diff --git a/docs/dyn/gkehub_v1.projects.locations.features.html b/docs/dyn/gkehub_v1.projects.locations.features.html
index ce5a5394804..fe369658129 100644
--- a/docs/dyn/gkehub_v1.projects.locations.features.html
+++ b/docs/dyn/gkehub_v1.projects.locations.features.html
@@ -122,6 +122,8 @@
Method Details
{ # Feature represents the settings and status of any Hub Feature.
"createTime": "A String", # Output only. When the Feature resource was created.
"deleteTime": "A String", # Output only. When the Feature resource was deleted.
+ "fleetDefaultMemberConfig": { # CommonFleetDefaultMemberConfigSpec contains default configuration information for memberships of a fleet # Optional. Feature configuration applicable to all memberships of the fleet.
+ },
"labels": { # GCP labels for this Feature.
"a_key": "A String",
},
@@ -547,6 +549,8 @@ Method Details
{ # Feature represents the settings and status of any Hub Feature.
"createTime": "A String", # Output only. When the Feature resource was created.
"deleteTime": "A String", # Output only. When the Feature resource was deleted.
+ "fleetDefaultMemberConfig": { # CommonFleetDefaultMemberConfigSpec contains default configuration information for memberships of a fleet # Optional. Feature configuration applicable to all memberships of the fleet.
+ },
"labels": { # GCP labels for this Feature.
"a_key": "A String",
},
@@ -960,6 +964,8 @@ Method Details
{ # Feature represents the settings and status of any Hub Feature.
"createTime": "A String", # Output only. When the Feature resource was created.
"deleteTime": "A String", # Output only. When the Feature resource was deleted.
+ "fleetDefaultMemberConfig": { # CommonFleetDefaultMemberConfigSpec contains default configuration information for memberships of a fleet # Optional. Feature configuration applicable to all memberships of the fleet.
+ },
"labels": { # GCP labels for this Feature.
"a_key": "A String",
},
@@ -1329,6 +1335,8 @@ Method Details
{ # Feature represents the settings and status of any Hub Feature.
"createTime": "A String", # Output only. When the Feature resource was created.
"deleteTime": "A String", # Output only. When the Feature resource was deleted.
+ "fleetDefaultMemberConfig": { # CommonFleetDefaultMemberConfigSpec contains default configuration information for memberships of a fleet # Optional. Feature configuration applicable to all memberships of the fleet.
+ },
"labels": { # GCP labels for this Feature.
"a_key": "A String",
},
diff --git a/docs/dyn/gkehub_v1alpha.projects.locations.features.html b/docs/dyn/gkehub_v1alpha.projects.locations.features.html
index 32e7e8031ee..34078fe140d 100644
--- a/docs/dyn/gkehub_v1alpha.projects.locations.features.html
+++ b/docs/dyn/gkehub_v1alpha.projects.locations.features.html
@@ -122,6 +122,42 @@ Method Details
{ # Feature represents the settings and status of any Hub Feature.
"createTime": "A String", # Output only. When the Feature resource was created.
"deleteTime": "A String", # Output only. When the Feature resource was deleted.
+ "fleetDefaultMemberConfig": { # CommonFleetDefaultMemberConfigSpec contains default configuration information for memberships of a fleet # Optional. Feature configuration applicable to all memberships of the fleet.
+ "identityservice": { # **Anthos Identity Service**: Configuration for a single Membership. # Identity Service-specific spec.
+ "authMethods": [ # A member may support multiple auth methods.
+ { # Configuration of an auth method for a member/cluster. Only one authentication method (e.g., OIDC and LDAP) can be set per AuthMethod.
+ "azureadConfig": { # Configuration for the AzureAD Auth flow. # AzureAD specific Configuration.
+ "clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
+ "clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
+ "encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
+ "tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ },
+ "googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration
+ "disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
+ },
+ "name": "A String", # Identifier for auth config.
