cloudPlatformScope _requesterprojects locations memberships operationsgetlistfeaturescreatedeletepatchcancelnetworkingInstallSucceededtoJsonsecurityPolicyversionnamestatusupgradeignoredupgradesenabledwebhookwebhookVersiondeploymentOverridesgitmetricsGcpServiceAccountEmailoci preventDrift sourceFormat stopSyncingadmissionWebhookgitSyncimportermonitor otelCollectorreconcilerManagerresourceGroupControllerManagerrootReconcilersyncerclusterLevelStopSyncingStatecrCountdeploymentStateerrors reposyncCrd rootsyncCrdstate syncState containersdeploymentNamedeploymentNamespace resourceGvk resourceNameresourceNamespace sourcePathgatekeeperAudit gatekeeperControllerManagerStategatekeeperMutation extensionhnc errorMessageauditIntervalSecondsexemptableNamespaceslogDeniesEnabled monitoringmutationEnabledreferentialRulesEnabledtemplateLibraryInstalled updateTime migrationbinauthzcluster configSynchierarchyController managementpolicyController binauthzState clusterNameconfigSyncStatehierarchyControllerStatekubernetesApiServerVersionmembershipSpec operatorStatepolicyControllerStatecodeerrorResources importTokenlastSync lastSyncTime sourceToken syncToken cloudbuildconfigmanagementidentityserviceoriginpolicycontrollerrbacrolebindingactuation servicemeshworkloadcertificateappdevexperienceclusterupgrademeteringworkloadidentity azureadConfig googleConfig ldapConfig oidcConfigproxy samlConfigdiagnosticInterfacesessionDurationgroupserverserviceAccountusersimpleBindCredentials authMethodsidentityServiceOptions failureReasoninstalledVersion memberConfig nextPageTokenmembershipFeatures unreachable createTime deleteTimelabelslifecycleStatespeclastMeasurementTime&preciseLastMeasuredClusterVcpuCapacitydoneerrormetadataresponsetypeexemptedNamespacesconstraintViolationLimitdeploymentConfigs installSpec policyContentdetailsbundlestemplateLibrary bundleStatesreferentialSyncConfigStatetemplateLibraryStatecontainerResources podAffinitypodAntiAffinitypodTolerations replicaCountlimitsrequestspolicyControllerHubConfigcomponentStatespolicyContentState descriptionrbacrolebindingStatesargs messageBase resourcePathsdocumentationUrllevelimplementation configApi controlPlanedefaultChannelanalysisMessages conditionsconfigApiVersioncontrolPlaneManagementdataPlaneManagement displayNamecertificateManagementidentityProviderStateDetailsf GKEHubApiProjectsResourceProjectsLocationsResource$ProjectsLocationsMembershipsResource,ProjectsLocationsMembershipsFeaturesResource#ProjectsLocationsOperationsResourceAppDevExperienceStateAppDevExperienceStatusCancelOperationRequestCloudBuildSpecClusterUpgradeGKEUpgradeClusterUpgradeIgnoredMembership'ClusterUpgradeMembershipGKEUpgradeStateClusterUpgradeStateClusterUpgradeUpgradeStatusConfigManagementBinauthzConfigConfigManagementBinauthzStateConfigManagementBinauthzVersionConfigManagementConfigSync)ConfigManagementConfigSyncDeploymentStateConfigManagementConfigSyncErrorConfigManagementConfigSyncState!ConfigManagementConfigSyncVersion!ConfigManagementContainerOverride"ConfigManagementDeploymentOverrideConfigManagementErrorResource)ConfigManagementGatekeeperDeploymentStateConfigManagementGitConfig ConfigManagementGroupVersionKind)ConfigManagementHierarchyControllerConfig2ConfigManagementHierarchyControllerDeploymentState(ConfigManagementHierarchyControllerState*ConfigManagementHierarchyControllerVersionConfigManagementInstallErrorConfigManagementOciConfigConfigManagementOperatorState ConfigManagementPolicyController)ConfigManagementPolicyControllerMigration*ConfigManagementPolicyControllerMonitoring%ConfigManagementPolicyControllerState'ConfigManagementPolicyControllerVersionConfigManagementSpecConfigManagementStateConfigManagementSyncErrorConfigManagementSyncStateEmpty FeatureSpec FeatureStateGoogleRpcStatusIdentityServiceAuthMethodIdentityServiceAzureADConfig"IdentityServiceDiagnosticInterfaceIdentityServiceGoogleConfigIdentityServiceGroupConfig%IdentityServiceIdentityServiceOptionsIdentityServiceLdapConfigIdentityServiceOidcConfigIdentityServiceSamlConfigIdentityServiceServerConfig#IdentityServiceServiceAccountConfig$IdentityServiceSimpleBindCredentialsIdentityServiceSpecIdentityServiceStateIdentityServiceUserConfigLifecycleStateListLocationsResponseListMembershipFeaturesResponseListOperationsResponseLocationMembershipFeature MeteringState OperationOrigin!PolicyControllerBundleInstallSpecPolicyControllerHubConfig PolicyControllerMonitoringConfigPolicyControllerOnClusterState!PolicyControllerPolicyContentSpec"PolicyControllerPolicyContentState0PolicyControllerPolicyControllerDeploymentConfigPolicyControllerResourceList$PolicyControllerResourceRequirementsPolicyControllerSpecPolicyControllerState%PolicyControllerTemplateLibraryConfigPolicyControllerToleration,RBACRoleBindingActuationRBACRoleBindingStateRBACRoleBindingActuationSpecRBACRoleBindingActuationStateServiceMeshAnalysisMessageServiceMeshAnalysisMessageBaseServiceMeshCondition!ServiceMeshControlPlaneManagementServiceMeshDataPlaneManagementServiceMeshSpecServiceMeshStateServiceMeshStatusDetailsServiceMeshTypeStateWorkloadCertificateSpec+WorkloadIdentityIdentityProviderStateDetailWorkloadIdentityStateApiRequestErrorDetailedApiRequestError ApiRequesterClientStringrootUrl servicePathrequestHeaders$fieldsFutureListUri encodeFullrequest queryParamsfromJsonMapdynamicextraLocationTypesfilterpageSize pageTokenint featureId requestIdjsonencodebodyorderBy allowMissing updateMaskboolreturnPartialSuccessnetworkingInstallSucceeded containsKey $Status01$EmptysecurityPolicyversionname $ClusterUpgradeIgnoredMembershipstatusupgradeignoredupgradesmapvaluetoList$ClusterUpgradeUpgradeStatusenabledwebhookwebhookVersion DeprecateddeploymentOverridesgitmetricsGcpServiceAccountEmailoci preventDrift sourceFormat stopSyncingadmissionWebhookgitSyncimportermonitor otelCollectorreconcilerManagerresourceGroupControllerManagerrootReconcilersyncer$ErrorclusterLevelStopSyncingStatecrCountdeploymentStateerrors reposyncCrd rootsyncCrdstate syncState"$ConfigManagementContainerOverride containersdeploymentNamedeploymentNamespace resourceGvk resourceNameresourceNamespace sourcePathgatekeeperAudit gatekeeperControllerManagerStategatekeeperMutation$ConfigManagementGitConfig!$ConfigManagementGroupVersionKind*$ConfigManagementHierarchyControllerConfig extensionhnc errorMessage$ConfigManagementOciConfigauditIntervalSecondsexemptableNamespaceslogDeniesEnabled monitoringmutationEnabledreferentialRulesEnabledtemplateLibraryInstalled updateTime*$ConfigManagementPolicyControllerMigration $Shared04 migration($ConfigManagementPolicyControllerVersionbinauthzcluster configSynchierarchyController managementpolicyController binauthzState clusterNameconfigSyncStatehierarchyControllerStatekubernetesApiServerVersionmembershipSpec operatorStatepolicyControllerStatecodeerrorResources importTokenlastSync lastSyncTime sourceToken syncToken cloudbuildconfigmanagementidentityserviceoriginpolicycontrollerrbacrolebindingactuation servicemeshworkloadcertificateappdevexperienceclusterupgrademeteringworkloadidentity $Status00 azureadConfig googleConfig ldapConfig oidcConfigproxy samlConfig$IdentityServiceAzureADConfig#$IdentityServiceDiagnosticInterface$IdentityServiceGoogleConfig$IdentityServiceGroupConfigdiagnosticInterfacesessionDurationgroupserverserviceAccountuser$IdentityServiceOidcConfig$IdentityServiceSamlConfig$IdentityServiceServerConfigsimpleBindCredentials%$IdentityServiceSimpleBindCredentials authMethodsidentityServiceOptions failureReasoninstalledVersion memberConfig$IdentityServiceUserConfig locations nextPageTokenmembershipFeatures unreachable operations $Location00 createTime deleteTimelabelsMapEntrykeylifecycleStatespecdoublelastMeasurementTime&preciseLastMeasuredClusterVcpuCapacitynumtoDoubleObjectdoneerrormetadataresponsetypeexemptedNamespacesconstraintViolationLimitdeploymentConfigs installSpec policyContentdetailsbundlestemplateLibrary bundleStatesreferentialSyncConfigStatetemplateLibraryStatecontainerResources podAffinitypodAntiAffinitypodTolerations replicaCount$PolicyControllerResourceListlimitsrequestspolicyControllerHubConfigcomponentStatespolicyContentState&$PolicyControllerTemplateLibraryConfig$PolicyControllerToleration descriptionrbacrolebindingStatesargs messageBase resourcePathsdocumentationUrllevel$ServiceMeshConditionimplementation configApi controlPlanedefaultChannelanalysisMessages conditionsconfigApiVersioncontrolPlaneManagementdataPlaneManagement$ServiceMeshStatusDetails displayNamecertificateManagement,$WorkloadIdentityIdentityProviderStateDetailidentityProviderStateDetailssDACt{FjzApiRequestErrorDetailedApiRequestError2:package:_discoveryapis_commons/_discoveryapis_commons.dart!47async7 dart:async?TWconvertW dart:convertasvcorev dart:core~commons:package:_discoveryapis_commons/_discoveryapis_commons.darthttppackage:http/http.dart../shared.dart../src/user_agent.dartbz8GHmЀ)[ʂ*`avz9=Vz >`|}̈́12v 3W #_· #LMz=>x pq5;Ō#)z>sz{$txyǏc :@ÐɑhԒ lrߒ3|͓ݓjw}Ε/Gwĕޕ+\͗ >EFɗ֗)ahlnoŘƙEFݚSnoښOΜ`f$uٞ0OiȞ8t45eq 39SY$w} 5;%G_{SZ[åϥߦX\]æݦ.s5EKw}Ψۨ2gͪ BIJ˪RY]^Ĭ\z­]Ʈj28ׯA>D.c}Ȳ K~.cjk$Xɵϵ$s޷.iڷ.{θԹ ^ntSȺ6P]ͼSǼμϽ7CRe޽:;~޾5}@@j@AA"A(AWA]AwA}AABB%BpBBBBBC CCaCCCCD DDGDDDDEEE8EDEREeEEEEEFFFmFFFFFG GKGQGGGGGH-H:H@HHIIVIIIIIIJJJ5J<JJJJJK,K2KLKRKKKLL L;LALsLyLMMhMMNINNNNNO*O0OOOOPPGP_PxPPPPPQ8QkQQR!R2R[RRRRRSSS)SJSQS}SSSSSSTTQTTTTTUU&UbUUVVV%V.V/V`VVVVVW(WTWUWWWXXXhXXYY>Y]Y^YYYYYZZZ`ZZZZZ[ [e[i[k[l[[\\'\(\^\v\w\\\\]]O]X]Y]]]]]]^^F^J^^^__L_|____```W`X```aaOa_asaabb+b?bHbIbzbbbbbbc#c?cxc~cdd1d2d^ddddeee?eweeeff+fvffffffg%gGgkgggggh/h0hPhwhhhhhi.icidiiiiiiijjOj{j|jjk kkVkkl l%l&lelflllmmZmjm~mmmmnn0ngnknmnnnnnnno8o9otoooppKpOpQpRptpppqqdqqrzrrrrrsssjsttQtitottttttttuJuuuuv>vvw%w@wwwwx<x@xnxoxxxxxy'y-y|yz zz%z5zPzQzzzz{F{`{f{v{{{{{{||"|#|B|`|r||||||}}}7}C}}}~$~5~C~Z~~~(8LsTdx)23d(Bn2y>pN}&'Su3"hz,h'^-.Wy72x<x?Q?noKz!"Ln,x':Ld+p J?pyz%Gu+KX.w23Y R(w lr)/BxyJq;ATv\o >}G&'QWj!7M]q:j;K_#4BY0b9-O9[h /Ri Uvw-EFw3bc6QcvS_ ?