v1beta1

type FeatureDefaultConfig struct {
	/* The logs routing mode Possible values: MODE_UNSPECIFIED, COPY, MOVE */
	// +optional
	Mode *string `json:"mode,omitempty"`
}

type FeatureFleetScopeLogsConfig struct {
	/* The logs routing mode Possible values: MODE_UNSPECIFIED, COPY, MOVE */
	// +optional
	Mode *string `json:"mode,omitempty"`
}

type FeatureFleetobservability struct {
	/* Fleet Observability Logging-specific spec. */
	// +optional
	LoggingConfig *FeatureLoggingConfig `json:"loggingConfig,omitempty"`
}

type FeatureLoggingConfig struct {
	/* Specified if applying the default routing config to logs not specified in other configs. */
	// +optional
	DefaultConfig *FeatureDefaultConfig `json:"defaultConfig,omitempty"`

	/* Specified if applying the routing config to all logs for all fleet scopes. */
	// +optional
	FleetScopeLogsConfig *FeatureFleetScopeLogsConfig `json:"fleetScopeLogsConfig,omitempty"`
}

type FeatureMulticlusteringress struct {
	ConfigMembershipRef v1alpha1.ResourceRef `json:"configMembershipRef"`
}

type FeatureResourceStateStatus struct {
	/* Whether this Feature has outstanding resources that need to be cleaned up before it can be disabled. */
	// +optional
	HasResources *bool `json:"hasResources,omitempty"`

	/* The current state of the Feature resource in the Hub API. Possible values: STATE_UNSPECIFIED, ENABLING, ACTIVE, DISABLING, UPDATING, SERVICE_UPDATING */
	// +optional
	State *string `json:"state,omitempty"`
}

type FeatureSpec struct {
	/* Fleet Observability spec. */
	// +optional
	Fleetobservability *FeatureFleetobservability `json:"fleetobservability,omitempty"`

	/* Multicluster Ingress-specific spec. */
	// +optional
	Multiclusteringress *FeatureMulticlusteringress `json:"multiclusteringress,omitempty"`
}

type FeatureStateStatus struct {
	/* The high-level, machine-readable status of this Feature. Possible values: CODE_UNSPECIFIED, OK, WARNING, ERROR */
	// +optional
	Code *string `json:"code,omitempty"`

	/* A human-readable description of the current status. */
	// +optional
	Description *string `json:"description,omitempty"`

	/* The time this status and any related Feature-specific details were updated. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z" */
	// +optional
	UpdateTime *string `json:"updateTime,omitempty"`
}

type FeaturemembershipBinauthz struct {
	/* Whether binauthz is enabled in this cluster. */
	// +optional
	Enabled *bool `json:"enabled,omitempty"`
}

type FeaturemembershipConfigSync struct {
	// +optional
	Git *FeaturemembershipGit `json:"git,omitempty"`

	// +optional
	MetricsGcpServiceAccountRef *v1alpha1.ResourceRef `json:"metricsGcpServiceAccountRef,omitempty"`

	// +optional
	Oci *FeaturemembershipOci `json:"oci,omitempty"`

	/* Set to true to enable the Config Sync admission webhook to prevent drifts. If set to `false`, disables the Config Sync admission webhook and does not prevent drifts. */
	// +optional
	PreventDrift *bool `json:"preventDrift,omitempty"`

	/* Specifies whether the Config Sync Repo is in "hierarchical" or "unstructured" mode. */
	// +optional
	SourceFormat *string `json:"sourceFormat,omitempty"`
}

type FeaturemembershipConfigmanagement struct {
	/* **DEPRECATED** Binauthz configuration for the cluster. This field will be ignored and should not be set. */
	// +optional
	Binauthz *FeaturemembershipBinauthz `json:"binauthz,omitempty"`

	/* Config Sync configuration for the cluster. */
	// +optional
	ConfigSync *FeaturemembershipConfigSync `json:"configSync,omitempty"`

	/* Hierarchy Controller configuration for the cluster. */
	// +optional
	HierarchyController *FeaturemembershipHierarchyController `json:"hierarchyController,omitempty"`

	/* Policy Controller configuration for the cluster. */
	// +optional
	PolicyController *FeaturemembershipPolicyController `json:"policyController,omitempty"`