+ "oidcConfig": { # Configuration for OIDC Auth flow. # OIDC specific configuration.
+ "certificateAuthorityData": "A String", # PEM-encoded CA for OIDC provider.
+ "clientId": "A String", # ID for OIDC client application.
+ "clientSecret": "A String", # Input only. Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
+ "deployCloudConsoleProxy": True or False, # Flag to denote if reverse proxy is used to connect to auth provider. This flag should be set to true when provider is not reachable by Google Cloud Console.
+ "enableAccessToken": True or False, # Enable access token.
+ "encryptedClientSecret": "A String", # Output only. Encrypted OIDC Client secret
+ "extraParams": "A String", # Comma-separated list of key-value pairs.
+ "groupPrefix": "A String", # Prefix to prepend to group name.
+ "groupsClaim": "A String", # Claim in OIDC ID token that holds group information.
+ "issuerUri": "A String", # URI for the OIDC provider. This should point to the level below .well-known/openid-configuration.
+ "kubectlRedirectUri": "A String", # Registered redirect uri to redirect users going through OAuth flow using kubectl plugin.
+ "scopes": "A String", # Comma-separated list of identifiers.
+ "userClaim": "A String", # Claim in OIDC ID token that holds username.
+ "userPrefix": "A String", # Prefix to prepend to user name.
+ },
+ "proxy": "A String", # Proxy server address to use for auth method.
+ },
+ ],
+ },
+ },
"labels": { # GCP labels for this Feature.
"a_key": "A String",
},
@@ -682,6 +718,42 @@ Method Details
{ # Feature represents the settings and status of any Hub Feature.
"createTime": "A String", # Output only. When the Feature resource was created.
"deleteTime": "A String", # Output only. When the Feature resource was deleted.
+ "fleetDefaultMemberConfig": { # CommonFleetDefaultMemberConfigSpec contains default configuration information for memberships of a fleet # Optional. Feature configuration applicable to all memberships of the fleet.
+ "identityservice": { # **Anthos Identity Service**: Configuration for a single Membership. # Identity Service-specific spec.
+ "authMethods": [ # A member may support multiple auth methods.
+ { # Configuration of an auth method for a member/cluster. Only one authentication method (e.g., OIDC and LDAP) can be set per AuthMethod.
+ "azureadConfig": { # Configuration for the AzureAD Auth flow. # AzureAD specific Configuration.
+ "clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
+ "clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
+ "encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
+ "tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ },
+ "googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration
+ "disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
+ },
+ "name": "A String", # Identifier for auth config.
+ "oidcConfig": { # Configuration for OIDC Auth flow. # OIDC specific configuration.
+ "certificateAuthorityData": "A String", # PEM-encoded CA for OIDC provider.
+ "clientId": "A String", # ID for OIDC client application.
+ "clientSecret": "A String", # Input only. Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
+ "deployCloudConsoleProxy": True or False, # Flag to denote if reverse proxy is used to connect to auth provider. This flag should be set to true when provider is not reachable by Google Cloud Console.
+ "enableAccessToken": True or False, # Enable access token.
+ "encryptedClientSecret": "A String", # Output only. Encrypted OIDC Client secret
+ "extraParams": "A String", # Comma-separated list of key-value pairs.
+ "groupPrefix": "A String", # Prefix to prepend to group name.
+ "groupsClaim": "A String", # Claim in OIDC ID token that holds group information.
+ "issuerUri": "A String", # URI for the OIDC provider. This should point to the level below .well-known/openid-configuration.
+ "kubectlRedirectUri": "A String", # Registered redirect uri to redirect users going through OAuth flow using kubectl plugin.
+ "scopes": "A String", # Comma-separated list of identifiers.
+ "userClaim": "A String", # Claim in OIDC ID token that holds username.
+ "userPrefix": "A String", # Prefix to prepend to user name.
+ },
+ "proxy": "A String", # Proxy server address to use for auth method.
