: Used for ECDSA keys. r r rrr&rrrrrN)rrrrrrralgcrvekidktynusexyr rr!r"rr s  a #a #A!a #a #A!a #A!A!r!rc`\rSrSrSr\R "S5r\R "S5rSr g)rCi$ zInformation about a Kubernetes Secret Fields: name: Name of the kubernetes secret. namespace: Namespace in which the kubernetes secret is stored. r r rN) rrrrrrrr+ namespacer rr!r"rCrC$ s)   q !$##A&)r!rCc`\rSrSrSr\R "S5r\R "S5rSr g)GoogleCloudGkemulticloudV1Labeli0 zLabel defines the additional fields for labels for pods created by auto- installed components. Fields: key: This is the key of the label. value: This is the value of the label. r r rNrrr!r"rr0 s) a #    "%r!rc`\rSrSrSr\R "SSSS9r\R"S5r Sr g ) 6GoogleCloudGkemulticloudV1ListAttachedClustersResponsei= a@Response message for `AttachedClusters.ListAttachedClusters` method. Fields: attachedClusters: A list of AttachedCluster resources in the specified Google Cloud Platform project and region region. nextPageToken: Token to retrieve the next page of results, or empty if there are no more results in the list. r r Trr rN) rrrrrrrattachedClustersr nextPageTokenr rr!r"rr= s1++,WYZeij''*-r!rc`\rSrSrSr\R "SSSS9r\R"S5r Sr g ) 1GoogleCloudGkemulticloudV1ListAwsClustersResponseiK a,Response message for `AwsClusters.ListAwsClusters` method. Fields: awsClusters: A list of AwsCluster resources in the specified Google Cloud Platform project and region region. nextPageToken: Token to retrieve the next page of results, or empty if there are no more results in the list. rfr Trr rN) rrrrrrr awsClustersrrr rr!r"rrK s/&&'Mq[_`+''*-r!rc`\rSrSrSr\R "SSSS9r\R"S5r Sr g ) 2GoogleCloudGkemulticloudV1ListAwsNodePoolsResponseiY a Response message for `AwsClusters.ListAwsNodePools` method. Fields: awsNodePools: A list of AwsNodePool resources in the specified `AwsCluster`. nextPageToken: Token to retrieve the next page of results, or empty if there are no more results in the list. rPr Trr rN) rrrrrrr awsNodePoolsrrr rr!r"rrY 0''(OQR]ab,''*-r!rc`\rSrSrSr\R "SSSS9r\R"S5r Sr g ) 2GoogleCloudGkemulticloudV1ListAzureClientsResponseig a(Response message for `AzureClusters.ListAzureClients` method. Fields: azureClients: A list of AzureClient resources in the specified Google Cloud project and region region. nextPageToken: Token to retrieve the next page of results, or empty if there are no more results in the list. rr Trr rN) rrrrrrr azureClientsrrr rr!r"rrg rr!rc`\rSrSrSr\R "SSSS9r\R"S5r Sr g ) 3GoogleCloudGkemulticloudV1ListAzureClustersResponseiu a4Response message for `AzureClusters.ListAzureClusters` method. Fields: azureClusters: A list of AzureCluster resources in the specified Google Cloud Platform project and region region. nextPageToken: Token to retrieve the next page of results, or empty if there are no more results in the list. rr Trr rN) rrrrrrr azureClustersrrr rr!r"rru s0(()QST_cd-''*-r!rc`\rSrSrSr\R "SSSS9r\R"S5r Sr g ) 4GoogleCloudGkemulticloudV1ListAzureNodePoolsResponsei aResponse message for `AzureClusters.ListAzureNodePools` method. Fields: azureNodePools: A list of AzureNodePool resources in the specified `AzureCluster`. nextPageToken: Token to retrieve the next page of results, or empty if there are no more results in the list. rr Trr rN) rrrrrrrazureNodePoolsrrr rr!r"rr s0))*SUVaef.''