	/* Optional. Version of ACM to install. Defaults to the latest version. */
	// +optional
	Version *string `json:"version,omitempty"`
}

type FeaturemembershipGit struct {
	// +optional
	GcpServiceAccountRef *v1alpha1.ResourceRef `json:"gcpServiceAccountRef,omitempty"`

	/* URL for the HTTPS proxy to be used when communicating with the Git repo. */
	// +optional
	HttpsProxy *string `json:"httpsProxy,omitempty"`

	/* The path within the Git repository that represents the top level of the repo to sync. Default: the root directory of the repository. */
	// +optional
	PolicyDir *string `json:"policyDir,omitempty"`

	/* Type of secret configured for access to the Git repo. Must be one of ssh, cookiefile, gcenode, token, gcpserviceaccount or none. The validation of this is case-sensitive. */
	// +optional
	SecretType *string `json:"secretType,omitempty"`

	/* The branch of the repository to sync from. Default: master. */
	// +optional
	SyncBranch *string `json:"syncBranch,omitempty"`

	/* The URL of the Git repository to use as the source of truth. */
	// +optional
	SyncRepo *string `json:"syncRepo,omitempty"`

	/* Git revision (tag or hash) to check out. Default HEAD. */
	// +optional
	SyncRev *string `json:"syncRev,omitempty"`

	/* Period in seconds between consecutive syncs. Default: 15. */
	// +optional
	SyncWaitSecs *string `json:"syncWaitSecs,omitempty"`
}

type FeaturemembershipHierarchyController struct {
	/* Whether hierarchical resource quota is enabled in this cluster. */
	// +optional
	EnableHierarchicalResourceQuota *bool `json:"enableHierarchicalResourceQuota,omitempty"`

	/* Whether pod tree labels are enabled in this cluster. */
	// +optional
	EnablePodTreeLabels *bool `json:"enablePodTreeLabels,omitempty"`

	/* Whether Hierarchy Controller is enabled in this cluster. */
	// +optional
	Enabled *bool `json:"enabled,omitempty"`
}

type FeaturemembershipMesh struct {
	/* **DEPRECATED** Whether to automatically manage Service Mesh control planes. Possible values: CONTROL_PLANE_MANAGEMENT_UNSPECIFIED, AUTOMATIC, MANUAL */
	// +optional
	ControlPlane *string `json:"controlPlane,omitempty"`

	/* Whether to automatically manage Service Mesh. Possible values: MANAGEMENT_UNSPECIFIED, MANAGEMENT_AUTOMATIC, MANAGEMENT_MANUAL */
	// +optional
	Management *string `json:"management,omitempty"`
}

type FeaturemembershipMonitoring struct {
	/* Specifies the list of backends Policy Controller will export to. Specifying an empty value `[]` disables metrics export. */
	// +optional
	Backends []string `json:"backends,omitempty"`
}

type FeaturemembershipOci struct {
	// +optional
	GcpServiceAccountRef *v1alpha1.ResourceRef `json:"gcpServiceAccountRef,omitempty"`

	/* The absolute path of the directory that contains the local resources. Default: the root directory of the image. */
	// +optional
	PolicyDir *string `json:"policyDir,omitempty"`

	/* Type of secret configured for access to the OCI Image. Must be one of gcenode, gcpserviceaccount or none. The validation of this is case-sensitive. */
	// +optional
	SecretType *string `json:"secretType,omitempty"`

	/* The OCI image repository URL for the package to sync from. e.g. LOCATION-docker.pkg.dev/PROJECT_ID/REPOSITORY_NAME/PACKAGE_NAME. */
	// +optional
	SyncRepo *string `json:"syncRepo,omitempty"`

	/* Period in seconds(int64 format) between consecutive syncs. Default: 15. */
	// +optional
	SyncWaitSecs *string `json:"syncWaitSecs,omitempty"`
}

type FeaturemembershipPolicyContent struct {
	/* Configures the installation of the Template Library. */
	// +optional
	TemplateLibrary *FeaturemembershipTemplateLibrary `json:"templateLibrary,omitempty"`
}

type FeaturemembershipPolicyController struct {
	/* Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether. */
	// +optional
	AuditIntervalSeconds *string `json:"auditIntervalSeconds,omitempty"`

	/* Enables the installation of Policy Controller. If false, the rest of PolicyController fields take no effect. */
	// +optional
	Enabled *bool `json:"enabled,omitempty"`