+ },
+ ],
+ },
+ },
"labels": { # GCP labels for this Feature.
"a_key": "A String",
},
@@ -1230,6 +1302,42 @@ Method Details
{ # Feature represents the settings and status of any Hub Feature.
"createTime": "A String", # Output only. When the Feature resource was created.
"deleteTime": "A String", # Output only. When the Feature resource was deleted.
+ "fleetDefaultMemberConfig": { # CommonFleetDefaultMemberConfigSpec contains default configuration information for memberships of a fleet # Optional. Feature configuration applicable to all memberships of the fleet.
+ "identityservice": { # **Anthos Identity Service**: Configuration for a single Membership. # Identity Service-specific spec.
+ "authMethods": [ # A member may support multiple auth methods.
+ { # Configuration of an auth method for a member/cluster. Only one authentication method (e.g., OIDC and LDAP) can be set per AuthMethod.
+ "azureadConfig": { # Configuration for the AzureAD Auth flow. # AzureAD specific Configuration.
+ "clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
+ "clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
+ "encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
+ "tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ },
+ "googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration
+ "disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
+ },
+ "name": "A String", # Identifier for auth config.
+ "oidcConfig": { # Configuration for OIDC Auth flow. # OIDC specific configuration.
+ "certificateAuthorityData": "A String", # PEM-encoded CA for OIDC provider.
+ "clientId": "A String", # ID for OIDC client application.
+ "clientSecret": "A String", # Input only. Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
+ "deployCloudConsoleProxy": True or False, # Flag to denote if reverse proxy is used to connect to auth provider. This flag should be set to true when provider is not reachable by Google Cloud Console.
+ "enableAccessToken": True or False, # Enable access token.
+ "encryptedClientSecret": "A String", # Output only. Encrypted OIDC Client secret
+ "extraParams": "A String", # Comma-separated list of key-value pairs.
+ "groupPrefix": "A String", # Prefix to prepend to group name.
+ "groupsClaim": "A String", # Claim in OIDC ID token that holds group information.
+ "issuerUri": "A String", # URI for the OIDC provider. This should point to the level below .well-known/openid-configuration.
+ "kubectlRedirectUri": "A String", # Registered redirect uri to redirect users going through OAuth flow using kubectl plugin.
+ "scopes": "A String", # Comma-separated list of identifiers.
+ "userClaim": "A String", # Claim in OIDC ID token that holds username.
+ "userPrefix": "A String", # Prefix to prepend to user name.
+ },
+ "proxy": "A String", # Proxy server address to use for auth method.
+ },
+ ],
+ },
+ },
"labels": { # GCP labels for this Feature.
"a_key": "A String",
},
@@ -1734,6 +1842,42 @@ Method Details
{ # Feature represents the settings and status of any Hub Feature.
"createTime": "A String", # Output only. When the Feature resource was created.
"deleteTime": "A String", # Output only. When the Feature resource was deleted.
+ "fleetDefaultMemberConfig": { # CommonFleetDefaultMemberConfigSpec contains default configuration information for memberships of a fleet # Optional. Feature configuration applicable to all memberships of the fleet.
+ "identityservice": { # **Anthos Identity Service**: Configuration for a single Membership. # Identity Service-specific spec.
+ "authMethods": [ # A member may support multiple auth methods.
+ { # Configuration of an auth method for a member/cluster. Only one authentication method (e.g., OIDC and LDAP) can be set per AuthMethod.
+ "azureadConfig": { # Configuration for the AzureAD Auth flow. # AzureAD specific Configuration.
+ "clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
+ "clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
+ "encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
+ "tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ },
+ "googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration
+ "disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
+ },
+ "name": "A String", # Identifier for auth config.
+ "oidcConfig": { # Configuration for OIDC Auth flow. # OIDC specific configuration.
+ "certificateAuthorityData": "A String", # PEM-encoded CA for OIDC provider.