*-r!rcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) 0GoogleCloudGkemulticloudV1LoggingComponentConfigi zParameters that describe the Logging component configuration in a cluster. Enums: EnableComponentsValueListEntryValuesEnum: Fields: enableComponents: The components to be enabled. c$\rSrSrSrSrSrSrSrg)YGoogleCloudGkemulticloudV1LoggingComponentConfig.EnableComponentsValueListEntryValuesEnumi aEnableComponentsValueListEntryValuesEnum enum type. Values: COMPONENT_UNSPECIFIED: No component is specified SYSTEM_COMPONENTS: This indicates that system logging components is enabled. WORKLOADS: This indicates that user workload logging component is enabled. rr r rN) rrrrrCOMPONENT_UNSPECIFIEDSYSTEM_COMPONENTS WORKLOADSr rr!r"(EnableComponentsValueListEntryValuesEnumr sIr!rr TrrN) rrrrrrr rrenableComponentsr rr!r"rr s1  (()SUVaefr!rc>\rSrSrSr\R "SS5rSrg)ri zParameters that describe the Logging configuration in a cluster. Fields: componentConfig: The configuration of the logging components; rr rN) rrrrrrrcomponentConfigr rr!r"rr s **+]_`a/r!rc<\rSrSrSr\R "S5rSrg)1GoogleCloudGkemulticloudV1ManagedPrometheusConfigi zManagedPrometheusConfig defines the configuration for Google Cloud Managed Service for Prometheus. Fields: enabled: Enable Managed Collection. r rNrSrr!r"rr s  " "1 %'r!rc<\rSrSrSr\R "S5rSrg)ri zConstraints applied to pods. Fields: maxPodsPerNode: Required. The maximum number of pods to schedule on a single node. r rN) rrrrrrrCmaxPodsPerNoder rr!r"rr s))!,.r!rc\rSrSrSr\R "SS5r\R"S5r \R "SS5r Sr g ) ri aParameters that describe the Monitoring configuration in a cluster. Fields: cloudMonitoringConfig: Optionally enable GKE metrics. Only for Attached Clusters. kubernetesMetadataEndpointOverride: Optional. Override of the default (prod) Kubernetes metadata endpoint. Only supported for Attached clusters now. managedPrometheusConfig: Enable Google Cloud Managed Service for Prometheus in the cluster. rRr r rrrN) rrrrrrrcloudMonitoringConfigr"kubernetesMetadataEndpointOverridemanagedPrometheusConfigr rr!r"rr sD $001bdef'0'<'>    6 :&a ###$@!D+    "%r!rc>\rSrSrSr\R "SS5rSrg)riaFUpdateSettings control the level of parallelism and the level of disruption caused during the update of a node pool. These settings are applicable when the node pool update requires replacing the existing node pool nodes with the updated ones. UpdateSettings are optional. When UpdateSettings are not specified during the node pool creation, a default is chosen based on the parent cluster's version. For clusters with minor version 1.27 and later, a default surge_settings configuration with max_surge = 1 and max_unavailable = 0 is used. For clusters with older versions, node pool updates use the traditional rolling update mechanism of updating one node at a time in a "terminate before create" fashion and update_settings is not applicable. Set the surge_settings parameter to use the Surge Update mechanism for the rolling update of node pool nodes. 