Skip to content

Commit d7a3bb1

Browse files
gcf-owl-bot[bot]ddelgrosso1
gcf-owl-bot[bot]
and
ddelgrosso1
authored
feat: [container] add API to enable/disable secret manager csi component on GKE clusters (#5111)
* feat: add secondary boot disks field to NodePool API PiperOrigin-RevId: 613011062 Source-Link: googleapis/googleapis@792dacb Source-Link: googleapis/googleapis-gen@5ead5f7 Copy-Tag: eyJwIjoicGFja2FnZXMvZ29vZ2xlLWNvbnRhaW5lci8uT3dsQm90LnlhbWwiLCJoIjoiNWVhZDVmNzhkOTI2YzMxMjAwMTE5NzhhMmZlODQyMmFhMGQ0NTg1ZSJ9 * 🦉 Updates from OwlBot post-processor See https://github.com/googleapis/repo-automation-bots/blob/main/packages/owl-bot/README.md * feat: add API to enable/disable secret manager csi component on GKE clusters PiperOrigin-RevId: 613087806 Source-Link: googleapis/googleapis@8d73440 Source-Link: googleapis/googleapis-gen@cffae94 Copy-Tag: eyJwIjoicGFja2FnZXMvZ29vZ2xlLWNvbnRhaW5lci8uT3dsQm90LnlhbWwiLCJoIjoiY2ZmYWU5NGJmNGVmODJkZGVlMGNmMzUxOWIyMGVhYjQ0YWMwMGI3ZSJ9 * 🦉 Updates from OwlBot post-processor See https://github.com/googleapis/repo-automation-bots/blob/main/packages/owl-bot/README.md --------- Co-authored-by: Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com> Co-authored-by: Denis DelGrosso <[email protected]>
1 parent 0bdb9c8 commit d7a3bb1

5 files changed

Lines changed: 1049 additions & 0 deletions

File tree

‎packages/google-container/protos/google/container/v1/cluster_service.proto‎

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -836,6 +836,9 @@ message NodeConfig {
836836
// Optional. Reserved for future use.
837837
bool enable_confidential_storage = 46
838838
[(google.api.field_behavior) = OPTIONAL];
839+
840+
// List of secondary boot disks attached to the nodes.
841+
repeated SecondaryBootDisk secondary_boot_disks = 48;
839842
}
840843

841844
// Specifies options for controlling advanced machine features.
@@ -5350,6 +5353,27 @@ message EnterpriseConfig {
53505353
ClusterTier cluster_tier = 1 [(google.api.field_behavior) = OUTPUT_ONLY];
53515354
}
53525355

5356+
// SecondaryBootDisk represents a persistent disk attached to a node
5357+
// with special configurations based on its mode.
5358+
message SecondaryBootDisk {
5359+
// Mode specifies how the secondary boot disk will be used.
5360+
// This triggers mode-specified logic in the control plane.
5361+
enum Mode {
5362+
// MODE_UNSPECIFIED is when mode is not set.
5363+
MODE_UNSPECIFIED = 0;
5364+
5365+
// CONTAINER_IMAGE_CACHE is for using the secondary boot disk as
5366+
// a container image cache.
5367+
CONTAINER_IMAGE_CACHE = 1;
5368+
}
5369+
5370+
// Disk mode (container image cache, etc.)
5371+
Mode mode = 1;
5372+
5373+
// Fully-qualified resource ID for an existing disk image.
5374+
string disk_image = 2;
5375+
}
5376+
53535377
// Options for in-transit encryption.
53545378
enum InTransitEncryptionConfig {
53555379
// Unspecified, will be inferred as default -

‎packages/google-container/protos/google/container/v1beta1/cluster_service.proto‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2284,6 +2284,9 @@ message Cluster {
22842284

22852285
// GKE Enterprise Configuration.
22862286
EnterpriseConfig enterprise_config = 149;
2287+
2288+
// Secret CSI driver configuration.
2289+
SecretManagerConfig secret_manager_config = 150;
22872290
}
22882291

22892292
// Kubernetes open source beta apis enabled on the cluster.
@@ -2664,6 +2667,12 @@ message ClusterUpdate {
26642667

26652668
// Specify the details of in-transit encryption.
26662669
optional InTransitEncryptionConfig desired_in_transit_encryption_config = 137;
2670+
2671+
// Enable/Disable Cilium Clusterwide Network Policy for the cluster.
2672+
optional bool desired_enable_cilium_clusterwide_network_policy = 138;
2673+
2674+
// Enable/Disable Secret Manager Config.
2675+
optional SecretManagerConfig desired_secret_manager_config = 139;
26672676
}
26682677

26692678
// AdditionalPodRangesConfig is the configuration for additional pod secondary
@@ -4979,6 +4988,9 @@ message NetworkConfig {
49794988

49804989
// Specify the details of in-transit encryption.
49814990
optional InTransitEncryptionConfig in_transit_encryption_config = 20;
4991+
4992+
// Whether CiliumClusterWideNetworkPolicy is enabled on this cluster.
4993+
optional bool enable_cilium_clusterwide_network_policy = 21;
49824994
}
49834995

49844996
// GatewayAPIConfig contains the desired config of Gateway API on this cluster.
@@ -5942,6 +5954,12 @@ message EnterpriseConfig {
59425954
ClusterTier cluster_tier = 1 [(google.api.field_behavior) = OUTPUT_ONLY];
59435955
}
59445956

5957+
// SecretManagerConfig is config for secret manager enablement.
5958+
message SecretManagerConfig {
5959+
// Whether the cluster is configured to use secret manager CSI component.
5960+
optional bool enabled = 1;
5961+
}
5962+
59455963
// SecondaryBootDisk represents a persistent disk attached to a node
59465964
// with special configurations based on its mode.
59475965
message SecondaryBootDisk {

0 commit comments

Comments
 (0)