+ "clientId": "A String", # ID for OIDC client application.
+ "clientSecret": "A String", # Input only. Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
+ "deployCloudConsoleProxy": True or False, # Flag to denote if reverse proxy is used to connect to auth provider. This flag should be set to true when provider is not reachable by Google Cloud Console.
+ "enableAccessToken": True or False, # Enable access token.
+ "encryptedClientSecret": "A String", # Output only. Encrypted OIDC Client secret
+ "extraParams": "A String", # Comma-separated list of key-value pairs.
+ "groupPrefix": "A String", # Prefix to prepend to group name.
+ "groupsClaim": "A String", # Claim in OIDC ID token that holds group information.
+ "issuerUri": "A String", # URI for the OIDC provider. This should point to the level below .well-known/openid-configuration.
+ "kubectlRedirectUri": "A String", # Registered redirect uri to redirect users going through OAuth flow using kubectl plugin.
+ "scopes": "A String", # Comma-separated list of identifiers.
+ "userClaim": "A String", # Claim in OIDC ID token that holds username.
+ "userPrefix": "A String", # Prefix to prepend to user name.
+ },
+ "proxy": "A String", # Proxy server address to use for auth method.
+ },
+ ],
+ },
+ },
"labels": { # GCP labels for this Feature.
"a_key": "A String",
},
diff --git a/docs/dyn/gkehub_v1beta.projects.locations.features.html b/docs/dyn/gkehub_v1beta.projects.locations.features.html
index 4fe5aea725e..95447109e36 100644
--- a/docs/dyn/gkehub_v1beta.projects.locations.features.html
+++ b/docs/dyn/gkehub_v1beta.projects.locations.features.html
@@ -122,6 +122,42 @@ Method Details
{ # Feature represents the settings and status of any Hub Feature.
"createTime": "A String", # Output only. When the Feature resource was created.
"deleteTime": "A String", # Output only. When the Feature resource was deleted.
+ "fleetDefaultMemberConfig": { # CommonFleetDefaultMemberConfigSpec contains default configuration information for memberships of a fleet # Optional. Feature configuration applicable to all memberships of the fleet.
+ "identityservice": { # **Anthos Identity Service**: Configuration for a single Membership. # Identity Service-specific spec.
+ "authMethods": [ # A member may support multiple auth methods.
+ { # Configuration of an auth method for a member/cluster. Only one authentication method (e.g., OIDC and LDAP) can be set per AuthMethod.
+ "azureadConfig": { # Configuration for the AzureAD Auth flow. # AzureAD specific Configuration.
+ "clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
+ "clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
+ "encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
+ "tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ },
+ "googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration
+ "disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
+ },
+ "name": "A String", # Identifier for auth config.
+ "oidcConfig": { # Configuration for OIDC Auth flow. # OIDC specific configuration.
+ "certificateAuthorityData": "A String", # PEM-encoded CA for OIDC provider.
+ "clientId": "A String", # ID for OIDC client application.
+ "clientSecret": "A String", # Input only. Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
+ "deployCloudConsoleProxy": True or False, # Flag to denote if reverse proxy is used to connect to auth provider. This flag should be set to true when provider is not reachable by Google Cloud Console.
+ "enableAccessToken": True or False, # Enable access token.
+ "encryptedClientSecret": "A String", # Output only. Encrypted OIDC Client secret
+ "extraParams": "A String", # Comma-separated list of key-value pairs.
+ "groupPrefix": "A String", # Prefix to prepend to group name.
+ "groupsClaim": "A String", # Claim in OIDC ID token that holds group information.
+ "issuerUri": "A String", # URI for the OIDC provider. This should point to the level below .well-known/openid-configuration.
+ "kubectlRedirectUri": "A String", # Registered redirect uri to redirect users going through OAuth flow using kubectl plugin.
+ "scopes": "A String", # Comma-separated list of identifiers.
+ "userClaim": "A String", # Claim in OIDC ID token that holds username.
