|
1518 | 1518 | } |
1519 | 1519 | } |
1520 | 1520 | }, |
1521 | | - "revision": "20230609", |
| 1521 | + "revision": "20230620", |
1522 | 1522 | "rootUrl": "https://gkehub.googleapis.com/", |
1523 | 1523 | "schemas": { |
1524 | 1524 | "AppDevExperienceFeatureSpec": { |
|
1701 | 1701 | "id": "ConfigManagementConfigSync", |
1702 | 1702 | "properties": { |
1703 | 1703 | "allowVerticalScale": { |
| 1704 | + "deprecated": true, |
1704 | 1705 | "description": "Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.", |
1705 | 1706 | "type": "boolean" |
1706 | 1707 | }, |
1707 | 1708 | "enabled": { |
1708 | | - "description": "Enables the installation of ConfigSync. If set to true, ConfigSync resources will be created and the other ConfigSync fields will be applied if exist. If set to false and Managed Config Sync is disabled, all other ConfigSync fields will be ignored, ConfigSync resources will be deleted. Setting this field to false while enabling Managed Config Sync is invalid. If omitted, ConfigSync resources will be managed if: * the git or oci field is present; or * Managed Config Sync is enabled (i.e., managed.enabled is true).", |
| 1709 | + "description": "Enables the installation of ConfigSync. If set to true, ConfigSync resources will be created and the other ConfigSync fields will be applied if exist. If set to false, all other ConfigSync fields will be ignored, ConfigSync resources will be deleted. If omitted, ConfigSync resources will be managed depends on the presence of the git or oci field.", |
1709 | 1710 | "type": "boolean" |
1710 | 1711 | }, |
1711 | 1712 | "git": { |
1712 | 1713 | "$ref": "ConfigManagementGitConfig", |
1713 | 1714 | "description": "Git repo configuration for the cluster." |
1714 | 1715 | }, |
1715 | | - "managed": { |
1716 | | - "$ref": "ConfigManagementManaged", |
1717 | | - "description": "Configuration for Managed Config Sync." |
1718 | | - }, |
1719 | 1716 | "metricsGcpServiceAccountEmail": { |
1720 | | - "description": "The Email of the GCP Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring and Cloud Monarch when Workload Identity is enabled. The GSA should have the Monitoring Metric Writer (roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount `default` in the namespace `config-management-monitoring` should be binded to the GSA. This field is required when Managed Config Sync is enabled.", |
| 1717 | + "description": "The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring and Cloud Monarch when Workload Identity is enabled. The GSA should have the Monitoring Metric Writer (roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount `default` in the namespace `config-management-monitoring` should be binded to the GSA. This field is required when automatic Feature management is enabled.", |
1721 | 1718 | "type": "string" |
1722 | 1719 | }, |
1723 | 1720 | "oci": { |
|
1731 | 1728 | "sourceFormat": { |
1732 | 1729 | "description": "Specifies whether the Config Sync Repo is in \"hierarchical\" or \"unstructured\" mode.", |
1733 | 1730 | "type": "string" |
| 1731 | + }, |
| 1732 | + "stopSyncing": { |
| 1733 | + "description": "Set to true to stop syncing configs for a single cluster when automatic Feature management is enabled. Default to false. The field will be ignored when automatic Feature management is disabled.", |
| 1734 | + "type": "boolean" |
1734 | 1735 | } |
1735 | 1736 | }, |
1736 | 1737 | "type": "object" |
|
2009 | 2010 | "id": "ConfigManagementGitConfig", |
2010 | 2011 | "properties": { |
2011 | 2012 | "gcpServiceAccountEmail": { |
2012 | | - "description": "The GCP Service Account Email used for auth when secret_type is gcpServiceAccount.", |
| 2013 | + "description": "The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.", |
2013 | 2014 | "type": "string" |
2014 | 2015 | }, |
2015 | 2016 | "httpsProxy": { |
|
2162 | 2163 | }, |
2163 | 2164 | "type": "object" |
2164 | 2165 | }, |
2165 | | - "ConfigManagementManaged": { |
2166 | | - "description": "Configuration for Managed Config Sync.", |
2167 | | - "id": "ConfigManagementManaged", |
2168 | | - "properties": { |
2169 | | - "enabled": { |
2170 | | - "description": "Set to true to enable Managed Config Sync. Defaults to false which disables Managed Config Sync. Setting this field to true when configSync.enabled is false is invalid.", |
2171 | | - "type": "boolean" |
2172 | | - }, |
2173 | | - "stopSyncing": { |
2174 | | - "description": "Set to true to stop syncing configs for a single cluster. Default to false. If set to true, Managed Config Sync will not upgrade Config Sync.", |
2175 | | - "type": "boolean" |
2176 | | - } |
2177 | | - }, |
2178 | | - "type": "object" |
2179 | | - }, |
2180 | 2166 | "ConfigManagementMembershipSpec": { |
2181 | 2167 | "description": "**Anthos Config Management**: Configuration for a single cluster. Intended to parallel the ConfigManagement CR.", |
2182 | 2168 | "id": "ConfigManagementMembershipSpec", |
|
2193 | 2179 | "$ref": "ConfigManagementHierarchyControllerConfig", |
2194 | 2180 | "description": "Hierarchy Controller configuration for the cluster." |
2195 | 2181 | }, |
| 2182 | + "management": { |
| 2183 | + "description": "Enables automatic Feature management.", |
| 2184 | + "enum": [ |
| 2185 | + "MANAGEMENT_UNSPECIFIED", |
