feat: add desired_secret_sync_config to ClusterUpdate

Google APIs · copybara-github · commit 72d2f93fdb5c · 2025-10-21T14:04:11.000-07:00
docs: various documentation fixes

PiperOrigin-RevId: 822268461
diff --git a/google/container/v1beta1/cluster_service.proto b/google/container/v1beta1/cluster_service.proto
@@ -48,8 +48,6 @@ option (google.api.resource_definition) = {
   pattern: "projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}/cryptoKeyVersions/{crypto_key_version}"
 };
 
-// LINT: LEGACY_NAMES
-
 // Google Kubernetes Engine Cluster Manager v1beta1
 service ClusterManager {
   option (google.api.default_host) = "container.googleapis.com";
@@ -87,7 +85,7 @@ service ClusterManager {
   // network](https://cloud.google.com/compute/docs/networks-and-firewalls#networks).
   //
   // One firewall is added for the cluster. After cluster creation,
-  // the Kubelet creates routes for each node to allow the containers
+  // the kubelet creates routes for each node to allow the containers
   // on that node to communicate with all other instances in the
   // cluster.
   //
@@ -1232,8 +1230,7 @@ message NodeConfig {
   // persistent storage on your nodes.
   // * `https://www.googleapis.com/auth/devstorage.read_only` is required for
   // communicating with **gcr.io**
-  // (the [Google Container
-  // Registry](https://cloud.google.com/container-registry/)).
+  // (the [Artifact Registry](https://cloud.google.com/artifact-registry/)).
   //
   // If unspecified, no scopes are added, unless Cloud Logging or Cloud
   // Monitoring are enabled, in which case their required scopes will be added.
@@ -1835,8 +1832,7 @@ message ContainerdConfig {
     // domain names (FQDN) to a specific certificate.
     message CertificateAuthorityDomainConfig {
       // GCPSecretManagerCertificateConfig configures a secret from
-      // [Google Secret
-      // Manager](https://cloud.google.com/secret-manager).
+      // [Secret Manager](https://cloud.google.com/secret-manager).
       message GCPSecretManagerCertificateConfig {
         // Secret URI, in the form
         // "projects/$PROJECT_ID/secrets/$SECRET_NAME/versions/$VERSION".
@@ -1985,7 +1981,7 @@ message NodeLabels {
   map<string, string> labels = 1;
 }
 
-// Collection of [GCP
+// Collection of [Resource Manager
 // labels](https://cloud.google.com/resource-manager/docs/creating-managing-labels).
 message ResourceLabels {
   // Map of node label keys and node label values.
@@ -3820,6 +3816,9 @@ message ClusterUpdate {
 
   // The desired network tier configuration for the cluster.
   NetworkTierConfig desired_network_tier_config = 155;
+
+  // Configuration for sync Secret Manager secrets as k8s secrets.
+  SecretSyncConfig desired_secret_sync_config = 158;
 }
 
 // AdditionalPodRangesConfig is the configuration for additional pod secondary
@@ -5606,8 +5605,7 @@ message AutoprovisioningNodePoolDefaults {
   // persistent storage on your nodes.
   // * `https://www.googleapis.com/auth/devstorage.read_only` is required for
   // communicating with **gcr.io**
-  // (the [Google Container
-  // Registry](https://cloud.google.com/container-registry/)).
+  // (the [Artifact Registry](https://cloud.google.com/artifact-registry/)).
   //
   // If unspecified, no scopes are added, unless Cloud Logging or Cloud
   // Monitoring are enabled, in which case their required scopes will be added.