+ "userPrefix": "A String", # Prefix to prepend to user name.
+ },
+ "proxy": "A String", # Proxy server address to use for auth method.
+ },
+ ],
+ },
+ },
"labels": { # GCP labels for this Feature.
"a_key": "A String",
},
@@ -626,6 +662,42 @@ Method Details
{ # Feature represents the settings and status of any Hub Feature.
"createTime": "A String", # Output only. When the Feature resource was created.
"deleteTime": "A String", # Output only. When the Feature resource was deleted.
+ "fleetDefaultMemberConfig": { # CommonFleetDefaultMemberConfigSpec contains default configuration information for memberships of a fleet # Optional. Feature configuration applicable to all memberships of the fleet.
+ "identityservice": { # **Anthos Identity Service**: Configuration for a single Membership. # Identity Service-specific spec.
+ "authMethods": [ # A member may support multiple auth methods.
+ { # Configuration of an auth method for a member/cluster. Only one authentication method (e.g., OIDC and LDAP) can be set per AuthMethod.
+ "azureadConfig": { # Configuration for the AzureAD Auth flow. # AzureAD specific Configuration.
+ "clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
+ "clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
+ "encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
+ "tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ },
+ "googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration
+ "disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
+ },
+ "name": "A String", # Identifier for auth config.
+ "oidcConfig": { # Configuration for OIDC Auth flow. # OIDC specific configuration.
+ "certificateAuthorityData": "A String", # PEM-encoded CA for OIDC provider.
+ "clientId": "A String", # ID for OIDC client application.
+ "clientSecret": "A String", # Input only. Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
+ "deployCloudConsoleProxy": True or False, # Flag to denote if reverse proxy is used to connect to auth provider. This flag should be set to true when provider is not reachable by Google Cloud Console.
+ "enableAccessToken": True or False, # Enable access token.
+ "encryptedClientSecret": "A String", # Output only. Encrypted OIDC Client secret
+ "extraParams": "A String", # Comma-separated list of key-value pairs.
+ "groupPrefix": "A String", # Prefix to prepend to group name.
+ "groupsClaim": "A String", # Claim in OIDC ID token that holds group information.
+ "issuerUri": "A String", # URI for the OIDC provider. This should point to the level below .well-known/openid-configuration.
+ "kubectlRedirectUri": "A String", # Registered redirect uri to redirect users going through OAuth flow using kubectl plugin.
+ "scopes": "A String", # Comma-separated list of identifiers.
+ "userClaim": "A String", # Claim in OIDC ID token that holds username.
+ "userPrefix": "A String", # Prefix to prepend to user name.
+ },
+ "proxy": "A String", # Proxy server address to use for auth method.
+ },
+ ],
+ },
+ },
"labels": { # GCP labels for this Feature.
"a_key": "A String",
},
@@ -1118,6 +1190,42 @@ Method Details
{ # Feature represents the settings and status of any Hub Feature.
"createTime": "A String", # Output only. When the Feature resource was created.
"deleteTime": "A String", # Output only. When the Feature resource was deleted.
+ "fleetDefaultMemberConfig": { # CommonFleetDefaultMemberConfigSpec contains default configuration information for memberships of a fleet # Optional. Feature configuration applicable to all memberships of the fleet.
+ "identityservice": { # **Anthos Identity Service**: Configuration for a single Membership. # Identity Service-specific spec.
+ "authMethods": [ # A member may support multiple auth methods.
+ { # Configuration of an auth method for a member/cluster. Only one authentication method (e.g., OIDC and LDAP) can be set per AuthMethod.
+ "azureadConfig": { # Configuration for the AzureAD Auth flow. # AzureAD specific Configuration.
+ "clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
+ "clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
+ "encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
+ "tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ },
+ "googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration
+ "disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
+ },
+ "name": "A String", # Identifier for auth config.