~2s5Y{/_ 3b'wx(de.RSz Ob\ :t W}.KL/Fbw}~2£'`ijÛ'O\Ĥ/aŎŰ?nƺJlDz*vȲ<ɂɔFʂʥʦ6<=˂ˎB̋̔̕%T͙͌BIMOP΁/0\ϐ*nЂФ3bѮHjҰ(tӰ$%sԶB\ՏՓՕՖպ ]^֊ O[ׅ';iج"#Trٔ'Ystڗګڬ=Iۀ۫۴۵ &Y]_`ܒܷEF~ݿIMOPށCe߽߫#oJbcQ#1H{*7b{=C+AB2QRWm9:8Wi,23o{ExIKmZ|F6Q:w!QR Q]^JKu G0rO)Oq~1c+{l&6;`fv;A 1w{GM]KZn ^&*`a"7RdjkXh|  b r    ; w     M w       E i     I k x   %Rmtxz{787=P@FY BH[#6vw!:Rrxy&uJPG$^Q '(Y'o ?b 4[ *?@a~  % < U [ \   !!G!Z!!!!""""J"f""""# #2#9#=#?#@####$3$$% %/%|%%&*&?&@&{&&''1'2'd''''((C(W((((()))K)g)h))))))***1*G*[*a*b***+++P+++++,4,q,,,,--:-Z----.$.1.F._....// ////a///0&0E0]0^0000011I1J1m1111292|2222233V3W3w333334 4494S4d444444555D5k55566H6r66677<777778D8T8h8889;9K9_99::R:b:v::;!;1;E;;;<$<4 >>;>h>>>??9?l?s?w?y?z??@@/@Z@[@x@@@@@AA0A1AFAaAbAAAABBB)BJBKBBBBBBBCC!C<CVCiCCCCCCCDD#DcDDDEEEWEEEEF7FeFFFFG-GZGGGGH%HoHHHII+IgIwIIJJCJJJJKKOK_KsKKLLL&LfLLLM MM'M(MYMMMN#NGN{NNOO;OHOuOOOPP@P}PPPPPPPQ;QQQR#RsRRRSSSdStSSSSTTCTDTgTTTTTTUUUIU_U`UUUUUUVVV3VCVXV^V_VVVWW^WnWWWX<XLX`XXYY"Y6YcYYZZ%Z9ZhZZ[[*[>[G[H[y[[[\\?\]\\\\\]]5]L]m]t]x]z]{]]]^+^X^^^^^_D_S____`8`s`t```aa,aFaLaMaaabbHbbbbbbc&c`ccccddd d d5dWdddddde$e*e:eaebeeef5fVf\flfffffggg3gCgTgmg|gggggh!hhhxhhhi4iDiXiij j0jDjljjjkkkkCkakkkkkl l3lHlOlSlUlVl|lllm'm(mZmmmnnnmnnnooo\o]ooop/p^ppppppq7quqyq{q|qqrrrSrorrrs sss`sasssstt2tottttu/umuuuuvvv8vbvvvw wwwwwjwwwwwwxxQxhxxxxxyy'ybyyyyyyzz%z5z;z<zlzxzz{4{`{{{|| | |<|j||||}}I}n}}}}}}~~ ~Y~i~m~~ &HQU9:d   B`VW GXf}K ;op'5ST 6<=wQbp3JST"Sz+IJ[ "7MST I*AJK| 0Qt{'Qk'BCpP>DWlmW]p$9?@my;=Ma 0Dn7@Ar.Jh!6Kb Wj12DbJ([3:>@A Zk~%+x"(s8Z`*0j UBNy"6fey.R_t#2dTgh&2\DPU&,o*ST [an5-}.Qmn&'nL &E[v'tAX5Lat Eˆ¼AQeæiyčUř 5iƑ3@uDz9fȇȲ!"n~ɂMNʟ@bˮO̍)cͩHΓAύ(tЕ+y_Ҫ)y^ԋ"BՎ01kw֪6Tׇ׋׍׎BH؂Nوىj}ڪڿ;N_n۬;K_hiܚܼ59;<rݝ<=yWX߀߸߹;AB6O3o&:#3GPQ2?dHo?9:^d5no(AX^_8d@ .EQ9b]!"lEQ} N,Lp#@w?@p| ?{ Su!?|@z{K*wF0*x2_Gw`(v+x(4M:~<h   2 d     # : A E G H      M N      ! I O b    U    &ABs Ds/Wd9hi TXqrB+o'eikl8Mz{h Y3Iagh)d.B!Ku 29=?@  * K L v  !!O!!!!""";"<"_"z""""""#+#Z###$$$$$O$$$$$%%#%*%.%0%1%O%%%%%&$&%&T&Z&m&&'''i'v'''((2(f(()D))**m**+F+a+++++, ,#,3,9,:,w,,,--B-S-a-x----.#.E.u.....//// /./2/P/w////00P001.1|122W22303K333333454A4s44555565e5n5o55566666i66667767x7778(8:8\889:99::1:E:::::;;0;\;;<$!>0>~>>?%?@?A?U?i???????@#@`@@@@AA;AgAAAABB9BZBaBeBgBhBBBCC!C4CoCpCCCCCD?DSDYDDDDDDE;E<EcEiE|EEEEEFF5FSFYFZFFFFG'GeGvGGGGHH\HmH{HHI#I]IIIIJ3JjJJJJKKK2KfKKLL<LILvLLLM0M7M;M=M>MvMMMMN4NNOO&OuOOOPPP6P<PPPQ Q Q>Q?QjQvQQQQRR5R_RRRRRRS#SESvSSTNTTU&UuUUVV VCV_V`VVVVW WW/W;WhWWWWXX3X]XXXXXXXXXY8YYYyYYZ.Z=ZxZZZ[[[E[Q[[[[\\W\[\]\^\\]]]b]o]]]^^^S^^^_ _ _<_H___``0`a`z`aaa4aGaPaQaaabb(bmbtbxbz/// GKE Hub API - v2 /// /// For more information, see /// /// /// Create an instance of [GKEHubApi] to access these resources: /// /// - [ProjectsResource] /// - [ProjectsLocationsResource] /// - [ProjectsLocationsMembershipsResource] /// - [ProjectsLocationsMembershipsFeaturesResource] /// - [ProjectsLocationsOperationsResource] 7>W`v}2zE ''63cco =}Ňׇ]BBr/// See, edit, configure, and delete your Google Cloud data and see the email /// address for your Google Account.%>^ڈ爪D@%%@OOWm ";<<Qf[h""M1%1@@oiľߌssȂ/// Gets information about a location. /// /// Request parameters: /// /// [name] - Resource name for the location. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Location]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.33?KK*c{{ȕ{{)?/// Lists information about the supported locations for this service. /// /// This method can be called in two ways: * **List all public locations:** /// Use the path `GET /v1/locations`. * **List project-visible locations:** /// Use the path `GET /v1/projects/{project_id}/locations`. This may include /// public locations as well as private or other locations specifically /// visible to the project. /// /// Request parameters: /// /// [name] - The resource that owns the locations collection, if applicable. /// Value must have pattern `^projects/\[^/\]+$`. /// /// [extraLocationTypes] - Optional. Do not use this field. It is unsupported /// and is ignored unless explicitly documented otherwise. This is primarily /// for internal usage. /// /// [filter] - A filter to narrow down results to a preferred subset. The /// filtering language accepts strings like `"displayName=tokyo"`, and is /// documented in more detail in \[AIP-160\](https://google.aip.dev/160). /// /// [pageSize] - The maximum number of results to return. If not set, the /// service selects a default. /// /// [pageToken] - A page token received from the `next_page_token` field in /// the response. Send that page token to receive the subsequent page. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListLocationsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.{HlmmHH\%Ș|oo7u 566KdYf d%44FSS_mmzqq(j/// Creates membershipFeature under a given parent. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The name of parent where the MembershipFeature will /// be created. Specified in the format `projects / * /locations / * /// /memberships / * `. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/memberships/\[^/\]+$`. /// /// [featureId] - Required. The ID of the membership_feature to create. /// /// [requestId] - Idempotent request UUID. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.KKWccpI?/// Removes a membershipFeature. /// /// Request parameters: /// /// [name] - Required. The name of the membershipFeature to be deleted. /// Specified in the format `projects / * /locations / * /memberships / * /// /features / * `. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/memberships/\[^/\]+/features/\[^/\]+$`. /// /// [requestId] - Idempotent request UUID. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.__/// ========= MembershipFeature Services ========= Gets details of a /// membershipFeature. /// /// Request parameters: /// /// [name] - Required. The MembershipFeature resource name in the format /// `projects / * /locations / * /memberships / * /features / * `. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/memberships/\[^/\]+/features/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [MembershipFeature]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.ggs̲``:]/// Lists MembershipFeatures in a given project and location. /// /// Request parameters: /// /// [parent] - Required. The parent where the MembershipFeature will be /// listed. In the format: `projects / * /locations / * /memberships / * `. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/memberships/\[^/\]+$`. /// /// [filter] - Lists MembershipFeatures that match the filter expression, /// following the syntax outlined in https://google.aip.dev/160. Examples: - /// Feature with the name "helloworld" in project "foo-proj" and membership /// "member-bar": name = /// "projects/foo-proj/locations/global/memberships/member-bar/features/helloworld" /// - Features that have a label called `foo`: labels.foo:* - Features that /// have a label called `foo` whose value is `bar`: labels.foo = bar /// /// [orderBy] - One or more fields to compare and use to sort the output. See /// https://google.aip.dev/132#ordering. /// /// [pageSize] - When requesting a 'page' of resources, `page_size` specifies /// number of resources to return. If unspecified or set to 0, all resources /// will be returned. /// /// [pageToken] - Token returned by previous call to `ListFeatures` which /// specifies the position in the list from where to continue listing the /// resources. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListMembershipFeaturesResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.̺*::GC/// Updates an existing MembershipFeature. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Output only. The resource name of the membershipFeature, in the /// format: /// `projects/{project}/locations/{location}/memberships/{membership}/features/{feature}`. /// Note that `membershipFeatures` is shortened to `features` in the resource /// name. (see http://go/aip/122#collection-identifiers) /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/memberships/\[^/\]+/features/\[^/\]+$`. /// /// [allowMissing] - Optional. If set to true, and the MembershipFeature is /// not found, a new MembershipFeature will be created. In this situation, /// `update_mask` is ignored. /// /// [requestId] - Idempotent request UUID. /// /// [updateMask] - Required. Mask of fields to update. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.;=`aav==[.%.CCCCCCCCDAC/// Starts asynchronous cancellation on a long-running operation. /// /// The server makes a best effort to cancel the operation, but success is not /// guaranteed. If the server doesn't support this method, it returns /// `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation /// or other methods to check whether the cancellation succeeded or whether /// the operation completed despite cancellation. On successful cancellation, /// the operation is not deleted; instead, it becomes an operation with an /// Operation.error value with a google.rpc.Status.code of `1`, corresponding /// to `Code.CANCELLED`. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - The name of the operation resource to be cancelled. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/operations/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Empty]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.HHHHHIEEᄯH/// Gets the latest state of a long-running operation. /// /// Clients can use this method to poll the operation result at intervals as /// recommended by the API service. /// /// Request parameters: /// /// [name] - The name of the operation resource. /// Value must have pattern /// `^projects/\[^/\]+/locations/\[^/\]+/operations/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.PKPKPWPcPcPpP|P|PPPPPPPPPPJJ+PAE/// Lists operations that match the specified filter in the request. /// /// If the server doesn't support this method, it returns `UNIMPLEMENTED`. /// /// Request parameters: /// /// [name] - The name of the operation's parent resource. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [filter] - The standard list filter. /// /// [pageSize] - The standard list page size. /// /// [pageToken] - The standard list page token. /// /// [returnPartialSuccess] - When set to `true`, operations that are reachable /// are returned as normal, and those that are unreachable are returned in the /// ListOperationsResponse.unreachable field. This can only be `true` when /// reading across collections. For example, when `parent` is set to /// `"projects/example/locations/-"`. This field is not supported by default /// and will result in an `UNIMPLEMENTED` error if set unless explicitly /// documented otherwise in service or product specific documentation. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListOperationsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.TTTTTTT9TTTTTT#TUV+U$U UnVU2U7U8UCU`UDUpUUUVUUUUUUUUUUUUUUUUVTTǁfTTkTTkJ/// Status of subcomponent that detects configured Service Mesh resources.V1V1VUSSÃ2S"/// State for App Dev Exp Feature.YYYYYYY YYY4YYZZZZ ZZZZ5Z'ZOZ<ZMZ7Z=ZRZVZWZ]ZoZhZZvZZqZwZZZZYY뀰YYMXAYM/// Whether it is allowed to run the privileged builds on the cluster or not. /// Possible string values are: /// - "SECURITY_POLICY_UNSPECIFIED" : Unspecified policy /// - "NON_PRIVILEGED" : Privileged build pods are disallowed /// - "PRIVILEGED" : Privileged build pods are allowedYY`NY7/// Version of the cloud build software on the cluster.ZZZWWXI/// **Cloud Build**: Configurations for each Cloud Build enabled cluster.\y\\\ \\\ \\y\y4\\\\\\\\]U\\] ]] \]]]]]]+]$]>]2]<]-]3]A]E]F]L\\\\![G\!3/// Name of the upgrade, e.g., "k8s_control_plane".\m\*J\m3/// Version of the upgrade, e.g., "1.22.1-gke.100".][][][l[l[N/// GKEUpgrade represents a GKE provided upgrade, e.g., control plane upgrade.``8`:`: `?`G`G `L``E`Z`````C``bE```ak`````````aa]a'aa%aaa*a.a/a2aLa3a7a8a@aDaEamaa{ab7aaaaaaaaaab)aaaaaaaaababbb bbb9`Z`Z`__~@_/// Status of the upgrade.`_I`%/// Which upgrade to track the state.bKbKbo___RK/// MembershipGKEUpgradeState is a GKEUpgrade and its state per-membership.dddd ddd ddd3dddddd:e efe eeKee"e'e(e3e=e4eMelemeueeeeeeeeeeeeeeeeeeeeeff efeef ffff$f&f)ff9fffffdd؂dd(cAd(/// Whether this membership is ignored by the feature. /// /// For example, manually upgraded clusters can be ignored if they are newer /// than the default versions of its release channel.dd4hd)/// Actual upgrade state against desired.ffgbbc)*/// Per-membership state for this feature.hhhh hhh/hiiiii'i4i8i`i@i9iSiGiQiBiHiViZi[i_hhlihhyEh0/// Whether binauthz is enabled in this cluster.ififvih0h0hV/// Configuration for Binauthz.l(lElGlG lLlUlU lZl(l(<lhlllll.llmlllmvlllllllmmmmhm2m&m0m!m'm5m9m:m=mWm>mBmCmKmOmPmxmmmmmmmmmmmlhlhQljrj Yjr./// The version of binauthz that is installed.lj~l/// The state of the binauthz webhook. /// Possible string values are: /// - "DEPLOYMENT_STATE_UNSPECIFIED" : Deployment's state cannot be /// determined. /// - "NOT_INSTALLED" : Deployment is not installed. /// - "INSTALLED" : Deployment is installed. /// - "ERROR" : Deployment was attempted to be installed, but has errors. /// - "PENDING" : Deployment is installing or terminatingmmmiii/// State for Binauthz.ooo!o!o&oo7o;oZocododomozo~ooooooooooooo;o;}o[nnFn(/// The version of the binauthz webhook.ooonnnnn/// The version of binauthz.|%|?|F|F|K|d|d |i|v|v|{||"||||||||||||||%|%}}}&}'}'}0}=}A/}^}K}`}}~}f}|}a}g}}}}}}}~A}~2~O~P~V~W~i~b~|~p~z~k~q~~~~~~~D~~~~~~~~~~6~~~~ % FqTp b,$*%/347Q8<=EIJr  !"&}}.}rpJrЁ/// Configuration for deployment overrides. /// /// Applies only to Config Sync deployments with containers that are not a /// root or namespace reconciler: `reconciler-manager`, `otel-collector`, /// `resource-group-controller-manager`, `admission-webhook`. To override a /// root or namespace reconciler, use the rootsync or reposync fields at /// https://docs.cloud.google.com/kubernetes-engine/config-sync/docs/reference/rootsync-reposync-fields#override-resources /// instead. /// /// Optional.tr聫t/// Enables the installation of Config Sync. /// /// If set to true, the Feature will manage Config Sync resources, and apply /// the other ConfigSync fields if they exist. If set to false, the Feature /// will ignore all other ConfigSync fields and delete the Config Sync /// resources. If omitted, ConfigSync is considered enabled if the git or oci /// field is present. /// /// Optional.ttbt=/// Git repo configuration for the cluster. /// /// Optional.wwwwwx>wxOtmxO/// The Email of the Google Cloud Service Account (GSA) used for exporting /// Config Sync metrics to Cloud Monitoring and Cloud Monarch when Workload /// Identity is enabled. /// /// The GSA should have the Monitoring Metric Writer /// (roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount /// `default` in the namespace `config-management-monitoring` should be bound /// to the GSA. Deprecated: If Workload Identity Federation for GKE is /// enabled, Google Cloud Service Account is no longer needed for exporting /// Config Sync metrics: /// https://cloud.google.com/kubernetes-engine/enterprise/config-sync/docs/how-to/monitor-config-sync-cloud-monitoring#custom-monitoring. /// /// Optional.xxqbx=/// OCI repo configuration for the cluster. /// /// Optional.zBx؁vzBN/// Set to true to enable the Config Sync admission webhook to prevent drifts. /// /// If set to false, disables the Config Sync admission webhook and does not /// prevent drifts. Defaults to false. See /// https://docs.cloud.google.com/kubernetes-engine/config-sync/docs/how-to/prevent-config-drift /// for details. /// /// Optional.{zS>{/// Specifies whether the Config Sync repo is in `hierarchical` or /// `unstructured` mode. /// /// Defaults to `hierarchical`. See /// https://docs.cloud.google.com/kubernetes-engine/config-sync/docs/concepts/configs#organize-configs /// for an explanation. /// /// Optional.|{|i/// Set to true to stop syncing configs for a single cluster. /// /// Default to false. /// /// Optional.55YpRpRpz!/// Configuration for Config Sync  ++ 0>> CPPUhhm# ΁ f%)vC3_J]EKbfgmx 9'7"(<@AGcRj~ek.,156<MG_T]OUbfgm܂ r/// Deployment state of admission-webhook. /// Possible string values are: /// - "DEPLOYMENT_STATE_UNSPECIFIED" : Deployment's state cannot be /// determined. /// - "NOT_INSTALLED" : Deployment is not installed. /// - "INSTALLED" : Deployment is installed. /// - "ERROR" : Deployment was attempted to be installed, but has errors. /// - "PENDING" : Deployment is installing or terminating)ʁ/// Deployment state of the git-sync pod. /// Possible string values are: /// - "DEPLOYMENT_STATE_UNSPECIFIED" : Deployment's state cannot be /// determined. /// - "NOT_INSTALLED" : Deployment is not installed. /// - "INSTALLED" : Deployment is installed. /// - "ERROR" : Deployment was attempted to be installed, but has errors. /// - "PENDING" : Deployment is installing or terminatingwցw/// Deployment state of the importer pod. /// Possible string values are: /// - "DEPLOYMENT_STATE_UNSPECIFIED" : Deployment's state cannot be /// determined. /// - "NOT_INSTALLED" : Deployment is not installed. /// - "INSTALLED" : Deployment is installed. /// - "ERROR" : Deployment was attempted to be installed, but has errors. /// - "PENDING" : Deployment is installing or terminating$$/// Deployment state of the monitor pod. /// Possible string values are: /// - "DEPLOYMENT_STATE_UNSPECIFIED" : Deployment's state cannot be /// determined. /// - "NOT_INSTALLED" : Deployment is not installed. /// - "INSTALLED" : Deployment is installed. /// - "ERROR" : Deployment was attempted to be installed, but has errors. /// - "PENDING" : Deployment is installing or terminating0΁/// Deployment state of otel-collector /// Possible string values are: /// - "DEPLOYMENT_STATE_UNSPECIFIED" : Deployment's state cannot be /// determined. /// - "NOT_INSTALLED" : Deployment is not installed. /// - "INSTALLED" : Deployment is installed. /// - "ERROR" : Deployment was attempted to be installed, but has errors. /// - "PENDING" : Deployment is installing or terminating/// Deployment state of reconciler-manager pod. /// Possible string values are: /// - "DEPLOYMENT_STATE_UNSPECIFIED" : Deployment's state cannot be /// determined. /// - "NOT_INSTALLED" : Deployment is not installed. /// - "INSTALLED" : Deployment is installed. /// - "ERROR" : Deployment was attempted to be installed, but has errors. /// - "PENDING" : Deployment is installing or terminatingNN/// Deployment state of resource-group-controller-manager /// Possible string values are: /// - "DEPLOYMENT_STATE_UNSPECIFIED" : Deployment's state cannot be /// determined. /// - "NOT_INSTALLED" : Deployment is not installed. /// - "INSTALLED" : Deployment is installed. /// - "ERROR" : Deployment was attempted to be installed, but has errors. /// - "PENDING" : Deployment is installing or terminatingq/// Deployment state of root-reconciler. /// Possible string values are: /// - "DEPLOYMENT_STATE_UNSPECIFIED" : Deployment's state cannot be /// determined. /// - "NOT_INSTALLED" : Deployment is not installed. /// - "INSTALLED" : Deployment is installed. /// - "ERROR" : Deployment was attempted to be installed, but has errors. /// - "PENDING" : Deployment is installing or terminating$Á/// Deployment state of the syncer pod. /// Possible string values are: /// - "DEPLOYMENT_STATE_UNSPECIFIED" : Deployment's state cannot be /// determined. /// - "NOT_INSTALLED" : Deployment is not installed. /// - "INSTALLED" : Deployment is installed. /// - "ERROR" : Deployment was attempted to be installed, but has errors. /// - "PENDING" : Deployment is installing or terminating||GD6/// The state of ConfigSync's deployment on a cluster. !  %%*;;@QQ Vaafuu z)' ,017IB\PZKQ_cdgrWI8#$,01Ymgou~pv@1NOUVlasnt<".