| 2186 | + "MANAGEMENT_AUTOMATIC", |
| 2187 | + "MANAGEMENT_MANUAL" |
| 2188 | + ], |
| 2189 | + "enumDescriptions": [ |
| 2190 | + "Unspecified", |
| 2191 | + "Google will manage the Feature for the cluster.", |
| 2192 | + "User will manually manage the Feature for the cluster." |
| 2193 | + ], |
| 2194 | + "type": "string" |
| 2195 | + }, |
2196 | 2196 | "policyController": { |
2197 | 2197 | "$ref": "ConfigManagementPolicyController", |
2198 | 2198 | "description": "Policy Controller configuration for the cluster." |
|
2240 | 2240 | "id": "ConfigManagementOciConfig", |
2241 | 2241 | "properties": { |
2242 | 2242 | "gcpServiceAccountEmail": { |
2243 | | - "description": "The GCP Service Account Email used for auth when secret_type is gcpServiceAccount.", |
| 2243 | + "description": "The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.", |
2244 | 2244 | "type": "string" |
2245 | 2245 | }, |
2246 | 2246 | "policyDir": { |
|
2488 | 2488 | "type": "string" |
2489 | 2489 | }, |
2490 | 2490 | "lastSync": { |
| 2491 | + "deprecated": true, |
2491 | 2492 | "description": "Deprecated: use last_sync_time instead. Timestamp of when ACM last successfully synced the repo The time format is specified in https://golang.org/pkg/time/#Time.String", |
2492 | 2493 | "type": "string" |
2493 | 2494 | }, |
|
3471 | 3472 | "$ref": "ConfigManagementMembershipSpec", |
3472 | 3473 | "description": "Config Management-specific spec." |
3473 | 3474 | }, |
3474 | | - "fleetInherited": { |
3475 | | - "description": "True if value of `feature_spec` was inherited from a fleet-level default.", |
3476 | | - "type": "boolean" |
3477 | | - }, |
3478 | 3475 | "fleetobservability": { |
3479 | 3476 | "$ref": "FleetObservabilityMembershipSpec", |
3480 | 3477 | "description": "Fleet observability membership spec" |
|
3486 | 3483 | "mesh": { |
3487 | 3484 | "$ref": "ServiceMeshMembershipSpec", |
3488 | 3485 | "description": "Anthos Service Mesh-specific spec" |
| 3486 | + }, |
| 3487 | + "origin": { |
| 3488 | + "$ref": "Origin", |
| 3489 | + "description": "Whether this per-Membership spec was inherited from a fleet-level default. This field can be updated by users by either overriding a Membership config (updated to USER implicitly) or setting to FLEET explicitly." |
3489 | 3490 | } |
3490 | 3491 | }, |
3491 | 3492 | "type": "object" |
|
3720 | 3721 | }, |
3721 | 3722 | "type": "object" |
3722 | 3723 | }, |
| 3724 | + "Origin": { |
| 3725 | + "description": "Origin defines where this MembershipFeatureSpec originated from.", |
| 3726 | + "id": "Origin", |
| 3727 | + "properties": { |
| 3728 | + "type": { |
| 3729 | + "description": "Type specifies which type of origin is set.", |
| 3730 | + "enum": [ |
| 3731 | + "TYPE_UNSPECIFIED", |
| 3732 | + "FLEET", |
| 3733 | + "USER" |
| 3734 | + ], |
| 3735 | + "enumDescriptions": [ |
| 3736 | + "Type is unknown or not set.", |
| 3737 | + "Per-Membership spec was inherited from the fleet-level default.", |
| 3738 | + "Per-Membership spec was inherited from a user specification." |
| 3739 | + ], |
| 3740 | + "type": "string" |
| 3741 | + } |
| 3742 | + }, |
| 3743 | + "type": "object" |
| 3744 | + }, |
3723 | 3745 | "Policy": { |
3724 | 3746 | "description": "An Identity and Access Management (IAM) policy, which specifies access controls for Google Cloud resources. A `Policy` is a collection of `bindings`. A `binding` binds one or more `members`, or principals, to a single `role`. Principals can be user accounts, service accounts, Google groups, and domains (such as G Suite). A `role` is a named list of permissions; each `role` can be an IAM predefined role or a user-created custom role. For some types of Google Cloud resources, a `binding` can also specify a `condition`, which is a logical expression that allows access to a resource only if the expression evaluates to `true`. A condition can add constraints based on attributes of the request, the resource, or both. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). **JSON example:** { \"bindings\": [ { \"role\": \"roles/resourcemanager.organizationAdmin\", \"members\": [ \"user:mike@example.com\", \"group:admins@example.com\", \"domain:google.com\", \"serviceAccount:my-project-id@appspot.gserviceaccount.com\" ] }, { \"role\": \"roles/resourcemanager.organizationViewer\", \"members\": [ \"user:eve@example.com\" ], \"condition\": { \"title\": \"expirable access\", \"description\": \"Does not grant access after Sep 2020\", \"expression\": \"request.time < timestamp('2020-10-01T00:00:00.000Z')\", } } ], \"etag\": \"BwWWja0YfJA=\", \"version\": 3 } **YAML example:** bindings: - members: - user:mike@example.com - group:admins@example.com - domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.com role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3 For a description of IAM and its features, see the [IAM documentation](https://cloud.google.com/iam/docs/).", |
3725 | 3747 | "id": "Policy", |
|
3953 | 3975 | "id": "ServiceMeshMembershipSpec", |
3954 | 3976 | "properties": { |
3955 | 3977 | "controlPlane": { |
| 3978 | + "deprecated": true, |
3956 | 3979 | "description": "Deprecated: use `management` instead Enables automatic control plane management.", |
3957 | 3980 | "enum": [ |
3958 | 3981 | "CONTROL_PLANE_MANAGEMENT_UNSPECIFIED", |
|
0 commit comments