	/* The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster. */
	// +optional
	ExemptableNamespaces []string `json:"exemptableNamespaces,omitempty"`

	/* Logs all denies and dry run failures. */
	// +optional
	LogDeniesEnabled *bool `json:"logDeniesEnabled,omitempty"`

	/* Specifies the backends Policy Controller should export metrics to. For example, to specify metrics should be exported to Cloud Monitoring and Prometheus, specify backends: ["cloudmonitoring", "prometheus"]. Default: ["cloudmonitoring", "prometheus"] */
	// +optional
	Monitoring *FeaturemembershipMonitoring `json:"monitoring,omitempty"`

	/* Enable or disable mutation in policy controller. If true, mutation CRDs, webhook and controller deployment will be deployed to the cluster. */
	// +optional
	MutationEnabled *bool `json:"mutationEnabled,omitempty"`

	/* Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated. */
	// +optional
	ReferentialRulesEnabled *bool `json:"referentialRulesEnabled,omitempty"`

	/* Installs the default template library along with Policy Controller. */
	// +optional
	TemplateLibraryInstalled *bool `json:"templateLibraryInstalled,omitempty"`
}

type FeaturemembershipPolicyControllerHubConfig struct {
	/* Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether. */
	// +optional
	AuditIntervalSeconds *int `json:"auditIntervalSeconds,omitempty"`

	/* The maximum number of audit violations to be stored in a constraint. If not set, the internal default of 20 will be used. */
	// +optional
	ConstraintViolationLimit *int `json:"constraintViolationLimit,omitempty"`

	/* The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster. */
	// +optional
	ExemptableNamespaces []string `json:"exemptableNamespaces,omitempty"`

	/* Configures the mode of the Policy Controller installation. Possible values: INSTALL_SPEC_UNSPECIFIED, INSTALL_SPEC_NOT_INSTALLED, INSTALL_SPEC_ENABLED, INSTALL_SPEC_SUSPENDED, INSTALL_SPEC_DETACHED */
	// +optional
	InstallSpec *string `json:"installSpec,omitempty"`

	/* Logs all denies and dry run failures. */
	// +optional
	LogDeniesEnabled *bool `json:"logDeniesEnabled,omitempty"`

	/* Specifies the backends Policy Controller should export metrics to. For example, to specify metrics should be exported to Cloud Monitoring and Prometheus, specify backends: ["cloudmonitoring", "prometheus"]. Default: ["cloudmonitoring", "prometheus"] */
	// +optional
	Monitoring *FeaturemembershipMonitoring `json:"monitoring,omitempty"`

	/* Enables the ability to mutate resources using Policy Controller. */
	// +optional
	MutationEnabled *bool `json:"mutationEnabled,omitempty"`

	/* Specifies the desired policy content on the cluster. */
	// +optional
	PolicyContent *FeaturemembershipPolicyContent `json:"policyContent,omitempty"`

	/* Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated. */
	// +optional
	ReferentialRulesEnabled *bool `json:"referentialRulesEnabled,omitempty"`
}

type FeaturemembershipPolicycontroller struct {
	/* Policy Controller configuration for the cluster. */
	PolicyControllerHubConfig FeaturemembershipPolicyControllerHubConfig `json:"policyControllerHubConfig"`

	/* Optional. Version of Policy Controller to install. Defaults to the latest version. */
	// +optional
	Version *string `json:"version,omitempty"`
}

type FeaturemembershipTemplateLibrary struct {
	/* Configures the manner in which the template library is installed on the cluster. Possible values: INSTALLATION_UNSPECIFIED, NOT_INSTALLED, ALL */
	// +optional
	Installation *string `json:"installation,omitempty"`
}

type GKEHubFeature struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   GKEHubFeatureSpec   `json:"spec,omitempty"`
	Status GKEHubFeatureStatus `json:"status,omitempty"`
}

type GKEHubFeatureList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []GKEHubFeature `json:"items"`
}

type GKEHubFeatureMembership struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   GKEHubFeatureMembershipSpec   `json:"spec,omitempty"`
	Status GKEHubFeatureMembershipStatus `json:"status,omitempty"`
}

type GKEHubFeatureMembershipList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []GKEHubFeatureMembership `json:"items"`
}

type GKEHubFeatureMembershipSpec struct {
	/* Config Management-specific spec. */
	// +optional
	Configmanagement *FeaturemembershipConfigmanagement `json:"configmanagement,omitempty"`