+ "oidcConfig": { # Configuration for OIDC Auth flow. # OIDC specific configuration.
+ "certificateAuthorityData": "A String", # PEM-encoded CA for OIDC provider.
+ "clientId": "A String", # ID for OIDC client application.
+ "clientSecret": "A String", # Input only. Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
+ "deployCloudConsoleProxy": True or False, # Flag to denote if reverse proxy is used to connect to auth provider. This flag should be set to true when provider is not reachable by Google Cloud Console.
+ "enableAccessToken": True or False, # Enable access token.
+ "encryptedClientSecret": "A String", # Output only. Encrypted OIDC Client secret
+ "extraParams": "A String", # Comma-separated list of key-value pairs.
+ "groupPrefix": "A String", # Prefix to prepend to group name.
+ "groupsClaim": "A String", # Claim in OIDC ID token that holds group information.
+ "issuerUri": "A String", # URI for the OIDC provider. This should point to the level below .well-known/openid-configuration.
+ "kubectlRedirectUri": "A String", # Registered redirect uri to redirect users going through OAuth flow using kubectl plugin.
+ "scopes": "A String", # Comma-separated list of identifiers.
+ "userClaim": "A String", # Claim in OIDC ID token that holds username.
+ "userPrefix": "A String", # Prefix to prepend to user name.
+ },
+ "proxy": "A String", # Proxy server address to use for auth method.
+ },
+ ],
+ },
+ },
"labels": { # GCP labels for this Feature.
"a_key": "A String",
},
@@ -1566,6 +1674,42 @@ Method Details
{ # Feature represents the settings and status of any Hub Feature.
"createTime": "A String", # Output only. When the Feature resource was created.
"deleteTime": "A String", # Output only. When the Feature resource was deleted.
+ "fleetDefaultMemberConfig": { # CommonFleetDefaultMemberConfigSpec contains default configuration information for memberships of a fleet # Optional. Feature configuration applicable to all memberships of the fleet.
+ "identityservice": { # **Anthos Identity Service**: Configuration for a single Membership. # Identity Service-specific spec.
+ "authMethods": [ # A member may support multiple auth methods.
+ { # Configuration of an auth method for a member/cluster. Only one authentication method (e.g., OIDC and LDAP) can be set per AuthMethod.
+ "azureadConfig": { # Configuration for the AzureAD Auth flow. # AzureAD specific Configuration.
+ "clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
+ "clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
+ "encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
+ "tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ },
+ "googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration
+ "disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
+ },
+ "name": "A String", # Identifier for auth config.
+ "oidcConfig": { # Configuration for OIDC Auth flow. # OIDC specific configuration.
+ "certificateAuthorityData": "A String", # PEM-encoded CA for OIDC provider.
+ "clientId": "A String", # ID for OIDC client application.
+ "clientSecret": "A String", # Input only. Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
+ "deployCloudConsoleProxy": True or False, # Flag to denote if reverse proxy is used to connect to auth provider. This flag should be set to true when provider is not reachable by Google Cloud Console.
+ "enableAccessToken": True or False, # Enable access token.
+ "encryptedClientSecret": "A String", # Output only. Encrypted OIDC Client secret
+ "extraParams": "A String", # Comma-separated list of key-value pairs.
+ "groupPrefix": "A String", # Prefix to prepend to group name.
+ "groupsClaim": "A String", # Claim in OIDC ID token that holds group information.
+ "issuerUri": "A String", # URI for the OIDC provider. This should point to the level below .well-known/openid-configuration.
+ "kubectlRedirectUri": "A String", # Registered redirect uri to redirect users going through OAuth flow using kubectl plugin.
+ "scopes": "A String", # Comma-separated list of identifiers.
+ "userClaim": "A String", # Claim in OIDC ID token that holds username.
+ "userPrefix": "A String", # Prefix to prepend to user name.
+ },
+ "proxy": "A String", # Proxy server address to use for auth method.