#>WX`wrx ./7ZNXIO]abefjkswx" ,/// Whether syncing resources to the cluster is stopped at the cluster level. /// /// Output only. /// Possible string values are: /// - "STOP_SYNCING_STATE_UNSPECIFIED" : State cannot be determined /// - "NOT_STOPPED" : Syncing resources to the cluster is not stopped at the /// cluster level. /// - "PENDING" : Some reconcilers stop syncing resources to the cluster, /// while others are still syncing. /// - "STOPPED" : Syncing resources to the cluster is stopped at the cluster /// level.hP/// The number of RootSync and RepoSync CRs in the cluster. /// /// Output only.!ۀ/// Information about the deployment of ConfigSync, including the version. /// /// of the various Pods deployed /// /// Output only.ppN/// Errors pertaining to the installation of Config Sync. /// /// Output only. { l/// The state of the Reposync CRD /// /// Output only. /// Possible string values are: /// - "CRD_STATE_UNSPECIFIED" : CRD's state cannot be determined /// - "NOT_INSTALLED" : CRD is not installed /// - "INSTALLED" : CRD is installed /// - "TERMINATING" : CRD is terminating (i.e., it has been deleted and is /// cleaning up) /// - "INSTALLING" : CRD is installingl/// The state of the RootSync CRD /// /// Output only. /// Possible string values are: /// - "CRD_STATE_UNSPECIFIED" : CRD's state cannot be determined /// - "NOT_INSTALLED" : CRD is not installed /// - "INSTALLED" : CRD is installed /// - "TERMINATING" : CRD is terminating (i.e., it has been deleted and is /// cleaning up) /// - "INSTALLING" : CRD is installing/// The state of CS This field summarizes the other fields in this message. /// /// Output only. /// Possible string values are: /// - "STATE_UNSPECIFIED" : CS's state cannot be determined. /// - "CONFIG_SYNC_NOT_INSTALLED" : CS is not installed. /// - "CONFIG_SYNC_INSTALLED" : The expected CS version is installed /// successfully. /// - "CONFIG_SYNC_ERROR" : CS encounters errors. /// - "CONFIG_SYNC_PENDING" : CS is installing or terminating.X/// The state of ConfigSync's process to sync configs to a cluster. /// /// Output only.)m,2CGHL[]`p1#K8I39NRSYwd~yρXҀXQ/// The containers of the deployment resource to be overridden. /// /// Optional.gmK/// The name of the deployment resource to be overridden. /// /// Required.=w=P/// The namespace of the deployment resource to be overridden. /// /// Required.Uxx,/// Configuration for a deployment override."338JJOffkDf›'(0WGUBHZ^_b|cghptu·«¾¹¿$9/O@M;ARVW]o?/// Group/version/kind of the resource that is causing an error=V=:/// Metadata name of the resource that is causing an errorNW6/// Namespace of the resource that is causing an errorJ0/// Path in the git repo of the erroneous configllÐ ]J/// Model for a config file in the git repo with an associated Sync error.ʨ%"ʨʨ?hqrr{$ˈˌ̑˥˖ˬ˾˧˭1 / 489?\Jzcx^d}́̂̈??Tic/// Status of gatekeeper-audit deployment. /// Possible string values are: /// - "DEPLOYMENT_STATE_UNSPECIFIED" : Deployment's state cannot be /// determined. /// - "NOT_INSTALLED" : Deployment is not installed. /// - "INSTALLED" : Deployment is installed. /// - "ERROR" : Deployment was attempted to be installed, but has errors. /// - "PENDING" : Deployment is installing or terminating/// Status of gatekeeper-controller-manager pod. /// Possible string values are: /// - "DEPLOYMENT_STATE_UNSPECIFIED" : Deployment's state cannot be /// determined. /// - "NOT_INSTALLED" : Deployment is not installed. /// - "INSTALLED" : Deployment is installed. /// - "ERROR" : Deployment was attempted to be installed, but has errors. /// - "PENDING" : Deployment is installing or terminatingʑ恽ʑ/// Status of the pod serving the mutation webhook. /// Possible string values are: /// - "DEPLOYMENT_STATE_UNSPECIFIED" : Deployment's state cannot be /// determined. /// - "NOT_INSTALLED" : Deployment is not installed. /// - "INSTALLED" : Deployment is installed. /// - "ERROR" : Deployment was attempted to be installed, but has errors. /// - "PENDING" : Deployment is installing or terminating̗̗̻L5,/// State of Policy Controller installation.\'Ybccly}ԐԇԥԗԣԒԘԨԬԭԳԾ''Z,/// The deployment state for Hierarchy Controller extension (e.g. /// v0.7.0-hc.1). /// Possible string values are: /// - "DEPLOYMENT_STATE_UNSPECIFIED" : Deployment's state cannot be /// determined. /// - "NOT_INSTALLED" : Deployment is not installed. /// - "INSTALLED" : Deployment is installed. /// - "ERROR" : Deployment was attempted to be installed, but has errors. /// - "PENDING" : Deployment is installing or terminatingӿӿ/// The deployment state for open source HNC (e.g. v0.7.0-hc.0). /// Possible string values are: /// - "DEPLOYMENT_STATE_UNSPECIFIED" : Deployment's state cannot be /// determined. /// - "NOT_INSTALLED" : Deployment is not installed. /// - "INSTALLED" : Deployment is installed. /// - "ERROR" : Deployment was attempted to be installed, but has errors. /// - "PENDING" : Deployment is installing or terminating퀥-/// Deployment state for Hierarchy Controller  E 5>??HCUYhcב3jop{׃|ד% 5JCuLQR]g^wءآتؼ 6VnV2/// The deployment state for Hierarchy Controller.ָ`_ָ)/// The version for Hierarchy Controller.%%IՖՖ6#/// State for Hierarchy Controller.ڮڮڮG#,--6CG۱ZQoam\brvw}ۋۈۚےۘۍۓ۝ۡۢۨ$h)Hh//// Version for Hierarchy Controller extension.ڦv3ڦ /// Version for open source HNC.۷۷΂%/// Version for Hierarchy Controller..0052Hdmnnw݄݈ݼݕ݉ݭݜݫݗݝݰݴݵݻHHveܹT8/// A string representing the user facing error message.€``ܘ1/// Errors pertaining to the installation of ACM.e  eeb0 %@,>'-CGHN_Yargpbhuyz~/ =>DEWPj^hY_mqrxˁກ/// The state of the Operator's deployment. /// Possible string values are: /// - "DEPLOYMENT_STATE_UNSPECIFIED" : Deployment's state cannot be /// determined. /// - "NOT_INSTALLED" : Deployment is not installed. /// - "INSTALLED" : Deployment is installed. /// - "ERROR" : Deployment was attempted to be installed, but has errors. /// - "PENDING" : Deployment is installing or terminating E /// Install errors.YHY1/// The semenatic version number of the operator.㇁…,/// State information for an ACM's Operator.5 <<A[[ `mmr 5U^__huyC649=>BQSVvWu>?Gm^kY_ptuxy}~< :!?CDHkS~y55V 啀/// Sets the interval for Policy Controller Audit Scans (in seconds). /// /// When set to 0, this disables audit functionality altogether.8宀8x/// Enables the installation of Policy Controller. /// /// If false, the rest of PolicyController fields take no effect.D/// The set of namespaces that are excluded from Policy Controller checks. /// /// Namespaces do not need to currently exist on the cluster.?G?)/// Logs all denies and dry run failures.Tr9/// Monitoring specifies the configuration of monitoring.zˀz/// Enable or disable mutation in policy controller. /// /// If true, mutation CRDs, webhook and controller deployment will be deployed /// to the cluster. 莀 /// Enables the ability to use Constraint Templates that reference to objects /// other than the object currently being evaluated.ghp DEMpdn_eswx{|LtL7/// The state about the policy controller installation.`w@/// Record state of ACM -\> PoCo Hub migration for this feature.AlA9/// The version of Gatekeeper Policy Controller deployed.ȁ%]$/// State for PolicyControllerState.   &&+;;@VV [m t f0#.$378;U<@AIMNv ~    p : + 8 & , = A B E _ F J K S W X                 O # 9  $ R V W Z t [ _ ` h l m                       " B C K   b u ] c                       mm-_/// Deprecated: Binauthz configuration will be ignored and should not be set. /// /// Optional.nA/// User-specified cluster name used by the Config Sync cluster-name-selector /// annotation or ClusterSelector object, for applying configs to only a /// subset of clusters. /// /// Read more about the cluster-name-selector annotation and ClusterSelector /// object at /// https://docs.cloud.google.com/kubernetes-engine/config-sync/docs/how-to/cluster-scoped-objects#limiting-configs. /// Only set this field if a name different from the cluster's fleet /// membership name is used by the Config Sync cluster-name-selector /// annotation or ClusterSelector. /// /// Optional.m@/// Config Sync configuration for the cluster. /// /// Optional. $%/y5 /// Hierarchy Controller configuration for the cluster. /// /// Deprecated: Configuring Hierarchy Controller through the configmanagement /// feature is no longer recommended. Use /// https://github.com/kubernetes-sigs/hierarchical-namespaces instead. /// /// Optional.\]ablrǁ/// Deprecated: From version 1.21.0, automatic Feature management is /// unavailable, and Config Sync only supports manual upgrades. /// /// Optional. /// Possible string values are: /// - "MANAGEMENT_UNSPECIFIED" : Unspecified /// - "MANAGEMENT_AUTOMATIC" : Google will manage the Feature for the cluster. /// - "MANAGEMENT_MANUAL" : User will manually manage the Feature for the /// cluster.(NցN/// Policy Controller configuration for the cluster. /// /// Deprecated: Configuring Policy Controller through the configmanagement /// feature is no longer recommended. Use the policycontroller feature /// instead. /// /// Optional.cK(/// Version of Config Sync to install. /// /// Defaults to the latest supported Config Sync version if the config_sync /// field is enabled. See supported versions at /// https://cloud.google.com/kubernetes-engine/config-sync/docs/get-support-config-sync#version_support_policy. /// /// Optional.  a :{/// **Anthos Config Management**: Configuration for a single cluster. /// /// Intended to parallel the ConfigManagement CR.y%%*>>CVV[yy{$$M;K6<PTUXrY]^fjk ?@Hs_qZ`vz{~ EFNe`f649=>D]O_depq9,j;@AL\Ml$]&+,7O8_{{(\()/// Binauthz status. /// /// Output only.:/// This field is set to the `cluster_name` field of the Membership Spec if it /// is not empty. /// /// Otherwise, it is set to the cluster's fleet membership name. /// /// Output only.sds-/// Current sync status. /// /// Output only.~5/// Hierarchy Controller status. /// /// Output only.h xhJ/// The Kubernetes API server version of the cluster. /// /// Output only.ss/// Membership configuration in the cluster. /// /// This represents the actual state in the cluster, while the MembershipSpec /// in the FeatureSpec represents the intended state. /// /// Output only.uB/// Current install status of ACM's Operator. /// /// Output only._t_1/// PolicyController status. /// /// Output only.