feat: add SecurityPostureConfig Enterprise vuln mode to allow customers to enable Advanced Vulnerability Scanning for their clusters (#413)

gcf-owl-bot[bot] · web-flow · commit 0280a30e0f95 · 2023-09-18T09:41:25.000-04:00
* feat: add SecurityPostureConfig Enterprise vuln mode to allow customers to enable Advanced Vulnerability Scanning for their clusters --- docs: deprecate ProtectConfig fields in alpha and beta, with SecurityPostureConfig as the intended replacement PiperOrigin-RevId: 565696375 Source-Link: googleapis/googleapis@304bf75 Source-Link: googleapis/googleapis-gen@e42f451 Copy-Tag: eyJwIjoiLmdpdGh1Yi8uT3dsQm90LnlhbWwiLCJoIjoiZTQyZjQ1MTI5YmNkOTVhNDhmOWY0NzgxYjFlNjRjYWIyZjZjYWE3YiJ9 * 🦉 Updates from OwlBot post-processor See https://github.com/googleapis/repo-automation-bots/blob/main/packages/owl-bot/README.md --------- Co-authored-by: Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com>
diff --git a/packages/google-cloud-container/google/cloud/container_v1beta1/types/cluster_service.py b/packages/google-cloud-container/google/cloud/container_v1beta1/types/cluster_service.py
@@ -696,6 +696,11 @@ class NodeConfig(proto.Message):
             HostMaintenancePolicy contains the desired
             maintenance policy for the Google Compute Engine
             hosts.
+        enable_confidential_storage (bool):
+            Optional. Enable confidential storage on Hyperdisk.
+            boot_disk_kms_key is required when
+            enable_confidential_storage is true. This is only available
+            for private preview.
     """
 
     machine_type: str = proto.Field(
@@ -866,6 +871,10 @@ class NodeConfig(proto.Message):
         number=44,
         message="HostMaintenancePolicy",
     )
+    enable_confidential_storage: bool = proto.Field(
+        proto.BOOL,
+        number=46,
+    )
 
 
 class AdvancedMachineFeatures(proto.Message):
@@ -3046,8 +3055,9 @@ class Cluster(proto.Message):
             clusters and node auto-provisioning enabled
             clusters.
         protect_config (google.cloud.container_v1beta1.types.ProtectConfig):
-            Enable/Disable Protect API features for the
-            cluster.
+            Deprecated: Use SecurityPostureConfig
+            instead. Enable/Disable Protect API features for
+            the cluster.
 
             This field is a member of `oneof`_ ``_protect_config``.
         etag (str):
@@ -3615,10 +3625,14 @@ class VulnerabilityMode(proto.Enum):
             VULNERABILITY_BASIC (2):
                 Applies basic vulnerability scanning on the
                 cluster.
+            VULNERABILITY_ENTERPRISE (3):
+                Applies the Security Posture's vulnerability
+                on cluster Enterprise level features.
         """
         VULNERABILITY_MODE_UNSPECIFIED = 0
         VULNERABILITY_DISABLED = 1
         VULNERABILITY_BASIC = 2
+        VULNERABILITY_ENTERPRISE = 3
 
     mode: Mode = proto.Field(
         proto.ENUM,
@@ -3895,8 +3909,9 @@ class ClusterUpdate(proto.Message):
             clusters and node auto-provisioning enabled
             clusters.
         desired_protect_config (google.cloud.container_v1beta1.types.ProtectConfig):
-            Enable/Disable Protect API features for the
-            cluster.
+            Deprecated: Use DesiredSecurityPostureConfig
+            instead. Enable/Disable Protect API features for
+            the cluster.
 
             This field is a member of `oneof`_ ``_desired_protect_config``.
         desired_gateway_api_config (google.cloud.container_v1beta1.types.GatewayAPIConfig):
diff --git a/packages/google-cloud-container/samples/generated_samples/snippet_metadata_google.container.v1.json b/packages/google-cloud-container/samples/generated_samples/snippet_metadata_google.container.v1.json
@@ -8,7 +8,7 @@
     ],
     "language": "PYTHON",
     "name": "google-cloud-container",
-    "version": "2.31.0"
+    "version": "0.1.0"
   },
   "snippets": [
     {
diff --git a/packages/google-cloud-container/samples/generated_samples/snippet_metadata_google.container.v1beta1.json b/packages/google-cloud-container/samples/generated_samples/snippet_metadata_google.container.v1beta1.json
@@ -8,7 +8,7 @@
     ],
     "language": "PYTHON",
     "name": "google-cloud-container",
-    "version": "2.31.0"
+    "version": "0.1.0"
   },
   "snippets": [
     {

Original file line number	Diff line number	Diff line change
`@@ -8,7 +8,7 @@`
`8`	`8`	`],`
`9`	`9`	`"language": "PYTHON",`
`10`	`10`	`"name": "google-cloud-container",`
`11`		`- "version": "2.31.0"`
	`11`	`+ "version": "0.1.0"`
`12`	`12`	`},`
`13`	`13`	`"snippets": [`
`14`	`14`	`{`