+ },
+ ],
+ },
+ },
"labels": { # GCP labels for this Feature.
"a_key": "A String",
},
diff --git a/googleapiclient/discovery_cache/documents/gkehub.v1.json b/googleapiclient/discovery_cache/documents/gkehub.v1.json
index 080047ad394..6ca56e598d8 100644
--- a/googleapiclient/discovery_cache/documents/gkehub.v1.json
+++ b/googleapiclient/discovery_cache/documents/gkehub.v1.json
@@ -905,7 +905,7 @@
}
}
},
- "revision": "20230106",
+ "revision": "20230119",
"rootUrl": "https://gkehub.googleapis.com/",
"schemas": {
"AppDevExperienceFeatureSpec": {
@@ -1077,6 +1077,12 @@
},
"type": "object"
},
+ "CommonFleetDefaultMemberConfigSpec": {
+ "description": "CommonFleetDefaultMemberConfigSpec contains default configuration information for memberships of a fleet",
+ "id": "CommonFleetDefaultMemberConfigSpec",
+ "properties": {},
+ "type": "object"
+ },
"ConfigManagementConfigSync": {
"description": "Configuration for Config Sync",
"id": "ConfigManagementConfigSync",
@@ -1878,6 +1884,10 @@
"readOnly": true,
"type": "string"
},
+ "fleetDefaultMemberConfig": {
+ "$ref": "CommonFleetDefaultMemberConfigSpec",
+ "description": "Optional. Feature configuration applicable to all memberships of the fleet."
+ },
"labels": {
"additionalProperties": {
"type": "string"
diff --git a/googleapiclient/discovery_cache/documents/gkehub.v1alpha.json b/googleapiclient/discovery_cache/documents/gkehub.v1alpha.json
index a0c9dbebc73..f1b27524714 100644
--- a/googleapiclient/discovery_cache/documents/gkehub.v1alpha.json
+++ b/googleapiclient/discovery_cache/documents/gkehub.v1alpha.json
@@ -1179,7 +1179,7 @@
}
}
},
- "revision": "20230106",
+ "revision": "20230119",
"rootUrl": "https://gkehub.googleapis.com/",
"schemas": {
"AnthosObservabilityFeatureSpec": {
@@ -1436,6 +1436,17 @@
},
"type": "object"
},
+ "CommonFleetDefaultMemberConfigSpec": {
+ "description": "CommonFleetDefaultMemberConfigSpec contains default configuration information for memberships of a fleet",
+ "id": "CommonFleetDefaultMemberConfigSpec",
+ "properties": {
+ "identityservice": {
+ "$ref": "IdentityServiceMembershipSpec",
+ "description": "Identity Service-specific spec."
+ }
+ },
+ "type": "object"
+ },
"ConfigManagementBinauthzConfig": {
"description": "Configuration for Binauthz",
"id": "ConfigManagementBinauthzConfig",
@@ -2294,6 +2305,10 @@
"readOnly": true,
"type": "string"
},
+ "fleetDefaultMemberConfig": {
+ "$ref": "CommonFleetDefaultMemberConfigSpec",
+ "description": "Optional. Feature configuration applicable to all memberships of the fleet."