**rN{{#=/// **Anthos Config Management**: State for a single cluster.      ) ) . @ @ E` ^ w    0  "                     !!!!!E!8!%!6! !&!;!?!@!D!S!U!X!!h!""" "  ^ ^ x9 19/// An ACM defined error codepB:p/// A description of the errort9/// A list of config(s) associated with the error, if any""!"?G/// An ACM created error representing a problem syncing configurations.)))) ))) ))))* * ****#*5*5*:*K*K*P))*d*}****\**,************************+ ++++!++++++++++++++++,,,#,,!,,,&,*,+,1,H,<,`,O,^,J,P,c,g,h,n,,y,,,,,,,,,,,,,,,,,,,,*d*d*~&9#&9e/// Sync status code. /// Possible string values are: /// - "SYNC_CODE_UNSPECIFIED" : Config Sync cannot determine a sync code /// - "SYNCED" : Config Sync successfully synced the git Repo with the cluster /// - "PENDING" : Config Sync is in the progress of syncing a new change /// - "ERROR" : Indicates an error configuring Config Sync, and user action is /// required /// - "NOT_CONFIGURED" : Config Sync has been installed but not configured /// - "NOT_INSTALLED" : Config Sync has not been installed /// - "UNAUTHORIZED" : Error authorizing with the cluster /// - "UNREACHABLE" : Cluster could not be reached')&B')/// A list of errors resulting from problematic configs. /// /// This list will be truncated after 100 errors, although it is unlikely for /// that many errors to simultaneously exist.'s'4J's//// Token indicating the state of the importer.(E(F(J(K(U(([('5(/// Deprecated: use last_sync_time instead. /// /// Timestamp of when ACM last successfully synced the repo. The time format /// is specified in https://golang.org/pkg/time/#Time.String)(])A/// Timestamp type of when ACM last successfully synced the repo.)Z)F)Z+/// Token indicating the state of the repo.))jF)-/// Token indicating the state of the syncer.,,!-#@#@#K/// State indicating an ACM's progress syncing configurations to a cluster.344 4 44"4"4'4=4=4B4W4W 4\4h4h4m444444444334444445 56F666]6p6X6^6666666666666677666676771727:77e7Q7c7L7R7h7l7m7p77q7u7v7~7777778`77777777778R8888 888#8$8'8A8(8,8-85898:8b88p89W88888888889I9888899999899#9$9,90919Y99g9:n9999999999:`:*9:99:-:1:2:5:O:6:::;:C:G:H:p::~:;=::::::::::;/::::::;;;;;; ; ;;;;?;`;M;<@;b;g;h;s;;t;;;;<2;;;;;;<<<L.LrML@LELFLQLdLRLtLLLMLLLLLLLLLLLLLLLLMCC5C @H@ N@H$/// Appdevexperience specific state.@@]@@/// Cluster upgrade state.@@E@/// Config Management stateA@BA/// Identity service stateAWA3,AW/// Metering stateAAdEA/// Policy Controller stateAA_A%/// RBAC Role Binding Actuation stateB=B6B=/// Service mesh stateBBMBB3/// The high-level state of this MembershipFeature.BBEB/// Workload Identity stateM*M*MN?z?zv?x/// FeatureState contains high-level state information and per-feature state /// information for this MembershipFeature.UUUUUUUUUUVVV VV"V"V'V7V7 V<VGVGVLUUVaVzVVVVVV[DVVVWzVVVVVVVWWW WlW6W$W4WW%W9W=W>WAW[WBWFWGWOWSWTW|WWWXXWWWWWWWWWWXJXXXWXXXXXX9X X$X%X-X1X2XZXrXhXY.XtXyXzXXXXXXXY XXXXXXXXXYXXXYYYY0YBY>YRYIYPYDYJYUYYYZY`YuYkYZ1YwY|Y}YYYYYYYZ#YYYYYYYYYZYYYZZ Z Z3ZFZAZWZMZUZHZNZZZ^Z_ZeZzZpZ[6Z|ZZZZZZZZZ[(ZZZZZZZZZ[Z[[[ [[[8VaVaV{SSQS#/// AzureAD specific Configuration.T5SST5'/// GoogleConfig specific configurationTTFHT /// LDAP specific configuration.TT3T/// Identifier for auth config.U THU /// OIDC specific configuration.UXUEUX0/// Proxy server address to use for auth method.UUbHU /// SAML specific configuration.[J[J-[nRRފSz/// Configuration of an auth method for a member/cluster. /// /// Only one authentication method (e.g., OIDC and LDAP) can be set per /// AuthMethod.`a aaaa0a0a5``eaOata}a~a~a.aabaaabaaaaaaabbbbb\b0bFb+b1b_bcbdbgbbhblbmbubybzbbbbbbbbbbbbaOaOau`^_u`^;/// Configuration options for the AIS diagnostic interface.``vk`L/// Determines the lifespan of STS tokens issued by Anthos Identity Service.bbc__s_5/// Holds non-protocol-related configuration options.gg0g7g7 g<gGgG gLgXgXg]gqgq gvggjggggggggkggghggggggghhhhvh@h6h>h1h7hChGhHhKhehLhPhQhYh]h^hhhhiPhhhhhhhhhhiBi ii hiiiiii1iiii%i)i*iRini`ij<ipiuiviiiiiiij.iiiiiiijjjjjj jjjj>jPjLjxkjRjWjXjcjjjdjzjjjjjjjjjjjjjjjjjjjjkgggddYdj/// Contains the properties for locating and authenticating groups in the /// directory. /// /// Optional.eYdmeYC/// Server settings for the external LDAP server. /// /// Required.fed=f/// Contains the credentials of the service account which is authorized to /// perform the LDAP search in the directory. /// /// The credentials can be supplied by the combination of the DN and password /// or the client certificate. /// /// Required.gflgF/// Defines where users exist in the LDAP directory. /// /// Required.kk>k8d d Id;)/// Configuration for the LDAP Auth flow.oo<o>o>oCooBo_ooooo#oopooopoooooopp$p%p-pprpDp\p?pEpupypzp}pp~ppppppo_o_gonn]n/// Credentials for basic auth.ppʀpmmn/// Contains the credentials of the service account which is authorized to /// perform the LDAP search in the directory. /// /// The credentials can be supplied by the combination of the DN and password or /// the client certificate.scsvsxsxs}sssscscEssssss:ssvsssttttstttttt+t-t0tt@tttttutu;uuuu uu-uu=ubucukuuuuu}uuuuuuuuuuuuussYsrrqcr//// A member may support multiple auth methods.sHrـsHA/// non-protocol-related configuration options. /// /// Optional.v v v-rrrY?/// **IdentityService**: Configuration for a single membership.yyyyyyyyzzzz)z) z.yyvz>zRz[z\z\zeDzrzv|zzzzzzzzzzzzzzzzzzzzzz{{{@{{{{{#{2{${B{U{V{^{{{u{{p{v{{{{{{{{{{{{{{{{{{{{{{{z>z>zSww;w/// The reason of the failure.xwwဦxw/// Installed AIS version. /// /// This is the AIS version installed on this member. The values makes sense /// iff state is OK.xxPx,/// Last reconciled membership configurationyxy/// Deployment state on this member /// Possible string values are: /// - "DEPLOYMENT_STATE_UNSPECIFIED" : Unspecified state /// - "OK" : deployment succeeds /// - "ERROR" : Failure with error.| | |1wwxwh/// **IdentityService**: State for a single membership, analyzed and reported by /// feature controller.)++ 0<JSTT]jnto{v|<VVm:C:&/// The standard List next-page token.LmJ/// A list of operations that matches the specified filter in the request../// Unordered list. /// /// Unreachable resources. Populated when the request sets /// `ListOperationsRequest.return_partial_success` and reads across /// collections. For example, when attempting to list all resources across all /// supported locations.MM1q7/// The response message for Operations.ListOperations.     ((-BS\]]fsw=3  1%)*2469E|YK :!%&.23[mi}t{ou<. >QLzSXYdle|&$)-.4BBTmgI/// When the MembershipFeature resource was created. /// /// Output only.6g6I/// When the MembershipFeature resource was deleted. /// /// Output only.EW*/// GCP labels for this MembershipFeature.kF/// Lifecycle information of the resource itself. /// /// Output only.fYf9/// The resource name of the membershipFeature, in the format: /// `projects/{project}/locations/{location}/memberships/{membership}/features/{feature}`. /// /// Note that `membershipFeatures` is shortened to `features` in the resource /// name. (see http://go/aip/122#collection-identifiers) /// /// Output only.oM5/// Spec of this membershipFeature. /// /// Optional.W=/// State of the this membershipFeature. /// /// Output only.lN/// When the MembershipFeature resource was last updated. /// /// Output only.CCJgۋWu/// MembershipFeature represents the settings and status of a Fleet Feature /// enabled on a single Fleet Membership.4AHHMff+k44d  H"V\W]y y\/// The time stamp of the most recent measurement of the number of vCPUs in /// the cluster.  f/// The vCPUs capacity in the cluster according to the most recent measurement /// (1/1000 precision).~a/// **Metering**: State for a single membership, analyzed and reported by /// feature controller.      L(122;oHLZVjah\bmqrv. 0F>rHMNYdZytz*q>1<,2AEFIcJNOW[\sb)xx/// If the value is `false`, it means the operation is still in progress. /// /// If `true`, the operation is completed, and either `error` or `response` is /// available.bI/// The error result of the operation in case of failure or cancellation./// Service-specific metadata associated with the operation. /// /// It typically contains progress information and common metadata such as /// create time. Some services might not provide such metadata. Any method /// that returns a long-running operation should document the metadata type, /// if any. /// /// The values for Object must be JSON objects. It can consist of `num`, /// `String`, `bool` and `null` as well as `Map` and `List` values./// The server-assigned name, which is only unique within the same service /// that originally returns it. /// /// If you use the default HTTP mapping, the `name` should be a resource name /// ending with `operations/{unique_id}`.‚/// The normal, successful response of the operation. /// /// If the original method returns no data on success, such as `Delete`, the /// response is `google.protobuf.Empty`. If the original method is standard /// `Get`/`Create`/`Update`, the response should be the resource. For other /// methods, the response should have the type `XxxResponse`, where `Xxx` is /// the original method name. For example, if the original method name is /// `TakeSnapshot()`, the inferred response type is `TakeSnapshotResponse`. /// /// The values for Object must be JSON objects. It can consist of `num`, /// `String`, `bool` and `null` as well as `Map` and `List` values._AAc/// This resource represents a long-running operation that is the result of a /// network API call.   )**3<@dEAULSGMX\]cL!4/// Type specifies which type of origin is set. /// Possible string values are: /// - "TYPE_UNSPECIFIED" : Type is unknown or not set. /// - "FLEET" : Per-Feature spec was inherited from the fleet-level default. /// - "FLEET_OUT_OF_SYNC" : Per-Feature spec was inherited from the /// fleet-level default but is now out of sync with the current default. /// - "USER" : Per-Feature spec was inherited from a user specification.jjj):/// Origin defines where this FeatureSpec originated from.