From f0a78c77d24ef86ec99490a65ee30d82405db8ec Mon Sep 17 00:00:00 2001
From: Google APIs <noreply@google.com>
Date: Wed, 6 Mar 2024 06:39:31 -0800
Subject: [PATCH] feat: add API to enable/disable secret manager csi component
 on GKE clusters

PiperOrigin-RevId: 613195917
---
 google/container/v1/cluster_service.proto | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/google/container/v1/cluster_service.proto b/google/container/v1/cluster_service.proto
index 6e27ad2e30..bc0c8c582f 100644
--- a/google/container/v1/cluster_service.proto
+++ b/google/container/v1/cluster_service.proto
@@ -2289,6 +2289,9 @@ message ClusterUpdate {
 
   // Specify the details of in-transit encryption.
   optional InTransitEncryptionConfig desired_in_transit_encryption_config = 137;
+
+  // Enable/Disable Cilium Clusterwide Network Policy for the cluster.
+  optional bool desired_enable_cilium_clusterwide_network_policy = 138;
 }
 
 // AdditionalPodRangesConfig is the configuration for additional pod secondary
@@ -4396,6 +4399,9 @@ message NetworkConfig {
 
   // Specify the details of in-transit encryption.
   optional InTransitEncryptionConfig in_transit_encryption_config = 20;
+
+  // Whether CiliumClusterwideNetworkPolicy is enabled on this cluster.
+  optional bool enable_cilium_clusterwide_network_policy = 21;
 }
 
 // GatewayAPIConfig contains the desired config of Gateway API on this cluster.