+ },
"labels": {
"additionalProperties": {
"type": "string"
@@ -3570,7 +3585,7 @@
"INSTALLING",
"ACTIVE",
"UPDATING",
- "DECOMISSIONING",
+ "DECOMMISSIONING",
"CLUSTER_ERROR",
"HUB_ERROR",
"SUSPENDED"
@@ -3631,7 +3646,7 @@
"INSTALLING",
"ACTIVE",
"UPDATING",
- "DECOMISSIONING",
+ "DECOMMISSIONING",
"CLUSTER_ERROR",
"HUB_ERROR",
"SUSPENDED"
diff --git a/googleapiclient/discovery_cache/documents/gkehub.v1alpha2.json b/googleapiclient/discovery_cache/documents/gkehub.v1alpha2.json
index 9e0b62e3a66..4511a6280af 100644
--- a/googleapiclient/discovery_cache/documents/gkehub.v1alpha2.json
+++ b/googleapiclient/discovery_cache/documents/gkehub.v1alpha2.json
@@ -652,7 +652,7 @@
}
}
},
- "revision": "20230106",
+ "revision": "20230119",
"rootUrl": "https://gkehub.googleapis.com/",
"schemas": {
"ApplianceCluster": {
diff --git a/googleapiclient/discovery_cache/documents/gkehub.v1beta.json b/googleapiclient/discovery_cache/documents/gkehub.v1beta.json
index 39ca33fcb39..9f1c0c974cb 100644
--- a/googleapiclient/discovery_cache/documents/gkehub.v1beta.json
+++ b/googleapiclient/discovery_cache/documents/gkehub.v1beta.json
@@ -670,7 +670,7 @@
}
}
},
- "revision": "20230106",
+ "revision": "20230119",
"rootUrl": "https://gkehub.googleapis.com/",
"schemas": {
"AnthosObservabilityFeatureSpec": {
@@ -839,6 +839,17 @@
},
"type": "object"
},
+ "CommonFleetDefaultMemberConfigSpec": {
+ "description": "CommonFleetDefaultMemberConfigSpec contains default configuration information for memberships of a fleet",
+ "id": "CommonFleetDefaultMemberConfigSpec",
+ "properties": {
+ "identityservice": {
+ "$ref": "IdentityServiceMembershipSpec",
+ "description": "Identity Service-specific spec."
+ }
+ },
+ "type": "object"
+ },
"ConfigManagementBinauthzConfig": {
"description": "Configuration for Binauthz",
"id": "ConfigManagementBinauthzConfig",
@@ -1671,6 +1682,10 @@
"readOnly": true,
"type": "string"
},
+ "fleetDefaultMemberConfig": {
+ "$ref": "CommonFleetDefaultMemberConfigSpec",
+ "description": "Optional. Feature configuration applicable to all memberships of the fleet."
+ },
"labels": {
"additionalProperties": {
"type": "string"
@@ -2494,7 +2509,7 @@
"INSTALLING",
"ACTIVE",
"UPDATING",
- "DECOMISSIONING",
+ "DECOMMISSIONING",
"CLUSTER_ERROR",
"HUB_ERROR",
"SUSPENDED"
@@ -2555,7 +2570,7 @@
"INSTALLING",
"ACTIVE",
"UPDATING",
- "DECOMISSIONING",
+ "DECOMMISSIONING",
"CLUSTER_ERROR",
"HUB_ERROR",
"SUSPENDED"
diff --git a/googleapiclient/discovery_cache/documents/gkehub.v1beta1.json b/googleapiclient/discovery_cache/documents/gkehub.v1beta1.json
index 81bf49ecce9..9ffaf1fc041 100644
--- a/googleapiclient/discovery_cache/documents/gkehub.v1beta1.json
+++ b/googleapiclient/discovery_cache/documents/gkehub.v1beta1.json
@@ -706,7 +706,7 @@
}
}
},
- "revision": "20230106",
+ "revision": "20230119",
"rootUrl": "https://gkehub.googleapis.com/",
"schemas": {
"ApplianceCluster": {
diff --git a/googleapiclient/discovery_cache/documents/gkehub.v2alpha.json b/googleapiclient/discovery_cache/documents/gkehub.v2alpha.json
index b00aa0978c8..2fdad66cc99 100644
--- a/googleapiclient/discovery_cache/documents/gkehub.v2alpha.json
+++ b/googleapiclient/discovery_cache/documents/gkehub.v2alpha.json
@@ -280,7 +280,7 @@
}
}
},
- "revision": "20230106",
+ "revision": "20230119",
"rootUrl": "https://gkehub.googleapis.com/",
"schemas": {
"CancelOperationRequest": {