1. max_surge controls the number of additional nodes that can be created beyond the current size of the node pool temporarily for the time of the update to increase the number of available nodes. 2. max_unavailable controls the number of nodes that can be simultaneously unavailable during the update. 3. (max_surge + max_unavailable) determines the level of parallelism (i.e., the number of nodes being updated at the same time). Fields: surgeSettings: Optional. Settings for surge update. rr rN) rrrrrrr surgeSettingsr rr!r"rrs.(()RTUV-r!rc\rSrSrSr\R "S5r\R "S5r\R "S5r Sr g)ria Workload Identity settings. Fields: identityProvider: The ID of the OIDC Identity Provider (IdP) associated to the Workload Identity Pool. issuerUri: The OIDC issuer URL for this cluster. workloadPool: The Workload Identity Pool associated to the cluster. r r rrN) rrrrrrridentityProvider issuerUri workloadPoolr rr!r"rrs:**1-##A&)&&q),r!rc\rSrSrSrSrg)riz3The request message for Operations.CancelOperation.rNrrrrrr rr!r"rrs" to include in api requests. uploadType: Legacy upload protocol for media (e.g. "media", "multipart"). upload_protocol: Upload protocol for media (e.g. "raw", "multipart"). c$\rSrSrSrSrSrSrSrg)*StandardQueryParameters.AltValueValuesEnumizData format for response. Values: json: Responses with Content-Type of application/json media: Media download with context-dependent Content-Type proto: Responses with Content-Type of application/x-protobuf rr r rN) rrrrrjsonmediaprotor rr!r"AltValueValuesEnumrs D E Er!rc \rSrSrSrSrSrSrg)-StandardQueryParameters.FXgafvValueValuesEnumizFV1 error format. Values: _1: v1 error format _2: v2 error format rr rN)rrrrr_1_2r rr!r"FXgafvValueValuesEnumrs B Br!r"r r rr)defaultrr&rrrTrrrrrN)rrrrrrr rr"rf__xgafvrrbaltcallbackfieldsr oauth_tokenr prettyPrint quotaUsertrace uploadTypeupload_protocolr rr!r"rrs4 9>>  inn  !8! <(&&q),0!VD#  " "1 %(   #&a #%%a(+&&q$7+##A&)    #%$$R(*))"-/r!rr$z$.xgafvr 1r!2rz!proxyConfig.kubernetesSecret.namerz&proxyConfig.kubernetesSecret.namespaceN)r __future__rapitools.base.protorpcliterrapitools.base.pyrrpackagerr r$r.r4r9r>rJrNrTrXr\r_rarerjrlrprtrvrxrzr|r~rrrrrrrrrrrrrrrrrrrrrrrrrr rr'r,rrr:rrFrIrMrfrYrJrZrKrirXrsrtrrrrrPrrrrvrrrrwrurrrrrrrrrrrrr$r&r(r2rr:r;r@rrDrrrrRrr0r`rgrjrqrsrurrxr;rrCrrrrrrrrrrrrrrrrrbrrrrrrrrrrr rr;rAddCustomJsonFieldMappingAddCustomJsonEnumMappingr"rr!r"r6s  '<%( +)BSBS+6+)BSBS+> g]f]n]n g 1y?P?P 13)BSBS3$3 @Q@Q3.+ARAR+@+IZIZ+8+IZIZ+@ 1iFWFW 13yGXGX30&+ HYHY&+R19K\K\1&+Y=N=N+4+Y=N=N+< 7YM^M^ 7 ]S\SdSd ] 7i>O>O7 1):K:K 139;L;L3.*+IO>O+4+i>O>O+( 19;L;L 13I 9QZQbQb 9 aW`WhWh a9 @Q@Q9 1IO>O!+H 9XaXiXi 9DR[RcRcDD 19CTCT 1 1i>O>O 1 1 @Q@Q 1 1IO>Oi,!93D3D!0%I->()C)2C2C)CXf93D3Df,P(I,=,=P(fYjY->->Yjx%)2C2C%#)2C2C#.y7H7H.@ 4i6G6G 4&1B1B&'i6G6G'$X%)2C2CX%v # 8I8I # G)2C2C GS1B1BS%I4E4E%6e$ 0A0Ae$P )I4E4E ){&i.?.?{&| L9J9J L %93D3D%D)2C2CD0&1B1B&$l)2C2Cl* &I!!114>""OQtwZ[""OQy|der!