Skip to content

Commit facb658

Browse files
Google APIscopybara-github
Google APIs
authored and
copybara-github
committed
feat: add ResourceManagerTags API to attach tags on the underlying Compute Engine VMs of GKE Nodes which can be used to selectively enforce Cloud Firewall network firewall policies
--- feat: add CompleteConvertToAutopilot API to commit Autopilot conversion operation --- docs: updated comments PiperOrigin-RevId: 577928708
1 parent 37e816b commit facb658

1 file changed

Lines changed: 65 additions & 11 deletions

File tree

‎google/container/v1/cluster_service.proto‎

Lines changed: 65 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -831,6 +831,9 @@ message NodeConfig {
831831

832832
// Parameters for node pools to be backed by shared sole tenant node groups.
833833
SoleTenantConfig sole_tenant_config = 42;
834+
835+
// A map of resource manager tag keys and values to be attached to the nodes.
836+
ResourceManagerTags resource_manager_tags = 45;
834837
}
835838

836839
// Specifies options for controlling advanced machine features.
@@ -2022,6 +2025,10 @@ message NodePoolAutoConfig {
20222025
// the client during cluster creation. Each tag within the list
20232026
// must comply with RFC1035.
20242027
NetworkTags network_tags = 1;
2028+
2029+
// Resource manager tag keys and values to be attached to the nodes
2030+
// for managing Compute Engine firewalls using Network Firewall Policies.
2031+
ResourceManagerTags resource_manager_tags = 2;
20252032
}
20262033

20272034
// Subset of Nodepool message that has defaults.
@@ -2253,6 +2260,10 @@ message ClusterUpdate {
22532260

22542261
// Desired Beta APIs to be enabled for cluster.
22552262
K8sBetaAPIConfig desired_k8s_beta_apis = 131;
2263+
2264+
// The desired resource manager tags that apply to all auto-provisioned node
2265+
// pools in autopilot clusters and node auto-provisioning enabled clusters.
2266+
ResourceManagerTags desired_node_pool_auto_config_resource_manager_tags = 136;
22562267
}
22572268

22582269
// AdditionalPodRangesConfig is the configuration for additional pod secondary
@@ -2415,6 +2426,10 @@ message Operation {
24152426
// [documentation on
24162427
// resizes](https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#repairs).
24172428
RESIZE_CLUSTER = 18;
2429+
2430+
// Fleet features of GKE Enterprise are being upgraded. The cluster should
2431+
// be assumed to be blocked for other upgrades until the operation finishes.
2432+
FLEET_FEATURE_UPGRADE = 19;
24182433
}
24192434

24202435
// The server-assigned ID for the operation.
@@ -2725,6 +2740,11 @@ message UpdateNodePoolRequest {
27252740
// Initiates an upgrade operation that migrates the nodes in the
27262741
// node pool to the specified disk size.
27272742
int64 disk_size_gb = 38 [(google.api.field_behavior) = OPTIONAL];
2743+
2744+
// Desired resource manager tag keys and values to be attached to the nodes
2745+
// for managing Compute Engine firewalls using Network Firewall Policies.
2746+
// Existing tags will be replaced with new values.
2747+
ResourceManagerTags resource_manager_tags = 39;
27282748
}
27292749

27302750
// SetNodePoolAutoscalingRequest sets the autoscaler settings of a node pool.
@@ -5210,27 +5230,61 @@ enum IPv6AccessType {
52105230
}
52115231

52125232
// LocalNvmeSsdBlockConfig contains configuration for using raw-block local
5213-
// NVMe SSD.
5233+
// NVMe SSDs
52145234
message LocalNvmeSsdBlockConfig {
5215-
// The number of raw-block local NVMe SSD disks to be attached to the node.
5216-
// Each local SSD is 375 GB in size. If zero, it means no raw-block local NVMe
5217-
// SSD disks to be attached to the node.
5218-
// The limit for this value is dependent upon the maximum number of
5219-
// disks available on a machine per zone. See:
5235+
// Number of local NVMe SSDs to use. The limit for this value is dependent
5236+
// upon the maximum number of disk available on a machine per zone. See:
52205237
// https://cloud.google.com/compute/docs/disks/local-ssd
52215238
// for more information.
5239+
//
5240+
// A zero (or unset) value has different meanings depending on machine type
5241+
// being used:
5242+
// 1. For pre-Gen3 machines, which support flexible numbers of local ssds,
5243+
// zero (or unset) means to disable using local SSDs as ephemeral storage.
5244+
// 2. For Gen3 machines which dictate a specific number of local ssds, zero
5245+
// (or unset) means to use the default number of local ssds that goes with
5246+
// that machine type. For example, for a c3-standard-8-lssd machine, 2 local
5247+
// ssds would be provisioned. For c3-standard-8 (which doesn't support local
5248+
// ssds), 0 will be provisioned. See
5249+
// https://cloud.google.com/compute/docs/disks/local-ssd#choose_number_local_ssds
5250+
// for more info.
52225251
int32 local_ssd_count = 1;
52235252
}
52245253

52255254
// EphemeralStorageLocalSsdConfig contains configuration for the node ephemeral
5226-
// storage using Local SSD.
5255+
// storage using Local SSDs.
52275256
message EphemeralStorageLocalSsdConfig {
52285257
// Number of local SSDs to use to back ephemeral storage. Uses NVMe
5229-
// interfaces. Each local SSD is 375 GB in size.
5230-
// If zero, it means to disable using local SSDs as ephemeral storage.
5231-
// The limit for this value is dependent upon the maximum number of
5232-
// disks available on a machine per zone. See:
5258+
// interfaces.
5259+
//
5260+
// A zero (or unset) value has different meanings depending on machine type
5261+
// being used:
5262+
// 1. For pre-Gen3 machines, which support flexible numbers of local ssds,
5263+
// zero (or unset) means to disable using local SSDs as ephemeral storage. The
5264+
// limit for this value is dependent upon the maximum number of disk
5265+
// available on a machine per zone. See:
52335266
// https://cloud.google.com/compute/docs/disks/local-ssd
52345267
// for more information.
5268+
// 2. For Gen3 machines which dictate a specific number of local ssds, zero
5269+
// (or unset) means to use the default number of local ssds that goes with
5270+
// that machine type. For example, for a c3-standard-8-lssd machine, 2 local
5271+
// ssds would be provisioned. For c3-standard-8 (which doesn't support local
5272+
// ssds), 0 will be provisioned. See
5273+
// https://cloud.google.com/compute/docs/disks/local-ssd#choose_number_local_ssds
5274+
// for more info.
52355275
int32 local_ssd_count = 1;
52365276
}
5277+
5278+
// A map of resource manager tag keys and values to be attached to the nodes
5279+
// for managing Compute Engine firewalls using Network Firewall Policies.
5280+
// Tags must be according to specifications in
5281+
// https://cloud.google.com/vpc/docs/tags-firewalls-overview#specifications.
5282+
// A maximum of 5 tag key-value pairs can be specified.
5283+
// Existing tags will be replaced with new values.
5284+
message ResourceManagerTags {
5285+
// TagKeyValue must be in one of the following formats ([KEY]=[VALUE])
5286+
// 1. `tagKeys/{tag_key_id}=tagValues/{tag_value_id}`
5287+
// 2. `{org_id}/{tag_key_name}={tag_value_name}`
5288+
// 3. `{project_id}/{tag_key_name}={tag_value_name}`
5289+
map<string, string> tags = 1;
5290+
}

0 commit comments

Comments
 (0)