	/* Immutable. */
	FeatureRef v1alpha1.ResourceRef `json:"featureRef"`

	/* Immutable. The location of the feature */
	Location string `json:"location"`

	/* Immutable. The location of the membership */
	// +optional
	MembershipLocation *string `json:"membershipLocation,omitempty"`

	/* Immutable. */
	MembershipRef v1alpha1.ResourceRef `json:"membershipRef"`

	/* Manage Mesh Features */
	// +optional
	Mesh *FeaturemembershipMesh `json:"mesh,omitempty"`

	/* Policy Controller-specific spec. */
	// +optional
	Policycontroller *FeaturemembershipPolicycontroller `json:"policycontroller,omitempty"`

	/* Immutable. The Project that this resource belongs to. */
	ProjectRef v1alpha1.ResourceRef `json:"projectRef"`
}

type GKEHubFeatureMembershipStatus struct {
	/* Conditions represent the latest available observations of the
	   GKEHubFeatureMembership's current state. */
	Conditions []v1alpha1.Condition `json:"conditions,omitempty"`
	/* ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource. */
	// +optional
	ObservedGeneration *int `json:"observedGeneration,omitempty"`
}

type GKEHubFeatureSpec struct {
	/* Immutable. The location for the resource */
	Location string `json:"location"`

	/* Immutable. The Project that this resource belongs to. */
	ProjectRef v1alpha1.ResourceRef `json:"projectRef"`

	/* Immutable. Optional. The name of the resource. Used for creation and acquisition. When unset, the value of `metadata.name` is used as the default. */
	// +optional
	ResourceID *string `json:"resourceID,omitempty"`

	/* Optional. Hub-wide Feature configuration. If this Feature does not support any Hub-wide configuration, this field may be unused. */
	// +optional
	Spec *FeatureSpec `json:"spec,omitempty"`
}

type GKEHubFeatureStatus struct {
	/* Conditions represent the latest available observations of the
	   GKEHubFeature's current state. */
	Conditions []v1alpha1.Condition `json:"conditions,omitempty"`
	/* Output only. When the Feature resource was created. */
	// +optional
	CreateTime *string `json:"createTime,omitempty"`

	/* Output only. When the Feature resource was deleted. */
	// +optional
	DeleteTime *string `json:"deleteTime,omitempty"`

	/* ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource. */
	// +optional
	ObservedGeneration *int `json:"observedGeneration,omitempty"`

	/* State of the Feature resource itself. */
	// +optional
	ResourceState *FeatureResourceStateStatus `json:"resourceState,omitempty"`

	/* Output only. The Hub-wide Feature state */
	// +optional
	State *FeatureStateStatus `json:"state,omitempty"`

	/* Output only. When the Feature resource was last updated. */
	// +optional
	UpdateTime *string `json:"updateTime,omitempty"`
}

type GKEHubMembership struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   GKEHubMembershipSpec   `json:"spec,omitempty"`
	Status GKEHubMembershipStatus `json:"status,omitempty"`
}

type GKEHubMembershipList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []GKEHubMembership `json:"items"`
}

type GKEHubMembershipSpec struct {
	/* Optional. How to identify workloads from this Membership. See the documentation on Workload Identity for more details: https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity */
	// +optional
	Authority *MembershipAuthority `json:"authority,omitempty"`

	/* Description of this membership, limited to 63 characters. Must match the regex: `*` This field is present for legacy purposes. */
	// +optional
	Description *string `json:"description,omitempty"`

	/* Optional. Endpoint information to reach this member. */
	// +optional
	Endpoint *MembershipEndpoint `json:"endpoint,omitempty"`

	/* Optional. An externally-generated and managed ID for this Membership. This ID may be modified after creation, but this is not recommended. The ID must match the regex: `*` If this Membership represents a Kubernetes cluster, this value should be set to the UID of the `kube-system` namespace object. */
	// +optional
	ExternalId *string `json:"externalId,omitempty"`

	/* Optional. The infrastructure type this Membership is running on. Possible values: INFRASTRUCTURE_TYPE_UNSPECIFIED, ON_PREM, MULTI_CLOUD */
	// +optional
	InfrastructureType *string `json:"infrastructureType,omitempty"`

	/* Immutable. The location for the resource */
	Location string `json:"location"`