= *344=JNjXlrms  +^e8/// the set of namespaces to be exempted from the bundle؂8Y/// BundleInstallSpec is the specification configuration for a single managed /// bundle. **/IIN__dzz8   !%C/cJaEKfjkq|? #=$()156>QSVqj^|4$2%7;<B]Mydw_e|€…š]œ¡¢­º®O   !$>%)*267_|m×ÃÕ~ÄÚÞßãûîąýwA/?*0DHILfMQRZ^_ćĬĕijĮĴ ~~/// Sets the interval for Policy Controller Audit Scans (in seconds). /// /// When set to 0, this disables audit functionality altogether.99/// The maximum number of audit violations to be stored in a constraint. /// /// If not set, the internal default (currently 20) will be used.V`/// Map of deployment configs to deployments (“admission”, “audit”, /// “mutation”)./// The set of namespaces that are excluded from Policy Controller checks. /// /// Namespaces do not need to currently exist on the cluster.`ԃ``/// The install_spec represents the intended state specified by the latest /// request that mutated install_spec in the feature spec, not the lifecycle /// state of the feature observed by the Hub feature controller that is /// reported in the feature state. /// Possible string values are: /// - "INSTALL_SPEC_UNSPECIFIED" : Spec is unknown. /// - "INSTALL_SPEC_NOT_INSTALLED" : Request to uninstall Policy Controller. /// - "INSTALL_SPEC_ENABLED" : Request to install and enable Policy /// Controller. /// - "INSTALL_SPEC_SUSPENDED" : Request to suspend Policy Controller i.e. its /// webhooks. If Policy Controller is not installed, it will be installed but /// suspended. /// - "INSTALL_SPEC_DETACHED" : Request to stop all reconciliation actions by /// PoCo Hub controller. This is a breakglass mechanism to stop PoCo Hub from /// affecting cluster resources.pG)/// Logs all denies and dry run failures.h9/// Monitoring specifies the configuration of monitoring.{)a{D/// Enables the ability to mutate resources using Policy Controller.j7/// Specifies the desired policy content on the cluster/// Enables the ability to use Constraint Templates that reference to objects /// other than the object currently being evaluated.4'/// Configuration for Policy Controller "" ';3QZ[[dquֆ֙֍֗ֈ֎ֲַ֧֜֠֡־ֹֿ33R H 1/// Surface potential errors or information logs.{/// The lifecycle state of this component. /// Possible string values are: /// - "LIFECYCLE_STATE_UNSPECIFIED" : The lifecycle state is unspecified. /// - "NOT_INSTALLED" : The PC does not exist on the given cluster, and no k8s /// resources of any type that are associated with the PC should exist there. /// The cluster does not possess a membership with the PCH. /// - "INSTALLING" : The PCH possesses a Membership, however the PC is not /// fully installed on the cluster. In this state the hub can be expected to /// be taking actions to install the PC on the cluster. /// - "ACTIVE" : The PC is fully installed on the cluster and in an /// operational mode. In this state PCH will be reconciling state with the PC, /// and the PC will be performing it's operational tasks per that software. /// Entering a READY state requires that the hub has confirmed the PC is /// installed and its pods are operational with the version of the PC the PCH /// expects. /// - "UPDATING" : The PC is fully installed, but in the process of changing /// the configuration (including changing the version of PC either up and /// down, or modifying the manifests of PC) of the resources running on the /// cluster. The PCH has a Membership, is aware of the version the cluster /// should be running in, but has not confirmed for itself that the PC is /// running with that version. /// - "DECOMMISSIONING" : The PC may have resources on the cluster, but the /// PCH wishes to remove the Membership. The Membership still exists. /// - "CLUSTER_ERROR" : The PC is not operational, and the PCH is unable to /// act to make it operational. Entering a CLUSTER_ERROR state happens /// automatically when the PCH determines that a PC installed on the cluster /// is non-operative or that the cluster does not meet requirements set for /// the PCH to administer the cluster but has nevertheless been given an /// instruction to do so (such as ‘install'). /// - "HUB_ERROR" : In this state, the PC may still be operational, and only /// the PCH is unable to act. The hub should not issue instructions to change /// the PC state, or otherwise interfere with the on-cluster resources. /// Entering a HUB_ERROR state happens automatically when the PCH determines /// the hub is in an unhealthy state and it wishes to ‘take hands off' to /// avoid corrupting the PC or other data. /// - "SUSPENDED" : Policy Controller (PC) is installed but suspended. This /// means that the policies are not enforced, but violations are still /// recorded (through audit). /// - "DETACHED" : PoCo Hub is not taking any action to reconcile cluster /// objects. Changes to those objects will not be overwritten by PoCo Hub.倥 NN>ʥP/// OnClusterState represents the state of a sub-component of Policy Controller.ً٬ٮٮ ٳټټًًH >e-&/hA5?06DHILfMQRZ^_gvx{kڋ\ۅv۸Wۇیۍ۪ۘۙۺI8#$,01Yׂ  /// map of bundle name to BundleInstallSpec. /// /// The bundle name maps to the `bundleName` key in the /// `policycontroller.gke.io/constraintData` annotation on a constraint.wqw8/// Configures the installation of the Template Library.kk܏׎׎Z/// PolicyContentSpec defines the user's desired content configuration on the /// cluster.߻  %߻߻Dfoppy^M 1{2?DEPmQ}$  4VB?X]^ij1   ADD g.ݟ.S/// The state of the any bundles included in the chosen version of the /// manifest;?;/// The state of the referential data sync configuration. /// /// This could represent the state of either the syncSet object(s) or the /// config object, depending on the version of PoCo configured by the user.ߢZ\ߢ%/// The state of the template librarySSw<<x5/// The state of the policy controller policy content,,1EEJ騀a[ -.6xMbHN{1/489=VHX~q^oY_txy},:;ABYMq`o[atxyaa)J_$/// Container resource requirements.,殁,b/// Pod affinity configuration. /// Possible string values are: /// - "AFFINITY_UNSPECIFIED" : No affinity configuration has been specified. /// - "NO_AFFINITY" : Affinity configurations will be removed from the /// deployment. /// - "ANTI_AFFINITY" : Anti-affinity configuration will be applied to this /// deployment. Default for admissions deployment.<Q/// Pod anti-affinity enablement. /// /// Deprecated: use `pod_affinity` instead.^[^#/// Pod tolerations of node taints.q2/// Pod replica count.펂艫&/// Deployment-specific configuration.  C+455>CKO_Yafgr{s.&Z056ALB\xy,j/// Limits describes the maximum amount of compute resources allowed for use /// by the running container.$l/// Requests describes the amount of compute resources reserved for the /// container by the kube-scheduler.!cE/// ResourceRequirements describes the compute resource requirements. // 4EBV_``i.vz S!="VZ[^x_cdlpqBBWBk4/// Policy Controller configuration for the cluster.B+/// Version of Policy Controller installed.ށ:)t/// **Policy Controller**: Configuration for a single cluster. /// /// Intended to parallel the PolicyController CR. d!I.2K<Ys_qZ`vz{~ 12:|QfLRAg/// Currently these include (also serving as map keys): 1. /// /// "admission" 2. "audit" 3. "mutation"f~fE/// The overall content state observed by the Hub Feature controller.}/// The overall Policy Controller lifecycle state observed by the Hub Feature /// controller. /// Possible string values are: /// - "LIFECYCLE_STATE_UNSPECIFIED" : The lifecycle state is unspecified. /// - "NOT_INSTALLED" : The PC does not exist on the given cluster, and no k8s /// resources of any type that are associated with the PC should exist there. /// The cluster does not possess a membership with the PCH. /// - "INSTALLING" : The PCH possesses a Membership, however the PC is not /// fully installed on the cluster. In this state the hub can be expected to /// be taking actions to install the PC on the cluster. /// - "ACTIVE" : The PC is fully installed on the cluster and in an /// operational mode. In this state PCH will be reconciling state with the PC, /// and the PC will be performing it's operational tasks per that software. /// Entering a READY state requires that the hub has confirmed the PC is /// installed and its pods are operational with the version of the PC the PCH /// expects. /// - "UPDATING" : The PC is fully installed, but in the process of changing /// the configuration (including changing the version of PC either up and /// down, or modifying the manifests of PC) of the resources running on the /// cluster. The PCH has a Membership, is aware of the version the cluster /// should be running in, but has not confirmed for itself that the PC is /// running with that version. /// - "DECOMMISSIONING" : The PC may have resources on the cluster, but the /// PCH wishes to remove the Membership. The Membership still exists. /// - "CLUSTER_ERROR" : The PC is not operational, and the PCH is unable to /// act to make it operational. Entering a CLUSTER_ERROR state happens /// automatically when the PCH determines that a PC installed on the cluster /// is non-operative or that the cluster does not meet requirements set for /// the PCH to administer the cluster but has nevertheless been given an /// instruction to do so (such as ‘install'). /// - "HUB_ERROR" : In this state, the PC may still be operational, and only /// the PCH is unable to act. The hub should not issue instructions to change /// the PC state, or otherwise interfere with the on-cluster resources. /// Entering a HUB_ERROR state happens automatically when the PCH determines /// the hub is in an unhealthy state and it wishes to ‘take hands off' to /// avoid corrupting the PC or other data. /// - "SUSPENDED" : Policy Controller (PC) is installed but suspended. This /// means that the policies are not enforced, but violations are still /// recorded (through audit). /// - "DETACHED" : PoCo Hub is not taking any action to reconcile cluster /// objects. Changes to those objects will not be overwritten by PoCo Hub.  