feat: add fields desired_in_transit_encryption_config and in_transit_encryption_config

Google APIs · copybara-github · commit fa8b4175ee20 · 2024-01-19T16:57:20.000-08:00
docs: Remove Not GA comments for GetOpenIDConfig and GetJSONWebKeys in v1alpha1/v1beta1/v1

PiperOrigin-RevId: 599973058
diff --git a/google/container/v1/cluster_service.proto b/google/container/v1/cluster_service.proto
@@ -300,8 +300,6 @@ service ClusterManager {
 
   // Gets the public component of the cluster signing keys in
   // JSON Web Key format.
-  // This API is not yet intended for general use, and is not available for all
-  // clusters.
   rpc GetJSONWebKeys(GetJSONWebKeysRequest) returns (GetJSONWebKeysResponse) {
     option (google.api.http) = {
       get: "/v1/{parent=projects/*/locations/*/clusters/*}/jwks"
@@ -2271,6 +2269,9 @@ message ClusterUpdate {
   // The desired resource manager tags that apply to all auto-provisioned node
   // pools in autopilot clusters and node auto-provisioning enabled clusters.
   ResourceManagerTags desired_node_pool_auto_config_resource_manager_tags = 136;
+
+  // Specify the details of in-transit encryption.
+  optional InTransitEncryptionConfig desired_in_transit_encryption_config = 137;
 }
 
 // AdditionalPodRangesConfig is the configuration for additional pod secondary
@@ -4372,6 +4373,9 @@ message NetworkConfig {
 
   // Whether FQDN Network Policy is enabled on this cluster.
   optional bool enable_fqdn_network_policy = 19;
+
+  // Specify the details of in-transit encryption.
+  optional InTransitEncryptionConfig in_transit_encryption_config = 20;
 }
 
 // GatewayAPIConfig contains the desired config of Gateway API on this cluster.
@@ -5328,3 +5332,16 @@ message EnterpriseConfig {
   // cluster.
   ClusterTier cluster_tier = 1 [(google.api.field_behavior) = OUTPUT_ONLY];
 }
+
+// Options for in-transit encryption.
+enum InTransitEncryptionConfig {
+  // Unspecified, will be inferred as default -
+  // IN_TRANSIT_ENCRYPTION_UNSPECIFIED.
+  IN_TRANSIT_ENCRYPTION_CONFIG_UNSPECIFIED = 0;
+
+  // In-transit encryption is disabled.
+  IN_TRANSIT_ENCRYPTION_DISABLED = 1;
+
+  // Data in-transit is encrypted using inter-node transparent encryption.
+  IN_TRANSIT_ENCRYPTION_INTER_NODE_TRANSPARENT = 2;
+}