	/* Immutable. Optional. The name of the resource. Used for creation and acquisition. When unset, the value of `metadata.name` is used as the default. */
	// +optional
	ResourceID *string `json:"resourceID,omitempty"`
}

type GKEHubMembershipStatus struct {
	/* Conditions represent the latest available observations of the
	   GKEHubMembership's current state. */
	Conditions []v1alpha1.Condition `json:"conditions,omitempty"`
	// +optional
	Authority *MembershipAuthorityStatus `json:"authority,omitempty"`

	/* Output only. When the Membership was created. */
	// +optional
	CreateTime *string `json:"createTime,omitempty"`

	/* Output only. When the Membership was deleted. */
	// +optional
	DeleteTime *string `json:"deleteTime,omitempty"`

	// +optional
	Endpoint *MembershipEndpointStatus `json:"endpoint,omitempty"`

	/* Output only. For clusters using Connect, the timestamp of the most recent connection established with Google Cloud. This time is updated every several minutes, not continuously. For clusters that do not use GKE Connect, or that have never connected successfully, this field will be unset. */
	// +optional
	LastConnectionTime *string `json:"lastConnectionTime,omitempty"`

	/* ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource. */
	// +optional
	ObservedGeneration *int `json:"observedGeneration,omitempty"`

	/* Output only. State of the Membership resource. */
	// +optional
	State *MembershipStateStatus `json:"state,omitempty"`

	/* Output only. Google-generated UUID for this resource. This is unique across all Membership resources. If a Membership resource is deleted and another resource with the same name is created, it gets a different unique_id. */
	// +optional
	UniqueId *string `json:"uniqueId,omitempty"`

	/* Output only. When the Membership was last updated. */
	// +optional
	UpdateTime *string `json:"updateTime,omitempty"`
}

type MembershipAuthority struct {
	/* Optional. A JSON Web Token (JWT) issuer URI. `issuer` must start with `https://` and be a valid URL with length <2000 characters. If set, then Google will allow valid OIDC tokens from this issuer to authenticate within the workload_identity_pool. OIDC discovery will be performed on this URI to validate tokens from the issuer. Clearing `issuer` disables Workload Identity. `issuer` cannot be directly modified; it must be cleared (and Workload Identity disabled) before using a new issuer (and re-enabling Workload Identity). */
	// +optional
	Issuer *string `json:"issuer,omitempty"`
}

type MembershipAuthorityStatus struct {
	/* Output only. An identity provider that reflects the `issuer` in the workload identity pool. */
	// +optional
	IdentityProvider *string `json:"identityProvider,omitempty"`

	/* Output only. The name of the workload identity pool in which `issuer` will be recognized. There is a single Workload Identity Pool per Hub that is shared between all Memberships that belong to that Hub. For a Hub hosted in: {PROJECT_ID}, the workload pool format is `{PROJECT_ID}.hub.id.goog`, although this is subject to change in newer versions of this API. */
	// +optional
	WorkloadIdentityPool *string `json:"workloadIdentityPool,omitempty"`
}

type MembershipConnectResourcesStatus struct {
	/* Whether the resource provided in the manifest is `cluster_scoped`. If unset, the manifest is assumed to be namespace scoped. This field is used for REST mapping when applying the resource in a cluster. */
	// +optional
	ClusterScoped *bool `json:"clusterScoped,omitempty"`

	/* YAML manifest of the resource. */
	// +optional
	Manifest *string `json:"manifest,omitempty"`
}

type MembershipEndpoint struct {
	/* Optional. GKE-specific information. Only present if this Membership is a GKE cluster. */
	// +optional
	GkeCluster *MembershipGkeCluster `json:"gkeCluster,omitempty"`

	/* Optional. The in-cluster Kubernetes Resources that should be applied for a correctly registered cluster, in the steady state. These resources: * Ensure that the cluster is exclusively registered to one and only one Hub Membership. * Propagate Workload Pool Information available in the Membership Authority field. * Ensure proper initial configuration of default Hub Features. */
	// +optional
	KubernetesResource *MembershipKubernetesResource `json:"kubernetesResource,omitempty"`
}

type MembershipEndpointStatus struct {
	/* Output only. Useful Kubernetes-specific metadata. */
	// +optional
	KubernetesMetadata *MembershipKubernetesMetadataStatus `json:"kubernetesMetadata,omitempty"`