A '\'6/// **Policy Controller**: State for a single cluster.Dpww| DDo$3#1$6:;AQLbX`SYeijp{  : /// The reason for the failure.  #  /// The state of the RBACRoleBinding. /// /// Output only. /// Possible string values are: /// - "ROLE_BINDING_STATE_UNSPECIFIED" : Unspecified state. /// - "OK" : RBACRoleBinding is created properly on the cluster. /// - "CUSTOM_ROLE_MISSING_FROM_CLUSTER" : The RBACRoleBinding was created on /// the cluster but the specified custom role does not exist on the cluster, /// hence the RBACRoleBinding has no effect.5 S59/// The time the RBACRoleBinding status was last updated. N N} ^/// RBACRoleBindingState is the status of an RBACRoleBinding which exists on a /// membership.ttt<"}V(@#)Y]^a{bfgost|Z bZ/// The state of RBACRoleBindings using custom roles that exist on the /// cluster, keyed by RBACRoleBinding resource name with format: /// projects/{project}/locations/{location}/scopes/{scope}/rbacrolebindings/{rbacrolebinding}. /// /// Output only.ii{/// **RBAC RoleBinding Actuation**: A membership-specific Feature state for the /// RBACRoleBindingActuation fleet feature.  !!&77<MMRuj`!  #<1SCQ>DVZ[awl:y~,<WJY~q_oZ`txy}jjht:>t /// A UI can combine these args with a template (based on message_base.type) /// to produce an internationalized message. /// /// The values for Object must be JSON objects. It can consist of `num`, /// `String`, `bool` and `null` as well as `Map` and `List` values. } {/// A human readable description of what the error means. /// /// It is suitable for non-internationalize display purposes.yK/// Details common to all types of Istio and ServiceMesh analysis messages.R߁ /// A list of strings specifying the resource identifiers that were the cause /// of message generation. /// /// A "path" here may be: * MEMBERSHIP_ID if the cause is a specific member /// cluster * MEMBERSHIP_ID/(NAMESPACE\/)?RESOURCETYPE/NAME if the cause is a /// resource in a clusterցfll/// AnalysisMessage is a single message produced by an analyzer, and it used to /// communicate to the end user about the state of their Service Mesh /// configuration.">"\"c"c"h"~"~ """ "">">`""""""9""$""#######!#"#(#8#3#I#?#G#:#@#L#P#Q#W#f#b#$ #h#m#n#y##z#####################$""z" 9Ȁ 9_/// A url pointing to the Service Mesh or Istio documentation for this /// specific error type.! N!/// Represents how severe a message is. /// Possible string values are: /// - "LEVEL_UNSPECIFIED" : Illegal. Same /// istio.analysis.v1alpha1.AnalysisMessageBase.Level.UNKNOWN. /// - "ERROR" : ERROR represents a misconfiguration that must be fixed. /// - "WARNING" : WARNING represents a misconfiguration that should be fixed. /// - "INFO" : INFO represents an informational finding."5!F"5./// Represents the specific type of a message.$ $ $D@@^/// AnalysisMessageBase describes some common information that is needed for all /// messages.++++ ,,,,,',' ,,++d,<,],f,g,g,p0,},-,,,,,,,,,,,,,,,,-_,-P-m-n-t-u----------------------,<,<,^&%H&/// Explanation of state.'&''́/// Implementation of managed control plane. /// /// Output only. /// Possible string values are: /// - "IMPLEMENTATION_UNSPECIFIED" : Unspecified /// - "ISTIOD" : A Google build of istiod is used for the managed control /// plane. /// - "TRAFFIC_DIRECTOR" : Traffic director is used for the managed control /// plane. /// - "UPDATING" : The control plane implementation is being updated.+'+ʃ/// LifecycleState of control plane management. /// Possible string values are: /// - "LIFECYCLE_STATE_UNSPECIFIED" : Unspecified /// - "DISABLED" : DISABLED means that the component is not enabled. /// - "FAILED_PRECONDITION" : FAILED_PRECONDITION means that provisioning /// cannot proceed because of some characteristic of the member cluster. /// - "PROVISIONING" : PROVISIONING means that provisioning is in progress. /// - "ACTIVE" : ACTIVE means that the component is ready for use. /// - "STALLED" : STALLED means that provisioning could not be done. /// - "NEEDS_ATTENTION" : NEEDS_ATTENTION means that the component is ready, /// but some user intervention is required. (For example that the user should /// migrate workloads to a new control plane revision.) /// - "DEGRADED" : DEGRADED means that the component is ready, but operating /// in a degraded state. /// - "DEPROVISIONING" : DEPROVISIONING means that deprovisioning is in /// progress.--.%%%'/// Status of control plane management.3333 333 333;344$4%4%4.%4;4?5k4P4I4R4q4d4X4b4S4Y4g4k4l4p4445455+5,52535C5>5T5J5R5E5K5W5[5\5b33p4//yM//// Explanation of the status.3/˃3/// Lifecycle status of data plane management. /// Possible string values are: /// - "LIFECYCLE_STATE_UNSPECIFIED" : Unspecified /// - "DISABLED" : DISABLED means that the component is not enabled. /// - "FAILED_PRECONDITION" : FAILED_PRECONDITION means that provisioning /// cannot proceed because of some characteristic of the member cluster. /// - "PROVISIONING" : PROVISIONING means that provisioning is in progress. /// - "ACTIVE" : ACTIVE means that the component is ready for use. /// - "STALLED" : STALLED means that provisioning could not be done. /// - "NEEDS_ATTENTION" : NEEDS_ATTENTION means that the component is ready, /// but some user intervention is required. (For example that the user should /// migrate workloads to a new control plane revision.) /// - "DEGRADED" : DEGRADED means that the component is ready, but operating /// in a degraded state. /// - "DEPROVISIONING" : DEPROVISIONING means that deprovisioning is in /// progress.5q5q5/ / /VF/// Status of data plane management. /// /// Only reported per-member.?C?R?Y?Y?^?m?m?r???????C?Cp??????/??@??@@@?@@@@@ @7@+@O@>@M@9@?@R@V@W@]@v@h@@}@@x@~@@@@@@@@@@@@@@@??+?76W7с2/// Specifies the API that will be used for configuring the mesh workloads. /// /// Optional. /// Possible string values are: /// - "CONFIG_API_UNSPECIFIED" : Unspecified /// - "CONFIG_API_ISTIO" : Use the Istio API for configuration. /// - "CONFIG_API_GATEWAY" : Use the K8s Gateway API for configuration.:3:4:8:9:C::I:7߂:?/// Deprecated: use `management` instead Enables automatic control plane /// management. /// Possible string values are: /// - "CONTROL_PLANE_MANAGEMENT_UNSPECIFIED" : Unspecified /// - "AUTOMATIC" : Google should provision a control plane revision and make /// it available in the cluster. Google will enroll this revision in a release /// channel and keep it up to date. The control plane revision may be a /// managed service, or a managed install. /// - "MANUAL" : User will manually configure the control plane (e.g. via CLI, /// or via the ControlPlaneRevision KRM API)<<<<<=<=):=)/// Determines which release channel to use for default injection and service /// mesh APIs. /// Possible string values are: /// - "CHANNEL_UNSPECIFIED" : Unspecified /// - "RAPID" : RAPID channel is offered on an early access basis for /// customers who want to test new releases. /// - "REGULAR" : REGULAR channel is intended for production users who want to /// take advantage of new features. /// - "STABLE" : STABLE channel includes versions that are known to be stable /// and reliable in production.?4=<?4/// Enables automatic Service Mesh management. /// /// Optional. /// Possible string values are: /// - "MANAGEMENT_UNSPECIFIED" : Unspecified. /// - "MANAGEMENT_AUTOMATIC" : Google should manage my Service Mesh for the /// cluster. /// - "MANAGEMENT_MANUAL" : User will manually configure their service mesh /// components. /// - "MANAGEMENT_NOT_INSTALLED" : Google should remove any managed Service /// Mesh components from this cluster and deprovision any resources.@@~A 66L6oN/// **Service Mesh**: Spec for a single Membership for the servicemesh featureEEEEEEEEEEFFFFF9F9F>EEF\FlFuFvFvF|FFJFFFFFFFFFFFFFFFFGFGsGGGGGGGGGGGGGGGGGGGGHyGHjHHHHHHHHHHHHHHHHHI/IHHHII!I I1IRISI[IIIrIImIsIIIIIIIIIIIIJIJ?JJ JJJJ1JJAJ_J`JhJJJJJzJJJJJJJJJJJJJF\F\FmC]B쀁C]C/// Results of running Service Mesh analyzers. /// /// Output only.CCr{CI/// List of conditions reported for this membership. /// /// Output only.DCD/// The API version (i.e. Istio CRD version) for configuring service mesh in /// this cluster. /// /// This version is influenced by the `default_channel` field.E#D{E#;/// Status of control plane management /// /// Output only.EE>sE9/// Status of data plane management. /// /// Output only.KK7K'BhBhBh/// **Service Mesh**: State for a single Membership, as analyzed by the Service /// Mesh Hub Controller.QQQQ Q$Q*Q*Q/QQ/QAQPQYQZQZQcQpQtQQQ~QQQQQQQQQQQQQQQQQQQQQAQAQQOO(O/// A 7 character code matching `^IST[0-9]{4}$` or `^ASM[0-9]{4}$`, intended /// to uniquely identify the message type. /// /// (e.g. "IST0001" is mapped to the "InternalError" message type.)PPP/// A human-readable name for the message type. /// /// e.g. "InternalError", "PodMissingProxy". This should be the same for all /// messages of the same type. (This corresponds to the `name` field in /// open-source Istio.)QQꀱRMMOX/// A unique identifier for the type of message. /// /// Display_name is intended to be human-readable, code is intended to be /// machine readable. There should be a one-to-one mapping between display_name /// and code. (i.e. do not re-use display_names or codes between message types.) /// See istio.analysis.v1alpha1.AnalysisMessageBase.TypeVVVV VVVVVVVVV6WWWWWW($W5W9WWGWCWWWNWUWIWOWZW^W_WeW{WpWWWW}WWWWWWWWWWWWWWWWWWWVR܃*V/// The high-level, machine-readable status of this MembershipFeature. /// Possible string values are: /// - "CODE_UNSPECIFIED" : Unknown or not set. /// - "OK" : The MembershipFeature is operating normally. /// - "WARNING" : The MembershipFeature has encountered an issue, and is /// operating in a degraded state. The MembershipFeature may need intervention /// to return to normal operation. See the description and any associated /// MembershipFeature-specific details for more information. /// - "ERROR" : The MembershipFeature is not operating or is in a severely /// degraded state. The MembershipFeature may need intervention to return to /// normal operation. See the description and any associated /// MembershipFeature-specific details for more information.VRV RVR7/// A human-readable description of the current status.VVboVS/// The time this status and any related Feature-specific details were /// updated.WW X RRXR,/// High-level state of a MembershipFeature.ZZZZZZZ6[[+[4[5[5[>[K[O[[n[Y[[u[[p[v[[[[[[[,ZY{ZZ+/// CertificateManagement specifies workload certificate management. /// Possible string values are: /// - "CERTIFICATE_MANAGEMENT_UNSPECIFIED" : Disable workload certificate /// feature. /// - "DISABLED" : Disable workload certificate feature. /// - "ENABLED" : Enable workload certificate feature.[[[XXcY__/// **WorkloadCertificate**: The membership-specific input for /// WorkloadCertificate feature.^^^^^^^!^^^M_ _"_+_,_,_5)_B_FaM_[_P_r_b_p_]_c_u_y_z____`_________`_``` ` ```)`+`.aD`Ba1_ _ B_#]]v]Y/// Deprecated, this field will be erased after code is changed to use the new /// field.^^ ^H/// The state of the Identity Providers corresponding to the membership.aSaS$aw]]d]uY/// **WorkloadIdentity**: The membership-specific state for WorkloadIdentity /// feature.!VV\W00/// Status specifies state for the subcomponent.WUWU`W7/// The request message for Operations.CancelOperation.^^^/// IgnoredMembership represents a membership ignored by the feature. /// /// A membership can be ignored because it was manually upgraded to a newer /// version than RC default.ggg?/// UpgradeStatus provides status information for each upgrade.j8/// Errors pertaining to the installation of Config Sync{/+/// Configuration for a container override.PPpΉ0/// Git repo configuration for a single cluster.l/// A Kubernetes object's GVK.00d+/// Configuration for Hierarchy Controller.PPpމ0/// OCI repo configuration for a single cluster.򦀪F/// State for the migration of PolicyController from ACM -\> PoCo Hub.RR>Y/// PolicyControllerMonitoring specifies the backends Policy Controller should /// export metrics to. /// /// For example, to specify metrics should be exported to Cloud Monitoring and /// Prometheus, specify backends: \["cloudmonitoring", "prometheus"\]9?/// The build version of Gatekeeper Policy Controller is using.//H0M0/// A generic empty message that you can re-use to avoid defining duplicated /// empty messages in your APIs. /// /// A typical example is to use it as the request or the response type of an API /// method. For instance: service Foo { rpc Bar(google.protobuf.Empty) returns /// (google.protobuf.Empty); }PPR/// The `Status` type defines a logical error model that is suitable for /// different programming environments, including REST APIs and RPC APIs. /// /// It is used by [gRPC](https://github.com/grpc). Each `Status` message /// contains three pieces of data: error code, error message, and error details. /// You can find out more about this error model and how to work with it in the /// [API Design Guide](https://cloud.google.com/apis/design/errors).]{]{r],/// Configuration for the AzureAD Auth flow.]]^3;/// Configuration options for the AIS diagnostic interface.^^v^2/// Configuration for the Google Plugin Auth flow.^^_[X/// Contains the properties for locating and authenticating groups in the /// directory.lVlVel%/// Configuration for OIDC Auth flow.llil)/// Configuration for the SAML Auth flow.m(m(umb1/// Server settings for the external LDAP server.q|q|q;/// The structure holds the LDAP simple binding credential.}}t}4/// Defines where users exist in the LDAP directory.W7/// A resource that represents a Google Cloud location.""*/// MonitoringConfig specifies the backends Policy Controller should export /// metrics to. /// /// For example, to specify metrics should be exported to Cloud Monitoring and /// Prometheus, specify backends: \["cloudmonitoring", "prometheus"\]:/// ResourceList contains container resource requirements. H H E/// The config specifying which default library templates to install.  a /// Toleration of a node taint.̀Ak/// **RBAC RoleBinding Actuation**: The membership-specific input for /// RBACRoleBindingActuation feature.%1%1S%W/// Condition being reported.M>M>uM~7/// Structured and human-readable details for a status.\^\^\M/// IdentityProviderStateDetail represents the state of an Identity Provider.8GHmЀ)[ʂ*`avz9=Vz >`|}̈́12v 3W #_· #LMz=>x pq5;Ō#)z>sz{$txyǏc :@ÐɑhԒ lrߒ3|͓ݓjw}Ε/Gwĕޕ+\͗ >EFɗ֗)ahlnoŘƙEFݚSnoښOΜ`f$uٞ0OiȞ8t45eq 39SY$w} 5;%G_{SZ[åϥߦX\]æݦ.s5EKw}Ψۨ2gͪ BIJ˪RY]^Ĭ\z­]Ʈj28ׯA>D.c}Ȳ K~.cjk$Xɵϵ$s޷.iڷ.{θԹ ^ntSȺ6P]ͼSǼμϽ7CRe޽:;~޾5}@@j@AA"A(AWA]AwA}AABB%BpBBBBBC CCaCCCCD DDGDDDDEEE8EDEREeEEEEEFFFmFFFFFG GKGQGGGGGH-H:H@HHIIVIIIIIIJJJ5J<JJJJJK,K2KLKRKKKLL L;LALsLyLMMhMMNINNNNNO*O0OOOOPPGP_PxPPPPPQ8QkQQR!R2R[RRRRRSSS)SJSQS}SSSSSSTTQTTTTTUU&UbUUVVV%V.V/V`VVVVVW(WTWUWWWXXXhXXYY>Y]Y^YYYYYZZZ`ZZZZZ[ [e[i[k[l[[\\'\(\^\v\w\\\\]]O]X]Y]]]]]]^^F^J^^^__L_|____```W`X```aaOa_asaabb+b?bHbIbzbbbbbbc#c?cxc~cdd1d2d^ddddeee?eweeeff+fvffffffg%gGgkgggggh/h0hPhwhhhhhi.icidiiiiiiijjOj{j|jjk kkVkkl l%l&lelflllmmZmjm~mmmmnn0ngnknmnnnnnnno8o9otoooppKpOpQpRptpppqqdqqrzrrrrrsssjsttQtitottttttttuJuuuuv>vvw%w@wwwwx<x@xnxoxxxxxy'y-y|yz zz%z5zPzQzzzz{F{`{f{v{{{{{{||"|#|B|`|r||||||}}}7}C}}}~$~5~C~Z~~~(8LsTdx)23d(Bn2y>pN}&'Su3"hz,h'^-.Wy72x<x?Q?noKz!"Ln,x':Ld+p J?pyz%Gu+KX.w23Y R(w lr)/BxyJq;ATv\o >}G&'QWj!7M]q:j;K_#4BY0b9-O9[h /Ri Uvw-EFw3bc6QcvS_ ?~2s5Y{/_ 3b'wx(de.RSz Ob\ :t W}.KL/Fbw}~2£'`ijÛ'O\Ĥ/aŎŰ?nƺJlDz*vȲ<ɂɔFʂʥʦ6<=˂ˎB̋̔̕%T͙͌BIMOP΁/0\ϐ*nЂФ3bѮHjҰ(tӰ$%sԶB\ՏՓՕՖպ ]^֊ O[ׅ';iج"#Trٔ'Ystڗګڬ=Iۀ۫۴۵ &Y]_`ܒܷEF~ݿIMOPށCe߽߫#oJbcQ#1H{*7b{=C+AB2QRWm9:8Wi,23o{ExIKmZ|F6Q:w!QR Q]^JKu G0rO)Oq~1c+{l&6;`fv;A 1w{GM]KZn ^&*`a"7RdjkXh|  b r    ; w     M w       E i     I k x   %Rmtxz{787=P@FY BH[#6vw!:Rrxy&uJPG$^Q '(Y'o ?b 4[ *?@a~  % < U [ \   !!G!Z!!!!""""J"f""""# #2#9#=#?#@####$3$$% %/%|%%&*&?&@&{&&''1'2'd''''((C(W((((()))K)g)h))))))***1*G*[*a*b***+++P+++++,4,q,,,,--:-Z----.$.1.F._....// ////a///0&0E0]0^0000011I1J1m1111292|2222233V3W3w333334 4494S4d444444555D5k55566H6r66677<777778D8T8h8889;9K9_99::R:b:v::;!;1;E;;;<$<4 >>;>h>>>??9?l?s?w?y?z??@@/@Z@[@x@@@@@AA0A1AFAaAbAAAABBB)BJBKBBBBBBBCC!C<CVCiCCCCCCCDD#DcDDDEEEWEEEEF7FeFFFFG-GZGGGGH%HoHHHII+IgIwIIJJCJJJJKKOK_KsKKLLL&LfLLLM MM'M(MYMMMN#NGN{NNOO;OHOuOOOPP@P}PPPPPPPQ;QQQR#RsRRRSSSdStSSSSTTCTDTgTTTTTTUUUIU_U`UUUUUUVVV3VCVXV^V_VVVWW^WnWWWX<XLX`XXYY"Y6YcYYZZ%Z9ZhZZ[[*[>[G[H[y[[[\\?\]\\\\\]]5]L]m]t]x]z]{]]]^+^X^^^^^_D_S____`8`s`t```aa,aFaLaMaaabbHbbbbbbc&c`ccccddd d d5dWdddddde$e*e:eaebeeef5fVf\flfffffggg3gCgTgmg|gggggh!hhhxhhhi4iDiXiij j0jDjljjjkkkkCkakkkkkl l3lHlOlSlUlVl|lllm'm(mZmmmnnnmnnnooo\o]ooop/p^ppppppq7quqyq{q|qqrrrSrorrrs sss`sasssstt2tottttu/umuuuuvvv8vbvvvw wwwwwjwwwwwwxxQxhxxxxxyy'ybyyyyyyzz%z5z;z<zlzxzz{4{`{{{|| | |<|j||||}}I}n}}}}}}~~ ~Y~i~m~~ &HQU9:d   B`VW GXf}K ;op'5ST 6<=wQbp3JST"Sz+IJ[ "7MST I*AJK| 0Qt{'Qk'BCpP>DWlmW]p$9?@my;=Ma 0Dn7@Ar.Jh!6Kb Wj12DbJ([3:>@A Zk~%+x"(s8Z`*0j UBNy"6fey.R_t#2dTgh&2\DPU&,o*ST [an5-}.Qmn&'nL &E[v'tAX5Lat Eˆ¼AQeæiyčUř 5iƑ3@uDz9fȇȲ!"n~ɂMNʟ@bˮO̍)cͩHΓAύ(tЕ+y_Ҫ)y^ԋ"BՎ01kw֪6Tׇ׋׍׎BH؂Nوىj}ڪڿ;N_n۬;K_hiܚܼ59;<rݝ<=yWX߀߸߹;AB6O3o&:#3GPQ2?dHo?9:^d5no(AX^_8d@ .EQ9b]!"lEQ} N,Lp#@w?@p| ?{ Su!?|@z{K*wF0*x2_Gw`(v+x(4M:~<h   2 d     # : A E G H      M N      ! I O b    U    &ABs Ds/Wd9hi TXqrB+o'eikl8Mz{h Y3Iagh)d.B!Ku 29=?@  * K L v  !!O!!!!""";"<"_"z""""""#+#Z###$$$$$O$$$$$%%#%*%.%0%1%O%%%%%&$&%&T&Z&m&&'''i'v'''((2(f(()D))**m**+F+a+++++, ,#,3,9,:,w,,,--B-S-a-x----.#.E.u.....//// /./2/P/w////00P001.1|122W22303K333333454A4s44555565e5n5o55566666i66667767x7778(8:8\889:99::1:E:::::;;0;\;;<$!>0>~>>?%?@?A?U?i???????@#@`@@@@AA;AgAAAABB9BZBaBeBgBhBBBCC!C4CoCpCCCCCD?DSDYDDDDDDE;E<EcEiE|EEEEEFF5FSFYFZFFFFG'GeGvGGGGHH\HmH{HHI#I]IIIIJ3JjJJJJKKK2KfKKLL<LILvLLLM0M7M;M=M>MvMMMMN4NNOO&OuOOOPPP6P<PPPQ Q Q>Q?QjQvQQQQRR5R_RRRRRRS#SESvSSTNTTU&UuUUVV VCV_V`VVVVW WW/W;WhWWWWXX3X]XXXXXXXXXY8YYYyYYZ.Z=ZxZZZ[[[E[Q[[[[\\W\[\]\^\\]]]b]o]]]^^^S^^^_ _ _<_H___``0`a`z`aaa4aGaPaQaaabb(bmbtbxbzE GKEHubApiProjectsResourceProjectsLocationsResource$ProjectsLocationsMembershipsResource,ProjectsLocationsMembershipsFeaturesResource#ProjectsLocationsOperationsResourceAppDevExperienceStateCloudBuildSpecClusterUpgradeGKEUpgrade'ClusterUpgradeMembershipGKEUpgradeStateClusterUpgradeStateConfigManagementBinauthzConfigConfigManagementBinauthzStateConfigManagementBinauthzVersionConfigManagementConfigSync)ConfigManagementConfigSyncDeploymentStateConfigManagementConfigSyncState!ConfigManagementConfigSyncVersion"ConfigManagementDeploymentOverrideConfigManagementErrorResource)ConfigManagementGatekeeperDeploymentState2ConfigManagementHierarchyControllerDeploymentState(ConfigManagementHierarchyControllerState*ConfigManagementHierarchyControllerVersionConfigManagementInstallErrorConfigManagementOperatorState ConfigManagementPolicyController%ConfigManagementPolicyControllerStateConfigManagementSpecConfigManagementStateConfigManagementSyncErrorConfigManagementSyncState FeatureSpec FeatureStateIdentityServiceAuthMethod%IdentityServiceIdentityServiceOptionsIdentityServiceLdapConfig#IdentityServiceServiceAccountConfigIdentityServiceSpecIdentityServiceStateLifecycleStateListLocationsResponseListMembershipFeaturesResponseListOperationsResponseMembershipFeature MeteringState OperationOrigin!PolicyControllerBundleInstallSpecPolicyControllerHubConfigPolicyControllerOnClusterState!PolicyControllerPolicyContentSpec"PolicyControllerPolicyContentState0PolicyControllerPolicyControllerDeploymentConfig$PolicyControllerResourceRequirementsPolicyControllerSpecPolicyControllerState,RBACRoleBindingActuationRBACRoleBindingStateRBACRoleBindingActuationStateServiceMeshAnalysisMessageServiceMeshAnalysisMessageBase!ServiceMeshControlPlaneManagementServiceMeshDataPlaneManagementServiceMeshSpecServiceMeshStateServiceMeshTypeStateWorkloadCertificateSpecWorkloadIdentityStateP