	// +optional
	KubernetesResource *MembershipKubernetesResourceStatus `json:"kubernetesResource,omitempty"`
}

type MembershipGkeCluster struct {
	// +optional
	ResourceRef *v1alpha1.ResourceRef `json:"resourceRef,omitempty"`
}

type MembershipKubernetesMetadataStatus struct {
	/* Output only. Kubernetes API server version string as reported by `/version`. */
	// +optional
	KubernetesApiServerVersion *string `json:"kubernetesApiServerVersion,omitempty"`

	/* Output only. The total memory capacity as reported by the sum of all Kubernetes nodes resources, defined in MB. */
	// +optional
	MemoryMb *int `json:"memoryMb,omitempty"`

	/* Output only. Node count as reported by Kubernetes nodes resources. */
	// +optional
	NodeCount *int `json:"nodeCount,omitempty"`

	/* Output only. Node providerID as reported by the first node in the list of nodes on the Kubernetes endpoint. On Kubernetes platforms that support zero-node clusters (like GKE-on-GCP), the node_count will be zero and the node_provider_id will be empty. */
	// +optional
	NodeProviderId *string `json:"nodeProviderId,omitempty"`

	/* Output only. The time at which these details were last updated. This update_time is different from the Membership-level update_time since EndpointDetails are updated internally for API consumers. */
	// +optional
	UpdateTime *string `json:"updateTime,omitempty"`

	/* Output only. vCPU count as reported by Kubernetes nodes resources. */
	// +optional
	VcpuCount *int `json:"vcpuCount,omitempty"`
}

type MembershipKubernetesResource struct {
	/* Input only. The YAML representation of the Membership CR. This field is ignored for GKE clusters where Hub can read the CR directly. Callers should provide the CR that is currently present in the cluster during CreateMembership or UpdateMembership, or leave this field empty if none exists. The CR manifest is used to validate the cluster has not been registered with another Membership. */
	// +optional
	MembershipCrManifest *string `json:"membershipCrManifest,omitempty"`

	/* Optional. Options for Kubernetes resource generation. */
	// +optional
	ResourceOptions *MembershipResourceOptions `json:"resourceOptions,omitempty"`
}

type MembershipKubernetesResourceStatus struct {
	/* Output only. The Kubernetes resources for installing the GKE Connect agent This field is only populated in the Membership returned from a successful long-running operation from CreateMembership or UpdateMembership. It is not populated during normal GetMembership or ListMemberships requests. To get the resource manifest after the initial registration, the caller should make a UpdateMembership call with an empty field mask. */
	// +optional
	ConnectResources []MembershipConnectResourcesStatus `json:"connectResources,omitempty"`

	/* Output only. Additional Kubernetes resources that need to be applied to the cluster after Membership creation, and after every update. This field is only populated in the Membership returned from a successful long-running operation from CreateMembership or UpdateMembership. It is not populated during normal GetMembership or ListMemberships requests. To get the resource manifest after the initial registration, the caller should make a UpdateMembership call with an empty field mask. */
	// +optional
	MembershipResources []MembershipMembershipResourcesStatus `json:"membershipResources,omitempty"`
}

type MembershipMembershipResourcesStatus struct {
	/* Whether the resource provided in the manifest is `cluster_scoped`. If unset, the manifest is assumed to be namespace scoped. This field is used for REST mapping when applying the resource in a cluster. */
	// +optional
	ClusterScoped *bool `json:"clusterScoped,omitempty"`

	/* YAML manifest of the resource. */
	// +optional
	Manifest *string `json:"manifest,omitempty"`
}

type MembershipResourceOptions struct {
	/* Optional. The Connect agent version to use for connect_resources. Defaults to the latest GKE Connect version. The version must be a currently supported version, obsolete versions will be rejected. */
	// +optional
	ConnectVersion *string `json:"connectVersion,omitempty"`

	/* Optional. Use `apiextensions/v1beta1` instead of `apiextensions/v1` for CustomResourceDefinition resources. This option should be set for clusters with Kubernetes apiserver versions <1.16. */
	// +optional
	V1beta1Crd *bool `json:"v1beta1Crd,omitempty"`
}

type MembershipStateStatus struct {
	/* Output only. The current state of the Membership resource. Possible values: CODE_UNSPECIFIED, CREATING, READY, DELETING, UPDATING, SERVICE_UPDATING */
	// +optional
	Code *string `json:"code,omitempty"`
}